brew-tui 0.6.0 → 0.6.2

package/build/index.js

@@ -5,24 +5,31 @@ import {
   loadBrewfile,
   reconcile,
   saveBrewfile
-} from "./chunk-LXF72RCD.js";
+} from "./chunk-KSIAKLE2.js";
 import {
+  activate,
   applyConflictResolutions,
+  deactivate,
   decryptPayload,
+  getDegradationLevel,
+  isExpired,
+  loadLicense,
   loadSyncConfig,
+  needsRevalidation,
   readSyncEnvelope,
+  revalidate,
   sync
-} from "./chunk-AIAZQJKL.js";
+} from "./chunk-QPXROTAP.js";
 import {
   checkCompliance
-} from "./chunk-U2DRWB7A.js";
+} from "./chunk-5MYWF5D7.js";
 import {
   captureSnapshot,
   execBrew,
   loadSnapshots,
   saveSnapshot,
   streamBrew
-} from "./chunk-4I344KQX.js";
+} from "./chunk-PVSE6XO7.js";
 import {
   exportReport,
   loadPolicy
@@ -32,13 +39,13 @@ import {
   clearHistory,
   detectAction,
   loadHistory
-} from "./chunk-KVCVIRWI.js";
+} from "./chunk-Z2VN4VYQ.js";
 import {
   DATA_DIR,
-  LICENSE_PATH,
   PROFILES_DIR,
-  ensureDataDirs
-} from "./chunk-UWS4A4F5.js";
+  ensureDataDirs,
+  getMachineId
+} from "./chunk-EHIBIFCB.js";
 import {
   fetchWithRetry,
   fetchWithTimeout,
@@ -46,14 +53,14 @@ import {
   t,
   tp,
   useLocaleStore
-} from "./chunk-MSXH66I2.js";
+} from "./chunk-6NA4INJS.js";
 import {
   logger
 } from "./chunk-KDHEUNRI.js";
 
 // src/index.tsx
 import { createInterface } from "readline/promises";
-import { rm as rm3 } from "fs/promises";
+import { rm as rm2 } from "fs/promises";
 import { render } from "ink";
 
 // src/app.tsx
@@ -137,7 +144,7 @@ function isTeamView(viewId) {
 }
 
 // src/utils/colors.ts
-var COLORS = {
+var PALETTE = {
   success: "#22C55E",
   error: "#EF4444",
   warning: "#F59E0B",
@@ -155,6 +162,14 @@ var COLORS = {
   border: "#4B5563",
   white: "#FFFFFF"
 };
+function isNoColorRequested() {
+  const v = process.env["NO_COLOR"];
+  return typeof v === "string" && v.length > 0;
+}
+var NO_COLOR = isNoColorRequested();
+var COLORS = NO_COLOR ? Object.fromEntries(
+  Object.keys(PALETTE).map((k) => [k, ""])
+) : PALETTE;
 
 // src/utils/gradient.tsx
 import React, { useMemo } from "react";
@@ -176,6 +191,9 @@ function interpolateColor(c1, c2, t2) {
   return rgbToHex(lerp(r1, r2, t2), lerp(g1, g2, t2), lerp(b1, b2, t2));
 }
 var GradientText = React.memo(function GradientText2({ children, colors, bold }) {
+  if (NO_COLOR) {
+    return /* @__PURE__ */ jsx(Text, { bold, children });
+  }
   if (colors.length < 2) {
     return /* @__PURE__ */ jsx(Text, { color: colors[0], bold, children });
   }
@@ -205,6 +223,17 @@ var GRADIENTS = {
   darkGold: ["#B8860B", "#8B6914", "#6B4F10"]
 };
 
+// src/utils/spacing.ts
+var SPACING = {
+  none: 0,
+  xs: 1,
+  sm: 2,
+  md: 3,
+  lg: 4,
+  xl: 6,
+  xxl: 8
+};
+
 // src/components/layout/header.tsx
 import { jsx as jsx2, jsxs } from "react/jsx-runtime";
 var LOGO_BREW = [
@@ -311,12 +340,12 @@ function Header() {
     /* @__PURE__ */ jsx2(GradientText, { colors: GRADIENTS.gold, children: brew }),
     /* @__PURE__ */ jsx2(GradientText, { colors: GRADIENTS.darkGold, children: LOGO_TUI[i] })
   ] }, i)) });
-  const menuBlock = /* @__PURE__ */ jsxs(Box, { borderStyle: "round", borderColor: COLORS.lavender, paddingX: 1, flexDirection: "column", alignSelf: isNarrow ? "flex-start" : "center", children: [
+  const menuBlock = /* @__PURE__ */ jsxs(Box, { borderStyle: "round", borderColor: COLORS.lavender, paddingX: SPACING.xs, flexDirection: "column", alignSelf: isNarrow ? "flex-start" : "center", children: [
     /* @__PURE__ */ jsxs(Box, { flexDirection: "row", children: [
       /* @__PURE__ */ jsx2(Box, { flexDirection: "column", children: COL1_VIEWS.map((view) => /* @__PURE__ */ jsx2(MenuItem, { view, currentView }, view)) }),
-      /* @__PURE__ */ jsx2(Box, { flexDirection: "column", marginLeft: 2, children: COL2_VIEWS.map((view) => /* @__PURE__ */ jsx2(MenuItem, { view, currentView }, view)) })
+      /* @__PURE__ */ jsx2(Box, { flexDirection: "column", marginLeft: SPACING.sm, children: COL2_VIEWS.map((view) => /* @__PURE__ */ jsx2(MenuItem, { view, currentView }, view)) })
     ] }),
-    /* @__PURE__ */ jsxs(Box, { borderStyle: "single", borderTop: true, borderBottom: false, borderLeft: false, borderRight: false, borderColor: COLORS.lavender, marginTop: 0, children: [
+    /* @__PURE__ */ jsxs(Box, { borderStyle: "single", borderTop: true, borderBottom: false, borderLeft: false, borderRight: false, borderColor: COLORS.lavender, marginTop: SPACING.none, children: [
       /* @__PURE__ */ jsx2(Text2, { bold: true, color: COLORS.white, children: "S" }),
       /* @__PURE__ */ jsxs(Text2, { color: COLORS.textSecondary, children: [
         " ",
@@ -335,14 +364,14 @@ function Header() {
     ] })
   ] });
   if (isNarrow) {
-    return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", paddingX: 1, children: [
+    return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", paddingX: SPACING.xs, children: [
       logoBlock,
-      /* @__PURE__ */ jsx2(Box, { marginTop: 1, children: menuBlock })
+      /* @__PURE__ */ jsx2(Box, { marginTop: SPACING.xs, children: menuBlock })
     ] });
   }
-  return /* @__PURE__ */ jsxs(Box, { flexDirection: "row", paddingX: 1, alignItems: "center", children: [
+  return /* @__PURE__ */ jsxs(Box, { flexDirection: "row", paddingX: SPACING.xs, alignItems: "center", children: [
     logoBlock,
-    /* @__PURE__ */ jsx2(Box, { marginLeft: 2, children: menuBlock })
+    /* @__PURE__ */ jsx2(Box, { marginLeft: SPACING.sm, children: menuBlock })
   ] });
 }
 
@@ -380,7 +409,7 @@ function Footer() {
   const currentView = useNavigationStore((s) => s.currentView);
   const locale = useLocaleStore((s) => s.locale);
   const defs = VIEW_HINT_DEFS[currentView] ?? [];
-  return /* @__PURE__ */ jsxs2(Box2, { borderStyle: "single", borderTop: true, borderBottom: false, borderLeft: false, borderRight: false, borderColor: COLORS.gold, paddingX: 1, flexWrap: "wrap", children: [
+  return /* @__PURE__ */ jsxs2(Box2, { borderStyle: "single", borderTop: true, borderBottom: false, borderLeft: false, borderRight: false, borderColor: COLORS.gold, paddingX: SPACING.xs, flexWrap: "wrap", children: [
     defs.map((def, i) => {
       const key = def.length === 1 ? def[0] : `${def[0]}:${def[1]}`;
       return /* @__PURE__ */ jsxs2(React2.Fragment, { children: [
@@ -413,7 +442,7 @@ import { jsx as jsx4, jsxs as jsxs3 } from "react/jsx-runtime";
 function AppLayout({ children }) {
   return /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", width: "100%", children: [
     /* @__PURE__ */ jsx4(Header, {}),
-    /* @__PURE__ */ jsx4(Box3, { flexDirection: "column", flexGrow: 1, paddingX: 2, paddingY: 1, children }),
+    /* @__PURE__ */ jsx4(Box3, { flexDirection: "column", flexGrow: 1, paddingX: SPACING.sm, paddingY: SPACING.xs, children }),
     /* @__PURE__ */ jsx4(Footer, {})
   ] });
 }
@@ -421,371 +450,6 @@ function AppLayout({ children }) {
 // src/stores/license-store.ts
 import { create as create2 } from "zustand";
 
-// src/lib/license/license-manager.ts
-import { readFile as readFile2, writeFile as writeFile2, rename, rm } from "fs/promises";
-import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from "crypto";
-
-// src/lib/license/polar-api.ts
-import { randomUUID } from "crypto";
-import { readFile, writeFile, mkdir } from "fs/promises";
-import { join } from "path";
-import { homedir } from "os";
-var BASE_URL = "https://api.polar.sh/v1/customer-portal/license-keys";
-var POLAR_ORGANIZATION_ID = "b8f245c0-d116-4457-92fb-1bda47139f82";
-var DATA_DIR2 = join(homedir(), ".brew-tui");
-var MACHINE_ID_PATH = join(DATA_DIR2, "machine-id");
-async function getMachineId() {
-  try {
-    const id2 = (await readFile(MACHINE_ID_PATH, "utf-8")).trim();
-    if (id2) return id2;
-  } catch {
-  }
-  const id = randomUUID();
-  await mkdir(DATA_DIR2, { recursive: true, mode: 448 });
-  await writeFile(MACHINE_ID_PATH, id, { encoding: "utf-8", mode: 384 });
-  return id;
-}
-function validateApiUrl(url) {
-  const parsed = new URL(url);
-  if (parsed.protocol !== "https:") {
-    throw new Error("HTTPS required for license API");
-  }
-  if (!parsed.hostname.endsWith("polar.sh")) {
-    throw new Error("Invalid API host");
-  }
-}
-async function post(endpoint, body, expectEmpty = false) {
-  const url = `${BASE_URL}/${endpoint}`;
-  validateApiUrl(url);
-  const res = await fetchWithRetry(url, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(body)
-  }, 15e3);
-  if (!res.ok) {
-    let message = `Request failed with status ${res.status}`;
-    try {
-      const errBody = await res.json();
-      if (typeof errBody.detail === "string") message = errBody.detail;
-      else if (typeof errBody.error === "string") message = errBody.error;
-      else if (typeof errBody.message === "string") message = errBody.message;
-    } catch {
-    }
-    throw new Error(message);
-  }
-  if (expectEmpty || res.status === 204) return void 0;
-  return res.json();
-}
-async function activateLicense(key) {
-  const machineId = await getMachineId();
-  const activation = await post("activate", {
-    key,
-    organization_id: POLAR_ORGANIZATION_ID,
-    label: machineId
-    // SEG-004: Use machine UUID instead of hostname
-  });
-  if (!activation || typeof activation.id !== "string" || !activation.license_key) {
-    throw new Error("Invalid activation response: missing required fields");
-  }
-  let customerEmail = "";
-  let customerName = "";
-  try {
-    const validated = await post("validate", {
-      key,
-      organization_id: POLAR_ORGANIZATION_ID,
-      activation_id: activation.id
-    });
-    customerEmail = validated.customer?.email ?? "";
-    customerName = validated.customer?.name ?? "";
-  } catch {
-  }
-  return {
-    activated: true,
-    error: null,
-    instance: { id: activation.id },
-    license_key: {
-      id: 0,
-      status: activation.license_key.status,
-      key,
-      activation_limit: 0,
-      activations_count: 0,
-      expires_at: activation.license_key.expires_at
-    },
-    meta: { customer_email: customerEmail, customer_name: customerName }
-  };
-}
-async function validateLicense(key, instanceId) {
-  const res = await post("validate", {
-    key,
-    organization_id: POLAR_ORGANIZATION_ID,
-    activation_id: instanceId
-  });
-  if (!res || typeof res.id !== "string" || typeof res.status !== "string" || !res.customer) {
-    throw new Error("Invalid validation response: missing required fields");
-  }
-  const notExpired = res.expires_at === null || new Date(res.expires_at) > /* @__PURE__ */ new Date();
-  const valid = res.status === "granted" && notExpired;
-  return {
-    valid,
-    error: valid ? null : `License ${res.status}`,
-    license_key: {
-      id: 0,
-      status: res.status,
-      key,
-      expires_at: res.expires_at
-    },
-    instance: { id: instanceId }
-  };
-}
-async function deactivateLicense(key, instanceId) {
-  await post(
-    "deactivate",
-    { key, organization_id: POLAR_ORGANIZATION_ID, activation_id: instanceId },
-    true
-  );
-}
-
-// src/lib/license/license-manager.ts
-var REVALIDATION_INTERVAL_MS = 24 * 60 * 60 * 1e3;
-var GRACE_PERIOD_MS = 7 * 24 * 60 * 60 * 1e3;
-var ACTIVATION_COOLDOWN_MS = 3e4;
-var MAX_ATTEMPTS = 5;
-var LOCKOUT_MS = 15 * 60 * 1e3;
-var tracker = {
-  attempts: 0,
-  lastAttempt: 0,
-  lockedUntil: 0
-};
-function checkRateLimit() {
-  const now = Date.now();
-  if (now < tracker.lockedUntil) {
-    const remaining = Math.ceil((tracker.lockedUntil - now) / 6e4);
-    throw new Error(t("cli_rateLimited", { minutes: remaining }));
-  }
-  if (now - tracker.lastAttempt < ACTIVATION_COOLDOWN_MS) {
-    throw new Error(t("cli_cooldown"));
-  }
-}
-function recordAttempt(success) {
-  const now = Date.now();
-  tracker.lastAttempt = now;
-  if (success) {
-    tracker.attempts = 0;
-    return;
-  }
-  tracker.attempts++;
-  if (tracker.attempts >= MAX_ATTEMPTS) {
-    tracker.lockedUntil = now + LOCKOUT_MS;
-    tracker.attempts = 0;
-  }
-}
-var ENCRYPTION_SECRET = "brew-tui-license-aes256gcm-v1";
-var SCRYPT_SALT = "brew-tui-salt-v1";
-var _derivedKey = null;
-function deriveEncryptionKey() {
-  if (!_derivedKey) _derivedKey = scryptSync(ENCRYPTION_SECRET, SCRYPT_SALT, 32);
-  return _derivedKey;
-}
-function encryptLicenseData(data) {
-  const key = deriveEncryptionKey();
-  const iv = randomBytes(12);
-  const cipher = createCipheriv("aes-256-gcm", key, iv);
-  const plaintext = JSON.stringify(data);
-  const ciphertext = Buffer.concat([cipher.update(plaintext, "utf-8"), cipher.final()]);
-  const tag = cipher.getAuthTag();
-  return {
-    encrypted: ciphertext.toString("base64"),
-    iv: iv.toString("base64"),
-    tag: tag.toString("base64")
-  };
-}
-function decryptLicenseData(encrypted, iv, tag) {
-  const key = deriveEncryptionKey();
-  const decipher = createDecipheriv(
-    "aes-256-gcm",
-    key,
-    Buffer.from(iv, "base64")
-  );
-  decipher.setAuthTag(Buffer.from(tag, "base64"));
-  const plaintext = Buffer.concat([
-    decipher.update(Buffer.from(encrypted, "base64")),
-    decipher.final()
-  ]);
-  return JSON.parse(plaintext.toString("utf-8"));
-}
-function isLicenseFile(obj) {
-  return typeof obj === "object" && obj !== null && obj.version === 1;
-}
-function isEncryptedLicenseFile(obj) {
-  if (!isLicenseFile(obj)) return false;
-  const record = obj;
-  return typeof record.encrypted === "string" && typeof record.iv === "string" && typeof record.tag === "string";
-}
-async function getMachineId2() {
-  try {
-    const { readFile: readMachineId } = await import("fs/promises");
-    const { join: join7 } = await import("path");
-    const { homedir: homedir4 } = await import("os");
-    const machineIdPath = join7(homedir4(), ".brew-tui", "machine-id");
-    return (await readMachineId(machineIdPath, "utf-8")).trim() || null;
-  } catch {
-    return null;
-  }
-}
-async function loadLicense() {
-  try {
-    const raw = await readFile2(LICENSE_PATH, "utf-8");
-    const parsed = JSON.parse(raw);
-    if (!isLicenseFile(parsed)) {
-      throw new Error("Invalid license data format");
-    }
-    const file = parsed;
-    if (file.version !== 1) {
-      throw new Error("Unsupported data version");
-    }
-    if (isEncryptedLicenseFile(file)) {
-      const data = decryptLicenseData(file.encrypted, file.iv, file.tag);
-      const fileRecord = file;
-      if (fileRecord.machineId) {
-        const currentMachineId = await getMachineId2();
-        if (currentMachineId && fileRecord.machineId !== currentMachineId) {
-          throw new Error("License was activated on a different machine");
-        }
-      }
-      return data;
-    }
-    if (file.license) {
-      const data = file.license;
-      await saveLicense(data);
-      return data;
-    }
-    return null;
-  } catch {
-    return null;
-  }
-}
-async function saveLicense(data) {
-  await ensureDataDirs();
-  const { encrypted, iv, tag } = encryptLicenseData(data);
-  const machineId = await getMachineId2();
-  const file = { version: 1, encrypted, iv, tag };
-  if (machineId) file.machineId = machineId;
-  const tmpPath = LICENSE_PATH + ".tmp";
-  await writeFile2(tmpPath, JSON.stringify(file, null, 2), { encoding: "utf-8", mode: 384 });
-  await rename(tmpPath, LICENSE_PATH);
-}
-async function clearLicense() {
-  try {
-    await rm(LICENSE_PATH);
-  } catch {
-  }
-}
-function isExpired(license) {
-  if (!license.expiresAt) return false;
-  return new Date(license.expiresAt).getTime() < Date.now();
-}
-function needsRevalidation(license) {
-  const lastValidated = new Date(license.lastValidatedAt).getTime();
-  if (isNaN(lastValidated)) return true;
-  return Date.now() - lastValidated > REVALIDATION_INTERVAL_MS;
-}
-function isWithinGracePeriod(license) {
-  const lastValidated = new Date(license.lastValidatedAt).getTime();
-  if (isNaN(lastValidated)) return false;
-  return Date.now() - lastValidated < GRACE_PERIOD_MS;
-}
-function getDegradationLevel(license) {
-  const lastValidated = new Date(license.lastValidatedAt).getTime();
-  if (isNaN(lastValidated)) return "expired";
-  const elapsed = Date.now() - lastValidated;
-  if (elapsed < 0) return "none";
-  const days = elapsed / (24 * 60 * 60 * 1e3);
-  if (days <= 7) return "none";
-  if (days <= 14) return "warning";
-  if (days <= 30) return "limited";
-  return "expired";
-}
-function validateLicenseKey(key) {
-  if (key.length < 10 || key.length > 100) {
-    throw new Error("Invalid license key format");
-  }
-  if (!/^[\w-]+$/.test(key)) {
-    throw new Error("Invalid license key format");
-  }
-}
-function detectPlan(key) {
-  const upper = key.toUpperCase();
-  return upper.startsWith("BTUI-T-") || upper.startsWith("BTUI-T_") ? "team" : "pro";
-}
-async function activate(key) {
-  validateLicenseKey(key);
-  checkRateLimit();
-  let success = false;
-  try {
-    const res = await activateLicense(key);
-    if (!res.activated) {
-      throw new Error(res.error ?? "Activation failed");
-    }
-    const license = {
-      key,
-      instanceId: res.instance.id,
-      status: "active",
-      customerEmail: res.meta.customer_email,
-      customerName: res.meta.customer_name,
-      plan: detectPlan(key),
-      activatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      expiresAt: res.license_key.expires_at,
-      lastValidatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    await saveLicense(license);
-    success = true;
-    return license;
-  } finally {
-    recordAttempt(success);
-  }
-}
-function isNetworkError(err) {
-  const msg = err instanceof Error ? err.message : String(err);
-  return /fetch failed|ECONNREFUSED|ENOTFOUND|ETIMEDOUT|network|timeout|abort/i.test(msg);
-}
-async function revalidate(license) {
-  try {
-    const res = await validateLicense(license.key, license.instanceId);
-    if (res.valid) {
-      const updated = {
-        ...license,
-        lastValidatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-        status: "active",
-        expiresAt: res.license_key.expires_at
-      };
-      await saveLicense(updated);
-      return "valid";
-    }
-    await saveLicense({ ...license, status: "expired" });
-    return "expired";
-  } catch (err) {
-    if (isNetworkError(err)) {
-      return isWithinGracePeriod(license) ? "grace" : "expired";
-    }
-    await saveLicense({ ...license, status: "expired" });
-    return "expired";
-  }
-}
-async function deactivate(license) {
-  let remoteSuccess = false;
-  for (let attempt = 0; attempt < 3; attempt++) {
-    try {
-      await deactivateLicense(license.key, license.instanceId);
-      remoteSuccess = true;
-      break;
-    } catch {
-      if (attempt < 2) await new Promise((r) => setTimeout(r, 1e3));
-    }
-  }
-  await clearLicense();
-  return { remoteSuccess };
-}
-
 // src/lib/license/anti-tamper.ts
 var _originalIsPro = null;
 var _originalGetState = null;
@@ -885,6 +549,15 @@ var useLicenseStore = create2((set, get) => ({
     }
     set({ status: "free", license: null, degradation: "none", error: null });
   },
+  revalidate: async () => {
+    const { license } = get();
+    if (!license) return;
+    try {
+      await doRevalidation(license, set);
+    } catch (err) {
+      set({ error: err instanceof Error ? err.message : String(err) });
+    }
+  },
   // Team is a superset of Pro — team users have full Pro access plus team features.
   // Pro users do NOT get Team features (Compliance) without paying for the Team tier.
   isPro: () => {
@@ -973,7 +646,9 @@ var FEATURE_KEYS = {
   history: { title: "upgrade_history", desc: "upgrade_historyDesc" },
   "security-audit": { title: "upgrade_security", desc: "upgrade_securityDesc" },
   sync: { title: "upgrade_sync", desc: "upgrade_syncDesc" },
-  compliance: { title: "upgrade_compliance", desc: "upgrade_complianceDesc" }
+  compliance: { title: "upgrade_compliance", desc: "upgrade_complianceDesc" },
+  rollback: { title: "upgrade_rollback", desc: "upgrade_rollbackDesc" },
+  brewfile: { title: "upgrade_brewfile", desc: "upgrade_brewfileDesc" }
 };
 function UpgradePrompt({ viewId }) {
   const keys = FEATURE_KEYS[viewId];
@@ -984,13 +659,13 @@ function UpgradePrompt({ viewId }) {
   const pricingKey = team ? "upgrade_teamPricing" : "upgrade_pricing";
   const buyUrlKey = team ? "upgrade_buyUrlTeam" : "upgrade_buyUrl";
   const labelKey = team ? "upgrade_teamLabel" : "upgrade_proLabel";
-  return /* @__PURE__ */ jsx5(Box4, { flexDirection: "column", alignItems: "center", paddingY: 2, children: /* @__PURE__ */ jsxs4(
+  return /* @__PURE__ */ jsx5(Box4, { flexDirection: "column", alignItems: "center", paddingY: SPACING.sm, children: /* @__PURE__ */ jsxs4(
     Box4,
     {
       borderStyle: "double",
       borderColor: COLORS.brand,
-      paddingX: 3,
-      paddingY: 2,
+      paddingX: SPACING.md,
+      paddingY: SPACING.sm,
       flexDirection: "column",
       alignItems: "center",
       width: "80%",
@@ -1027,7 +702,7 @@ function UpgradePrompt({ viewId }) {
 
 // src/views/dashboard.tsx
 import { useEffect, useMemo as useMemo2 } from "react";
-import { Box as Box8, Text as Text10, useStdout as useStdout3 } from "ink";
+import { Box as Box8, Text as Text10, useInput as useInput2, useStdout as useStdout3 } from "ink";
 
 // src/stores/brew-store.ts
 import { create as create4 } from "zustand";
@@ -1231,11 +906,26 @@ function validatePackageName(name) {
 async function brewUpdate() {
   return new Promise((resolve, reject) => {
     const proc = spawn("brew", ["update"], { stdio: "ignore" });
+    let settled = false;
+    const timeout = setTimeout(() => {
+      if (settled) return;
+      settled = true;
+      proc.kill("SIGTERM");
+      reject(new Error("brew update timed out after 120s"));
+    }, 12e4);
     proc.on("close", (code) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeout);
       if (code === 0) resolve();
       else reject(new Error(`brew update exited with code ${code}`));
     });
-    proc.on("error", reject);
+    proc.on("error", (err) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeout);
+      reject(err);
+    });
   });
 }
 async function getInstalled() {
@@ -1568,7 +1258,7 @@ async function queryOneByOne(packages) {
     try {
       const partial = await queryBatch(
         [pkg],
-        [{ package: { name: pkg.name, ecosystem: "Homebrew" }, version: pkg.version }]
+        [{ package: { name: pkg.name, ecosystem: "Bitnami" }, version: pkg.version }]
       );
       for (const [k, v] of partial) result.set(k, v);
     } catch (err) {
@@ -1583,7 +1273,7 @@ async function queryOneByOne(packages) {
         try {
           const retryResult = await queryBatch(
             [pkg],
-            [{ package: { name: pkg.name, ecosystem: "Homebrew" }, version: pkg.version }]
+            [{ package: { name: pkg.name, ecosystem: "Bitnami" }, version: pkg.version }]
           );
           for (const [k, v] of retryResult) result.set(k, v);
         } catch {
@@ -1609,7 +1299,7 @@ async function queryVulnerabilities(packages) {
   for (let i = 0; i < validPackages.length; i += BATCH_SIZE) {
     const batch = validPackages.slice(i, i + BATCH_SIZE);
     const queries = batch.map((p) => ({
-      package: { name: p.name, ecosystem: "Homebrew" },
+      package: { name: p.name, ecosystem: "Bitnami" },
       version: p.version
     }));
     const partial = await queryBatch(batch, queries);
@@ -1885,7 +1575,9 @@ var useSyncStore = create7((set, get) => ({
       if (!config) throw new Error("Sync not initialized");
       const envelope = await readSyncEnvelope();
       if (!envelope) throw new Error("No sync data found");
-      const payload = decryptPayload(envelope.encrypted, envelope.iv, envelope.tag);
+      const license = await loadLicense();
+      if (!license) throw new Error("License missing");
+      const payload = decryptPayload(envelope.encrypted, envelope.iv, envelope.tag, license.key);
       await applyConflictResolutions(payload, resolutions, config.machineId);
       const updatedConfig = await loadSyncConfig();
       set({ config: updatedConfig, conflicts: [], loading: false });
@@ -1944,8 +1636,8 @@ function StatCard({ label, value, color = "white" }) {
     {
       borderStyle: "round",
       borderColor: color,
-      paddingX: 2,
-      paddingY: 0,
+      paddingX: SPACING.sm,
+      paddingY: SPACING.none,
       flexDirection: "column",
       alignItems: "center",
       minWidth: minW,
@@ -1963,11 +1655,11 @@ import { Spinner } from "@inkjs/ui";
 import { jsx as jsx7, jsxs as jsxs6 } from "react/jsx-runtime";
 function Loading({ message }) {
   useLocaleStore((s) => s.locale);
-  return /* @__PURE__ */ jsx7(Box6, { paddingY: 1, children: /* @__PURE__ */ jsx7(Spinner, { label: message ?? t("loading_default") }) });
+  return /* @__PURE__ */ jsx7(Box6, { paddingY: SPACING.xs, children: /* @__PURE__ */ jsx7(Spinner, { label: message ?? t("loading_default") }) });
 }
 function ErrorMessage({ message }) {
   useLocaleStore((s) => s.locale);
-  return /* @__PURE__ */ jsxs6(Box6, { paddingY: 1, children: [
+  return /* @__PURE__ */ jsxs6(Box6, { paddingY: SPACING.xs, children: [
     /* @__PURE__ */ jsxs6(Text6, { color: COLORS.error, bold: true, children: [
       "\u2718",
       " ",
@@ -2000,7 +1692,7 @@ function StatusBadge({ label, variant }) {
 import { Box as Box7, Text as Text8 } from "ink";
 import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
 function SectionHeader({ emoji, title, color = COLORS.gold, gradient, count }) {
-  return /* @__PURE__ */ jsxs8(Box7, { gap: 1, children: [
+  return /* @__PURE__ */ jsxs8(Box7, { gap: SPACING.xs, children: [
     /* @__PURE__ */ jsxs8(Text8, { children: [
       emoji,
       " "
@@ -2075,27 +1767,27 @@ function ProStatusPanel() {
   const lastSync = syncConfig?.lastSync ?? null;
   const syncAgo = lastSync ? formatRelativeTime(new Date(lastSync).getTime() / 1e3) : null;
   const violationCount = complianceReport ? complianceReport.violations.length : null;
-  return /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", borderStyle: "round", borderColor: COLORS.purple, paddingX: 2, paddingY: 0, marginTop: 1, children: [
+  return /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", borderStyle: "round", borderColor: COLORS.purple, paddingX: SPACING.sm, paddingY: SPACING.none, marginTop: SPACING.xs, children: [
     /* @__PURE__ */ jsx10(Text10, { bold: true, color: COLORS.purple, children: t("dashboard_pro_status") }),
-    /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+    /* @__PURE__ */ jsxs10(Box8, { gap: SPACING.xs, children: [
       /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_security") }),
       cveCount === null ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: "\u2014" }) : cveCount === 0 ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.success, children: t("dashboard_no_cves") }) : /* @__PURE__ */ jsxs10(Text10, { color: COLORS.error, children: [
         t("dashboard_cves", { count: String(cveCount) }),
         criticalCount && criticalCount > 0 ? ` (${criticalCount} critical)` : ""
       ] })
     ] }),
-    /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+    /* @__PURE__ */ jsxs10(Box8, { gap: SPACING.xs, children: [
       /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_brewfile") }),
       driftScore === null ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: "\u2014" }) : /* @__PURE__ */ jsxs10(Text10, { color: driftScore >= 80 ? COLORS.success : COLORS.warning, children: [
         driftScore,
         "%"
       ] })
     ] }),
-    /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+    /* @__PURE__ */ jsxs10(Box8, { gap: SPACING.xs, children: [
       /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_sync") }),
       syncAgo === null ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_sync_never") }) : /* @__PURE__ */ jsx10(Text10, { color: COLORS.info, children: t("dashboard_sync_ago", { time: syncAgo }) })
     ] }),
-    /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+    /* @__PURE__ */ jsxs10(Box8, { gap: SPACING.xs, children: [
       /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_compliance") }),
       violationCount === null ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: "\u2014" }) : violationCount === 0 ? /* @__PURE__ */ jsx10(Text10, { color: COLORS.success, children: t("dashboard_compliance_ok") }) : /* @__PURE__ */ jsx10(Text10, { color: COLORS.warning, children: t("dashboard_compliance_violations", { count: String(violationCount) }) })
     ] })
@@ -2109,6 +1801,11 @@ function DashboardView() {
   useEffect(() => {
     fetchAll();
   }, []);
+  useInput2((input) => {
+    if (errors.installed && (input === "r" || input === "R")) {
+      void fetchAll();
+    }
+  });
   const errorServiceList = useMemo2(
     () => services.filter((s) => s.status === "error"),
     [services]
@@ -2127,11 +1824,19 @@ function DashboardView() {
   const servicesValue = loading.services ? "..." : errors.services ? t("dashboard_statError") : `${runningServices}/${services.length}`;
   const lastUpdated = lastFetchedAt.installed ? formatRelativeTime(lastFetchedAt.installed / 1e3) : null;
   if (loading.installed) return /* @__PURE__ */ jsx10(Loading, { message: t("loading_fetchingBrew") });
-  if (errors.installed) return /* @__PURE__ */ jsx10(ErrorMessage, { message: errors.installed });
+  if (errors.installed) {
+    return /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx10(ErrorMessage, { message: errors.installed }),
+      /* @__PURE__ */ jsx10(Box8, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs10(Text10, { color: COLORS.textSecondary, children: [
+        "r:",
+        t("hint_refresh")
+      ] }) })
+    ] });
+  }
   const isNarrow = columns < 60;
-  return /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", gap: 2, children: [
+  return /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", gap: SPACING.sm, children: [
     /* @__PURE__ */ jsx10(SectionHeader, { emoji: "\u{1F4CA}", title: t("dashboard_overview"), gradient: GRADIENTS.gold }),
-    /* @__PURE__ */ jsxs10(Box8, { gap: 1, flexWrap: "wrap", flexDirection: isNarrow ? "column" : "row", children: [
+    /* @__PURE__ */ jsxs10(Box8, { gap: SPACING.xs, flexWrap: "wrap", flexDirection: isNarrow ? "column" : "row", children: [
       /* @__PURE__ */ jsx10(StatCard, { label: t("dashboard_formulae"), value: formulae.length, color: COLORS.info }),
       /* @__PURE__ */ jsx10(StatCard, { label: t("dashboard_casks"), value: casks.length, color: COLORS.purple }),
       /* @__PURE__ */ jsx10(
@@ -2152,7 +1857,7 @@ function DashboardView() {
       )
     ] }),
     lastUpdated && /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_lastUpdated", { time: lastUpdated }) }),
-    partialErrors.length > 0 && /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", borderStyle: "round", borderColor: COLORS.warning, paddingX: 2, paddingY: 0, children: [
+    partialErrors.length > 0 && /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", borderStyle: "round", borderColor: COLORS.warning, paddingX: SPACING.sm, paddingY: SPACING.none, children: [
       /* @__PURE__ */ jsx10(Text10, { color: COLORS.warning, bold: true, children: t("dashboard_partialData") }),
       partialErrors.map((item) => /* @__PURE__ */ jsxs10(Text10, { color: COLORS.muted, children: [
         item.label,
@@ -2162,7 +1867,7 @@ function DashboardView() {
     ] }),
     config && !errors.config && /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", children: [
       /* @__PURE__ */ jsx10(SectionHeader, { emoji: "\u2139\uFE0F", title: t("dashboard_systemInfo"), gradient: [COLORS.text, COLORS.muted] }),
-      /* @__PURE__ */ jsxs10(Box8, { borderStyle: "round", borderColor: COLORS.blue, paddingX: 2, paddingY: 0, flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs10(Box8, { borderStyle: "round", borderColor: COLORS.blue, paddingX: SPACING.sm, paddingY: SPACING.none, flexDirection: "column", marginTop: SPACING.xs, children: [
         /* @__PURE__ */ jsxs10(Text10, { children: [
           /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("dashboard_homebrew") }),
           " ",
@@ -2180,19 +1885,19 @@ function DashboardView() {
         ] })
       ] })
     ] }),
-    !errors.outdated && outdated.formulae.length > 0 && /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", marginTop: 1, children: [
+    !errors.outdated && outdated.formulae.length > 0 && /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx10(SectionHeader, { emoji: "\u{1F4E6}", title: t("dashboard_outdatedPackages"), gradient: GRADIENTS.fire }),
-      /* @__PURE__ */ jsxs10(Box8, { paddingLeft: 2, flexDirection: "column", children: [
-        outdated.formulae.slice(0, 10).map((pkg) => /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+      /* @__PURE__ */ jsxs10(Box8, { paddingLeft: SPACING.sm, flexDirection: "column", children: [
+        outdated.formulae.slice(0, 10).map((pkg) => /* @__PURE__ */ jsxs10(Box8, { gap: SPACING.xs, children: [
           /* @__PURE__ */ jsx10(Text10, { color: COLORS.text, children: pkg.name }),
           /* @__PURE__ */ jsx10(VersionArrow, { current: pkg.installed_versions[0] ?? "", latest: pkg.current_version })
         ] }, pkg.name)),
         outdated.formulae.length > 10 && /* @__PURE__ */ jsx10(Text10, { color: COLORS.textSecondary, italic: true, children: t("common_andMore", { count: outdated.formulae.length - 10 }) })
       ] })
     ] }),
-    !errors.services && errorServices > 0 && /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", marginTop: 1, children: [
+    !errors.services && errorServices > 0 && /* @__PURE__ */ jsxs10(Box8, { flexDirection: "column", marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx10(SectionHeader, { emoji: "\u26A0\uFE0F", title: t("dashboard_serviceErrors"), color: COLORS.error }),
-      /* @__PURE__ */ jsx10(Box8, { paddingLeft: 2, flexDirection: "column", children: errorServiceList.map((s) => /* @__PURE__ */ jsxs10(Box8, { gap: 1, children: [
+      /* @__PURE__ */ jsx10(Box8, { paddingLeft: SPACING.sm, flexDirection: "column", children: errorServiceList.map((s) => /* @__PURE__ */ jsxs10(Box8, { gap: SPACING.xs, children: [
         /* @__PURE__ */ jsx10(StatusBadge, { label: t("badge_error"), variant: "error" }),
         /* @__PURE__ */ jsx10(Text10, { children: s.name }),
         s.exit_code != null && /* @__PURE__ */ jsx10(Text10, { color: COLORS.muted, children: t("common_exit", { code: s.exit_code }) })
@@ -2204,7 +1909,7 @@ function DashboardView() {
 
 // src/views/installed.tsx
 import { useState as useState3, useMemo as useMemo3, useEffect as useEffect5 } from "react";
-import { Box as Box14, Text as Text16, useInput as useInput3, useStdout as useStdout4 } from "ink";
+import { Box as Box14, Text as Text16, useInput as useInput4, useStdout as useStdout4 } from "ink";
 
 // src/hooks/use-debounce.ts
 import { useState, useEffect as useEffect2 } from "react";
@@ -2225,7 +1930,7 @@ async function logToHistory(args, success, error) {
   if (!detected) return;
   try {
     const isPro = useLicenseStore.getState().isPro();
-    const { appendEntry: appendEntry2 } = await import("./history-logger-PBDOLKNJ.js");
+    const { appendEntry: appendEntry2 } = await import("./history-logger-ZGYRAFON.js");
     await appendEntry2(isPro, detected.action, detected.packageName, success, error);
   } catch {
   }
@@ -2277,7 +1982,7 @@ function useBrewStream() {
     }
     const MUTATING_COMMANDS = /* @__PURE__ */ new Set(["install", "uninstall", "upgrade", "pin", "unpin", "tap", "untap"]);
     if (!cancelRef.current && MUTATING_COMMANDS.has(args[0] ?? "")) {
-      void import("./snapshot-RAPGMAJF.js").then(({ captureSnapshot: captureSnapshot2, saveSnapshot: saveSnapshot2 }) => {
+      void import("./snapshot-YWIOFQ5H.js").then(({ captureSnapshot: captureSnapshot2, saveSnapshot: saveSnapshot2 }) => {
         captureSnapshot2().then((s) => saveSnapshot2(s)).catch((err) => logger.warn("snapshot: capture/save failed", { error: String(err) }));
       });
     }
@@ -2318,7 +2023,7 @@ function SearchInput({ defaultValue, onChange, placeholder, isActive = true }) {
 
 // src/components/common/confirm-dialog.tsx
 import { useEffect as useEffect4 } from "react";
-import { Box as Box10, Text as Text12, useInput as useInput2 } from "ink";
+import { Box as Box10, Text as Text12, useInput as useInput3 } from "ink";
 import { jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
 function ConfirmDialog({ message, onConfirm, onCancel }) {
   const locale = useLocaleStore((s) => s.locale);
@@ -2329,15 +2034,15 @@ function ConfirmDialog({ message, onConfirm, onCancel }) {
       closeModal();
     };
   }, []);
-  useInput2((input, key) => {
+  useInput3((input, key) => {
     if (input === "y" || input === "Y") onConfirm();
     else if (locale === "es" && (input === "s" || input === "S")) onConfirm();
     else if (input === "n" || input === "N") onCancel();
     else if (key.escape) onCancel();
   });
-  return /* @__PURE__ */ jsxs12(Box10, { borderStyle: "double", borderColor: COLORS.purple, paddingX: 2, paddingY: 1, flexDirection: "column", children: [
+  return /* @__PURE__ */ jsxs12(Box10, { borderStyle: "double", borderColor: COLORS.purple, paddingX: SPACING.sm, paddingY: SPACING.xs, flexDirection: "column", children: [
     /* @__PURE__ */ jsx12(Text12, { bold: true, color: COLORS.text, children: message }),
-    /* @__PURE__ */ jsxs12(Box10, { marginTop: 1, children: [
+    /* @__PURE__ */ jsxs12(Box10, { marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx12(Text12, { color: COLORS.success, children: t("confirm_yes") }),
       /* @__PURE__ */ jsx12(Text12, { children: " / " }),
       /* @__PURE__ */ jsx12(Text12, { color: COLORS.error, children: t("confirm_no") })
@@ -2351,8 +2056,8 @@ import { Spinner as Spinner2 } from "@inkjs/ui";
 import { jsx as jsx13, jsxs as jsxs13 } from "react/jsx-runtime";
 function ProgressLog({ lines, isRunning, title, maxVisible = 15 }) {
   const visible = lines.slice(-maxVisible);
-  return /* @__PURE__ */ jsxs13(Box11, { flexDirection: "column", borderStyle: "round", borderColor: COLORS.sky, paddingX: 1, children: [
-    title && /* @__PURE__ */ jsxs13(Box11, { marginBottom: 1, children: [
+  return /* @__PURE__ */ jsxs13(Box11, { flexDirection: "column", borderStyle: "round", borderColor: COLORS.sky, paddingX: SPACING.xs, children: [
+    title && /* @__PURE__ */ jsxs13(Box11, { marginBottom: SPACING.xs, children: [
       isRunning && /* @__PURE__ */ jsx13(Spinner2, { label: "" }),
       /* @__PURE__ */ jsxs13(Text13, { bold: true, color: COLORS.sky, children: [
         " ",
@@ -2374,7 +2079,7 @@ var STATUS_COLORS = {
   info: COLORS.info
 };
 function ResultBanner({ status, message }) {
-  return /* @__PURE__ */ jsx14(Box12, { borderStyle: "round", borderColor: STATUS_COLORS[status], paddingX: 2, paddingY: 0, children: /* @__PURE__ */ jsx14(Text14, { color: STATUS_COLORS[status], bold: true, children: message }) });
+  return /* @__PURE__ */ jsx14(Box12, { borderStyle: "round", borderColor: STATUS_COLORS[status], paddingX: SPACING.sm, paddingY: SPACING.none, children: /* @__PURE__ */ jsx14(Text14, { color: STATUS_COLORS[status], bold: true, children: message }) });
 }
 
 // src/components/common/selectable-row.tsx
@@ -2429,7 +2134,7 @@ function InstalledView() {
       (p) => p.name.toLowerCase().includes(lower) || p.desc.toLowerCase().includes(lower)
     );
   }, [formulae, casks, tab, debouncedFilter]);
-  useInput3((input, key) => {
+  useInput4((input, key) => {
     if (confirmUninstall || stream.isRunning) return;
     if (!stream.isRunning && stream.lines.length > 0) {
       if (key.escape) {
@@ -2485,7 +2190,7 @@ function InstalledView() {
         "esc:",
         t("hint_cancel")
       ] }),
-      !stream.isRunning && /* @__PURE__ */ jsxs15(Box14, { flexDirection: "column", marginTop: 1, children: [
+      !stream.isRunning && /* @__PURE__ */ jsxs15(Box14, { flexDirection: "column", marginTop: SPACING.xs, children: [
         /* @__PURE__ */ jsx16(
           ResultBanner,
           {
@@ -2504,13 +2209,13 @@ function InstalledView() {
   const start = Math.max(0, cursor - Math.floor(MAX_VISIBLE_ROWS / 2));
   const visible = allItems.slice(start, start + MAX_VISIBLE_ROWS);
   return /* @__PURE__ */ jsxs15(Box14, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs15(Box14, { marginBottom: 1, gap: 1, children: [
+    /* @__PURE__ */ jsxs15(Box14, { marginBottom: SPACING.xs, gap: SPACING.xs, children: [
       /* @__PURE__ */ jsx16(
         Box14,
         {
           borderStyle: "round",
           borderColor: tab === "formulae" ? COLORS.info : COLORS.textSecondary,
-          paddingX: 1,
+          paddingX: SPACING.xs,
           children: /* @__PURE__ */ jsxs15(Text16, { bold: tab === "formulae", color: tab === "formulae" ? COLORS.info : COLORS.textSecondary, children: [
             "\u{1F4E6}",
             " ",
@@ -2523,7 +2228,7 @@ function InstalledView() {
         {
           borderStyle: "round",
           borderColor: tab === "casks" ? COLORS.purple : COLORS.textSecondary,
-          paddingX: 1,
+          paddingX: SPACING.xs,
           children: /* @__PURE__ */ jsxs15(Text16, { bold: tab === "casks", color: tab === "casks" ? COLORS.purple : COLORS.textSecondary, children: [
             "\u{1F37A}",
             " ",
@@ -2546,8 +2251,8 @@ function InstalledView() {
         onCancel: () => setConfirmUninstall(null)
       }
     ),
-    isSearching && /* @__PURE__ */ jsx16(Box14, { marginBottom: 1, borderStyle: "round", borderColor: COLORS.gold, paddingX: 1, children: /* @__PURE__ */ jsx16(SearchInput, { defaultValue: filter, onChange: setFilter, isActive: isSearching }) }),
-    /* @__PURE__ */ jsxs15(Box14, { gap: 1, borderStyle: "single", borderBottom: true, borderTop: false, borderLeft: false, borderRight: false, borderColor: COLORS.border, children: [
+    isSearching && /* @__PURE__ */ jsx16(Box14, { marginBottom: SPACING.xs, borderStyle: "round", borderColor: COLORS.gold, paddingX: SPACING.xs, children: /* @__PURE__ */ jsx16(SearchInput, { defaultValue: filter, onChange: setFilter, isActive: isSearching }) }),
+    /* @__PURE__ */ jsxs15(Box14, { gap: SPACING.xs, borderStyle: "single", borderBottom: true, borderTop: false, borderLeft: false, borderRight: false, borderColor: COLORS.border, children: [
       /* @__PURE__ */ jsxs15(Text16, { color: COLORS.text, bold: true, children: [
         " ",
         t("installed_col_package").padEnd(nameWidth)
@@ -2556,7 +2261,7 @@ function InstalledView() {
       /* @__PURE__ */ jsx16(Text16, { color: COLORS.text, bold: true, children: t("installed_col_status") })
     ] }),
     /* @__PURE__ */ jsxs15(Box14, { flexDirection: "column", children: [
-      visible.length === 0 && /* @__PURE__ */ jsx16(Box14, { paddingY: 1, justifyContent: "center", children: /* @__PURE__ */ jsx16(Text16, { color: COLORS.textSecondary, italic: true, children: t("installed_noPackages") }) }),
+      visible.length === 0 && /* @__PURE__ */ jsx16(Box14, { paddingY: SPACING.xs, justifyContent: "center", children: /* @__PURE__ */ jsx16(Text16, { color: COLORS.textSecondary, italic: true, children: t("installed_noPackages") }) }),
       start > 0 && /* @__PURE__ */ jsxs15(Text16, { color: COLORS.textSecondary, dimColor: true, children: [
         "  ",
         t("scroll_moreAbove", { count: start })
@@ -2579,13 +2284,13 @@ function InstalledView() {
         t("scroll_moreBelow", { count: allItems.length - start - MAX_VISIBLE_ROWS })
       ] })
     ] }),
-    /* @__PURE__ */ jsx16(Box14, { marginTop: 1, children: /* @__PURE__ */ jsx16(Text16, { color: COLORS.text, bold: true, children: allItems.length > 0 ? `${cursor + 1}/${allItems.length}` : "0/0" }) })
+    /* @__PURE__ */ jsx16(Box14, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx16(Text16, { color: COLORS.text, bold: true, children: allItems.length > 0 ? `${cursor + 1}/${allItems.length}` : "0/0" }) })
   ] });
 }
 
 // src/views/search.tsx
 import { useState as useState4, useCallback as useCallback2, useEffect as useEffect6, useRef as useRef2 } from "react";
-import { Box as Box15, Text as Text17, useInput as useInput4 } from "ink";
+import { Box as Box15, Text as Text17, useInput as useInput5 } from "ink";
 import { TextInput as TextInput2 } from "@inkjs/ui";
 import { jsx as jsx17, jsxs as jsxs16 } from "react/jsx-runtime";
 function SearchView() {
@@ -2639,7 +2344,7 @@ function SearchView() {
   const visibleFormulae = results ? results.formulae.slice(0, MAX_VISIBLE) : [];
   const visibleCasks = results ? results.casks.slice(0, MAX_VISIBLE) : [];
   const allVisible = [...visibleFormulae, ...visibleCasks];
-  useInput4((input, key) => {
+  useInput5((input, key) => {
     if (stream.isRunning) {
       if (key.escape) stream.cancel();
       return;
@@ -2687,7 +2392,7 @@ function SearchView() {
         "esc:",
         t("hint_cancel")
       ] }),
-      !stream.isRunning && /* @__PURE__ */ jsxs16(Box15, { flexDirection: "column", marginTop: 1, children: [
+      !stream.isRunning && /* @__PURE__ */ jsxs16(Box15, { flexDirection: "column", marginTop: SPACING.xs, children: [
         /* @__PURE__ */ jsx17(
           ResultBanner,
           {
@@ -2703,7 +2408,7 @@ function SearchView() {
     ] });
   }
   return /* @__PURE__ */ jsxs16(Box15, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs16(Box15, { marginBottom: 1, children: [
+    /* @__PURE__ */ jsxs16(Box15, { marginBottom: SPACING.xs, children: [
       /* @__PURE__ */ jsxs16(Text17, { color: COLORS.gold, children: [
         "\u{1F50D}",
         " "
@@ -2725,7 +2430,7 @@ function SearchView() {
       ] })
     ] }),
     searching && /* @__PURE__ */ jsx17(Loading, { message: t("loading_searching") }),
-    searchError && /* @__PURE__ */ jsx17(Box15, { marginBottom: 1, children: /* @__PURE__ */ jsx17(Text17, { color: COLORS.error, children: searchError }) }),
+    searchError && /* @__PURE__ */ jsx17(Box15, { marginBottom: SPACING.xs, children: /* @__PURE__ */ jsx17(Text17, { color: COLORS.error, children: searchError }) }),
     confirmInstall && /* @__PURE__ */ jsx17(
       ConfirmDialog,
       {
@@ -2740,7 +2445,7 @@ function SearchView() {
       }
     ),
     results && !searching && !confirmInstall && /* @__PURE__ */ jsxs16(Box15, { flexDirection: "column", children: [
-      visibleFormulae.length > 0 && /* @__PURE__ */ jsxs16(Box15, { flexDirection: "column", marginBottom: 1, children: [
+      visibleFormulae.length > 0 && /* @__PURE__ */ jsxs16(Box15, { flexDirection: "column", marginBottom: SPACING.xs, children: [
         /* @__PURE__ */ jsx17(Text17, { bold: true, color: COLORS.info, children: t("search_formulaeHeader", { count: results.formulae.length }) }),
         visibleFormulae.map((name, i) => {
           const isCurrent = i === cursor;
@@ -2763,21 +2468,21 @@ function SearchView() {
           t("scroll_moreBelow", { count: results.casks.length - MAX_VISIBLE })
         ] })
       ] }),
-      allVisible.length === 0 && /* @__PURE__ */ jsx17(Box15, { borderStyle: "round", borderColor: COLORS.textSecondary, paddingX: 2, children: /* @__PURE__ */ jsx17(Text17, { color: COLORS.textSecondary, italic: true, children: t("search_noResults") }) }),
-      /* @__PURE__ */ jsx17(Box15, { marginTop: 1, children: /* @__PURE__ */ jsx17(Text17, { color: COLORS.text, bold: true, children: allVisible.length > 0 ? `${cursor + 1}/${allVisible.length}` : "" }) })
+      allVisible.length === 0 && /* @__PURE__ */ jsx17(Box15, { borderStyle: "round", borderColor: COLORS.textSecondary, paddingX: SPACING.sm, children: /* @__PURE__ */ jsx17(Text17, { color: COLORS.textSecondary, italic: true, children: t("search_noResults") }) }),
+      /* @__PURE__ */ jsx17(Box15, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx17(Text17, { color: COLORS.text, bold: true, children: allVisible.length > 0 ? `${cursor + 1}/${allVisible.length}` : "" }) })
     ] })
   ] });
 }
 
 // src/views/outdated.tsx
-import { useEffect as useEffect7, useRef as useRef3, useState as useState5 } from "react";
-import { Box as Box16, Text as Text18, useInput as useInput5, useStdout as useStdout5 } from "ink";
+import { useEffect as useEffect7, useMemo as useMemo4, useRef as useRef3, useState as useState5 } from "react";
+import { Box as Box16, Text as Text18, useInput as useInput6, useStdout as useStdout5 } from "ink";
 import { jsx as jsx18, jsxs as jsxs17 } from "react/jsx-runtime";
 function ImpactPanel({ impact }) {
   const riskColor = impact.risk === "high" ? COLORS.error : impact.risk === "medium" ? COLORS.warning : COLORS.success;
   const riskLabel = impact.risk === "high" ? t("impact_high") : impact.risk === "medium" ? t("impact_medium") : t("impact_low");
   const riskIcon = impact.risk === "high" ? "\u26A0" : impact.risk === "medium" ? "~" : "\u2713";
-  return /* @__PURE__ */ jsxs17(Box16, { flexDirection: "column", marginTop: 1, borderStyle: "round", borderColor: riskColor, paddingX: 2, paddingY: 0, children: [
+  return /* @__PURE__ */ jsxs17(Box16, { flexDirection: "column", marginTop: SPACING.xs, borderStyle: "round", borderColor: riskColor, paddingX: SPACING.sm, paddingY: SPACING.none, children: [
     /* @__PURE__ */ jsxs17(Box16, { children: [
       /* @__PURE__ */ jsxs17(Text18, { bold: true, color: riskColor, children: [
         riskIcon,
@@ -2811,10 +2516,13 @@ function OutdatedView() {
       void fetchOutdated();
     }
   }, [stream.isRunning, stream.error]);
-  const allOutdated = [
-    ...outdated.formulae.map((p) => ({ ...p, type: "formula" })),
-    ...outdated.casks.map((p) => ({ ...p, type: "cask" }))
-  ];
+  const allOutdated = useMemo4(
+    () => [
+      ...outdated.formulae.map((p) => ({ ...p, type: "formula" })),
+      ...outdated.casks.map((p) => ({ ...p, type: "cask" }))
+    ],
+    [outdated.formulae, outdated.casks]
+  );
   const debouncedCursor = useDebounce(cursor, 150);
   useEffect7(() => {
     const pkg = allOutdated[debouncedCursor];
@@ -2830,7 +2538,7 @@ function OutdatedView() {
       pkg.type
     ).then(setImpact).catch(() => setImpact(null)).finally(() => setImpactLoading(false));
   }, [debouncedCursor, stream.isRunning]);
-  useInput5((input, key) => {
+  useInput6((input, key) => {
     if (stream.isRunning) {
       if (key.escape) stream.cancel();
       return;
@@ -2883,8 +2591,8 @@ function OutdatedView() {
         "esc:",
         t("hint_cancel")
       ] }),
-      !stream.isRunning && /* @__PURE__ */ jsxs17(Box16, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsxs17(Box16, { borderStyle: "round", borderColor: stream.error ? COLORS.error : COLORS.success, paddingX: 2, paddingY: 0, children: [
+      !stream.isRunning && /* @__PURE__ */ jsxs17(Box16, { flexDirection: "column", marginTop: SPACING.xs, children: [
+        /* @__PURE__ */ jsxs17(Box16, { borderStyle: "round", borderColor: stream.error ? COLORS.error : COLORS.success, paddingX: SPACING.sm, paddingY: SPACING.none, children: [
           /* @__PURE__ */ jsx18(Text18, { color: stream.error ? COLORS.error : COLORS.success, bold: true, children: stream.error ? `\u2718 ${stream.error}` : `\u2714 ${t("outdated_upgradeComplete")}` }),
           /* @__PURE__ */ jsxs17(Text18, { color: COLORS.muted, children: [
             " ",
@@ -2904,7 +2612,7 @@ function OutdatedView() {
 ${t("outdated_upgradeAllList", { list: allOutdated.map((p) => p.name).join(", ") })}` : "";
   return /* @__PURE__ */ jsxs17(Box16, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx18(SectionHeader, { emoji: "\u{1F4E6}", title: t("outdated_title", { count: allOutdated.length }), gradient: GRADIENTS.fire }),
-    confirmAction && /* @__PURE__ */ jsx18(Box16, { marginY: 1, children: /* @__PURE__ */ jsx18(
+    confirmAction && /* @__PURE__ */ jsx18(Box16, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx18(
       ConfirmDialog,
       {
         message: confirmAction.type === "all" ? upgradeAllMessage : t("outdated_confirmSingle", { name: confirmAction.type === "single" ? confirmAction.name : "" }),
@@ -2920,8 +2628,8 @@ ${t("outdated_upgradeAllList", { list: allOutdated.map((p) => p.name).join(", ")
         onCancel: () => setConfirmAction(null)
       }
     ) }),
-    allOutdated.length === 0 && !confirmAction && /* @__PURE__ */ jsx18(Box16, { marginTop: 1, children: /* @__PURE__ */ jsx18(ResultBanner, { status: "success", message: `\u2714 ${t("outdated_upToDate")}` }) }),
-    allOutdated.length > 0 && !confirmAction && /* @__PURE__ */ jsxs17(Box16, { flexDirection: "column", marginTop: 1, children: [
+    allOutdated.length === 0 && !confirmAction && /* @__PURE__ */ jsx18(Box16, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx18(ResultBanner, { status: "success", message: `\u2714 ${t("outdated_upToDate")}` }) }),
+    allOutdated.length > 0 && !confirmAction && /* @__PURE__ */ jsxs17(Box16, { flexDirection: "column", marginTop: SPACING.xs, children: [
       start > 0 && /* @__PURE__ */ jsxs17(Text18, { color: COLORS.textSecondary, dimColor: true, children: [
         "  ",
         t("scroll_moreAbove", { count: start })
@@ -2939,21 +2647,21 @@ ${t("outdated_upgradeAllList", { list: allOutdated.map((p) => p.name).join(", ")
         "  ",
         t("scroll_moreBelow", { count: allOutdated.length - start - MAX_VISIBLE_ROWS })
       ] }),
-      /* @__PURE__ */ jsx18(Box16, { marginTop: 1, children: /* @__PURE__ */ jsxs17(Text18, { color: COLORS.text, bold: true, children: [
+      /* @__PURE__ */ jsx18(Box16, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs17(Text18, { color: COLORS.text, bold: true, children: [
         cursor + 1,
         "/",
         allOutdated.length
       ] }) }),
       impact && !stream.isRunning && !confirmAction && /* @__PURE__ */ jsx18(ImpactPanel, { impact }),
-      impactLoading && !stream.isRunning && !confirmAction && /* @__PURE__ */ jsx18(Box16, { marginTop: 1, children: /* @__PURE__ */ jsx18(Text18, { color: COLORS.textSecondary, children: t("impact_analyzing") }) }),
-      /* @__PURE__ */ jsx18(Box16, { marginTop: 1, children: /* @__PURE__ */ jsx18(Text18, { color: COLORS.textSecondary, children: t("impact_hint") }) })
+      impactLoading && !stream.isRunning && !confirmAction && /* @__PURE__ */ jsx18(Box16, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx18(Text18, { color: COLORS.textSecondary, children: t("impact_analyzing") }) }),
+      /* @__PURE__ */ jsx18(Box16, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx18(Text18, { color: COLORS.textSecondary, children: t("impact_hint") }) })
     ] })
   ] });
 }
 
 // src/views/package-info.tsx
 import { useEffect as useEffect8, useRef as useRef4, useState as useState6 } from "react";
-import { Box as Box17, Text as Text19, useInput as useInput6 } from "ink";
+import { Box as Box17, Text as Text19, useInput as useInput7 } from "ink";
 import { Fragment as Fragment4, jsx as jsx19, jsxs as jsxs18 } from "react/jsx-runtime";
 var ACTION_PROGRESS_KEYS = {
   install: "pkgInfo_installing",
@@ -3046,7 +2754,7 @@ function PackageInfoView() {
       });
     }
   }, [stream.isRunning, stream.error]);
-  useInput6((input, key) => {
+  useInput7((input, key) => {
     if (stream.isRunning) {
       if (key.escape) stream.cancel();
       return;
@@ -3103,7 +2811,7 @@ function PackageInfoView() {
         onCancel: () => setConfirmAction(null)
       }
     ),
-    /* @__PURE__ */ jsxs18(Box17, { gap: 2, marginBottom: 1, children: [
+    /* @__PURE__ */ jsxs18(Box17, { gap: SPACING.sm, marginBottom: SPACING.xs, children: [
       /* @__PURE__ */ jsx19(GradientText, { colors: GRADIENTS.gold, bold: true, children: formula.name }),
       /* @__PURE__ */ jsx19(Text19, { color: COLORS.teal, children: installed?.version ?? formula.versions.stable }),
       isInstalled && /* @__PURE__ */ jsx19(StatusBadge, { label: t("badge_installed"), variant: "success" }),
@@ -3112,11 +2820,11 @@ function PackageInfoView() {
       formula.keg_only && /* @__PURE__ */ jsx19(StatusBadge, { label: t("badge_kegOnly"), variant: "muted" }),
       formula.deprecated && /* @__PURE__ */ jsx19(StatusBadge, { label: t("badge_deprecated"), variant: "error" })
     ] }),
-    /* @__PURE__ */ jsxs18(Box17, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsxs18(Box17, { flexDirection: "column", gap: SPACING.xs, children: [
       /* @__PURE__ */ jsx19(Text19, { children: formula.desc }),
       /* @__PURE__ */ jsxs18(Box17, { flexDirection: "column", children: [
         /* @__PURE__ */ jsx19(SectionHeader, { emoji: "\u{1F4CB}", title: t("pkgInfo_details"), gradient: [COLORS.text, COLORS.muted] }),
-        /* @__PURE__ */ jsxs18(Box17, { borderStyle: "round", borderColor: COLORS.border, paddingX: 2, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs18(Box17, { borderStyle: "round", borderColor: COLORS.border, paddingX: SPACING.sm, flexDirection: "column", children: [
           /* @__PURE__ */ jsxs18(Text19, { children: [
             /* @__PURE__ */ jsx19(Text19, { color: COLORS.muted, children: t("pkgInfo_homepage") }),
             " ",
@@ -3161,14 +2869,14 @@ function PackageInfoView() {
       ] }),
       formula.dependencies.length > 0 && /* @__PURE__ */ jsxs18(Box17, { flexDirection: "column", children: [
         /* @__PURE__ */ jsx19(SectionHeader, { emoji: "\u{1F517}", title: t("pkgInfo_dependencies", { count: formula.dependencies.length }), gradient: GRADIENTS.ocean }),
-        /* @__PURE__ */ jsx19(Box17, { paddingLeft: 2, flexWrap: "wrap", columnGap: 2, children: formula.dependencies.map((dep) => /* @__PURE__ */ jsx19(Text19, { color: COLORS.muted, children: dep }, dep)) })
+        /* @__PURE__ */ jsx19(Box17, { paddingLeft: SPACING.sm, flexWrap: "wrap", columnGap: 2, children: formula.dependencies.map((dep) => /* @__PURE__ */ jsx19(Text19, { color: COLORS.muted, children: dep }, dep)) })
       ] }),
       formula.caveats && /* @__PURE__ */ jsxs18(Box17, { flexDirection: "column", children: [
         /* @__PURE__ */ jsx19(SectionHeader, { emoji: "\u26A0\uFE0F", title: t("pkgInfo_caveats"), color: COLORS.warning }),
-        /* @__PURE__ */ jsx19(Box17, { borderStyle: "round", borderColor: COLORS.warning, paddingX: 2, children: /* @__PURE__ */ jsx19(Text19, { color: COLORS.warning, children: formula.caveats }) })
+        /* @__PURE__ */ jsx19(Box17, { borderStyle: "round", borderColor: COLORS.warning, paddingX: SPACING.sm, children: /* @__PURE__ */ jsx19(Text19, { color: COLORS.warning, children: formula.caveats }) })
       ] })
     ] }),
-    /* @__PURE__ */ jsx19(Box17, { marginTop: 1, children: /* @__PURE__ */ jsxs18(Text19, { color: COLORS.textSecondary, children: [
+    /* @__PURE__ */ jsx19(Box17, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs18(Text19, { color: COLORS.textSecondary, children: [
       isInstalled ? `u:${t("hint_uninstall")}` : `i:${t("hint_install")}`,
       isInstalled && formula.outdated ? ` U:${t("hint_upgrade")}` : "",
       ` esc:${t("hint_back")}`
@@ -3178,7 +2886,7 @@ function PackageInfoView() {
 
 // src/views/services.tsx
 import { useEffect as useEffect9, useState as useState7 } from "react";
-import { Box as Box18, Text as Text20, useInput as useInput7, useStdout as useStdout6 } from "ink";
+import { Box as Box18, Text as Text20, useInput as useInput8, useStdout as useStdout6 } from "ink";
 import { jsx as jsx20, jsxs as jsxs19 } from "react/jsx-runtime";
 var STATUS_VARIANTS = {
   started: "success",
@@ -3200,7 +2908,7 @@ function ServicesView() {
   useEffect9(() => {
     fetchServices();
   }, []);
-  useInput7((input, key) => {
+  useInput8((input, key) => {
     if (actionInProgress) return;
     if (confirmAction) return;
     if (lastError) {
@@ -3241,7 +2949,7 @@ function ServicesView() {
   const visible = services.slice(start, start + MAX_VISIBLE_ROWS);
   return /* @__PURE__ */ jsxs19(Box18, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx20(SectionHeader, { emoji: "\u2699\uFE0F", title: t("services_titleCount", { count: services.length }), gradient: GRADIENTS.ocean }),
-    confirmAction && /* @__PURE__ */ jsx20(Box18, { marginY: 1, children: /* @__PURE__ */ jsx20(
+    confirmAction && /* @__PURE__ */ jsx20(Box18, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx20(
       ConfirmDialog,
       {
         message: confirmAction.type === "stop" ? t("services_confirmStop", { name: confirmAction.name }) : t("services_confirmRestart", { name: confirmAction.name }),
@@ -3260,8 +2968,8 @@ function ServicesView() {
         onCancel: () => setConfirmAction(null)
       }
     ) }),
-    /* @__PURE__ */ jsxs19(Box18, { flexDirection: "column", marginTop: 1, children: [
-      /* @__PURE__ */ jsxs19(Box18, { gap: 1, borderStyle: "single", borderBottom: true, borderTop: false, borderLeft: false, borderRight: false, borderColor: COLORS.border, paddingBottom: 0, children: [
+    /* @__PURE__ */ jsxs19(Box18, { flexDirection: "column", marginTop: SPACING.xs, children: [
+      /* @__PURE__ */ jsxs19(Box18, { gap: SPACING.xs, borderStyle: "single", borderBottom: true, borderTop: false, borderLeft: false, borderRight: false, borderColor: COLORS.border, paddingBottom: SPACING.none, children: [
         /* @__PURE__ */ jsxs19(Text20, { bold: true, color: COLORS.text, children: [
           "  ",
           t("services_name").padEnd(svcNameWidth)
@@ -3289,8 +2997,8 @@ function ServicesView() {
       ] })
     ] }),
     actionInProgress && /* @__PURE__ */ jsx20(Text20, { color: COLORS.sky, children: t("services_processing") }),
-    lastError && /* @__PURE__ */ jsx20(Box18, { marginTop: 1, children: /* @__PURE__ */ jsx20(Text20, { color: COLORS.error, children: lastError }) }),
-    /* @__PURE__ */ jsx20(Box18, { marginTop: 1, children: /* @__PURE__ */ jsxs19(Text20, { color: COLORS.text, bold: true, children: [
+    lastError && /* @__PURE__ */ jsx20(Box18, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx20(Text20, { color: COLORS.error, children: lastError }) }),
+    /* @__PURE__ */ jsx20(Box18, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs19(Text20, { color: COLORS.text, bold: true, children: [
       cursor + 1,
       "/",
       services.length
@@ -3300,7 +3008,7 @@ function ServicesView() {
 
 // src/views/doctor.tsx
 import { useEffect as useEffect10, useRef as useRef5 } from "react";
-import { Box as Box19, Text as Text21, useInput as useInput8 } from "ink";
+import { Box as Box19, Text as Text21, useInput as useInput9 } from "ink";
 import { jsx as jsx21, jsxs as jsxs20 } from "react/jsx-runtime";
 function DoctorView() {
   const { doctorWarnings, doctorClean, loading, errors, fetchDoctor } = useBrewStore();
@@ -3314,38 +3022,38 @@ function DoctorView() {
   useEffect10(() => {
     fetchDoctor();
   }, []);
-  useInput8((input) => {
+  useInput9((input) => {
     if (input === "r") void fetchDoctor();
   });
   if (loading.doctor) return /* @__PURE__ */ jsx21(Loading, { message: t("loading_doctor") });
   if (errors.doctor) return /* @__PURE__ */ jsx21(ErrorMessage, { message: errors.doctor });
   return /* @__PURE__ */ jsxs20(Box19, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx21(SectionHeader, { emoji: "\u{1FA7A}", title: t("doctor_title"), gradient: GRADIENTS.emerald }),
-    /* @__PURE__ */ jsxs20(Box19, { flexDirection: "column", marginTop: 1, children: [
+    /* @__PURE__ */ jsxs20(Box19, { flexDirection: "column", marginTop: SPACING.xs, children: [
       doctorClean && /* @__PURE__ */ jsx21(ResultBanner, { status: "success", message: `\u2714 ${t("doctor_clean")}` }),
       doctorClean === false && doctorWarnings.length === 0 && /* @__PURE__ */ jsx21(Text21, { color: COLORS.warning, children: t("doctor_warningsNotCaptured") }),
       doctorWarnings.map((warning, i) => (
         // FE-004: Improved React key
-        /* @__PURE__ */ jsx21(Box19, { flexDirection: "column", marginBottom: 1, borderStyle: "single", borderColor: COLORS.warning, paddingX: 1, children: warning.split("\n").map((line, j) => /* @__PURE__ */ jsx21(Text21, { color: j === 0 ? COLORS.warning : COLORS.muted, children: line }, `warning-${i}-${j}-${line.slice(0, 20)}`)) }, `warning-${i}-${warning.slice(0, 20)}`)
+        /* @__PURE__ */ jsx21(Box19, { flexDirection: "column", marginBottom: SPACING.xs, borderStyle: "single", borderColor: COLORS.warning, paddingX: SPACING.xs, children: warning.split("\n").map((line, j) => /* @__PURE__ */ jsx21(Text21, { color: j === 0 ? COLORS.warning : COLORS.muted, children: line }, `warning-${i}-${j}-${line.slice(0, 20)}`)) }, `warning-${i}-${warning.slice(0, 20)}`)
       ))
     ] }),
-    /* @__PURE__ */ jsx21(Box19, { marginTop: 1, children: /* @__PURE__ */ jsx21(Text21, { color: COLORS.text, bold: true, children: doctorWarnings.length > 0 ? tp("plural_warnings", doctorWarnings.length) : "" }) })
+    /* @__PURE__ */ jsx21(Box19, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx21(Text21, { color: COLORS.text, bold: true, children: doctorWarnings.length > 0 ? tp("plural_warnings", doctorWarnings.length) : "" }) })
   ] });
 }
 
 // src/views/profiles.tsx
 import { useEffect as useEffect11, useRef as useRef6, useState as useState8 } from "react";
-import { Box as Box24, useInput as useInput9 } from "ink";
+import { Box as Box24, useInput as useInput10 } from "ink";
 
 // src/stores/profile-store.ts
 import { create as create9 } from "zustand";
 
 // src/lib/profiles/profile-manager.ts
-import { readFile as readFile3, writeFile as writeFile3, readdir, rm as rm2, rename as rename2 } from "fs/promises";
-import { join as join2, basename } from "path";
+import { readFile, writeFile, readdir, rm, rename } from "fs/promises";
+import { join, basename } from "path";
 
 // src/lib/license/watermark.ts
-function getWatermark(license, consent = true) {
+function getWatermark(license, consent = false) {
   if (!consent) return "";
   if (!license?.customerEmail) return "";
   return `Licensed to: ${license.customerEmail}`;
@@ -3369,7 +3077,7 @@ function validateProfileName(name) {
 }
 function profilePath(name) {
   validateProfileName(name);
-  return join2(PROFILES_DIR, `${basename(name)}.json`);
+  return join(PROFILES_DIR, `${basename(name)}.json`);
 }
 async function listProfiles(isPro) {
   proCheck(isPro);
@@ -3383,7 +3091,7 @@ async function listProfiles(isPro) {
 }
 async function loadProfile(isPro, name) {
   proCheck(isPro);
-  const raw = await readFile3(profilePath(name), "utf-8");
+  const raw = await readFile(profilePath(name), "utf-8");
   let file;
   try {
     file = JSON.parse(raw);
@@ -3404,13 +3112,13 @@ async function saveProfile(isPro, profile) {
   const filePath = profilePath(profile.name);
   const tmpPath = filePath + ".tmp";
   const file = { version: 1, profile };
-  await writeFile3(tmpPath, JSON.stringify(file, null, 2), { encoding: "utf-8", mode: 384 });
-  await rename2(tmpPath, filePath);
+  await writeFile(tmpPath, JSON.stringify(file, null, 2), { encoding: "utf-8", mode: 384 });
+  await rename(tmpPath, filePath);
 }
 async function deleteProfile(isPro, name) {
   proCheck(isPro);
   try {
-    await rm2(profilePath(name));
+    await rm(profilePath(name));
   } catch {
   }
 }
@@ -3436,8 +3144,8 @@ async function exportCurrentSetup(isPro, name, description, license = null, cons
     formulae: leaves,
     casks,
     taps,
-    exportedBy: consent ? getWatermark(license) : ""
-    // SEG-003: Only embed watermark with consent
+    exportedBy: getWatermark(license, consent)
+    // BK-014: explicit consent required (default false)
   };
   await saveProfile(isPro, profile);
   return profile;
@@ -3560,8 +3268,8 @@ import { jsx as jsx22, jsxs as jsxs21 } from "react/jsx-runtime";
 function ProfileListMode({ profileNames, cursor, confirmDelete, loadError, onConfirmDelete, onCancelDelete }) {
   return /* @__PURE__ */ jsxs21(Box20, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx22(SectionHeader, { emoji: "\u{1F4C1}", title: t("profiles_title", { count: profileNames.length }), gradient: GRADIENTS.gold }),
-    loadError && /* @__PURE__ */ jsx22(Box20, { marginY: 1, children: /* @__PURE__ */ jsx22(Text22, { color: COLORS.error, children: loadError }) }),
-    confirmDelete && profileNames[cursor] && /* @__PURE__ */ jsx22(Box20, { marginY: 1, children: /* @__PURE__ */ jsx22(
+    loadError && /* @__PURE__ */ jsx22(Box20, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx22(Text22, { color: COLORS.error, children: loadError }) }),
+    confirmDelete && profileNames[cursor] && /* @__PURE__ */ jsx22(Box20, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx22(
       ConfirmDialog,
       {
         message: t("profiles_confirmDelete", { name: profileNames[cursor] }),
@@ -3569,7 +3277,7 @@ function ProfileListMode({ profileNames, cursor, confirmDelete, loadError, onCon
         onCancel: onCancelDelete
       }
     ) }),
-    profileNames.length === 0 && !confirmDelete && /* @__PURE__ */ jsx22(Box20, { marginTop: 1, borderStyle: "round", borderColor: COLORS.textSecondary, paddingX: 2, paddingY: 0, children: /* @__PURE__ */ jsxs21(Box20, { flexDirection: "column", children: [
+    profileNames.length === 0 && !confirmDelete && /* @__PURE__ */ jsx22(Box20, { marginTop: SPACING.xs, borderStyle: "round", borderColor: COLORS.textSecondary, paddingX: SPACING.sm, paddingY: SPACING.none, children: /* @__PURE__ */ jsxs21(Box20, { flexDirection: "column", children: [
       /* @__PURE__ */ jsx22(Text22, { color: COLORS.textSecondary, italic: true, children: t("profiles_noProfiles") }),
       /* @__PURE__ */ jsxs21(Text22, { color: COLORS.muted, children: [
         t("profiles_press"),
@@ -3579,12 +3287,12 @@ function ProfileListMode({ profileNames, cursor, confirmDelete, loadError, onCon
         t("profiles_exportHint")
       ] })
     ] }) }),
-    profileNames.length > 0 && !confirmDelete && /* @__PURE__ */ jsxs21(Box20, { flexDirection: "column", marginTop: 1, children: [
+    profileNames.length > 0 && !confirmDelete && /* @__PURE__ */ jsxs21(Box20, { flexDirection: "column", marginTop: SPACING.xs, children: [
       profileNames.map((name, i) => {
         const isCurrent = i === cursor;
         return /* @__PURE__ */ jsx22(SelectableRow, { isCurrent, children: /* @__PURE__ */ jsx22(Text22, { bold: isCurrent, inverse: isCurrent, children: name }) }, name);
       }),
-      /* @__PURE__ */ jsx22(Box20, { marginTop: 1, children: /* @__PURE__ */ jsxs21(Text22, { color: COLORS.text, bold: true, children: [
+      /* @__PURE__ */ jsx22(Box20, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs21(Text22, { color: COLORS.text, bold: true, children: [
         cursor + 1,
         "/",
         profileNames.length
@@ -3601,16 +3309,16 @@ function ProfileDetailMode({ profile }) {
     /* @__PURE__ */ jsx23(Text23, { bold: true, color: COLORS.gold, children: profile.name }),
     /* @__PURE__ */ jsx23(Text23, { color: COLORS.muted, children: profile.description }),
     /* @__PURE__ */ jsx23(Text23, { color: COLORS.muted, children: t("profiles_created", { date: formatDate(profile.createdAt) }) }),
-    /* @__PURE__ */ jsxs22(Box21, { marginTop: 1, flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs22(Box21, { marginTop: SPACING.xs, flexDirection: "column", children: [
       /* @__PURE__ */ jsx23(Text23, { bold: true, children: t("profiles_formulaeCount", { count: profile.formulae.length }) }),
-      /* @__PURE__ */ jsxs22(Box21, { paddingLeft: 2, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs22(Box21, { paddingLeft: SPACING.sm, flexDirection: "column", children: [
         profile.formulae.slice(0, 30).map((f) => /* @__PURE__ */ jsx23(Text23, { color: COLORS.muted, children: f }, f)),
         profile.formulae.length > 30 && /* @__PURE__ */ jsx23(Text23, { color: COLORS.textSecondary, italic: true, children: t("common_andMore", { count: profile.formulae.length - 30 }) })
       ] }),
       /* @__PURE__ */ jsx23(Text23, { bold: true, children: t("profiles_casksCount", { count: profile.casks.length }) }),
-      /* @__PURE__ */ jsx23(Box21, { paddingLeft: 2, flexDirection: "column", children: profile.casks.map((c) => /* @__PURE__ */ jsx23(Text23, { color: COLORS.muted, children: c }, c)) })
+      /* @__PURE__ */ jsx23(Box21, { paddingLeft: SPACING.sm, flexDirection: "column", children: profile.casks.map((c) => /* @__PURE__ */ jsx23(Text23, { color: COLORS.muted, children: c }, c)) })
     ] }),
-    /* @__PURE__ */ jsx23(Box21, { marginTop: 1, children: /* @__PURE__ */ jsxs22(Text23, { color: COLORS.textSecondary, children: [
+    /* @__PURE__ */ jsx23(Box21, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs22(Text23, { color: COLORS.textSecondary, children: [
       "esc:",
       t("hint_back"),
       " e:",
@@ -3724,7 +3432,7 @@ function ProfilesView() {
     }
     return void 0;
   }, [mode]);
-  useInput9((input, key) => {
+  useInput10((input, key) => {
     if (mode !== "list" || confirmDelete) return;
     if (input === "n") {
       setMode("create-name");
@@ -3746,7 +3454,7 @@ function ProfilesView() {
     if (input === "j" || key.downArrow) setCursor((c) => Math.min(c + 1, Math.max(0, profileNames.length - 1)));
     else if (input === "k" || key.upArrow) setCursor((c) => Math.max(c - 1, 0));
   });
-  useInput9((input, key) => {
+  useInput10((input, key) => {
     if (key.escape || input === "q") {
       setMode("list");
       return;
@@ -3757,7 +3465,7 @@ function ProfilesView() {
       setMode("edit-name");
     }
   }, { isActive: mode === "detail" });
-  useInput9(() => {
+  useInput10(() => {
     setMode("list");
   }, { isActive: mode === "importing" && !importRunning });
   const prepareImport = async (name) => {
@@ -3821,7 +3529,7 @@ function ProfilesView() {
   if (mode === "importing") {
     return /* @__PURE__ */ jsxs25(Box24, { flexDirection: "column", children: [
       /* @__PURE__ */ jsx26(ProgressLog, { lines: importLines, isRunning: importRunning, title: t("profiles_importTitle") }),
-      !importRunning && /* @__PURE__ */ jsx26(Box24, { marginTop: 1, children: /* @__PURE__ */ jsx26(ResultBanner, { status: importHadError ? "error" : "success", message: importHadError ? t("profiles_importPartial") : `\u2714 ${t("profiles_importComplete")}` }) })
+      !importRunning && /* @__PURE__ */ jsx26(Box24, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx26(ResultBanner, { status: importHadError ? "error" : "success", message: importHadError ? t("profiles_importPartial") : `\u2714 ${t("profiles_importComplete")}` }) })
     ] });
   }
   if (mode === "create-name") {
@@ -3892,7 +3600,7 @@ function ProfilesView() {
 
 // src/views/smart-cleanup.tsx
 import { useEffect as useEffect12, useRef as useRef7, useState as useState9 } from "react";
-import { Box as Box25, Text as Text26, useInput as useInput10 } from "ink";
+import { Box as Box25, Text as Text26, useInput as useInput11 } from "ink";
 
 // src/stores/cleanup-store.ts
 import { create as create10 } from "zustand";
@@ -4032,7 +3740,7 @@ function SmartCleanupView() {
   }, [stream.isRunning, stream.error]);
   const candidates = summary?.candidates ?? [];
   const isDependencyError = stream.error != null && stream.lines.some((l) => l.includes("Refusing to uninstall") || l.includes("required by"));
-  useInput10((input, key) => {
+  useInput11((input, key) => {
     if (stream.isRunning) {
       if (key.escape) stream.cancel();
       return;
@@ -4073,7 +3781,7 @@ function SmartCleanupView() {
         t("hint_cancel")
       ] }),
       !stream.isRunning && !stream.error && /* @__PURE__ */ jsx27(ResultBanner, { status: "success", message: `\u2714 ${t("cleanup_complete")}` }),
-      !stream.isRunning && stream.error && /* @__PURE__ */ jsxs26(Box25, { flexDirection: "column", gap: 1, children: [
+      !stream.isRunning && stream.error && /* @__PURE__ */ jsxs26(Box25, { flexDirection: "column", gap: SPACING.xs, children: [
         /* @__PURE__ */ jsx27(ResultBanner, { status: "error", message: `\u2718 ${t("cleanup_depError")}` }),
         isDependencyError && failedNames.length > 0 && /* @__PURE__ */ jsxs26(Text26, { color: COLORS.warning, children: [
           "F:",
@@ -4082,7 +3790,7 @@ function SmartCleanupView() {
           t("hint_refresh")
         ] })
       ] }),
-      confirmForce && /* @__PURE__ */ jsx27(Box25, { marginY: 1, children: /* @__PURE__ */ jsx27(
+      confirmForce && /* @__PURE__ */ jsx27(Box25, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx27(
         ConfirmDialog,
         {
           message: t("cleanup_confirmForce", { count: failedNames.length }),
@@ -4099,13 +3807,13 @@ function SmartCleanupView() {
   }
   return /* @__PURE__ */ jsxs26(Box25, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx27(SectionHeader, { emoji: "\u{1F9F9}", title: t("cleanup_title"), gradient: GRADIENTS.emerald }),
-    summary && /* @__PURE__ */ jsxs26(Box25, { gap: 1, marginY: 1, children: [
+    summary && /* @__PURE__ */ jsxs26(Box25, { gap: SPACING.xs, marginY: SPACING.xs, children: [
       /* @__PURE__ */ jsx27(StatCard, { label: t("cleanup_orphans"), value: candidates.length, color: candidates.length > 0 ? COLORS.warning : COLORS.success }),
       /* @__PURE__ */ jsx27(StatCard, { label: t("cleanup_reclaimable"), value: summary.totalReclaimableFormatted, color: COLORS.sky }),
       /* @__PURE__ */ jsx27(StatCard, { label: t("cleanup_selected"), value: selected.size, color: selected.size > 0 ? COLORS.success : COLORS.muted })
     ] }),
-    confirmClean && /* @__PURE__ */ jsxs26(Box25, { flexDirection: "column", marginY: 1, gap: 1, children: [
-      /* @__PURE__ */ jsx27(Box25, { borderStyle: "round", borderColor: COLORS.warning, paddingX: 2, paddingY: 0, children: /* @__PURE__ */ jsx27(Text26, { color: COLORS.warning, children: t("cleanup_warning_system_tools") }) }),
+    confirmClean && /* @__PURE__ */ jsxs26(Box25, { flexDirection: "column", marginY: SPACING.xs, gap: SPACING.xs, children: [
+      /* @__PURE__ */ jsx27(Box25, { borderStyle: "round", borderColor: COLORS.warning, paddingX: SPACING.sm, paddingY: SPACING.none, children: /* @__PURE__ */ jsx27(Text26, { color: COLORS.warning, children: t("cleanup_warning_system_tools") }) }),
       /* @__PURE__ */ jsx27(
         ConfirmDialog,
         {
@@ -4137,7 +3845,7 @@ function SmartCleanupView() {
           ] })
         ] }, c.name);
       }),
-      /* @__PURE__ */ jsx27(Box25, { marginTop: 1, children: /* @__PURE__ */ jsxs26(Text26, { color: COLORS.text, bold: true, children: [
+      /* @__PURE__ */ jsx27(Box25, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs26(Text26, { color: COLORS.text, bold: true, children: [
         cursor + 1,
         "/",
         candidates.length
@@ -4147,8 +3855,8 @@ function SmartCleanupView() {
 }
 
 // src/views/history.tsx
-import { useEffect as useEffect13, useState as useState10, useMemo as useMemo4 } from "react";
-import { Box as Box26, Text as Text27, useInput as useInput11, useStdout as useStdout7 } from "ink";
+import { useEffect as useEffect13, useState as useState10, useMemo as useMemo5 } from "react";
+import { Box as Box26, Text as Text27, useInput as useInput12, useStdout as useStdout7 } from "ink";
 
 // src/stores/history-store.ts
 import { create as create11 } from "zustand";
@@ -4221,7 +3929,7 @@ function HistoryView() {
     }
     return void 0;
   }, [isSearching]);
-  const filtered = useMemo4(() => {
+  const filtered = useMemo5(() => {
     let result = entries;
     if (filter !== "all") {
       result = result.filter((e) => e.action === filter);
@@ -4232,7 +3940,7 @@ function HistoryView() {
     }
     return result;
   }, [entries, filter, debouncedQuery]);
-  useInput11((input, key) => {
+  useInput12((input, key) => {
     if (confirmClear || confirmReplay || stream.isRunning) return;
     if (isSearching) {
       if (key.escape) {
@@ -4269,11 +3977,11 @@ function HistoryView() {
   const start = Math.max(0, cursor - Math.floor(MAX_VISIBLE_ROWS / 2));
   const visible = filtered.slice(start, start + MAX_VISIBLE_ROWS);
   return /* @__PURE__ */ jsxs27(Box26, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs27(Box26, { gap: 2, marginBottom: 1, children: [
+    /* @__PURE__ */ jsxs27(Box26, { gap: SPACING.sm, marginBottom: SPACING.xs, children: [
       /* @__PURE__ */ jsx28(SectionHeader, { emoji: "\u{1F4DC}", title: t("history_title", { count: filtered.length }), gradient: GRADIENTS.gold }),
       /* @__PURE__ */ jsx28(Text27, { color: filter === "all" ? COLORS.text : COLORS.gold, children: t("history_filterLabel", { filter }) })
     ] }),
-    isSearching && /* @__PURE__ */ jsx28(Box26, { marginBottom: 1, children: /* @__PURE__ */ jsx28(SearchInput, { defaultValue: searchQuery, onChange: setSearchQuery, placeholder: t("history_searchPlaceholder"), isActive: true }) }),
+    isSearching && /* @__PURE__ */ jsx28(Box26, { marginBottom: SPACING.xs, children: /* @__PURE__ */ jsx28(SearchInput, { defaultValue: searchQuery, onChange: setSearchQuery, placeholder: t("history_searchPlaceholder"), isActive: true }) }),
     confirmClear && /* @__PURE__ */ jsx28(
       ConfirmDialog,
       {
@@ -4313,7 +4021,7 @@ function HistoryView() {
         onCancel: () => setConfirmReplay(null)
       }
     ),
-    (stream.isRunning || stream.lines.length > 0) && /* @__PURE__ */ jsx28(Box26, { marginY: 1, children: /* @__PURE__ */ jsx28(ProgressLog, { lines: stream.lines, isRunning: stream.isRunning, title: t("hint_replay") }) }),
+    (stream.isRunning || stream.lines.length > 0) && /* @__PURE__ */ jsx28(Box26, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx28(ProgressLog, { lines: stream.lines, isRunning: stream.isRunning, title: t("hint_replay") }) }),
     filtered.length === 0 && !confirmClear && /* @__PURE__ */ jsx28(Text27, { color: COLORS.textSecondary, italic: true, children: filter !== "all" ? t("history_noEntriesFor", { filter }) : t("history_noEntries") }),
     filtered.length > 0 && !confirmClear && /* @__PURE__ */ jsxs27(Box26, { flexDirection: "column", children: [
       start > 0 && /* @__PURE__ */ jsxs27(Text27, { color: COLORS.textSecondary, dimColor: true, children: [
@@ -4337,7 +4045,7 @@ function HistoryView() {
         "  ",
         t("scroll_moreBelow", { count: filtered.length - start - MAX_VISIBLE_ROWS })
       ] }),
-      /* @__PURE__ */ jsx28(Box26, { marginTop: 1, children: /* @__PURE__ */ jsxs27(Text27, { color: COLORS.text, bold: true, children: [
+      /* @__PURE__ */ jsx28(Box26, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs27(Text27, { color: COLORS.text, bold: true, children: [
         cursor + 1,
         "/",
         filtered.length
@@ -4348,7 +4056,7 @@ function HistoryView() {
 
 // src/views/security-audit.tsx
 import { useEffect as useEffect14, useState as useState11 } from "react";
-import { Box as Box27, Text as Text28, useInput as useInput12 } from "ink";
+import { Box as Box27, Text as Text28, useInput as useInput13 } from "ink";
 import { jsx as jsx29, jsxs as jsxs28 } from "react/jsx-runtime";
 var SEVERITY_COLORS = {
   CRITICAL: COLORS.error,
@@ -4364,7 +4072,7 @@ var SEVERITY_BADGE = {
   LOW: "muted",
   UNKNOWN: "muted"
 };
-function isNetworkError2(msg) {
+function isNetworkError(msg) {
   return /fetch failed|ECONNREFUSED|ENOTFOUND|ETIMEDOUT|network|abort/i.test(msg);
 }
 function SecurityAuditView() {
@@ -4378,7 +4086,7 @@ function SecurityAuditView() {
     scan();
   }, []);
   const results = summary?.results ?? [];
-  useInput12((input, key) => {
+  useInput13((input, key) => {
     if (confirmUpgrade || stream.isRunning) return;
     if (input === "r") {
       void scan(true);
@@ -4400,13 +4108,13 @@ function SecurityAuditView() {
   });
   if (loading) return /* @__PURE__ */ jsx29(Loading, { message: t("loading_security") });
   if (error) {
-    const displayError = isNetworkError2(error) ? t("security_networkError") : error;
+    const displayError = isNetworkError(error) ? t("security_networkError") : error;
     return /* @__PURE__ */ jsx29(ErrorMessage, { message: displayError });
   }
   const cacheAge = cachedAt ? formatRelativeTime(cachedAt / 1e3) : null;
   return /* @__PURE__ */ jsxs28(Box27, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx29(SectionHeader, { emoji: "\u{1F6E1}\uFE0F", title: t("security_title"), gradient: GRADIENTS.ocean }),
-    summary && /* @__PURE__ */ jsxs28(Box27, { gap: 1, marginY: 1, children: [
+    summary && /* @__PURE__ */ jsxs28(Box27, { gap: SPACING.xs, marginY: SPACING.xs, children: [
       /* @__PURE__ */ jsx29(StatCard, { label: t("security_scanned"), value: summary.totalPackages, color: COLORS.info }),
       /* @__PURE__ */ jsx29(
         StatCard,
@@ -4421,8 +4129,8 @@ function SecurityAuditView() {
       summary.mediumCount > 0 && /* @__PURE__ */ jsx29(StatCard, { label: t("security_medium"), value: summary.mediumCount, color: COLORS.warning })
     ] }),
     cacheAge && /* @__PURE__ */ jsx29(Text28, { color: COLORS.muted, children: t("security_cachedResults", { time: cacheAge }) }),
-    results.length === 0 && summary && /* @__PURE__ */ jsx29(Box27, { marginTop: 1, children: /* @__PURE__ */ jsx29(ResultBanner, { status: "success", message: `\u2714 ${t("security_noVulns")}` }) }),
-    confirmUpgrade && /* @__PURE__ */ jsx29(Box27, { marginY: 1, children: /* @__PURE__ */ jsx29(
+    results.length === 0 && summary && /* @__PURE__ */ jsx29(Box27, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx29(ResultBanner, { status: "success", message: `\u2714 ${t("security_noVulns")}` }) }),
+    confirmUpgrade && /* @__PURE__ */ jsx29(Box27, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx29(
       ConfirmDialog,
       {
         message: t("security_confirmUpgrade", { name: confirmUpgrade }),
@@ -4435,8 +4143,8 @@ function SecurityAuditView() {
         onCancel: () => setConfirmUpgrade(null)
       }
     ) }),
-    (stream.isRunning || stream.lines.length > 0) && /* @__PURE__ */ jsx29(Box27, { marginY: 1, children: /* @__PURE__ */ jsx29(ProgressLog, { lines: stream.lines, isRunning: stream.isRunning, title: t("hint_upgrade") }) }),
-    results.length > 0 && /* @__PURE__ */ jsxs28(Box27, { flexDirection: "column", marginTop: 1, children: [
+    (stream.isRunning || stream.lines.length > 0) && /* @__PURE__ */ jsx29(Box27, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx29(ProgressLog, { lines: stream.lines, isRunning: stream.isRunning, title: t("hint_upgrade") }) }),
+    results.length > 0 && /* @__PURE__ */ jsxs28(Box27, { flexDirection: "column", marginTop: SPACING.xs, children: [
       results.map((pkg, i) => {
         const isCurrent = i === cursor;
         const isExpanded = expandedPkg === pkg.packageName;
@@ -4453,8 +4161,8 @@ function SecurityAuditView() {
             ] }),
             /* @__PURE__ */ jsx29(Text28, { color: COLORS.muted, children: isExpanded ? "\u25BC" : "\u25B6" })
           ] }),
-          isExpanded && /* @__PURE__ */ jsx29(Box27, { flexDirection: "column", paddingLeft: 4, marginBottom: 1, children: pkg.vulnerabilities.map((vuln) => /* @__PURE__ */ jsxs28(Box27, { flexDirection: "column", marginBottom: 1, children: [
-            /* @__PURE__ */ jsxs28(Box27, { gap: 1, children: [
+          isExpanded && /* @__PURE__ */ jsx29(Box27, { flexDirection: "column", paddingLeft: SPACING.lg, marginBottom: SPACING.xs, children: pkg.vulnerabilities.map((vuln) => /* @__PURE__ */ jsxs28(Box27, { flexDirection: "column", marginBottom: SPACING.xs, children: [
+            /* @__PURE__ */ jsxs28(Box27, { gap: SPACING.xs, children: [
               /* @__PURE__ */ jsx29(Text28, { color: SEVERITY_COLORS[vuln.severity], bold: true, children: vuln.id }),
               /* @__PURE__ */ jsxs28(Text28, { color: COLORS.muted, children: [
                 "[",
@@ -4467,50 +4175,51 @@ function SecurityAuditView() {
           ] }, vuln.id)) })
         ] }, pkg.packageName);
       }),
-      /* @__PURE__ */ jsx29(Box27, { marginTop: 1, children: /* @__PURE__ */ jsxs28(Text28, { color: COLORS.text, bold: true, children: [
+      /* @__PURE__ */ jsx29(Box27, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs28(Text28, { color: COLORS.text, bold: true, children: [
         cursor + 1,
         "/",
         results.length
       ] }) }),
-      /* @__PURE__ */ jsx29(Box27, { marginTop: 1, children: /* @__PURE__ */ jsx29(Text28, { color: COLORS.textSecondary, children: t("security_rollback_hint") }) })
+      /* @__PURE__ */ jsx29(Box27, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx29(Text28, { color: COLORS.textSecondary, children: t("security_rollback_hint") }) })
     ] })
   ] });
 }
 
 // src/views/account.tsx
 import { useState as useState12 } from "react";
-import { Box as Box28, Text as Text29, useInput as useInput13 } from "ink";
+import { Box as Box28, Text as Text29, useInput as useInput14 } from "ink";
 import { TextInput as TextInput5 } from "@inkjs/ui";
 
 // src/lib/license/promo.ts
-import { readFile as readFile4, writeFile as writeFile4, rename as rename3, mkdir as mkdir2 } from "fs/promises";
-import { randomBytes as randomBytes2, randomUUID as randomUUID2 } from "crypto";
-import { join as join3 } from "path";
-import { homedir as homedir2 } from "os";
-var MACHINE_ID_PATH2 = join3(homedir2(), ".brew-tui", "machine-id");
-async function getMachineId3() {
-  try {
-    const id2 = (await readFile4(MACHINE_ID_PATH2, "utf-8")).trim();
-    if (id2) return id2;
-  } catch {
+import { readFile as readFile2, writeFile as writeFile2, rename as rename2 } from "fs/promises";
+import { randomBytes, randomUUID } from "crypto";
+import { join as join2 } from "path";
+var PROMO_PATH = join2(DATA_DIR, "promo.json");
+var PROMO_API_URL = "https://api.molinesdesigns.com/api/promo";
+function validatePromoApiUrl(url) {
+  const parsed = new URL(url);
+  if (parsed.protocol !== "https:") {
+    throw new Error("HTTPS required for promo API");
+  }
+  if (!parsed.hostname.endsWith("molinesdesigns.com")) {
+    throw new Error("Invalid promo API host");
   }
-  const id = randomUUID2();
-  await mkdir2(join3(homedir2(), ".brew-tui"), { recursive: true, mode: 448 });
-  await writeFile4(MACHINE_ID_PATH2, id, { encoding: "utf-8", mode: 384 });
-  return id;
 }
-var PROMO_PATH = join3(DATA_DIR, "promo.json");
-var PROMO_API_URL = "https://api.molinesdesigns.com/api/promo";
 async function redeemPromoCode(code) {
   const normalized = code.trim().toUpperCase();
-  const machineId = await getMachineId3();
+  const machineId = await getMachineId();
+  validatePromoApiUrl(`${PROMO_API_URL}/redeem`);
   let serverExpiresAt;
   let serverType;
+  const idempotencyKey = randomUUID();
   try {
     const res = await fetchWithTimeout(`${PROMO_API_URL}/redeem`, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ code: normalized, machineId })
+      headers: {
+        "Content-Type": "application/json",
+        "Idempotency-Key": idempotencyKey
+      },
+      body: JSON.stringify({ code: normalized, machineId, idempotencyKey })
     }, 1e4);
     if (!res.ok) {
       const body = await res.json().catch(() => ({}));
@@ -4541,7 +4250,7 @@ async function redeemPromoCode(code) {
   };
   let file = { version: 1, redemptions: [] };
   try {
-    const raw = await readFile4(PROMO_PATH, "utf-8");
+    const raw = await readFile2(PROMO_PATH, "utf-8");
     file = JSON.parse(raw);
   } catch {
   }
@@ -4550,23 +4259,24 @@ async function redeemPromoCode(code) {
   }
   file.redemptions.push(redemption);
   const tmpPath = PROMO_PATH + ".tmp";
-  await writeFile4(tmpPath, JSON.stringify(file, null, 2), { encoding: "utf-8", mode: 384 });
-  await rename3(tmpPath, PROMO_PATH);
+  await writeFile2(tmpPath, JSON.stringify(file, null, 2), { encoding: "utf-8", mode: 384 });
+  await rename2(tmpPath, PROMO_PATH);
   return { success: true, expiresAt: redemption.expiresAt };
 }
 
 // src/views/account.tsx
 import { Fragment as Fragment5, jsx as jsx30, jsxs as jsxs29 } from "react/jsx-runtime";
 function AccountView() {
-  const { status, license, deactivate: deactivate2, degradation } = useLicenseStore();
+  const { status, license, deactivate: deactivate2, revalidate: revalidate2, degradation } = useLicenseStore();
   const [confirmDeactivate, setConfirmDeactivate] = useState12(false);
   const [deactivating, setDeactivating] = useState12(false);
   const [deactivateError, setDeactivateError] = useState12(null);
   const [promoMode, setPromoMode] = useState12(false);
   const [promoLoading, setPromoLoading] = useState12(false);
   const [promoResult, setPromoResult] = useState12(null);
-  useInput13((input, key) => {
-    if (confirmDeactivate || deactivating || promoMode) {
+  const [revalidating, setRevalidating] = useState12(false);
+  useInput14((input, key) => {
+    if (confirmDeactivate || deactivating || promoMode || revalidating) {
       if (key.escape && promoMode) {
         setPromoMode(false);
         setPromoResult(null);
@@ -4580,6 +4290,10 @@ function AccountView() {
       setPromoMode(true);
       setPromoResult(null);
     }
+    if ((input === "v" || input === "V") && (status === "pro" || status === "team" || status === "expired")) {
+      setRevalidating(true);
+      void revalidate2().finally(() => setRevalidating(false));
+    }
   });
   const maskKey = (key) => {
     if (key.length <= 8) return key;
@@ -4590,7 +4304,7 @@ function AccountView() {
   }
   return /* @__PURE__ */ jsxs29(Box28, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx30(SectionHeader, { emoji: "\u{1F464}", title: t("account_title"), gradient: GRADIENTS.gold }),
-    confirmDeactivate && /* @__PURE__ */ jsx30(Box28, { marginY: 1, children: /* @__PURE__ */ jsx30(
+    confirmDeactivate && /* @__PURE__ */ jsx30(Box28, { marginY: SPACING.xs, children: /* @__PURE__ */ jsx30(
       ConfirmDialog,
       {
         message: t("account_confirmDeactivate"),
@@ -4609,43 +4323,43 @@ function AccountView() {
         onCancel: () => setConfirmDeactivate(false)
       }
     ) }),
-    /* @__PURE__ */ jsxs29(Box28, { flexDirection: "column", marginTop: 1, paddingLeft: 2, children: [
-      /* @__PURE__ */ jsxs29(Box28, { gap: 1, children: [
+    /* @__PURE__ */ jsxs29(Box28, { flexDirection: "column", marginTop: SPACING.xs, paddingLeft: SPACING.sm, children: [
+      /* @__PURE__ */ jsxs29(Box28, { gap: SPACING.xs, children: [
         /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_statusLabel") }),
         status === "pro" && /* @__PURE__ */ jsx30(Text29, { color: COLORS.success, bold: true, children: t("account_pro") }),
         status === "free" && /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_free") }),
         status === "expired" && /* @__PURE__ */ jsx30(Text29, { color: COLORS.error, children: t("account_expired") })
       ] }),
-      (degradation === "warning" || degradation === "limited") && license && /* @__PURE__ */ jsx30(Box28, { marginTop: 1, borderStyle: "round", borderColor: COLORS.warning, paddingX: 2, paddingY: 0, children: /* @__PURE__ */ jsx30(Text29, { color: COLORS.warning, children: t("license_offlineWarning", {
+      (degradation === "warning" || degradation === "limited") && license && /* @__PURE__ */ jsx30(Box28, { marginTop: SPACING.xs, borderStyle: "round", borderColor: COLORS.warning, paddingX: SPACING.sm, paddingY: SPACING.none, children: /* @__PURE__ */ jsx30(Text29, { color: COLORS.warning, children: t("license_offlineWarning", {
         days: Math.floor((Date.now() - new Date(license.lastValidatedAt).getTime()) / (24 * 60 * 60 * 1e3))
       }) }) }),
       license && /* @__PURE__ */ jsxs29(Fragment5, { children: [
-        /* @__PURE__ */ jsxs29(Box28, { gap: 1, children: [
+        /* @__PURE__ */ jsxs29(Box28, { gap: SPACING.xs, children: [
           /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_emailLabel") }),
           /* @__PURE__ */ jsx30(Text29, { children: license.customerEmail })
         ] }),
-        /* @__PURE__ */ jsxs29(Box28, { gap: 1, children: [
+        /* @__PURE__ */ jsxs29(Box28, { gap: SPACING.xs, children: [
           /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_nameLabel") }),
           /* @__PURE__ */ jsx30(Text29, { children: license.customerName })
         ] }),
-        /* @__PURE__ */ jsxs29(Box28, { gap: 1, children: [
+        /* @__PURE__ */ jsxs29(Box28, { gap: SPACING.xs, children: [
           /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_planLabel") }),
           /* @__PURE__ */ jsx30(Text29, { color: COLORS.success, bold: true, children: "Pro" })
         ] }),
-        /* @__PURE__ */ jsxs29(Box28, { gap: 1, children: [
+        /* @__PURE__ */ jsxs29(Box28, { gap: SPACING.xs, children: [
           /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_keyLabel") }),
           /* @__PURE__ */ jsx30(Text29, { children: maskKey(license.key) })
         ] }),
-        license.expiresAt && /* @__PURE__ */ jsxs29(Box28, { gap: 1, children: [
+        license.expiresAt && /* @__PURE__ */ jsxs29(Box28, { gap: SPACING.xs, children: [
           /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_expiresLabel") }),
           /* @__PURE__ */ jsx30(Text29, { children: formatDate(license.expiresAt) })
         ] }),
-        /* @__PURE__ */ jsxs29(Box28, { gap: 1, children: [
+        /* @__PURE__ */ jsxs29(Box28, { gap: SPACING.xs, children: [
           /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_activatedLabel") }),
           /* @__PURE__ */ jsx30(Text29, { children: formatDate(license.activatedAt) })
         ] })
       ] }),
-      status === "free" && /* @__PURE__ */ jsxs29(Box28, { flexDirection: "column", marginTop: 2, borderStyle: "round", borderColor: COLORS.brand, paddingX: 2, paddingY: 1, children: [
+      status === "free" && /* @__PURE__ */ jsxs29(Box28, { flexDirection: "column", marginTop: SPACING.sm, borderStyle: "round", borderColor: COLORS.brand, paddingX: SPACING.sm, paddingY: SPACING.xs, children: [
         /* @__PURE__ */ jsxs29(Text29, { bold: true, color: COLORS.brand, children: [
           "\u2B50",
           " ",
@@ -4666,13 +4380,13 @@ function AccountView() {
           /* @__PURE__ */ jsx30(Text29, { color: COLORS.success, bold: true, children: t("account_activateCmd") })
         ] })
       ] }),
-      status === "expired" && /* @__PURE__ */ jsx30(Box28, { marginTop: 1, children: /* @__PURE__ */ jsx30(Box28, { borderStyle: "round", borderColor: COLORS.error, paddingX: 2, paddingY: 0, children: /* @__PURE__ */ jsx30(Text29, { color: COLORS.error, children: t("account_licenseExpired") }) }) }),
+      status === "expired" && /* @__PURE__ */ jsx30(Box28, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx30(Box28, { borderStyle: "round", borderColor: COLORS.error, paddingX: SPACING.sm, paddingY: SPACING.none, children: /* @__PURE__ */ jsx30(Text29, { color: COLORS.error, children: t("account_licenseExpired") }) }) }),
       deactivating && /* @__PURE__ */ jsx30(Text29, { color: COLORS.sky, children: t("account_deactivating") }),
       deactivateError && /* @__PURE__ */ jsx30(Text29, { color: COLORS.error, children: deactivateError })
     ] }),
-    /* @__PURE__ */ jsx30(Box28, { flexDirection: "column", marginTop: 1, paddingLeft: 2, children: promoMode ? /* @__PURE__ */ jsxs29(Box28, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsx30(Box28, { flexDirection: "column", marginTop: SPACING.xs, paddingLeft: SPACING.sm, children: promoMode ? /* @__PURE__ */ jsxs29(Box28, { flexDirection: "column", gap: SPACING.xs, children: [
       /* @__PURE__ */ jsx30(Text29, { bold: true, color: COLORS.gold, children: t("account_promoTitle") }),
-      promoLoading ? /* @__PURE__ */ jsx30(Text29, { color: COLORS.sky, children: t("account_promoValidating") }) : /* @__PURE__ */ jsxs29(Box28, { gap: 1, children: [
+      promoLoading ? /* @__PURE__ */ jsx30(Text29, { color: COLORS.sky, children: t("account_promoValidating") }) : /* @__PURE__ */ jsxs29(Box28, { gap: SPACING.xs, children: [
         /* @__PURE__ */ jsx30(Text29, { color: COLORS.muted, children: t("account_promoLabel") }),
         /* @__PURE__ */ jsx30(
           TextInput5,
@@ -4701,24 +4415,26 @@ function AccountView() {
       promoResult && /* @__PURE__ */ jsx30(ResultBanner, { status: promoResult.success ? "success" : "error", message: promoResult.message }),
       /* @__PURE__ */ jsx30(Text29, { color: COLORS.textSecondary, dimColor: true, children: t("account_promoEsc") })
     ] }) : /* @__PURE__ */ jsx30(Text29, { color: COLORS.textSecondary, children: t("account_promoHint") }) }),
-    /* @__PURE__ */ jsx30(Box28, { marginTop: 1, children: /* @__PURE__ */ jsxs29(Text29, { color: COLORS.textSecondary, children: [
-      status === "pro" ? `d ${t("hint_deactivate")}` : "",
+    /* @__PURE__ */ jsx30(Box28, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs29(Text29, { color: COLORS.textSecondary, children: [
+      status === "pro" || status === "team" ? `d ${t("hint_deactivate")}  ` : "",
+      status === "pro" || status === "team" || status === "expired" ? `v ${t("hint_revalidate")}  ` : "",
+      revalidating ? t("account_revalidating") : "",
       " ",
-      t("app_version", { version: "0.6.0" })
+      t("app_version", { version: "0.6.2" })
     ] }) })
   ] });
 }
 
 // src/views/rollback.tsx
 import { useCallback as useCallback3, useEffect as useEffect15, useRef as useRef8, useState as useState13 } from "react";
-import { Box as Box29, Text as Text30, useInput as useInput14 } from "ink";
+import { Box as Box29, Text as Text30, useInput as useInput15 } from "ink";
 
 // src/stores/rollback-store.ts
 import { create as create12 } from "zustand";
 
 // src/lib/rollback/rollback-engine.ts
 import { readdir as readdir2 } from "fs/promises";
-import { join as join4 } from "path";
+import { join as join3 } from "path";
 async function detectStrategy(name, targetVersion, packageType) {
   if (packageType === "cask") {
     return { strategy: "pin-only" };
@@ -4734,7 +4450,7 @@ async function detectStrategy(name, targetVersion, packageType) {
   }
   try {
     const brewCache = (await execBrew(["--cache"])).trim();
-    const downloadsDir = join4(brewCache, "downloads");
+    const downloadsDir = join3(brewCache, "downloads");
     const entries = await readdir2(downloadsDir);
     const found = entries.some(
       (entry) => entry.includes(name) && entry.includes(targetVersion)
@@ -4949,8 +4665,8 @@ function actionPrefix(action) {
 }
 function PlanView({ plan }) {
   const executableCount = plan.actions.filter((a) => a.strategy !== "unavailable" && a.action !== "remove").length;
-  return /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: 1, children: [
-    /* @__PURE__ */ jsxs30(Box29, { marginBottom: 1, children: [
+  return /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: SPACING.xs, children: [
+    /* @__PURE__ */ jsxs30(Box29, { marginBottom: SPACING.xs, children: [
       /* @__PURE__ */ jsxs30(Text30, { color: COLORS.text, bold: true, children: [
         plan.snapshotLabel,
         " "
@@ -4981,11 +4697,11 @@ function PlanView({ plan }) {
         "]"
       ] })
     ] }, a.packageName + a.action)),
-    plan.warnings.map((w) => /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsxs30(Text30, { color: COLORS.warning, children: [
+    plan.warnings.map((w) => /* @__PURE__ */ jsx31(Box29, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs30(Text30, { color: COLORS.warning, children: [
       "\u26A0 ",
       w
     ] }) }, w)),
-    /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: plan.canExecute ? /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
+    /* @__PURE__ */ jsx31(Box29, { marginTop: SPACING.xs, children: plan.canExecute ? /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
       "enter:",
       t("rollback_confirm", { count: String(executableCount) }),
       "  esc:",
@@ -5041,7 +4757,7 @@ function RollbackView() {
       }
     }
   }, [isPro]);
-  useInput14((input, key) => {
+  useInput15((input, key) => {
     if (phase === "executing") return;
     if (phase === "result") {
       if (key.escape || input === "r") {
@@ -5080,7 +4796,7 @@ function RollbackView() {
     return /* @__PURE__ */ jsx31(Box29, { flexDirection: "column", children: /* @__PURE__ */ jsx31(ProgressLog, { lines: streamLines, isRunning: streamRunning, title: t("rollback_executing") }) });
   }
   if (phase === "result") {
-    return /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: 1, children: [
+    return /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx31(
         ResultBanner,
         {
@@ -5088,7 +4804,7 @@ function RollbackView() {
           message: streamError ? t("rollback_error", { error: streamError }) : t("rollback_success")
         }
       ),
-      /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
+      /* @__PURE__ */ jsx31(Box29, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
         "r:",
         t("hint_refresh"),
         "  esc:",
@@ -5098,10 +4814,10 @@ function RollbackView() {
   }
   return /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx31(SectionHeader, { emoji: "\u23EA", title: t("rollback_title"), gradient: GRADIENTS.gold }),
-    snapshots.length === 0 && /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(ResultBanner, { status: "info", message: t("rollback_no_snapshots") }) }),
-    phase === "list" && snapshots.length > 0 && /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: 1, children: [
+    snapshots.length === 0 && /* @__PURE__ */ jsx31(Box29, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx31(ResultBanner, { status: "info", message: t("rollback_no_snapshots") }) }),
+    phase === "list" && snapshots.length > 0 && /* @__PURE__ */ jsxs30(Box29, { flexDirection: "column", marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx31(Text30, { color: COLORS.textSecondary, dimColor: true, children: t("rollback_select_snapshot") }),
-      /* @__PURE__ */ jsx31(Box29, { flexDirection: "column", marginTop: 1, children: snapshots.map((s, i) => /* @__PURE__ */ jsxs30(SelectableRow, { isCurrent: i === cursor, children: [
+      /* @__PURE__ */ jsx31(Box29, { flexDirection: "column", marginTop: SPACING.xs, children: snapshots.map((s, i) => /* @__PURE__ */ jsxs30(SelectableRow, { isCurrent: i === cursor, children: [
         /* @__PURE__ */ jsx31(Text30, { bold: i === cursor, color: i === cursor ? COLORS.text : COLORS.muted, children: s.label ?? t("rollback_snapshot_auto") }),
         /* @__PURE__ */ jsxs30(Text30, { color: COLORS.textSecondary, children: [
           " \u2014 ",
@@ -5120,7 +4836,7 @@ function RollbackView() {
       planError && /* @__PURE__ */ jsx31(ErrorMessage, { message: planError }),
       plan && !planLoading && /* @__PURE__ */ jsx31(PlanView, { plan })
     ] }),
-    phase === "confirm" && plan && /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(
+    phase === "confirm" && plan && /* @__PURE__ */ jsx31(Box29, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx31(
       ConfirmDialog,
       {
         message: t("rollback_confirm", {
@@ -5135,7 +4851,7 @@ function RollbackView() {
 
 // src/views/brewfile.tsx
 import { useCallback as useCallback4, useEffect as useEffect16, useRef as useRef9, useState as useState14 } from "react";
-import { Box as Box30, Text as Text31, useInput as useInput15 } from "ink";
+import { Box as Box30, Text as Text31, useInput as useInput16 } from "ink";
 import { TextInput as TextInput6 } from "@inkjs/ui";
 import { jsx as jsx32, jsxs as jsxs31 } from "react/jsx-runtime";
 function DriftScore({ score }) {
@@ -5157,7 +4873,7 @@ function DriftScore({ score }) {
   ] });
 }
 function DriftSummary({ drift }) {
-  return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+  return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: SPACING.xs, children: [
     drift.missingPackages.length > 0 && /* @__PURE__ */ jsxs31(Box30, { children: [
       /* @__PURE__ */ jsx32(Text31, { color: COLORS.error, children: "\u25CF " }),
       /* @__PURE__ */ jsx32(Text31, { color: COLORS.error, children: t("brewfile_drift_missing", { count: drift.missingPackages.length }) }),
@@ -5174,7 +4890,7 @@ function DriftSummary({ drift }) {
       /* @__PURE__ */ jsx32(Text31, { color: COLORS.info, children: "\u25CF " }),
       /* @__PURE__ */ jsx32(Text31, { color: COLORS.info, children: t("brewfile_drift_wrong", { count: drift.wrongVersions.length }) })
     ] }),
-    drift.missingPackages.length === 0 && drift.extraPackages.length === 0 && drift.wrongVersions.length === 0 && /* @__PURE__ */ jsx32(ResultBanner, { status: "success", message: "\u2713 System is in sync with Brewfile" })
+    drift.missingPackages.length === 0 && drift.extraPackages.length === 0 && drift.wrongVersions.length === 0 && /* @__PURE__ */ jsx32(ResultBanner, { status: "success", message: t("brewfile_in_sync") })
   ] });
 }
 function BrewfileView() {
@@ -5225,8 +4941,9 @@ function BrewfileView() {
       }
     }
   }, [schema, isPro]);
-  useInput15((input, key) => {
+  useInput16((input, key) => {
     if (phase === "reconciling") return;
+    if (phase === "confirming-reconcile") return;
     if (phase === "result") {
       if (key.escape || input === "r") {
         setPhase("overview");
@@ -5246,7 +4963,7 @@ function BrewfileView() {
     if (input === "c") {
       const needsReconcile = drift && (drift.missingPackages.length > 0 || drift.wrongVersions.length > 0);
       if (needsReconcile) {
-        void startReconcile();
+        setPhase("confirming-reconcile");
       }
       return;
     }
@@ -5255,10 +4972,27 @@ function BrewfileView() {
   });
   if (loading) return /* @__PURE__ */ jsx32(Loading, { message: t("loading_default") });
   if (error) return /* @__PURE__ */ jsx32(ErrorMessage, { message: error });
+  if (phase === "confirming-reconcile" && drift) {
+    return /* @__PURE__ */ jsx32(
+      ConfirmDialog,
+      {
+        message: t("confirm_brewfile_reconcile", {
+          missing: String(drift.missingPackages.length),
+          wrongVer: String(drift.wrongVersions.length)
+        }),
+        onConfirm: () => {
+          void startReconcile();
+        },
+        onCancel: () => {
+          setPhase("overview");
+        }
+      }
+    );
+  }
   if (phase === "creating") {
-    return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+    return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx32(SectionHeader, { emoji: "\u{1F4E6}", title: t("brewfile_title"), gradient: GRADIENTS.ocean }),
-      /* @__PURE__ */ jsxs31(Box30, { marginTop: 1, children: [
+      /* @__PURE__ */ jsxs31(Box30, { marginTop: SPACING.xs, children: [
         /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
           t("brewfile_create_name"),
           " "
@@ -5289,7 +5023,7 @@ function BrewfileView() {
     ) });
   }
   if (phase === "result") {
-    return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+    return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx32(
         ResultBanner,
         {
@@ -5297,7 +5031,7 @@ function BrewfileView() {
           message: resultMessage
         }
       ),
-      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
+      /* @__PURE__ */ jsx32(Box30, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
         "r:",
         t("hint_refresh"),
         "  esc:",
@@ -5307,14 +5041,14 @@ function BrewfileView() {
   }
   return /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx32(SectionHeader, { emoji: "\u{1F4E6}", title: t("brewfile_title"), gradient: GRADIENTS.ocean }),
-    schema === null ? /* @__PURE__ */ jsxs31(Box30, { marginTop: 1, flexDirection: "column", children: [
+    schema === null ? /* @__PURE__ */ jsxs31(Box30, { marginTop: SPACING.xs, flexDirection: "column", children: [
       /* @__PURE__ */ jsx32(ResultBanner, { status: "info", message: t("brewfile_no_brewfile") }),
-      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
+      /* @__PURE__ */ jsx32(Box30, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
         "n:",
         t("hint_new")
       ] }) })
-    ] }) : /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
-      /* @__PURE__ */ jsxs31(Box30, { gap: 2, children: [
+    ] }) : /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: SPACING.xs, children: [
+      /* @__PURE__ */ jsxs31(Box30, { gap: SPACING.sm, children: [
         /* @__PURE__ */ jsx32(Text31, { color: COLORS.text, bold: true, children: schema.meta.name }),
         schema.meta.description && /* @__PURE__ */ jsx32(Text31, { color: COLORS.textSecondary, children: schema.meta.description }),
         schema.strictMode && /* @__PURE__ */ jsxs31(Text31, { color: COLORS.warning, children: [
@@ -5323,16 +5057,16 @@ function BrewfileView() {
           "]"
         ] })
       ] }),
-      /* @__PURE__ */ jsxs31(Box30, { gap: 3, marginTop: 1, children: [
+      /* @__PURE__ */ jsxs31(Box30, { gap: SPACING.md, marginTop: SPACING.xs, children: [
         /* @__PURE__ */ jsx32(Text31, { color: COLORS.sky, children: t("brewfile_formulae_count", { count: schema.formulae.length }) }),
         /* @__PURE__ */ jsx32(Text31, { color: COLORS.teal, children: t("brewfile_casks_count", { count: schema.casks.length }) })
       ] }),
-      driftLoading && /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(Text31, { color: COLORS.muted, children: "Computing drift..." }) }),
-      drift && !driftLoading && /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: 1, children: [
+      driftLoading && /* @__PURE__ */ jsx32(Box30, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx32(Text31, { color: COLORS.muted, children: t("brewfile_computing_drift") }) }),
+      drift && !driftLoading && /* @__PURE__ */ jsxs31(Box30, { flexDirection: "column", marginTop: SPACING.xs, children: [
         /* @__PURE__ */ jsx32(DriftScore, { score: drift.score }),
         /* @__PURE__ */ jsx32(DriftSummary, { drift })
       ] }),
-      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
+      /* @__PURE__ */ jsx32(Box30, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs31(Text31, { color: COLORS.textSecondary, children: [
         "r:",
         t("hint_refresh"),
         drift && (drift.missingPackages.length > 0 || drift.wrongVersions.length > 0) ? `  c:${t("hint_reconcile")}` : "",
@@ -5346,7 +5080,7 @@ function BrewfileView() {
 
 // src/views/sync.tsx
 import { useCallback as useCallback5, useEffect as useEffect17, useState as useState15 } from "react";
-import { Box as Box31, Text as Text32, useInput as useInput16 } from "ink";
+import { Box as Box31, Text as Text32, useInput as useInput17 } from "ink";
 import { Fragment as Fragment6, jsx as jsx33, jsxs as jsxs32 } from "react/jsx-runtime";
 function OverviewSection({
   config,
@@ -5357,10 +5091,10 @@ function OverviewSection({
 }) {
   const hasConflicts = conflicts.length > 0;
   const showComplianceHint = !hasConflicts && !!lastResult?.success;
-  return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: 1, children: [
+  return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: SPACING.xs, children: [
     config ? /* @__PURE__ */ jsxs32(Fragment6, { children: [
-      /* @__PURE__ */ jsx33(Box31, { marginBottom: 1, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_machine", { name: config.machineName }) }) }),
-      config.lastSync && /* @__PURE__ */ jsx33(Box31, { marginBottom: 1, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_last_sync", { date: new Date(config.lastSync).toLocaleString() }) }) }),
+      /* @__PURE__ */ jsx33(Box31, { marginBottom: SPACING.xs, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_machine", { name: config.machineName }) }) }),
+      config.lastSync && /* @__PURE__ */ jsx33(Box31, { marginBottom: SPACING.xs, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_last_sync", { date: new Date(config.lastSync).toLocaleString() }) }) }),
       hasConflicts ? /* @__PURE__ */ jsx33(
         ResultBanner,
         {
@@ -5368,8 +5102,8 @@ function OverviewSection({
           message: t("sync_status_conflict", { count: String(conflicts.length) })
         }
       ) : lastResult?.success ? /* @__PURE__ */ jsx33(ResultBanner, { status: "success", message: t("sync_status_ok") }) : null
-    ] }) : /* @__PURE__ */ jsx33(Box31, { marginBottom: 1, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_disabled") }) }),
-    /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
+    ] }) : /* @__PURE__ */ jsx33(Box31, { marginBottom: SPACING.xs, children: /* @__PURE__ */ jsx33(Text32, { color: COLORS.textSecondary, children: t("sync_disabled") }) }),
+    /* @__PURE__ */ jsx33(Box31, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
       "s",
       /* @__PURE__ */ jsxs32(Text32, { color: COLORS.gold, children: [
         ":",
@@ -5396,11 +5130,11 @@ function ConflictsList({
   entries,
   cursor
 }) {
-  return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: 1, children: [
+  return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: SPACING.xs, children: [
     entries.map((entry, i) => {
       const { conflict, resolution } = entry;
       const isActive = i === cursor;
-      return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginBottom: 1, children: [
+      return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginBottom: SPACING.xs, children: [
         /* @__PURE__ */ jsxs32(SelectableRow, { isCurrent: isActive, children: [
           /* @__PURE__ */ jsx33(Text32, { bold: true, color: isActive ? COLORS.text : COLORS.textSecondary, children: t("sync_conflict_title", { package: conflict.packageName }) }),
           /* @__PURE__ */ jsxs32(Text32, { color: COLORS.muted, children: [
@@ -5409,7 +5143,7 @@ function ConflictsList({
             ")"
           ] })
         ] }),
-        /* @__PURE__ */ jsxs32(Box31, { marginLeft: 2, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs32(Box31, { marginLeft: SPACING.sm, flexDirection: "column", children: [
           /* @__PURE__ */ jsxs32(
             Text32,
             {
@@ -5435,12 +5169,17 @@ function ConflictsList({
         ] })
       ] }, `${conflict.packageName}-${conflict.remoteMachine}`);
     }),
-    /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
-      "j/k:navegar  l:",
+    /* @__PURE__ */ jsx33(Box31, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
+      "j/k:",
+      t("hint_navigate"),
+      "  l:",
       t("sync_conflict_use_local"),
       "  r:",
       t("sync_conflict_use_remote"),
-      "  enter:aplicar"
+      "  enter:",
+      t("hint_apply"),
+      "  esc:",
+      t("hint_back")
     ] }) })
   ] });
 }
@@ -5486,8 +5225,9 @@ function SyncView() {
     await resolveConflicts(resolutions);
     setPhase("result");
   }, [conflictEntries, resolveConflicts]);
-  useInput16((input, key) => {
+  useInput17((input, key) => {
     if (phase === "syncing") return;
+    if (phase === "confirming-sync" || phase === "confirming-apply") return;
     if (phase === "result") {
       if (key.escape || input === "r") {
         setPhase("overview");
@@ -5522,12 +5262,13 @@ function SyncView() {
         return;
       }
       if (key.return) {
-        void handleApplyResolutions();
+        const pending = conflictEntries.filter((e) => e.resolution === "pending");
+        if (pending.length === 0) setPhase("confirming-apply");
         return;
       }
     }
     if (input === "s") {
-      void handleSyncNow();
+      setPhase("confirming-sync");
       return;
     }
     if (input === "c" && conflicts.length > 0) {
@@ -5544,21 +5285,49 @@ function SyncView() {
       return;
     }
   });
+  if (phase === "confirming-sync") {
+    return /* @__PURE__ */ jsx33(
+      ConfirmDialog,
+      {
+        message: t("confirm_sync_now"),
+        onConfirm: () => {
+          void handleSyncNow();
+        },
+        onCancel: () => {
+          setPhase("overview");
+        }
+      }
+    );
+  }
+  if (phase === "confirming-apply") {
+    return /* @__PURE__ */ jsx33(
+      ConfirmDialog,
+      {
+        message: t("confirm_sync_apply", { count: String(conflictEntries.length) }),
+        onConfirm: () => {
+          void handleApplyResolutions();
+        },
+        onCancel: () => {
+          setPhase("conflicts");
+        }
+      }
+    );
+  }
   if (phase === "syncing" || loading) {
     return /* @__PURE__ */ jsx33(Loading, { message: t("sync_syncing") });
   }
   if (phase === "result") {
     const isError = !!(syncError ?? error);
-    return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: 1, children: [
+    return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx33(SectionHeader, { emoji: "\u{1F504}", title: t("sync_title"), gradient: GRADIENTS.gold }),
-      /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsx33(
+      /* @__PURE__ */ jsx33(Box31, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx33(
         ResultBanner,
         {
           status: isError ? "error" : "success",
           message: isError ? t("sync_error", { error: syncError ?? error ?? "" }) : t("sync_success")
         }
       ) }),
-      /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
+      /* @__PURE__ */ jsx33(Box31, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs32(Text32, { color: COLORS.textSecondary, children: [
         "r:",
         t("hint_refresh"),
         "  esc:",
@@ -5568,7 +5337,7 @@ function SyncView() {
   }
   return /* @__PURE__ */ jsxs32(Box31, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx33(SectionHeader, { emoji: "\u{1F504}", title: t("sync_title"), gradient: GRADIENTS.gold }),
-    error && phase === "overview" && /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsx33(ResultBanner, { status: "error", message: t("sync_error", { error }) }) }),
+    error && phase === "overview" && /* @__PURE__ */ jsx33(Box31, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx33(ResultBanner, { status: "error", message: t("sync_error", { error }) }) }),
     phase === "overview" && /* @__PURE__ */ jsx33(
       OverviewSection,
       {
@@ -5591,7 +5360,7 @@ function SyncView() {
 
 // src/views/compliance.tsx
 import { useCallback as useCallback6, useEffect as useEffect18, useRef as useRef10, useState as useState16 } from "react";
-import { Box as Box32, Text as Text33, useInput as useInput17 } from "ink";
+import { Box as Box32, Text as Text33, useInput as useInput18 } from "ink";
 import { TextInput as TextInput7 } from "@inkjs/ui";
 
 // src/lib/compliance/compliance-remediator.ts
@@ -5635,12 +5404,12 @@ async function* remediateViolations(violations, isPro) {
 }
 
 // src/views/compliance.tsx
-import { join as join5 } from "path";
+import { join as join4 } from "path";
 import { jsx as jsx34, jsxs as jsxs33 } from "react/jsx-runtime";
 function ComplianceScore({ report }) {
   const color = report.score >= 80 ? COLORS.success : report.score >= 50 ? COLORS.warning : COLORS.error;
   const bars = Math.round(report.score / 10);
-  return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginBottom: 1, children: [
+  return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginBottom: SPACING.xs, children: [
     /* @__PURE__ */ jsxs33(Box32, { children: [
       /* @__PURE__ */ jsxs33(Text33, { color, children: [
         "\u2593".repeat(bars),
@@ -5666,7 +5435,7 @@ function ComplianceScore({ report }) {
 function ViolationItem({ violation }) {
   const color = violation.severity === "error" ? COLORS.error : COLORS.warning;
   const prefix = violation.severity === "error" ? "\u2717" : "\u26A0";
-  return /* @__PURE__ */ jsxs33(Box32, { marginBottom: 0, children: [
+  return /* @__PURE__ */ jsxs33(Box32, { marginBottom: SPACING.none, children: [
     /* @__PURE__ */ jsxs33(Text33, { color, children: [
       prefix,
       " "
@@ -5677,8 +5446,8 @@ function ViolationItem({ violation }) {
 function ViolationList({ violations }) {
   const errors = violations.filter((v) => v.severity === "error");
   const warnings = violations.filter((v) => v.severity === "warning");
-  return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: 1, children: [
-    errors.length > 0 && /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginBottom: 1, children: [
+  return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: SPACING.xs, children: [
+    errors.length > 0 && /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginBottom: SPACING.xs, children: [
       /* @__PURE__ */ jsxs33(Text33, { color: COLORS.error, bold: true, children: [
         t("compliance_violations", { count: String(errors.length) }),
         " (errors)"
@@ -5731,7 +5500,7 @@ function ComplianceView() {
   const handleExport = useCallback6(async () => {
     if (!report) return;
     const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-    const outputPath = join5(DATA_DIR, `compliance-report-${timestamp}.json`);
+    const outputPath = join4(DATA_DIR, `compliance-report-${timestamp}.json`);
     try {
       await exportReport(report, outputPath);
       setResultMessage({ ok: true, text: t("compliance_export_done", { path: outputPath }) });
@@ -5779,8 +5548,9 @@ function ComplianceView() {
       }
     }
   }, [report, isPro, runCheck]);
-  useInput17((input, key) => {
+  useInput18((input, key) => {
     if (phase === "remediating" || phase === "importing") return;
+    if (phase === "confirming-remediate") return;
     if (phase === "result") {
       if (key.escape || input === "r") {
         setPhase("overview");
@@ -5805,31 +5575,48 @@ function ComplianceView() {
         (v) => v.type === "missing" || v.type === "wrong-version"
       );
       if (actionable.length > 0) {
-        void handleRemediate();
+        setPhase("confirming-remediate");
       }
       return;
     }
   });
+  if (phase === "confirming-remediate" && report) {
+    const actionable = report.violations.filter(
+      (v) => v.type === "missing" || v.type === "wrong-version"
+    );
+    return /* @__PURE__ */ jsx34(
+      ConfirmDialog,
+      {
+        message: t("confirm_compliance_remediate", { count: String(actionable.length) }),
+        onConfirm: () => {
+          void handleRemediate();
+        },
+        onCancel: () => {
+          setPhase("overview");
+        }
+      }
+    );
+  }
   if (phase === "remediating" || loading && phase !== "importing") {
     if (phase === "remediating") {
       return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", children: [
         /* @__PURE__ */ jsx34(SectionHeader, { emoji: "\u{1F50D}", title: t("compliance_title"), gradient: GRADIENTS.gold }),
-        /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(ProgressLog, { lines: streamLines, isRunning: streamRunning, title: t("compliance_remediating") }) })
+        /* @__PURE__ */ jsx34(Box32, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx34(ProgressLog, { lines: streamLines, isRunning: streamRunning, title: t("compliance_remediating") }) })
       ] });
     }
     return /* @__PURE__ */ jsx34(Loading, { message: t("compliance_title") });
   }
   if (phase === "result" && resultMessage) {
-    return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: 1, children: [
+    return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: SPACING.xs, children: [
       /* @__PURE__ */ jsx34(SectionHeader, { emoji: "\u{1F50D}", title: t("compliance_title"), gradient: GRADIENTS.gold }),
-      /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(
+      /* @__PURE__ */ jsx34(Box32, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx34(
         ResultBanner,
         {
           status: resultMessage.ok ? "success" : "error",
           message: resultMessage.text
         }
       ) }),
-      /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.textSecondary, children: [
+      /* @__PURE__ */ jsx34(Box32, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.textSecondary, children: [
         "r:",
         t("hint_refresh"),
         "  esc:",
@@ -5839,10 +5626,10 @@ function ComplianceView() {
   }
   return /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", children: [
     /* @__PURE__ */ jsx34(SectionHeader, { emoji: "\u{1F50D}", title: t("compliance_title"), gradient: GRADIENTS.gold }),
-    error && /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(ResultBanner, { status: "error", message: t("compliance_import_error", { error }) }) }),
-    phase === "importing" && /* @__PURE__ */ jsxs33(Box32, { marginTop: 1, flexDirection: "column", children: [
+    error && /* @__PURE__ */ jsx34(Box32, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx34(ResultBanner, { status: "error", message: t("compliance_import_error", { error }) }) }),
+    phase === "importing" && /* @__PURE__ */ jsxs33(Box32, { marginTop: SPACING.xs, flexDirection: "column", children: [
       /* @__PURE__ */ jsx34(Text33, { color: COLORS.textSecondary, children: t("compliance_import_prompt") }),
-      /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(
+      /* @__PURE__ */ jsx34(Box32, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx34(
         TextInput7,
         {
           defaultValue: "",
@@ -5851,20 +5638,20 @@ function ComplianceView() {
           }
         }
       ) }),
-      /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.muted, dimColor: true, children: [
+      /* @__PURE__ */ jsx34(Box32, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.muted, dimColor: true, children: [
         "esc:",
         t("hint_back")
       ] }) })
     ] }),
-    phase === "overview" && /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: 1, children: [
+    phase === "overview" && /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: SPACING.xs, children: [
       !policy ? /* @__PURE__ */ jsx34(Box32, { flexDirection: "column", children: /* @__PURE__ */ jsx34(Text33, { color: COLORS.textSecondary, children: t("compliance_no_policy") }) }) : /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", children: [
         /* @__PURE__ */ jsx34(Text33, { color: COLORS.textSecondary, bold: true, children: t("compliance_policy_by", { maintainer: policy.meta.maintainer }) }),
-        report ? /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: 1, children: [
+        report ? /* @__PURE__ */ jsxs33(Box32, { flexDirection: "column", marginTop: SPACING.xs, children: [
           /* @__PURE__ */ jsx34(ComplianceScore, { report }),
           report.compliant ? /* @__PURE__ */ jsx34(ResultBanner, { status: "success", message: t("compliance_ok") }) : /* @__PURE__ */ jsx34(ViolationList, { violations: report.violations })
-        ] }) : /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(Text33, { color: COLORS.muted, dimColor: true, children: t("compliance_press_r_hint") }) })
+        ] }) : /* @__PURE__ */ jsx34(Box32, { marginTop: SPACING.xs, children: /* @__PURE__ */ jsx34(Text33, { color: COLORS.muted, dimColor: true, children: t("compliance_press_r_hint") }) })
       ] }),
-      /* @__PURE__ */ jsx34(Box32, { marginTop: 2, flexWrap: "wrap", children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.textSecondary, children: [
+      /* @__PURE__ */ jsx34(Box32, { marginTop: SPACING.sm, flexWrap: "wrap", children: /* @__PURE__ */ jsxs33(Text33, { color: COLORS.textSecondary, children: [
         "i:",
         t("hint_import"),
         policy && /* @__PURE__ */ jsxs33(Text33, { children: [
@@ -5950,19 +5737,17 @@ function App() {
 }
 
 // src/lib/crash-reporter.ts
-import { readFile as readFile5, writeFile as writeFile5, mkdir as mkdir3 } from "fs/promises";
-import { randomUUID as randomUUID3 } from "crypto";
-import { homedir as homedir3, platform, release, arch } from "os";
-import { join as join6 } from "path";
+import { readFile as readFile3 } from "fs/promises";
+import { homedir, platform, release, arch } from "os";
+import { join as join5 } from "path";
 var ENDPOINT_ENV = "BREW_TUI_CRASH_ENDPOINT";
 var TOKEN_ENV = "BREW_TUI_CRASH_TOKEN";
-var CONFIG_PATH = join6(homedir3(), ".brew-tui", "crash-reporter.json");
-var MACHINE_ID_PATH3 = join6(homedir3(), ".brew-tui", "machine-id");
+var CONFIG_PATH = join5(homedir(), ".brew-tui", "crash-reporter.json");
 var POST_TIMEOUT_MS = 5e3;
 var _installed = false;
 async function loadConfigFromDisk() {
   try {
-    const raw = await readFile5(CONFIG_PATH, "utf-8");
+    const raw = await readFile3(CONFIG_PATH, "utf-8");
     const parsed = JSON.parse(raw);
     return {
       endpoint: typeof parsed.endpoint === "string" ? parsed.endpoint : null,
@@ -5973,20 +5758,6 @@ async function loadConfigFromDisk() {
     return { endpoint: null, token: null, enabled: false };
   }
 }
-async function getMachineId4() {
-  try {
-    const id2 = (await readFile5(MACHINE_ID_PATH3, "utf-8")).trim();
-    if (id2) return id2;
-  } catch {
-  }
-  const id = randomUUID3();
-  try {
-    await mkdir3(join6(homedir3(), ".brew-tui"), { recursive: true, mode: 448 });
-    await writeFile5(MACHINE_ID_PATH3, id, { encoding: "utf-8", mode: 384 });
-  } catch {
-  }
-  return id;
-}
 async function resolveConfig() {
   const envEndpoint = process.env[ENDPOINT_ENV]?.trim();
   const envToken = process.env[TOKEN_ENV]?.trim();
@@ -6044,8 +5815,8 @@ function buildReport(level, err, context, machineId, version) {
 async function reportError(err, context = {}) {
   const config = await resolveConfig();
   if (!config.enabled || !config.endpoint) return;
-  const machineId = await getMachineId4();
-  const version = true ? "0.6.0" : "unknown";
+  const machineId = await getMachineId();
+  const version = true ? "0.6.2" : "unknown";
   await postReport(buildReport("error", err, context, machineId, version), config);
 }
 async function installCrashReporter() {
@@ -6053,8 +5824,8 @@ async function installCrashReporter() {
   const config = await resolveConfig();
   if (!config.enabled || !config.endpoint) return;
   _installed = true;
-  const machineId = await getMachineId4();
-  const version = true ? "0.6.0" : "unknown";
+  const machineId = await getMachineId();
+  const version = true ? "0.6.2" : "unknown";
   process.on("uncaughtException", (err) => {
     void postReport(buildReport("fatal", err, { kind: "uncaughtException" }, machineId, version), config);
   });
@@ -6160,7 +5931,7 @@ async function runCli() {
     }
     if (isPro) {
       try {
-        const { loadSnapshots: loadSnapshots2 } = await import("./snapshot-RAPGMAJF.js");
+        const { loadSnapshots: loadSnapshots2 } = await import("./snapshot-YWIOFQ5H.js");
         const snapshots = await loadSnapshots2();
         if (snapshots.length > 0) {
           const latest = snapshots[0];
@@ -6172,7 +5943,7 @@ Snapshots: ${snapshots.length} (latest: ${latest ? formatDate(latest.capturedAt)
       } catch {
       }
       try {
-        const { loadBrewfile: loadBrewfile2, computeDrift: computeDrift2 } = await import("./brewfile-manager-3SERRYNC.js");
+        const { loadBrewfile: loadBrewfile2, computeDrift: computeDrift2 } = await import("./brewfile-manager-OITSKEHY.js");
         const schema = await loadBrewfile2();
         if (schema) {
           const drift = await computeDrift2(schema);
@@ -6181,7 +5952,7 @@ Snapshots: ${snapshots.length} (latest: ${latest ? formatDate(latest.capturedAt)
       } catch {
       }
       try {
-        const { loadSyncConfig: loadSyncConfig2 } = await import("./sync-engine-CAFK4LHA.js");
+        const { loadSyncConfig: loadSyncConfig2 } = await import("./sync-engine-DIYXV66P.js");
         const syncConfig = await loadSyncConfig2();
         if (syncConfig?.lastSync) {
           console.log(`Sync: last sync ${formatDate(syncConfig.lastSync)}`);
@@ -6190,7 +5961,7 @@ Snapshots: ${snapshots.length} (latest: ${latest ? formatDate(latest.capturedAt)
       }
       try {
         const { loadPolicy: loadPolicy2 } = await import("./policy-io-EECGRKNA.js");
-        const { checkCompliance: checkCompliance2 } = await import("./compliance-checker-X7P623UF.js");
+        const { checkCompliance: checkCompliance2 } = await import("./compliance-checker-7NMFKWTI.js");
         const policy = await loadPolicy2(`${process.env["HOME"] ?? "~"}/.brew-tui/policy.yaml`).catch(() => null);
         if (policy) {
           const report = await checkCompliance2(policy, true);
@@ -6204,7 +5975,7 @@ Snapshots: ${snapshots.length} (latest: ${latest ? formatDate(latest.capturedAt)
   if (command === "install-brewbar") {
     await useLicenseStore.getState().initialize();
     const isPro = useLicenseStore.getState().isPro();
-    const { installBrewBar } = await import("./brewbar-installer-BAHS6EEZ.js");
+    const { installBrewBar } = await import("./brewbar-installer-WJZKSELD.js");
     try {
       await installBrewBar(isPro, arg === "--force");
       console.log(t("cli_brewbarInstalled"));
@@ -6215,7 +5986,7 @@ Snapshots: ${snapshots.length} (latest: ${latest ? formatDate(latest.capturedAt)
     return;
   }
   if (command === "uninstall-brewbar") {
-    const { uninstallBrewBar } = await import("./brewbar-installer-BAHS6EEZ.js");
+    const { uninstallBrewBar } = await import("./brewbar-installer-WJZKSELD.js");
     try {
       await uninstallBrewBar();
       console.log(t("cli_brewbarUninstalled"));
@@ -6233,7 +6004,7 @@ Snapshots: ${snapshots.length} (latest: ${latest ? formatDate(latest.capturedAt)
       console.log(t("cli_deactivateCancelled"));
       return;
     }
-    await rm3(DATA_DIR, { recursive: true, force: true });
+    await rm2(DATA_DIR, { recursive: true, force: true });
     console.log(t("delete_account_success"));
     return;
   }
@@ -6246,7 +6017,7 @@ async function ensureBrewBarRunning() {
   if (process.platform !== "darwin") return;
   await useLicenseStore.getState().initialize();
   if (!useLicenseStore.getState().isPro()) return;
-  const { isBrewBarInstalled, installBrewBar, launchBrewBar } = await import("./brewbar-installer-BAHS6EEZ.js");
+  const { isBrewBarInstalled, installBrewBar, launchBrewBar } = await import("./brewbar-installer-WJZKSELD.js");
   try {
     if (!await isBrewBarInstalled()) {
       console.log(t("cli_brewbarInstalling"));