@sonnechasser/ntrp 1.3.5 → 1.3.6

package/dist/mcp/server.js

@@ -527,6 +527,16 @@ var init_terminal_capture = __esm({
 // src/output/redact-write.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
 import { dirname } from "path";
+function redactExportText(content) {
+  return redactSecrets(content);
+}
+function writeRedactedText(path, content) {
+  mkdirSync2(dirname(path), { recursive: true });
+  writeFileSync2(path, redactExportText(content), "utf-8");
+}
+function isRedactableExportPath(path) {
+  return /\.(md|markdown|txt)$/i.test(path);
+}
 var init_redact_write = __esm({
   "src/output/redact-write.ts"() {
     "use strict";
@@ -537,6 +547,17 @@ var init_redact_write = __esm({
 // src/output/path-safety.ts
 import { homedir as homedir2 } from "os";
 import { resolve as resolve2, sep } from "path";
+function resolveUserPath(path) {
+  if (path === "~" || path.startsWith("~/") || path.startsWith("~\\")) {
+    return resolve2(homedir2(), path.slice(2));
+  }
+  return resolve2(path);
+}
+function isInsideNtrp(path) {
+  const home = ntrpHome();
+  const resolved = resolve2(path);
+  return resolved === home || resolved.startsWith(home + sep);
+}
 var NTRP_HOME;
 var init_path_safety = __esm({
   "src/output/path-safety.ts"() {
@@ -547,6 +568,28 @@ var init_path_safety = __esm({
 });
 
 // src/services/export-kinds.ts
+function latestBasenameForKind(kind) {
+  if (kind.startsWith("prompt:")) {
+    const target = kind.slice("prompt:".length);
+    return target ? `handoff-${target}.md` : "handoff.md";
+  }
+  if (kind === "report") return "report.md";
+  if (kind === "notes") return "notes.md";
+  if (kind === "csv") return "csv";
+  if (kind === "publish") return "publish";
+  return "handoff.md";
+}
+function inboxLatestNameForKind(kind) {
+  if (kind.startsWith("prompt:")) {
+    const target = kind.slice("prompt:".length);
+    return target ? `latest-handoff-${target}.md` : "latest-handoff.md";
+  }
+  if (kind === "report") return "latest-report.md";
+  if (kind === "notes") return "latest-notes.md";
+  if (kind === "csv") return "latest-csv";
+  if (kind === "publish") return "latest-publish";
+  return "latest-handoff.md";
+}
 var init_export_kinds = __esm({
   "src/services/export-kinds.ts"() {
     "use strict";
@@ -646,6 +689,243 @@ import { mkdirSync as mkdirSync3 } from "fs";
 import { basename, join as join2 } from "path";
 import { homedir as homedir3 } from "os";
 import chalk2 from "chalk";
+function defaultAiInboxDir() {
+  return join2(homedir3(), "Documents", "Claude", "ntrp-inbox");
+}
+function handoffLocations() {
+  const archiveRoot = getExportsDir();
+  const archiveLatestDir = join2(archiveRoot, "latest");
+  const inboxDir = getConfiguredAiInboxDir();
+  return {
+    archiveRoot,
+    archiveIndex: join2(archiveRoot, "INDEX.md"),
+    archiveLatestDir,
+    archiveSkill: join2(archiveLatestDir, STANDING_SKILL_NAME),
+    archivePickup: join2(archiveLatestDir, ARCHIVE_PICKUP_NAME),
+    inboxDir,
+    inboxIndex: inboxDir ? join2(inboxDir, "INDEX.md") : null,
+    inboxSkill: inboxDir ? join2(inboxDir, STANDING_SKILL_NAME) : null,
+    inboxPickup: inboxDir ? join2(inboxDir, INBOX_PICKUP_NAME) : null
+  };
+}
+function pickupContextFromEvent(event) {
+  const loc = handoffLocations();
+  const writtenAt = event.at || (/* @__PURE__ */ new Date()).toISOString();
+  const dateUtc = writtenAt.slice(0, 10);
+  const timeUtc = writtenAt.slice(11, 16);
+  const inboxLatest = loc.inboxDir ? join2(loc.inboxDir, inboxLatestNameForKind(event.kind)) : null;
+  const inboxGenericLatest = loc.inboxDir && event.kind.startsWith("prompt:") ? join2(loc.inboxDir, "latest-handoff.md") : inboxLatest;
+  return {
+    ...loc,
+    kind: event.kind,
+    title: event.title,
+    writtenAt,
+    archivePath: event.path,
+    archiveLatest: join2(loc.archiveLatestDir, latestBasenameForKind(event.kind)),
+    inboxLatest,
+    inboxGenericLatest,
+    datedBasename: basename(event.path),
+    dateUtc,
+    timeUtc
+  };
+}
+function kindLabel(kind) {
+  if (kind.startsWith("prompt:")) {
+    const target = kind.slice("prompt:".length);
+    if (target === "deck") return "deck prompt";
+    if (target === "plan") return "action-plan prompt";
+    if (target === "asana") return "Asana project prompt";
+    if (target === "clay") return "Clay table prompt";
+    return target ? `${target} prompt` : "agent prompt";
+  }
+  if (kind === "report") return "markdown report";
+  if (kind === "notes") return "notes export";
+  if (kind === "csv") return "CSV receipts";
+  if (kind === "publish") return "repository export";
+  return kind;
+}
+function jobForKind(kind) {
+  if (kind === "prompt:deck") {
+    return "Open that file and follow its instructions to build an executive review deck. Do not invent numbers.";
+  }
+  if (kind === "prompt:plan") {
+    return "Open that file and follow its instructions to build a prioritized action plan. Do not invent numbers.";
+  }
+  if (kind === "prompt:asana") {
+    return "Open that file and follow its instructions to create the Asana project (sections + tasks). Do not invent numbers.";
+  }
+  if (kind === "prompt:clay") {
+    return "Open that file and follow its instructions to spec the Clay table. Do not invent numbers.";
+  }
+  if (kind.startsWith("prompt:")) {
+    return "Open that file and follow its instructions to build the deliverable. Do not invent numbers.";
+  }
+  if (kind === "report") {
+    return "Open the markdown report. Brief or restyle it as asked; do not invent numbers.";
+  }
+  if (kind === "notes") {
+    return "Open the notes file (Obsidian-style GTM write-up). Use it as source material; do not invent numbers.";
+  }
+  if (kind === "csv") {
+    return "Open the CSV receipts folder (cover-sheet.csv plus per-vital evidence). Use those files as source data; do not invent numbers.";
+  }
+  if (kind === "publish") {
+    return "Open the repository export package folder and work from the files inside.";
+  }
+  return "Open the file and use it as source material. Do not invent numbers.";
+}
+function filenamePattern(ctx) {
+  const base = ctx.datedBasename;
+  const dot = base.lastIndexOf(".");
+  if (dot <= 0) return `${base}*`;
+  const stem = base.slice(0, dot);
+  const ext = base.slice(dot);
+  const datePrefix = stem.includes(ctx.dateUtc) ? `${stem.split(ctx.dateUtc)[0]}${ctx.dateUtc}` : stem.slice(0, 12);
+  return `${datePrefix}*${ext}`;
+}
+function buildStandingSkillMarkdown(loc = handoffLocations()) {
+  const inboxBlock = loc.inboxDir ? `Inbox (preferred \u2014 point Claude Desktop / a project / Cursor at this folder):
+\`${loc.inboxDir}\`
+
+Start with:
+- \`SKILL.md\` \u2014 this file
+- \`latest-pickup.md\` \u2014 the handoff that was just written (date + exact paths)
+- \`latest-handoff.md\` / \`latest-handoff-<target>.md\` \u2014 newest agent prompt
+- \`latest-report.md\`, \`latest-notes.md\`, \`latest-csv\` \u2014 other kinds
+- \`INDEX.md\` \u2014 catalog with timestamps
+- \`archive/\` \u2014 dated copies` : `No AI inbox is configured yet. Canonical archive (always written):
+\`${loc.archiveRoot}\`
+
+Ask the operator to run \`/inbox set <folder>\` in ntrp so copies land in a folder you can see. Until then, use the archive paths below.`;
+  return `---
+name: ntrp-handoff
+description: Find and execute NTRP GTM analysis handoffs (deck, plan, Asana, Clay, report, notes, CSV) from the local inbox or exports archive. Use when the user mentions an NTRP handoff, board deck, action plan, or a file ntrp just wrote.
+---
+
+# Find an NTRP handoff
+
+NTRP writes GTM analysis deliverables to disk. Your job is to open the file and follow it \u2014 do not invent numbers.
+
+## Where to look (this machine)
+
+${inboxBlock}
+
+Canonical archive:
+\`${loc.archiveRoot}\`
+
+- \`latest/SKILL.md\` \u2014 this finder
+- \`latest/pickup.md\` \u2014 the handoff that was just written
+- \`latest/handoff.md\` / \`latest/handoff-<target>.md\` \u2014 newest prompt
+- \`INDEX.md\` \u2014 catalog with timestamps and move history
+- \`handoffs/\`, \`reports/\`, \`notes/\`, \`csv/\`, \`publish/\` \u2014 dated files by kind
+
+## How to pick the file
+
+1. If they just ran a handoff, open \`latest-pickup.md\` (inbox) or \`latest/pickup.md\` (archive). It names the exact file and date.
+2. Otherwise prefer the stable pointer for what they asked for:
+   - deck / slides \u2192 \`latest-handoff-deck.md\` (inbox) or \`latest/handoff-deck.md\` (archive)
+   - action plan \u2192 \`latest-handoff-plan.md\`
+   - Asana \u2192 \`latest-handoff-asana.md\`
+   - Clay \u2192 \`latest-handoff-clay.md\`
+   - any prompt \u2192 \`latest-handoff.md\` / \`latest/handoff.md\`
+   - report / notes / CSV \u2192 \`latest-report.md\`, \`latest-notes.md\`, \`latest-csv\`
+3. If they mention a date, open \`INDEX.md\` and pick the newest row on that UTC date. Dated filenames look like \`handoff-deck-2026-08-13-150123.md\`.
+4. If none of those paths are in your workspace, ask them to attach the file or to \`/inbox set\` a folder you can read.
+
+You are not given a fresh path on every handoff. Prefer the stable \`latest-*\` pointers.
+
+Then execute the instructions in that file.
+`;
+}
+function buildPickupPrompt(ctx) {
+  const lines = [
+    `Find the NTRP GTM handoff written ${ctx.dateUtc} at ${ctx.timeUtc} UTC.`,
+    `Kind: ${kindLabel(ctx.kind)}${ctx.title ? ` (${ctx.title})` : ""}.`,
+    "",
+    jobForKind(ctx.kind),
+    "",
+    "Look in this order (this machine):",
+    ""
+  ];
+  let n = 1;
+  if (ctx.inboxLatest) {
+    lines.push(`${n}. Inbox pointer: ${ctx.inboxLatest}`);
+    n++;
+  }
+  if (ctx.inboxGenericLatest && ctx.inboxGenericLatest !== ctx.inboxLatest) {
+    lines.push(`${n}. Inbox generic: ${ctx.inboxGenericLatest}`);
+    n++;
+  }
+  lines.push(`${n}. Archive pointer: ${ctx.archiveLatest}`);
+  n++;
+  lines.push(`${n}. Dated file: ${ctx.archivePath}`);
+  lines.push(
+    "",
+    "If those paths are not in your workspace:",
+    `- Open INDEX.md in ${ctx.inboxDir ?? ctx.archiveRoot}`,
+    `- Pick the newest row dated ${ctx.dateUtc} matching ${ctx.kind}`,
+    `- Or search for ${filenamePattern(ctx)}`,
+    "",
+    "Standing finder skill (same folders, install once):",
+    `- ${ctx.inboxSkill ?? ctx.archiveSkill}`
+  );
+  if (ctx.inboxSkill) {
+    lines.push(`- ${ctx.archiveSkill}`);
+  } else {
+    lines.push("- No AI inbox yet \u2014 in ntrp run `/inbox set <folder>` so copies land where your agent can see them.");
+  }
+  return lines.join("\n") + "\n";
+}
+function persistStandingSkill(loc = handoffLocations()) {
+  mkdirSync3(loc.archiveLatestDir, { recursive: true });
+  const md = buildStandingSkillMarkdown(loc);
+  writeRedactedText(loc.archiveSkill, md);
+  if (loc.inboxDir && loc.inboxSkill) {
+    mkdirSync3(loc.inboxDir, { recursive: true });
+    writeRedactedText(loc.inboxSkill, md);
+  }
+}
+function persistHandoffSkillFiles(event) {
+  const ctx = pickupContextFromEvent(event);
+  persistStandingSkill(ctx);
+  writeRedactedText(ctx.archivePickup, buildPickupPrompt(ctx));
+  if (ctx.inboxDir && ctx.inboxPickup) {
+    mkdirSync3(ctx.inboxDir, { recursive: true });
+    writeRedactedText(ctx.inboxPickup, buildPickupPrompt(ctx));
+  }
+}
+function printPlainBlock(text) {
+  const rule = "  " + chalk2.dim("\u2500".repeat(60));
+  console.log(rule);
+  for (const line of text.replace(/\n$/, "").split("\n")) {
+    console.log(line.length > 0 ? `  ${line}` : "  ");
+  }
+  console.log(rule);
+}
+function maybePrintAiInboxNudge() {
+  if (getConfiguredAiInboxDir()) return;
+  if (getConfigValue("ai-inbox-nudge-seen") === "true") return;
+  setConfigValue("ai-inbox-nudge-seen", "true");
+  console.log(
+    "  " + chalk2.dim("Set a pickup folder. Type /inbox set ~/Documents/Claude/ntrp-inbox then /inbox skill")
+  );
+}
+function printStandingSkill() {
+  persistStandingSkill();
+  const loc = handoffLocations();
+  console.log();
+  console.log("  " + bold("NTRP handoff finder skill"));
+  console.log(
+    "  " + chalk2.dim("Paste this skill once into Claude, ChatGPT, or Cursor. Later handoffs do not print it again.")
+  );
+  printPlainBlock(buildStandingSkillMarkdown(loc));
+  console.log("  " + chalk2.dim("Written: ") + (loc.inboxSkill ?? loc.archiveSkill));
+  if (!loc.inboxDir) {
+    maybePrintAiInboxNudge();
+  }
+  console.log();
+}
+var STANDING_SKILL_NAME, ARCHIVE_PICKUP_NAME, INBOX_PICKUP_NAME;
 var init_handoff_skill = __esm({
   "src/services/handoff-skill.ts"() {
     "use strict";
@@ -653,6 +933,9 @@ var init_handoff_skill = __esm({
     init_store();
     init_theme();
     init_export_kinds();
+    STANDING_SKILL_NAME = "SKILL.md";
+    ARCHIVE_PICKUP_NAME = "pickup.md";
+    INBOX_PICKUP_NAME = "latest-pickup.md";
   }
 });
 
@@ -693,10 +976,262 @@ function ensureExportsLayout(root = getExportsDir()) {
 function getAiInboxDir() {
   return getConfiguredAiInboxDir();
 }
+function setAiInboxDir(path) {
+  const resolved = resolveUserPath(path);
+  mkdirSync4(resolved, { recursive: true });
+  setConfigValue("ai-inbox-dir", resolved);
+  ensureInboxLayout(resolved);
+  persistStandingSkill();
+  setConfigValue("ai-inbox-nudge-seen", "true");
+  return resolved;
+}
+function ensureInboxLayout(inbox) {
+  mkdirSync4(inbox, { recursive: true });
+  mkdirSync4(join3(inbox, "archive"), { recursive: true });
+  const readme = join3(inbox, "README.md");
+  writeFileSync3(readme, buildInboxReadme(), "utf-8");
+  if (!existsSync2(join3(inbox, "INDEX.md"))) {
+    writeFileSync3(join3(inbox, "INDEX.md"), "# NTRP AI inbox\n\n_No exports synced yet._\n", "utf-8");
+  }
+}
+function manifestPath(root = getExportsDir()) {
+  return join3(root, "manifest.jsonl");
+}
+function readManifestEvents(root = getExportsDir()) {
+  const path = manifestPath(root);
+  if (!existsSync2(path)) return [];
+  const text = readFileSync2(path, "utf-8");
+  const events = [];
+  for (const line of text.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    try {
+      events.push(JSON.parse(trimmed));
+    } catch {
+    }
+  }
+  return events;
+}
+function appendManifestEvent(event, root = getExportsDir()) {
+  ensureExportsLayout(root);
+  appendFileSync(manifestPath(root), JSON.stringify(event) + "\n", "utf-8");
+}
+function listExports(opts = {}) {
+  const limit = opts.limit ?? 20;
+  const events = readManifestEvents();
+  const byId2 = /* @__PURE__ */ new Map();
+  for (const e of events) {
+    if (e.op === "inbox_sync") continue;
+    byId2.set(e.id, e);
+  }
+  let items = [...byId2.values()].sort((a, b) => a.at < b.at ? 1 : a.at > b.at ? -1 : 0);
+  if (opts.kind) {
+    const k = opts.kind.toLowerCase();
+    items = items.filter((e) => e.kind === opts.kind || e.kind.startsWith(k) || e.kind.includes(k));
+  }
+  return items.slice(0, limit);
+}
+function copyPath(src, dest) {
+  mkdirSync4(dirname2(dest), { recursive: true });
+  if (existsSync2(dest)) {
+    rmSync(dest, { recursive: true, force: true });
+  }
+  const st = statSync(src);
+  if (st.isDirectory()) {
+    cpSync(src, dest, { recursive: true });
+  } else if (isRedactableExportPath(src)) {
+    const text = readFileSync2(src, "utf-8");
+    writeFileSync3(dest, redactExportText(text), "utf-8");
+  } else {
+    copyFileSync(src, dest);
+  }
+}
+function regenerateIndex(root = getExportsDir()) {
+  ensureExportsLayout(root);
+  const items = listExports({ limit: 50 });
+  const events = readManifestEvents(root);
+  const withHistory = items.filter((e) => (e.previous_paths?.length ?? 0) > 0);
+  const latestDir = join3(root, "latest");
+  const latestLines = [];
+  if (existsSync2(latestDir)) {
+    for (const name of readdirSync(latestDir).sort()) {
+      latestLines.push(`- \`latest/${name}\` \u2192 \`${join3(latestDir, name)}\``);
+    }
+  }
+  const lines = [
+    "# NTRP exports",
+    "",
+    `Archive root: \`${root}\``,
+    "",
+    "Set an inbox with `/onboard` or `/inbox set`. Paste `SKILL.md` once into Claude. Later handoffs overwrite `latest-handoff.md`.",
+    "",
+    "## Latest pointers",
+    ""
+  ];
+  if (latestLines.length > 0) lines.push(...latestLines);
+  else lines.push("_None yet._");
+  lines.push("", "## Recent exports", "");
+  if (items.length === 0) {
+    lines.push("_No exports yet._");
+  } else {
+    for (const e of items) {
+      const title = e.title ? ` \u2014 ${e.title}` : "";
+      const session = e.session_id ? ` \xB7 session ${e.session_id.slice(-4)}` : "";
+      lines.push(`- **${e.kind}** (${e.at})${title}${session}`);
+      lines.push(`  - id: \`${e.id}\``);
+      lines.push(`  - path: \`${e.path}\``);
+      if (e.inbox_path) lines.push(`  - inbox: \`${e.inbox_path}\``);
+    }
+  }
+  lines.push("", "## Location history", "");
+  if (withHistory.length === 0) {
+    lines.push("_No moves recorded._");
+  } else {
+    for (const e of withHistory) {
+      lines.push(`- **${e.kind}** \`${e.id}\``);
+      for (const prev of e.previous_paths ?? []) {
+        lines.push(`  - was: \`${prev}\``);
+      }
+      lines.push(`  - now: \`${e.path}\``);
+    }
+  }
+  const moveOps = events.filter((e) => e.op === "move").slice(-20).reverse();
+  if (moveOps.length > 0) {
+    lines.push("", "## Recent moves", "");
+    for (const e of moveOps) {
+      const from = e.previous_paths?.[e.previous_paths.length - 1] ?? "?";
+      lines.push(`- ${e.at}: \`${from}\` \u2192 \`${e.path}\` (${e.kind}, \`${e.id}\`)`);
+    }
+  }
+  lines.push("");
+  writeFileSync3(join3(root, "INDEX.md"), lines.join("\n"), "utf-8");
+}
+function regenerateInboxIndex(inbox) {
+  ensureInboxLayout(inbox);
+  const items = listExports({ limit: 15 });
+  const archiveRoot = getExportsDir();
+  const lines = [
+    "# NTRP AI inbox",
+    "",
+    "Start here. Install `SKILL.md` once in Claude. Newest prompt: `latest-handoff.md`. Catalog: `INDEX.md`.",
+    "",
+    `Canonical archive: \`${archiveRoot}\` (see \`${join3(archiveRoot, "INDEX.md")}\`).`,
+    "",
+    "## Latest pointers",
+    ""
+  ];
+  if (existsSync2(join3(inbox, "SKILL.md"))) {
+    lines.push("- [`SKILL.md`](./SKILL.md) \u2014 standing finder. Paste once into your agent.");
+  }
+  const latestNames = readdirSync(inbox).filter((n) => n.startsWith("latest-")).sort();
+  if (latestNames.length === 0 && !existsSync2(join3(inbox, "SKILL.md"))) {
+    lines.push("_None yet. Run a handoff after `/inbox set`._");
+  } else {
+    for (const name of latestNames) {
+      const note = name === "latest-pickup.md" ? " \u2014 names the file that was just written" : "";
+      lines.push(`- [\`${name}\`](./${name})${note}`);
+    }
+  }
+  lines.push("", "## Recent exports", "");
+  if (items.length === 0) lines.push("_No exports yet._");
+  else {
+    for (const e of items) {
+      lines.push(`- **${e.kind}** (${e.at}): \`${e.path}\``);
+      if (e.inbox_path) lines.push(`  - inbox copy: \`${e.inbox_path}\``);
+    }
+  }
+  lines.push("");
+  writeFileSync3(join3(inbox, "INDEX.md"), lines.join("\n"), "utf-8");
+  writeFileSync3(join3(inbox, "README.md"), buildInboxReadme(), "utf-8");
+}
+function buildInboxReadme() {
+  const archive = getExportsDir();
+  return `# NTRP AI inbox
+
+This folder is the landing folder for NTRP handoffs. Desktop AI tools read files here.
+
+## Start here
+
+1. Install \`SKILL.md\` once in Claude, ChatGPT, or Cursor. Then tell the agent to open the latest NTRP handoff.
+2. The newest prompt is \`latest-handoff.md\` (or \`latest-handoff-deck.md\` and similar).
+3. \`latest-pickup.md\` names the file that was just written.
+
+Each export overwrites the \`latest-*\` files. Dated copies are in \`archive/\`.
+
+## Canonical archive
+
+The full history with the move trail is at:
+
+\`${archive}\`
+
+See \`${join3(archive, "INDEX.md")}\` and \`${join3(archive, "manifest.jsonl")}\`.
+
+Set the folder with \`/inbox set <path>\`. Print the skill with \`/inbox skill\`. Clear with \`/inbox clear\`. List files with \`/exports\`.
+`;
+}
+function pruneInboxArchive(archiveDir, keep = INBOX_ARCHIVE_KEEP) {
+  if (!existsSync2(archiveDir)) return;
+  const entries2 = readdirSync(archiveDir).map((name) => {
+    const p = join3(archiveDir, name);
+    try {
+      return { name, path: p, mtime: statSync(p).mtimeMs };
+    } catch {
+      return null;
+    }
+  }).filter((e) => e != null).sort((a, b) => b.mtime - a.mtime);
+  for (const old of entries2.slice(keep)) {
+    rmSync(old.path, { recursive: true, force: true });
+  }
+}
+function syncAiInbox(entry) {
+  const inbox = getAiInboxDir();
+  if (!inbox) return null;
+  if (!existsSync2(entry.path)) return null;
+  ensureInboxLayout(inbox);
+  const archiveDir = join3(inbox, "archive");
+  mkdirSync4(archiveDir, { recursive: true });
+  const base = basename2(entry.path);
+  const archiveDest = join3(archiveDir, base);
+  copyPath(entry.path, archiveDest);
+  pruneInboxArchive(archiveDir);
+  const latestName = inboxLatestNameForKind(entry.kind);
+  const latestDest = join3(inbox, latestName);
+  copyPath(entry.path, latestDest);
+  if (entry.kind.startsWith("prompt:")) {
+    copyPath(entry.path, join3(inbox, "latest-handoff.md"));
+  }
+  regenerateInboxIndex(inbox);
+  return latestDest;
+}
+function syncRecentToInbox(limit = 10) {
+  const inbox = getAiInboxDir();
+  if (!inbox) return 0;
+  ensureInboxLayout(inbox);
+  const items = listExports({ limit });
+  let n = 0;
+  for (const item of items) {
+    if (!existsSync2(item.path)) continue;
+    const inboxPath = syncAiInbox(item);
+    if (inboxPath) {
+      appendManifestEvent({
+        ...item,
+        op: "inbox_sync",
+        at: (/* @__PURE__ */ new Date()).toISOString(),
+        inbox_path: inboxPath
+      });
+      n++;
+    }
+  }
+  regenerateInboxIndex(inbox);
+  regenerateIndex();
+  const newest = items.find((e) => existsSync2(e.path));
+  if (newest) persistHandoffSkillFiles(newest);
+  return n;
+}
 function archiveIndexPath() {
   return join3(ensureExportsLayout(), "INDEX.md");
 }
-var KIND_DIRS, ARCHIVE_README;
+var KIND_DIRS, INBOX_ARCHIVE_KEEP, ARCHIVE_README;
 var init_exports_registry = __esm({
   "src/services/exports-registry.ts"() {
     "use strict";
@@ -707,6 +1242,7 @@ var init_exports_registry = __esm({
     init_handoff_skill();
     init_export_kinds();
     KIND_DIRS = ["handoffs", "reports", "notes", "csv", "publish"];
+    INBOX_ARCHIVE_KEEP = 20;
     ARCHIVE_README = `# NTRP exports archive
 
 This archive stores handoffs, reports, notes, CSV receipts, and publish packages by kind:
@@ -7999,7 +8535,6 @@ function resetContextForSwitch(ctx, opts) {
   ctx.deliverIntent = false;
   ctx.computeInProgress = false;
   ctx.wizardDepth = 0;
-  ctx.welcomeLogoShown = false;
   ctx.snapshot = { computeResult: null, divergences: [] };
   rebindSessionTranscript(ctx);
 }
@@ -9289,8 +9824,8 @@ handler: ../commands/handoff.ts
 Write the analysis as an output. Choose a markdown report, notes, CSV receipts, or a repository package.
 Or write a prompt. Another agent can turn that prompt into a review deck, Asana project, Clay table, or action plan.
 Files go to \`export-dir\`. If set, files also go to the inbox.
-Type \`/inbox set\` to set the inbox. \`/onboard\` also offers this step.
-Type \`/inbox skill\` once. Or paste the skill during onboard.
+Type \`/inbox set\` to set the inbox. Demo setup offers this once. The first time you load your own data, NTRP asks again if the folder is not set. Skip then, and NTRP will not ask again \u2014 type \`/inbox set\` later.
+Type \`/inbox skill\` once. Or paste the skill during demo or that first production step.
 Later \`/handoff\` writes to \`latest-handoff.md\` with no new paste.
 Type \`/handoff prompt <target> --print\` to include the file body.
 An output marks the session as delivered.`
@@ -9323,7 +9858,7 @@ Set a folder that Claude Desktop or any desktop AI can read.
 NTRP copies each handoff to that folder.
 NTRP overwrites \`latest-handoff.md\` and \`latest-handoff-deck.md\`. The app then finds the newest file.
 NTRP also writes \`SKILL.md\`. That file holds finder instructions with your paths.
-\`/onboard\` offers this step once. Type \`/inbox skill\` or \`/handoff skill\` to print it again.
+Demo setup offers this once. Loading your own data (CSV ingest or \`/onboard\`) asks again if the folder is not set. Skip on that production step and NTRP will not ask again. Type \`/inbox skill\` or \`/handoff skill\` to print the finder. Type \`/inbox set\` at any time.
 Paste that skill once into Claude, ChatGPT, or Cursor. Later handoffs need no new paste.
 \`INDEX.md\` in that folder links to the archive.
 A path outside ~/.ntrp needs a confirm. Handoffs carry analysis text.
@@ -9341,7 +9876,7 @@ handler: ../commands/onboard.ts
 Start the first-run wizard. It builds a company profile.
 Connect one or two keys (Anthropic, OpenAI, or another provider).
 Then answer a few seed questions. AI drafts industry, ICP, deal size, and stack guesses.
-Optional last step: pick a folder for desktop-AI handoffs. Paste a finder skill into Claude, ChatGPT, or Cursor once.
+Optional last step: pick a folder for desktop-AI handoffs if it is not already set. Skip, and type \`/inbox set\` later \u2014 NTRP will not ask again.
 The profile is stored at \`~/.ntrp/profile.json\`. It flows into findings, NL answers, and demo data.`
       },
       {
@@ -9922,7 +10457,7 @@ args: <license>
 handler: ../commands/activate.ts
 ---
 
-Activate NTRP with your license key (format: NTRP-XXXX-XXXX-XXXX). Most commands need a valid license.`
+Activate NTRP with the key from your purchase email. Most commands need a valid license.`
       },
       {
         name: "upgrade",
@@ -22157,12 +22692,126 @@ var init_revenue_importer = __esm({
   }
 });
 
+// src/conversation/inbox-setup.ts
+var inbox_setup_exports = {};
+__export(inbox_setup_exports, {
+  maybeOfferInboxOnProduction: () => maybeOfferInboxOnProduction,
+  offerInboxSkillSetup: () => offerInboxSkillSetup,
+  shouldOfferInboxSkillSetup: () => shouldOfferInboxSkillSetup
+});
+import chalk22 from "chalk";
+function markDemoOffered() {
+  setConfigValue("ai-inbox-nudge-seen", "true");
+}
+function markProductionOffered() {
+  setConfigValue(PRODUCTION_OFFERED_KEY, "true");
+  setConfigValue("ai-inbox-nudge-seen", "true");
+}
+function hasProductionOffered() {
+  return getConfigValue(PRODUCTION_OFFERED_KEY) === "true";
+}
+function shouldOfferInboxSkillSetup(beat) {
+  if (getAiInboxDir()) return false;
+  if (beat === "demo") return getConfigValue("ai-inbox-nudge-seen") !== "true";
+  return !hasProductionOffered();
+}
+function printSkipHint(beat) {
+  const setCmd = paint("accent", "/inbox set ~/Documents/Claude/ntrp-inbox");
+  const skillCmd = paint("accent", "/inbox skill");
+  if (beat === "demo") {
+    console.log(
+      "  " + chalk22.dim("Skipped. NTRP will ask once when you load your own data. Or type ") + setCmd + chalk22.dim(" then ") + skillCmd
+    );
+    return;
+  }
+  console.log(
+    "  " + chalk22.dim("Skipped. NTRP will not ask again. Type ") + setCmd + chalk22.dim(" then ") + skillCmd + chalk22.dim(" at any time.")
+  );
+}
+async function offerInboxSkillSetup(session, opts = {}) {
+  const beat = opts.beat ?? "production";
+  if (!shouldOfferInboxSkillSetup(beat)) return;
+  console.log();
+  console.log("  " + bold("Set the handoff inbox"));
+  console.log(
+    "  " + chalk22.dim(
+      "Optional. NTRP copies each handoff into one folder. Paste the skill once. Later /handoff only writes the file."
+    )
+  );
+  if (beat === "production" && getConfigValue("ai-inbox-nudge-seen") === "true") {
+    console.log("  " + chalk22.dim("You skipped this during demo."));
+  }
+  console.log();
+  const want = await session.confirm("Set a pickup folder for Claude, ChatGPT, or Cursor?", true);
+  if (!want) {
+    if (beat === "demo") markDemoOffered();
+    else markProductionOffered();
+    printSkipHint(beat);
+    return;
+  }
+  const raw = await session.ask("Folder", { default: defaultAiInboxDir() });
+  const folder = raw.trim() || defaultAiInboxDir();
+  const resolvedPreview = resolveUserPath(folder);
+  if (!isInsideNtrp(resolvedPreview)) {
+    const ok = await session.confirm(
+      `Inbox is outside ~/.ntrp (${resolvedPreview}). Handoffs with analysis text will be written here. Continue?`,
+      true
+    );
+    if (!ok) {
+      if (beat === "demo") markDemoOffered();
+      else markProductionOffered();
+      printSkipHint(beat);
+      return;
+    }
+  }
+  const resolved = setAiInboxDir(folder);
+  const n = syncRecentToInbox(10);
+  markDemoOffered();
+  if (beat === "production") markProductionOffered();
+  console.log();
+  console.log("  " + paint("accent", "Inbox ready") + chalk22.dim("  ") + resolved);
+  if (n > 0) {
+    console.log("  " + chalk22.dim(`Synced ${n} recent export${n === 1 ? "" : "s"}.`));
+  }
+  console.log(
+    "  " + chalk22.dim("Paste this skill into Claude once. Later, tell Claude to open the latest NTRP handoff.")
+  );
+  printStandingSkill();
+  await session.askPressEnter("Paste the skill into Claude. Then continue");
+  console.log("  " + chalk22.dim("Done. Later handoffs write to that folder. The skill is not printed again."));
+  console.log();
+}
+async function maybeOfferInboxOnProduction(ctx) {
+  if (!shouldOfferInboxSkillSetup("production")) return;
+  if (ctx.execution.mode === "headless" || ctx.execution.strictStdout) return;
+  if (!ctx.rl && !process.stdin.isTTY) return;
+  const session = createPromptSession(ctx.rl, ctx);
+  try {
+    await offerInboxSkillSetup(session, { beat: "production" });
+  } finally {
+    session.close();
+  }
+}
+var PRODUCTION_OFFERED_KEY;
+var init_inbox_setup = __esm({
+  "src/conversation/inbox-setup.ts"() {
+    "use strict";
+    init_prompts();
+    init_store();
+    init_theme();
+    init_exports_registry();
+    init_handoff_skill();
+    init_path_safety();
+    PRODUCTION_OFFERED_KEY = "ai-inbox-production-offered";
+  }
+});
+
 // src/commands/ingest.ts
 var ingest_exports = {};
 __export(ingest_exports, {
   handler: () => handler3
 });
-import chalk22 from "chalk";
+import chalk23 from "chalk";
 import { readFileSync as readFileSync20, existsSync as existsSync22 } from "fs";
 import { basename as basename6 } from "path";
 async function handler3(args, ctx) {
@@ -22183,21 +22832,21 @@ async function handler3(args, ctx) {
   const source = getString(flags, "source", "s") ?? "salesforce";
   const skipResolve = getBool(flags, "skip-resolve");
   if (!file) {
-    console.error(chalk22.red("  Usage: /ingest <file> [--source salesforce|hubspot|outreach]"));
-    console.error(chalk22.dim("         /ingest --demo [--scenario <name>]"));
+    console.error(chalk23.red("  Usage: /ingest <file> [--source salesforce|hubspot|outreach]"));
+    console.error(chalk23.dim("         /ingest --demo [--scenario <name>]"));
     process.exit(1);
   }
   if (!existsSync22(file)) {
-    console.error(chalk22.red(`  File not found: ${file}`));
+    console.error(chalk23.red(`  File not found: ${file}`));
     process.exit(1);
   }
   const profile = loadProfile();
   const skipProfile = getFalse(flags, "profile");
   if (!profile && !skipProfile) {
     console.error();
-    console.error("  " + chalk22.red("No company profile found."));
-    console.error("  " + chalk22.dim("Run ") + paint("accent", "/onboard") + chalk22.dim(" first for better column mapping,"));
-    console.error("  " + chalk22.dim("or pass ") + paint("accent", "--no-profile") + chalk22.dim(" to skip."));
+    console.error("  " + chalk23.red("No company profile found."));
+    console.error("  " + chalk23.dim("Run ") + paint("accent", "/onboard") + chalk23.dim(" first for better column mapping,"));
+    console.error("  " + chalk23.dim("or pass ") + paint("accent", "--no-profile") + chalk23.dim(" to skip."));
     console.error();
     process.exit(1);
   }
@@ -22229,22 +22878,24 @@ async function handler3(args, ctx) {
         row_count: result2.imported
       });
       spinner.succeed(
-        `Imported ${chalk22.bold(result2.imported.toString())} revenue events from ${chalk22.dim(basename6(file))}`
+        `Imported ${chalk23.bold(result2.imported.toString())} revenue events from ${chalk23.dim(basename6(file))}`
       );
       if (result2.errors.length > 0) {
-        console.log(chalk22.yellow(`  ${result2.errors.length} rows skipped`));
+        console.log(chalk23.yellow(`  ${result2.errors.length} rows skipped`));
       }
       if (ctx.analysis) {
         ctx.analysis.data_source_type = "revenue_ledger";
       }
-      console.log(chalk22.dim("  Run ") + chalk22.cyan("/metrics") + chalk22.dim(" for SaaS metrics with ledger-backed retention."));
+      console.log(chalk23.dim("  Run ") + chalk23.cyan("/metrics") + chalk23.dim(" for SaaS metrics with ledger-backed retention."));
+      const { maybeOfferInboxOnProduction: maybeOfferInboxOnProduction3 } = await Promise.resolve().then(() => (init_inbox_setup(), inbox_setup_exports));
+      await maybeOfferInboxOnProduction3(ctx);
       return `${result2.imported} revenue events from ${basename6(file)}`;
     }
     spinner.text = "Detecting entity type\u2026";
     const detection = detectEntityType(headers, source);
     if (!detection) {
       spinner.fail(`Could not auto-detect entity type for source: ${source}`);
-      console.log(chalk22.dim("  Headers found: " + headers.join(", ")));
+      console.log(chalk23.dim("  Headers found: " + headers.join(", ")));
       process.exit(1);
     }
     spinner.text = `Importing ${rows.length} ${detection.entityType} rows...`;
@@ -22267,15 +22918,15 @@ async function handler3(args, ctx) {
       row_count: result.imported
     });
     spinner.succeed(
-      `Imported ${chalk22.bold(result.imported.toString())} ${detection.entityType} from ${chalk22.dim(basename6(file))} (${source})`
+      `Imported ${chalk23.bold(result.imported.toString())} ${detection.entityType} from ${chalk23.dim(basename6(file))} (${source})`
     );
     if (result.errors.length > 0) {
-      console.log(chalk22.yellow(`  ${result.errors.length} rows skipped`));
+      console.log(chalk23.yellow(`  ${result.errors.length} rows skipped`));
       for (const err of result.errors.slice(0, 3)) {
-        console.log(chalk22.dim(`    - ${err}`));
+        console.log(chalk23.dim(`    - ${err}`));
       }
       if (result.errors.length > 3) {
-        console.log(chalk22.dim(`    ... and ${result.errors.length - 3} more`));
+        console.log(chalk23.dim(`    ... and ${result.errors.length - 3} more`));
       }
     }
     if (!skipResolve) {
@@ -22289,10 +22940,12 @@ async function handler3(args, ctx) {
         resolveSpinner.succeed("No duplicates found");
       }
     }
+    const { maybeOfferInboxOnProduction: maybeOfferInboxOnProduction2 } = await Promise.resolve().then(() => (init_inbox_setup(), inbox_setup_exports));
+    await maybeOfferInboxOnProduction2(ctx);
     return `${result.imported} ${detection.entityType} from ${basename6(file)}`;
   } catch (err) {
     spinner.fail("Import failed");
-    console.error(chalk22.red(String(err)));
+    console.error(chalk23.red(String(err)));
     process.exit(1);
   }
 }
@@ -22404,13 +23057,13 @@ __export(demo_fit_exports, {
   resolveDemoScenarioForLoad: () => resolveDemoScenarioForLoad,
   runDemoFitQuiz: () => runDemoFitQuiz
 });
-import chalk23 from "chalk";
+import chalk24 from "chalk";
 async function runDemoFitQuiz(session, opts = {}) {
   if (opts.intro !== false) {
     console.log();
     console.log("  " + bold("Fit a sample book of business"));
     console.log(
-      "  " + chalk23.dim(
+      "  " + chalk24.dim(
         "No API key is required. Answer two questions about how you sell. Then pick the closest of seven sample pipelines."
       )
     );
@@ -22428,8 +23081,8 @@ async function runDemoFitQuiz(session, opts = {}) {
   );
   const recommended = inferDemoScenario({ salesMotion: motion, dealBand });
   console.log();
-  console.log("  " + chalk23.dim("Recommended: ") + paint("accent", getScenario(recommended.scenario).label));
-  console.log("  " + chalk23.dim(recommended.reason));
+  console.log("  " + chalk24.dim("Recommended: ") + paint("accent", getScenario(recommended.scenario).label));
+  console.log("  " + chalk24.dim(recommended.reason));
   const scenario = await session.choose(
     "Which of these sample books feels closest to the one you manage?",
     scenarioMenuChoices(),
@@ -22449,8 +23102,8 @@ async function offerFittedDemoAfterOnboard(session, ctx, profile) {
   const s = getScenario(fit.scenario);
   console.log();
   console.log("  " + bold("A sample pipeline that looks like you"));
-  console.log("  " + paint("accent", s.label) + chalk23.dim(" \u2014 " + s.hook));
-  console.log("  " + chalk23.dim(fit.reason));
+  console.log("  " + paint("accent", s.label) + chalk24.dim(" \u2014 " + s.hook));
+  console.log("  " + chalk24.dim(fit.reason));
   console.log();
   const action = await session.choose(
     "Try NTRP on that book of business?",
@@ -22507,8 +23160,8 @@ async function resolveDemoScenarioForLoad(ctx, opts = {}) {
     if (!opts.forceQuiz && isProfileConfigured(profile) && profile) {
       const fit = await resolveProfileFit(profile, ctx);
       console.log();
-      console.log("  " + chalk23.dim("Recommended: ") + paint("accent", getScenario(fit.scenario).label));
-      console.log("  " + chalk23.dim(fit.reason));
+      console.log("  " + chalk24.dim("Recommended: ") + paint("accent", getScenario(fit.scenario).label));
+      console.log("  " + chalk24.dim(fit.reason));
       const scenario = await session.choose(
         "Which sample book of business?",
         scenarioMenuChoices(),
@@ -22572,7 +23225,7 @@ __export(ingest_chat_exports, {
 import { existsSync as existsSync23 } from "fs";
 import { basename as basename7, resolve as resolve9 } from "path";
 import { homedir as homedir8 } from "os";
-import chalk24 from "chalk";
+import chalk25 from "chalk";
 function extractFilePath(input) {
   const trimmed = input.trim();
   const patterns = [
@@ -22607,7 +23260,7 @@ function looksLikeFilePath(input) {
 }
 async function ingestFromChat(ctx, filePath) {
   if (!ctx.rl) {
-    console.log("  " + chalk24.red("Ingest confirm requires interactive mode."));
+    console.log("  " + chalk25.red("Ingest confirm requires interactive mode."));
     return false;
   }
   const name = basename7(filePath);
@@ -22615,7 +23268,7 @@ async function ingestFromChat(ctx, filePath) {
   try {
     const ok = await prompts.confirm(`Ingest ${name} as CRM export?`, true);
     if (!ok) {
-      console.log("  " + chalk24.dim("Ingest cancelled."));
+      console.log("  " + chalk25.dim("Ingest cancelled."));
       return false;
     }
   } finally {
@@ -22643,7 +23296,7 @@ async function ingestFromChat(ctx, filePath) {
         true
       );
       if (useAi) {
-        console.log("  " + chalk24.dim("AI column mapping is not wired to ingest yet \u2014 trying standard ingest."));
+        console.log("  " + chalk25.dim("AI column mapping is not wired to ingest yet \u2014 trying standard ingest."));
       }
     } finally {
       prompts2.close();
@@ -22670,7 +23323,7 @@ async function ingestFromChat(ctx, filePath) {
   invalidateGapAudit(ctx);
   saveSessionState(ctx);
   console.log();
-  console.log("  " + paint("accent", "\u2713 Data loaded") + chalk24.dim(` \u2014 ${name}`));
+  console.log("  " + paint("accent", "\u2713 Data loaded") + chalk25.dim(` \u2014 ${name}`));
   recordMessage(ctx, "user", `[ingested ${name}]`);
   recordMessage(ctx, "agent", `Loaded ${name}. Checking what we can analyze\u2026`);
   const audit = await refreshGapAudit(ctx);
@@ -22678,7 +23331,7 @@ async function ingestFromChat(ctx, filePath) {
   if (audit.can_compute && ctx.scope?.confirmed_at) {
     if (ctx.pendingAsk) {
       console.log();
-      console.log("  " + chalk24.dim("Computing so I can answer\u2026"));
+      console.log("  " + chalk25.dim("Computing so I can answer\u2026"));
       await runConversationCompute(ctx);
       return true;
     }
@@ -22711,11 +23364,22 @@ async function loadDemoFromChat(ctx, scenario, opts = {}) {
     const { resolveDemoScenarioForLoad: resolveDemoScenarioForLoad2 } = await Promise.resolve().then(() => (init_demo_fit(), demo_fit_exports));
     chosen = await resolveDemoScenarioForLoad2(ctx) ?? void 0;
   }
+  if (ctx.rl) {
+    const { shouldOfferInboxSkillSetup: shouldOfferInboxSkillSetup2, offerInboxSkillSetup: offerInboxSkillSetup2 } = await Promise.resolve().then(() => (init_inbox_setup(), inbox_setup_exports));
+    if (shouldOfferInboxSkillSetup2("demo")) {
+      const session = createPromptSession(ctx.rl, ctx);
+      try {
+        await offerInboxSkillSetup2(session, { beat: "demo" });
+      } finally {
+        session.close();
+      }
+    }
+  }
   if (chosen) {
     const { getScenario: getScenario2 } = await Promise.resolve().then(() => (init_scenarios(), scenarios_exports));
     const s = getScenario2(chosen);
     console.log();
-    console.log("  " + paint("accent", "Fitting ") + s.label + chalk24.dim(" \u2014 " + s.hook));
+    console.log("  " + paint("accent", "Fitting ") + s.label + chalk25.dim(" \u2014 " + s.hook));
   }
   const { handler: demo } = await Promise.resolve().then(() => (init_generate(), generate_exports));
   const args = ["--no-profile", "--brief"];
@@ -22751,7 +23415,7 @@ async function loadDemoFromChat(ctx, scenario, opts = {}) {
   const shouldAuto = opts.autoCompute || Boolean(ctx.pendingAsk && audit.can_compute && ctx.scope?.confirmed_at);
   if (shouldAuto && audit.can_compute) {
     console.log();
-    console.log("  " + chalk24.dim("Computing so I can answer\u2026"));
+    console.log("  " + chalk25.dim("Computing so I can answer\u2026"));
     await runConversationCompute(ctx);
     return true;
   }
@@ -22784,7 +23448,7 @@ __export(pending_ask_exports, {
   queuePendingAsk: () => queuePendingAsk,
   resumePendingAsk: () => resumePendingAsk
 });
-import chalk25 from "chalk";
+import chalk26 from "chalk";
 function looksLikeQuestion(input) {
   const text = input.trim();
   if (!text) return false;
@@ -22820,7 +23484,7 @@ function printFocusChip(ctx) {
   const period = ctx.scope.time_horizon ? ` \xB7 ${ctx.scope.time_horizon}` : "";
   console.log();
   console.log(
-    "  " + chalk25.dim("Focus: ") + paint("accent", lens) + chalk25.dim(period) + chalk25.dim(" \u2014 type ") + chalk25.cyan("adjust") + chalk25.dim(" to change")
+    "  " + chalk26.dim("Focus: ") + paint("accent", lens) + chalk26.dim(period) + chalk26.dim(" \u2014 type ") + chalk26.cyan("adjust") + chalk26.dim(" to change")
   );
   console.log();
 }
@@ -22831,7 +23495,7 @@ async function resumePendingAsk(ctx) {
   if (canUseReplAi(ctx)) {
     console.log();
     console.log(
-      "  " + chalk25.dim(
+      "  " + chalk26.dim(
         pending.keylessAnswered ? "Picking up your question with the connected engine\u2026" : "Picking up your question\u2026"
       )
     );
@@ -22864,7 +23528,7 @@ async function offerDemoToAnswer(ctx) {
     const go = await prompts.confirm("Use demo data to answer this?", true);
     if (!go) {
       console.log(
-        "  " + chalk25.dim("Paste a CSV path when ready, or say ") + chalk25.cyan("use demo data") + chalk25.dim(".")
+        "  " + chalk26.dim("Paste a CSV path when ready, or say ") + chalk26.cyan("use demo data") + chalk26.dim(".")
       );
       console.log();
       return false;
@@ -22896,7 +23560,7 @@ __export(compute_exports2, {
   isComputeIntent: () => isComputeIntent,
   runConversationCompute: () => runConversationCompute
 });
-import chalk26 from "chalk";
+import chalk27 from "chalk";
 async function runConversationCompute(ctx) {
   const lens = ctx.scope?.primary_lens ?? ctx.analysis.primary;
   ctx.computeInProgress = true;
@@ -22951,7 +23615,7 @@ async function runConversationCompute(ctx) {
     creditGapCompute(ctx);
     return typeof summary === "string" ? summary : "Health analysis ready";
   } catch (err) {
-    console.error("  " + chalk26.red(String(err.message ?? err)));
+    console.error("  " + chalk27.red(String(err.message ?? err)));
     return;
   } finally {
     ctx.computeInProgress = false;
@@ -24355,6 +25019,11 @@ var init_lemonsqueezy = __esm({
 
 // src/license/verify.ts
 import { createHmac as createHmac2 } from "crypto";
+function signingSecret() {
+  const secret2 = process.env.NTRP_SIGNING_SECRET;
+  if (!secret2) return null;
+  return secret2;
+}
 function validateLicenseKey(key) {
   const invalid = (msg) => ({
     valid: false,
@@ -24365,13 +25034,17 @@ function validateLicenseKey(key) {
   if (!key || !key.startsWith("NTRP-")) {
     return invalid("Invalid key format");
   }
+  const secret2 = signingSecret();
+  if (!secret2) {
+    return invalid("Invalid key format");
+  }
   const parts = key.replace("NTRP-", "").split("-");
   if (parts.length !== 3) {
     return invalid("Invalid key format");
   }
   const [payload, meta, signature] = parts;
   const dataToSign = `${payload}-${meta}`;
-  const expectedSig = createHmac2("sha256", SIGNING_SECRET).update(dataToSign).digest("hex").slice(0, 8);
+  const expectedSig = createHmac2("sha256", secret2).update(dataToSign).digest("hex").slice(0, 8);
   if (signature !== expectedSig) {
     return invalid("Invalid license key");
   }
@@ -24468,7 +25141,6 @@ function checkLicense() {
   }
   return applyTrialPolicy(result);
 }
-var SIGNING_SECRET;
 var init_verify = __esm({
   "src/license/verify.ts"() {
     "use strict";
@@ -24477,7 +25149,6 @@ var init_verify = __esm({
     init_upgrade_whimsy();
     init_normalize();
     init_lemonsqueezy();
-    SIGNING_SECRET = "ntrp-gtm-health-2026";
   }
 });