avorelo 0.3.7 → 0.3.8

package/README.md

@@ -16,13 +16,13 @@ locally.
 npx -y avorelo@latest activate --scope project-wide
 ```
 
-**Account-linked activation (requires dashboard claim):**
+**Account-linked activation (optional):**
 
 ```
-npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>
+npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE
 ```
 
-Generate a short-lived claim from your [dashboard](https://avorelo.com/dashboard). Claims expire in 15 minutes.
+Generate a short-lived account link code from your [dashboard](https://avorelo.com/dashboard). Codes expire in 15 minutes.
 
 **Other commands:**
 

package/dist/avorelo.mjs

@@ -7338,8 +7338,8 @@ init_run();
 init_work_contract();
 init_receipts();
 init_state_ledger();
-import { writeFileSync as writeFileSync39, mkdirSync as mkdirSync41, existsSync as existsSync65, readFileSync as readFileSync51, appendFileSync as appendFileSync12, rmSync as rmSync3, unlinkSync as unlinkSync5 } from "node:fs";
-import { join as join67 } from "node:path";
+import { writeFileSync as writeFileSync39, mkdirSync as mkdirSync41, existsSync as existsSync66, readFileSync as readFileSync51, appendFileSync as appendFileSync12, rmSync as rmSync3, unlinkSync as unlinkSync5 } from "node:fs";
+import { join as join68 } from "node:path";
 
 // src/avorelo/capabilities/activation/index.ts
 import { mkdtempSync, writeFileSync as writeFileSync11, mkdirSync as mkdirSync11, rmSync as rmSync2, existsSync as existsSync24 } from "node:fs";
@@ -7462,7 +7462,7 @@ function runPreflight(targetDir) {
         label: "npm cache directory accessible",
         passed: false,
         details: "cache path does not exist",
-        recovery: isWindows ? 'Use a temporary cache. PowerShell: $env:npm_config_cache="$env:TEMP\\npm-cache-avorelo"; npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>. cmd.exe: cmd /c "set npm_config_cache=%TEMP%\\npm-cache-avorelo && npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>"' : "Use a temporary cache: npm_config_cache=$(mktemp -d) npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>"
+        recovery: isWindows ? 'Use a temporary cache. PowerShell: $env:npm_config_cache="$env:TEMP\\npm-cache-avorelo"; npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE. cmd.exe: cmd /c "set npm_config_cache=%TEMP%\\npm-cache-avorelo && npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE"' : "Use a temporary cache: npm_config_cache=$(mktemp -d) npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE"
       });
     }
   } catch {
@@ -7471,7 +7471,7 @@ function runPreflight(targetDir) {
       label: "npm cache directory accessible",
       passed: false,
       details: "could not read npm cache config",
-      recovery: isWindows ? 'Use a temporary cache. PowerShell: $env:npm_config_cache="$env:TEMP\\npm-cache-avorelo"; npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>. cmd.exe: cmd /c "set npm_config_cache=%TEMP%\\npm-cache-avorelo && npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>"' : "Use a temporary cache: npm_config_cache=$(mktemp -d) npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>"
+      recovery: isWindows ? 'Use a temporary cache. PowerShell: $env:npm_config_cache="$env:TEMP\\npm-cache-avorelo"; npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE. cmd.exe: cmd /c "set npm_config_cache=%TEMP%\\npm-cache-avorelo && npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE"' : "Use a temporary cache: npm_config_cache=$(mktemp -d) npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE"
     });
   }
   let tempOk = false;
@@ -7500,7 +7500,7 @@ function runPreflight(targetDir) {
         label: "PowerShell execution policy",
         passed: psOk,
         details: `Policy: ${policy}`,
-        recovery: blocked ? "PowerShell is blocking script execution. Use Command Prompt instead:\n  cmd /c npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>" : void 0
+        recovery: blocked ? "PowerShell is blocking script execution. Use Command Prompt instead:\n  cmd /c npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE" : void 0
       });
     } catch {
       checks.push({ id: "powershell_execution_policy", label: "PowerShell execution policy", passed: true, details: "could not check (non-PowerShell shell)" });
@@ -7531,7 +7531,7 @@ function buildWindowsFallbackCommand() {
     "mkdir %AVORELO_TEMP%",
     "set npm_config_cache=%AVORELO_TEMP%\\npm-cache",
     "cd /d %AVORELO_TEMP%",
-    "npx -y avorelo@latest activate --scope project-wide --claim <activation_claim>",
+    "npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE",
     "npx -y avorelo@latest status"
   ].join("\n");
 }
@@ -16620,13 +16620,13 @@ import { readFileSync as readFileSync32, existsSync as existsSync47, statSync as
 import { execFileSync as execFileSync2 } from "node:child_process";
 function readBack(dir, check) {
   const id = check.artifactId ?? `sot_${check.kind}`;
-  const resolve5 = (p) => p.startsWith("/") || /^[A-Za-z]:/.test(p) ? p : `${dir}/${p}`;
+  const resolve6 = (p) => p.startsWith("/") || /^[A-Za-z]:/.test(p) ? p : `${dir}/${p}`;
   try {
     if (check.kind === "file_absent") {
-      const passed2 = !existsSync47(resolve5(check.path));
+      const passed2 = !existsSync47(resolve6(check.path));
       return { artifact: passed2 ? { artifactId: id, kind: "source_of_truth_readback", ref: `sot:absent:${check.path}` } : null, passed: passed2, reasonCode: passed2 ? "READBACK_ABSENT_OK" : "READBACK_UNEXPECTEDLY_PRESENT", check };
     }
-    const p = resolve5(check.path);
+    const p = resolve6(check.path);
     if (!existsSync47(p)) return { artifact: null, passed: false, reasonCode: "READBACK_FILE_MISSING", check };
     const actual = readFileSync32(p, "utf8");
     const passed = check.kind === "file_equals" ? actual.trim() === check.expected.trim() : actual.includes(check.expected);
@@ -16775,12 +16775,12 @@ function serve(root, opts) {
       res.end("500");
     }
   });
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     server.once("error", reject);
     server.listen(opts?.port ?? 0, host, () => {
       const addr = server.address();
       const port = typeof addr === "object" && addr ? addr.port : opts?.port ?? 0;
-      resolve5({
+      resolve6({
         url: `http://${host}:${port}/`,
         port,
         server,
@@ -17072,7 +17072,7 @@ var CustomDataIdentityResolver = class {
 
 // src/avorelo/surfaces/webhook-server/index.ts
 function collectRawBody(req, maxBytes = 1048576) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const chunks = [];
     let size = 0;
     req.on("data", (chunk) => {
@@ -17084,7 +17084,7 @@ function collectRawBody(req, maxBytes = 1048576) {
       }
       chunks.push(chunk);
     });
-    req.on("end", () => resolve5(Buffer.concat(chunks).toString("utf8")));
+    req.on("end", () => resolve6(Buffer.concat(chunks).toString("utf8")));
     req.on("error", reject);
   });
 }
@@ -17131,12 +17131,12 @@ function serve2(storeDir, opts) {
     }
     jsonResponse(res, 404, { error: "not_found" });
   });
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     server.once("error", reject);
     server.listen(opts?.port ?? 3848, host, () => {
       const addr = server.address();
       const port = typeof addr === "object" && addr ? addr.port : opts?.port ?? 3848;
-      resolve5({
+      resolve6({
         url: `http://${host}:${port}/`,
         port,
         server,
@@ -17725,9 +17725,119 @@ function detectMonorepo(dir) {
   return { isMonorepo: false, strategy: "none", workspaces: [], rootPath: dir };
 }
 
+// src/avorelo/capabilities/activation/discover-projects.ts
+import { existsSync as existsSync54, readdirSync as readdirSync15 } from "node:fs";
+import { join as join53, resolve as resolve5, relative as relative4 } from "node:path";
+var PROJECT_INDICATORS = [
+  ".git",
+  "package.json",
+  "pyproject.toml",
+  "Cargo.toml",
+  "go.mod",
+  "pnpm-workspace.yaml",
+  "turbo.json"
+];
+var EXCLUDED_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  ".next",
+  "coverage",
+  "vendor",
+  "__pycache__",
+  ".venv",
+  "venv",
+  ".tox",
+  "target",
+  ".cache",
+  ".parcel-cache",
+  ".turbo",
+  ".output",
+  ".nuxt",
+  ".svelte-kit"
+]);
+var MAX_DEPTH2 = 3;
+var MAX_PROJECTS = 50;
+function discoverProjects(rootDir) {
+  const root = resolve5(rootDir);
+  const projects = [];
+  function scan2(dir, depth) {
+    if (depth > MAX_DEPTH2) return;
+    if (projects.length >= MAX_PROJECTS) return;
+    let entries;
+    try {
+      entries = readdirSync15(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (!entry.isDirectory()) continue;
+      if (EXCLUDED_DIRS.has(entry.name)) continue;
+      if (entry.name.startsWith(".") && entry.name !== ".git") continue;
+      const fullPath = join53(dir, entry.name);
+      const indicators = [];
+      for (const indicator of PROJECT_INDICATORS) {
+        if (existsSync54(join53(fullPath, indicator))) {
+          indicators.push(indicator);
+        }
+      }
+      if (indicators.length > 0) {
+        const alreadyActivated = existsSync54(join53(fullPath, ".avorelo"));
+        projects.push({
+          path: fullPath,
+          relativePath: relative4(root, fullPath) || ".",
+          indicators,
+          alreadyActivated,
+          recommended: !alreadyActivated
+        });
+      }
+      if (depth < MAX_DEPTH2 && projects.length < MAX_PROJECTS) {
+        scan2(fullPath, depth + 1);
+      }
+    }
+  }
+  scan2(root, 0);
+  return { rootDir: root, projects, searchDepth: MAX_DEPTH2 };
+}
+function formatDiscoveryPreview(result3) {
+  const lines = [];
+  if (result3.projects.length === 0) {
+    lines.push("");
+    lines.push(`No local projects found under ${result3.rootDir}`);
+    lines.push("Run this from a parent folder that contains your repos.");
+    lines.push("");
+    return lines.join("\n");
+  }
+  const recommended = result3.projects.filter((p) => p.recommended);
+  const skipped = result3.projects.filter((p) => !p.recommended);
+  lines.push("");
+  lines.push(`Found ${result3.projects.length} local project${result3.projects.length === 1 ? "" : "s"} under ${result3.rootDir}:`);
+  lines.push("");
+  for (let i = 0; i < result3.projects.length; i++) {
+    const p = result3.projects[i];
+    const marker = p.recommended ? "[*]" : "[ ]";
+    const status = p.alreadyActivated ? " (already activated)" : "";
+    const indicators = p.indicators.join(", ");
+    lines.push(`  ${marker} ${p.relativePath}${status}`);
+    lines.push(`      detected: ${indicators}`);
+  }
+  lines.push("");
+  lines.push(`  [*] = selected for activation (${recommended.length})`);
+  if (skipped.length > 0) {
+    lines.push(`  [ ] = already activated, skipped (${skipped.length})`);
+  }
+  if (result3.projects.length >= MAX_PROJECTS) {
+    lines.push("");
+    lines.push(`  Warning: stopped at ${MAX_PROJECTS} projects. Use a more specific parent folder.`);
+  }
+  lines.push("");
+  return lines.join("\n");
+}
+
 // src/avorelo/capabilities/feedback/config.ts
-import { existsSync as existsSync54, readFileSync as readFileSync38, writeFileSync as writeFileSync31, mkdirSync as mkdirSync33 } from "node:fs";
-import { join as join53, dirname as dirname10 } from "node:path";
+import { existsSync as existsSync55, readFileSync as readFileSync38, writeFileSync as writeFileSync31, mkdirSync as mkdirSync33 } from "node:fs";
+import { join as join54, dirname as dirname10 } from "node:path";
 var CONFIG_PATH = ".avorelo/config.json";
 var DEFAULTS = {
   enabled: false,
@@ -17737,8 +17847,8 @@ var DEFAULTS = {
   optedOutAt: null
 };
 function readConfig(dir) {
-  const p = join53(dir, CONFIG_PATH);
-  if (!existsSync54(p)) return {};
+  const p = join54(dir, CONFIG_PATH);
+  if (!existsSync55(p)) return {};
   try {
     return JSON.parse(readFileSync38(p, "utf8"));
   } catch {
@@ -17746,7 +17856,7 @@ function readConfig(dir) {
   }
 }
 function writeConfig(dir, config2) {
-  const p = join53(dir, CONFIG_PATH);
+  const p = join54(dir, CONFIG_PATH);
   mkdirSync33(dirname10(p), { recursive: true });
   writeFileSync31(p, JSON.stringify(config2, null, 2));
 }
@@ -17769,30 +17879,30 @@ function optOut(dir) {
 
 // src/avorelo/capabilities/feedback/bundle.ts
 init_redaction();
-import { existsSync as existsSync55, readFileSync as readFileSync39, writeFileSync as writeFileSync32, mkdirSync as mkdirSync34, readdirSync as readdirSync15 } from "node:fs";
-import { join as join54 } from "node:path";
+import { existsSync as existsSync56, readFileSync as readFileSync39, writeFileSync as writeFileSync32, mkdirSync as mkdirSync34, readdirSync as readdirSync16 } from "node:fs";
+import { join as join55 } from "node:path";
 import { platform as platform3, release, arch } from "node:os";
 init_registry();
 init_session_store();
 function getVersion() {
   try {
-    const pkg = JSON.parse(readFileSync39(join54(process.cwd(), "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync39(join55(process.cwd(), "package.json"), "utf8"));
     return pkg.version ?? "unknown";
   } catch {
     return "unknown";
   }
 }
 function detectPackageManager(dir) {
-  if (existsSync55(join54(dir, "pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync55(join54(dir, "yarn.lock"))) return "yarn";
-  if (existsSync55(join54(dir, "bun.lockb"))) return "bun";
-  if (existsSync55(join54(dir, "package-lock.json"))) return "npm";
-  if (existsSync55(join54(dir, "package.json"))) return "npm";
+  if (existsSync56(join55(dir, "pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync56(join55(dir, "yarn.lock"))) return "yarn";
+  if (existsSync56(join55(dir, "bun.lockb"))) return "bun";
+  if (existsSync56(join55(dir, "package-lock.json"))) return "npm";
+  if (existsSync56(join55(dir, "package.json"))) return "npm";
   return null;
 }
 function detectFramework(dir) {
   try {
-    const pkg = JSON.parse(readFileSync39(join54(dir, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync39(join55(dir, "package.json"), "utf8"));
     const deps = { ...pkg.dependencies, ...pkg.devDependencies };
     if (deps["next"]) return "next";
     if (deps["nuxt"]) return "nuxt";
@@ -17807,13 +17917,13 @@ function detectFramework(dir) {
   }
 }
 function countReceipts(dir) {
-  const receiptsDir = join54(dir, ".avorelo", "receipts");
-  if (!existsSync55(receiptsDir)) return { total: 0, done: 0, blocked: 0, inProgress: 0 };
+  const receiptsDir = join55(dir, ".avorelo", "receipts");
+  if (!existsSync56(receiptsDir)) return { total: 0, done: 0, blocked: 0, inProgress: 0 };
   let done = 0, blocked = 0, inProgress = 0;
   try {
-    for (const f of readdirSync15(receiptsDir).filter((f2) => f2.endsWith(".json"))) {
+    for (const f of readdirSync16(receiptsDir).filter((f2) => f2.endsWith(".json"))) {
       try {
-        const r2 = JSON.parse(readFileSync39(join54(receiptsDir, f), "utf8"));
+        const r2 = JSON.parse(readFileSync39(join55(receiptsDir, f), "utf8"));
         if (r2.decision === "STOP_DONE") done++;
         else if (r2.decision === "STOP_BLOCKED") blocked++;
         else inProgress++;
@@ -17870,17 +17980,17 @@ function prepareFeedbackBundle(dir) {
     redaction: "applied"
   };
   const redacted = redact(bundle).value;
-  const bundleDir = join54(dir, ".avorelo", "feedback");
+  const bundleDir = join55(dir, ".avorelo", "feedback");
   mkdirSync34(bundleDir, { recursive: true });
-  const bundlePath = join54(bundleDir, `${redacted.bundleId}.json`);
+  const bundlePath = join55(bundleDir, `${redacted.bundleId}.json`);
   writeFileSync32(bundlePath, JSON.stringify(redacted, null, 2));
   return { bundle: redacted, path: bundlePath };
 }
 function prepareSupportBundle(dir) {
   const { bundle, path: fbPath } = prepareFeedbackBundle(dir);
-  const supportDir = join54(dir, ".avorelo", "support");
+  const supportDir = join55(dir, ".avorelo", "support");
   mkdirSync34(supportDir, { recursive: true });
-  const supportPath = join54(supportDir, `support_${bundle.bundleId}.json`);
+  const supportPath = join55(supportDir, `support_${bundle.bundleId}.json`);
   writeFileSync32(supportPath, JSON.stringify(bundle, null, 2));
   return { bundle, path: supportPath };
 }
@@ -18073,11 +18183,11 @@ function result(classification, risk, reasonCodes, humanGateConditions) {
 import { randomUUID as randomUUID8 } from "node:crypto";
 
 // src/avorelo/capabilities/loop-control/check-detection.ts
-import { readFileSync as readFileSync40, existsSync as existsSync56 } from "node:fs";
-import { join as join55 } from "node:path";
+import { readFileSync as readFileSync40, existsSync as existsSync57 } from "node:fs";
+import { join as join56 } from "node:path";
 function detectFromPackageJson(cwd) {
-  const pkgPath = join55(cwd, "package.json");
-  if (!existsSync56(pkgPath)) return [];
+  const pkgPath = join56(cwd, "package.json");
+  if (!existsSync57(pkgPath)) return [];
   try {
     const pkg = JSON.parse(readFileSync40(pkgPath, "utf8"));
     const scripts = pkg.scripts ?? {};
@@ -18100,19 +18210,19 @@ function detectFromPackageJson(cwd) {
   }
 }
 function detectFromPython(cwd) {
-  if (existsSync56(join55(cwd, "pytest.ini")) || existsSync56(join55(cwd, "pyproject.toml")) || existsSync56(join55(cwd, "setup.py"))) {
+  if (existsSync57(join56(cwd, "pytest.ini")) || existsSync57(join56(cwd, "pyproject.toml")) || existsSync57(join56(cwd, "setup.py"))) {
     return [{ checkId: "chk_pytest", label: "pytest", command: "python -m pytest", source: "python" }];
   }
   return [];
 }
 function detectFromGo(cwd) {
-  if (existsSync56(join55(cwd, "go.mod"))) {
+  if (existsSync57(join56(cwd, "go.mod"))) {
     return [{ checkId: "chk_go_test", label: "go test", command: "go test ./...", source: "go.mod" }];
   }
   return [];
 }
 function detectFromRust(cwd) {
-  if (existsSync56(join55(cwd, "Cargo.toml"))) {
+  if (existsSync57(join56(cwd, "Cargo.toml"))) {
     return [{ checkId: "chk_cargo_test", label: "cargo test", command: "cargo test", source: "Cargo.toml" }];
   }
   return [];
@@ -18409,8 +18519,8 @@ function getCurrentHead(cwd) {
 
 // src/avorelo/capabilities/loop-control/loop-metadata.ts
 init_redaction();
-import { mkdirSync as mkdirSync35, writeFileSync as writeFileSync33, readFileSync as readFileSync41, existsSync as existsSync57, readdirSync as readdirSync16 } from "node:fs";
-import { join as join56 } from "node:path";
+import { mkdirSync as mkdirSync35, writeFileSync as writeFileSync33, readFileSync as readFileSync41, existsSync as existsSync58, readdirSync as readdirSync17 } from "node:fs";
+import { join as join57 } from "node:path";
 function classifyFile(file, allowed, disallowed) {
   for (const d of disallowed) {
     const pat = d.replace(/\/?\*+$/, "");
@@ -18477,7 +18587,7 @@ function buildLoopMetadata(input) {
   };
 }
 function loopDir(dir) {
-  return join56(dir, ".avorelo", "loops");
+  return join57(dir, ".avorelo", "loops");
 }
 function persistLoopMetadata(dir, metadata) {
   const d = loopDir(dir);
@@ -18491,13 +18601,13 @@ function persistLoopMetadata(dir, metadata) {
     containsTerminalLog: false,
     containsGitDiff: false
   };
-  const path = join56(d, `${metadata.loopId}.json`);
+  const path = join57(d, `${metadata.loopId}.json`);
   writeFileSync33(path, JSON.stringify(safe, null, 2));
   return path;
 }
 function readLoopMetadata(dir, loopId) {
-  const path = join56(loopDir(dir), `${loopId}.json`);
-  if (!existsSync57(path)) return null;
+  const path = join57(loopDir(dir), `${loopId}.json`);
+  if (!existsSync58(path)) return null;
   try {
     const data = JSON.parse(readFileSync41(path, "utf8"));
     return data && data.contract === "avorelo.loopMetadata.v1" ? data : null;
@@ -18507,15 +18617,15 @@ function readLoopMetadata(dir, loopId) {
 }
 function readLatestLoopMetadata(dir) {
   const d = loopDir(dir);
-  if (!existsSync57(d)) return null;
+  if (!existsSync58(d)) return null;
   try {
-    const files = readdirSync16(d).filter((f) => f.startsWith("loop_") && f.endsWith(".json"));
+    const files = readdirSync17(d).filter((f) => f.startsWith("loop_") && f.endsWith(".json"));
     if (files.length === 0) return null;
     let latest = null;
     let latestTime = "";
     for (const f of files) {
       try {
-        const data = JSON.parse(readFileSync41(join56(d, f), "utf8"));
+        const data = JSON.parse(readFileSync41(join57(d, f), "utf8"));
         if (data && data.contract === "avorelo.loopMetadata.v1" && data.createdAt > latestTime) {
           latest = data;
           latestTime = data.createdAt;
@@ -18529,8 +18639,8 @@ function readLatestLoopMetadata(dir) {
   }
 }
 function readActiveLoop(dir) {
-  const path = join56(loopDir(dir), "active.json");
-  if (!existsSync57(path)) return null;
+  const path = join57(loopDir(dir), "active.json");
+  if (!existsSync58(path)) return null;
   try {
     return JSON.parse(readFileSync41(path, "utf8"));
   } catch {
@@ -18540,11 +18650,11 @@ function readActiveLoop(dir) {
 function writeActiveLoop(dir, loopId, status) {
   const d = loopDir(dir);
   mkdirSync35(d, { recursive: true });
-  writeFileSync33(join56(d, "active.json"), JSON.stringify({ loopId, status }));
+  writeFileSync33(join57(d, "active.json"), JSON.stringify({ loopId, status }));
 }
 function clearActiveLoop(dir) {
-  const path = join56(loopDir(dir), "active.json");
-  if (existsSync57(path)) {
+  const path = join57(loopDir(dir), "active.json");
+  if (existsSync58(path)) {
     writeFileSync33(path, JSON.stringify({ loopId: null, status: "none" }));
   }
 }
@@ -18888,13 +18998,13 @@ var claudeCodeLoopAdapter = {
 };
 
 // src/avorelo/capabilities/settings/index.ts
-import { existsSync as existsSync58, readFileSync as readFileSync42, writeFileSync as writeFileSync34, mkdirSync as mkdirSync36 } from "node:fs";
-import { join as join57, dirname as dirname11 } from "node:path";
+import { existsSync as existsSync59, readFileSync as readFileSync42, writeFileSync as writeFileSync34, mkdirSync as mkdirSync36 } from "node:fs";
+import { join as join58, dirname as dirname11 } from "node:path";
 var SETTINGS_CONTRACT = "avorelo.settings.v1";
 var SETTINGS_PATH = ".avorelo/settings.json";
 function getCurrentVersion3() {
   try {
-    const pkgPath = join57(dirname11(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), "../../../../package.json");
+    const pkgPath = join58(dirname11(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), "../../../../package.json");
     const pkg = JSON.parse(readFileSync42(pkgPath, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
@@ -18954,8 +19064,8 @@ function buildDefaultSettings(opts) {
   };
 }
 function loadSettings(dir) {
-  const p = join57(dir, SETTINGS_PATH);
-  if (!existsSync58(p)) return null;
+  const p = join58(dir, SETTINGS_PATH);
+  if (!existsSync59(p)) return null;
   try {
     const s = JSON.parse(readFileSync42(p, "utf8"));
     return s.contract === SETTINGS_CONTRACT ? s : null;
@@ -18964,7 +19074,7 @@ function loadSettings(dir) {
   }
 }
 function writeSettings(dir, settings) {
-  const p = join57(dir, SETTINGS_PATH);
+  const p = join58(dir, SETTINGS_PATH);
   mkdirSync36(dirname11(p), { recursive: true });
   writeFileSync34(p, JSON.stringify(settings, null, 2));
 }
@@ -19062,13 +19172,13 @@ var ALPHA_NOTICE = [
 ].join("\n");
 
 // src/avorelo/capabilities/update-channel/index.ts
-import { existsSync as existsSync59, readFileSync as readFileSync43, writeFileSync as writeFileSync35, mkdirSync as mkdirSync37 } from "node:fs";
-import { join as join58, dirname as dirname12 } from "node:path";
+import { existsSync as existsSync60, readFileSync as readFileSync43, writeFileSync as writeFileSync35, mkdirSync as mkdirSync37 } from "node:fs";
+import { join as join59, dirname as dirname12 } from "node:path";
 var UPDATE_CHANNEL_CONTRACT = "avorelo.updateChannel.v1";
 var UPDATE_MANIFEST_CONTRACT = "avorelo.updateManifest.v1";
 function getCurrentVersion4() {
   try {
-    const pkgPath = join58(dirname12(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), "../../../../package.json");
+    const pkgPath = join59(dirname12(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), "../../../../package.json");
     const pkg = JSON.parse(readFileSync43(pkgPath, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
@@ -19076,11 +19186,11 @@ function getCurrentVersion4() {
   }
 }
 function detectInstallMethod(root) {
-  const r2 = root ?? join58(dirname12(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), "../../../..");
-  if (existsSync59(join58(r2, ".git"))) return "source-checkout";
+  const r2 = root ?? join59(dirname12(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), "../../../..");
+  if (existsSync60(join59(r2, ".git"))) return "source-checkout";
   try {
-    const p = join58(r2, "package.json");
-    if (existsSync59(p)) {
+    const p = join59(r2, "package.json");
+    if (existsSync60(p)) {
       const pkg = JSON.parse(readFileSync43(p, "utf8"));
       if (pkg._resolved) return "npm-global";
       if (pkg._where) return "npm-local";
@@ -19090,8 +19200,8 @@ function detectInstallMethod(root) {
   return "unknown";
 }
 function loadManifest(dir) {
-  const p = join58(dir, ".avorelo", "update-manifest.json");
-  if (!existsSync59(p)) return null;
+  const p = join59(dir, ".avorelo", "update-manifest.json");
+  if (!existsSync60(p)) return null;
   try {
     const m = JSON.parse(readFileSync43(p, "utf8"));
     return m.contract === UPDATE_MANIFEST_CONTRACT ? m : null;
@@ -19233,8 +19343,8 @@ function renderUpdateApply(r2) {
 }
 
 // src/avorelo/capabilities/dogfood-learning/index.ts
-import { existsSync as existsSync60, readFileSync as readFileSync44, writeFileSync as writeFileSync36, mkdirSync as mkdirSync38, readdirSync as readdirSync17, unlinkSync as unlinkSync3 } from "node:fs";
-import { join as join59, dirname as dirname13 } from "node:path";
+import { existsSync as existsSync61, readFileSync as readFileSync44, writeFileSync as writeFileSync36, mkdirSync as mkdirSync38, readdirSync as readdirSync18, unlinkSync as unlinkSync3 } from "node:fs";
+import { join as join60, dirname as dirname13 } from "node:path";
 import { randomUUID as randomUUID10 } from "node:crypto";
 var DOGFOOD_LEARNING_CONTRACT = "avorelo.dogfoodLearning.v1";
 var ALLOWED_KEYS2 = /* @__PURE__ */ new Set([
@@ -19366,7 +19476,7 @@ function inspectStringValue(val, key) {
 }
 function getCurrentVersion5() {
   try {
-    const pkgPath = join59(dirname13(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), "../../../../package.json");
+    const pkgPath = join60(dirname13(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), "../../../../package.json");
     const pkg = JSON.parse(readFileSync44(pkgPath, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
@@ -19421,7 +19531,7 @@ function buildLearningPayload(dir, opts) {
 var QUEUE_DIR = ".avorelo/learning-queue";
 var MAX_QUEUED_EVENTS = 500;
 function queueDir(dir) {
-  return join59(dir, QUEUE_DIR);
+  return join60(dir, QUEUE_DIR);
 }
 function ensureQueueDir(dir) {
   const qd = queueDir(dir);
@@ -19430,9 +19540,9 @@ function ensureQueueDir(dir) {
 }
 function countQueuedEvents(dir) {
   const qd = queueDir(dir);
-  if (!existsSync60(qd)) return 0;
+  if (!existsSync61(qd)) return 0;
   try {
-    return readdirSync17(qd).filter((f) => f.endsWith(".json")).length;
+    return readdirSync18(qd).filter((f) => f.endsWith(".json")).length;
   } catch {
     return 0;
   }
@@ -19442,18 +19552,18 @@ function queueEvent(dir, payload) {
   if (count >= MAX_QUEUED_EVENTS) return { queued: false };
   const qd = ensureQueueDir(dir);
   const filename = `${payload.createdAt.replace(/[:.]/g, "-")}_${payload.eventId}.json`;
-  const p = join59(qd, filename);
+  const p = join60(qd, filename);
   writeFileSync36(p, JSON.stringify(payload));
   return { queued: true, path: p };
 }
 function loadQueuedEvents(dir) {
   const qd = queueDir(dir);
-  if (!existsSync60(qd)) return [];
-  const files = readdirSync17(qd).filter((f) => f.endsWith(".json")).sort();
+  if (!existsSync61(qd)) return [];
+  const files = readdirSync18(qd).filter((f) => f.endsWith(".json")).sort();
   const events = [];
   for (const f of files) {
     try {
-      const e = JSON.parse(readFileSync44(join59(qd, f), "utf8"));
+      const e = JSON.parse(readFileSync44(join60(qd, f), "utf8"));
       if (e.contract === DOGFOOD_LEARNING_CONTRACT) events.push(e);
     } catch {
     }
@@ -19462,11 +19572,11 @@ function loadQueuedEvents(dir) {
 }
 function purgeQueue(dir) {
   const qd = queueDir(dir);
-  if (!existsSync60(qd)) return { purged: 0 };
-  const files = readdirSync17(qd).filter((f) => f.endsWith(".json"));
+  if (!existsSync61(qd)) return { purged: 0 };
+  const files = readdirSync18(qd).filter((f) => f.endsWith(".json"));
   for (const f of files) {
     try {
-      unlinkSync3(join59(qd, f));
+      unlinkSync3(join60(qd, f));
     } catch {
     }
   }
@@ -19601,13 +19711,13 @@ async function flushQueue(dir) {
   let sent = 0;
   let failed = 0;
   const qd = queueDir(dir);
-  const files = readdirSync17(qd).filter((f) => f.endsWith(".json")).sort();
+  const files = readdirSync18(qd).filter((f) => f.endsWith(".json")).sort();
   for (const f of files) {
     try {
-      const event = JSON.parse(readFileSync44(join59(qd, f), "utf8"));
+      const event = JSON.parse(readFileSync44(join60(qd, f), "utf8"));
       const result3 = await sendToEndpoint(endpointUrl, event);
       if (result3.ok) {
-        unlinkSync3(join59(qd, f));
+        unlinkSync3(join60(qd, f));
         sent++;
       } else {
         failed++;
@@ -19657,13 +19767,13 @@ function generateLocalFingerprint(target) {
 var CLAIM_EXPIRY_MS = 24 * 60 * 60 * 1e3;
 
 // src/avorelo/capabilities/cloud-sync/cli-auth-state.ts
-import { existsSync as existsSync61, readFileSync as readFileSync45, writeFileSync as writeFileSync37, mkdirSync as mkdirSync39 } from "node:fs";
-import { join as join60 } from "node:path";
+import { existsSync as existsSync62, readFileSync as readFileSync45, writeFileSync as writeFileSync37, mkdirSync as mkdirSync39 } from "node:fs";
+import { join as join61 } from "node:path";
 function authDir(baseDir) {
-  return join60(baseDir, ".avorelo", "auth");
+  return join61(baseDir, ".avorelo", "auth");
 }
 function authPath(baseDir) {
-  return join60(authDir(baseDir), "session.json");
+  return join61(authDir(baseDir), "session.json");
 }
 function writeCliAuthState(baseDir, state) {
   const dir = authDir(baseDir);
@@ -19674,7 +19784,7 @@ function writeCliAuthState(baseDir, state) {
 }
 function readCliAuthState(baseDir) {
   const path = authPath(baseDir);
-  if (!existsSync61(path)) return null;
+  if (!existsSync62(path)) return null;
   try {
     const raw = JSON.parse(readFileSync45(path, "utf8"));
     if (!raw || typeof raw.token !== "string" || typeof raw.workspaceId !== "string") return null;
@@ -19929,11 +20039,11 @@ function renderTelemetryPreview(preview) {
 }
 
 // src/avorelo/telemetry/integration-detection.ts
-import { existsSync as existsSync62, readFileSync as readFileSync46 } from "node:fs";
-import { join as join61 } from "node:path";
+import { existsSync as existsSync63, readFileSync as readFileSync46 } from "node:fs";
+import { join as join62 } from "node:path";
 function detectGitProviderFromConfig(dir) {
-  const configPath = join61(dir, ".git", "config");
-  if (!existsSync62(configPath)) return "unknown";
+  const configPath = join62(dir, ".git", "config");
+  if (!existsSync63(configPath)) return "unknown";
   try {
     const content = readFileSync46(configPath, "utf8").toLowerCase();
     if (content.includes("github.com")) return "github";
@@ -19945,15 +20055,15 @@ function detectGitProviderFromConfig(dir) {
   }
 }
 function detectCiProvider(dir) {
-  if (existsSync62(join61(dir, ".github", "workflows"))) return "github_actions";
-  if (existsSync62(join61(dir, ".gitlab-ci.yml"))) return "gitlab_ci";
-  if (existsSync62(join61(dir, ".circleci", "config.yml"))) return "circle";
-  if (existsSync62(join61(dir, "Jenkinsfile"))) return "jenkins";
+  if (existsSync63(join62(dir, ".github", "workflows"))) return "github_actions";
+  if (existsSync63(join62(dir, ".gitlab-ci.yml"))) return "gitlab_ci";
+  if (existsSync63(join62(dir, ".circleci", "config.yml"))) return "circle";
+  if (existsSync63(join62(dir, "Jenkinsfile"))) return "jenkins";
   return "unknown";
 }
 function detectRepoVisibility(dir) {
-  const configPath = join61(dir, ".git", "config");
-  if (!existsSync62(configPath)) return "unknown";
+  const configPath = join62(dir, ".git", "config");
+  if (!existsSync63(configPath)) return "unknown";
   try {
     const content = readFileSync46(configPath, "utf8").toLowerCase();
     if (content.includes("github.com")) {
@@ -20087,16 +20197,16 @@ async function sendDueTelemetry(dir, opts) {
 }
 
 // src/avorelo/kernel/agent-artifact-guard/guard-handler.ts
-import { existsSync as existsSync64, readFileSync as readFileSync50 } from "node:fs";
-import { join as join66 } from "node:path";
+import { existsSync as existsSync65, readFileSync as readFileSync50 } from "node:fs";
+import { join as join67 } from "node:path";
 
 // src/avorelo/kernel/agent-artifact-guard/index.ts
-import { join as join65 } from "node:path";
+import { join as join66 } from "node:path";
 import { readFileSync as readFileSync49 } from "node:fs";
 
 // src/avorelo/kernel/agent-artifact-guard/artifact-discovery.ts
-import { readdirSync as readdirSync18, statSync as statSync13, existsSync as existsSync63 } from "node:fs";
-import { join as join62, relative as relative4, extname as extname2 } from "node:path";
+import { readdirSync as readdirSync19, statSync as statSync14, existsSync as existsSync64 } from "node:fs";
+import { join as join63, relative as relative5, extname as extname2 } from "node:path";
 var SCANNED_EXTENSIONS = /* @__PURE__ */ new Set([
   ".md",
   ".js",
@@ -20131,16 +20241,16 @@ var ARTIFACT_PATTERNS = [
 function walkDir2(dir, results) {
   let entries;
   try {
-    entries = readdirSync18(dir);
+    entries = readdirSync19(dir);
   } catch {
     return;
   }
   for (const entry of entries) {
     if (IGNORED_DIRS.has(entry)) continue;
-    const full = join62(dir, entry);
+    const full = join63(dir, entry);
     let st;
     try {
-      st = statSync13(full);
+      st = statSync14(full);
     } catch {
       continue;
     }
@@ -20155,11 +20265,11 @@ function discoverArtifacts(projectRoot) {
   const artifacts = [];
   for (const pattern of ARTIFACT_PATTERNS) {
     for (const p of pattern.paths) {
-      const fullPath = join62(projectRoot, p);
-      if (!existsSync63(fullPath)) continue;
+      const fullPath = join63(projectRoot, p);
+      if (!existsSync64(fullPath)) continue;
       let st;
       try {
-        st = statSync13(fullPath);
+        st = statSync14(fullPath);
       } catch {
         continue;
       }
@@ -20167,7 +20277,7 @@ function discoverArtifacts(projectRoot) {
         if (SCANNED_EXTENSIONS.has(extname2(fullPath).toLowerCase()) || fullPath.endsWith(".json")) {
           artifacts.push({
             kind: pattern.kind,
-            path: relative4(projectRoot, fullPath)
+            path: relative5(projectRoot, fullPath)
           });
         }
       } else if (st.isDirectory() && pattern.recursive) {
@@ -20176,7 +20286,7 @@ function discoverArtifacts(projectRoot) {
         for (const f of files) {
           artifacts.push({
             kind: pattern.kind,
-            path: relative4(projectRoot, f)
+            path: relative5(projectRoot, f)
           });
         }
       }
@@ -20742,9 +20852,9 @@ function toJson(result3) {
 
 // src/avorelo/kernel/agent-artifact-guard/allowlist.ts
 import { readFileSync as readFileSync47 } from "node:fs";
-import { join as join63 } from "node:path";
+import { join as join64 } from "node:path";
 function loadAllowlist(projectRoot) {
-  const filePath = join63(projectRoot, ".avorelo", "artifact-guard", "allowlist.json");
+  const filePath = join64(projectRoot, ".avorelo", "artifact-guard", "allowlist.json");
   try {
     const raw = readFileSync47(filePath, "utf-8");
     const parsed = JSON.parse(raw);
@@ -20766,12 +20876,12 @@ function isAllowlisted(finding, allowlist) {
 }
 
 // src/avorelo/kernel/agent-artifact-guard/receipt-store.ts
-import { mkdirSync as mkdirSync40, writeFileSync as writeFileSync38, readdirSync as readdirSync19, readFileSync as readFileSync48, unlinkSync as unlinkSync4 } from "node:fs";
-import { join as join64 } from "node:path";
+import { mkdirSync as mkdirSync40, writeFileSync as writeFileSync38, readdirSync as readdirSync20, readFileSync as readFileSync48, unlinkSync as unlinkSync4 } from "node:fs";
+import { join as join65 } from "node:path";
 var RECEIPT_DIR = "artifact-guard";
 var MAX_STORED_RECEIPTS = 50;
 function receiptDir(projectRoot) {
-  return join64(projectRoot, ".avorelo", RECEIPT_DIR);
+  return join65(projectRoot, ".avorelo", RECEIPT_DIR);
 }
 function receiptFilename(receipt) {
   const ts = receipt.scannedAt.replace(/[:.]/g, "-");
@@ -20781,7 +20891,7 @@ function storeReceipt(projectRoot, receipt) {
   const dir = receiptDir(projectRoot);
   mkdirSync40(dir, { recursive: true });
   const filename = receiptFilename(receipt);
-  const filePath = join64(dir, filename);
+  const filePath = join65(dir, filename);
   writeFileSync38(filePath, JSON.stringify(receipt, null, 2), "utf-8");
   pruneOldReceipts(dir);
   return filePath;
@@ -20790,7 +20900,7 @@ function loadLatestReceipt(projectRoot) {
   const dir = receiptDir(projectRoot);
   let files;
   try {
-    files = readdirSync19(dir).filter((f) => f.startsWith("receipt-") && f.endsWith(".json"));
+    files = readdirSync20(dir).filter((f) => f.startsWith("receipt-") && f.endsWith(".json"));
   } catch {
     return null;
   }
@@ -20798,7 +20908,7 @@ function loadLatestReceipt(projectRoot) {
   files.sort();
   const latest = files[files.length - 1];
   try {
-    const raw = readFileSync48(join64(dir, latest), "utf-8");
+    const raw = readFileSync48(join65(dir, latest), "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -20806,11 +20916,11 @@ function loadLatestReceipt(projectRoot) {
 }
 function pruneOldReceipts(dir) {
   try {
-    const files = readdirSync19(dir).filter((f) => f.startsWith("receipt-") && f.endsWith(".json")).sort();
+    const files = readdirSync20(dir).filter((f) => f.startsWith("receipt-") && f.endsWith(".json")).sort();
     while (files.length > MAX_STORED_RECEIPTS) {
       const oldest = files.shift();
       try {
-        unlinkSync4(join64(dir, oldest));
+        unlinkSync4(join65(dir, oldest));
       } catch {
         break;
       }
@@ -20824,7 +20934,7 @@ function scan(projectRoot, options) {
   const artifacts = discoverArtifacts(projectRoot);
   const allFindings = [];
   for (const artifact of artifacts) {
-    const fullPath = join65(projectRoot, artifact.path);
+    const fullPath = join66(projectRoot, artifact.path);
     let content;
     try {
       content = readFileSync49(fullPath, "utf-8");
@@ -20871,9 +20981,9 @@ function scan(projectRoot, options) {
 
 // src/avorelo/kernel/agent-artifact-guard/guard-handler.ts
 function checkActivation(dir) {
-  const configPath = join66(dir, ".avorelo", "model-routing", "config.json");
+  const configPath = join67(dir, ".avorelo", "model-routing", "config.json");
   try {
-    if (existsSync64(configPath)) {
+    if (existsSync65(configPath)) {
       const raw = JSON.parse(readFileSync50(configPath, "utf-8"));
       return {
         activated: true,
@@ -21370,11 +21480,11 @@ function multiArg(args, name) {
   return values;
 }
 function contextControlArtifactPath(target) {
-  return join67(target, ".avorelo", "context-control", "latest.json");
+  return join68(target, ".avorelo", "context-control", "latest.json");
 }
 function loadContextControlArtifact(target) {
   const path = contextControlArtifactPath(target);
-  if (!existsSync65(path)) return null;
+  if (!existsSync66(path)) return null;
   try {
     return JSON.parse(readFileSync51(path, "utf8"));
   } catch {
@@ -21412,6 +21522,7 @@ function help() {
     "  prompt [--target <dir>]                                           Copy-ready prompt for any AI tool",
     "",
     "  activate [--target <dir>]                                         Full activation: detect, repair, run-entry",
+    "  activate --discover-projects [--dry-run] [--yes] [--target <dir>] Discover and activate multiple local projects",
     "  activate --install-hooks --approve [--target <dir>]               Activate + install Claude Code hooks",
     "  status [--target <dir>]                                           Show activation and session status",
     "  open [--target <dir>] [--format html|json|text]                   Local receipts dashboard",
@@ -21498,6 +21609,98 @@ async function cmdActivate(args) {
   const approve = args.includes("--approve");
   const claimToken = arg(args, "--link-code") ?? arg(args, "--claim");
   const scope = arg(args, "--scope") ?? "project-wide";
+  const discoverFlag = args.includes("--discover-projects");
+  const dryRunFlag = args.includes("--dry-run");
+  const yesFlag = args.includes("--yes");
+  const apiBaseUrl = process.env.APP_BASE_URL ?? "https://app.avorelo.com";
+  if (discoverFlag) {
+    const result3 = discoverProjects(target);
+    process.stdout.write(formatDiscoveryPreview(result3));
+    if (result3.projects.length === 0) return 0;
+    if (dryRunFlag) {
+      process.stdout.write("Dry run: no projects were activated. No files were written.\n\n");
+      return 0;
+    }
+    const selected = result3.projects.filter((p) => p.recommended);
+    if (selected.length === 0) {
+      process.stdout.write("All discovered projects are already activated. Nothing to do.\n\n");
+      return 0;
+    }
+    process.stdout.write(`${selected.length} project${selected.length === 1 ? "" : "s"} selected for activation.
+`);
+    if (!yesFlag) {
+      process.stdout.write("\nNo changes were made. To activate the selected projects, run again with --yes:\n");
+      process.stdout.write(`  npx -y avorelo@latest activate --scope ${scope} --link-code <code> --discover-projects --yes
+
+`);
+      return 0;
+    }
+    process.stdout.write("\nActivating selected projects...\n");
+    let activated = 0;
+    let failed = 0;
+    for (const project of selected) {
+      process.stdout.write(`
+--- ${project.relativePath} ---
+`);
+      try {
+        const preflight2 = runPreflight(project.path);
+        if (!preflight2.canStart) {
+          process.stderr.write(`  Skipped: preflight failed (${preflight2.taxonomy})
+`);
+          failed++;
+          continue;
+        }
+        const state2 = runFullActivation(project.path);
+        const contract2 = createWorkContract({ contractId: "canonical-activate", objective: "multi-project activation", allowedPaths: [join68(project.path, ".avorelo")], planTier: "Free" });
+        const ledger2 = new StateLedger();
+        const receipt2 = writeReceipt(ledger2, {
+          contractId: contract2.contractId,
+          decision: "STOP_DONE",
+          graded: [{ artifactId: "g1", level: "OUTCOME", ref: "ev:activation-state-written" }],
+          safeNextActions: ["run: avorelo status"],
+          decisionBasis: { method: "deterministic", confidence: "HIGH", evidenceRefs: ["ev:activation-state-written"], reasonCodes: ["MULTI_PROJECT_ACTIVATION"], fallbackUsed: false },
+          sampleSize: 1,
+          redactionClasses: [],
+          receiptId: `rcpt_multi_activate_${activated}`
+        });
+        persistActivationV2(project.path, state2);
+        persistReceipt(project.path, receipt2);
+        if (claimToken) {
+          const fingerprint2 = generateLocalFingerprint(project.path);
+          const detection2 = runFullDetection(project.path);
+          try {
+            await fetch(`${apiBaseUrl}/api/activation/link`, {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify({
+                token: claimToken,
+                fingerprint: fingerprint2,
+                version: avoreloVersion(),
+                toolsDetected: detection2.summary.toolsDetected,
+                osFamily: detection2.environment.os,
+                nodeVersion: detection2.environment.nodeVersion ?? null,
+                taxonomy: "ACTIVATION_SUCCEEDED_LOCALLY"
+              })
+            });
+          } catch {
+          }
+        }
+        process.stdout.write(`  Activated: ${state2.activationMode} (${state2.activationStatus})
+`);
+        activated++;
+      } catch (e) {
+        process.stderr.write(`  Failed: ${e.message}
+`);
+        failed++;
+      }
+    }
+    const skippedCount = result3.projects.length - selected.length;
+    process.stdout.write(`
+Done: ${activated} activated, ${failed} failed, ${skippedCount} skipped (already activated).
+
+`);
+    return failed > 0 ? 1 : 0;
+  }
   if (installHooksFlag) {
     if (!approve) {
       process.stderr.write("Hook installation requires explicit approval. Add --approve to confirm.\n");
@@ -21507,8 +21710,8 @@ async function cmdActivate(args) {
       const r2 = activate(target, { approve: true });
       persistReceipt(target, r2.receipt);
       const state2 = runFullActivation(target);
-      state2.setupSteps.push({ id: "hooks_installed", label: "Claude Code hooks installed", status: r2.ok ? "passed" : "blocked", evidencePath: join67(target, ".claude", "settings.json") });
-      if (r2.ok) state2.receipts.push({ id: r2.receipt.receiptId, path: join67(target, ".avorelo", "receipts", `${r2.receipt.receiptId}.json`), type: "activation_with_hooks" });
+      state2.setupSteps.push({ id: "hooks_installed", label: "Claude Code hooks installed", status: r2.ok ? "passed" : "blocked", evidencePath: join68(target, ".claude", "settings.json") });
+      if (r2.ok) state2.receipts.push({ id: r2.receipt.receiptId, path: join68(target, ".avorelo", "receipts", `${r2.receipt.receiptId}.json`), type: "activation_with_hooks" });
       persistActivationV2(target, state2);
       process.stdout.write(JSON.stringify({ ok: r2.ok, mode: "activate-with-hooks", target, installed: r2.validate.wellFormed, receipt: r2.receipt.receiptId }, null, 2) + "\n");
       return r2.ok ? 0 : 1;
@@ -21531,7 +21734,7 @@ Activation taxonomy: ${preflight.taxonomy}
     process.stderr.write("Continuing with activation despite warnings...\n\n");
   }
   const state = runFullActivation(target);
-  const contract = createWorkContract({ contractId: "canonical-activate", objective: "full local-first activation", allowedPaths: [join67(target, ".avorelo")], planTier: "Free" });
+  const contract = createWorkContract({ contractId: "canonical-activate", objective: "full local-first activation", allowedPaths: [join68(target, ".avorelo")], planTier: "Free" });
   const ledger = new StateLedger();
   const receipt = writeReceipt(ledger, {
     contractId: contract.contractId,
@@ -21546,7 +21749,7 @@ Activation taxonomy: ${preflight.taxonomy}
     redactionClasses: [],
     receiptId: "rcpt_canonical_activation"
   });
-  state.receipts.push({ id: receipt.receiptId, path: join67(target, ".avorelo", "receipts", `${receipt.receiptId}.json`), type: "canonical_activation" });
+  state.receipts.push({ id: receipt.receiptId, path: join68(target, ".avorelo", "receipts", `${receipt.receiptId}.json`), type: "canonical_activation" });
   persistActivationV2(target, state);
   persistReceipt(target, receipt);
   const detection = runFullDetection(target);
@@ -21561,7 +21764,7 @@ Activation taxonomy: ${preflight.taxonomy}
     `  Mode:       ${state.activationMode}`,
     `  Scope:      ${scope}`,
     `  Status:     ${state.activationStatus}`,
-    `  State:      ${join67(target, ACTIVATION_STATE_DIR, ACTIVATION_STATE_FILE)}`
+    `  State:      ${join68(target, ACTIVATION_STATE_DIR, ACTIVATION_STATE_FILE)}`
   ];
   if (fv.found.length > 0) {
     lines.push("", "  Found:");
@@ -21595,9 +21798,8 @@ Activation taxonomy: ${preflight.taxonomy}
   );
   let linkResult = "no claim provided";
   if (claimToken) {
-    const baseUrl = process.env.APP_BASE_URL ?? "https://app.avorelo.com";
     try {
-      const resp = await fetch(`${baseUrl}/api/activation/link`, {
+      const resp = await fetch(`${apiBaseUrl}/api/activation/link`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({
@@ -21854,7 +22056,7 @@ function cmdStatus(args) {
     `  activation:   ${displayStatus}`,
     `  mode:         ${state.activationMode}`,
     `  contract:     ${state.contract}`,
-    `  state:        ${join67(target, ACTIVATION_STATE_DIR, ACTIVATION_STATE_FILE)}`,
+    `  state:        ${join68(target, ACTIVATION_STATE_DIR, ACTIVATION_STATE_FILE)}`,
     `  hooks:        ${v.installed ? v.wellFormed ? "installed (6/6)" : `partial` : "not installed"}`
   ];
   if (isV2) {
@@ -21924,7 +22126,7 @@ function cmdVerify(args) {
   }
   const input = loadProofInput(target);
   if (input) {
-    const contract = createWorkContract({ contractId: "verify", objective: input.objective ?? "verify real-workflow proof", allowedPaths: [join67(target, "src")], planTier: "Free" });
+    const contract = createWorkContract({ contractId: "verify", objective: input.objective ?? "verify real-workflow proof", allowedPaths: [join68(target, "src")], planTier: "Free" });
     const r2 = evaluateProof({ contract, artifacts: input.artifacts, readbacks: input.readbacks, dir: target, sampleSize: input.sampleSize, receiptId: "rcpt_verify" });
     process.stdout.write(JSON.stringify({ scope: "full", activationState: { valid: true }, proof: { decision: r2.decision, confidence: r2.confidence } }, null, 2) + "\n");
     return r2.decision === "STOP_DONE" ? 0 : 1;
@@ -21933,13 +22135,13 @@ function cmdVerify(args) {
   return 0;
 }
 function cmdSite(args) {
-  const outDir = arg(args, "--out", join67(process.cwd(), ".avorelo", "site"));
+  const outDir = arg(args, "--out", join68(process.cwd(), ".avorelo", "site"));
   const r2 = buildSite(outDir);
   process.stdout.write(JSON.stringify({ ok: r2.ok, outDir: r2.outDir, indexPath: r2.indexPath, pages: r2.pages }, null, 2) + "\n");
   return r2.ok ? 0 : 1;
 }
 function cmdServe(args) {
-  const outDir = arg(args, "--out", join67(process.cwd(), ".avorelo", "site"));
+  const outDir = arg(args, "--out", join68(process.cwd(), ".avorelo", "site"));
   const port = Number(arg(args, "--port", "0"));
   buildSite(outDir);
   serve(outDir, { port: Number.isFinite(port) ? port : 0 }).then((h) => {
@@ -21995,9 +22197,9 @@ function cmdLifecycleHook(args) {
     const sourceLabel = String(ccEvent.tool_name ?? "").toLowerCase().includes("mcp") ? "tool_output" : "tool_output";
     const r3 = scanContent({ content: toolOutput, sourceKind: sourceLabel });
     try {
-      const dir = join67(cwd, ".avorelo", "secret-boundary");
+      const dir = join68(cwd, ".avorelo", "secret-boundary");
       mkdirSync41(dir, { recursive: true });
-      appendFileSync12(join67(dir, "receipts.jsonl"), JSON.stringify(redact(r3.receipt).value) + "\n");
+      appendFileSync12(join68(dir, "receipts.jsonl"), JSON.stringify(redact(r3.receipt).value) + "\n");
     } catch {
     }
     process.stdout.write(JSON.stringify({
@@ -22014,13 +22216,13 @@ function cmdLifecycleHook(args) {
   }
   const looksLikeToolRequest = payloadRaw && ccEvent.tool !== void 0 && ccEvent.workingDir !== void 0;
   const req = looksLikeToolRequest ? ccEvent : mapClaudeCodeEvent(ccEvent, cwd);
-  const contract = createWorkContract({ contractId: "hook", objective: "lifecycle hook", allowedPaths: [join67(cwd, "src")], planTier: "Free" });
+  const contract = createWorkContract({ contractId: "hook", objective: "lifecycle hook", allowedPaths: [join68(cwd, "src")], planTier: "Free" });
   const r2 = handleLifecycleHook(event, req, { contract });
   try {
-    const dir = join67(cwd, ".avorelo", "events");
+    const dir = join68(cwd, ".avorelo", "events");
     mkdirSync41(dir, { recursive: true });
     const entry = redact({ ts: Date.now(), event: r2.event, tool: req.tool, verdict: r2.verdict, reasonCodes: r2.reasonCodes, redactionClasses: r2.redactionClasses, latencyMs: r2.latencyMs }).value;
-    appendFileSync12(join67(dir, "hook-fires.jsonl"), JSON.stringify(entry) + "\n");
+    appendFileSync12(join68(dir, "hook-fires.jsonl"), JSON.stringify(entry) + "\n");
   } catch {
   }
   if (r2.exitCode === 2) {
@@ -22569,7 +22771,7 @@ function cmdTokenCost(args) {
   }
   if (sub === "import" || sub === "validate") {
     const file = arg(args, "--file");
-    if (!file || !existsSync65(file)) {
+    if (!file || !existsSync66(file)) {
       process.stderr.write("Usage: avorelo token-cost " + sub + " --file <path> [--json]\n");
       return 2;
     }
@@ -22716,7 +22918,7 @@ function cmdContextCheck(args) {
   const ci = args.includes("--ci");
   const wcPath = arg(args, "--work-contract");
   let workContract;
-  if (wcPath && existsSync65(wcPath)) {
+  if (wcPath && existsSync66(wcPath)) {
     try {
       workContract = JSON.parse(readFileSync51(wcPath, "utf8"));
     } catch {
@@ -22968,7 +23170,7 @@ function cmdSecretBoundary(args) {
   const asJson = args.includes("--json");
   let content = arg(args, "--content");
   const file = arg(args, "--file");
-  if (file && existsSync65(file)) content = readFileSync51(file, "utf8");
+  if (file && existsSync66(file)) content = readFileSync51(file, "utf8");
   if (content === void 0) content = "";
   if (sub === "scan" || sub === void 0) {
     const r2 = scanContent({ content, sourceKind: file ? "file" : "tool_output" });
@@ -23035,7 +23237,7 @@ function cmdExplain(args) {
   const changedFiles = [];
   for (const { adapter } of detected) {
     const surface = adapter.getInstructionSurface(target);
-    if (surface && existsSync65(surface)) changedFiles.push(surface);
+    if (surface && existsSync66(surface)) changedFiles.push(surface);
   }
   if (changedFiles.length > 0) {
     lines.push("  Changed:");
@@ -23049,7 +23251,7 @@ function cmdExplain(args) {
   lines.push("");
   lines.push(`  Hooks: ${hookValidation.installed ? "installed" : "not installed"}`);
   lines.push("  Cloud: off (local-first)");
-  lines.push(`  Receipts: ${join67(target, ".avorelo", "receipts")}`);
+  lines.push(`  Receipts: ${join68(target, ".avorelo", "receipts")}`);
   const sessionStatus = getSessionStatus(target);
   if (sessionStatus) {
     lines.push("");
@@ -23209,7 +23411,7 @@ function cmdFeedback(args) {
   }
   if (sub === "share") {
     const file = arg(args, "--file");
-    if (!file || !existsSync65(file)) {
+    if (!file || !existsSync66(file)) {
       process.stderr.write("Usage: avorelo feedback share --file <bundle-path>\n");
       return 2;
     }
@@ -23513,7 +23715,7 @@ No loop metadata found for ${loopId}.
   if (sub === "doctor") {
     const issues = [];
     const ok = [];
-    if (existsSync65(join67(target, ".git"))) {
+    if (existsSync66(join68(target, ".git"))) {
       ok.push("Git repository detected");
     } else {
       issues.push("Not a git repository \u2014 loop needs git for drift detection");
@@ -23523,10 +23725,10 @@ No loop metadata found for ${loopId}.
     } else {
       issues.push("Claude Code CLI not found \u2014 install it or ensure `claude` is on PATH");
     }
-    const testDir = join67(target, ".avorelo", "loops");
+    const testDir = join68(target, ".avorelo", "loops");
     try {
       mkdirSync41(testDir, { recursive: true });
-      const testFile = join67(testDir, ".doctor_probe");
+      const testFile = join68(testDir, ".doctor_probe");
       writeFileSync39(testFile, "probe");
       unlinkSync5(testFile);
       ok.push("Storage writable (.avorelo/loops/)");
@@ -23569,11 +23771,11 @@ function cmdUninstallAll(args) {
   const target = arg(args, "--target", process.cwd());
   const adapterResult = uninstallAll(target);
   const hookResult = uninstall(target);
-  const removed = [...adapterResult.removed, ...hookResult.restored ? [join67(target, ".claude", "settings.json")] : []];
+  const removed = [...adapterResult.removed, ...hookResult.restored ? [join68(target, ".claude", "settings.json")] : []];
   const preserved = adapterResult.preserved;
-  const avoreloDir2 = join67(target, ".avorelo");
+  const avoreloDir2 = join68(target, ".avorelo");
   try {
-    if (existsSync65(avoreloDir2)) {
+    if (existsSync66(avoreloDir2)) {
       rmSync3(avoreloDir2, { recursive: true, force: true });
       removed.push(avoreloDir2);
     }
@@ -24166,7 +24368,7 @@ function cmdConfig(args) {
 function avoreloVersion() {
   for (const rel of ["../package.json", "../../package.json", "../../../package.json", "../../../../package.json"]) {
     try {
-      const pkg = JSON.parse(readFileSync51(join67(import.meta.dirname, rel), "utf8"));
+      const pkg = JSON.parse(readFileSync51(join68(import.meta.dirname, rel), "utf8"));
       if (pkg.name === "avorelo" && pkg.version) return pkg.version;
     } catch {
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "avorelo",
-  "version": "0.3.7",
+  "version": "0.3.8",
   "private": false,
   "license": "UNLICENSED",
   "description": "Avorelo — AI Work Control. One command. Keep using your AI coding tool. Avorelo quietly keeps the work focused and saves proof.",