@staff0rd/assist 0.96.0 → 0.97.1

package/dist/index.js

@@ -6,7 +6,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@staff0rd/assist",
-  version: "0.96.0",
+  version: "0.97.1",
   type: "module",
   main: "dist/index.js",
   bin: {
@@ -44,6 +44,7 @@ var package_default = {
     minimatch: "^10.1.1",
     "node-notifier": "^10.0.1",
     semver: "^7.7.3",
+    "shell-quote": "^1.8.3",
     typescript: "^5.9.3",
     yaml: "^2.8.2",
     zod: "^4.3.6"
@@ -59,6 +60,7 @@ var package_default = {
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@types/semver": "^7.7.1",
+    "@types/shell-quote": "^1.7.5",
     esbuild: "^0.27.3",
     jotai: "^2.18.0",
     jscpd: "^4.0.5",
@@ -1625,14 +1627,14 @@ function flushIfFailed(exitCode, chunks) {
 
 // src/commands/verify/run/runAllEntries.ts
 function runEntry(entry, onComplete) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const child = spawnCommand(entry.fullCommand, entry.cwd, entry.env);
     const chunks = collectOutput(child);
     child.on("close", (code) => {
       const exitCode = code ?? 1;
       flushIfFailed(exitCode, chunks);
       onComplete?.(exitCode);
-      resolve5({ script: entry.name, code: exitCode });
+      resolve6({ script: entry.name, code: exitCode });
     });
   });
 }
@@ -2375,12 +2377,12 @@ function respondJson(res, status2, data) {
   res.end(JSON.stringify(data));
 }
 function readBody(req) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     let body = "";
     req.on("data", (chunk) => {
       body += chunk.toString();
     });
-    req.on("end", () => resolve5(body));
+    req.on("end", () => resolve6(body));
     req.on("error", reject);
   });
 }
@@ -2517,6 +2519,9 @@ function registerBacklog(program2) {
   backlogCommand.command("web").description("Start a web view of the backlog").option("-p, --port <number>", "Port to listen on", "3000").action(web);
 }
 
+// src/shared/isApprovedRead.ts
+import { resolve as resolve3 } from "path";
+
 // src/shared/tokenize.ts
 function tokenize(command) {
   const tokens = [];
@@ -2596,7 +2601,6 @@ function extractGraphqlQuery(args) {
 }
 
 // src/shared/loadCliReads.ts
-import { execFileSync } from "child_process";
 import { existsSync as existsSync16, readFileSync as readFileSync13, writeFileSync as writeFileSync12 } from "fs";
 import { dirname as dirname12, resolve as resolve2 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
@@ -2605,31 +2609,155 @@ var __dirname5 = dirname12(__filename2);
 function getCliReadsPath() {
   return resolve2(__dirname5, "..", "assist.cli-reads");
 }
-function loadCliReads() {
+var cachedLines;
+function getCliReadsLines() {
+  if (cachedLines) return cachedLines;
   const path31 = getCliReadsPath();
-  if (!existsSync16(path31)) return [];
-  return readFileSync13(path31, "utf-8").split("\n").filter((line) => line.trim() !== "");
+  if (!existsSync16(path31)) {
+    cachedLines = [];
+    return cachedLines;
+  }
+  cachedLines = readFileSync13(path31, "utf-8").split("\n").filter((line) => line.trim() !== "");
+  return cachedLines;
+}
+function loadCliReads() {
+  return getCliReadsLines();
 }
 function saveCliReads(commands) {
   writeFileSync12(getCliReadsPath(), `${commands.join("\n")}
 `);
+  cachedLines = void 0;
 }
 function findCliRead(command) {
-  const filePath = getCliReadsPath();
-  if (!existsSync16(filePath)) return void 0;
   const words = command.split(/\s+/);
   if (words.length < 2) return void 0;
   const prefix2 = `${words[0]} ${words[1]}`;
-  let candidates;
+  const candidates = getCliReadsLines().filter(
+    (line) => line === prefix2 || line.startsWith(`${prefix2} `)
+  );
+  return candidates.sort((a, b) => b.length - a.length).find((rc) => command === rc || command.startsWith(`${rc} `));
+}
+
+// src/shared/matchesBashAllow.ts
+import { existsSync as existsSync17, readFileSync as readFileSync14 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join11 } from "path";
+var cached;
+function loadBashAllowPrefixes() {
+  if (cached) return cached;
+  cached = parsePrefixes(collectAllowEntries());
+  return cached;
+}
+function matchesBashAllow(command) {
+  const prefixes = loadBashAllowPrefixes();
+  return prefixes.find(
+    (pfx) => command === pfx || command.startsWith(`${pfx} `)
+  );
+}
+function collectAllowEntries() {
+  const paths = [
+    join11(homedir3(), ".claude", "settings.json"),
+    join11(process.cwd(), ".claude", "settings.json"),
+    join11(process.cwd(), ".claude", "settings.local.json")
+  ];
+  const entries = [];
+  for (const p of paths) {
+    entries.push(...readAllowArray(p));
+  }
+  return entries;
+}
+function readAllowArray(filePath) {
+  if (!existsSync17(filePath)) return [];
   try {
-    const output = execFileSync("grep", ["-E", `^${prefix2}( |$)`, filePath], {
-      encoding: "utf-8"
-    });
-    candidates = output.split("\n").filter((l) => l !== "");
+    const data = JSON.parse(readFileSync14(filePath, "utf-8"));
+    const allow = data?.permissions?.allow;
+    return Array.isArray(allow) ? allow.filter((e) => typeof e === "string") : [];
+  } catch {
+    return [];
+  }
+}
+function parsePrefixes(entries) {
+  const re = /^Bash\((.+?)(?::.*)\)$/;
+  const prefixes = [];
+  for (const entry of entries) {
+    const m = entry.match(re);
+    if (m) prefixes.push(m[1]);
+  }
+  return prefixes;
+}
+
+// src/shared/isApprovedRead.ts
+function isApprovedRead(command) {
+  if (isCdToCwd(command)) return "cd to current directory";
+  const matched = findCliRead(command);
+  if (matched) return `Read-only CLI command: ${matched}`;
+  if (isGhApiRead(command)) return "Read-only gh api command";
+  const allowMatch = matchesBashAllow(command);
+  if (allowMatch) return `Allowed by settings: ${allowMatch}`;
+  return void 0;
+}
+function isCdToCwd(command) {
+  const parts = command.split(/\s+/);
+  if (parts[0] !== "cd" || parts.length > 2) return false;
+  if (parts.length === 1) return false;
+  const resolved = resolve3(normalizeMsysPath(parts[1]));
+  return resolved === resolve3(process.cwd());
+}
+function normalizeMsysPath(p) {
+  const m = p.match(/^\/([a-zA-Z])(\/.*)/);
+  return m ? `${m[1].toUpperCase()}:${m[2]}` : p;
+}
+
+// src/shared/splitCompound.ts
+import { parse } from "shell-quote";
+var SEPARATOR_OPS = /* @__PURE__ */ new Set(["|", "&&", "||", ";"]);
+var UNSAFE_OPS = /* @__PURE__ */ new Set(["(", ")", ">", ">>", "<", "<&", "|&", ">&"]);
+var FD_REDIRECT_RE = /\d+>&\d+/g;
+function splitCompound(command) {
+  const tokens = tokenizeCommand(command);
+  if (!tokens) return void 0;
+  const groups = groupByOperator(tokens);
+  if (!groups) return void 0;
+  const result = groups.map((parts) => stripEnvPrefix(parts).join(" ")).filter((cmd) => cmd !== "");
+  return result.length > 0 ? result : void 0;
+}
+function tokenizeCommand(command) {
+  const trimmed = command.trim().replace(FD_REDIRECT_RE, "");
+  if (!trimmed) return void 0;
+  try {
+    const tokens = parse(trimmed);
+    const hasBacktick = tokens.some(
+      (t) => typeof t === "string" && /`.+`/.test(t)
+    );
+    return hasBacktick ? void 0 : tokens;
   } catch {
     return void 0;
   }
-  return candidates.sort((a, b) => b.length - a.length).find((rc) => command === rc || command.startsWith(`${rc} `));
+}
+function getOp(token) {
+  return typeof token === "object" && token !== null && "op" in token ? token.op : void 0;
+}
+function groupByOperator(tokens) {
+  const groups = [[]];
+  for (const token of tokens) {
+    const op = getOp(token);
+    if (op === void 0) {
+      if (typeof token !== "string") return void 0;
+      groups[groups.length - 1].push(token);
+    } else if (SEPARATOR_OPS.has(op)) {
+      groups.push([]);
+    } else if (UNSAFE_OPS.has(op)) {
+      return void 0;
+    } else {
+      return void 0;
+    }
+  }
+  return groups;
+}
+function stripEnvPrefix(parts) {
+  let i = 0;
+  while (i < parts.length && /^[A-Za-z_]\w*=/.test(parts[i])) i++;
+  return i > 0 ? parts.slice(i) : parts;
 }
 
 // src/commands/cliHook/index.ts
@@ -2645,1291 +2773,1309 @@ async function cliHook() {
     return;
   }
   const command = data.tool_input.command.trim();
-  const matched = findCliRead(command);
-  if (matched) {
-    console.log(
-      JSON.stringify({
-        hookSpecificOutput: {
-          hookEventName: "PreToolUse",
-          permissionDecision: "allow",
-          permissionDecisionReason: `Read-only CLI command: ${matched}`
-        }
-      })
-    );
+  const parts = splitCompound(command);
+  if (!parts) return;
+  const reasons = [];
+  for (const part of parts) {
+    const reason = isApprovedRead(part);
+    if (!reason) return;
+    reasons.push(reason);
+  }
+  console.log(
+    JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision: "allow",
+        permissionDecisionReason: reasons.join("; ")
+      }
+    })
+  );
+}
+
+// src/commands/cliHook/cliHookCheck.ts
+function cliHookCheck(command) {
+  const trimmed = command.trim();
+  const parts = splitCompound(trimmed);
+  if (!parts) {
+    console.log("not approved (unable to parse)");
+    process.exitCode = 1;
     return;
   }
-  if (isGhApiRead(command)) {
-    console.log(
-      JSON.stringify({
-        hookSpecificOutput: {
-          hookEventName: "PreToolUse",
-          permissionDecision: "allow",
-          permissionDecisionReason: "Read-only gh api command"
-        }
-      })
-    );
+  const reasons = [];
+  for (const part of parts) {
+    const reason = isApprovedRead(part);
+    if (!reason) {
+      console.log(`not approved (unrecognised: ${part})`);
+      process.exitCode = 1;
+      return;
+    }
+    reasons.push(`  ${part} -> ${reason}`);
   }
+  console.log(`approved
+${reasons.join("\n")}`);
 }
 
-// src/commands/registerCliHook.ts
-function registerCliHook(program2) {
-  program2.command("cli-hook").description("PreToolUse hook for auto-approving read-only CLI commands").action(() => {
-    cliHook();
-  });
-}
+// src/commands/permitCliReads/index.ts
+import { existsSync as existsSync18, mkdirSync as mkdirSync4, readFileSync as readFileSync15, writeFileSync as writeFileSync13 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join12 } from "path";
 
-// src/commands/complexity/analyze.ts
-import chalk35 from "chalk";
+// src/shared/getInstallDir.ts
+import { execSync as execSync13 } from "child_process";
+import { dirname as dirname13, resolve as resolve4 } from "path";
+import { fileURLToPath as fileURLToPath5 } from "url";
+var __filename3 = fileURLToPath5(import.meta.url);
+var __dirname6 = dirname13(__filename3);
+function getInstallDir() {
+  return resolve4(__dirname6, "..");
+}
+function isGitRepo(dir) {
+  try {
+    const result = execSync13("git rev-parse --show-toplevel", {
+      cwd: dir,
+      stdio: "pipe"
+    }).toString().trim();
+    return resolve4(result) === resolve4(dir);
+  } catch {
+    return false;
+  }
+}
 
-// src/commands/complexity/cyclomatic.ts
-import chalk31 from "chalk";
+// src/commands/permitCliReads/assertCliExists.ts
+import { execSync as execSync14 } from "child_process";
+function assertCliExists(cli) {
+  const binary = cli.split(/\s+/)[0];
+  const opts = {
+    encoding: "utf-8",
+    stdio: ["ignore", "pipe", "pipe"]
+  };
+  try {
+    execSync14(`command -v ${binary}`, opts);
+  } catch {
+    try {
+      execSync14(`where ${binary}`, opts);
+    } catch {
+      console.error(`CLI "${cli}" not found in PATH`);
+      process.exit(1);
+    }
+  }
+}
 
-// src/commands/complexity/shared/index.ts
-import fs11 from "fs";
-import path16 from "path";
+// src/commands/permitCliReads/colorize.ts
 import chalk30 from "chalk";
-import ts5 from "typescript";
+function colorize(plainOutput) {
+  return plainOutput.split("\n").map((line) => {
+    if (line.startsWith(" R  ")) return chalk30.green(line);
+    if (line.startsWith(" W  ")) return chalk30.red(line);
+    return line;
+  }).join("\n");
+}
 
-// src/commands/complexity/findSourceFiles.ts
-import fs10 from "fs";
-import path15 from "path";
-import { minimatch as minimatch3 } from "minimatch";
-function applyIgnoreGlobs(files) {
-  const { complexity } = loadConfig();
-  return files.filter(
-    (f) => !complexity.ignore.some((glob) => minimatch3(f, glob))
-  );
+// src/lib/isClaudeCode.ts
+function isClaudeCode() {
+  return process.env.CLAUDECODE !== void 0;
 }
-function walk(dir, results) {
-  if (!fs10.existsSync(dir)) {
-    return;
-  }
-  const extensions = [".ts", ".tsx"];
-  const entries = fs10.readdirSync(dir, { withFileTypes: true });
-  for (const entry of entries) {
-    const fullPath = path15.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      if (entry.name !== "node_modules" && entry.name !== ".git") {
-        walk(fullPath, results);
-      }
-    } else if (entry.isFile() && extensions.some((ext) => entry.name.endsWith(ext))) {
-      results.push(fullPath);
+
+// src/commands/permitCliReads/mapAsync.ts
+async function mapAsync(items, concurrency, fn) {
+  const results = new Array(items.length);
+  let next2 = 0;
+  async function worker() {
+    while (next2 < items.length) {
+      const idx = next2++;
+      results[idx] = await fn(items[idx]);
     }
   }
+  const workers = Array.from(
+    { length: Math.min(concurrency, items.length) },
+    () => worker()
+  );
+  await Promise.all(workers);
+  return results;
 }
-function findSourceFiles2(pattern2, baseDir = ".") {
-  const results = [];
-  if (pattern2.includes("*")) {
-    walk(baseDir, results);
-    return applyIgnoreGlobs(results.filter((f) => minimatch3(f, pattern2)));
+
+// src/commands/permitCliReads/parseCommands.ts
+var COMMAND_SECTION_RE = /^((?:core |general |available |additional |other |management |targeted |alias |github actions )?(?:commands|subgroups)):?$/i;
+function isSkippable(name) {
+  return name.startsWith("-") || name.startsWith("<") || name.startsWith("[");
+}
+function parseCommandLine(trimmed) {
+  const azMatch = trimmed.match(/^(\S+)\s+(?:\[.*?]\s+)?:\s*(.+)/);
+  if (azMatch && !isSkippable(azMatch[1])) {
+    return { name: azMatch[1], description: azMatch[2].trim() };
   }
-  if (fs10.existsSync(pattern2) && fs10.statSync(pattern2).isFile()) {
-    return [pattern2];
+  const colonMatch = trimmed.match(/^(\S+?):\s{2,}(.+)/);
+  if (colonMatch && !isSkippable(colonMatch[1])) {
+    return { name: colonMatch[1], description: colonMatch[2].trim() };
   }
-  if (fs10.existsSync(pattern2) && fs10.statSync(pattern2).isDirectory()) {
-    walk(pattern2, results);
-    return applyIgnoreGlobs(results);
+  const spaceMatch = trimmed.match(/^(\S+)(?:,\s*\S+)?\s{2,}(.+)/);
+  if (spaceMatch && !isSkippable(spaceMatch[1])) {
+    return { name: spaceMatch[1], description: spaceMatch[2].trim() };
   }
-  walk(baseDir, results);
-  return applyIgnoreGlobs(results.filter((f) => minimatch3(f, pattern2)));
-}
-
-// src/commands/complexity/shared/getNodeName.ts
-import ts from "typescript";
-var FUNCTION_TYPE_CHECKS = [
-  ts.isFunctionDeclaration,
-  ts.isFunctionExpression,
-  ts.isArrowFunction,
-  ts.isMethodDeclaration,
-  ts.isGetAccessor,
-  ts.isSetAccessor,
-  ts.isConstructorDeclaration
-];
-function getIdentifierText(name) {
-  if (ts.isIdentifier(name) || ts.isStringLiteral(name)) return name.text;
-  return "<computed>";
-}
-function getArrowFunctionName(node) {
-  const { parent } = node;
-  if (ts.isVariableDeclaration(parent) && ts.isIdentifier(parent.name))
-    return parent.name.text;
-  if (ts.isPropertyAssignment(parent) && ts.isIdentifier(parent.name))
-    return parent.name.text;
-  return "<arrow>";
+  if (/^\S+$/.test(trimmed) && !isSkippable(trimmed)) {
+    return { name: trimmed, description: "" };
+  }
+  return void 0;
 }
-function getNodeName(node) {
-  if (ts.isFunctionDeclaration(node) || ts.isFunctionExpression(node))
-    return node.name?.text ?? "<anonymous>";
-  if (ts.isMethodDeclaration(node) || ts.isMethodSignature(node))
-    return getIdentifierText(node.name);
-  if (ts.isArrowFunction(node)) return getArrowFunctionName(node);
-  if (ts.isGetAccessor(node) || ts.isSetAccessor(node)) {
-    const prefix2 = ts.isGetAccessor(node) ? "get " : "set ";
-    return `${prefix2}${getIdentifierText(node.name)}`;
+function parseCommands(helpText) {
+  const commands = [];
+  let inCommandSection = false;
+  for (const line of helpText.split("\n")) {
+    const trimmed = line.trim();
+    if (COMMAND_SECTION_RE.test(trimmed)) {
+      inCommandSection = true;
+      continue;
+    }
+    if (inCommandSection && trimmed && !line.startsWith(" ") && !line.startsWith("	")) {
+      inCommandSection = false;
+      continue;
+    }
+    if (!inCommandSection || !trimmed) continue;
+    if (trimmed.startsWith("-") || trimmed.startsWith("=")) continue;
+    const parsed = parseCommandLine(trimmed);
+    if (parsed) commands.push(parsed);
   }
-  if (ts.isConstructorDeclaration(node)) return "constructor";
-  return "<unknown>";
+  return commands;
 }
-function hasFunctionBody(node) {
-  if (!FUNCTION_TYPE_CHECKS.some((check2) => check2(node))) return false;
-  return node.body !== void 0;
+var COMMAND_SECTION_MULTILINE_RE = new RegExp(
+  COMMAND_SECTION_RE.source,
+  "im"
+);
+function hasSubcommands(helpText) {
+  return COMMAND_SECTION_MULTILINE_RE.test(helpText);
 }
 
-// src/commands/complexity/shared/calculateCyclomaticComplexity.ts
-import ts2 from "typescript";
-var complexityKinds = /* @__PURE__ */ new Set([
-  ts2.SyntaxKind.IfStatement,
-  ts2.SyntaxKind.ForStatement,
-  ts2.SyntaxKind.ForInStatement,
-  ts2.SyntaxKind.ForOfStatement,
-  ts2.SyntaxKind.WhileStatement,
-  ts2.SyntaxKind.DoStatement,
-  ts2.SyntaxKind.CaseClause,
-  ts2.SyntaxKind.CatchClause,
-  ts2.SyntaxKind.ConditionalExpression
-]);
-var logicalOperators = /* @__PURE__ */ new Set([
-  ts2.SyntaxKind.AmpersandAmpersandToken,
-  ts2.SyntaxKind.BarBarToken,
-  ts2.SyntaxKind.QuestionQuestionToken
-]);
-function calculateCyclomaticComplexity(node) {
-  let complexity = 1;
-  function visit(n) {
-    if (complexityKinds.has(n.kind)) {
-      complexity++;
-    } else if (ts2.isBinaryExpression(n) && logicalOperators.has(n.operatorToken.kind)) {
-      complexity++;
-    }
-    ts2.forEachChild(n, visit);
-  }
-  ts2.forEachChild(node, visit);
-  return complexity;
-}
-
-// src/commands/complexity/shared/calculateHalstead/index.ts
-import ts4 from "typescript";
-
-// src/commands/complexity/shared/calculateHalstead/operatorChecks.ts
-import ts3 from "typescript";
-var operatorChecks = [
-  (n) => ts3.isBinaryExpression(n) ? n.operatorToken.getText() : void 0,
-  (n) => ts3.isPrefixUnaryExpression(n) || ts3.isPostfixUnaryExpression(n) ? ts3.tokenToString(n.operator) ?? "" : void 0,
-  (n) => ts3.isCallExpression(n) ? "()" : void 0,
-  (n) => ts3.isPropertyAccessExpression(n) ? "." : void 0,
-  (n) => ts3.isElementAccessExpression(n) ? "[]" : void 0,
-  (n) => ts3.isConditionalExpression(n) ? "?:" : void 0,
-  (n) => ts3.isReturnStatement(n) ? "return" : void 0,
-  (n) => ts3.isIfStatement(n) ? "if" : void 0,
-  (n) => ts3.isForStatement(n) || ts3.isForInStatement(n) || ts3.isForOfStatement(n) ? "for" : void 0,
-  (n) => ts3.isWhileStatement(n) ? "while" : void 0,
-  (n) => ts3.isDoStatement(n) ? "do" : void 0,
-  (n) => ts3.isSwitchStatement(n) ? "switch" : void 0,
-  (n) => ts3.isCaseClause(n) ? "case" : void 0,
-  (n) => ts3.isDefaultClause(n) ? "default" : void 0,
-  (n) => ts3.isBreakStatement(n) ? "break" : void 0,
-  (n) => ts3.isContinueStatement(n) ? "continue" : void 0,
-  (n) => ts3.isThrowStatement(n) ? "throw" : void 0,
-  (n) => ts3.isTryStatement(n) ? "try" : void 0,
-  (n) => ts3.isCatchClause(n) ? "catch" : void 0,
-  (n) => ts3.isNewExpression(n) ? "new" : void 0,
-  (n) => ts3.isTypeOfExpression(n) ? "typeof" : void 0,
-  (n) => ts3.isAwaitExpression(n) ? "await" : void 0
-];
-
-// src/commands/complexity/shared/calculateHalstead/index.ts
-function classifyNode(n, operators, operands) {
-  if (ts4.isIdentifier(n) || ts4.isNumericLiteral(n) || ts4.isStringLiteral(n)) {
-    operands.set(n.text, (operands.get(n.text) ?? 0) + 1);
-    return;
-  }
-  for (const check2 of operatorChecks) {
-    const op = check2(n);
-    if (op !== void 0) {
-      operators.set(op, (operators.get(op) ?? 0) + 1);
-      return;
-    }
-  }
-}
-function computeHalsteadMetrics(operators, operands) {
-  const n1 = operators.size;
-  const n2 = operands.size;
-  const N1 = Array.from(operators.values()).reduce((a, b) => a + b, 0);
-  const N2 = Array.from(operands.values()).reduce((a, b) => a + b, 0);
-  const vocabulary = n1 + n2;
-  const length = N1 + N2;
-  const volume = length > 0 && vocabulary > 0 ? length * Math.log2(vocabulary) : 0;
-  const difficulty = n2 > 0 ? n1 / 2 * (N2 / n2) : 0;
-  const effort = volume * difficulty;
-  return {
-    length,
-    vocabulary,
-    volume,
-    difficulty,
-    effort,
-    time: effort / 18,
-    bugsDelivered: volume / 3e3
-  };
-}
-function calculateHalstead(node) {
-  const operators = /* @__PURE__ */ new Map();
-  const operands = /* @__PURE__ */ new Map();
-  function visit(n) {
-    classifyNode(n, operators, operands);
-    ts4.forEachChild(n, visit);
-  }
-  ts4.forEachChild(node, visit);
-  return computeHalsteadMetrics(operators, operands);
-}
-
-// src/commands/complexity/shared/countSloc.ts
-function countSloc(content) {
-  let inMultiLineComment = false;
-  let count = 0;
-  for (const line of content.split("\n")) {
-    const trimmed = line.trim();
-    if (inMultiLineComment) {
-      if (trimmed.includes("*/")) {
-        inMultiLineComment = false;
-        const afterComment = trimmed.substring(trimmed.indexOf("*/") + 2);
-        if (afterComment.trim().length > 0) {
-          count++;
-        }
-      }
-      continue;
-    }
-    if (trimmed.startsWith("//")) {
-      continue;
-    }
-    if (trimmed.startsWith("/*")) {
-      if (trimmed.includes("*/")) {
-        const afterComment = trimmed.substring(trimmed.indexOf("*/") + 2);
-        if (afterComment.trim().length > 0) {
-          count++;
-        }
-      } else {
-        inMultiLineComment = true;
+// src/commands/permitCliReads/runHelp.ts
+import { exec as exec2 } from "child_process";
+function runHelp(args) {
+  return new Promise((resolve6) => {
+    exec2(
+      `${args.join(" ")} --help`,
+      { encoding: "utf-8", timeout: 3e4 },
+      (_err, stdout, stderr) => {
+        resolve6(stdout || stderr || "");
       }
-      continue;
-    }
-    if (trimmed.length > 0) {
-      count++;
-    }
-  }
-  return count;
+    );
+  });
 }
 
-// src/commands/complexity/shared/index.ts
-function createSourceFromFile(filePath) {
-  const content = fs11.readFileSync(filePath, "utf-8");
-  return ts5.createSourceFile(
-    path16.basename(filePath),
-    content,
-    ts5.ScriptTarget.Latest,
-    true,
-    filePath.endsWith(".tsx") ? ts5.ScriptKind.TSX : ts5.ScriptKind.TS
-  );
-}
-function withSourceFiles(pattern2, callback) {
-  const files = findSourceFiles2(pattern2);
-  if (files.length === 0) {
-    console.log(chalk30.yellow("No files found matching pattern"));
-    return void 0;
-  }
-  return callback(files);
+// src/commands/permitCliReads/discoverAll.ts
+var SAFETY_DEPTH = 10;
+var CONCURRENCY = 8;
+var interactive = !isClaudeCode();
+function showProgress(p, label2) {
+  if (!interactive) return;
+  const pct = Math.round(p.done / p.total * 100);
+  process.stderr.write(`\r\x1B[K[${pct}%] Scanning ${label2}...`);
 }
-function forEachFunction(files, callback) {
-  for (const file of files) {
-    const sourceFile = createSourceFromFile(file);
-    const visit = (node) => {
-      if (hasFunctionBody(node)) {
-        callback(file, getNodeName(node), node);
-      }
-      ts5.forEachChild(node, visit);
-    };
-    visit(sourceFile);
+async function resolveCommand(cli, path31, description, depth, p) {
+  showProgress(p, path31.join(" "));
+  const subHelp = await runHelp([cli, ...path31]);
+  if (!subHelp || !hasSubcommands(subHelp)) {
+    return [{ path: path31, description }];
   }
+  const children = await discoverAt(cli, path31, depth + 1, p);
+  return children.length > 0 ? children : [{ path: path31, description }];
 }
-
-// src/commands/complexity/cyclomatic.ts
-async function cyclomatic(pattern2 = "**/*.ts", options2 = {}) {
-  withSourceFiles(pattern2, (files) => {
-    const results = [];
-    let hasViolation = false;
-    forEachFunction(files, (file, name, node) => {
-      const complexity = calculateCyclomaticComplexity(node);
-      results.push({ file, name, complexity });
-      if (options2.threshold !== void 0 && complexity > options2.threshold) {
-        hasViolation = true;
-      }
-    });
-    results.sort((a, b) => b.complexity - a.complexity);
-    for (const { file, name, complexity } of results) {
-      const exceedsThreshold = options2.threshold !== void 0 && complexity > options2.threshold;
-      const color = exceedsThreshold ? chalk31.red : chalk31.white;
-      console.log(`${color(`${file}:${name}`)} \u2192 ${chalk31.cyan(complexity)}`);
-    }
-    console.log(
-      chalk31.dim(
-        `
-Analyzed ${results.length} functions across ${files.length} files`
-      )
-    );
-    if (hasViolation) {
-      process.exit(1);
-    }
-  });
+async function discoverAt(cli, parentPath, depth, p) {
+  if (depth > SAFETY_DEPTH) return [];
+  const helpText = await runHelp([cli, ...parentPath]);
+  if (!helpText) return [];
+  const cmds = parseCommands(helpText);
+  const results = await mapAsync(
+    cmds,
+    CONCURRENCY,
+    (cmd) => resolveCommand(cli, [...parentPath, cmd.name], cmd.description, depth, p)
+  );
+  return results.flat();
 }
-
-// src/commands/complexity/halstead.ts
-import chalk32 from "chalk";
-async function halstead(pattern2 = "**/*.ts", options2 = {}) {
-  withSourceFiles(pattern2, (files) => {
-    const results = [];
-    let hasViolation = false;
-    forEachFunction(files, (file, name, node) => {
-      const metrics = calculateHalstead(node);
-      results.push({ file, name, metrics });
-      if (options2.threshold !== void 0 && metrics.volume > options2.threshold) {
-        hasViolation = true;
-      }
-    });
-    results.sort((a, b) => b.metrics.effort - a.metrics.effort);
-    for (const { file, name, metrics } of results) {
-      const exceedsThreshold = options2.threshold !== void 0 && metrics.volume > options2.threshold;
-      const color = exceedsThreshold ? chalk32.red : chalk32.white;
-      console.log(
-        `${color(`${file}:${name}`)} \u2192 volume: ${chalk32.cyan(metrics.volume.toFixed(1))}, difficulty: ${chalk32.yellow(metrics.difficulty.toFixed(1))}, effort: ${chalk32.magenta(metrics.effort.toFixed(1))}`
-      );
-    }
-    console.log(
-      chalk32.dim(
-        `
-Analyzed ${results.length} functions across ${files.length} files`
-      )
+async function discoverAll(cli) {
+  const topLevel = parseCommands(await runHelp([cli]));
+  const p = { done: 0, total: topLevel.length };
+  const results = await mapAsync(topLevel, CONCURRENCY, async (cmd) => {
+    showProgress(p, cmd.name);
+    const resolved = await resolveCommand(
+      cli,
+      [cmd.name],
+      cmd.description,
+      1,
+      p
     );
-    if (hasViolation) {
-      process.exit(1);
-    }
+    p.done++;
+    showProgress(p, cmd.name);
+    return resolved;
   });
+  if (interactive) process.stderr.write("\r\x1B[K");
+  return results.flat();
 }
 
-// src/commands/complexity/maintainability/index.ts
-import fs12 from "fs";
-
-// src/commands/complexity/maintainability/displayMaintainabilityResults.ts
-import chalk33 from "chalk";
-function displayMaintainabilityResults(results, threshold) {
-  const filtered = threshold !== void 0 ? results.filter((r) => r.minMaintainability < threshold) : results;
-  if (threshold !== void 0 && filtered.length === 0) {
-    console.log(chalk33.green("All files pass maintainability threshold"));
-  } else {
-    for (const { file, avgMaintainability, minMaintainability } of filtered) {
-      const color = threshold !== void 0 ? chalk33.red : chalk33.white;
-      console.log(
-        `${color(file)} \u2192 avg: ${chalk33.cyan(avgMaintainability.toFixed(1))}, min: ${chalk33.yellow(minMaintainability.toFixed(1))}`
-      );
-    }
-  }
-  console.log(chalk33.dim(`
-Analyzed ${results.length} files`));
-  if (filtered.length > 0 && threshold !== void 0) {
-    console.error(
-      chalk33.red(
-        `
-Fail: ${filtered.length} file(s) below threshold ${threshold}. Maintainability index (0\u2013100) is derived from Halstead volume, cyclomatic complexity, and lines of code.
-
-\u26A0\uFE0F  ${chalk33.bold("Diagnose and fix one file at a time")} \u2014 do not investigate or fix multiple files in parallel. Run 'assist complexity <file>' to see all metrics. For larger files, start by extracting responsibilities into smaller files.`
-      )
-    );
-    process.exit(1);
+// src/commands/permitCliReads/classifyVerb.ts
+var READ_VERBS = /* @__PURE__ */ new Set([
+  "list",
+  "show",
+  "view",
+  "export",
+  "get",
+  "diff",
+  "status",
+  "search",
+  "checks",
+  "describe",
+  "inspect",
+  "logs",
+  "cat",
+  "top",
+  "explain",
+  "exists",
+  "browse",
+  "watch"
+]);
+var WRITE_VERBS = /* @__PURE__ */ new Set([
+  "create",
+  "delete",
+  "import",
+  "set",
+  "update",
+  "merge",
+  "close",
+  "reopen",
+  "edit",
+  "apply",
+  "patch",
+  "drain",
+  "cordon",
+  "taint",
+  "push",
+  "deploy",
+  "add",
+  "remove",
+  "assign",
+  "unassign",
+  "lock",
+  "unlock",
+  "start",
+  "stop",
+  "restart",
+  "enable",
+  "disable",
+  "revoke",
+  "rotate"
+]);
+function classifyVerb(verbOrPath) {
+  const segments = Array.isArray(verbOrPath) ? verbOrPath : [verbOrPath];
+  let hasRead = false;
+  for (const s of segments) {
+    if (WRITE_VERBS.has(s)) return "w";
+    if (READ_VERBS.has(s)) hasRead = true;
   }
+  return hasRead ? "r" : "?";
 }
 
-// src/commands/complexity/maintainability/index.ts
-function calculateMaintainabilityIndex(halsteadVolume, cyclomaticComplexity, sloc2) {
-  if (halsteadVolume === 0 || sloc2 === 0) {
-    return 100;
-  }
-  const mi = 171 - 5.2 * Math.log(halsteadVolume) - 0.23 * cyclomaticComplexity - 16.2 * Math.log(sloc2);
-  return Math.max(0, Math.min(100, mi));
-}
-function collectFileMetrics(files) {
-  const fileMetrics = /* @__PURE__ */ new Map();
-  for (const file of files) {
-    const content = fs12.readFileSync(file, "utf-8");
-    fileMetrics.set(file, { sloc: countSloc(content), functions: [] });
-  }
-  forEachFunction(files, (file, _name, node) => {
-    const metrics = fileMetrics.get(file);
-    if (metrics) {
-      const complexity = calculateCyclomaticComplexity(node);
-      const halstead2 = calculateHalstead(node);
-      const mi = calculateMaintainabilityIndex(
-        halstead2.volume,
-        complexity,
-        metrics.sloc
-      );
-      metrics.functions.push(mi);
-    }
-  });
-  return fileMetrics;
+// src/commands/permitCliReads/formatHuman.ts
+function prefix(kind) {
+  if (kind === "r") return " R  ";
+  if (kind === "w") return " W  ";
+  return " ?  ";
 }
-function aggregateResults(fileMetrics) {
-  const results = [];
-  for (const [file, metrics] of fileMetrics) {
-    if (metrics.functions.length === 0) continue;
-    const avgMaintainability = metrics.functions.reduce((a, b) => a + b, 0) / metrics.functions.length;
-    const minMaintainability = Math.min(...metrics.functions);
-    results.push({ file, avgMaintainability, minMaintainability });
+function formatHuman(cli, commands) {
+  const sorted = [...commands].sort(
+    (a, b) => a.path.join(" ").localeCompare(b.path.join(" "))
+  );
+  const lines = [`Discovered ${commands.length} commands for "${cli}":
+`];
+  for (const cmd of sorted) {
+    const full = `${cli} ${cmd.path.join(" ")}`;
+    const text = cmd.description ? `${full} \u2014 ${cmd.description}` : full;
+    lines.push(`${prefix(classifyVerb(cmd.path))}${text}`);
   }
-  results.sort((a, b) => a.minMaintainability - b.minMaintainability);
-  return results;
-}
-async function maintainability(pattern2 = "**/*.ts", options2 = {}) {
-  withSourceFiles(pattern2, (files) => {
-    const fileMetrics = collectFileMetrics(files);
-    const results = aggregateResults(fileMetrics);
-    displayMaintainabilityResults(results, options2.threshold);
-  });
+  return lines.join("\n");
 }
 
-// src/commands/complexity/sloc.ts
-import fs13 from "fs";
-import chalk34 from "chalk";
-async function sloc(pattern2 = "**/*.ts", options2 = {}) {
-  withSourceFiles(pattern2, (files) => {
-    const results = [];
-    let hasViolation = false;
-    for (const file of files) {
-      const content = fs13.readFileSync(file, "utf-8");
-      const lines = countSloc(content);
-      results.push({ file, lines });
-      if (options2.threshold !== void 0 && lines > options2.threshold) {
-        hasViolation = true;
-      }
-    }
-    results.sort((a, b) => b.lines - a.lines);
-    for (const { file, lines } of results) {
-      const exceedsThreshold = options2.threshold !== void 0 && lines > options2.threshold;
-      const color = exceedsThreshold ? chalk34.red : chalk34.white;
-      console.log(`${color(file)} \u2192 ${chalk34.cyan(lines)} lines`);
-    }
-    const total = results.reduce((sum, r) => sum + r.lines, 0);
-    console.log(
-      chalk34.dim(`
-Total: ${total} lines across ${files.length} files`)
-    );
-    if (hasViolation) {
-      process.exit(1);
-    }
-  });
+// src/commands/permitCliReads/parseCached.ts
+function parseCached(cli, cached2) {
+  const prefix2 = `${cli} `;
+  const commands = [];
+  for (const line of cached2.split("\n")) {
+    const trimmed = line.replace(/^ [RW?] {2}/, "").trim();
+    if (!trimmed.startsWith(prefix2)) continue;
+    const rest = trimmed.slice(prefix2.length);
+    const dashIdx = rest.indexOf(" \u2014 ");
+    const pathStr = dashIdx >= 0 ? rest.slice(0, dashIdx) : rest;
+    const description = dashIdx >= 0 ? rest.slice(dashIdx + 3) : "";
+    commands.push({ path: pathStr.split(" "), description });
+  }
+  return commands;
 }
 
-// src/commands/complexity/analyze.ts
-async function analyze(pattern2) {
-  const searchPattern = pattern2.includes("*") || pattern2.includes("/") ? pattern2 : `**/${pattern2}`;
-  const files = findSourceFiles2(searchPattern);
-  if (files.length === 0) {
-    console.log(chalk35.yellow("No files found matching pattern"));
-    return;
-  }
-  if (files.length === 1) {
-    const file = files[0];
-    console.log(chalk35.bold.underline("SLOC"));
-    await sloc(file);
-    console.log();
-    console.log(chalk35.bold.underline("Cyclomatic Complexity"));
-    await cyclomatic(file);
-    console.log();
-    console.log(chalk35.bold.underline("Halstead Metrics"));
-    await halstead(file);
-    console.log();
-    console.log(chalk35.bold.underline("Maintainability Index"));
-    await maintainability(file);
+// src/commands/permitCliReads/updateSettings.ts
+function updateSettings(cli, commands) {
+  const existing = loadCliReads();
+  const readEntries = commands.filter((cmd) => classifyVerb(cmd.path) === "r").map((cmd) => `${cli} ${cmd.path.join(" ")}`);
+  const merged = [.../* @__PURE__ */ new Set([...existing, ...readEntries])].sort();
+  if (merged.length === existing.length && merged.every((e, i) => e === existing[i]))
     return;
-  }
-  await maintainability(searchPattern);
+  saveCliReads(merged);
 }
 
-// src/commands/registerComplexity.ts
-function registerComplexity(program2) {
-  const complexityCommand = program2.command("complexity").description("Analyze TypeScript code complexity metrics").argument("[pattern]").action((pattern2) => {
-    if (!pattern2) {
-      complexityCommand.help();
-      return;
-    }
-    return analyze(pattern2);
-  });
-  complexityCommand.command("cyclomatic [pattern]").description("Calculate cyclomatic complexity per function").option("--threshold <number>", "Max complexity threshold", Number.parseInt).action(cyclomatic);
-  complexityCommand.command("halstead [pattern]").description("Calculate Halstead metrics per function").option("--threshold <number>", "Max volume threshold", Number.parseInt).action(halstead);
-  complexityCommand.command("maintainability [pattern]").description("Calculate maintainability index per file").option(
-    "--threshold <number>",
-    "Min maintainability threshold",
-    Number.parseInt
-  ).action(maintainability);
-  complexityCommand.command("sloc [pattern]").description("Count source lines of code per file").option("--threshold <number>", "Max lines threshold", Number.parseInt).action(sloc);
+// src/commands/permitCliReads/index.ts
+function logPath(cli) {
+  const safeName = cli.replace(/\s+/g, "-");
+  return join12(homedir4(), ".assist", `cli-discover-${safeName}.log`);
 }
-
-// src/commands/deploy/redirect.ts
-import { existsSync as existsSync17, readFileSync as readFileSync14, writeFileSync as writeFileSync13 } from "fs";
-import chalk36 from "chalk";
-var TRAILING_SLASH_SCRIPT = `    <script>
-      if (!window.location.pathname.endsWith('/')) {
-        window.location.href = \`\${window.location.pathname}/\${window.location.search}\${window.location.hash}\`;
-      }
-    </script>`;
-function redirect() {
-  const indexPath = "index.html";
-  if (!existsSync17(indexPath)) {
-    console.log(chalk36.yellow("No index.html found"));
-    return;
+function readCache(cli) {
+  const path31 = logPath(cli);
+  if (!existsSync18(path31)) return void 0;
+  return readFileSync15(path31, "utf-8");
+}
+function writeCache(cli, output) {
+  const dir = join12(homedir4(), ".assist");
+  mkdirSync4(dir, { recursive: true });
+  writeFileSync13(logPath(cli), output);
+}
+async function permitCliReads(cli, options2 = { noCache: false }) {
+  if (!cli) {
+    console.error("Usage: assist cli-hook add <cli>");
+    process.exit(1);
   }
-  const content = readFileSync14(indexPath, "utf-8");
-  if (content.includes("window.location.pathname.endsWith('/')")) {
-    console.log(chalk36.dim("Trailing slash script already present"));
-    return;
+  const installDir = getInstallDir();
+  if (!isGitRepo(installDir)) {
+    console.error(
+      "cli-hook add must be run from the assist git repo, not a global install."
+    );
+    process.exit(1);
   }
-  const headCloseIndex = content.indexOf("</head>");
-  if (headCloseIndex === -1) {
-    console.log(chalk36.red("Could not find </head> tag in index.html"));
-    return;
+  if (!options2.noCache) {
+    const cached2 = readCache(cli);
+    if (cached2) {
+      console.log(colorize(cached2));
+      updateSettings(cli, parseCached(cli, cached2));
+      return;
+    }
   }
-  const newContent = content.slice(0, headCloseIndex) + TRAILING_SLASH_SCRIPT + "\n  " + content.slice(headCloseIndex);
-  writeFileSync13(indexPath, newContent);
-  console.log(chalk36.green("Added trailing slash redirect to index.html"));
+  assertCliExists(cli);
+  const commands = await discoverAll(cli);
+  const output = formatHuman(cli, commands);
+  console.log(colorize(output));
+  writeCache(cli, output);
+  updateSettings(cli, commands);
 }
 
-// src/commands/registerDeploy.ts
-function registerDeploy(program2) {
-  const deployCommand = program2.command("deploy").description("Netlify deployment utilities");
-  deployCommand.command("init").description("Initialize Netlify project and configure deployment").action(init5);
-  deployCommand.command("redirect").description("Add trailing slash redirect script to index.html").action(redirect);
+// src/commands/registerCliHook.ts
+function registerCliHook(program2) {
+  const cmd = program2.command("cli-hook").description("PreToolUse hook for auto-approving read-only CLI commands").action(() => {
+    cliHook();
+  });
+  cmd.command("check <command>").description("Check whether a command would be auto-approved").action((command) => {
+    cliHookCheck(command);
+  });
+  cmd.command("add").description("Discover a CLI's commands and auto-permit read-only ones").argument(
+    "<cli...>",
+    "CLI binary and optional subcommand (e.g. gh, az, acli jira)"
+  ).option("--no-cache", "Force fresh discovery, ignoring cached results").action((cli, options2) => {
+    permitCliReads(cli.join(" "), { noCache: !options2.cache });
+  });
 }
 
-// src/commands/devlog/list/index.ts
-import { execSync as execSync14 } from "child_process";
-import { basename as basename3 } from "path";
+// src/commands/complexity/analyze.ts
+import chalk36 from "chalk";
 
-// src/commands/devlog/shared.ts
-import { execSync as execSync13 } from "child_process";
-import chalk37 from "chalk";
+// src/commands/complexity/cyclomatic.ts
+import chalk32 from "chalk";
 
-// src/commands/devlog/loadDevlogEntries.ts
-import { readdirSync, readFileSync as readFileSync15 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join11 } from "path";
-var DEVLOG_DIR = join11(homedir3(), "git/blog/src/content/devlog");
-function loadDevlogEntries(repoName) {
-  const entries = /* @__PURE__ */ new Map();
-  try {
-    const files = readdirSync(DEVLOG_DIR).filter((f) => f.endsWith(".md"));
-    for (const file of files) {
-      const content = readFileSync15(join11(DEVLOG_DIR, file), "utf-8");
-      const frontmatterMatch = content.match(/^---\n([\s\S]*?)\n---/);
-      if (frontmatterMatch) {
-        const frontmatter = frontmatterMatch[1];
-        const dateMatch = frontmatter.match(/date:\s*"?(\d{4}-\d{2}-\d{2})"?/);
-        const versionMatch = frontmatter.match(/version:\s*(.+)/);
-        const titleMatch = frontmatter.match(/title:\s*(.+)/);
-        const tagsMatch = frontmatter.match(/tags:\s*\[([^\]]*)\]/);
-        if (dateMatch && versionMatch && titleMatch && tagsMatch) {
-          const tags = tagsMatch[1].split(",").map((t) => t.trim());
-          const firstTag = tags[0];
-          if (firstTag !== repoName) {
-            continue;
-          }
-          const date = dateMatch[1];
-          const version2 = versionMatch[1].trim();
-          const title = titleMatch[1].trim();
-          const existing = entries.get(date) || [];
-          existing.push({ version: version2, title, filename: file });
-          entries.set(date, existing);
-        }
+// src/commands/complexity/shared/index.ts
+import fs11 from "fs";
+import path16 from "path";
+import chalk31 from "chalk";
+import ts5 from "typescript";
+
+// src/commands/complexity/findSourceFiles.ts
+import fs10 from "fs";
+import path15 from "path";
+import { minimatch as minimatch3 } from "minimatch";
+function applyIgnoreGlobs(files) {
+  const { complexity } = loadConfig();
+  return files.filter(
+    (f) => !complexity.ignore.some((glob) => minimatch3(f, glob))
+  );
+}
+function walk(dir, results) {
+  if (!fs10.existsSync(dir)) {
+    return;
+  }
+  const extensions = [".ts", ".tsx"];
+  const entries = fs10.readdirSync(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    const fullPath = path15.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (entry.name !== "node_modules" && entry.name !== ".git") {
+        walk(fullPath, results);
       }
+    } else if (entry.isFile() && extensions.some((ext) => entry.name.endsWith(ext))) {
+      results.push(fullPath);
     }
-  } catch {
   }
-  return entries;
 }
-
-// src/commands/devlog/shared.ts
-function getCommitFiles(hash) {
-  try {
-    const output = execSync13(`git show --name-only --format="" ${hash}`, {
-      encoding: "utf-8"
-    });
-    return output.trim().split("\n").filter(Boolean);
-  } catch {
-    return [];
+function findSourceFiles2(pattern2, baseDir = ".") {
+  const results = [];
+  if (pattern2.includes("*")) {
+    walk(baseDir, results);
+    return applyIgnoreGlobs(results.filter((f) => minimatch3(f, pattern2)));
+  }
+  if (fs10.existsSync(pattern2) && fs10.statSync(pattern2).isFile()) {
+    return [pattern2];
+  }
+  if (fs10.existsSync(pattern2) && fs10.statSync(pattern2).isDirectory()) {
+    walk(pattern2, results);
+    return applyIgnoreGlobs(results);
   }
+  walk(baseDir, results);
+  return applyIgnoreGlobs(results.filter((f) => minimatch3(f, pattern2)));
 }
-function shouldIgnoreCommit(files, ignorePaths) {
-  if (ignorePaths.length === 0 || files.length === 0) {
-    return false;
+
+// src/commands/complexity/shared/getNodeName.ts
+import ts from "typescript";
+var FUNCTION_TYPE_CHECKS = [
+  ts.isFunctionDeclaration,
+  ts.isFunctionExpression,
+  ts.isArrowFunction,
+  ts.isMethodDeclaration,
+  ts.isGetAccessor,
+  ts.isSetAccessor,
+  ts.isConstructorDeclaration
+];
+function getIdentifierText(name) {
+  if (ts.isIdentifier(name) || ts.isStringLiteral(name)) return name.text;
+  return "<computed>";
+}
+function getArrowFunctionName(node) {
+  const { parent } = node;
+  if (ts.isVariableDeclaration(parent) && ts.isIdentifier(parent.name))
+    return parent.name.text;
+  if (ts.isPropertyAssignment(parent) && ts.isIdentifier(parent.name))
+    return parent.name.text;
+  return "<arrow>";
+}
+function getNodeName(node) {
+  if (ts.isFunctionDeclaration(node) || ts.isFunctionExpression(node))
+    return node.name?.text ?? "<anonymous>";
+  if (ts.isMethodDeclaration(node) || ts.isMethodSignature(node))
+    return getIdentifierText(node.name);
+  if (ts.isArrowFunction(node)) return getArrowFunctionName(node);
+  if (ts.isGetAccessor(node) || ts.isSetAccessor(node)) {
+    const prefix2 = ts.isGetAccessor(node) ? "get " : "set ";
+    return `${prefix2}${getIdentifierText(node.name)}`;
   }
-  return files.every(
-    (file) => ignorePaths.some((ignorePath) => file.startsWith(ignorePath))
-  );
+  if (ts.isConstructorDeclaration(node)) return "constructor";
+  return "<unknown>";
 }
-function printCommitsWithFiles(commits, ignore2, verbose) {
-  for (const commit2 of commits) {
-    console.log(`  ${chalk37.yellow(commit2.hash)} ${commit2.message}`);
-    if (verbose) {
-      const visibleFiles = commit2.files.filter(
-        (file) => !ignore2.some((p) => file.startsWith(p))
-      );
-      for (const file of visibleFiles) {
-        console.log(`    ${chalk37.dim(file)}`);
-      }
+function hasFunctionBody(node) {
+  if (!FUNCTION_TYPE_CHECKS.some((check2) => check2(node))) return false;
+  return node.body !== void 0;
+}
+
+// src/commands/complexity/shared/calculateCyclomaticComplexity.ts
+import ts2 from "typescript";
+var complexityKinds = /* @__PURE__ */ new Set([
+  ts2.SyntaxKind.IfStatement,
+  ts2.SyntaxKind.ForStatement,
+  ts2.SyntaxKind.ForInStatement,
+  ts2.SyntaxKind.ForOfStatement,
+  ts2.SyntaxKind.WhileStatement,
+  ts2.SyntaxKind.DoStatement,
+  ts2.SyntaxKind.CaseClause,
+  ts2.SyntaxKind.CatchClause,
+  ts2.SyntaxKind.ConditionalExpression
+]);
+var logicalOperators = /* @__PURE__ */ new Set([
+  ts2.SyntaxKind.AmpersandAmpersandToken,
+  ts2.SyntaxKind.BarBarToken,
+  ts2.SyntaxKind.QuestionQuestionToken
+]);
+function calculateCyclomaticComplexity(node) {
+  let complexity = 1;
+  function visit(n) {
+    if (complexityKinds.has(n.kind)) {
+      complexity++;
+    } else if (ts2.isBinaryExpression(n) && logicalOperators.has(n.operatorToken.kind)) {
+      complexity++;
     }
+    ts2.forEachChild(n, visit);
   }
+  ts2.forEachChild(node, visit);
+  return complexity;
 }
-function parseGitLogCommits(output, ignore2, afterDate) {
-  const lines = output.trim().split("\n");
-  const commitsByDate = /* @__PURE__ */ new Map();
-  for (const line of lines) {
-    const [date, hash, ...messageParts] = line.split("|");
-    const message = messageParts.join("|");
-    if (afterDate && date <= afterDate) {
-      continue;
-    }
-    const files = getCommitFiles(hash);
-    if (!shouldIgnoreCommit(files, ignore2)) {
-      const existing = commitsByDate.get(date) || [];
-      existing.push({ date, hash, message, files });
-      commitsByDate.set(date, existing);
+
+// src/commands/complexity/shared/calculateHalstead/index.ts
+import ts4 from "typescript";
+
+// src/commands/complexity/shared/calculateHalstead/operatorChecks.ts
+import ts3 from "typescript";
+var operatorChecks = [
+  (n) => ts3.isBinaryExpression(n) ? n.operatorToken.getText() : void 0,
+  (n) => ts3.isPrefixUnaryExpression(n) || ts3.isPostfixUnaryExpression(n) ? ts3.tokenToString(n.operator) ?? "" : void 0,
+  (n) => ts3.isCallExpression(n) ? "()" : void 0,
+  (n) => ts3.isPropertyAccessExpression(n) ? "." : void 0,
+  (n) => ts3.isElementAccessExpression(n) ? "[]" : void 0,
+  (n) => ts3.isConditionalExpression(n) ? "?:" : void 0,
+  (n) => ts3.isReturnStatement(n) ? "return" : void 0,
+  (n) => ts3.isIfStatement(n) ? "if" : void 0,
+  (n) => ts3.isForStatement(n) || ts3.isForInStatement(n) || ts3.isForOfStatement(n) ? "for" : void 0,
+  (n) => ts3.isWhileStatement(n) ? "while" : void 0,
+  (n) => ts3.isDoStatement(n) ? "do" : void 0,
+  (n) => ts3.isSwitchStatement(n) ? "switch" : void 0,
+  (n) => ts3.isCaseClause(n) ? "case" : void 0,
+  (n) => ts3.isDefaultClause(n) ? "default" : void 0,
+  (n) => ts3.isBreakStatement(n) ? "break" : void 0,
+  (n) => ts3.isContinueStatement(n) ? "continue" : void 0,
+  (n) => ts3.isThrowStatement(n) ? "throw" : void 0,
+  (n) => ts3.isTryStatement(n) ? "try" : void 0,
+  (n) => ts3.isCatchClause(n) ? "catch" : void 0,
+  (n) => ts3.isNewExpression(n) ? "new" : void 0,
+  (n) => ts3.isTypeOfExpression(n) ? "typeof" : void 0,
+  (n) => ts3.isAwaitExpression(n) ? "await" : void 0
+];
+
+// src/commands/complexity/shared/calculateHalstead/index.ts
+function classifyNode(n, operators, operands) {
+  if (ts4.isIdentifier(n) || ts4.isNumericLiteral(n) || ts4.isStringLiteral(n)) {
+    operands.set(n.text, (operands.get(n.text) ?? 0) + 1);
+    return;
+  }
+  for (const check2 of operatorChecks) {
+    const op = check2(n);
+    if (op !== void 0) {
+      operators.set(op, (operators.get(op) ?? 0) + 1);
+      return;
     }
   }
-  return commitsByDate;
 }
-
-// src/commands/devlog/list/printDateHeader.ts
-import chalk38 from "chalk";
-function printDateHeader(date, isSkipped, entries) {
-  if (isSkipped) {
-    console.log(`${chalk38.bold.blue(date)} ${chalk38.dim("skipped")}`);
-  } else if (entries && entries.length > 0) {
-    const entryInfo = entries.map((e) => `${chalk38.green(e.version)} ${e.title}`).join(" | ");
-    console.log(`${chalk38.bold.blue(date)} ${entryInfo}`);
-  } else {
-    console.log(`${chalk38.bold.blue(date)} ${chalk38.red("\u26A0 devlog missing")}`);
+function computeHalsteadMetrics(operators, operands) {
+  const n1 = operators.size;
+  const n2 = operands.size;
+  const N1 = Array.from(operators.values()).reduce((a, b) => a + b, 0);
+  const N2 = Array.from(operands.values()).reduce((a, b) => a + b, 0);
+  const vocabulary = n1 + n2;
+  const length = N1 + N2;
+  const volume = length > 0 && vocabulary > 0 ? length * Math.log2(vocabulary) : 0;
+  const difficulty = n2 > 0 ? n1 / 2 * (N2 / n2) : 0;
+  const effort = volume * difficulty;
+  return {
+    length,
+    vocabulary,
+    volume,
+    difficulty,
+    effort,
+    time: effort / 18,
+    bugsDelivered: volume / 3e3
+  };
+}
+function calculateHalstead(node) {
+  const operators = /* @__PURE__ */ new Map();
+  const operands = /* @__PURE__ */ new Map();
+  function visit(n) {
+    classifyNode(n, operators, operands);
+    ts4.forEachChild(n, visit);
   }
+  ts4.forEachChild(node, visit);
+  return computeHalsteadMetrics(operators, operands);
 }
 
-// src/commands/devlog/list/index.ts
-function list3(options2) {
-  const config = loadConfig();
-  const days = options2.days ?? 30;
-  const ignore2 = options2.ignore ?? config.devlog?.ignore ?? [];
-  const skipDays = new Set(config.devlog?.skip?.days ?? []);
-  const repoName = basename3(process.cwd());
-  const devlogEntries = loadDevlogEntries(repoName);
-  const reverseFlag = options2.reverse ? "--reverse " : "";
-  const limitFlag = options2.reverse ? "" : "-n 500 ";
-  const output = execSync14(
-    `git log ${reverseFlag}${limitFlag}--pretty=format:'%ad|%h|%s' --date=short`,
-    { encoding: "utf-8" }
-  );
-  const commitsByDate = parseGitLogCommits(output, ignore2);
-  let dateCount = 0;
-  let isFirst = true;
-  for (const [date, dateCommits] of commitsByDate) {
-    if (options2.since) {
-      if (date < options2.since) {
-        break;
+// src/commands/complexity/shared/countSloc.ts
+function countSloc(content) {
+  let inMultiLineComment = false;
+  let count = 0;
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (inMultiLineComment) {
+      if (trimmed.includes("*/")) {
+        inMultiLineComment = false;
+        const afterComment = trimmed.substring(trimmed.indexOf("*/") + 2);
+        if (afterComment.trim().length > 0) {
+          count++;
+        }
       }
-    } else if (dateCount >= days) {
-      break;
+      continue;
     }
-    dateCount++;
-    if (!isFirst) {
-      console.log();
+    if (trimmed.startsWith("//")) {
+      continue;
+    }
+    if (trimmed.startsWith("/*")) {
+      if (trimmed.includes("*/")) {
+        const afterComment = trimmed.substring(trimmed.indexOf("*/") + 2);
+        if (afterComment.trim().length > 0) {
+          count++;
+        }
+      } else {
+        inMultiLineComment = true;
+      }
+      continue;
+    }
+    if (trimmed.length > 0) {
+      count++;
     }
-    isFirst = false;
-    printDateHeader(date, skipDays.has(date), devlogEntries.get(date));
-    printCommitsWithFiles(dateCommits, ignore2, options2.verbose ?? false);
   }
+  return count;
 }
 
-// src/commands/devlog/getLastVersionInfo.ts
-import { execSync as execSync15 } from "child_process";
-import semver from "semver";
-function getVersionAtCommit(hash) {
-  try {
-    const content = execSync15(`git show ${hash}:package.json`, {
-      encoding: "utf-8"
-    });
-    const pkg = JSON.parse(content);
-    return pkg.version ?? null;
-  } catch {
-    return null;
-  }
-}
-function stripToMinor(version2) {
-  const parsed = semver.parse(semver.coerce(version2));
-  return parsed ? `v${parsed.major}.${parsed.minor}` : `v${version2}`;
+// src/commands/complexity/shared/index.ts
+function createSourceFromFile(filePath) {
+  const content = fs11.readFileSync(filePath, "utf-8");
+  return ts5.createSourceFile(
+    path16.basename(filePath),
+    content,
+    ts5.ScriptTarget.Latest,
+    true,
+    filePath.endsWith(".tsx") ? ts5.ScriptKind.TSX : ts5.ScriptKind.TS
+  );
 }
-function getLastVersionInfoFromGit() {
-  try {
-    const output = execSync15(
-      "git log -1 --pretty=format:'%ad|%h' --date=short",
-      {
-        encoding: "utf-8"
-      }
-    ).trim();
-    const [date, hash] = output.split("|");
-    if (!date || !hash) return null;
-    const version2 = getVersionAtCommit(hash);
-    if (!version2) return null;
-    return { date, version: stripToMinor(version2) };
-  } catch {
-    return null;
+function withSourceFiles(pattern2, callback) {
+  const files = findSourceFiles2(pattern2);
+  if (files.length === 0) {
+    console.log(chalk31.yellow("No files found matching pattern"));
+    return void 0;
   }
+  return callback(files);
 }
-function findLastDate(entries) {
-  const dates = Array.from(entries.keys()).sort().reverse();
-  return dates[0] ?? null;
-}
-function getLastVersionInfo(repoName, config) {
-  const entries = loadDevlogEntries(repoName);
-  const lastDate = findLastDate(entries);
-  if (!lastDate) return null;
-  if (config?.commit?.conventional) {
-    const gitInfo = getLastVersionInfoFromGit();
-    if (gitInfo) return { date: lastDate, version: gitInfo.version };
+function forEachFunction(files, callback) {
+  for (const file of files) {
+    const sourceFile = createSourceFromFile(file);
+    const visit = (node) => {
+      if (hasFunctionBody(node)) {
+        callback(file, getNodeName(node), node);
+      }
+      ts5.forEachChild(node, visit);
+    };
+    visit(sourceFile);
   }
-  const lastVersion = entries.get(lastDate)?.[0]?.version;
-  return lastVersion ? { date: lastDate, version: lastVersion } : null;
-}
-function cleanVersion(version2) {
-  return semver.clean(version2) ?? semver.coerce(version2)?.version ?? null;
-}
-function bumpVersion(version2, type) {
-  const cleaned = cleanVersion(version2);
-  if (!cleaned) return version2;
-  const bumped = semver.inc(cleaned, type);
-  if (!bumped) return version2;
-  if (type === "minor") return stripToMinor(bumped);
-  return `v${bumped}`;
 }
 
-// src/commands/devlog/next/displayNextEntry/index.ts
-import { execSync as execSync16 } from "child_process";
-import chalk40 from "chalk";
+// src/commands/complexity/cyclomatic.ts
+async function cyclomatic(pattern2 = "**/*.ts", options2 = {}) {
+  withSourceFiles(pattern2, (files) => {
+    const results = [];
+    let hasViolation = false;
+    forEachFunction(files, (file, name, node) => {
+      const complexity = calculateCyclomaticComplexity(node);
+      results.push({ file, name, complexity });
+      if (options2.threshold !== void 0 && complexity > options2.threshold) {
+        hasViolation = true;
+      }
+    });
+    results.sort((a, b) => b.complexity - a.complexity);
+    for (const { file, name, complexity } of results) {
+      const exceedsThreshold = options2.threshold !== void 0 && complexity > options2.threshold;
+      const color = exceedsThreshold ? chalk32.red : chalk32.white;
+      console.log(`${color(`${file}:${name}`)} \u2192 ${chalk32.cyan(complexity)}`);
+    }
+    console.log(
+      chalk32.dim(
+        `
+Analyzed ${results.length} functions across ${files.length} files`
+      )
+    );
+    if (hasViolation) {
+      process.exit(1);
+    }
+  });
+}
 
-// src/commands/devlog/next/displayNextEntry/displayVersion.ts
-import chalk39 from "chalk";
-function displayVersion(conventional, firstHash, patchVersion, minorVersion) {
-  if (conventional && firstHash) {
-    const version2 = getVersionAtCommit(firstHash);
-    if (version2) {
-      console.log(`${chalk39.bold("version:")} ${stripToMinor(version2)}`);
-    } else {
-      console.log(`${chalk39.bold("version:")} ${chalk39.red("unknown")}`);
+// src/commands/complexity/halstead.ts
+import chalk33 from "chalk";
+async function halstead(pattern2 = "**/*.ts", options2 = {}) {
+  withSourceFiles(pattern2, (files) => {
+    const results = [];
+    let hasViolation = false;
+    forEachFunction(files, (file, name, node) => {
+      const metrics = calculateHalstead(node);
+      results.push({ file, name, metrics });
+      if (options2.threshold !== void 0 && metrics.volume > options2.threshold) {
+        hasViolation = true;
+      }
+    });
+    results.sort((a, b) => b.metrics.effort - a.metrics.effort);
+    for (const { file, name, metrics } of results) {
+      const exceedsThreshold = options2.threshold !== void 0 && metrics.volume > options2.threshold;
+      const color = exceedsThreshold ? chalk33.red : chalk33.white;
+      console.log(
+        `${color(`${file}:${name}`)} \u2192 volume: ${chalk33.cyan(metrics.volume.toFixed(1))}, difficulty: ${chalk33.yellow(metrics.difficulty.toFixed(1))}, effort: ${chalk33.magenta(metrics.effort.toFixed(1))}`
+      );
     }
-  } else if (patchVersion && minorVersion) {
     console.log(
-      `${chalk39.bold("version:")} ${patchVersion} (patch) or ${minorVersion} (minor)`
+      chalk33.dim(
+        `
+Analyzed ${results.length} functions across ${files.length} files`
+      )
     );
+    if (hasViolation) {
+      process.exit(1);
+    }
+  });
+}
+
+// src/commands/complexity/maintainability/index.ts
+import fs12 from "fs";
+
+// src/commands/complexity/maintainability/displayMaintainabilityResults.ts
+import chalk34 from "chalk";
+function displayMaintainabilityResults(results, threshold) {
+  const filtered = threshold !== void 0 ? results.filter((r) => r.minMaintainability < threshold) : results;
+  if (threshold !== void 0 && filtered.length === 0) {
+    console.log(chalk34.green("All files pass maintainability threshold"));
   } else {
-    console.log(`${chalk39.bold("version:")} v0.1 (initial)`);
+    for (const { file, avgMaintainability, minMaintainability } of filtered) {
+      const color = threshold !== void 0 ? chalk34.red : chalk34.white;
+      console.log(
+        `${color(file)} \u2192 avg: ${chalk34.cyan(avgMaintainability.toFixed(1))}, min: ${chalk34.yellow(minMaintainability.toFixed(1))}`
+      );
+    }
   }
-}
+  console.log(chalk34.dim(`
+Analyzed ${results.length} files`));
+  if (filtered.length > 0 && threshold !== void 0) {
+    console.error(
+      chalk34.red(
+        `
+Fail: ${filtered.length} file(s) below threshold ${threshold}. Maintainability index (0\u2013100) is derived from Halstead volume, cyclomatic complexity, and lines of code.
 
-// src/commands/devlog/next/displayNextEntry/index.ts
-function computeVersions(lastInfo) {
-  if (!lastInfo) return { patch: null, minor: null };
-  return {
-    patch: bumpVersion(lastInfo.version, "patch"),
-    minor: bumpVersion(lastInfo.version, "minor")
-  };
-}
-function findTargetDate(commitsByDate, skipDays) {
-  return Array.from(commitsByDate.keys()).filter((d) => !skipDays.has(d)).sort()[0];
-}
-function fetchCommitsByDate(ignore2, lastDate) {
-  const output = execSync16(
-    "git log --pretty=format:'%ad|%h|%s' --date=short -n 500",
-    { encoding: "utf-8" }
-  );
-  return parseGitLogCommits(output, ignore2, lastDate);
-}
-function printVersionInfo(config, lastInfo, firstHash) {
-  const versions = computeVersions(lastInfo);
-  displayVersion(
-    !!config.commit?.conventional,
-    firstHash,
-    versions.patch,
-    versions.minor
-  );
-}
-function resolveIgnoreList(options2, config) {
-  return options2.ignore ?? config.devlog?.ignore ?? [];
-}
-function resolveSkipDays(config) {
-  return new Set(config.devlog?.skip?.days ?? []);
-}
-function getLastDate(lastInfo) {
-  return lastInfo?.date ?? null;
-}
-function getCommitsForDate(commitsByDate, date) {
-  return commitsByDate.get(date) ?? [];
-}
-function noCommitsMessage(hasLastInfo) {
-  return hasLastInfo ? "No commits after last versioned entry" : "No commits found";
-}
-function logName(repoName) {
-  console.log(`${chalk40.bold("name:")} ${repoName}`);
-}
-function displayNextEntry(ctx, targetDate, commits) {
-  logName(ctx.repoName);
-  printVersionInfo(ctx.config, ctx.lastInfo, commits[0]?.hash);
-  console.log(chalk40.bold.blue(targetDate));
-  printCommitsWithFiles(commits, ctx.ignore, ctx.verbose);
-}
-function logNoCommits(lastInfo) {
-  console.log(chalk40.dim(noCommitsMessage(!!lastInfo)));
+\u26A0\uFE0F  ${chalk34.bold("Diagnose and fix one file at a time")} \u2014 do not investigate or fix multiple files in parallel. Run 'assist complexity <file>' to see all metrics. For larger files, start by extracting responsibilities into smaller files.`
+      )
+    );
+    process.exit(1);
+  }
 }
 
-// src/commands/devlog/next/index.ts
-function resolveContextData(config, options2) {
-  const repoName = getRepoName();
-  const lastInfo = getLastVersionInfo(repoName, config);
-  return { repoName, lastInfo, ignore: resolveIgnoreList(options2, config) };
-}
-function buildContext(options2) {
-  const config = loadConfig();
-  const data = resolveContextData(config, options2);
-  return { config, ...data, verbose: options2.verbose ?? false };
+// src/commands/complexity/maintainability/index.ts
+function calculateMaintainabilityIndex(halsteadVolume, cyclomaticComplexity, sloc2) {
+  if (halsteadVolume === 0 || sloc2 === 0) {
+    return 100;
+  }
+  const mi = 171 - 5.2 * Math.log(halsteadVolume) - 0.23 * cyclomaticComplexity - 16.2 * Math.log(sloc2);
+  return Math.max(0, Math.min(100, mi));
 }
-function fetchNextCommits(ctx) {
-  const commitsByDate = fetchCommitsByDate(
-    ctx.ignore,
-    getLastDate(ctx.lastInfo)
-  );
-  const targetDate = findTargetDate(commitsByDate, resolveSkipDays(ctx.config));
-  return targetDate ? { targetDate, commits: getCommitsForDate(commitsByDate, targetDate) } : null;
+function collectFileMetrics(files) {
+  const fileMetrics = /* @__PURE__ */ new Map();
+  for (const file of files) {
+    const content = fs12.readFileSync(file, "utf-8");
+    fileMetrics.set(file, { sloc: countSloc(content), functions: [] });
+  }
+  forEachFunction(files, (file, _name, node) => {
+    const metrics = fileMetrics.get(file);
+    if (metrics) {
+      const complexity = calculateCyclomaticComplexity(node);
+      const halstead2 = calculateHalstead(node);
+      const mi = calculateMaintainabilityIndex(
+        halstead2.volume,
+        complexity,
+        metrics.sloc
+      );
+      metrics.functions.push(mi);
+    }
+  });
+  return fileMetrics;
 }
-function showResult(ctx, found) {
-  if (!found) {
-    logNoCommits(ctx.lastInfo);
-    return;
+function aggregateResults(fileMetrics) {
+  const results = [];
+  for (const [file, metrics] of fileMetrics) {
+    if (metrics.functions.length === 0) continue;
+    const avgMaintainability = metrics.functions.reduce((a, b) => a + b, 0) / metrics.functions.length;
+    const minMaintainability = Math.min(...metrics.functions);
+    results.push({ file, avgMaintainability, minMaintainability });
   }
-  displayNextEntry(ctx, found.targetDate, found.commits);
+  results.sort((a, b) => a.minMaintainability - b.minMaintainability);
+  return results;
 }
-function next(options2) {
-  const ctx = buildContext(options2);
-  showResult(ctx, fetchNextCommits(ctx));
+async function maintainability(pattern2 = "**/*.ts", options2 = {}) {
+  withSourceFiles(pattern2, (files) => {
+    const fileMetrics = collectFileMetrics(files);
+    const results = aggregateResults(fileMetrics);
+    displayMaintainabilityResults(results, options2.threshold);
+  });
 }
 
-// src/commands/devlog/skip.ts
-import chalk41 from "chalk";
-function skip(date) {
-  if (!/^\d{4}-\d{2}-\d{2}$/.test(date)) {
-    console.log(chalk41.red("Invalid date format. Use YYYY-MM-DD"));
-    process.exit(1);
+// src/commands/complexity/sloc.ts
+import fs13 from "fs";
+import chalk35 from "chalk";
+async function sloc(pattern2 = "**/*.ts", options2 = {}) {
+  withSourceFiles(pattern2, (files) => {
+    const results = [];
+    let hasViolation = false;
+    for (const file of files) {
+      const content = fs13.readFileSync(file, "utf-8");
+      const lines = countSloc(content);
+      results.push({ file, lines });
+      if (options2.threshold !== void 0 && lines > options2.threshold) {
+        hasViolation = true;
+      }
+    }
+    results.sort((a, b) => b.lines - a.lines);
+    for (const { file, lines } of results) {
+      const exceedsThreshold = options2.threshold !== void 0 && lines > options2.threshold;
+      const color = exceedsThreshold ? chalk35.red : chalk35.white;
+      console.log(`${color(file)} \u2192 ${chalk35.cyan(lines)} lines`);
+    }
+    const total = results.reduce((sum, r) => sum + r.lines, 0);
+    console.log(
+      chalk35.dim(`
+Total: ${total} lines across ${files.length} files`)
+    );
+    if (hasViolation) {
+      process.exit(1);
+    }
+  });
+}
+
+// src/commands/complexity/analyze.ts
+async function analyze(pattern2) {
+  const searchPattern = pattern2.includes("*") || pattern2.includes("/") ? pattern2 : `**/${pattern2}`;
+  const files = findSourceFiles2(searchPattern);
+  if (files.length === 0) {
+    console.log(chalk36.yellow("No files found matching pattern"));
+    return;
   }
-  const config = loadProjectConfig();
-  const devlog = config.devlog ?? {};
-  const skip2 = devlog.skip ?? {};
-  const skipDays = skip2.days ?? [];
-  if (skipDays.includes(date)) {
-    console.log(chalk41.yellow(`${date} is already in skip list`));
+  if (files.length === 1) {
+    const file = files[0];
+    console.log(chalk36.bold.underline("SLOC"));
+    await sloc(file);
+    console.log();
+    console.log(chalk36.bold.underline("Cyclomatic Complexity"));
+    await cyclomatic(file);
+    console.log();
+    console.log(chalk36.bold.underline("Halstead Metrics"));
+    await halstead(file);
+    console.log();
+    console.log(chalk36.bold.underline("Maintainability Index"));
+    await maintainability(file);
     return;
   }
-  skipDays.push(date);
-  skipDays.sort();
-  skip2.days = skipDays;
-  devlog.skip = skip2;
-  config.devlog = devlog;
-  saveConfig(config);
-  console.log(chalk41.green(`Added ${date} to skip list`));
-}
-
-// src/commands/devlog/version.ts
-import chalk42 from "chalk";
-function version() {
-  const config = loadConfig();
-  const name = getRepoName();
-  const lastInfo = getLastVersionInfo(name, config);
-  const lastVersion = lastInfo?.version ?? null;
-  const nextVersion = lastVersion ? bumpVersion(lastVersion, "patch") : null;
-  console.log(`${chalk42.bold("name:")} ${name}`);
-  console.log(`${chalk42.bold("last:")} ${lastVersion ?? chalk42.dim("none")}`);
-  console.log(`${chalk42.bold("next:")} ${nextVersion ?? chalk42.dim("none")}`);
+  await maintainability(searchPattern);
 }
 
-// src/commands/registerDevlog.ts
-function registerDevlog(program2) {
-  const devlogCommand = program2.command("devlog").description("Development log utilities");
-  devlogCommand.command("list").description("Group git commits by date").option(
-    "--days <number>",
-    "Number of days to show (default: 30)",
+// src/commands/registerComplexity.ts
+function registerComplexity(program2) {
+  const complexityCommand = program2.command("complexity").description("Analyze TypeScript code complexity metrics").argument("[pattern]").action((pattern2) => {
+    if (!pattern2) {
+      complexityCommand.help();
+      return;
+    }
+    return analyze(pattern2);
+  });
+  complexityCommand.command("cyclomatic [pattern]").description("Calculate cyclomatic complexity per function").option("--threshold <number>", "Max complexity threshold", Number.parseInt).action(cyclomatic);
+  complexityCommand.command("halstead [pattern]").description("Calculate Halstead metrics per function").option("--threshold <number>", "Max volume threshold", Number.parseInt).action(halstead);
+  complexityCommand.command("maintainability [pattern]").description("Calculate maintainability index per file").option(
+    "--threshold <number>",
+    "Min maintainability threshold",
     Number.parseInt
-  ).option("--since <date>", "Only show commits since this date (YYYY-MM-DD)").option("-r, --reverse", "Show earliest commits first").option("-v, --verbose", "Show file names for each commit").action(list3);
-  devlogCommand.command("version").description("Show current repo name and version info").action(version);
-  devlogCommand.command("next").description("Show commits for the day after the last versioned entry").option("-v, --verbose", "Show file names for each commit").action(next);
-  devlogCommand.command("skip <date>").description("Add a date (YYYY-MM-DD) to the skip list").action(skip);
+  ).action(maintainability);
+  complexityCommand.command("sloc [pattern]").description("Count source lines of code per file").option("--threshold <number>", "Max lines threshold", Number.parseInt).action(sloc);
 }
 
-// src/commands/permitCliReads/index.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync4, readFileSync as readFileSync16, writeFileSync as writeFileSync14 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join12 } from "path";
-
-// src/shared/getInstallDir.ts
-import { execSync as execSync17 } from "child_process";
-import { dirname as dirname13, resolve as resolve3 } from "path";
-import { fileURLToPath as fileURLToPath5 } from "url";
-var __filename3 = fileURLToPath5(import.meta.url);
-var __dirname6 = dirname13(__filename3);
-function getInstallDir() {
-  return resolve3(__dirname6, "..");
-}
-function isGitRepo(dir) {
-  try {
-    const result = execSync17("git rev-parse --show-toplevel", {
-      cwd: dir,
-      stdio: "pipe"
-    }).toString().trim();
-    return resolve3(result) === resolve3(dir);
-  } catch {
-    return false;
+// src/commands/deploy/redirect.ts
+import { existsSync as existsSync19, readFileSync as readFileSync16, writeFileSync as writeFileSync14 } from "fs";
+import chalk37 from "chalk";
+var TRAILING_SLASH_SCRIPT = `    <script>
+      if (!window.location.pathname.endsWith('/')) {
+        window.location.href = \`\${window.location.pathname}/\${window.location.search}\${window.location.hash}\`;
+      }
+    </script>`;
+function redirect() {
+  const indexPath = "index.html";
+  if (!existsSync19(indexPath)) {
+    console.log(chalk37.yellow("No index.html found"));
+    return;
   }
-}
-
-// src/commands/permitCliReads/assertCliExists.ts
-import { execSync as execSync18 } from "child_process";
-function assertCliExists(cli) {
-  const binary = cli.split(/\s+/)[0];
-  const opts = {
-    encoding: "utf-8",
-    stdio: ["ignore", "pipe", "pipe"]
-  };
-  try {
-    execSync18(`command -v ${binary}`, opts);
-  } catch {
-    try {
-      execSync18(`where ${binary}`, opts);
-    } catch {
-      console.error(`CLI "${cli}" not found in PATH`);
-      process.exit(1);
-    }
+  const content = readFileSync16(indexPath, "utf-8");
+  if (content.includes("window.location.pathname.endsWith('/')")) {
+    console.log(chalk37.dim("Trailing slash script already present"));
+    return;
   }
+  const headCloseIndex = content.indexOf("</head>");
+  if (headCloseIndex === -1) {
+    console.log(chalk37.red("Could not find </head> tag in index.html"));
+    return;
+  }
+  const newContent = content.slice(0, headCloseIndex) + TRAILING_SLASH_SCRIPT + "\n  " + content.slice(headCloseIndex);
+  writeFileSync14(indexPath, newContent);
+  console.log(chalk37.green("Added trailing slash redirect to index.html"));
 }
 
-// src/commands/permitCliReads/colorize.ts
-import chalk43 from "chalk";
-function colorize(plainOutput) {
-  return plainOutput.split("\n").map((line) => {
-    if (line.startsWith(" R  ")) return chalk43.green(line);
-    if (line.startsWith(" W  ")) return chalk43.red(line);
-    return line;
-  }).join("\n");
+// src/commands/registerDeploy.ts
+function registerDeploy(program2) {
+  const deployCommand = program2.command("deploy").description("Netlify deployment utilities");
+  deployCommand.command("init").description("Initialize Netlify project and configure deployment").action(init5);
+  deployCommand.command("redirect").description("Add trailing slash redirect script to index.html").action(redirect);
 }
 
-// src/lib/isClaudeCode.ts
-function isClaudeCode() {
-  return process.env.CLAUDECODE !== void 0;
-}
+// src/commands/devlog/list/index.ts
+import { execSync as execSync16 } from "child_process";
+import { basename as basename3 } from "path";
 
-// src/commands/permitCliReads/mapAsync.ts
-async function mapAsync(items, concurrency, fn) {
-  const results = new Array(items.length);
-  let next2 = 0;
-  async function worker() {
-    while (next2 < items.length) {
-      const idx = next2++;
-      results[idx] = await fn(items[idx]);
+// src/commands/devlog/shared.ts
+import { execSync as execSync15 } from "child_process";
+import chalk38 from "chalk";
+
+// src/commands/devlog/loadDevlogEntries.ts
+import { readdirSync, readFileSync as readFileSync17 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join13 } from "path";
+var DEVLOG_DIR = join13(homedir5(), "git/blog/src/content/devlog");
+function loadDevlogEntries(repoName) {
+  const entries = /* @__PURE__ */ new Map();
+  try {
+    const files = readdirSync(DEVLOG_DIR).filter((f) => f.endsWith(".md"));
+    for (const file of files) {
+      const content = readFileSync17(join13(DEVLOG_DIR, file), "utf-8");
+      const frontmatterMatch = content.match(/^---\n([\s\S]*?)\n---/);
+      if (frontmatterMatch) {
+        const frontmatter = frontmatterMatch[1];
+        const dateMatch = frontmatter.match(/date:\s*"?(\d{4}-\d{2}-\d{2})"?/);
+        const versionMatch = frontmatter.match(/version:\s*(.+)/);
+        const titleMatch = frontmatter.match(/title:\s*(.+)/);
+        const tagsMatch = frontmatter.match(/tags:\s*\[([^\]]*)\]/);
+        if (dateMatch && versionMatch && titleMatch && tagsMatch) {
+          const tags = tagsMatch[1].split(",").map((t) => t.trim());
+          const firstTag = tags[0];
+          if (firstTag !== repoName) {
+            continue;
+          }
+          const date = dateMatch[1];
+          const version2 = versionMatch[1].trim();
+          const title = titleMatch[1].trim();
+          const existing = entries.get(date) || [];
+          existing.push({ version: version2, title, filename: file });
+          entries.set(date, existing);
+        }
+      }
     }
+  } catch {
   }
-  const workers = Array.from(
-    { length: Math.min(concurrency, items.length) },
-    () => worker()
-  );
-  await Promise.all(workers);
-  return results;
+  return entries;
 }
 
-// src/commands/permitCliReads/parseCommands.ts
-var COMMAND_SECTION_RE = /^((?:core |general |available |additional |other |management |targeted |alias |github actions )?(?:commands|subgroups)):?$/i;
-function isSkippable(name) {
-  return name.startsWith("-") || name.startsWith("<") || name.startsWith("[");
-}
-function parseCommandLine(trimmed) {
-  const azMatch = trimmed.match(/^(\S+)\s+(?:\[.*?]\s+)?:\s*(.+)/);
-  if (azMatch && !isSkippable(azMatch[1])) {
-    return { name: azMatch[1], description: azMatch[2].trim() };
-  }
-  const colonMatch = trimmed.match(/^(\S+?):\s{2,}(.+)/);
-  if (colonMatch && !isSkippable(colonMatch[1])) {
-    return { name: colonMatch[1], description: colonMatch[2].trim() };
+// src/commands/devlog/shared.ts
+function getCommitFiles(hash) {
+  try {
+    const output = execSync15(`git show --name-only --format="" ${hash}`, {
+      encoding: "utf-8"
+    });
+    return output.trim().split("\n").filter(Boolean);
+  } catch {
+    return [];
   }
-  const spaceMatch = trimmed.match(/^(\S+)(?:,\s*\S+)?\s{2,}(.+)/);
-  if (spaceMatch && !isSkippable(spaceMatch[1])) {
-    return { name: spaceMatch[1], description: spaceMatch[2].trim() };
+}
+function shouldIgnoreCommit(files, ignorePaths) {
+  if (ignorePaths.length === 0 || files.length === 0) {
+    return false;
   }
-  if (/^\S+$/.test(trimmed) && !isSkippable(trimmed)) {
-    return { name: trimmed, description: "" };
+  return files.every(
+    (file) => ignorePaths.some((ignorePath) => file.startsWith(ignorePath))
+  );
+}
+function printCommitsWithFiles(commits, ignore2, verbose) {
+  for (const commit2 of commits) {
+    console.log(`  ${chalk38.yellow(commit2.hash)} ${commit2.message}`);
+    if (verbose) {
+      const visibleFiles = commit2.files.filter(
+        (file) => !ignore2.some((p) => file.startsWith(p))
+      );
+      for (const file of visibleFiles) {
+        console.log(`    ${chalk38.dim(file)}`);
+      }
+    }
   }
-  return void 0;
 }
-function parseCommands(helpText) {
-  const commands = [];
-  let inCommandSection = false;
-  for (const line of helpText.split("\n")) {
-    const trimmed = line.trim();
-    if (COMMAND_SECTION_RE.test(trimmed)) {
-      inCommandSection = true;
+function parseGitLogCommits(output, ignore2, afterDate) {
+  const lines = output.trim().split("\n");
+  const commitsByDate = /* @__PURE__ */ new Map();
+  for (const line of lines) {
+    const [date, hash, ...messageParts] = line.split("|");
+    const message = messageParts.join("|");
+    if (afterDate && date <= afterDate) {
       continue;
     }
-    if (inCommandSection && trimmed && !line.startsWith(" ") && !line.startsWith("	")) {
-      inCommandSection = false;
-      continue;
+    const files = getCommitFiles(hash);
+    if (!shouldIgnoreCommit(files, ignore2)) {
+      const existing = commitsByDate.get(date) || [];
+      existing.push({ date, hash, message, files });
+      commitsByDate.set(date, existing);
     }
-    if (!inCommandSection || !trimmed) continue;
-    if (trimmed.startsWith("-") || trimmed.startsWith("=")) continue;
-    const parsed = parseCommandLine(trimmed);
-    if (parsed) commands.push(parsed);
   }
-  return commands;
+  return commitsByDate;
 }
-var COMMAND_SECTION_MULTILINE_RE = new RegExp(
-  COMMAND_SECTION_RE.source,
-  "im"
-);
-function hasSubcommands(helpText) {
-  return COMMAND_SECTION_MULTILINE_RE.test(helpText);
+
+// src/commands/devlog/list/printDateHeader.ts
+import chalk39 from "chalk";
+function printDateHeader(date, isSkipped, entries) {
+  if (isSkipped) {
+    console.log(`${chalk39.bold.blue(date)} ${chalk39.dim("skipped")}`);
+  } else if (entries && entries.length > 0) {
+    const entryInfo = entries.map((e) => `${chalk39.green(e.version)} ${e.title}`).join(" | ");
+    console.log(`${chalk39.bold.blue(date)} ${entryInfo}`);
+  } else {
+    console.log(`${chalk39.bold.blue(date)} ${chalk39.red("\u26A0 devlog missing")}`);
+  }
 }
 
-// src/commands/permitCliReads/runHelp.ts
-import { exec as exec2 } from "child_process";
-function runHelp(args) {
-  return new Promise((resolve5) => {
-    exec2(
-      `${args.join(" ")} --help`,
-      { encoding: "utf-8", timeout: 3e4 },
-      (_err, stdout, stderr) => {
-        resolve5(stdout || stderr || "");
+// src/commands/devlog/list/index.ts
+function list3(options2) {
+  const config = loadConfig();
+  const days = options2.days ?? 30;
+  const ignore2 = options2.ignore ?? config.devlog?.ignore ?? [];
+  const skipDays = new Set(config.devlog?.skip?.days ?? []);
+  const repoName = basename3(process.cwd());
+  const devlogEntries = loadDevlogEntries(repoName);
+  const reverseFlag = options2.reverse ? "--reverse " : "";
+  const limitFlag = options2.reverse ? "" : "-n 500 ";
+  const output = execSync16(
+    `git log ${reverseFlag}${limitFlag}--pretty=format:'%ad|%h|%s' --date=short`,
+    { encoding: "utf-8" }
+  );
+  const commitsByDate = parseGitLogCommits(output, ignore2);
+  let dateCount = 0;
+  let isFirst = true;
+  for (const [date, dateCommits] of commitsByDate) {
+    if (options2.since) {
+      if (date < options2.since) {
+        break;
       }
-    );
-  });
+    } else if (dateCount >= days) {
+      break;
+    }
+    dateCount++;
+    if (!isFirst) {
+      console.log();
+    }
+    isFirst = false;
+    printDateHeader(date, skipDays.has(date), devlogEntries.get(date));
+    printCommitsWithFiles(dateCommits, ignore2, options2.verbose ?? false);
+  }
 }
 
-// src/commands/permitCliReads/discoverAll.ts
-var SAFETY_DEPTH = 10;
-var CONCURRENCY = 8;
-var interactive = !isClaudeCode();
-function showProgress(p, label2) {
-  if (!interactive) return;
-  const pct = Math.round(p.done / p.total * 100);
-  process.stderr.write(`\r\x1B[K[${pct}%] Scanning ${label2}...`);
-}
-async function resolveCommand(cli, path31, description, depth, p) {
-  showProgress(p, path31.join(" "));
-  const subHelp = await runHelp([cli, ...path31]);
-  if (!subHelp || !hasSubcommands(subHelp)) {
-    return [{ path: path31, description }];
+// src/commands/devlog/getLastVersionInfo.ts
+import { execSync as execSync17 } from "child_process";
+import semver from "semver";
+function getVersionAtCommit(hash) {
+  try {
+    const content = execSync17(`git show ${hash}:package.json`, {
+      encoding: "utf-8"
+    });
+    const pkg = JSON.parse(content);
+    return pkg.version ?? null;
+  } catch {
+    return null;
   }
-  const children = await discoverAt(cli, path31, depth + 1, p);
-  return children.length > 0 ? children : [{ path: path31, description }];
-}
-async function discoverAt(cli, parentPath, depth, p) {
-  if (depth > SAFETY_DEPTH) return [];
-  const helpText = await runHelp([cli, ...parentPath]);
-  if (!helpText) return [];
-  const cmds = parseCommands(helpText);
-  const results = await mapAsync(
-    cmds,
-    CONCURRENCY,
-    (cmd) => resolveCommand(cli, [...parentPath, cmd.name], cmd.description, depth, p)
-  );
-  return results.flat();
-}
-async function discoverAll(cli) {
-  const topLevel = parseCommands(await runHelp([cli]));
-  const p = { done: 0, total: topLevel.length };
-  const results = await mapAsync(topLevel, CONCURRENCY, async (cmd) => {
-    showProgress(p, cmd.name);
-    const resolved = await resolveCommand(
-      cli,
-      [cmd.name],
-      cmd.description,
-      1,
-      p
-    );
-    p.done++;
-    showProgress(p, cmd.name);
-    return resolved;
-  });
-  if (interactive) process.stderr.write("\r\x1B[K");
-  return results.flat();
 }
-
-// src/commands/permitCliReads/classifyVerb.ts
-var READ_VERBS = /* @__PURE__ */ new Set([
-  "list",
-  "show",
-  "view",
-  "export",
-  "get",
-  "diff",
-  "status",
-  "search",
-  "checks",
-  "describe",
-  "inspect",
-  "logs",
-  "cat",
-  "top",
-  "explain",
-  "exists",
-  "browse",
-  "watch"
-]);
-var WRITE_VERBS = /* @__PURE__ */ new Set([
-  "create",
-  "delete",
-  "import",
-  "set",
-  "update",
-  "merge",
-  "close",
-  "reopen",
-  "edit",
-  "apply",
-  "patch",
-  "drain",
-  "cordon",
-  "taint",
-  "push",
-  "deploy",
-  "add",
-  "remove",
-  "assign",
-  "unassign",
-  "lock",
-  "unlock",
-  "start",
-  "stop",
-  "restart",
-  "enable",
-  "disable",
-  "revoke",
-  "rotate"
-]);
-function classifyVerb(verb) {
-  if (READ_VERBS.has(verb)) return "r";
-  if (WRITE_VERBS.has(verb)) return "w";
-  return "?";
+function stripToMinor(version2) {
+  const parsed = semver.parse(semver.coerce(version2));
+  return parsed ? `v${parsed.major}.${parsed.minor}` : `v${version2}`;
 }
-
-// src/commands/permitCliReads/formatHuman.ts
-function prefix(kind) {
-  if (kind === "r") return " R  ";
-  if (kind === "w") return " W  ";
-  return " ?  ";
+function getLastVersionInfoFromGit() {
+  try {
+    const output = execSync17(
+      "git log -1 --pretty=format:'%ad|%h' --date=short",
+      {
+        encoding: "utf-8"
+      }
+    ).trim();
+    const [date, hash] = output.split("|");
+    if (!date || !hash) return null;
+    const version2 = getVersionAtCommit(hash);
+    if (!version2) return null;
+    return { date, version: stripToMinor(version2) };
+  } catch {
+    return null;
+  }
 }
-function formatHuman(cli, commands) {
-  const sorted = [...commands].sort(
-    (a, b) => a.path.join(" ").localeCompare(b.path.join(" "))
-  );
-  const lines = [`Discovered ${commands.length} commands for "${cli}":
-`];
-  for (const cmd of sorted) {
-    const verb = cmd.path[cmd.path.length - 1];
-    const full = `${cli} ${cmd.path.join(" ")}`;
-    const text = cmd.description ? `${full} \u2014 ${cmd.description}` : full;
-    lines.push(`${prefix(classifyVerb(verb))}${text}`);
+function findLastDate(entries) {
+  const dates = Array.from(entries.keys()).sort().reverse();
+  return dates[0] ?? null;
+}
+function getLastVersionInfo(repoName, config) {
+  const entries = loadDevlogEntries(repoName);
+  const lastDate = findLastDate(entries);
+  if (!lastDate) return null;
+  if (config?.commit?.conventional) {
+    const gitInfo = getLastVersionInfoFromGit();
+    if (gitInfo) return { date: lastDate, version: gitInfo.version };
   }
-  return lines.join("\n");
+  const lastVersion = entries.get(lastDate)?.[0]?.version;
+  return lastVersion ? { date: lastDate, version: lastVersion } : null;
+}
+function cleanVersion(version2) {
+  return semver.clean(version2) ?? semver.coerce(version2)?.version ?? null;
+}
+function bumpVersion(version2, type) {
+  const cleaned = cleanVersion(version2);
+  if (!cleaned) return version2;
+  const bumped = semver.inc(cleaned, type);
+  if (!bumped) return version2;
+  if (type === "minor") return stripToMinor(bumped);
+  return `v${bumped}`;
 }
 
-// src/commands/permitCliReads/parseCached.ts
-function parseCached(cli, cached) {
-  const prefix2 = `${cli} `;
-  const commands = [];
-  for (const line of cached.split("\n")) {
-    const trimmed = line.replace(/^ [RW?] {2}/, "").trim();
-    if (!trimmed.startsWith(prefix2)) continue;
-    const rest = trimmed.slice(prefix2.length);
-    const dashIdx = rest.indexOf(" \u2014 ");
-    const pathStr = dashIdx >= 0 ? rest.slice(0, dashIdx) : rest;
-    const description = dashIdx >= 0 ? rest.slice(dashIdx + 3) : "";
-    commands.push({ path: pathStr.split(" "), description });
+// src/commands/devlog/next/displayNextEntry/index.ts
+import { execSync as execSync18 } from "child_process";
+import chalk41 from "chalk";
+
+// src/commands/devlog/next/displayNextEntry/displayVersion.ts
+import chalk40 from "chalk";
+function displayVersion(conventional, firstHash, patchVersion, minorVersion) {
+  if (conventional && firstHash) {
+    const version2 = getVersionAtCommit(firstHash);
+    if (version2) {
+      console.log(`${chalk40.bold("version:")} ${stripToMinor(version2)}`);
+    } else {
+      console.log(`${chalk40.bold("version:")} ${chalk40.red("unknown")}`);
+    }
+  } else if (patchVersion && minorVersion) {
+    console.log(
+      `${chalk40.bold("version:")} ${patchVersion} (patch) or ${minorVersion} (minor)`
+    );
+  } else {
+    console.log(`${chalk40.bold("version:")} v0.1 (initial)`);
   }
-  return commands;
 }
 
-// src/commands/permitCliReads/updateSettings.ts
-function updateSettings(cli, commands) {
-  const existing = loadCliReads();
-  const readEntries = commands.filter((cmd) => classifyVerb(cmd.path[cmd.path.length - 1]) === "r").map((cmd) => `${cli} ${cmd.path.join(" ")}`);
-  const merged = [.../* @__PURE__ */ new Set([...existing, ...readEntries])].sort();
-  if (merged.length === existing.length && merged.every((e, i) => e === existing[i]))
-    return;
-  saveCliReads(merged);
+// src/commands/devlog/next/displayNextEntry/index.ts
+function computeVersions(lastInfo) {
+  if (!lastInfo) return { patch: null, minor: null };
+  return {
+    patch: bumpVersion(lastInfo.version, "patch"),
+    minor: bumpVersion(lastInfo.version, "minor")
+  };
+}
+function findTargetDate(commitsByDate, skipDays) {
+  return Array.from(commitsByDate.keys()).filter((d) => !skipDays.has(d)).sort()[0];
+}
+function fetchCommitsByDate(ignore2, lastDate) {
+  const output = execSync18(
+    "git log --pretty=format:'%ad|%h|%s' --date=short -n 500",
+    { encoding: "utf-8" }
+  );
+  return parseGitLogCommits(output, ignore2, lastDate);
+}
+function printVersionInfo(config, lastInfo, firstHash) {
+  const versions = computeVersions(lastInfo);
+  displayVersion(
+    !!config.commit?.conventional,
+    firstHash,
+    versions.patch,
+    versions.minor
+  );
+}
+function resolveIgnoreList(options2, config) {
+  return options2.ignore ?? config.devlog?.ignore ?? [];
+}
+function resolveSkipDays(config) {
+  return new Set(config.devlog?.skip?.days ?? []);
+}
+function getLastDate(lastInfo) {
+  return lastInfo?.date ?? null;
+}
+function getCommitsForDate(commitsByDate, date) {
+  return commitsByDate.get(date) ?? [];
+}
+function noCommitsMessage(hasLastInfo) {
+  return hasLastInfo ? "No commits after last versioned entry" : "No commits found";
+}
+function logName(repoName) {
+  console.log(`${chalk41.bold("name:")} ${repoName}`);
+}
+function displayNextEntry(ctx, targetDate, commits) {
+  logName(ctx.repoName);
+  printVersionInfo(ctx.config, ctx.lastInfo, commits[0]?.hash);
+  console.log(chalk41.bold.blue(targetDate));
+  printCommitsWithFiles(commits, ctx.ignore, ctx.verbose);
+}
+function logNoCommits(lastInfo) {
+  console.log(chalk41.dim(noCommitsMessage(!!lastInfo)));
 }
 
-// src/commands/permitCliReads/index.ts
-function logPath(cli) {
-  const safeName = cli.replace(/\s+/g, "-");
-  return join12(homedir4(), ".assist", `cli-discover-${safeName}.log`);
+// src/commands/devlog/next/index.ts
+function resolveContextData(config, options2) {
+  const repoName = getRepoName();
+  const lastInfo = getLastVersionInfo(repoName, config);
+  return { repoName, lastInfo, ignore: resolveIgnoreList(options2, config) };
 }
-function readCache(cli) {
-  const path31 = logPath(cli);
-  if (!existsSync18(path31)) return void 0;
-  return readFileSync16(path31, "utf-8");
+function buildContext(options2) {
+  const config = loadConfig();
+  const data = resolveContextData(config, options2);
+  return { config, ...data, verbose: options2.verbose ?? false };
 }
-function writeCache(cli, output) {
-  const dir = join12(homedir4(), ".assist");
-  mkdirSync4(dir, { recursive: true });
-  writeFileSync14(logPath(cli), output);
+function fetchNextCommits(ctx) {
+  const commitsByDate = fetchCommitsByDate(
+    ctx.ignore,
+    getLastDate(ctx.lastInfo)
+  );
+  const targetDate = findTargetDate(commitsByDate, resolveSkipDays(ctx.config));
+  return targetDate ? { targetDate, commits: getCommitsForDate(commitsByDate, targetDate) } : null;
 }
-async function permitCliReads(cli, options2 = { noCache: false }) {
-  if (!cli) {
-    console.error("Usage: assist permit-cli-reads <cli>");
-    process.exit(1);
+function showResult(ctx, found) {
+  if (!found) {
+    logNoCommits(ctx.lastInfo);
+    return;
   }
-  const installDir = getInstallDir();
-  if (!isGitRepo(installDir)) {
-    console.error(
-      "permit-cli-reads must be run from the assist git repo, not a global install."
-    );
+  displayNextEntry(ctx, found.targetDate, found.commits);
+}
+function next(options2) {
+  const ctx = buildContext(options2);
+  showResult(ctx, fetchNextCommits(ctx));
+}
+
+// src/commands/devlog/skip.ts
+import chalk42 from "chalk";
+function skip(date) {
+  if (!/^\d{4}-\d{2}-\d{2}$/.test(date)) {
+    console.log(chalk42.red("Invalid date format. Use YYYY-MM-DD"));
     process.exit(1);
   }
-  if (!options2.noCache) {
-    const cached = readCache(cli);
-    if (cached) {
-      console.log(colorize(cached));
-      updateSettings(cli, parseCached(cli, cached));
-      return;
-    }
+  const config = loadProjectConfig();
+  const devlog = config.devlog ?? {};
+  const skip2 = devlog.skip ?? {};
+  const skipDays = skip2.days ?? [];
+  if (skipDays.includes(date)) {
+    console.log(chalk42.yellow(`${date} is already in skip list`));
+    return;
   }
-  assertCliExists(cli);
-  const commands = await discoverAll(cli);
-  const output = formatHuman(cli, commands);
-  console.log(colorize(output));
-  writeCache(cli, output);
-  updateSettings(cli, commands);
+  skipDays.push(date);
+  skipDays.sort();
+  skip2.days = skipDays;
+  devlog.skip = skip2;
+  config.devlog = devlog;
+  saveConfig(config);
+  console.log(chalk42.green(`Added ${date} to skip list`));
 }
 
-// src/commands/registerPermitCliReads.ts
-function registerPermitCliReads(program2) {
-  program2.command("permit-cli-reads").description("Discover a CLI's commands and auto-permit read-only ones").argument(
-    "<cli...>",
-    "CLI binary and optional subcommand (e.g. gh, az, acli jira)"
-  ).option("--no-cache", "Force fresh discovery, ignoring cached results").action((cli, options2) => {
-    permitCliReads(cli.join(" "), { noCache: !options2.cache });
-  });
+// src/commands/devlog/version.ts
+import chalk43 from "chalk";
+function version() {
+  const config = loadConfig();
+  const name = getRepoName();
+  const lastInfo = getLastVersionInfo(name, config);
+  const lastVersion = lastInfo?.version ?? null;
+  const nextVersion = lastVersion ? bumpVersion(lastVersion, "patch") : null;
+  console.log(`${chalk43.bold("name:")} ${name}`);
+  console.log(`${chalk43.bold("last:")} ${lastVersion ?? chalk43.dim("none")}`);
+  console.log(`${chalk43.bold("next:")} ${nextVersion ?? chalk43.dim("none")}`);
+}
+
+// src/commands/registerDevlog.ts
+function registerDevlog(program2) {
+  const devlogCommand = program2.command("devlog").description("Development log utilities");
+  devlogCommand.command("list").description("Group git commits by date").option(
+    "--days <number>",
+    "Number of days to show (default: 30)",
+    Number.parseInt
+  ).option("--since <date>", "Only show commits since this date (YYYY-MM-DD)").option("-r, --reverse", "Show earliest commits first").option("-v, --verbose", "Show file names for each commit").action(list3);
+  devlogCommand.command("version").description("Show current repo name and version info").action(version);
+  devlogCommand.command("next").description("Show commits for the day after the last versioned entry").option("-v, --verbose", "Show file names for each commit").action(next);
+  devlogCommand.command("skip <date>").description("Add a date (YYYY-MM-DD) to the skip list").action(skip);
 }
 
 // src/commands/prs/comment.ts
 import { spawnSync as spawnSync2 } from "child_process";
 import { unlinkSync as unlinkSync3, writeFileSync as writeFileSync15 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 
 // src/commands/prs/shared.ts
 import { execSync as execSync19 } from "child_process";
@@ -4001,7 +4147,7 @@ function comment(path31, line, body) {
   validateLine(line);
   try {
     const prId = getCurrentPrNodeId();
-    const queryFile = join13(tmpdir2(), `gh-query-${Date.now()}.graphql`);
+    const queryFile = join14(tmpdir2(), `gh-query-${Date.now()}.graphql`);
     writeFileSync15(queryFile, MUTATION);
     try {
       const result = spawnSync2(
@@ -4046,26 +4192,26 @@ import { execSync as execSync21 } from "child_process";
 import { execSync as execSync20 } from "child_process";
 import { unlinkSync as unlinkSync5, writeFileSync as writeFileSync16 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 
 // src/commands/prs/loadCommentsCache.ts
-import { existsSync as existsSync19, readFileSync as readFileSync17, unlinkSync as unlinkSync4 } from "fs";
-import { join as join14 } from "path";
-import { parse } from "yaml";
+import { existsSync as existsSync20, readFileSync as readFileSync18, unlinkSync as unlinkSync4 } from "fs";
+import { join as join15 } from "path";
+import { parse as parse2 } from "yaml";
 function getCachePath(prNumber) {
-  return join14(process.cwd(), ".assist", `pr-${prNumber}-comments.yaml`);
+  return join15(process.cwd(), ".assist", `pr-${prNumber}-comments.yaml`);
 }
 function loadCommentsCache(prNumber) {
   const cachePath = getCachePath(prNumber);
-  if (!existsSync19(cachePath)) {
+  if (!existsSync20(cachePath)) {
     return null;
   }
-  const content = readFileSync17(cachePath, "utf-8");
-  return parse(content);
+  const content = readFileSync18(cachePath, "utf-8");
+  return parse2(content);
 }
 function deleteCommentsCache(prNumber) {
   const cachePath = getCachePath(prNumber);
-  if (existsSync19(cachePath)) {
+  if (existsSync20(cachePath)) {
     unlinkSync4(cachePath);
     console.log("No more unresolved line comments. Cache dropped.");
   }
@@ -4080,7 +4226,7 @@ function replyToComment(org, repo, prNumber, commentId, message) {
 }
 function resolveThread(threadId) {
   const mutation = `mutation($threadId: ID!) { resolveReviewThread(input: {threadId: $threadId}) { thread { isResolved } } }`;
-  const queryFile = join15(tmpdir3(), `gh-mutation-${Date.now()}.graphql`);
+  const queryFile = join16(tmpdir3(), `gh-mutation-${Date.now()}.graphql`);
   writeFileSync16(queryFile, mutation);
   try {
     execSync20(
@@ -4161,18 +4307,18 @@ function fixed(commentId, sha) {
 }
 
 // src/commands/prs/listComments/index.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync5, writeFileSync as writeFileSync18 } from "fs";
-import { join as join17 } from "path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync5, writeFileSync as writeFileSync18 } from "fs";
+import { join as join18 } from "path";
 import { stringify } from "yaml";
 
 // src/commands/prs/fetchThreadIds.ts
 import { execSync as execSync22 } from "child_process";
 import { unlinkSync as unlinkSync6, writeFileSync as writeFileSync17 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 var THREAD_QUERY = `query($owner: String!, $repo: String!, $prNumber: Int!) { repository(owner: $owner, name: $repo) { pullRequest(number: $prNumber) { reviewThreads(first: 100) { nodes { id isResolved comments(first: 100) { nodes { databaseId } } } } } } }`;
 function fetchThreadIds(org, repo, prNumber) {
-  const queryFile = join16(tmpdir4(), `gh-query-${Date.now()}.graphql`);
+  const queryFile = join17(tmpdir4(), `gh-query-${Date.now()}.graphql`);
   writeFileSync17(queryFile, THREAD_QUERY);
   try {
     const result = execSync22(
@@ -4277,8 +4423,8 @@ function printComments(comments) {
   }
 }
 function writeCommentsCache(prNumber, comments) {
-  const assistDir = join17(process.cwd(), ".assist");
-  if (!existsSync20(assistDir)) {
+  const assistDir = join18(process.cwd(), ".assist");
+  if (!existsSync21(assistDir)) {
     mkdirSync5(assistDir, { recursive: true });
   }
   const cacheData = {
@@ -4286,7 +4432,7 @@ function writeCommentsCache(prNumber, comments) {
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString(),
     comments
   };
-  const cachePath = join17(assistDir, `pr-${prNumber}-comments.yaml`);
+  const cachePath = join18(assistDir, `pr-${prNumber}-comments.yaml`);
   writeFileSync18(cachePath, stringify(cacheData));
 }
 function handleKnownErrors(error) {
@@ -4665,7 +4811,7 @@ function getViolations(pattern2, options2 = {}, maxLines = DEFAULT_MAX_LINES) {
 
 // src/commands/refactor/check/index.ts
 function runScript(script, cwd) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const child = spawn3("npm", ["run", script], {
       stdio: "pipe",
       shell: true,
@@ -4679,7 +4825,7 @@ function runScript(script, cwd) {
       output += data.toString();
     });
     child.on("close", (code) => {
-      resolve5({ script, code: code ?? 1, output });
+      resolve6({ script, code: code ?? 1, output });
     });
   });
 }
@@ -5251,8 +5397,8 @@ function registerRefactor(program2) {
 }
 
 // src/commands/transcript/shared.ts
-import { existsSync as existsSync21, readdirSync as readdirSync2, statSync } from "fs";
-import { basename as basename4, join as join18, relative } from "path";
+import { existsSync as existsSync22, readdirSync as readdirSync2, statSync } from "fs";
+import { basename as basename4, join as join19, relative } from "path";
 import * as readline2 from "readline";
 var DATE_PREFIX_REGEX = /^\d{4}-\d{2}-\d{2}/;
 function getDatePrefix(daysOffset = 0) {
@@ -5267,10 +5413,10 @@ function isValidDatePrefix(filename) {
   return DATE_PREFIX_REGEX.test(filename);
 }
 function collectFiles(dir, extension) {
-  if (!existsSync21(dir)) return [];
+  if (!existsSync22(dir)) return [];
   const results = [];
   for (const entry of readdirSync2(dir)) {
-    const fullPath = join18(dir, entry);
+    const fullPath = join19(dir, entry);
     if (statSync(fullPath).isDirectory()) {
       results.push(...collectFiles(fullPath, extension));
     } else if (entry.endsWith(extension)) {
@@ -5302,9 +5448,9 @@ function createReadlineInterface() {
   });
 }
 function askQuestion(rl, question) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     rl.question(question, (answer) => {
-      resolve5(answer.trim());
+      resolve6(answer.trim());
     });
   });
 }
@@ -5364,14 +5510,14 @@ async function configure() {
 }
 
 // src/commands/transcript/format/index.ts
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync24 } from "fs";
 
 // src/commands/transcript/format/fixInvalidDatePrefixes/index.ts
-import { dirname as dirname15, join as join20 } from "path";
+import { dirname as dirname15, join as join21 } from "path";
 
 // src/commands/transcript/format/fixInvalidDatePrefixes/promptForDateFix.ts
 import { renameSync } from "fs";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 async function resolveDate(rl, choice) {
   if (choice === "1") return getDatePrefix(0);
   if (choice === "2") return getDatePrefix(-1);
@@ -5386,7 +5532,7 @@ async function resolveDate(rl, choice) {
 }
 function renameWithPrefix(vttDir, vttFile, prefix2) {
   const newFilename = `${prefix2}.${vttFile}`;
-  renameSync(join19(vttDir, vttFile), join19(vttDir, newFilename));
+  renameSync(join20(vttDir, vttFile), join20(vttDir, newFilename));
   console.log(`Renamed to: ${newFilename}`);
   return newFilename;
 }
@@ -5420,12 +5566,12 @@ async function fixInvalidDatePrefixes(vttFiles) {
       const vttFileDir = dirname15(vttFile.absolutePath);
       const newFilename = await promptForDateFix(vttFile.filename, vttFileDir);
       if (newFilename) {
-        const newRelativePath = join20(
+        const newRelativePath = join21(
           dirname15(vttFile.relativePath),
           newFilename
         );
         vttFiles[i] = {
-          absolutePath: join20(vttFileDir, newFilename),
+          absolutePath: join21(vttFileDir, newFilename),
           relativePath: newRelativePath,
           filename: newFilename
         };
@@ -5438,8 +5584,8 @@ async function fixInvalidDatePrefixes(vttFiles) {
 }
 
 // src/commands/transcript/format/processVttFile/index.ts
-import { existsSync as existsSync22, mkdirSync as mkdirSync6, readFileSync as readFileSync18, writeFileSync as writeFileSync19 } from "fs";
-import { basename as basename5, dirname as dirname16, join as join21 } from "path";
+import { existsSync as existsSync23, mkdirSync as mkdirSync6, readFileSync as readFileSync19, writeFileSync as writeFileSync19 } from "fs";
+import { basename as basename5, dirname as dirname16, join as join22 } from "path";
 
 // src/commands/transcript/cleanText.ts
 function cleanText(text) {
@@ -5649,21 +5795,21 @@ function toMdFilename(vttFilename) {
   return `${basename5(vttFilename, ".vtt").replace(/\s*Transcription\s*/g, " ").trim()}.md`;
 }
 function resolveOutputDir(relativeDir, transcriptsDir) {
-  return relativeDir === "." ? transcriptsDir : join21(transcriptsDir, relativeDir);
+  return relativeDir === "." ? transcriptsDir : join22(transcriptsDir, relativeDir);
 }
 function buildOutputPaths(vttFile, transcriptsDir) {
   const mdFile = toMdFilename(vttFile.filename);
   const relativeDir = dirname16(vttFile.relativePath);
   const outputDir = resolveOutputDir(relativeDir, transcriptsDir);
-  const outputPath = join21(outputDir, mdFile);
+  const outputPath = join22(outputDir, mdFile);
   return { outputDir, outputPath, mdFile, relativeDir };
 }
 function logSkipped(relativeDir, mdFile) {
-  console.log(`Skipping (already exists): ${join21(relativeDir, mdFile)}`);
+  console.log(`Skipping (already exists): ${join22(relativeDir, mdFile)}`);
   return "skipped";
 }
 function ensureDirectory(dir, label2) {
-  if (!existsSync22(dir)) {
+  if (!existsSync23(dir)) {
     mkdirSync6(dir, { recursive: true });
     console.log(`Created ${label2}: ${dir}`);
   }
@@ -5686,7 +5832,7 @@ function logReduction(cueCount, messageCount) {
 }
 function readAndParseCues(inputPath) {
   console.log(`Reading: ${inputPath}`);
-  return processCues(readFileSync18(inputPath, "utf-8"));
+  return processCues(readFileSync19(inputPath, "utf-8"));
 }
 function writeFormatted(outputPath, content) {
   writeFileSync19(outputPath, content, "utf-8");
@@ -5699,7 +5845,7 @@ function convertVttToMarkdown(inputPath, outputPath) {
   logReduction(cues.length, chatMessages.length);
 }
 function tryProcessVtt(vttFile, paths) {
-  if (existsSync22(paths.outputPath))
+  if (existsSync23(paths.outputPath))
     return logSkipped(paths.relativeDir, paths.mdFile);
   convertVttToMarkdown(vttFile.absolutePath, paths.outputPath);
   return "processed";
@@ -5725,7 +5871,7 @@ function processAllFiles(vttFiles, transcriptsDir) {
   logSummary(counts);
 }
 function requireVttDir(vttDir) {
-  if (!existsSync23(vttDir)) {
+  if (!existsSync24(vttDir)) {
     console.error(`VTT directory not found: ${vttDir}`);
     process.exit(1);
   }
@@ -5757,18 +5903,18 @@ async function format() {
 }
 
 // src/commands/transcript/summarise/index.ts
-import { existsSync as existsSync25 } from "fs";
-import { basename as basename6, dirname as dirname18, join as join23, relative as relative2 } from "path";
+import { existsSync as existsSync26 } from "fs";
+import { basename as basename6, dirname as dirname18, join as join24, relative as relative2 } from "path";
 
 // src/commands/transcript/summarise/processStagedFile/index.ts
 import {
-  existsSync as existsSync24,
+  existsSync as existsSync25,
   mkdirSync as mkdirSync7,
-  readFileSync as readFileSync19,
+  readFileSync as readFileSync20,
   renameSync as renameSync2,
   rmSync
 } from "fs";
-import { dirname as dirname17, join as join22 } from "path";
+import { dirname as dirname17, join as join23 } from "path";
 
 // src/commands/transcript/summarise/processStagedFile/validateStagedContent.ts
 import chalk51 from "chalk";
@@ -5797,9 +5943,9 @@ function validateStagedContent(filename, content) {
 }
 
 // src/commands/transcript/summarise/processStagedFile/index.ts
-var STAGING_DIR = join22(process.cwd(), ".assist", "transcript");
+var STAGING_DIR = join23(process.cwd(), ".assist", "transcript");
 function processStagedFile() {
-  if (!existsSync24(STAGING_DIR)) {
+  if (!existsSync25(STAGING_DIR)) {
     return false;
   }
   const stagedFiles = findMdFilesRecursive(STAGING_DIR);
@@ -5808,7 +5954,7 @@ function processStagedFile() {
   }
   const { transcriptsDir, summaryDir } = getTranscriptConfig();
   const stagedFile = stagedFiles[0];
-  const content = readFileSync19(stagedFile.absolutePath, "utf-8");
+  const content = readFileSync20(stagedFile.absolutePath, "utf-8");
   validateStagedContent(stagedFile.filename, content);
   const stagedBaseName = getTranscriptBaseName(stagedFile.filename);
   const transcriptFiles = findMdFilesRecursive(transcriptsDir);
@@ -5821,9 +5967,9 @@ function processStagedFile() {
     );
     process.exit(1);
   }
-  const destPath = join22(summaryDir, matchingTranscript.relativePath);
+  const destPath = join23(summaryDir, matchingTranscript.relativePath);
   const destDir = dirname17(destPath);
-  if (!existsSync24(destDir)) {
+  if (!existsSync25(destDir)) {
     mkdirSync7(destDir, { recursive: true });
   }
   renameSync2(stagedFile.absolutePath, destPath);
@@ -5837,7 +5983,7 @@ function processStagedFile() {
 // src/commands/transcript/summarise/index.ts
 function buildRelativeKey(relativePath, baseName) {
   const relDir = dirname18(relativePath);
-  return relDir === "." ? baseName : join23(relDir, baseName);
+  return relDir === "." ? baseName : join24(relDir, baseName);
 }
 function buildSummaryIndex(summaryDir) {
   const summaryFiles = findMdFilesRecursive(summaryDir);
@@ -5850,7 +5996,7 @@ function buildSummaryIndex(summaryDir) {
 function summarise() {
   processStagedFile();
   const { transcriptsDir, summaryDir } = getTranscriptConfig();
-  if (!existsSync25(transcriptsDir)) {
+  if (!existsSync26(transcriptsDir)) {
     console.log("No transcripts directory found.");
     return;
   }
@@ -5871,8 +6017,8 @@ function summarise() {
   }
   const next2 = missing[0];
   const outputFilename = `${getTranscriptBaseName(next2.filename)}.md`;
-  const outputPath = join23(STAGING_DIR, outputFilename);
-  const summaryFileDir = join23(summaryDir, dirname18(next2.relativePath));
+  const outputPath = join24(STAGING_DIR, outputFilename);
+  const summaryFileDir = join24(summaryDir, dirname18(next2.relativePath));
   const relativeTranscriptPath = encodeURI(
     relative2(summaryFileDir, next2.absolutePath).replace(/\\/g, "/")
   );
@@ -5918,50 +6064,50 @@ function registerVerify(program2) {
 
 // src/commands/voice/devices.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 
 // src/commands/voice/shared.ts
-import { homedir as homedir5 } from "os";
-import { dirname as dirname19, join as join24 } from "path";
+import { homedir as homedir6 } from "os";
+import { dirname as dirname19, join as join25 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 var __dirname7 = dirname19(fileURLToPath6(import.meta.url));
-var VOICE_DIR = join24(homedir5(), ".assist", "voice");
+var VOICE_DIR = join25(homedir6(), ".assist", "voice");
 var voicePaths = {
   dir: VOICE_DIR,
-  pid: join24(VOICE_DIR, "voice.pid"),
-  log: join24(VOICE_DIR, "voice.log"),
-  venv: join24(VOICE_DIR, ".venv"),
-  lock: join24(VOICE_DIR, "voice.lock")
+  pid: join25(VOICE_DIR, "voice.pid"),
+  log: join25(VOICE_DIR, "voice.log"),
+  venv: join25(VOICE_DIR, ".venv"),
+  lock: join25(VOICE_DIR, "voice.lock")
 };
 function getPythonDir() {
-  return join24(__dirname7, "commands", "voice", "python");
+  return join25(__dirname7, "commands", "voice", "python");
 }
 function getVenvPython() {
-  return process.platform === "win32" ? join24(voicePaths.venv, "Scripts", "python.exe") : join24(voicePaths.venv, "bin", "python");
+  return process.platform === "win32" ? join25(voicePaths.venv, "Scripts", "python.exe") : join25(voicePaths.venv, "bin", "python");
 }
 function getLockDir() {
   const config = loadConfig();
   return config.voice?.lockDir ?? VOICE_DIR;
 }
 function getLockFile() {
-  return join24(getLockDir(), "voice.lock");
+  return join25(getLockDir(), "voice.lock");
 }
 
 // src/commands/voice/devices.ts
 function devices() {
-  const script = join25(getPythonDir(), "list_devices.py");
+  const script = join26(getPythonDir(), "list_devices.py");
   spawnSync3(getVenvPython(), [script], { stdio: "inherit" });
 }
 
 // src/commands/voice/logs.ts
-import { existsSync as existsSync26, readFileSync as readFileSync20 } from "fs";
+import { existsSync as existsSync27, readFileSync as readFileSync21 } from "fs";
 function logs(options2) {
-  if (!existsSync26(voicePaths.log)) {
+  if (!existsSync27(voicePaths.log)) {
     console.log("No voice log file found");
     return;
   }
   const count = Number.parseInt(options2.lines ?? "150", 10);
-  const content = readFileSync20(voicePaths.log, "utf-8").trim();
+  const content = readFileSync21(voicePaths.log, "utf-8").trim();
   if (!content) {
     console.log("Voice log is empty");
     return;
@@ -5984,12 +6130,12 @@ function logs(options2) {
 // src/commands/voice/setup.ts
 import { spawnSync as spawnSync4 } from "child_process";
 import { mkdirSync as mkdirSync9 } from "fs";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 
 // src/commands/voice/checkLockFile.ts
 import { execSync as execSync27 } from "child_process";
-import { existsSync as existsSync27, mkdirSync as mkdirSync8, readFileSync as readFileSync21, writeFileSync as writeFileSync20 } from "fs";
-import { join as join26 } from "path";
+import { existsSync as existsSync28, mkdirSync as mkdirSync8, readFileSync as readFileSync22, writeFileSync as writeFileSync20 } from "fs";
+import { join as join27 } from "path";
 function isProcessAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -6000,9 +6146,9 @@ function isProcessAlive(pid) {
 }
 function checkLockFile() {
   const lockFile = getLockFile();
-  if (!existsSync27(lockFile)) return;
+  if (!existsSync28(lockFile)) return;
   try {
-    const lock = JSON.parse(readFileSync21(lockFile, "utf-8"));
+    const lock = JSON.parse(readFileSync22(lockFile, "utf-8"));
     if (lock.pid && isProcessAlive(lock.pid)) {
       console.error(
         `Voice daemon already running (PID ${lock.pid}, env: ${lock.env}). Stop it first with: assist voice stop`
@@ -6013,7 +6159,7 @@ function checkLockFile() {
   }
 }
 function bootstrapVenv() {
-  if (existsSync27(getVenvPython())) return;
+  if (existsSync28(getVenvPython())) return;
   console.log("Setting up Python environment...");
   const pythonDir = getPythonDir();
   execSync27(
@@ -6026,7 +6172,7 @@ function bootstrapVenv() {
 }
 function writeLockFile(pid) {
   const lockFile = getLockFile();
-  mkdirSync8(join26(lockFile, ".."), { recursive: true });
+  mkdirSync8(join27(lockFile, ".."), { recursive: true });
   writeFileSync20(
     lockFile,
     JSON.stringify({
@@ -6042,7 +6188,7 @@ function setup() {
   mkdirSync9(voicePaths.dir, { recursive: true });
   bootstrapVenv();
   console.log("\nDownloading models...\n");
-  const script = join27(getPythonDir(), "setup_models.py");
+  const script = join28(getPythonDir(), "setup_models.py");
   const result = spawnSync4(getVenvPython(), [script], {
     stdio: "inherit",
     env: { ...process.env, VOICE_LOG_FILE: voicePaths.log }
@@ -6056,7 +6202,7 @@ function setup() {
 // src/commands/voice/start.ts
 import { spawn as spawn4 } from "child_process";
 import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync21 } from "fs";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 
 // src/commands/voice/buildDaemonEnv.ts
 function buildDaemonEnv(options2) {
@@ -6094,7 +6240,7 @@ function start2(options2) {
   bootstrapVenv();
   const debug = options2.debug || options2.foreground || process.platform === "win32";
   const env = buildDaemonEnv({ debug });
-  const script = join28(getPythonDir(), "voice_daemon.py");
+  const script = join29(getPythonDir(), "voice_daemon.py");
   const python = getVenvPython();
   if (options2.foreground) {
     spawnForeground(python, script, env);
@@ -6104,7 +6250,7 @@ function start2(options2) {
 }
 
 // src/commands/voice/status.ts
-import { existsSync as existsSync28, readFileSync as readFileSync22 } from "fs";
+import { existsSync as existsSync29, readFileSync as readFileSync23 } from "fs";
 function isProcessAlive2(pid) {
   try {
     process.kill(pid, 0);
@@ -6114,16 +6260,16 @@ function isProcessAlive2(pid) {
   }
 }
 function readRecentLogs(count) {
-  if (!existsSync28(voicePaths.log)) return [];
-  const lines = readFileSync22(voicePaths.log, "utf-8").trim().split("\n");
+  if (!existsSync29(voicePaths.log)) return [];
+  const lines = readFileSync23(voicePaths.log, "utf-8").trim().split("\n");
   return lines.slice(-count);
 }
 function status() {
-  if (!existsSync28(voicePaths.pid)) {
+  if (!existsSync29(voicePaths.pid)) {
     console.log("Voice daemon: not running (no PID file)");
     return;
   }
-  const pid = Number.parseInt(readFileSync22(voicePaths.pid, "utf-8").trim(), 10);
+  const pid = Number.parseInt(readFileSync23(voicePaths.pid, "utf-8").trim(), 10);
   const alive = isProcessAlive2(pid);
   console.log(`Voice daemon: ${alive ? "running" : "dead"} (PID ${pid})`);
   const recent = readRecentLogs(5);
@@ -6142,13 +6288,13 @@ function status() {
 }
 
 // src/commands/voice/stop.ts
-import { existsSync as existsSync29, readFileSync as readFileSync23, unlinkSync as unlinkSync7 } from "fs";
+import { existsSync as existsSync30, readFileSync as readFileSync24, unlinkSync as unlinkSync7 } from "fs";
 function stop() {
-  if (!existsSync29(voicePaths.pid)) {
+  if (!existsSync30(voicePaths.pid)) {
     console.log("Voice daemon is not running (no PID file)");
     return;
   }
-  const pid = Number.parseInt(readFileSync23(voicePaths.pid, "utf-8").trim(), 10);
+  const pid = Number.parseInt(readFileSync24(voicePaths.pid, "utf-8").trim(), 10);
   try {
     process.kill(pid, "SIGTERM");
     console.log(`Sent SIGTERM to voice daemon (PID ${pid})`);
@@ -6161,7 +6307,7 @@ function stop() {
   }
   try {
     const lockFile = getLockFile();
-    if (existsSync29(lockFile)) unlinkSync7(lockFile);
+    if (existsSync30(lockFile)) unlinkSync7(lockFile);
   } catch {
   }
   console.log("Voice daemon stopped");
@@ -6245,7 +6391,7 @@ function extractCode(url, expectedState) {
   return code;
 }
 function waitForCallback(port, expectedState) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const timeout = setTimeout(() => {
       server.close();
       reject(new Error("Authorization timed out after 120 seconds"));
@@ -6262,7 +6408,7 @@ function waitForCallback(port, expectedState) {
         const code = extractCode(url, expectedState);
         respondHtml(res, 200, "Authorization successful!");
         server.close();
-        resolve5(code);
+        resolve6(code);
       } catch (err) {
         respondHtml(res, 400, err.message);
         server.close();
@@ -6392,7 +6538,7 @@ import { spawn as spawn5 } from "child_process";
 
 // src/commands/run/add.ts
 import { mkdirSync as mkdirSync11, writeFileSync as writeFileSync22 } from "fs";
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 function findAddIndex() {
   const addIndex = process.argv.indexOf("add");
   if (addIndex === -1 || addIndex + 2 >= process.argv.length) return -1;
@@ -6446,7 +6592,7 @@ function saveNewRunConfig(name, command, args) {
   saveConfig(config);
 }
 function createCommandFile(name) {
-  const dir = join29(".claude", "commands");
+  const dir = join30(".claude", "commands");
   mkdirSync11(dir, { recursive: true });
   const content = `---
 description: Run ${name}
@@ -6454,7 +6600,7 @@ description: Run ${name}
 
 Run \`assist run ${name} $ARGUMENTS 2>&1\`.
 `;
-  const filePath = join29(dir, `${name}.md`);
+  const filePath = join30(dir, `${name}.md`);
   writeFileSync22(filePath, content);
   console.log(`Created command file: ${filePath}`);
 }
@@ -6706,7 +6852,6 @@ program.command("notify").description(
   "Show notification from Claude Code hook (reads JSON from stdin)"
 ).action(notify);
 program.command("update").description("Update assist to the latest version and sync commands").action(update);
-registerPermitCliReads(program);
 registerCliHook(program);
 registerPrs(program);
 registerRoam(program);