brew-tui 0.4.1 → 0.5.1

package/build/index.js

@@ -1,21 +1,54 @@
 import {
-  DATA_DIR,
-  LICENSE_PATH,
-  PROFILES_DIR,
+  computeDrift,
+  createDefaultBrewfile,
+  diffSnapshots,
+  loadBrewfile,
+  reconcile,
+  saveBrewfile
+} from "./chunk-LXF72RCD.js";
+import {
+  applyConflictResolutions,
+  decryptPayload,
+  loadSyncConfig,
+  readSyncEnvelope,
+  sync
+} from "./chunk-42URLVAJ.js";
+import {
+  checkCompliance
+} from "./chunk-U2DRWB7A.js";
+import {
+  captureSnapshot,
+  execBrew,
+  loadSnapshots,
+  saveSnapshot,
+  streamBrew
+} from "./chunk-4I344KQX.js";
+import {
+  exportReport,
+  loadPolicy
+} from "./chunk-KN4GCMIE.js";
+import {
   appendEntry,
   clearHistory,
   detectAction,
-  ensureDataDirs,
   loadHistory
-} from "./chunk-65YZJX2E.js";
+} from "./chunk-KVCVIRWI.js";
+import {
+  DATA_DIR,
+  LICENSE_PATH,
+  PROFILES_DIR,
+  ensureDataDirs
+} from "./chunk-UWS4A4F5.js";
 import {
   fetchWithTimeout,
   getLocale,
-  logger,
   t,
   tp,
   useLocaleStore
-} from "./chunk-E7ZREAJW.js";
+} from "./chunk-KDJNCZD7.js";
+import {
+  logger
+} from "./chunk-KDHEUNRI.js";
 
 // src/index.tsx
 import { createInterface } from "readline/promises";
@@ -23,7 +56,7 @@ import { rm as rm3 } from "fs/promises";
 import { render } from "ink";
 
 // src/app.tsx
-import { useEffect as useEffect15 } from "react";
+import { useEffect as useEffect19 } from "react";
 import { useApp } from "ink";
 
 // src/components/layout/app-layout.tsx
@@ -44,7 +77,11 @@ var VIEWS = [
   "profiles",
   "smart-cleanup",
   "history",
+  "rollback",
+  "brewfile",
+  "sync",
   "security-audit",
+  "compliance",
   "account"
 ];
 var useNavigationStore = create((set, get) => ({
@@ -85,11 +122,18 @@ var PRO_VIEWS = /* @__PURE__ */ new Set([
   "profiles",
   "smart-cleanup",
   "history",
+  "rollback",
+  "brewfile",
+  "sync",
   "security-audit"
 ]);
+var TEAM_VIEWS = /* @__PURE__ */ new Set(["compliance"]);
 function isProView(viewId) {
   return PRO_VIEWS.has(viewId);
 }
+function isTeamView(viewId) {
+  return TEAM_VIEWS.has(viewId);
+}
 
 // src/utils/colors.ts
 var COLORS = {
@@ -187,7 +231,11 @@ var VIEW_LABEL_KEYS = {
   profiles: "view_profiles",
   "smart-cleanup": "view_smartCleanup",
   history: "view_history",
+  rollback: "view_rollback",
+  brewfile: "view_brewfile",
+  sync: "view_sync",
   "security-audit": "view_securityAudit",
+  compliance: "view_compliance",
   account: "view_account"
 };
 var VIEW_KEYS = {
@@ -202,6 +250,10 @@ var VIEW_KEYS = {
   "smart-cleanup": "7",
   history: "8",
   "security-audit": "9",
+  rollback: "",
+  brewfile: "",
+  sync: "",
+  compliance: "",
   account: "0"
 };
 var TAB_VIEWS = [
@@ -214,13 +266,17 @@ var TAB_VIEWS = [
   "profiles",
   "smart-cleanup",
   "history",
+  "rollback",
+  "brewfile",
+  "sync",
   "security-audit",
+  "compliance",
   "account"
 ];
 function MenuItem({ view, currentView }) {
   const key = VIEW_KEYS[view];
   const viewLabel = t(VIEW_LABEL_KEYS[view]);
-  const isPro = isProView(view);
+  const isPro = isProView(view) || isTeamView(view);
   const isActive = view === currentView;
   const isAccount = view === "account";
   const indicator = key || (view === "package-info" ? "\u21B2" : " ");
@@ -303,6 +359,10 @@ var VIEW_HINT_DEFS = {
   "smart-cleanup": [["enter", "hint_toggle"], ["c", "hint_clean"], ["r", "hint_refresh"], ["S", "hint_search"], ["q", "hint_quit"]],
   history: [["/", "hint_search"], ["enter", "hint_replay"], ["f", "hint_filter"], ["c", "hint_clear"], ["q", "hint_quit"]],
   "security-audit": [["r", "hint_scan"], ["enter", "hint_details"], ["u", "hint_upgrade"], ["S", "hint_search"], ["q", "hint_quit"]],
+  rollback: [["j/k", "hint_navigate"], ["enter", "hint_select"], ["r", "hint_rollback_confirm"], ["esc", "hint_back"], ["q", "hint_quit"]],
+  brewfile: [["j/k", "hint_navigate"], ["a", "hint_add"], ["d", "hint_delete"], ["r", "hint_reconcile"], ["e", "hint_export"], ["q", "hint_quit"]],
+  sync: [["s", "hint_sync"], ["r", "hint_refresh"], ["c", "hint_conflict"], ["esc", "hint_back"], ["q", "hint_quit"]],
+  compliance: [["r", "hint_scan"], ["i", "hint_import"], ["e", "hint_export"], ["c", "hint_clean"], ["q", "hint_quit"]],
   account: [["p", "hint_promo"], ["d", "hint_deactivate"], ["S", "hint_search"], ["q", "hint_quit"]]
 };
 function HintItem({ def }) {
@@ -485,6 +545,8 @@ async function deactivateLicense(key, instanceId) {
 // src/lib/license/license-manager.ts
 var BUILTIN_ACCOUNTS = {
   "admin@molinesdesigns.com": "pro",
+  "team@molinesdesigns.com": "team",
+  // Team tier test/admin account
   "artax1983@icloud.com": "free"
 };
 function getBuiltinAccountType(email) {
@@ -568,9 +630,9 @@ function isEncryptedLicenseFile(obj) {
 async function getMachineId2() {
   try {
     const { readFile: readMachineId } = await import("fs/promises");
-    const { join: join4 } = await import("path");
+    const { join: join6 } = await import("path");
     const { homedir: homedir3 } = await import("os");
-    const machineIdPath = join4(homedir3(), ".brew-tui", "machine-id");
+    const machineIdPath = join6(homedir3(), ".brew-tui", "machine-id");
     return (await readMachineId(machineIdPath, "utf-8")).trim() || null;
   } catch {
     return null;
@@ -657,6 +719,10 @@ function validateLicenseKey(key) {
     throw new Error("Invalid license key format");
   }
 }
+function detectPlan(key) {
+  const upper = key.toUpperCase();
+  return upper.startsWith("BTUI-T-") || upper.startsWith("BTUI-T_") ? "team" : "pro";
+}
 async function activate(key) {
   validateLicenseKey(key);
   checkRateLimit();
@@ -672,7 +738,7 @@ async function activate(key) {
       status: "active",
       customerEmail: res.meta.customer_email,
       customerName: res.meta.customer_name,
-      plan: "pro",
+      plan: detectPlan(key),
       activatedAt: (/* @__PURE__ */ new Date()).toISOString(),
       expiresAt: res.license_key.expires_at,
       lastValidatedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -768,6 +834,10 @@ var useLicenseStore = create2((set, get) => ({
       set({ status: "pro", license: { ...license, status: "active" }, degradation: "none" });
       return;
     }
+    if (builtinType === "team") {
+      set({ status: "team", license: { ...license, status: "active", plan: "team" }, degradation: "none" });
+      return;
+    }
     if (builtinType === "free") {
       set({ status: "free", license: null, degradation: "none" });
       return;
@@ -781,7 +851,7 @@ var useLicenseStore = create2((set, get) => ({
       set({ status: "expired", license, degradation: "expired" });
       return;
     }
-    set({ status: "pro", license, degradation: level });
+    set({ status: license.plan, license, degradation: level });
     if (needsRevalidation(license)) {
       if (!_revalidatingPromise) {
         _revalidatingPromise = doRevalidation(license, set).finally(() => {
@@ -793,7 +863,8 @@ var useLicenseStore = create2((set, get) => ({
     if (_revalidationInterval) clearInterval(_revalidationInterval);
     _revalidationInterval = setInterval(() => {
       const current = get().license;
-      if (!current || get().status !== "pro") return;
+      const status = get().status;
+      if (!current || status !== "pro" && status !== "team") return;
       if (!needsRevalidation(current)) return;
       if (_revalidatingPromise) return;
       _revalidatingPromise = doRevalidation(current, set).finally(() => {
@@ -806,7 +877,7 @@ var useLicenseStore = create2((set, get) => ({
     set({ error: null });
     try {
       const license = await activate(key);
-      set({ status: "pro", license, degradation: "none" });
+      set({ status: license.plan, license, degradation: "none" });
       return true;
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
@@ -825,7 +896,13 @@ var useLicenseStore = create2((set, get) => ({
     }
     set({ status: "free", license: null, degradation: "none", error: null });
   },
-  isPro: () => get().status === "pro"
+  // Team is a superset of Pro — team users have full Pro access plus team features.
+  // Pro users do NOT get Team features (Compliance) without paying for the Team tier.
+  isPro: () => {
+    const s = get().status;
+    return s === "pro" || s === "team";
+  },
+  isTeam: () => get().status === "team"
 }));
 
 // src/hooks/use-keyboard.ts
@@ -905,7 +982,9 @@ var FEATURE_KEYS = {
   profiles: { title: "upgrade_profiles", desc: "upgrade_profilesDesc" },
   "smart-cleanup": { title: "upgrade_cleanup", desc: "upgrade_cleanupDesc" },
   history: { title: "upgrade_history", desc: "upgrade_historyDesc" },
-  "security-audit": { title: "upgrade_security", desc: "upgrade_securityDesc" }
+  "security-audit": { title: "upgrade_security", desc: "upgrade_securityDesc" },
+  sync: { title: "upgrade_sync", desc: "upgrade_syncDesc" },
+  compliance: { title: "upgrade_compliance", desc: "upgrade_complianceDesc" }
 };
 function UpgradePrompt({ viewId }) {
   const keys = FEATURE_KEYS[viewId];
@@ -960,98 +1039,7 @@ import { Box as Box8, Text as Text10, useStdout as useStdout3 } from "ink";
 import { create as create4 } from "zustand";
 
 // src/lib/brew-api.ts
-import { spawn as spawn2 } from "child_process";
-
-// src/lib/brew-cli.ts
 import { spawn } from "child_process";
-var DEFAULT_TIMEOUT_MS = 3e4;
-var STREAM_IDLE_TIMEOUT_MS = 5 * 60 * 1e3;
-async function execBrew(args, timeoutMs = DEFAULT_TIMEOUT_MS) {
-  return new Promise((resolve, reject) => {
-    const proc = spawn("brew", args, { env: { ...process.env, HOMEBREW_NO_AUTO_UPDATE: "1" } });
-    let stdout = "";
-    let stderr = "";
-    let killed = false;
-    const timer = setTimeout(() => {
-      killed = true;
-      proc.kill();
-      reject(new Error(`brew ${args.join(" ")} timed out after ${timeoutMs}ms`));
-    }, timeoutMs);
-    proc.stdout.on("data", (d) => {
-      stdout += d.toString();
-    });
-    proc.stderr.on("data", (d) => {
-      stderr += d.toString();
-    });
-    proc.on("close", (code) => {
-      clearTimeout(timer);
-      if (killed) return;
-      if (code === 0) {
-        resolve(stdout);
-      } else {
-        reject(new Error(stderr.trim() || `brew ${args.join(" ")} exited with code ${code}`));
-      }
-    });
-    proc.on("error", (err) => {
-      clearTimeout(timer);
-      if (killed) return;
-      reject(new Error(`Failed to run brew: ${err.message}`));
-    });
-  });
-}
-async function* streamBrew(args) {
-  const proc = spawn("brew", args, {
-    env: { ...process.env, HOMEBREW_NO_AUTO_UPDATE: "1" },
-    stdio: ["ignore", "pipe", "pipe"]
-  });
-  let buffer = "";
-  const lines = [];
-  let done = false;
-  let exitError = null;
-  let lastOutputAt = Date.now();
-  const push = (chunk) => {
-    lastOutputAt = Date.now();
-    buffer += chunk.toString();
-    const parts = buffer.split("\n");
-    buffer = parts.pop() ?? "";
-    for (const line of parts) {
-      if (line.trim()) lines.push(line);
-    }
-  };
-  proc.stdout.on("data", push);
-  proc.stderr.on("data", push);
-  proc.on("close", (code) => {
-    if (buffer.trim()) lines.push(buffer.trim());
-    done = true;
-    if (code !== 0) {
-      exitError = `brew ${args.join(" ")} exited with code ${code}`;
-    }
-  });
-  proc.on("error", (err) => {
-    done = true;
-    exitError = err.message;
-  });
-  try {
-    while (!done || lines.length > 0) {
-      if (lines.length > 0) {
-        yield lines.shift();
-      } else if (!done) {
-        if (Date.now() - lastOutputAt > STREAM_IDLE_TIMEOUT_MS) {
-          proc.kill();
-          throw new Error(`brew ${args.join(" ")} timed out: no output for ${STREAM_IDLE_TIMEOUT_MS / 1e3}s`);
-        }
-        await new Promise((r) => setTimeout(r, 100));
-      }
-    }
-  } finally {
-    if (!done) {
-      proc.kill();
-    }
-  }
-  if (exitError) {
-    throw new Error(exitError);
-  }
-}
 
 // src/lib/parsers/json-parser.ts
 function safeParse(raw, context) {
@@ -1062,7 +1050,7 @@ function safeParse(raw, context) {
     }
     return result;
   } catch (err) {
-    throw new Error(`Failed to parse ${context} JSON: ${err instanceof Error ? err.message : String(err)}`);
+    throw new Error(`Failed to parse ${context} JSON: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
   }
 }
 function parseInstalledJson(raw) {
@@ -1150,6 +1138,97 @@ function parseLeavesOutput(raw) {
   return raw.split("\n").map((l) => l.trim()).filter(Boolean);
 }
 
+// src/lib/impact/impact-analyzer.ts
+var HIGH_RISK_PACKAGES = /* @__PURE__ */ new Set([
+  "openssl",
+  "openssl@3",
+  "openssl@1.1",
+  "python",
+  "python@3",
+  "python@3.11",
+  "python@3.12",
+  "python@3.13",
+  "node",
+  "node@18",
+  "node@20",
+  "ruby",
+  "ruby@3",
+  "sqlite",
+  "sqlite3",
+  "libpq",
+  "postgresql",
+  "postgresql@16",
+  "glibc",
+  "gcc",
+  "llvm"
+]);
+function isMajorVersionBump(from, to) {
+  const fromMajor = parseInt(from.split(".")[0] ?? "0", 10);
+  const toMajor = parseInt(to.split(".")[0] ?? "0", 10);
+  return !isNaN(fromMajor) && !isNaN(toMajor) && toMajor > fromMajor;
+}
+function calculateRisk(name, reverseDeps, fromVersion, toVersion) {
+  const reasons = [];
+  if (HIGH_RISK_PACKAGES.has(name)) {
+    reasons.push(t("impact_reason_critical_package"));
+    return { risk: "high", reasons };
+  }
+  if (reverseDeps.length > 10) {
+    reasons.push(t("impact_reason_many_deps", { count: reverseDeps.length }));
+    return { risk: "high", reasons };
+  }
+  let factorCount = 0;
+  if (reverseDeps.length >= 3) {
+    factorCount++;
+    reasons.push(t("impact_reason_many_deps", { count: reverseDeps.length }));
+  }
+  if (isMajorVersionBump(fromVersion, toVersion)) {
+    factorCount++;
+    reasons.push(t("impact_reason_major_bump"));
+  }
+  const risk = factorCount >= 2 ? "high" : factorCount === 1 ? "medium" : "low";
+  return { risk, reasons };
+}
+async function analyzeUpgradeImpact(packageName, fromVersion, toVersion, packageType) {
+  if (packageType === "cask") {
+    return {
+      packageName,
+      fromVersion,
+      toVersion,
+      packageType,
+      directDeps: [],
+      reverseDeps: [],
+      risk: "low",
+      riskReasons: []
+    };
+  }
+  let directDeps = [];
+  let reverseDeps = [];
+  try {
+    const depsOutput = await execBrew(["deps", "--1", packageName]);
+    directDeps = depsOutput.split("\n").filter((l) => l.trim() !== "");
+  } catch (err) {
+    logger.warn(`impact-analyzer: deps failed for ${packageName}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  try {
+    const usesOutput = await execBrew(["uses", "--installed", packageName]);
+    reverseDeps = usesOutput.split("\n").filter((l) => l.trim() !== "");
+  } catch (err) {
+    logger.warn(`impact-analyzer: uses failed for ${packageName}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  const { risk, reasons } = calculateRisk(packageName, reverseDeps, fromVersion, toVersion);
+  return {
+    packageName,
+    fromVersion,
+    toVersion,
+    packageType,
+    directDeps,
+    reverseDeps,
+    risk,
+    riskReasons: reasons
+  };
+}
+
 // src/lib/brew-api.ts
 var PKG_PATTERN = /^[\w@./+-]+$/;
 function validatePackageName(name) {
@@ -1157,7 +1236,7 @@ function validatePackageName(name) {
 }
 async function brewUpdate() {
   return new Promise((resolve, reject) => {
-    const proc = spawn2("brew", ["update"], { stdio: "ignore" });
+    const proc = spawn("brew", ["update"], { stdio: "ignore" });
     proc.on("close", (code) => {
       if (code === 0) resolve();
       else reject(new Error(`brew update exited with code ${code}`));
@@ -1247,6 +1326,10 @@ function formulaeToListItems(formulae) {
     };
   });
 }
+async function getUpgradeImpact(packageName, fromVersion, toVersion, packageType) {
+  validatePackageName(packageName);
+  return analyzeUpgradeImpact(packageName, fromVersion, toVersion, packageType);
+}
 function casksToListItems(casks) {
   return casks.map((c) => ({
     name: c.token,
@@ -1415,86 +1498,436 @@ var useBrewStore = create4((set, get) => ({
   }
 }));
 
-// src/components/common/stat-card.tsx
-import { Box as Box5, Text as Text5, useStdout as useStdout2 } from "ink";
-import { jsx as jsx6, jsxs as jsxs5 } from "react/jsx-runtime";
-function StatCard({ label, value, color = "white" }) {
-  const { stdout } = useStdout2();
-  const cols = stdout?.columns ?? 80;
-  const minW = cols < 60 ? 12 : cols < 100 ? 14 : 16;
-  return /* @__PURE__ */ jsxs5(
-    Box5,
-    {
-      borderStyle: "round",
-      borderColor: color,
-      paddingX: 2,
-      paddingY: 0,
-      flexDirection: "column",
-      alignItems: "center",
-      minWidth: minW,
-      children: [
-        /* @__PURE__ */ jsx6(Text5, { bold: true, color, children: value }),
-        /* @__PURE__ */ jsx6(Text5, { color: COLORS.muted, children: label })
-      ]
+// src/stores/security-store.ts
+import { create as create5 } from "zustand";
+
+// src/lib/security/osv-api.ts
+var OSV_BATCH_URL = "https://api.osv.dev/v1/querybatch";
+function mapSeverity(vuln) {
+  const dbSev = vuln.database_specific?.severity?.toUpperCase();
+  if (dbSev && ["CRITICAL", "HIGH", "MEDIUM", "LOW"].includes(dbSev)) {
+    return dbSev;
+  }
+  const cvss = vuln.severity?.find((s) => s.type === "CVSS_V3");
+  if (cvss) {
+    const score = parseFloat(cvss.score);
+    if (score >= 9) return "CRITICAL";
+    if (score >= 7) return "HIGH";
+    if (score >= 4) return "MEDIUM";
+    return "LOW";
+  }
+  return "UNKNOWN";
+}
+function getFixedVersion(vuln) {
+  for (const affected of vuln.affected ?? []) {
+    for (const range of affected.ranges ?? []) {
+      for (const event of range.events ?? []) {
+        if (event.fixed) return event.fixed;
+      }
     }
-  );
+  }
+  return null;
 }
-
-// src/components/common/loading.tsx
-import { Box as Box6, Text as Text6 } from "ink";
-import { Spinner } from "@inkjs/ui";
-import { jsx as jsx7, jsxs as jsxs6 } from "react/jsx-runtime";
-function Loading({ message }) {
-  useLocaleStore((s) => s.locale);
-  return /* @__PURE__ */ jsx7(Box6, { paddingY: 1, children: /* @__PURE__ */ jsx7(Spinner, { label: message ?? t("loading_default") }) });
+var BATCH_SIZE = 100;
+async function queryBatch(packages, queries) {
+  const res = await fetchWithTimeout(OSV_BATCH_URL, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ queries })
+  }, 15e3);
+  if (!res.ok) {
+    if (res.status === 400 && queries.length > 1) {
+      return queryOneByOne(packages);
+    }
+    throw new Error(`OSV API error: ${res.status} ${res.statusText}`);
+  }
+  const data = await res.json();
+  if (!data || !Array.isArray(data.results)) {
+    throw new Error("Invalid OSV API response: missing results array");
+  }
+  if (data.results.length !== packages.length) {
+    throw new Error(`OSV API response mismatch: expected ${packages.length} results, got ${data.results.length}`);
+  }
+  const result = /* @__PURE__ */ new Map();
+  for (let i = 0; i < packages.length; i++) {
+    const vulns = data.results[i]?.vulns;
+    if (!vulns || vulns.length === 0) continue;
+    result.set(
+      packages[i].name,
+      vulns.map((v) => ({
+        id: v.id,
+        summary: v.summary ?? "No description available",
+        severity: mapSeverity(v),
+        fixedVersion: getFixedVersion(v),
+        references: v.references?.map((r) => r.url) ?? []
+      }))
+    );
+  }
+  return result;
 }
-function ErrorMessage({ message }) {
-  useLocaleStore((s) => s.locale);
-  return /* @__PURE__ */ jsxs6(Box6, { paddingY: 1, children: [
-    /* @__PURE__ */ jsxs6(Text6, { color: COLORS.error, bold: true, children: [
-      "\u2718",
-      " ",
-      t("error_prefix")
-    ] }),
-    /* @__PURE__ */ jsx7(Text6, { color: COLORS.error, children: message })
-  ] });
+async function queryOneByOne(packages) {
+  const result = /* @__PURE__ */ new Map();
+  const errors = [];
+  for (const pkg of packages) {
+    try {
+      const partial = await queryBatch(
+        [pkg],
+        [{ package: { name: pkg.name, ecosystem: "Homebrew" }, version: pkg.version }]
+      );
+      for (const [k, v] of partial) result.set(k, v);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (msg.includes("400")) {
+        errors.push(`Skipped ${pkg.name}: ${msg}`);
+        continue;
+      }
+      if (msg.includes("429")) {
+        logger.warn(`Rate limited by OSV API, backing off`, { package: pkg.name });
+        await new Promise((r) => setTimeout(r, 2e3));
+        try {
+          const retryResult = await queryBatch(
+            [pkg],
+            [{ package: { name: pkg.name, ecosystem: "Homebrew" }, version: pkg.version }]
+          );
+          for (const [k, v] of retryResult) result.set(k, v);
+        } catch {
+          errors.push(`Failed after retry ${pkg.name}: ${msg}`);
+        }
+        continue;
+      }
+      logger.error(`OSV query failed for ${pkg.name}: ${msg}`);
+      errors.push(`${pkg.name}: ${msg}`);
+    }
+    await new Promise((r) => setTimeout(r, 75));
+  }
+  if (errors.length > 0) {
+    logger.warn(`OSV query errors for ${errors.length} packages`, { errors: errors.slice(0, 5) });
+  }
+  return result;
 }
-
-// src/components/common/status-badge.tsx
-import { Text as Text7 } from "ink";
-import { jsxs as jsxs7 } from "react/jsx-runtime";
-var BADGE_STYLES = {
-  success: { icon: "\u2714", color: COLORS.success },
-  warning: { icon: "\u25B2", color: COLORS.warning },
-  error: { icon: "\u2718", color: COLORS.error },
-  info: { icon: "\u25C6", color: COLORS.blue },
-  muted: { icon: "\u25CB", color: COLORS.textSecondary }
-};
-function StatusBadge({ label, variant }) {
-  const { icon, color } = BADGE_STYLES[variant];
-  return /* @__PURE__ */ jsxs7(Text7, { color, children: [
-    icon,
-    " ",
-    label
-  ] });
+async function queryVulnerabilities(packages) {
+  const validPackages = packages.filter(
+    (p) => p.version && typeof p.version === "string" && p.version.trim().length > 0
+  );
+  const result = /* @__PURE__ */ new Map();
+  for (let i = 0; i < validPackages.length; i += BATCH_SIZE) {
+    const batch = validPackages.slice(i, i + BATCH_SIZE);
+    const queries = batch.map((p) => ({
+      package: { name: p.name, ecosystem: "Homebrew" },
+      version: p.version
+    }));
+    const partial = await queryBatch(batch, queries);
+    for (const [k, v] of partial) result.set(k, v);
+  }
+  return result;
 }
 
-// src/components/common/section-header.tsx
-import { Box as Box7, Text as Text8 } from "ink";
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
-function SectionHeader({ emoji, title, color = COLORS.gold, gradient, count }) {
-  return /* @__PURE__ */ jsxs8(Box7, { gap: 1, children: [
-    /* @__PURE__ */ jsxs8(Text8, { children: [
-      emoji,
-      " "
-    ] }),
-    gradient ? /* @__PURE__ */ jsx8(GradientText, { colors: gradient, bold: true, children: title }) : /* @__PURE__ */ jsx8(Text8, { bold: true, color, children: title }),
-    count !== void 0 && /* @__PURE__ */ jsxs8(Text8, { color: COLORS.textSecondary, children: [
-      "(",
-      count,
-      ")"
-    ] })
-  ] });
+// src/lib/security/audit-runner.ts
+var SEVERITY_ORDER = {
+  CRITICAL: 4,
+  HIGH: 3,
+  MEDIUM: 2,
+  LOW: 1,
+  UNKNOWN: 0
+};
+async function runSecurityAudit(isPro, formulae, casks) {
+  if (!isPro) throw new Error("Pro license required");
+  const packages = [];
+  for (const f of formulae) {
+    const version = f.installed[0]?.version ?? f.versions.stable;
+    packages.push({ name: f.name, version });
+  }
+  for (const c of casks) {
+    if (c.installed) {
+      packages.push({ name: c.token, version: c.installed });
+    }
+  }
+  const vulnMap = await queryVulnerabilities(packages);
+  const results = [];
+  let criticalCount = 0;
+  let highCount = 0;
+  let mediumCount = 0;
+  let lowCount = 0;
+  for (const [name, vulns] of vulnMap) {
+    const pkg = packages.find((p) => p.name === name);
+    if (!pkg) continue;
+    const maxSeverity = vulns.reduce(
+      (max, v) => SEVERITY_ORDER[v.severity] > SEVERITY_ORDER[max] ? v.severity : max,
+      "UNKNOWN"
+    );
+    results.push({
+      packageName: name,
+      installedVersion: pkg.version,
+      vulnerabilities: vulns,
+      maxSeverity
+    });
+    for (const v of vulns) {
+      if (v.severity === "CRITICAL") criticalCount++;
+      else if (v.severity === "HIGH") highCount++;
+      else if (v.severity === "MEDIUM") mediumCount++;
+      else if (v.severity === "LOW") lowCount++;
+    }
+  }
+  results.sort((a, b) => SEVERITY_ORDER[b.maxSeverity] - SEVERITY_ORDER[a.maxSeverity]);
+  return {
+    scannedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    totalPackages: packages.length,
+    vulnerablePackages: results.length,
+    criticalCount,
+    highCount,
+    mediumCount,
+    lowCount,
+    results
+  };
+}
+
+// src/stores/security-store.ts
+var CACHE_TTL_MS = 30 * 60 * 1e3;
+var useSecurityStore = create5((set, get) => ({
+  summary: null,
+  loading: false,
+  error: null,
+  cachedAt: null,
+  scan: async (forceRefresh = false) => {
+    const { summary, cachedAt } = get();
+    if (!forceRefresh && summary && cachedAt && Date.now() - cachedAt < CACHE_TTL_MS) {
+      return;
+    }
+    set({ loading: true, error: null });
+    try {
+      const brewState = useBrewStore.getState();
+      if (brewState.formulae.length === 0) {
+        await brewState.fetchInstalled();
+      }
+      const { formulae, casks } = useBrewStore.getState();
+      const isPro = useLicenseStore.getState().isPro();
+      const result = await runSecurityAudit(isPro, formulae, casks);
+      set({ summary: result, loading: false, cachedAt: Date.now() });
+    } catch (err) {
+      set({ error: err instanceof Error ? err.message : String(err), loading: false });
+    }
+  }
+}));
+
+// src/stores/brewfile-store.ts
+import { create as create6 } from "zustand";
+var useBrewfileStore = create6((set, get) => ({
+  schema: null,
+  drift: null,
+  loading: false,
+  driftLoading: false,
+  error: null,
+  load: async () => {
+    set({ loading: true, error: null });
+    try {
+      const schema = await loadBrewfile();
+      set({ schema, loading: false });
+      if (schema) {
+        void get().refreshDrift();
+      }
+    } catch (err) {
+      set({ error: err instanceof Error ? err.message : String(err), loading: false });
+    }
+  },
+  save: async (schema) => {
+    set({ error: null });
+    try {
+      await saveBrewfile(schema);
+      set({ schema });
+    } catch (err) {
+      set({ error: err instanceof Error ? err.message : String(err) });
+    }
+  },
+  refreshDrift: async () => {
+    const { schema } = get();
+    if (!schema) return;
+    set({ driftLoading: true, error: null });
+    try {
+      const drift = await computeDrift(schema);
+      set({ drift, driftLoading: false });
+    } catch (err) {
+      set({ error: err instanceof Error ? err.message : String(err), driftLoading: false });
+    }
+  },
+  createFromCurrent: async (name) => {
+    set({ loading: true, error: null });
+    try {
+      const schema = await createDefaultBrewfile(name);
+      await saveBrewfile(schema);
+      set({ schema, loading: false });
+      void get().refreshDrift();
+    } catch (err) {
+      set({ error: err instanceof Error ? err.message : String(err), loading: false });
+    }
+  }
+}));
+
+// src/stores/sync-store.ts
+import { create as create7 } from "zustand";
+var useSyncStore = create7((set, get) => ({
+  config: null,
+  lastResult: null,
+  conflicts: [],
+  loading: false,
+  error: null,
+  initialize: async (isPro) => {
+    if (!isPro) return;
+    try {
+      const config = await loadSyncConfig();
+      set({ config });
+    } catch (err) {
+      logger.warn("sync-store: could not load config", { error: String(err) });
+    }
+  },
+  syncNow: async (isPro, brewfile) => {
+    set({ loading: true, error: null });
+    try {
+      const result = await sync(isPro, brewfile);
+      if (result.conflicts.length > 0) {
+        set({ conflicts: result.conflicts, lastResult: result, loading: false });
+      } else {
+        const config = await loadSyncConfig();
+        set({ config, lastResult: result, conflicts: [], loading: false });
+      }
+    } catch (err) {
+      const error = err instanceof Error ? err.message : String(err);
+      set({ error, loading: false });
+    }
+  },
+  resolveConflicts: async (resolutions) => {
+    set({ loading: true, error: null });
+    try {
+      const config = get().config;
+      if (!config) throw new Error("Sync not initialized");
+      const envelope = await readSyncEnvelope();
+      if (!envelope) throw new Error("No sync data found");
+      const payload = decryptPayload(envelope.encrypted, envelope.iv, envelope.tag);
+      await applyConflictResolutions(payload, resolutions, config.machineId);
+      const updatedConfig = await loadSyncConfig();
+      set({ config: updatedConfig, conflicts: [], loading: false });
+    } catch (err) {
+      const error = err instanceof Error ? err.message : String(err);
+      set({ error, loading: false });
+    }
+  }
+}));
+
+// src/stores/compliance-store.ts
+import { create as create8 } from "zustand";
+var useComplianceStore = create8((set, get) => ({
+  policy: null,
+  report: null,
+  loading: false,
+  error: null,
+  importPolicy: async (filePath, isPro) => {
+    if (!isPro) {
+      set({ error: "Pro license required" });
+      return;
+    }
+    set({ loading: true, error: null });
+    try {
+      const policy = await loadPolicy(filePath);
+      set({ policy, loading: false });
+    } catch (err) {
+      const error = err instanceof Error ? err.message : String(err);
+      set({ error, loading: false });
+    }
+  },
+  runCheck: async (isPro) => {
+    const { policy } = get();
+    if (!policy) return;
+    set({ loading: true, error: null });
+    try {
+      const report = await checkCompliance(policy, isPro);
+      set({ report, loading: false });
+    } catch (err) {
+      const error = err instanceof Error ? err.message : String(err);
+      set({ error, loading: false });
+    }
+  },
+  clearPolicy: () => set({ policy: null, report: null, error: null })
+}));
+
+// src/components/common/stat-card.tsx
+import { Box as Box5, Text as Text5, useStdout as useStdout2 } from "ink";
+import { jsx as jsx6, jsxs as jsxs5 } from "react/jsx-runtime";
+function StatCard({ label, value, color = "white" }) {
+  const { stdout } = useStdout2();
+  const cols = stdout?.columns ?? 80;
+  const minW = cols < 60 ? 12 : cols < 100 ? 14 : 16;
+  return /* @__PURE__ */ jsxs5(
+    Box5,
+    {
+      borderStyle: "round",
+      borderColor: color,
+      paddingX: 2,
+      paddingY: 0,
+      flexDirection: "column",
+      alignItems: "center",
+      minWidth: minW,
+      children: [
+        /* @__PURE__ */ jsx6(Text5, { bold: true, color, children: value }),
+        /* @__PURE__ */ jsx6(Text5, { color: COLORS.muted, children: label })
+      ]
+    }
+  );
+}
+
+// src/components/common/loading.tsx
+import { Box as Box6, Text as Text6 } from "ink";
+import { Spinner } from "@inkjs/ui";
+import { jsx as jsx7, jsxs as jsxs6 } from "react/jsx-runtime";
+function Loading({ message }) {
+  useLocaleStore((s) => s.locale);
+  return /* @__PURE__ */ jsx7(Box6, { paddingY: 1, children: /* @__PURE__ */ jsx7(Spinner, { label: message ?? t("loading_default") }) });
+}
+function ErrorMessage({ message }) {
+  useLocaleStore((s) => s.locale);
+  return /* @__PURE__ */ jsxs6(Box6, { paddingY: 1, children: [
+    /* @__PURE__ */ jsxs6(Text6, { color: COLORS.error, bold: true, children: [
+      "\u2718",
+      " ",
+      t("error_prefix")
+    ] }),
+    /* @__PURE__ */ jsx7(Text6, { color: COLORS.error, children: message })
+  ] });
+}
+
+// src/components/common/status-badge.tsx
+import { Text as Text7 } from "ink";
+import { jsxs as jsxs7 } from "react/jsx-runtime";
+var BADGE_STYLES = {
+  success: { icon: "\u2714", color: COLORS.success },
+  warning: { icon: "\u25B2", color: COLORS.warning },
+  error: { icon: "\u2718", color: COLORS.error },
+  info: { icon: "\u25C6", color: COLORS.blue },
+  muted: { icon: "\u25CB", color: COLORS.textSecondary }
+};
+function StatusBadge({ label, variant }) {
+  const { icon, color } = BADGE_STYLES[variant];
+  return /* @__PURE__ */ jsxs7(Text7, { color, children: [
+    icon,
+    " ",
+    label
+  ] });
+}
+
+// src/components/common/section-header.tsx
+import { Box as Box7, Text as Text8 } from "ink";
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+function SectionHeader({ emoji, title, color = COLORS.gold, gradient, count }) {
+  return /* @__PURE__ */ jsxs8(Box7, { gap: 1, children: [
+    /* @__PURE__ */ jsxs8(Text8, { children: [
+      emoji,
+      " "
+    ] }),
+    gradient ? /* @__PURE__ */ jsx8(GradientText, { colors: gradient, bold: true, children: title }) : /* @__PURE__ */ jsx8(Text8, { bold: true, color, children: title }),
+    count !== void 0 && /* @__PURE__ */ jsxs8(Text8, { color: COLORS.textSecondary, children: [
+      "(",
+      count,
+      ")"
+    ] })
+  ] });
 }
 
 // src/components/common/version-arrow.tsx
@@ -1547,8 +1980,46 @@ function truncate(str, maxLen) {
 
 // src/views/dashboard.tsx
 import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
+function ProStatusPanel() {
+  const security = useSecurityStore((s) => s.summary);
+  const drift = useBrewfileStore((s) => s.drift);
+  const syncConfig = useSyncStore((s) => s.config);
+  const complianceReport = useComplianceStore((s) => s.report);
+  const cveCount = security ? security.vulnerablePackages : null;
+  const criticalCount = security ? security.criticalCount : null;
+  const driftScore = drift ? drift.score : null;
+  const lastSync = syncConfig?.lastSync ?? null;
+  const syncAgo = lastSync ? formatRelativeTime(new Date(lastSync).getTime() / 1e3) : null;
+  const violationCount = complianceReport ? complianceReport.violations.length : null;
+  return /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", borderStyle: "round", borderColor: COLORS.purple, paddingX: 2, paddingY: 0, marginTop: 1, children: [
+    /* @__PURE__ */ jsx10(Text10, { bold: true, color: COLORS.purple, children: t("dashboard_pro_status") }),
+    /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+      /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_security") }),
+      cveCount === null ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: "\u2014" }) : cveCount === 0 ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.success, children: t("dashboard_no_cves") }) : /* @__PURE__ */ jsxs10(Text10, { color: COLORS.error, children: [
+        t("dashboard_cves", { count: String(cveCount) }),
+        criticalCount && criticalCount > 0 ? ` (${criticalCount} critical)` : ""
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+      /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_brewfile") }),
+      driftScore === null ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: "\u2014" }) : /* @__PURE__ */ jsxs10(Text10, { color: driftScore >= 80 ? COLORS.success : COLORS.warning, children: [
+        driftScore,
+        "%"
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+      /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_sync") }),
+      syncAgo === null ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_sync_never") }) : /* @__PURE__ */ jsx10(Text10, { color: COLORS.info, children: t("dashboard_sync_ago", { time: syncAgo }) })
+    ] }),
+    /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+      /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_compliance") }),
+      violationCount === null ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: "\u2014" }) : violationCount === 0 ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.success, children: t("dashboard_compliance_ok") }) : /* @__PURE__ */ jsx10(Text10, { color: COLORS.warning, children: t("dashboard_compliance_violations", { count: String(violationCount) }) })
+    ] })
+  ] });
+}
 function DashboardView() {
   const { formulae, casks, outdated, services, config, loading, errors, lastFetchedAt, fetchAll } = useBrewStore();
+  const isPro = useLicenseStore((s) => s.isPro);
   const { stdout } = useStdout3();
   const columns = stdout?.columns ?? 80;
   useEffect(() => {
@@ -1642,7 +2113,8 @@ function DashboardView() {
         /* @__PURE__ */ jsx10(Text10, { children: s.name }),
         s.exit_code != null && /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("common_exit", { code: s.exit_code }) })
       ] }, s.name)) })
-    ] })
+    ] }),
+    isPro() && /* @__PURE__ */ jsx10(ProStatusPanel, {})
   ] });
 }
 
@@ -1669,7 +2141,7 @@ async function logToHistory(args, success, error) {
   if (!detected) return;
   try {
     const isPro = useLicenseStore.getState().isPro();
-    const { appendEntry: appendEntry2 } = await import("./history-logger-2PGYSPFL.js");
+    const { appendEntry: appendEntry2 } = await import("./history-logger-PBDOLKNJ.js");
     await appendEntry2(isPro, detected.action, detected.packageName, success, error);
   } catch {
   }
@@ -1719,6 +2191,13 @@ function useBrewStream() {
     if (!cancelRef.current) {
       void logToHistory(args, streamError === null, streamError);
     }
+    const MUTATING_COMMANDS = /* @__PURE__ */ new Set(["install", "uninstall", "upgrade", "pin", "unpin", "tap", "untap"]);
+    if (!cancelRef.current && MUTATING_COMMANDS.has(args[0] ?? "")) {
+      void import("./snapshot-RAPGMAJF.js").then(({ captureSnapshot: captureSnapshot2, saveSnapshot: saveSnapshot2 }) => {
+        captureSnapshot2().then((s) => saveSnapshot2(s)).catch(() => {
+        });
+      });
+    }
   }, []);
   const cancel = useCallback(() => {
     cancelRef.current = true;
@@ -2207,12 +2686,35 @@ function SearchView() {
 import { useEffect as useEffect7, useRef as useRef3, useState as useState5 } from "react";
 import { Box as Box16, Text as Text18, useInput as useInput5, useStdout as useStdout5 } from "ink";
 import { jsx as jsx18, jsxs as jsxs17 } from "react/jsx-runtime";
+function ImpactPanel({ impact }) {
+  const riskColor = impact.risk === "high" ? COLORS.error : impact.risk === "medium" ? COLORS.warning : COLORS.success;
+  const riskLabel = impact.risk === "high" ? t("impact_high") : impact.risk === "medium" ? t("impact_medium") : t("impact_low");
+  const riskIcon = impact.risk === "high" ? "\u26A0" : impact.risk === "medium" ? "~" : "\u2713";
+  return /* @__PURE__ */ jsxs17(Box16, { flexDirection: "column", marginTop: 1, borderStyle: "round", borderColor: riskColor, paddingX: 2, paddingY: 0, children: [
+    /* @__PURE__ */ jsxs17(Box16, { children: [
+      /* @__PURE__ */ jsxs17(Text18, { bold: true, color: riskColor, children: [
+        riskIcon,
+        " ",
+        riskLabel
+      ] }),
+      impact.reverseDeps.length > 0 && /* @__PURE__ */ jsxs17(Text18, { color: COLORS.textSecondary, children: [
+        " \\u2014 ",
+        t("impact_affects", { count: impact.reverseDeps.length })
+      ] })
+    ] }),
+    impact.riskReasons.length > 0 && /* @__PURE__ */ jsx18(Text18, { color: COLORS.textSecondary, children: impact.riskReasons.join(" \xB7 ") }),
+    impact.reverseDeps.length > 0 && impact.reverseDeps.length <= 5 && /* @__PURE__ */ jsx18(Text18, { color: COLORS.muted, dimColor: true, children: t("impact_usedBy", { packages: impact.reverseDeps.join(", ") }) }),
+    impact.risk === "high" && /* @__PURE__ */ jsx18(Text18, { color: COLORS.info, children: t("impact_brewfile_hint") })
+  ] });
+}
 function OutdatedView() {
   const { outdated, loading, errors, fetchOutdated } = useBrewStore();
   const stream = useBrewStream();
   const [cursor, setCursor] = useState5(0);
   const [confirmAction, setConfirmAction] = useState5(null);
   const hasRefreshed = useRef3(false);
+  const [impact, setImpact] = useState5(null);
+  const [impactLoading, setImpactLoading] = useState5(false);
   useEffect7(() => {
     fetchOutdated();
   }, []);
@@ -2222,7 +2724,25 @@ function OutdatedView() {
       void fetchOutdated();
     }
   }, [stream.isRunning, stream.error]);
-  const allOutdated = [...outdated.formulae, ...outdated.casks];
+  const allOutdated = [
+    ...outdated.formulae.map((p) => ({ ...p, type: "formula" })),
+    ...outdated.casks.map((p) => ({ ...p, type: "cask" }))
+  ];
+  const debouncedCursor = useDebounce(cursor, 150);
+  useEffect7(() => {
+    const pkg = allOutdated[debouncedCursor];
+    if (!pkg || stream.isRunning) {
+      setImpact(null);
+      return;
+    }
+    setImpactLoading(true);
+    void getUpgradeImpact(
+      pkg.name,
+      pkg.installed_versions[0] ?? "",
+      pkg.current_version,
+      pkg.type
+    ).then(setImpact).catch(() => setImpact(null)).finally(() => setImpactLoading(false));
+  }, [debouncedCursor, stream.isRunning]);
   useInput5((input, key) => {
     if (stream.isRunning) {
       if (key.escape) stream.cancel();
@@ -2336,7 +2856,10 @@ ${t("outdated_upgradeAllList", { list: allOutdated.map((p) => p.name).join(", ")
         cursor + 1,
         "/",
         allOutdated.length
-      ] }) })
+      ] }) }),
+      impact && !stream.isRunning && !confirmAction && /* @__PURE__ */ jsx18(ImpactPanel, { impact }),
+      impactLoading && !stream.isRunning && !confirmAction && /* @__PURE__ */ jsx18(Box16, { marginTop: 1, children: /* @__PURE__ */ jsx18(Text18, { color: COLORS.textSecondary, children: t("impact_analyzing") }) }),
+      /* @__PURE__ */ jsx18(Box16, { marginTop: 1, children: /* @__PURE__ */ jsx18(Text18, { color: COLORS.textSecondary, children: t("impact_hint") }) })
     ] })
   ] });
 }
@@ -2728,7 +3251,7 @@ import { useEffect as useEffect11, useRef as useRef6, useState as useState8 } fr
 import { Box as Box24, useInput as useInput9 } from "ink";
 
 // src/stores/profile-store.ts
-import { create as create5 } from "zustand";
+import { create as create9 } from "zustand";
 
 // src/lib/profiles/profile-manager.ts
 import { readFile as readFile3, writeFile as writeFile3, readdir, rm as rm2, rename as rename2 } from "fs/promises";
@@ -2778,7 +3301,7 @@ async function loadProfile(isPro, name) {
   try {
     file = JSON.parse(raw);
   } catch (err) {
-    throw new Error(`Profile "${name}" is corrupted: ${err instanceof Error ? err.message : String(err)}`);
+    throw new Error(`Profile "${name}" is corrupted: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
   }
   if (file.version !== 1) {
     throw new Error("Unsupported data version");
@@ -2894,7 +3417,7 @@ async function* importProfile(isPro, profile) {
 function getIsPro() {
   return useLicenseStore.getState().isPro();
 }
-var useProfileStore = create5((set) => ({
+var useProfileStore = create9((set) => ({
   profileNames: [],
   selectedProfile: null,
   loading: false,
@@ -3284,7 +3807,7 @@ import { useEffect as useEffect12, useRef as useRef7, useState as useState9 } fr
 import { Box as Box25, Text as Text26, useInput as useInput10 } from "ink";
 
 // src/stores/cleanup-store.ts
-import { create as create6 } from "zustand";
+import { create as create10 } from "zustand";
 
 // src/lib/cleanup/cleanup-analyzer.ts
 import { execFile } from "child_process";
@@ -3365,7 +3888,7 @@ async function analyzeCleanup(isPro, formulae, leaves) {
 }
 
 // src/stores/cleanup-store.ts
-var useCleanupStore = create6((set, get) => ({
+var useCleanupStore = create10((set, get) => ({
   summary: null,
   selected: /* @__PURE__ */ new Set(),
   loading: false,
@@ -3539,8 +4062,8 @@ import { useEffect as useEffect13, useState as useState10, useMemo as useMemo4 }
 import { Box as Box26, Text as Text27, useInput as useInput11, useStdout as useStdout7 } from "ink";
 
 // src/stores/history-store.ts
-import { create as create7 } from "zustand";
-var useHistoryStore = create7((set) => ({
+import { create as create11 } from "zustand";
+var useHistoryStore = create11((set) => ({
   entries: [],
   loading: false,
   error: null,
@@ -3733,219 +4256,6 @@ function HistoryView() {
 // src/views/security-audit.tsx
 import { useEffect as useEffect14, useState as useState11 } from "react";
 import { Box as Box27, Text as Text28, useInput as useInput12 } from "ink";
-
-// src/stores/security-store.ts
-import { create as create8 } from "zustand";
-
-// src/lib/security/osv-api.ts
-var OSV_BATCH_URL = "https://api.osv.dev/v1/querybatch";
-function mapSeverity(vuln) {
-  const dbSev = vuln.database_specific?.severity?.toUpperCase();
-  if (dbSev && ["CRITICAL", "HIGH", "MEDIUM", "LOW"].includes(dbSev)) {
-    return dbSev;
-  }
-  const cvss = vuln.severity?.find((s) => s.type === "CVSS_V3");
-  if (cvss) {
-    const score = parseFloat(cvss.score);
-    if (score >= 9) return "CRITICAL";
-    if (score >= 7) return "HIGH";
-    if (score >= 4) return "MEDIUM";
-    return "LOW";
-  }
-  return "UNKNOWN";
-}
-function getFixedVersion(vuln) {
-  for (const affected of vuln.affected ?? []) {
-    for (const range of affected.ranges ?? []) {
-      for (const event of range.events ?? []) {
-        if (event.fixed) return event.fixed;
-      }
-    }
-  }
-  return null;
-}
-var BATCH_SIZE = 100;
-async function queryBatch(packages, queries) {
-  const res = await fetchWithTimeout(OSV_BATCH_URL, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ queries })
-  }, 15e3);
-  if (!res.ok) {
-    if (res.status === 400 && queries.length > 1) {
-      return queryOneByOne(packages);
-    }
-    throw new Error(`OSV API error: ${res.status} ${res.statusText}`);
-  }
-  const data = await res.json();
-  if (!data || !Array.isArray(data.results)) {
-    throw new Error("Invalid OSV API response: missing results array");
-  }
-  if (data.results.length !== packages.length) {
-    throw new Error(`OSV API response mismatch: expected ${packages.length} results, got ${data.results.length}`);
-  }
-  const result = /* @__PURE__ */ new Map();
-  for (let i = 0; i < packages.length; i++) {
-    const vulns = data.results[i]?.vulns;
-    if (!vulns || vulns.length === 0) continue;
-    result.set(
-      packages[i].name,
-      vulns.map((v) => ({
-        id: v.id,
-        summary: v.summary ?? "No description available",
-        severity: mapSeverity(v),
-        fixedVersion: getFixedVersion(v),
-        references: v.references?.map((r) => r.url) ?? []
-      }))
-    );
-  }
-  return result;
-}
-async function queryOneByOne(packages) {
-  const result = /* @__PURE__ */ new Map();
-  const errors = [];
-  for (const pkg of packages) {
-    try {
-      const partial = await queryBatch(
-        [pkg],
-        [{ package: { name: pkg.name, ecosystem: "Homebrew" }, version: pkg.version }]
-      );
-      for (const [k, v] of partial) result.set(k, v);
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      if (msg.includes("400")) {
-        errors.push(`Skipped ${pkg.name}: ${msg}`);
-        continue;
-      }
-      if (msg.includes("429")) {
-        logger.warn(`Rate limited by OSV API, backing off`, { package: pkg.name });
-        await new Promise((r) => setTimeout(r, 2e3));
-        try {
-          const retryResult = await queryBatch(
-            [pkg],
-            [{ package: { name: pkg.name, ecosystem: "Homebrew" }, version: pkg.version }]
-          );
-          for (const [k, v] of retryResult) result.set(k, v);
-        } catch {
-          errors.push(`Failed after retry ${pkg.name}: ${msg}`);
-        }
-        continue;
-      }
-      logger.error(`OSV query failed for ${pkg.name}: ${msg}`);
-      errors.push(`${pkg.name}: ${msg}`);
-    }
-    await new Promise((r) => setTimeout(r, 75));
-  }
-  if (errors.length > 0) {
-    logger.warn(`OSV query errors for ${errors.length} packages`, { errors: errors.slice(0, 5) });
-  }
-  return result;
-}
-async function queryVulnerabilities(packages) {
-  const validPackages = packages.filter(
-    (p) => p.version && typeof p.version === "string" && p.version.trim().length > 0
-  );
-  const result = /* @__PURE__ */ new Map();
-  for (let i = 0; i < validPackages.length; i += BATCH_SIZE) {
-    const batch = validPackages.slice(i, i + BATCH_SIZE);
-    const queries = batch.map((p) => ({
-      package: { name: p.name, ecosystem: "Homebrew" },
-      version: p.version
-    }));
-    const partial = await queryBatch(batch, queries);
-    for (const [k, v] of partial) result.set(k, v);
-  }
-  return result;
-}
-
-// src/lib/security/audit-runner.ts
-var SEVERITY_ORDER = {
-  CRITICAL: 4,
-  HIGH: 3,
-  MEDIUM: 2,
-  LOW: 1,
-  UNKNOWN: 0
-};
-async function runSecurityAudit(isPro, formulae, casks) {
-  if (!isPro) throw new Error("Pro license required");
-  const packages = [];
-  for (const f of formulae) {
-    const version = f.installed[0]?.version ?? f.versions.stable;
-    packages.push({ name: f.name, version });
-  }
-  for (const c of casks) {
-    if (c.installed) {
-      packages.push({ name: c.token, version: c.installed });
-    }
-  }
-  const vulnMap = await queryVulnerabilities(packages);
-  const results = [];
-  let criticalCount = 0;
-  let highCount = 0;
-  let mediumCount = 0;
-  let lowCount = 0;
-  for (const [name, vulns] of vulnMap) {
-    const pkg = packages.find((p) => p.name === name);
-    if (!pkg) continue;
-    const maxSeverity = vulns.reduce(
-      (max, v) => SEVERITY_ORDER[v.severity] > SEVERITY_ORDER[max] ? v.severity : max,
-      "UNKNOWN"
-    );
-    results.push({
-      packageName: name,
-      installedVersion: pkg.version,
-      vulnerabilities: vulns,
-      maxSeverity
-    });
-    for (const v of vulns) {
-      if (v.severity === "CRITICAL") criticalCount++;
-      else if (v.severity === "HIGH") highCount++;
-      else if (v.severity === "MEDIUM") mediumCount++;
-      else if (v.severity === "LOW") lowCount++;
-    }
-  }
-  results.sort((a, b) => SEVERITY_ORDER[b.maxSeverity] - SEVERITY_ORDER[a.maxSeverity]);
-  return {
-    scannedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    totalPackages: packages.length,
-    vulnerablePackages: results.length,
-    criticalCount,
-    highCount,
-    mediumCount,
-    lowCount,
-    results
-  };
-}
-
-// src/stores/security-store.ts
-var CACHE_TTL_MS = 30 * 60 * 1e3;
-var useSecurityStore = create8((set, get) => ({
-  summary: null,
-  loading: false,
-  error: null,
-  cachedAt: null,
-  scan: async (forceRefresh = false) => {
-    const { summary, cachedAt } = get();
-    if (!forceRefresh && summary && cachedAt && Date.now() - cachedAt < CACHE_TTL_MS) {
-      return;
-    }
-    set({ loading: true, error: null });
-    try {
-      const brewState = useBrewStore.getState();
-      if (brewState.formulae.length === 0) {
-        await brewState.fetchInstalled();
-      }
-      const { formulae, casks } = useBrewStore.getState();
-      const isPro = useLicenseStore.getState().isPro();
-      const result = await runSecurityAudit(isPro, formulae, casks);
-      set({ summary: result, loading: false, cachedAt: Date.now() });
-    } catch (err) {
-      set({ error: err instanceof Error ? err.message : String(err), loading: false });
-    }
-  }
-}));
-
-// src/views/security-audit.tsx
 import { jsx as jsx29, jsxs as jsxs28 } from "react/jsx-runtime";
 var SEVERITY_COLORS = {
   CRITICAL: COLORS.error,
@@ -3966,6 +4276,7 @@ function isNetworkError2(msg) {
 }
 function SecurityAuditView() {
   const { summary, loading, error, scan, cachedAt } = useSecurityStore();
+  const navigate = useNavigationStore((s) => s.navigate);
   const [cursor, setCursor] = useState11(0);
   const [expandedPkg, setExpandedPkg] = useState11(null);
   const [confirmUpgrade, setConfirmUpgrade] = useState11(null);
@@ -3980,6 +4291,10 @@ function SecurityAuditView() {
       void scan(true);
       return;
     }
+    if (input === "R") {
+      navigate("rollback");
+      return;
+    }
     if (input === "u" && results[cursor]) {
       setConfirmUpgrade(results[cursor].packageName);
       return;
@@ -4038,6 +4353,11 @@ function SecurityAuditView() {
             /* @__PURE__ */ jsx29(Text28, { bold: isCurrent, inverse: isCurrent, color: isCurrent ? COLORS.text : COLORS.muted, children: pkg.packageName }),
             /* @__PURE__ */ jsx29(Text28, { color: COLORS.muted, children: pkg.installedVersion }),
             /* @__PURE__ */ jsx29(Text28, { color: COLORS.muted, children: tp("plural_vulns", pkg.vulnerabilities.length) }),
+            pkg.vulnerabilities.some((v) => v.fixedVersion) && /* @__PURE__ */ jsxs28(Text28, { color: COLORS.textSecondary, children: [
+              "[R:",
+              t("hint_rollback"),
+              "]"
+            ] }),
             /* @__PURE__ */ jsx29(Text28, { color: COLORS.muted, children: isExpanded ? "\u25BC" : "\u25B6" })
           ] }),
           isExpanded && /* @__PURE__ */ jsx29(Box27, { flexDirection: "column", paddingLeft: 4, marginBottom: 1, children: pkg.vulnerabilities.map((vuln) => /* @__PURE__ */ jsxs28(Box27, { flexDirection: "column", marginBottom: 1, children: [
@@ -4058,7 +4378,8 @@ function SecurityAuditView() {
         cursor + 1,
         "/",
         results.length
-      ] }) })
+      ] }) }),
+      /* @__PURE__ */ jsx29(Box27, { marginTop: 1, children: /* @__PURE__ */ jsx29(Text28, { color: COLORS.textSecondary, children: t("security_rollback_hint") }) })
     ] })
   ] });
 }
@@ -4279,64 +4600,1253 @@ function AccountView() {
     /* @__PURE__ */ jsx30(Box28, { marginTop: 1, children: /* @__PURE__ */ jsxs29(Text29, { color: COLORS.textSecondary, children: [
       status === "pro" ? `d ${t("hint_deactivate")}` : "",
       " ",
-      t("app_version", { version: "0.4.1" })
+      t("app_version", { version: "0.5.1" })
     ] }) })
   ] });
 }
 
-// src/app.tsx
-import { jsx as jsx31, jsxs as jsxs30 } from "react/jsx-runtime";
-function LicenseInitializer() {
-  const initLicense = useLicenseStore((s) => s.initialize);
-  useEffect15(() => {
-    initLicense();
-  }, []);
-  return null;
-}
-function ViewRouter({ currentView }) {
-  const isPro = useLicenseStore((s) => s.isPro);
-  if (isProView(currentView) && !isPro()) {
-    return /* @__PURE__ */ jsx31(UpgradePrompt, { viewId: currentView });
+// src/views/rollback.tsx
+import { useCallback as useCallback3, useEffect as useEffect15, useRef as useRef8, useState as useState13 } from "react";
+import { Box as Box29, Text as Text30, useInput as useInput14 } from "ink";
+
+// src/stores/rollback-store.ts
+import { create as create12 } from "zustand";
+
+// src/lib/rollback/rollback-engine.ts
+import { readdir as readdir2 } from "fs/promises";
+import { join as join4 } from "path";
+async function detectStrategy(name, targetVersion, packageType) {
+  if (packageType === "cask") {
+    return { strategy: "pin-only" };
   }
-  switch (currentView) {
-    case "dashboard":
-      return /* @__PURE__ */ jsx31(DashboardView, {});
-    case "installed":
-      return /* @__PURE__ */ jsx31(InstalledView, {});
-    case "search":
-      return /* @__PURE__ */ jsx31(SearchView, {});
-    case "outdated":
-      return /* @__PURE__ */ jsx31(OutdatedView, {});
-    case "package-info":
-      return /* @__PURE__ */ jsx31(PackageInfoView, {});
-    case "services":
-      return /* @__PURE__ */ jsx31(ServicesView, {});
-    case "doctor":
-      return /* @__PURE__ */ jsx31(DoctorView, {});
-    case "profiles":
-      return /* @__PURE__ */ jsx31(ProfilesView, {});
-    case "smart-cleanup":
-      return /* @__PURE__ */ jsx31(SmartCleanupView, {});
-    case "history":
-      return /* @__PURE__ */ jsx31(HistoryView, {});
-    case "security-audit":
-      return /* @__PURE__ */ jsx31(SecurityAuditView, {});
-    case "account":
-      return /* @__PURE__ */ jsx31(AccountView, {});
+  try {
+    const major = targetVersion.split(".")[0] ?? "";
+    if (major !== "" && !isNaN(parseInt(major, 10))) {
+      const versionedFormula = `${name}@${major}`;
+      await execBrew(["info", "--json=v2", versionedFormula]);
+      return { strategy: "versioned-formula", versionedFormula };
+    }
+  } catch {
+  }
+  try {
+    const brewCache = (await execBrew(["--cache"])).trim();
+    const downloadsDir = join4(brewCache, "downloads");
+    const entries = await readdir2(downloadsDir);
+    const found = entries.some(
+      (entry) => entry.includes(name) && entry.includes(targetVersion)
+    );
+    if (found) {
+      return { strategy: "bottle-cache" };
+    }
+  } catch {
   }
+  return { strategy: "pin-only" };
 }
-function App() {
+async function buildRollbackPlan(snapshot, isPro) {
+  if (!isPro) throw new Error("Pro license required");
+  const current = await captureSnapshot();
+  const diff = diffSnapshots(snapshot, current);
+  const actions = [];
+  const warnings = [];
+  for (const entry of diff.upgraded) {
+    const type = entry.type;
+    const { strategy, versionedFormula } = await detectStrategy(entry.name, entry.from, type);
+    actions.push({
+      packageName: entry.name,
+      packageType: type,
+      action: "downgrade",
+      fromVersion: entry.to,
+      // current version
+      toVersion: entry.from,
+      // snapshot (target) version
+      strategy,
+      versionedFormula
+    });
+  }
+  for (const entry of diff.downgraded) {
+    const type = entry.type;
+    const { strategy, versionedFormula } = await detectStrategy(entry.name, entry.from, type);
+    actions.push({
+      packageName: entry.name,
+      packageType: type,
+      action: "downgrade",
+      fromVersion: entry.to,
+      // current version
+      toVersion: entry.from,
+      // snapshot (target) version
+      strategy,
+      versionedFormula
+    });
+  }
+  for (const entry of diff.added) {
+    if (entry.type === "tap") continue;
+    const type = entry.type;
+    actions.push({
+      packageName: entry.name,
+      packageType: type,
+      action: "remove",
+      fromVersion: entry.version,
+      toVersion: "",
+      strategy: "unavailable"
+    });
+  }
+  for (const entry of diff.removed) {
+    if (entry.type === "tap") continue;
+    const type = entry.type;
+    const { strategy, versionedFormula } = await detectStrategy(entry.name, entry.version, type);
+    actions.push({
+      packageName: entry.name,
+      packageType: type,
+      action: "install",
+      fromVersion: "",
+      toVersion: entry.version,
+      strategy,
+      versionedFormula
+    });
+  }
+  const caskPinCount = actions.filter(
+    (a) => a.packageType === "cask" && a.action !== "remove" && a.strategy === "pin-only"
+  ).length;
+  if (caskPinCount > 0) {
+    warnings.push(`${caskPinCount} cask(s) will be pinned only (version restoration not supported)`);
+  }
+  const canExecute = actions.some((a) => a.strategy !== "unavailable");
+  const snapshotLabel = snapshot.label ?? "Auto";
+  const snapshotDate = new Date(snapshot.capturedAt).toLocaleString();
+  logger.debug("Built rollback plan", { actionCount: actions.length, canExecute });
+  return {
+    snapshotLabel,
+    snapshotDate,
+    actions,
+    warnings,
+    canExecute
+  };
+}
+async function* executeRollbackPlan(plan, isPro) {
+  if (!isPro) throw new Error("Pro license required");
+  for (const action of plan.actions) {
+    if (action.strategy === "unavailable") {
+      yield `[skip] ${action.packageName}: cannot restore automatically \u2014 manual action required`;
+      continue;
+    }
+    if (action.action === "remove") {
+      yield `[skip] ${action.packageName}: removal skipped for safety \u2014 remove manually if needed`;
+      continue;
+    }
+    if (action.action === "install") {
+      if (action.strategy === "pin-only") {
+        yield `[warn] ${action.packageName}: cannot install specific version \u2014 skipping`;
+        continue;
+      }
+      if (action.strategy === "versioned-formula" && action.versionedFormula) {
+        yield `[install] ${action.packageName} via ${action.versionedFormula}`;
+        for await (const line of streamBrew(["install", action.versionedFormula])) {
+          yield line;
+        }
+        continue;
+      }
+      if (action.strategy === "bottle-cache") {
+        yield `[install] ${action.packageName} from bottle cache`;
+        for await (const line of streamBrew(["install", "--force-bottle", action.packageName])) {
+          yield line;
+        }
+        continue;
+      }
+      continue;
+    }
+    if (action.strategy === "versioned-formula" && action.versionedFormula) {
+      yield `[downgrade] ${action.packageName}: ${action.fromVersion} \u2192 ${action.toVersion} via ${action.versionedFormula}`;
+      for await (const line of streamBrew(["install", action.versionedFormula])) {
+        yield line;
+      }
+    } else if (action.strategy === "bottle-cache") {
+      yield `[downgrade] ${action.packageName}: ${action.fromVersion} \u2192 ${action.toVersion} from bottle cache`;
+      for await (const line of streamBrew(["install", "--force-bottle", action.packageName])) {
+        yield line;
+      }
+    } else if (action.strategy === "pin-only") {
+      yield `[pin] ${action.packageName}: pinning at current version (target version not restorable)`;
+      await execBrew(["pin", action.packageName]);
+      yield `\u2713 Pinned ${action.packageName}`;
+    }
+  }
+  yield "[snapshot] Capturing post-rollback snapshot...";
+  try {
+    const postSnapshot = await captureSnapshot();
+    await saveSnapshot(postSnapshot, "post-rollback");
+    yield "[snapshot] Snapshot saved.";
+  } catch (err) {
+    logger.warn("Failed to save post-rollback snapshot", { err });
+    yield "[snapshot] Warning: could not save snapshot.";
+  }
+}
+
+// src/stores/rollback-store.ts
+var useRollbackStore = create12((set) => ({
+  snapshots: [],
+  loading: false,
+  error: null,
+  selectedSnapshot: null,
+  plan: null,
+  planLoading: false,
+  planError: null,
+  fetchSnapshots: async (isPro) => {
+    if (!isPro) return;
+    set({ loading: true, error: null });
+    try {
+      const snapshots = await loadSnapshots();
+      set({ snapshots, loading: false });
+    } catch (err) {
+      set({ error: err instanceof Error ? err.message : String(err), loading: false });
+    }
+  },
+  selectSnapshot: async (snapshot, isPro) => {
+    if (!snapshot) {
+      set({ selectedSnapshot: null, plan: null, planError: null });
+      return;
+    }
+    set({ selectedSnapshot: snapshot, plan: null, planLoading: true, planError: null });
+    try {
+      const plan = await buildRollbackPlan(snapshot, isPro);
+      set({ plan, planLoading: false });
+    } catch (err) {
+      set({ planError: err instanceof Error ? err.message : String(err), planLoading: false });
+    }
+  },
+  clearPlan: () => set({ selectedSnapshot: null, plan: null, planError: null })
+}));
+
+// src/views/rollback.tsx
+import { jsx as jsx31, jsxs as jsxs30 } from "react/jsx-runtime";
+function strategyLabel(action) {
+  switch (action.strategy) {
+    case "versioned-formula":
+      return t("rollback_strategy_versioned");
+    case "bottle-cache":
+      return t("rollback_strategy_bottle");
+    case "pin-only":
+      return t("rollback_strategy_pin");
+    case "unavailable":
+      return t("rollback_strategy_unavailable");
+  }
+}
+function actionColor(action) {
+  if (action.strategy === "unavailable") return COLORS.muted;
+  if (action.action === "remove") return COLORS.muted;
+  if (action.action === "downgrade") return COLORS.warning;
+  if (action.action === "install") return COLORS.success;
+  return COLORS.info;
+}
+function actionPrefix(action) {
+  if (action.strategy === "unavailable" || action.action === "remove") return "\u2297";
+  if (action.strategy === "pin-only") return "\u{1F4CC}";
+  if (action.action === "downgrade") return "\u2B07";
+  return "\u2B06";
+}
+function PlanView({ plan }) {
+  const executableCount = plan.actions.filter((a) => a.strategy !== "unavailable" && a.action !== "remove").length;
+  return /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: 1, children: [
+    /* @__PURE__ */ jsxs30(Box29, { marginBottom: 1, children: [
+      /* @__PURE__ */ jsxs30(Text30, { color: COLORS.text, bold: true, children: [
+        plan.snapshotLabel,
+        " "
+      ] }),
+      /* @__PURE__ */ jsx31(Text30, { color: COLORS.textSecondary, children: plan.snapshotDate })
+    ] }),
+    plan.actions.length === 0 && /* @__PURE__ */ jsx31(ResultBanner, { status: "success", message: t("rollback_diff_empty") }),
+    plan.actions.map((a) => /* @__PURE__ */ jsxs30(Box29, { children: [
+      /* @__PURE__ */ jsxs30(Text30, { color: actionColor(a), children: [
+        actionPrefix(a),
+        " "
+      ] }),
+      /* @__PURE__ */ jsx31(Text30, { color: actionColor(a), bold: true, children: a.packageName }),
+      a.fromVersion !== "" && a.toVersion !== "" && /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
+        " ",
+        a.fromVersion,
+        " \u2192 ",
+        a.toVersion
+      ] }),
+      a.fromVersion === "" && a.toVersion !== "" && /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
+        " install ",
+        a.toVersion
+      ] }),
+      a.fromVersion !== "" && a.toVersion === "" && /* @__PURE__ */ jsx31(Text30, { color: COLORS.textSecondary, children: " remove" }),
+      /* @__PURE__ */ jsxs30(Text30, { color: COLORS.muted, dimColor: true, children: [
+        "  [",
+        strategyLabel(a),
+        "]"
+      ] })
+    ] }, a.packageName + a.action)),
+    plan.warnings.map((w) => /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsxs30(Text30, { color: COLORS.warning, children: [
+      "\u26A0 ",
+      w
+    ] }) }, w)),
+    /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: plan.canExecute ? /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
+      "enter:",
+      t("rollback_confirm", { count: String(executableCount) }),
+      "  esc:",
+      t("hint_back")
+    ] }) : /* @__PURE__ */ jsxs30(Text30, { color: COLORS.muted, children: [
+      t("rollback_strategy_unavailable"),
+      "  esc:",
+      t("hint_back")
+    ] }) })
+  ] });
+}
+function RollbackView() {
+  const isPro = useLicenseStore((s) => s.isPro);
+  const { snapshots, loading, error, plan, planLoading, planError, fetchSnapshots, selectSnapshot, clearPlan } = useRollbackStore();
+  const [cursor, setCursor] = useState13(0);
+  const [phase, setPhase] = useState13("list");
+  const [streamLines, setStreamLines] = useState13([]);
+  const [streamRunning, setStreamRunning] = useState13(false);
+  const [streamError, setStreamError] = useState13(null);
+  const generatorRef = useRef8(null);
+  const mountedRef = useRef8(true);
+  useEffect15(() => {
+    mountedRef.current = true;
+    return () => {
+      mountedRef.current = false;
+      void generatorRef.current?.return(void 0);
+    };
+  }, []);
+  useEffect15(() => {
+    void fetchSnapshots(isPro());
+  }, []);
+  const runRollback = useCallback3(async (p) => {
+    setPhase("executing");
+    setStreamLines([]);
+    setStreamError(null);
+    setStreamRunning(true);
+    const gen = executeRollbackPlan(p, isPro());
+    generatorRef.current = gen;
+    try {
+      for await (const line of gen) {
+        if (!mountedRef.current) break;
+        setStreamLines((prev) => [...prev.slice(-99), line]);
+      }
+    } catch (err) {
+      if (mountedRef.current) {
+        setStreamError(err instanceof Error ? err.message : String(err));
+      }
+    } finally {
+      generatorRef.current = null;
+      if (mountedRef.current) {
+        setStreamRunning(false);
+        setPhase("result");
+      }
+    }
+  }, [isPro]);
+  useInput14((input, key) => {
+    if (phase === "executing") return;
+    if (phase === "result") {
+      if (key.escape || input === "r") {
+        setPhase("list");
+        clearPlan();
+        void fetchSnapshots(isPro());
+      }
+      return;
+    }
+    if (phase === "confirm") return;
+    if (phase === "plan") {
+      if (key.escape) {
+        clearPlan();
+        setPhase("list");
+        return;
+      }
+      if (key.return && plan?.canExecute) {
+        setPhase("confirm");
+      }
+      return;
+    }
+    if (input === "j" || key.downArrow) {
+      setCursor((c) => Math.min(c + 1, Math.max(0, snapshots.length - 1)));
+    } else if (input === "k" || key.upArrow) {
+      setCursor((c) => Math.max(c - 1, 0));
+    } else if (key.return && snapshots[cursor]) {
+      void selectSnapshot(snapshots[cursor], isPro());
+      setPhase("plan");
+    } else if (input === "r") {
+      void fetchSnapshots(isPro());
+    }
+  });
+  if (loading) return /* @__PURE__ */ jsx31(Loading, { message: t("rollback_select_snapshot") });
+  if (error) return /* @__PURE__ */ jsx31(ErrorMessage, { message: error });
+  if (phase === "executing") {
+    return /* @__PURE__ */ jsx31(Box29, { flexDirection: "column", children: /* @__PURE__ */ jsx31(ProgressLog, { lines: streamLines, isRunning: streamRunning, title: t("rollback_executing") }) });
+  }
+  if (phase === "result") {
+    return /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx31(
+        ResultBanner,
+        {
+          status: streamError ? "error" : "success",
+          message: streamError ? t("rollback_error", { error: streamError }) : t("rollback_success")
+        }
+      ),
+      /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
+        "r:",
+        t("hint_refresh"),
+        "  esc:",
+        t("hint_back")
+      ] }) })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx31(SectionHeader, { emoji: "\u23EA", title: t("rollback_title"), gradient: GRADIENTS.gold }),
+    snapshots.length === 0 && /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(ResultBanner, { status: "info", message: t("rollback_no_snapshots") }) }),
+    phase === "list" && snapshots.length > 0 && /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx31(Text30, { color: COLORS.textSecondary, dimColor: true, children: t("rollback_select_snapshot") }),
+      /* @__PURE__ */ jsx31(Box29, { flexDirection: "column", marginTop: 1, children: snapshots.map((s, i) => /* @__PURE__ */ jsxs30(SelectableRow, { isCurrent: i === cursor, children: [
+        /* @__PURE__ */ jsx31(Text30, { bold: i === cursor, color: i === cursor ? COLORS.text : COLORS.muted, children: s.label ?? t("rollback_snapshot_auto") }),
+        /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
+          " \u2014 ",
+          new Date(s.capturedAt).toLocaleString()
+        ] }),
+        /* @__PURE__ */ jsxs30(Text30, { color: COLORS.muted, dimColor: true, children: [
+          " ",
+          "(",
+          tp("packages", s.formulae.length + s.casks.length),
+          ")"
+        ] })
+      ] }, s.capturedAt)) })
+    ] }),
+    phase === "plan" && /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", children: [
+      planLoading && /* @__PURE__ */ jsx31(Loading, { message: t("rollback_capturing") }),
+      planError && /* @__PURE__ */ jsx31(ErrorMessage, { message: planError }),
+      plan && !planLoading && /* @__PURE__ */ jsx31(PlanView, { plan })
+    ] }),
+    phase === "confirm" && plan && /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(
+      ConfirmDialog,
+      {
+        message: t("rollback_confirm", {
+          count: String(plan.actions.filter((a) => a.strategy !== "unavailable" && a.action !== "remove").length)
+        }),
+        onConfirm: () => void runRollback(plan),
+        onCancel: () => setPhase("plan")
+      }
+    ) })
+  ] });
+}
+
+// src/views/brewfile.tsx
+import { useCallback as useCallback4, useEffect as useEffect16, useRef as useRef9, useState as useState14 } from "react";
+import { Box as Box30, Text as Text31, useInput as useInput15 } from "ink";
+import { TextInput as TextInput6 } from "@inkjs/ui";
+import { jsx as jsx32, jsxs as jsxs31 } from "react/jsx-runtime";
+function DriftScore({ score }) {
+  const color = score >= 80 ? COLORS.success : score >= 50 ? COLORS.warning : COLORS.error;
+  const bars = Math.round(score / 10);
+  const filled = "\u2593".repeat(bars);
+  const empty = "\u2591".repeat(10 - bars);
+  return /* @__PURE__ */ jsxs31(Box30, { children: [
+    /* @__PURE__ */ jsxs31(Text31, { color, children: [
+      filled,
+      empty
+    ] }),
+    /* @__PURE__ */ jsxs31(Text31, { color, bold: true, children: [
+      " ",
+      score,
+      "% "
+    ] }),
+    /* @__PURE__ */ jsx32(Text31, { color: COLORS.textSecondary, children: t("brewfile_compliant") })
+  ] });
+}
+function DriftSummary({ drift }) {
+  return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+    drift.missingPackages.length > 0 && /* @__PURE__ */ jsxs31(Box30, { children: [
+      /* @__PURE__ */ jsx32(Text31, { color: COLORS.error, children: "\u25CF " }),
+      /* @__PURE__ */ jsx32(Text31, { color: COLORS.error, children: t("brewfile_drift_missing", { count: drift.missingPackages.length }) }),
+      /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
+        ": " + drift.missingPackages.slice(0, 3).join(", "),
+        drift.missingPackages.length > 3 ? "..." : ""
+      ] })
+    ] }),
+    drift.extraPackages.length > 0 && /* @__PURE__ */ jsxs31(Box30, { children: [
+      /* @__PURE__ */ jsx32(Text31, { color: COLORS.warning, children: "\u25CF " }),
+      /* @__PURE__ */ jsx32(Text31, { color: COLORS.warning, children: t("brewfile_drift_extra", { count: drift.extraPackages.length }) })
+    ] }),
+    drift.wrongVersions.length > 0 && /* @__PURE__ */ jsxs31(Box30, { children: [
+      /* @__PURE__ */ jsx32(Text31, { color: COLORS.info, children: "\u25CF " }),
+      /* @__PURE__ */ jsx32(Text31, { color: COLORS.info, children: t("brewfile_drift_wrong", { count: drift.wrongVersions.length }) })
+    ] }),
+    drift.missingPackages.length === 0 && drift.extraPackages.length === 0 && drift.wrongVersions.length === 0 && /* @__PURE__ */ jsx32(ResultBanner, { status: "success", message: "\u2713 System is in sync with Brewfile" })
+  ] });
+}
+function BrewfileView() {
+  const isPro = useLicenseStore((s) => s.isPro);
+  const { schema, drift, loading, driftLoading, error, load, createFromCurrent } = useBrewfileStore();
+  const [phase, setPhase] = useState14("overview");
+  const [streamLines, setStreamLines] = useState14([]);
+  const [streamRunning, setStreamRunning] = useState14(false);
+  const [streamError, setStreamError] = useState14(null);
+  const [resultMessage, setResultMessage] = useState14("");
+  const generatorRef = useRef9(null);
+  const mountedRef = useRef9(true);
+  useEffect16(() => {
+    mountedRef.current = true;
+    void load();
+    return () => {
+      mountedRef.current = false;
+      void generatorRef.current?.return(void 0);
+    };
+  }, []);
+  const startReconcile = useCallback4(async () => {
+    if (!schema) return;
+    setPhase("reconciling");
+    setStreamLines([]);
+    setStreamError(null);
+    setStreamRunning(true);
+    const gen = reconcile(schema, isPro());
+    generatorRef.current = gen;
+    try {
+      for await (const line of gen) {
+        if (!mountedRef.current) break;
+        setStreamLines((prev) => [...prev.slice(-99), line]);
+      }
+      if (mountedRef.current) {
+        setResultMessage(t("brewfile_reconcile_success"));
+      }
+    } catch (err) {
+      if (mountedRef.current) {
+        const msg = err instanceof Error ? err.message : String(err);
+        setStreamError(msg);
+        setResultMessage(t("brewfile_reconcile_error", { error: msg }));
+      }
+    } finally {
+      generatorRef.current = null;
+      if (mountedRef.current) {
+        setStreamRunning(false);
+        setPhase("result");
+      }
+    }
+  }, [schema, isPro]);
+  useInput15((input, key) => {
+    if (phase === "reconciling") return;
+    if (phase === "result") {
+      if (key.escape || input === "r") {
+        setPhase("overview");
+        void load();
+      }
+      return;
+    }
+    if (phase === "creating") return;
+    if (input === "n") {
+      setPhase("creating");
+      return;
+    }
+    if (input === "r") {
+      void load();
+      return;
+    }
+    if (input === "c") {
+      const needsReconcile = drift && (drift.missingPackages.length > 0 || drift.wrongVersions.length > 0);
+      if (needsReconcile) {
+        void startReconcile();
+      }
+      return;
+    }
+    if (key.escape) {
+    }
+  });
+  if (loading) return /* @__PURE__ */ jsx32(Loading, { message: t("loading_default") });
+  if (error) return /* @__PURE__ */ jsx32(ErrorMessage, { message: error });
+  if (phase === "creating") {
+    return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx32(SectionHeader, { emoji: "\u{1F4E6}", title: t("brewfile_title"), gradient: GRADIENTS.ocean }),
+      /* @__PURE__ */ jsxs31(Box30, { marginTop: 1, children: [
+        /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
+          t("brewfile_create_name"),
+          " "
+        ] }),
+        /* @__PURE__ */ jsx32(
+          TextInput6,
+          {
+            defaultValue: "My Environment",
+            onSubmit: (value) => {
+              const name = value.trim() || "My Environment";
+              setPhase("overview");
+              void createFromCurrent(name).then(() => {
+              });
+            }
+          }
+        )
+      ] })
+    ] });
+  }
+  if (phase === "reconciling") {
+    return /* @__PURE__ */ jsx32(Box30, { flexDirection: "column", children: /* @__PURE__ */ jsx32(
+      ProgressLog,
+      {
+        lines: streamLines,
+        isRunning: streamRunning,
+        title: t("brewfile_reconciling")
+      }
+    ) });
+  }
+  if (phase === "result") {
+    return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx32(
+        ResultBanner,
+        {
+          status: streamError ? "error" : "success",
+          message: resultMessage
+        }
+      ),
+      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
+        "r:",
+        t("hint_refresh"),
+        "  esc:",
+        t("hint_back")
+      ] }) })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx32(SectionHeader, { emoji: "\u{1F4E6}", title: t("brewfile_title"), gradient: GRADIENTS.ocean }),
+    schema === null ? /* @__PURE__ */ jsxs31(Box30, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx32(ResultBanner, { status: "info", message: t("brewfile_no_brewfile") }),
+      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
+        "n:",
+        t("hint_new")
+      ] }) })
+    ] }) : /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs31(Box30, { gap: 2, children: [
+        /* @__PURE__ */ jsx32(Text31, { color: COLORS.text, bold: true, children: schema.meta.name }),
+        schema.meta.description && /* @__PURE__ */ jsx32(Text31, { color: COLORS.textSecondary, children: schema.meta.description }),
+        schema.strictMode && /* @__PURE__ */ jsxs31(Text31, { color: COLORS.warning, children: [
+          "[",
+          t("brewfile_strict_mode"),
+          "]"
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs31(Box30, { gap: 3, marginTop: 1, children: [
+        /* @__PURE__ */ jsx32(Text31, { color: COLORS.sky, children: t("brewfile_formulae_count", { count: schema.formulae.length }) }),
+        /* @__PURE__ */ jsx32(Text31, { color: COLORS.teal, children: t("brewfile_casks_count", { count: schema.casks.length }) })
+      ] }),
+      driftLoading && /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(Text31, { color: COLORS.muted, children: "Computing drift..." }) }),
+      drift && !driftLoading && /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx32(DriftScore, { score: drift.score }),
+        /* @__PURE__ */ jsx32(DriftSummary, { drift })
+      ] }),
+      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
+        "r:",
+        t("hint_refresh"),
+        drift && (drift.missingPackages.length > 0 || drift.wrongVersions.length > 0) ? `  c:${t("hint_reconcile")}` : "",
+        "  ",
+        "n:",
+        t("hint_new")
+      ] }) })
+    ] })
+  ] });
+}
+
+// src/views/sync.tsx
+import { useCallback as useCallback5, useEffect as useEffect17, useState as useState15 } from "react";
+import { Box as Box31, Text as Text32, useInput as useInput16 } from "ink";
+import { Fragment as Fragment6, jsx as jsx33, jsxs as jsxs32 } from "react/jsx-runtime";
+function OverviewSection({
+  config,
+  lastResult,
+  conflicts,
+  onSyncNow: _onSyncNow,
+  onGoToConflicts: _onGoToConflicts
+}) {
+  const hasConflicts = conflicts.length > 0;
+  const showComplianceHint = !hasConflicts && !!lastResult?.success;
+  return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: 1, children: [
+    config ? /* @__PURE__ */ jsxs32(Fragment6, { children: [
+      /* @__PURE__ */ jsx33(Box31, { marginBottom: 1, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_machine", { name: config.machineName }) }) }),
+      config.lastSync && /* @__PURE__ */ jsx33(Box31, { marginBottom: 1, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_last_sync", { date: new Date(config.lastSync).toLocaleString() }) }) }),
+      hasConflicts ? /* @__PURE__ */ jsx33(
+        ResultBanner,
+        {
+          status: "error",
+          message: t("sync_status_conflict", { count: String(conflicts.length) })
+        }
+      ) : lastResult?.success ? /* @__PURE__ */ jsx33(ResultBanner, { status: "success", message: t("sync_status_ok") }) : null
+    ] }) : /* @__PURE__ */ jsx33(Box31, { marginBottom: 1, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_disabled") }) }),
+    /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
+      "s",
+      /* @__PURE__ */ jsxs32(Text32, { color: COLORS.gold, children: [
+        ":",
+        t("hint_sync")
+      ] }),
+      hasConflicts && /* @__PURE__ */ jsxs32(Fragment6, { children: [
+        "  c",
+        /* @__PURE__ */ jsxs32(Text32, { color: COLORS.gold, children: [
+          ":",
+          t("hint_conflict")
+        ] })
+      ] }),
+      showComplianceHint && /* @__PURE__ */ jsxs32(Fragment6, { children: [
+        "  c",
+        /* @__PURE__ */ jsxs32(Text32, { color: COLORS.gold, children: [
+          ":",
+          t("hint_check_compliance")
+        ] })
+      ] })
+    ] }) })
+  ] });
+}
+function ConflictsList({
+  entries,
+  cursor
+}) {
+  return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: 1, children: [
+    entries.map((entry, i) => {
+      const { conflict, resolution } = entry;
+      const isActive = i === cursor;
+      return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginBottom: 1, children: [
+        /* @__PURE__ */ jsxs32(SelectableRow, { isCurrent: isActive, children: [
+          /* @__PURE__ */ jsx33(Text32, { bold: true, color: isActive ? COLORS.text : COLORS.textSecondary, children: t("sync_conflict_title", { package: conflict.packageName }) }),
+          /* @__PURE__ */ jsxs32(Text32, { color: COLORS.muted, children: [
+            " (",
+            conflict.packageType,
+            ")"
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxs32(Box31, { marginLeft: 2, flexDirection: "column", children: [
+          /* @__PURE__ */ jsxs32(
+            Text32,
+            {
+              color: resolution === "use-local" ? COLORS.success : COLORS.textSecondary,
+              children: [
+                "l ",
+                t("sync_conflict_local", { version: conflict.localVersion }),
+                resolution === "use-local" && " \u2713"
+              ]
+            }
+          ),
+          /* @__PURE__ */ jsxs32(
+            Text32,
+            {
+              color: resolution === "use-remote" ? COLORS.success : COLORS.textSecondary,
+              children: [
+                "r ",
+                t("sync_conflict_remote", { machine: conflict.remoteMachine, version: conflict.remoteVersion }),
+                resolution === "use-remote" && " \u2713"
+              ]
+            }
+          )
+        ] })
+      ] }, `${conflict.packageName}-${conflict.remoteMachine}`);
+    }),
+    /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
+      "j/k:navegar  l:",
+      t("sync_conflict_use_local"),
+      "  r:",
+      t("sync_conflict_use_remote"),
+      "  enter:aplicar"
+    ] }) })
+  ] });
+}
+function SyncView() {
+  const isPro = useLicenseStore((s) => s.isPro);
+  const navigate = useNavigationStore((s) => s.navigate);
+  const { config, lastResult, conflicts, loading, error, initialize, syncNow, resolveConflicts } = useSyncStore();
+  const [phase, setPhase] = useState15("overview");
+  const [syncError, setSyncError] = useState15(null);
+  const [conflictEntries, setConflictEntries] = useState15([]);
+  const [cursor, setCursor] = useState15(0);
+  useEffect17(() => {
+    void initialize(isPro());
+  }, []);
+  useEffect17(() => {
+    if (conflicts.length > 0) {
+      setConflictEntries(
+        conflicts.map((c) => ({ conflict: c, resolution: "pending" }))
+      );
+    }
+  }, [conflicts]);
+  const handleSyncNow = useCallback5(async () => {
+    setPhase("syncing");
+    setSyncError(null);
+    await syncNow(isPro());
+    const state = useSyncStore.getState();
+    if (state.conflicts.length > 0) {
+      setPhase("conflicts");
+    } else if (state.error) {
+      setSyncError(state.error);
+      setPhase("result");
+    } else {
+      setPhase("result");
+    }
+  }, [isPro, syncNow]);
+  const handleApplyResolutions = useCallback5(async () => {
+    const pending = conflictEntries.filter((e) => e.resolution === "pending");
+    if (pending.length > 0) return;
+    const resolutions = conflictEntries.map((e) => ({
+      conflict: e.conflict,
+      resolution: e.resolution
+    }));
+    await resolveConflicts(resolutions);
+    setPhase("result");
+  }, [conflictEntries, resolveConflicts]);
+  useInput16((input, key) => {
+    if (phase === "syncing") return;
+    if (phase === "result") {
+      if (key.escape || input === "r") {
+        setPhase("overview");
+        setSyncError(null);
+        void initialize(isPro());
+      }
+      return;
+    }
+    if (phase === "conflicts") {
+      if (key.escape) {
+        setPhase("overview");
+        return;
+      }
+      if (input === "j" || key.downArrow) {
+        setCursor((c) => Math.min(c + 1, conflictEntries.length - 1));
+        return;
+      }
+      if (input === "k" || key.upArrow) {
+        setCursor((c) => Math.max(c - 1, 0));
+        return;
+      }
+      if (input === "l") {
+        setConflictEntries(
+          (prev) => prev.map((e, i) => i === cursor ? { ...e, resolution: "use-local" } : e)
+        );
+        return;
+      }
+      if (input === "r") {
+        setConflictEntries(
+          (prev) => prev.map((e, i) => i === cursor ? { ...e, resolution: "use-remote" } : e)
+        );
+        return;
+      }
+      if (key.return) {
+        void handleApplyResolutions();
+        return;
+      }
+    }
+    if (input === "s") {
+      void handleSyncNow();
+      return;
+    }
+    if (input === "c" && conflicts.length > 0) {
+      setCursor(0);
+      setPhase("conflicts");
+      return;
+    }
+    if (input === "c" && lastResult?.success) {
+      navigate("compliance");
+      return;
+    }
+    if (input === "r") {
+      void initialize(isPro());
+      return;
+    }
+  });
+  if (phase === "syncing" || loading) {
+    return /* @__PURE__ */ jsx33(Loading, { message: t("sync_syncing") });
+  }
+  if (phase === "result") {
+    const isError = !!(syncError ?? error);
+    return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx33(SectionHeader, { emoji: "\u{1F504}", title: t("sync_title"), gradient: GRADIENTS.gold }),
+      /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsx33(
+        ResultBanner,
+        {
+          status: isError ? "error" : "success",
+          message: isError ? t("sync_error", { error: syncError ?? error ?? "" }) : t("sync_success")
+        }
+      ) }),
+      /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
+        "r:",
+        t("hint_refresh"),
+        "  esc:",
+        t("hint_back")
+      ] }) })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx33(SectionHeader, { emoji: "\u{1F504}", title: t("sync_title"), gradient: GRADIENTS.gold }),
+    error && phase === "overview" && /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsx33(ResultBanner, { status: "error", message: t("sync_error", { error }) }) }),
+    phase === "overview" && /* @__PURE__ */ jsx33(
+      OverviewSection,
+      {
+        config,
+        lastResult,
+        conflicts,
+        onSyncNow: () => void handleSyncNow(),
+        onGoToConflicts: () => {
+          setCursor(0);
+          setPhase("conflicts");
+        }
+      }
+    ),
+    phase === "conflicts" && /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx33(SectionHeader, { emoji: "\u26A0", title: t("sync_status_conflict", { count: String(conflictEntries.length) }), gradient: GRADIENTS.gold }),
+      /* @__PURE__ */ jsx33(ConflictsList, { entries: conflictEntries, cursor })
+    ] })
+  ] });
+}
+
+// src/views/compliance.tsx
+import { useCallback as useCallback6, useEffect as useEffect18, useRef as useRef10, useState as useState16 } from "react";
+import { Box as Box32, Text as Text33, useInput as useInput17 } from "ink";
+import { TextInput as TextInput7 } from "@inkjs/ui";
+
+// src/lib/compliance/compliance-remediator.ts
+async function* remediateViolations(violations, isPro) {
+  if (!isPro) throw new Error("Pro license required");
+  let installed = 0;
+  let upgraded = 0;
+  let skipped = 0;
+  for (const v of violations) {
+    if (v.type === "missing") {
+      yield `Installing ${v.packageName}...`;
+      try {
+        for await (const line of streamBrew(["install", v.packageName])) {
+          yield line;
+        }
+        installed++;
+      } catch (err) {
+        yield `  \u2717 Failed to install ${v.packageName}: ${err instanceof Error ? err.message : String(err)}`;
+        skipped++;
+      }
+    } else if (v.type === "wrong-version") {
+      yield `Upgrading ${v.packageName}${v.required ? ` to ${v.required}+` : ""}...`;
+      try {
+        for await (const line of streamBrew(["upgrade", v.packageName])) {
+          yield line;
+        }
+        upgraded++;
+      } catch (err) {
+        yield `  \u2717 Failed to upgrade ${v.packageName}: ${err instanceof Error ? err.message : String(err)}`;
+        skipped++;
+      }
+    } else if (v.type === "forbidden") {
+      yield `  \u26A0 Forbidden package detected: ${v.packageName} \u2014 manual removal required`;
+      skipped++;
+    } else if (v.type === "extra") {
+      yield `  \u26A0 Extra package in strict mode: ${v.packageName} \u2014 manual removal required`;
+      skipped++;
+    }
+  }
+  yield `Remediation complete: ${installed} installed, ${upgraded} upgraded, ${skipped} skipped (manual action required)`;
+}
+
+// src/views/compliance.tsx
+import { join as join5 } from "path";
+import { jsx as jsx34, jsxs as jsxs33 } from "react/jsx-runtime";
+function ComplianceScore({ report }) {
+  const color = report.score >= 80 ? COLORS.success : report.score >= 50 ? COLORS.warning : COLORS.error;
+  const bars = Math.round(report.score / 10);
+  return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginBottom: 1, children: [
+    /* @__PURE__ */ jsxs33(Box32, { children: [
+      /* @__PURE__ */ jsxs33(Text33, { color, children: [
+        "\u2593".repeat(bars),
+        "\u2591".repeat(10 - bars)
+      ] }),
+      /* @__PURE__ */ jsxs33(Text33, { color, bold: true, children: [
+        " ",
+        report.score,
+        "%"
+      ] }),
+      /* @__PURE__ */ jsxs33(Text33, { color: COLORS.textSecondary, children: [
+        " ",
+        t("compliance_score", { score: String(report.score) })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs33(Text33, { color: COLORS.muted, dimColor: true, children: [
+      t("compliance_policy_name", { name: report.policyName }),
+      " \xB7 ",
+      t("compliance_machine", { name: report.machineName })
+    ] })
+  ] });
+}
+function ViolationItem({ violation }) {
+  const color = violation.severity === "error" ? COLORS.error : COLORS.warning;
+  const prefix = violation.severity === "error" ? "\u2717" : "\u26A0";
+  return /* @__PURE__ */ jsxs33(Box32, { marginBottom: 0, children: [
+    /* @__PURE__ */ jsxs33(Text33, { color, children: [
+      prefix,
+      " "
+    ] }),
+    /* @__PURE__ */ jsx34(Text33, { color, children: violation.detail })
+  ] });
+}
+function ViolationList({ violations }) {
+  const errors = violations.filter((v) => v.severity === "error");
+  const warnings = violations.filter((v) => v.severity === "warning");
+  return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: 1, children: [
+    errors.length > 0 && /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsxs33(Text33, { color: COLORS.error, bold: true, children: [
+        t("compliance_violations", { count: String(errors.length) }),
+        " (errors)"
+      ] }),
+      errors.map((v) => /* @__PURE__ */ jsx34(ViolationItem, { violation: v }, `${v.type}-${v.packageName}`))
+    ] }),
+    warnings.length > 0 && /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs33(Text33, { color: COLORS.warning, bold: true, children: [
+        t("compliance_violations", { count: String(warnings.length) }),
+        " (warnings)"
+      ] }),
+      warnings.map((v) => /* @__PURE__ */ jsx34(ViolationItem, { violation: v }, `${v.type}-${v.packageName}`))
+    ] })
+  ] });
+}
+function ComplianceView() {
+  const isPro = useLicenseStore((s) => s.isPro);
+  const { policy, report, loading, error, importPolicy, runCheck } = useComplianceStore();
+  const [phase, setPhase] = useState16("overview");
+  const [resultMessage, setResultMessage] = useState16(null);
+  const [streamLines, setStreamLines] = useState16([]);
+  const [streamRunning, setStreamRunning] = useState16(false);
+  const generatorRef = useRef10(null);
+  const mountedRef = useRef10(true);
+  useEffect18(() => {
+    mountedRef.current = true;
+    return () => {
+      mountedRef.current = false;
+      void generatorRef.current?.return(void 0);
+    };
+  }, []);
+  const handleImportSubmit = useCallback6(
+    async (filePath) => {
+      if (!filePath.trim()) {
+        setPhase("overview");
+        return;
+      }
+      await importPolicy(filePath.trim(), isPro());
+      const state = useComplianceStore.getState();
+      if (!state.error && state.policy) {
+        await runCheck(isPro());
+      }
+      setPhase("overview");
+    },
+    [isPro, importPolicy, runCheck]
+  );
+  const handleRecheck = useCallback6(() => {
+    void runCheck(isPro());
+  }, [isPro, runCheck]);
+  const handleExport = useCallback6(async () => {
+    if (!report) return;
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+    const outputPath = join5(DATA_DIR, `compliance-report-${timestamp}.json`);
+    try {
+      await exportReport(report, outputPath);
+      setResultMessage({ ok: true, text: t("compliance_export_done", { path: outputPath }) });
+      setPhase("result");
+    } catch (err) {
+      setResultMessage({
+        ok: false,
+        text: t("compliance_remediate_error", { error: err instanceof Error ? err.message : String(err) })
+      });
+      setPhase("result");
+    }
+  }, [report]);
+  const handleRemediate = useCallback6(async () => {
+    if (!report) return;
+    const actionable = report.violations.filter(
+      (v) => v.type === "missing" || v.type === "wrong-version"
+    );
+    if (actionable.length === 0) return;
+    setPhase("remediating");
+    setStreamLines([]);
+    setStreamRunning(true);
+    const gen = remediateViolations(actionable, isPro());
+    generatorRef.current = gen;
+    try {
+      for await (const line of gen) {
+        if (!mountedRef.current) break;
+        setStreamLines((prev) => [...prev.slice(-99), line]);
+      }
+      if (mountedRef.current) {
+        setResultMessage({ ok: true, text: t("compliance_remediate_success") });
+        await runCheck(isPro());
+      }
+    } catch (err) {
+      if (mountedRef.current) {
+        setResultMessage({
+          ok: false,
+          text: t("compliance_remediate_error", { error: err instanceof Error ? err.message : String(err) })
+        });
+      }
+    } finally {
+      generatorRef.current = null;
+      if (mountedRef.current) {
+        setStreamRunning(false);
+        setPhase("result");
+      }
+    }
+  }, [report, isPro, runCheck]);
+  useInput17((input, key) => {
+    if (phase === "remediating" || phase === "importing") return;
+    if (phase === "result") {
+      if (key.escape || input === "r") {
+        setPhase("overview");
+        setResultMessage(null);
+      }
+      return;
+    }
+    if (input === "i") {
+      setPhase("importing");
+      return;
+    }
+    if (input === "r" && policy) {
+      handleRecheck();
+      return;
+    }
+    if (input === "e" && report) {
+      void handleExport();
+      return;
+    }
+    if (input === "c" && report) {
+      const actionable = report.violations.filter(
+        (v) => v.type === "missing" || v.type === "wrong-version"
+      );
+      if (actionable.length > 0) {
+        void handleRemediate();
+      }
+      return;
+    }
+  });
+  if (phase === "remediating" || loading && phase !== "importing") {
+    if (phase === "remediating") {
+      return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx34(SectionHeader, { emoji: "\u{1F50D}", title: t("compliance_title"), gradient: GRADIENTS.gold }),
+        /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(ProgressLog, { lines: streamLines, isRunning: streamRunning, title: t("compliance_remediating") }) })
+      ] });
+    }
+    return /* @__PURE__ */ jsx34(Loading, { message: t("compliance_title") });
+  }
+  if (phase === "result" && resultMessage) {
+    return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx34(SectionHeader, { emoji: "\u{1F50D}", title: t("compliance_title"), gradient: GRADIENTS.gold }),
+      /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(
+        ResultBanner,
+        {
+          status: resultMessage.ok ? "success" : "error",
+          message: resultMessage.text
+        }
+      ) }),
+      /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.textSecondary, children: [
+        "r:",
+        t("hint_refresh"),
+        "  esc:",
+        t("hint_back")
+      ] }) })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx34(SectionHeader, { emoji: "\u{1F50D}", title: t("compliance_title"), gradient: GRADIENTS.gold }),
+    error && /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(ResultBanner, { status: "error", message: t("compliance_import_error", { error }) }) }),
+    phase === "importing" && /* @__PURE__ */ jsxs33(Box32, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx34(Text33, { color: COLORS.textSecondary, children: t("compliance_import_prompt") }),
+      /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(
+        TextInput7,
+        {
+          defaultValue: "",
+          onSubmit: (val) => {
+            void handleImportSubmit(val);
+          }
+        }
+      ) }),
+      /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.muted, dimColor: true, children: [
+        "esc:",
+        t("hint_back")
+      ] }) })
+    ] }),
+    phase === "overview" && /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: 1, children: [
+      !policy ? /* @__PURE__ */ jsx34(Box32, { flexDirection: "column", children: /* @__PURE__ */ jsx34(Text33, { color: COLORS.textSecondary, children: t("compliance_no_policy") }) }) : /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx34(Text33, { color: COLORS.textSecondary, bold: true, children: t("compliance_policy_by", { maintainer: policy.meta.maintainer }) }),
+        report ? /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: 1, children: [
+          /* @__PURE__ */ jsx34(ComplianceScore, { report }),
+          report.compliant ? /* @__PURE__ */ jsx34(ResultBanner, { status: "success", message: t("compliance_ok") }) : /* @__PURE__ */ jsx34(ViolationList, { violations: report.violations })
+        ] }) : /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(Text33, { color: COLORS.muted, dimColor: true, children: "Press r to run compliance check." }) })
+      ] }),
+      /* @__PURE__ */ jsx34(Box32, { marginTop: 2, flexWrap: "wrap", children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.textSecondary, children: [
+        "i:",
+        t("hint_import"),
+        policy && /* @__PURE__ */ jsxs33(Text33, { children: [
+          "  r:",
+          t("hint_scan")
+        ] }),
+        report && /* @__PURE__ */ jsxs33(Text33, { children: [
+          "  e:",
+          t("hint_export")
+        ] }),
+        report && report.violations.some((v) => v.type === "missing" || v.type === "wrong-version") && /* @__PURE__ */ jsxs33(Text33, { children: [
+          "  c:",
+          t("hint_clean")
+        ] }),
+        "  q:",
+        t("hint_quit")
+      ] }) })
+    ] })
+  ] });
+}
+
+// src/app.tsx
+import { jsx as jsx35, jsxs as jsxs34 } from "react/jsx-runtime";
+function LicenseInitializer() {
+  const initLicense = useLicenseStore((s) => s.initialize);
+  useEffect19(() => {
+    initLicense();
+  }, []);
+  return null;
+}
+function ViewRouter({ currentView }) {
+  const isPro = useLicenseStore((s) => s.isPro);
+  const isTeam = useLicenseStore((s) => s.isTeam);
+  if (isProView(currentView) && !isPro()) {
+    return /* @__PURE__ */ jsx35(UpgradePrompt, { viewId: currentView });
+  }
+  if (isTeamView(currentView) && !isTeam()) {
+    return /* @__PURE__ */ jsx35(UpgradePrompt, { viewId: currentView });
+  }
+  switch (currentView) {
+    case "dashboard":
+      return /* @__PURE__ */ jsx35(DashboardView, {});
+    case "installed":
+      return /* @__PURE__ */ jsx35(InstalledView, {});
+    case "search":
+      return /* @__PURE__ */ jsx35(SearchView, {});
+    case "outdated":
+      return /* @__PURE__ */ jsx35(OutdatedView, {});
+    case "package-info":
+      return /* @__PURE__ */ jsx35(PackageInfoView, {});
+    case "services":
+      return /* @__PURE__ */ jsx35(ServicesView, {});
+    case "doctor":
+      return /* @__PURE__ */ jsx35(DoctorView, {});
+    case "profiles":
+      return /* @__PURE__ */ jsx35(ProfilesView, {});
+    case "smart-cleanup":
+      return /* @__PURE__ */ jsx35(SmartCleanupView, {});
+    case "history":
+      return /* @__PURE__ */ jsx35(HistoryView, {});
+    case "rollback":
+      return /* @__PURE__ */ jsx35(RollbackView, {});
+    case "brewfile":
+      return /* @__PURE__ */ jsx35(BrewfileView, {});
+    case "sync":
+      return /* @__PURE__ */ jsx35(SyncView, {});
+    case "security-audit":
+      return /* @__PURE__ */ jsx35(SecurityAuditView, {});
+    case "compliance":
+      return /* @__PURE__ */ jsx35(ComplianceView, {});
+    case "account":
+      return /* @__PURE__ */ jsx35(AccountView, {});
+  }
+}
+function App() {
   const { exit } = useApp();
   const currentView = useNavigationStore((s) => s.currentView);
   useGlobalKeyboard({ onQuit: exit });
-  return /* @__PURE__ */ jsxs30(AppLayout, { children: [
-    /* @__PURE__ */ jsx31(LicenseInitializer, {}),
-    /* @__PURE__ */ jsx31(ViewRouter, { currentView })
+  return /* @__PURE__ */ jsxs34(AppLayout, { children: [
+    /* @__PURE__ */ jsx35(LicenseInitializer, {}),
+    /* @__PURE__ */ jsx35(ViewRouter, { currentView })
   ] });
 }
 
 // src/index.tsx
-import { jsx as jsx32 } from "react/jsx-runtime";
+import { jsx as jsx36 } from "react/jsx-runtime";
 var [, , command, arg] = process.argv;
 async function runCli() {
   await ensureDataDirs();
@@ -4404,6 +5914,7 @@ async function runCli() {
   if (command === "status") {
     await useLicenseStore.getState().initialize();
     const { status, license, degradation } = useLicenseStore.getState();
+    const isPro = useLicenseStore.getState().isPro();
     if (status === "free") {
       console.log(t("cli_planFree"));
       console.log(t("cli_upgradeHint"));
@@ -4427,12 +5938,53 @@ async function runCli() {
         console.log(t("cli_revalidateHint"));
       }
     }
+    if (isPro) {
+      try {
+        const { loadSnapshots: loadSnapshots2 } = await import("./snapshot-RAPGMAJF.js");
+        const snapshots = await loadSnapshots2();
+        if (snapshots.length > 0) {
+          const latest = snapshots[0];
+          console.log(`
+Snapshots: ${snapshots.length} (latest: ${latest ? formatDate(latest.capturedAt) : "\u2014"})`);
+        } else {
+          console.log("\nSnapshots: none");
+        }
+      } catch {
+      }
+      try {
+        const { loadBrewfile: loadBrewfile2, computeDrift: computeDrift2 } = await import("./brewfile-manager-3SERRYNC.js");
+        const schema = await loadBrewfile2();
+        if (schema) {
+          const drift = await computeDrift2(schema);
+          console.log(`Brewfile: ${drift.score}% compliant (${drift.missingPackages.length} missing, ${drift.extraPackages.length} extra)`);
+        }
+      } catch {
+      }
+      try {
+        const { loadSyncConfig: loadSyncConfig2 } = await import("./sync-engine-4ERSW4EQ.js");
+        const syncConfig = await loadSyncConfig2();
+        if (syncConfig?.lastSync) {
+          console.log(`Sync: last sync ${formatDate(syncConfig.lastSync)}`);
+        }
+      } catch {
+      }
+      try {
+        const { loadPolicy: loadPolicy2 } = await import("./policy-io-EECGRKNA.js");
+        const { checkCompliance: checkCompliance2 } = await import("./compliance-checker-X7P623UF.js");
+        const policy = await loadPolicy2(`${process.env["HOME"] ?? "~"}/.brew-tui/policy.yaml`).catch(() => null);
+        if (policy) {
+          const report = await checkCompliance2(policy, true);
+          console.log(`Compliance: ${report.score}% (${report.violations.length} violation(s))`);
+        }
+      } catch {
+      }
+    }
     return;
   }
   if (command === "install-brewbar") {
     await useLicenseStore.getState().initialize();
     const isPro = useLicenseStore.getState().isPro();
-    const { installBrewBar } = await import("./brewbar-installer-6BR3MPVZ.js");
+    const { installBrewBar } = await import("./brewbar-installer-ZEMXNDHP.js");
     try {
       await installBrewBar(isPro, arg === "--force");
       console.log(t("cli_brewbarInstalled"));
@@ -4443,7 +5995,7 @@ async function runCli() {
     return;
   }
   if (command === "uninstall-brewbar") {
-    const { uninstallBrewBar } = await import("./brewbar-installer-6BR3MPVZ.js");
+    const { uninstallBrewBar } = await import("./brewbar-installer-ZEMXNDHP.js");
     try {
       await uninstallBrewBar();
       console.log(t("cli_brewbarUninstalled"));
@@ -4466,14 +6018,15 @@ async function runCli() {
     return;
   }
   await ensureBrewBarRunning();
+  process.env.BREW_TUI_TUI_MODE = "1";
   process.stdout.write("\x1B[2J\x1B[3J\x1B[H");
-  render(/* @__PURE__ */ jsx32(App, {}));
+  render(/* @__PURE__ */ jsx36(App, {}));
 }
 async function ensureBrewBarRunning() {
   if (process.platform !== "darwin") return;
   await useLicenseStore.getState().initialize();
   if (!useLicenseStore.getState().isPro()) return;
-  const { isBrewBarInstalled, installBrewBar, launchBrewBar } = await import("./brewbar-installer-6BR3MPVZ.js");
+  const { isBrewBarInstalled, installBrewBar, launchBrewBar } = await import("./brewbar-installer-ZEMXNDHP.js");
   try {
     if (!await isBrewBarInstalled()) {
       console.log(t("cli_brewbarInstalling"));