enigma-cli 1.3.0 → 1.4.1

package/dist/enigma.js

@@ -1,2425 +0,0 @@
-#!/usr/bin/env node
-var __defProp = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
-};
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-
-// src/util.ts
-import { existsSync, statSync, readFileSync } from "fs";
-import { join, sep } from "path";
-function isDir(pth) {
-  try {
-    return statSync(pth).isDirectory();
-  } catch {
-    return false;
-  }
-}
-function readJson(file) {
-  try {
-    return JSON.parse(readFileSync(file, "utf8").replace(/^\uFEFF/, ""));
-  } catch {
-    return null;
-  }
-}
-function isOnPath(bin) {
-  const dirs = (process.env.PATH || process.env.Path || "").split(sep === "\\" ? ";" : ":").filter(Boolean);
-  const exts = sep === "\\" ? (process.env.PATHEXT || ".EXE;.CMD;.BAT;.COM").split(";").map((e) => e.toLowerCase()) : [""];
-  return dirs.some((d) => exts.some((ext) => existsSync(join(d, bin + ext))));
-}
-var init_util = __esm({
-  "src/util.ts"() {
-    "use strict";
-  }
-});
-
-// src/agents.ts
-import { homedir } from "os";
-import { join as join2 } from "path";
-import { existsSync as existsSync2 } from "fs";
-import { execFileSync } from "child_process";
-function isManagedProvider(provider) {
-  return provider === MANAGED_PROVIDER || typeof provider === "string" && LEGACY_PROVIDERS.includes(provider);
-}
-function isInstalled(agent) {
-  const det = agent.detect || {};
-  return (det.dirs || []).some((d) => existsSync2(d)) || (det.bins || []).some((b) => isOnPath(b));
-}
-function discoverAgents() {
-  return Object.keys(AGENTS).map((name) => {
-    const agent = { name, ...AGENTS[name] };
-    return { ...agent, installed: isInstalled(agent) };
-  });
-}
-function processSnapshot() {
-  try {
-    if (process.platform === "win32") {
-      return execFileSync("tasklist", ["/fo", "csv", "/nh"], { encoding: "utf8" }).toLowerCase();
-    }
-    return execFileSync("ps", ["-A", "-o", "comm="], { encoding: "utf8" }).toLowerCase();
-  } catch {
-    return null;
-  }
-}
-function runningStatus(agents) {
-  const snap = processSnapshot();
-  if (snap == null) return { known: false, running: /* @__PURE__ */ new Set() };
-  const running = /* @__PURE__ */ new Set();
-  for (const a of agents) {
-    const det = a.detect || {};
-    const names = det.procs || det.bins || [a.name];
-    if (names.some((n) => snap.includes(String(n).toLowerCase()))) running.add(a.name);
-  }
-  return { known: true, running };
-}
-var HOME, MANAGED_PROVIDER, LEGACY_PROVIDERS, AGENTS;
-var init_agents = __esm({
-  "src/agents.ts"() {
-    "use strict";
-    init_util();
-    HOME = homedir();
-    MANAGED_PROVIDER = "FJRG2007/enigma";
-    LEGACY_PROVIDERS = ["FJRG2007"];
-    AGENTS = {
-      claude: {
-        label: "Claude Code",
-        memoryFile: "CLAUDE.md",
-        detect: { bins: ["claude"], dirs: [join2(HOME, ".claude")] },
-        targets: {
-          global: { skills: join2(HOME, ".claude", "skills"), memory: join2(HOME, ".claude") },
-          local: { skills: join2(process.cwd(), ".claude", "skills"), memory: process.cwd() }
-        }
-      },
-      codex: {
-        label: "OpenAI Codex",
-        memoryFile: "AGENTS.md",
-        // Codex reads AGENTS.md from its home (~/.codex) and project root, but
-        // discovers skills from the shared `.agents/skills` location, not ~/.codex/skills.
-        detect: { bins: ["codex"], dirs: [join2(HOME, ".codex")] },
-        targets: {
-          global: { skills: join2(HOME, ".agents", "skills"), memory: join2(HOME, ".codex") },
-          local: { skills: join2(process.cwd(), ".agents", "skills"), memory: process.cwd() }
-        }
-      },
-      opencode: {
-        label: "OpenCode",
-        memoryFile: "AGENTS.md",
-        // opencode reads AGENTS.md from ~/.config/opencode (global) or the project
-        // root (local); skills from ~/.config/opencode/skills and .opencode/skills.
-        detect: { bins: ["opencode"], dirs: [join2(HOME, ".config", "opencode"), join2(HOME, ".opencode")] },
-        targets: {
-          global: { skills: join2(HOME, ".config", "opencode", "skills"), memory: join2(HOME, ".config", "opencode") },
-          local: { skills: join2(process.cwd(), ".opencode", "skills"), memory: process.cwd() }
-        }
-      }
-    };
-  }
-});
-
-// src/claude.ts
-import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
-import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
-function claudeSettingsPath(scope) {
-  return scope === "global" ? join4(homedir2(), ".claude", "settings.json") : join4(process.cwd(), ".claude", "settings.json");
-}
-function disableClaudeAttribution(scope) {
-  const path = claudeSettingsPath(scope);
-  const current = readJson(path) || {};
-  const attribution = typeof current.attribution === "object" && current.attribution !== null ? current.attribution : {};
-  const alreadyOff = attribution.commit === "" && attribution.pr === "" && current.includeCoAuthoredBy === false;
-  if (alreadyOff) return false;
-  const next = {
-    ...current,
-    attribution: { ...attribution, commit: "", pr: "" },
-    includeCoAuthoredBy: false
-  };
-  const dir = join4(path, "..");
-  if (!isDir(dir)) mkdirSync2(dir, { recursive: true });
-  writeFileSync2(path, JSON.stringify(next, null, 2) + "\n");
-  return true;
-}
-function getClaudeAttribution(scope) {
-  const current = readJson(claudeSettingsPath(scope)) || {};
-  const attribution = current.attribution;
-  const disabled = Boolean(attribution) && attribution.commit === "" && attribution.pr === "" && current.includeCoAuthoredBy === false;
-  return !disabled;
-}
-function setClaudeAttribution(scope, enabled) {
-  if (!enabled) return disableClaudeAttribution(scope);
-  const path = claudeSettingsPath(scope);
-  const current = readJson(path) || {};
-  const attribution = typeof current.attribution === "object" && current.attribution !== null ? { ...current.attribution } : {};
-  let changed = false;
-  if (attribution.commit === "") {
-    delete attribution.commit;
-    changed = true;
-  }
-  if (attribution.pr === "") {
-    delete attribution.pr;
-    changed = true;
-  }
-  if (current.includeCoAuthoredBy === false) changed = true;
-  if (!changed) return false;
-  const next = { ...current };
-  if (Object.keys(attribution).length) next.attribution = attribution;
-  else delete next.attribution;
-  delete next.includeCoAuthoredBy;
-  writeClaudeSettings(path, next);
-  return true;
-}
-function getClaudeBypass(scope) {
-  const current = readJson(claudeSettingsPath(scope)) || {};
-  const permissions = current.permissions;
-  return Boolean(permissions) && permissions.defaultMode === "bypassPermissions";
-}
-function setClaudeBypass(scope, on, dryRun) {
-  if (on) return enableClaudeBypass(scope, dryRun);
-  const path = claudeSettingsPath(scope);
-  const current = readJson(path) || {};
-  const permissions = typeof current.permissions === "object" && current.permissions !== null ? { ...current.permissions } : {};
-  if (permissions.defaultMode !== "bypassPermissions") return { path, changed: false };
-  if (dryRun) return { path, changed: true };
-  delete permissions.defaultMode;
-  const next = { ...current };
-  if (Object.keys(permissions).length) next.permissions = permissions;
-  else delete next.permissions;
-  writeClaudeSettings(path, next);
-  return { path, changed: true };
-}
-function enableClaudeBypass(scope, dryRun) {
-  const path = claudeSettingsPath(scope);
-  const current = readJson(path) || {};
-  const permissions = typeof current.permissions === "object" && current.permissions !== null ? current.permissions : {};
-  if (permissions.defaultMode === "bypassPermissions") return { path, changed: false };
-  if (dryRun) return { path, changed: true };
-  const next = { ...current, permissions: { ...permissions, defaultMode: "bypassPermissions" } };
-  writeClaudeSettings(path, next);
-  return { path, changed: true };
-}
-function writeClaudeSettings(path, data) {
-  const dir = join4(path, "..");
-  if (!isDir(dir)) mkdirSync2(dir, { recursive: true });
-  writeFileSync2(path, JSON.stringify(data, null, 2) + "\n");
-}
-var init_claude = __esm({
-  "src/claude.ts"() {
-    "use strict";
-    init_util();
-  }
-});
-
-// src/permissions.ts
-import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "fs";
-import * as p3 from "@clack/prompts";
-async function resolveBypassSelection(candidates, opts, interactive) {
-  const supported = candidates.filter((a) => BYPASS_SUPPORTED.includes(a.name));
-  if (!supported.length || opts.noBypass) return [];
-  const names = supported.map((a) => a.name);
-  if (opts.bypass !== null) {
-    const req = opts.bypass.map((s) => s.trim().toLowerCase());
-    if (req.includes("none")) return [];
-    if (req.includes("all")) return names;
-    return names.filter((n) => req.includes(n));
-  }
-  if (!interactive) return [];
-  const r = await p3.multiselect({
-    message: "Bypass approval prompts for which agents? (security trade-off: the agent stops asking before acting)",
-    options: supported.map((a) => ({
-      value: a.name,
-      label: a.label,
-      hint: BYPASS_DEFAULT_ON.has(a.name) ? "recommended" : "less reliable - off by default"
-    })),
-    initialValues: names.filter((n) => BYPASS_DEFAULT_ON.has(n)),
-    required: false
-  });
-  if (p3.isCancel(r)) return [];
-  return r;
-}
-function applyBypass(agentNames, scope, dryRun) {
-  for (const name of agentNames) {
-    const res = enableFor(name, scope, dryRun);
-    if (!res) continue;
-    const label = AGENTS[name]?.label || name;
-    if (dryRun) p3.log.info(`Bypass (dry run): would enable for ${label} -> ${res.path}.`);
-    else if (res.changed) p3.log.warn(`Bypass: enabled for ${label} (${res.path}) - approval prompts are now OFF.`);
-    else p3.log.info(`Bypass: already enabled for ${label}.`);
-  }
-}
-function enableFor(name, scope, dryRun) {
-  switch (name) {
-    case "claude":
-      return enableClaudeBypass(scope, dryRun);
-    case "codex":
-      return enableCodexBypass(dryRun);
-    case "opencode":
-      return enableOpencodeBypass(scope, dryRun);
-    default:
-      return null;
-  }
-}
-function getBypass(name, scope) {
-  switch (name) {
-    case "claude":
-      return getClaudeBypass(scope);
-    case "codex":
-      return getCodexBypass();
-    case "opencode":
-      return getOpencodeBypass(scope);
-    default:
-      return false;
-  }
-}
-function setBypass(name, scope, on, dryRun) {
-  switch (name) {
-    case "claude":
-      return setClaudeBypass(scope, on, dryRun);
-    case "codex":
-      return on ? enableCodexBypass(dryRun) : disableCodexBypass(dryRun);
-    case "opencode":
-      return on ? enableOpencodeBypass(scope, dryRun) : disableOpencodeBypass(scope, dryRun);
-    default:
-      return null;
-  }
-}
-function getCodexBypass() {
-  const path = join5(homedir3(), ".codex", "config.toml");
-  const content = existsSync4(path) ? readFileSync2(path, "utf8") : "";
-  return getTomlTopLevelKey(content, "approval_policy") === '"never"';
-}
-function disableCodexBypass(dryRun) {
-  const path = join5(homedir3(), ".codex", "config.toml");
-  const before = existsSync4(path) ? readFileSync2(path, "utf8") : "";
-  let after = removeTomlTopLevelKey(before, "approval_policy");
-  after = removeTomlTopLevelKey(after, "sandbox_mode");
-  const changed = after !== before;
-  if (changed && !dryRun) writeFileSync3(path, after);
-  return { path, changed };
-}
-function getOpencodeBypass(scope) {
-  const path = opencodeConfigPath(scope);
-  const perm = (readJson(path) || {}).permission;
-  return perm === "allow" || typeof perm === "object" && perm !== null && perm["*"] === "allow";
-}
-function disableOpencodeBypass(scope, dryRun) {
-  const path = opencodeConfigPath(scope);
-  const current = readJson(path) || {};
-  const perm = current.permission;
-  if (!getOpencodeBypass(scope)) return { path, changed: false };
-  if (dryRun) return { path, changed: true };
-  const next = { ...current };
-  if (typeof perm === "object" && perm !== null) {
-    const rest = {};
-    for (const k of Object.keys(perm)) {
-      if (k !== "*") rest[k] = perm[k];
-    }
-    if (Object.keys(rest).length) next.permission = rest;
-    else delete next.permission;
-  } else {
-    delete next.permission;
-  }
-  const dir = join5(path, "..");
-  if (!isDir(dir)) mkdirSync3(dir, { recursive: true });
-  writeFileSync3(path, JSON.stringify(next, null, 2) + "\n");
-  return { path, changed: true };
-}
-function opencodeConfigPath(scope) {
-  return scope === "global" ? join5(homedir3(), ".config", "opencode", "opencode.json") : join5(process.cwd(), "opencode.json");
-}
-function enableCodexBypass(dryRun) {
-  const path = join5(homedir3(), ".codex", "config.toml");
-  const before = existsSync4(path) ? readFileSync2(path, "utf8") : "";
-  let after = setTomlTopLevelKey(before, "approval_policy", '"never"');
-  after = setTomlTopLevelKey(after, "sandbox_mode", '"danger-full-access"');
-  const changed = after !== before;
-  if (changed && !dryRun) {
-    const dir = join5(path, "..");
-    if (!isDir(dir)) mkdirSync3(dir, { recursive: true });
-    writeFileSync3(path, after);
-  }
-  return { path, changed };
-}
-function enableOpencodeBypass(scope, dryRun) {
-  const path = opencodeConfigPath(scope);
-  const current = readJson(path) || {};
-  const perm = current.permission;
-  const alreadyAllowAll = perm === "allow" || typeof perm === "object" && perm !== null && perm["*"] === "allow";
-  if (alreadyAllowAll) return { path, changed: false };
-  if (dryRun) return { path, changed: true };
-  const existing = typeof perm === "object" && perm !== null ? perm : {};
-  const rest = {};
-  for (const k of Object.keys(existing)) if (k !== "*") rest[k] = existing[k];
-  const next = { ...current, permission: { "*": "allow", ...rest } };
-  const dir = join5(path, "..");
-  if (!isDir(dir)) mkdirSync3(dir, { recursive: true });
-  writeFileSync3(path, JSON.stringify(next, null, 2) + "\n");
-  return { path, changed: true };
-}
-function setTomlTopLevelKey(content, key, tomlValue) {
-  const assign = `${key} = ${tomlValue}`;
-  if (content.trim() === "") return `${assign}
-`;
-  const lines = content.split("\n");
-  const firstTable = lines.findIndex((l) => /^\s*\[/.test(l));
-  const scanEnd = firstTable === -1 ? lines.length : firstTable;
-  const keyRe = new RegExp(`^\\s*${key}\\s*=`);
-  for (let i = 0; i < scanEnd; i++) {
-    if (!keyRe.test(lines[i])) continue;
-    if (lines[i].trim() === assign) return content;
-    lines[i] = assign;
-    return normalizeTrailingNewline(lines.join("\n"));
-  }
-  let insertAt = scanEnd;
-  while (insertAt > 0 && lines[insertAt - 1].trim() === "") insertAt--;
-  const followsTable = insertAt < lines.length && /^\s*\[/.test(lines[insertAt]);
-  lines.splice(insertAt, 0, ...followsTable ? [assign, ""] : [assign]);
-  return normalizeTrailingNewline(lines.join("\n"));
-}
-function getTomlTopLevelKey(content, key) {
-  const lines = content.split("\n");
-  const firstTable = lines.findIndex((l) => /^\s*\[/.test(l));
-  const scanEnd = firstTable === -1 ? lines.length : firstTable;
-  const keyRe = new RegExp(`^\\s*${key}\\s*=\\s*(.+?)\\s*$`);
-  for (let i = 0; i < scanEnd; i++) {
-    const m = keyRe.exec(lines[i]);
-    if (m) return m[1];
-  }
-  return null;
-}
-function removeTomlTopLevelKey(content, key) {
-  if (content.trim() === "") return content;
-  const lines = content.split("\n");
-  const firstTable = lines.findIndex((l) => /^\s*\[/.test(l));
-  const scanEnd = firstTable === -1 ? lines.length : firstTable;
-  const keyRe = new RegExp(`^\\s*${key}\\s*=`);
-  const kept = lines.filter((l, i) => !(i < scanEnd && keyRe.test(l)));
-  if (kept.length === lines.length) return content;
-  return normalizeTrailingNewline(kept.join("\n"));
-}
-function normalizeTrailingNewline(s) {
-  return `${s.replace(/\s+$/, "")}
-`;
-}
-var BYPASS_SUPPORTED, BYPASS_DEFAULT_ON;
-var init_permissions = __esm({
-  "src/permissions.ts"() {
-    "use strict";
-    init_agents();
-    init_util();
-    init_claude();
-    BYPASS_SUPPORTED = ["claude", "codex", "opencode"];
-    BYPASS_DEFAULT_ON = /* @__PURE__ */ new Set(["claude", "codex"]);
-  }
-});
-
-// src/config.ts
-import { homedir as homedir4 } from "os";
-import { join as join8 } from "path";
-import { existsSync as existsSync6, mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "fs";
-function configPath(scope) {
-  return scope === "global" ? join8(homedir4(), CONFIG_FILE) : join8(process.cwd(), CONFIG_FILE);
-}
-function readConfig() {
-  const sources = [];
-  let config = { ...CONFIG_DEFAULTS };
-  for (const scope of ["global", "local"]) {
-    const path = configPath(scope);
-    const raw = existsSync6(path) ? readJson(path) : null;
-    if (raw) {
-      config = { ...config, ...raw };
-      sources.push(path);
-    }
-  }
-  return { config, sources };
-}
-function setEnigmaToggle(key, value, scope) {
-  const path = configPath(scope);
-  const current = readJson(path) || {};
-  const next = { ...current, [key]: value };
-  const dir = join8(path, "..");
-  if (!isDir(dir)) mkdirSync5(dir, { recursive: true });
-  writeFileSync5(path, JSON.stringify(next, null, 2) + "\n");
-  return path;
-}
-var CONFIG_FILE, CONFIG_DEFAULTS;
-var init_config = __esm({
-  "src/config.ts"() {
-    "use strict";
-    init_util();
-    CONFIG_FILE = ".enigma.json";
-    CONFIG_DEFAULTS = { commitEmoji: true, updateNotifier: true, fullscreen: true };
-  }
-});
-
-// src/settings-registry.ts
-function enigmaToggle(key, field, label, hint) {
-  return {
-    key,
-    label,
-    hint,
-    read: () => readConfig().config[field],
-    write: (value, scope) => ({ path: setEnigmaToggle(field, value, scope), changed: true })
-  };
-}
-function valueLabel(on) {
-  return on ? "on" : "off";
-}
-function parseBool(value) {
-  const v = value.toLowerCase();
-  if (["on", "true", "yes", "1", "enable", "enabled"].includes(v)) return true;
-  if (["off", "false", "no", "0", "disable", "disabled"].includes(v)) return false;
-  return null;
-}
-var CATEGORIES, ALL_SETTINGS;
-var init_settings_registry = __esm({
-  "src/settings-registry.ts"() {
-    "use strict";
-    init_agents();
-    init_config();
-    init_claude();
-    init_permissions();
-    CATEGORIES = [
-      {
-        title: "General",
-        blurb: "enigma runtime toggles (.enigma.json)",
-        settings: [
-          enigmaToggle("commit-emoji", "commitEmoji", "Commit subject emoji", "leading gitmoji on commit subjects"),
-          enigmaToggle("update-notifier", "updateNotifier", "Update notifications", "notify when a newer enigma-cli is published"),
-          enigmaToggle("fullscreen", "fullscreen", "Full-screen TUI", "clear the screen for a clean TUI view; off renders inline among existing output")
-        ]
-      },
-      {
-        title: "Git & attribution",
-        blurb: "how the coding agent attributes its work in git",
-        settings: [
-          {
-            key: "claude-attribution",
-            label: "Claude commit attribution",
-            hint: "let Claude Code commit as its own contributor (Co-Authored-By / PR footer); enigma default: off",
-            read: (scope) => getClaudeAttribution(scope),
-            write: (value, scope) => ({ changed: setClaudeAttribution(scope, value) })
-          }
-        ]
-      },
-      {
-        title: "Permissions",
-        blurb: "approval-prompt bypass per agent (security trade-off)",
-        settings: BYPASS_SUPPORTED.map((name) => ({
-          key: `bypass-${name}`,
-          label: `${AGENTS[name]?.label || name} approval bypass`,
-          hint: name === "codex" ? "skip approval prompts (global ~/.codex only)" : "skip per-action approval prompts",
-          globalOnly: name === "codex",
-          read: (scope) => getBypass(name, scope),
-          write: (value, scope) => setBypass(name, scope, value, false) || { changed: false }
-        }))
-      }
-    ];
-    ALL_SETTINGS = CATEGORIES.flatMap((c) => c.settings);
-  }
-});
-
-// src/tui/settings.ts
-var settings_exports = {};
-__export(settings_exports, {
-  buildApp: () => buildApp,
-  runHomeTui: () => runHomeTui,
-  runSettingsTui: () => runSettingsTui
-});
-async function runHomeTui(hub) {
-  await runTui({ showActions: true, hub });
-}
-async function runSettingsTui() {
-  await runTui({ showActions: false });
-}
-async function runTui(opts) {
-  if (!process.stdout.isTTY) return;
-  const fullscreen = readConfig().config.fullscreen;
-  const React = (await import("react")).default;
-  const ink = await import("ink");
-  const { render } = ink;
-  const h = React.createElement;
-  const agents = opts.hub?.agents ?? [];
-  const protections = opts.hub?.protections ?? [];
-  const runAction = opts.hub?.runAction ?? (async () => ({ ok: false, title: "", lines: [] }));
-  if (fullscreen) try {
-    process.stdout.write(CLEAR_SCREEN);
-  } catch {
-  }
-  const App = buildApp(React, ink, { showActions: opts.showActions, fullscreen, agents, protections, runAction });
-  const app = render(h(App), { exitOnCtrlC: true });
-  await app.waitUntilExit();
-}
-function buildApp(React, ink, opts) {
-  const { useApp, useInput, useStdout } = ink;
-  const Box = ink.Box;
-  const Text = ink.Text;
-  const { useState, useEffect } = React;
-  const h = React.createElement;
-  const fill = opts.fullscreen;
-  const sideItems = [
-    ...CATEGORIES.map((c, i) => ({ kind: "category", catIndex: i, title: c.title })),
-    ...opts.showActions ? ACTION_ITEMS.map((a) => ({ kind: "action", ...a })) : []
-  ];
-  const actionItemKeys = (action) => action === "security" ? opts.protections.map((pr) => pr.value) : opts.agents.map((a) => a.name);
-  return function App() {
-    const { exit } = useApp();
-    const { stdout } = useStdout();
-    const [size, setSize] = useState({ columns: stdout.columns || 80, rows: stdout.rows || 24 });
-    const [mode, setMode] = useState("menu");
-    const [scope, setScope] = useState("global");
-    const [sideIndex, setSideIndex] = useState(0);
-    const [focusRight, setFocusRight] = useState(false);
-    const [setIndex, setSetIndex] = useState(0);
-    const [pending, setPending] = useState({});
-    const [confirm4, setConfirm] = useState(null);
-    const [actCursor, setActCursor] = useState(0);
-    const [actChecked, setActChecked] = useState({});
-    const [busyTitle, setBusyTitle] = useState("");
-    const [result, setResult] = useState(null);
-    const [resultScroll, setResultScroll] = useState(0);
-    useEffect(() => {
-      const onResize = () => setSize({ columns: stdout.columns || 80, rows: stdout.rows || 24 });
-      stdout.on("resize", onResize);
-      return () => {
-        stdout.off("resize", onResize);
-      };
-    }, [stdout]);
-    const current = sideItems[sideIndex];
-    const category = current.kind === "category" ? CATEGORIES[current.catIndex] : null;
-    const action = current.kind === "action" ? current.action : null;
-    useEffect(() => {
-      if (!action) return;
-      setActCursor(0);
-      if (action === "security") {
-        setActChecked(Object.fromEntries(opts.protections.map((pr) => [pr.value, true])));
-      } else {
-        const detected = opts.agents.filter((a) => a.installed);
-        const preselect = detected.length ? detected : opts.agents;
-        setActChecked(Object.fromEntries(opts.agents.map((a) => [a.name, preselect.some((d) => d.name === a.name)])));
-      }
-    }, [action]);
-    const resultRows = fill ? Math.max(3, size.rows - 7) : result?.lines.length ?? 0;
-    const maxResultScroll = Math.max(0, (result?.lines.length ?? 0) - resultRows);
-    const valueOf = (setting, sc) => {
-      const k = stageKey(setting.key, sc);
-      return k in pending ? pending[k] : setting.read(sc);
-    };
-    const isModified = (setting, sc) => {
-      const k = stageKey(setting.key, sc);
-      return k in pending && pending[k] !== setting.read(sc);
-    };
-    const dirty = Object.entries(pending).some(([k, v]) => {
-      const { key, scope: sc } = parseStageKey(k);
-      return SETTING_BY_KEY.get(key)?.read(sc) !== v;
-    });
-    const persistPending = () => {
-      for (const [k, v] of Object.entries(pending)) {
-        const { key, scope: sc } = parseStageKey(k);
-        const setting = SETTING_BY_KEY.get(key);
-        if (setting && setting.read(sc) !== v) setting.write(v, sc);
-      }
-    };
-    const runChosen = (act) => {
-      const keys = actionItemKeys(act);
-      const chosen = keys.filter((k) => actChecked[k]);
-      const req = act === "security" ? { action: act, protections: chosen } : { action: act, scope, agents: chosen };
-      persistPending();
-      setPending({});
-      setBusyTitle(actionTitle(act));
-      setResult(null);
-      setResultScroll(0);
-      setMode("running");
-      opts.runAction(req).then((res) => {
-        setResult(res);
-        setMode("result");
-      }).catch((err) => {
-        setResult({ ok: false, title: actionTitle(act), lines: [`Error: ${err.message}`] });
-        setMode("result");
-      });
-    };
-    useInput((input, key) => {
-      if (confirm4) {
-        if (key.escape) {
-          setConfirm(null);
-          return;
-        }
-        if (key.upArrow || input === "k") {
-          setConfirm((c) => c && { index: Math.max(0, c.index - 1) });
-          return;
-        }
-        if (key.downArrow || input === "j") {
-          setConfirm((c) => c && { index: Math.min(EXIT_OPTIONS.length - 1, c.index + 1) });
-          return;
-        }
-        if (key.return || input === " ") {
-          const index = confirm4.index;
-          setConfirm(null);
-          if (index === 2) return;
-          if (index === 0) persistPending();
-          setPending({});
-          exit();
-        }
-        return;
-      }
-      if (mode === "running") return;
-      if (mode === "result") {
-        if (key.return || key.escape || input === " " || input === "q") {
-          setMode("menu");
-          return;
-        }
-        if (key.upArrow || input === "k") {
-          setResultScroll((s) => Math.max(0, s - 1));
-          return;
-        }
-        if (key.downArrow || input === "j") {
-          setResultScroll((s) => Math.min(maxResultScroll, s + 1));
-          return;
-        }
-        return;
-      }
-      if (input === "q" || key.escape) {
-        dirty ? setConfirm({ index: 0 }) : exit();
-        return;
-      }
-      if (input === "s") {
-        persistPending();
-        setPending({});
-        return;
-      }
-      if (input === "x") {
-        persistPending();
-        setPending({});
-        exit();
-        return;
-      }
-      if (input === "g") {
-        setScope((s) => s === "global" ? "local" : "global");
-        return;
-      }
-      if (key.tab) {
-        setFocusRight((f) => !f);
-        return;
-      }
-      if (key.leftArrow || input === "h") {
-        setFocusRight(false);
-        return;
-      }
-      if (key.rightArrow || input === "l") {
-        setFocusRight(true);
-        return;
-      }
-      if (key.upArrow || input === "k") {
-        if (focusRight && category) setSetIndex((i) => Math.max(0, i - 1));
-        else if (focusRight && action) setActCursor((i) => Math.max(0, i - 1));
-        else {
-          setSideIndex((i) => Math.max(0, i - 1));
-          setSetIndex(0);
-          setFocusRight(false);
-        }
-        return;
-      }
-      if (key.downArrow || input === "j") {
-        if (focusRight && category) setSetIndex((i) => Math.min(category.settings.length - 1, i + 1));
-        else if (focusRight && action) setActCursor((i) => Math.min(actionItemKeys(action).length - 1, i + 1));
-        else {
-          setSideIndex((i) => Math.min(sideItems.length - 1, i + 1));
-          setSetIndex(0);
-          setFocusRight(false);
-        }
-        return;
-      }
-      if (input === " " && focusRight && action) {
-        const k = actionItemKeys(action)[actCursor];
-        setActChecked((c) => ({ ...c, [k]: !c[k] }));
-        return;
-      }
-      if (key.return || input === " ") {
-        if (!focusRight) {
-          setFocusRight(true);
-          return;
-        }
-        if (action) {
-          runChosen(action);
-          return;
-        }
-        const setting = category.settings[setIndex];
-        setPending((pr) => ({ ...pr, [stageKey(setting.key, scope)]: !valueOf(setting, scope) }));
-      }
-    });
-    const headerRight = confirm4 ? h(Text, { color: "yellow" }, "unsaved changes") : mode === "running" ? h(Text, { dimColor: true }, "working") : mode === "result" ? h(Text, { dimColor: true }, "result") : h(
-      Box,
-      {},
-      h(Text, { dimColor: true }, "scope "),
-      h(Text, { bold: true, color: scope === "global" ? "green" : "yellow" }, scope),
-      h(Text, { dimColor: true }, "  (g)"),
-      dirty ? h(Text, { color: "yellow" }, "   * unsaved") : null
-    );
-    const titleBar = h(
-      Box,
-      { width: size.columns, paddingX: 1, justifyContent: "space-between" },
-      h(Text, { bold: true, color: "cyan" }, "enigma"),
-      headerRight
-    );
-    let content;
-    if (confirm4) {
-      content = renderConfirm(h, Box, Text, confirm4.index, fill);
-    } else if (mode === "running") {
-      content = renderRunning(h, Box, Text, busyTitle, fill);
-    } else if (mode === "result" && result) {
-      content = renderResult(h, Box, Text, { res: result, scroll: Math.min(resultScroll, maxResultScroll), maxRows: resultRows, fill });
-    } else {
-      const sidebarWidth = Math.min(28, Math.max(20, Math.floor(size.columns * 0.3)));
-      const panel = category ? renderCategoryPanel(h, Box, Text, { category, scope, focusRight, setIndex, valueOf, isModified, fill }) : renderChecklist(h, Box, Text, {
-        title: actionTitle(action),
-        blurb: action === "skills" ? `Scope ${scope} (g to change). Choose agents, then enter to install.` : "Choose what the commit guard enforces, then enter to apply.",
-        items: action === "security" ? opts.protections.map((pr) => ({ key: pr.value, label: pr.label, hint: pr.hint })) : opts.agents.map((a) => ({ key: a.name, label: a.label, hint: a.installed ? "detected" : "not detected" })),
-        cursor: actCursor,
-        checked: actChecked,
-        focused: focusRight,
-        fill
-      });
-      content = h(Box, fill ? { flexGrow: 1 } : {}, renderSidebar(h, Box, Text, sideItems, sideIndex, focusRight, sidebarWidth), panel);
-    }
-    const menuFooter = focusRight && action ? action === "skills" ? "up/down move    space toggle    g scope    enter install    tab back" : "up/down move    space toggle    enter apply    tab back" : focusRight && category ? "up/down move    enter toggle    g scope    tab back" : `up/down move    tab switch    enter ${action ? "edit" : "focus"}    s save    x save & exit    q quit`;
-    const footerText = confirm4 ? "up/down move    enter select    esc cancel" : mode === "running" ? "working..." : mode === "result" ? `${maxResultScroll > 0 ? "up/down scroll    " : ""}enter / esc    back to menu` : menuFooter;
-    const footer = h(Box, { width: size.columns, paddingX: 1 }, h(Text, { dimColor: true }, footerText));
-    return h(
-      Box,
-      { width: size.columns, ...fill ? { height: size.rows } : {}, flexDirection: "column" },
-      titleBar,
-      content,
-      footer
-    );
-  };
-}
-function renderSidebar(h, Box, Text, items, index, focusRight, width) {
-  return h(Box, {
-    flexDirection: "column",
-    borderStyle: "round",
-    borderColor: focusRight ? "gray" : "cyan",
-    paddingX: 1,
-    width,
-    marginRight: 1
-  }, [
-    h(Text, { key: "__t", bold: true, dimColor: true }, "MENU"),
-    ...items.map((it, i) => h(Text, {
-      key: String(i),
-      inverse: !focusRight && i === index,
-      color: i === index ? "cyan" : void 0
-    }, ` ${it.title} `))
-  ]);
-}
-function renderConfirm(h, Box, Text, index, fill) {
-  return h(
-    Box,
-    { justifyContent: "center", ...fill ? { flexGrow: 1, alignItems: "center" } : {} },
-    h(Box, {
-      flexDirection: "column",
-      borderStyle: "round",
-      borderColor: "yellow",
-      paddingX: 2,
-      paddingY: 1
-    }, [
-      h(Text, { key: "__t", bold: true, color: "yellow" }, "You have unsaved changes"),
-      h(
-        Box,
-        { key: "__o", marginTop: 1, flexDirection: "column" },
-        EXIT_OPTIONS.map((o, i) => h(Text, { key: o, inverse: i === index, bold: i === index }, ` ${o} `))
-      )
-    ])
-  );
-}
-function renderRunning(h, Box, Text, title, fill) {
-  return h(Box, {
-    flexDirection: "column",
-    borderStyle: "round",
-    borderColor: "cyan",
-    paddingX: 1,
-    ...fill ? { flexGrow: 1 } : {}
-  }, [
-    h(Text, { key: "__t", bold: true, color: "cyan" }, title || "Working"),
-    h(Text, { key: "__w", marginTop: 1, dimColor: true }, "Working..."),
-    ...fill ? [h(Box, { key: "__grow", flexGrow: 1 })] : []
-  ]);
-}
-function renderResult(h, Box, Text, s) {
-  const { res, maxRows } = s;
-  const windowed = maxRows > 0 && res.lines.length > maxRows;
-  const start = windowed ? Math.max(0, Math.min(s.scroll, res.lines.length - maxRows)) : 0;
-  const slice = windowed ? res.lines.slice(start, start + maxRows) : res.lines;
-  const rows = slice.length ? slice.map((line, i) => h(Text, { key: String(start + i), wrap: "truncate-end" }, ` ${line} `)) : [h(Text, { key: "__none", dimColor: true }, " (no output) ")];
-  const above = windowed && start > 0;
-  const below = windowed && start + maxRows < res.lines.length;
-  return h(Box, {
-    flexDirection: "column",
-    borderStyle: "round",
-    borderColor: res.ok ? "green" : "red",
-    paddingX: 1,
-    ...s.fill ? { flexGrow: 1 } : {}
-  }, [
-    h(Text, { key: "__t", bold: true, color: res.ok ? "green" : "red" }, res.title),
-    h(Text, { key: "__up", dimColor: true }, above ? ` ... ${start} more above ` : " "),
-    h(Box, { key: "__rows", flexDirection: "column" }, rows),
-    h(Text, { key: "__dn", dimColor: true }, below ? ` ... ${res.lines.length - start - maxRows} more below ` : " "),
-    ...s.fill ? [h(Box, { key: "__grow", flexGrow: 1 })] : []
-  ]);
-}
-function renderChecklist(h, Box, Text, s) {
-  const rows = s.items.map((it, i) => {
-    const on = !!s.checked[it.key];
-    const selected = s.focused && i === s.cursor;
-    return h(
-      Box,
-      { key: it.key, justifyContent: "space-between" },
-      h(Text, { inverse: selected, bold: selected }, ` ${on ? "[x]" : "[ ]"} ${it.label} `),
-      h(Text, { dimColor: true }, `${it.hint}  `)
-    );
-  });
-  return h(Box, {
-    flexDirection: "column",
-    borderStyle: "round",
-    borderColor: s.focused ? "cyan" : "gray",
-    paddingX: 1,
-    flexGrow: 1
-  }, [
-    h(Text, { key: "__t", bold: true, color: "cyan" }, s.title),
-    h(Text, { key: "__bl", dimColor: true }, s.blurb),
-    h(Box, { key: "__rows", marginTop: 1, flexDirection: "column" }, rows),
-    ...s.fill ? [h(Box, { key: "__grow", flexGrow: 1 })] : []
-  ]);
-}
-function renderCategoryPanel(h, Box, Text, s) {
-  const focused = s.category.settings[s.setIndex];
-  const rows = s.category.settings.map((setting, i) => {
-    const on = s.valueOf(setting, s.scope);
-    const modified = s.isModified(setting, s.scope);
-    const selected = s.focusRight && i === s.setIndex;
-    return h(
-      Box,
-      { key: setting.key, justifyContent: "space-between" },
-      h(Text, { inverse: selected, bold: selected }, ` ${setting.label}${setting.globalOnly ? "  (global)" : ""} `),
-      h(Text, { bold: true, color: modified ? "yellow" : on ? "green" : "gray" }, `${valueLabel(on)}${modified ? " *" : ""} `)
-    );
-  });
-  return h(Box, {
-    flexDirection: "column",
-    borderStyle: "round",
-    borderColor: s.focusRight ? "cyan" : "gray",
-    paddingX: 1,
-    flexGrow: 1
-  }, [
-    h(Text, { key: "__b", bold: true, color: "cyan" }, s.category.title),
-    h(Text, { key: "__bl", dimColor: true }, s.category.blurb),
-    h(Box, { key: "__rows", marginTop: 1, flexDirection: "column" }, rows),
-    ...s.fill ? [h(Box, { key: "__grow", flexGrow: 1 })] : [],
-    h(Text, { key: "__hint", marginTop: 1, dimColor: true, wrap: "truncate-end" }, focused.hint)
-  ]);
-}
-var CLEAR_SCREEN, SETTING_BY_KEY, stageKey, parseStageKey, ACTION_ITEMS, actionTitle, EXIT_OPTIONS;
-var init_settings = __esm({
-  "src/tui/settings.ts"() {
-    "use strict";
-    init_config();
-    init_settings_registry();
-    CLEAR_SCREEN = "\x1B[2J\x1B[H";
-    SETTING_BY_KEY = new Map(ALL_SETTINGS.map((s) => [s.key, s]));
-    stageKey = (key, scope) => `${scope}/${key}`;
-    parseStageKey = (composite) => {
-      const i = composite.indexOf("/");
-      return { scope: composite.slice(0, i), key: composite.slice(i + 1) };
-    };
-    ACTION_ITEMS = [
-      { action: "skills", title: "Install agent skills", blurb: "Claude Code, Codex, OpenCode" },
-      { action: "security", title: "Git security hooks", blurb: "block secrets, .env, node_modules on commit" }
-    ];
-    actionTitle = (action) => ACTION_ITEMS.find((a) => a.action === action).title;
-    EXIT_OPTIONS = ["Save & exit", "Exit without saving", "Cancel"];
-  }
-});
-
-// src/tui/opentui.ts
-var opentui_exports = {};
-__export(opentui_exports, {
-  runHomeTui: () => runHomeTui2
-});
-async function runHomeTui2(hub) {
-  if (!process.stdout.isTTY) return;
-  const React = (await import("react")).default;
-  const { createCliRenderer, TextAttributes } = await import("@opentui/core");
-  const { createRoot, useKeyboard, useTerminalDimensions } = await import("@opentui/react");
-  const h = React.createElement;
-  const { useState, useEffect } = React;
-  const box = "box";
-  const text = "text";
-  const BOLD = TextAttributes.BOLD;
-  const DIM = TextAttributes.DIM;
-  const agents = hub.agents;
-  const protections = hub.protections;
-  const txt = (content, props = {}) => h(text, props, content);
-  const selStyle = (selected, normal = {}) => selected ? { bg: SEL_BG, fg: SEL_FG, attributes: BOLD } : normal;
-  const panelBox = (borderColor, children, extra = {}) => h(box, { border: true, borderStyle: "rounded", borderColor, flexDirection: "column", paddingLeft: 1, paddingRight: 1, flexGrow: 1, ...extra }, ...children);
-  const renderSidebar2 = (items, index, focusRight, width) => h(
-    box,
-    { border: true, borderStyle: "rounded", borderColor: focusRight ? COL.gray : COL.cyan, flexDirection: "column", paddingLeft: 1, paddingRight: 1, width, marginRight: 1 },
-    txt("MENU", { fg: COL.gray, attributes: BOLD }),
-    ...items.map((it, i) => txt(
-      ` ${it.title} `,
-      !focusRight && i === index ? { bg: SEL_BG, fg: SEL_FG, attributes: BOLD } : { fg: i === index ? COL.cyan : void 0 }
-    ))
-  );
-  const renderChecklist2 = (s) => panelBox(s.focused ? COL.cyan : COL.gray, [
-    txt(s.title, { fg: COL.cyan, attributes: BOLD }),
-    txt(s.blurb, { fg: COL.gray }),
-    h(
-      box,
-      { flexDirection: "column", marginTop: 1 },
-      ...s.items.map((it, i) => {
-        const on = !!s.checked[it.key];
-        const selected = s.focused && i === s.cursor;
-        return h(
-          box,
-          { flexDirection: "row", justifyContent: "space-between" },
-          txt(` ${on ? "[x]" : "[ ]"} ${it.label} `, selStyle(selected)),
-          txt(`${it.hint}  `, { fg: COL.gray })
-        );
-      })
-    )
-  ]);
-  const renderCategoryPanel2 = (s) => {
-    const focusedHint = s.category.settings[s.setIndex].hint;
-    return panelBox(s.focusRight ? COL.cyan : COL.gray, [
-      txt(s.category.title, { fg: COL.cyan, attributes: BOLD }),
-      txt(s.category.blurb, { fg: COL.gray }),
-      h(
-        box,
-        { flexDirection: "column", marginTop: 1 },
-        ...s.category.settings.map((setting, i) => {
-          const on = s.valueOf(setting, s.scope);
-          const modified = s.isModified(setting, s.scope);
-          const selected = s.focusRight && i === s.setIndex;
-          return h(
-            box,
-            { flexDirection: "row", justifyContent: "space-between" },
-            txt(` ${setting.label}${setting.globalOnly ? "  (global)" : ""} `, selStyle(selected)),
-            txt(`${valueLabel(on)}${modified ? " *" : ""} `, { attributes: BOLD, fg: modified ? COL.yellow : on ? COL.green : COL.gray })
-          );
-        })
-      ),
-      h(box, { flexGrow: 1 }),
-      txt(focusedHint, { fg: COL.gray, marginTop: 1, truncate: true })
-    ]);
-  };
-  const renderConfirm2 = (index) => h(
-    box,
-    { flexGrow: 1, justifyContent: "center", alignItems: "center" },
-    h(
-      box,
-      { border: true, borderStyle: "rounded", borderColor: COL.yellow, flexDirection: "column", paddingLeft: 2, paddingRight: 2, paddingTop: 1, paddingBottom: 1 },
-      txt("You have unsaved changes", { fg: COL.yellow, attributes: BOLD }),
-      h(
-        box,
-        { flexDirection: "column", marginTop: 1 },
-        ...EXIT_OPTIONS2.map((o, i) => txt(` ${o} `, selStyle(i === index)))
-      )
-    )
-  );
-  const renderRunning2 = (title) => panelBox(COL.cyan, [
-    txt(title || "Working", { fg: COL.cyan, attributes: BOLD }),
-    txt("Working...", { fg: COL.gray, marginTop: 1 }),
-    h(box, { flexGrow: 1 })
-  ]);
-  const renderResult2 = (res, scroll, maxRows) => {
-    const windowed = maxRows > 0 && res.lines.length > maxRows;
-    const start = windowed ? Math.max(0, Math.min(scroll, res.lines.length - maxRows)) : 0;
-    const slice = windowed ? res.lines.slice(start, start + maxRows) : res.lines;
-    const above = windowed && start > 0;
-    const below = windowed && start + maxRows < res.lines.length;
-    const rows = slice.length ? slice.map((line, i) => txt(` ${line} `, { key: String(start + i), truncate: true })) : [txt(" (no output) ", { fg: COL.gray })];
-    return panelBox(res.ok ? COL.green : COL.red, [
-      txt(res.title, { fg: res.ok ? COL.green : COL.red, attributes: BOLD }),
-      txt(above ? ` ... ${start} more above ` : " ", { fg: COL.gray }),
-      h(box, { flexDirection: "column" }, ...rows),
-      txt(below ? ` ... ${res.lines.length - start - maxRows} more below ` : " ", { fg: COL.gray }),
-      h(box, { flexGrow: 1 })
-    ]);
-  };
-  const sideItems = [
-    ...CATEGORIES.map((c, i) => ({ kind: "category", catIndex: i, title: c.title })),
-    ...ACTION_ITEMS2.map((a) => ({ kind: "action", ...a }))
-  ];
-  const actionItemKeys = (action) => action === "security" ? protections.map((p7) => p7.value) : agents.map((a) => a.name);
-  function App({ onExit }) {
-    const dims = useTerminalDimensions();
-    const size = { columns: dims.width || 80, rows: dims.height || 24 };
-    const [mode, setMode] = useState("menu");
-    const [scope, setScope] = useState("global");
-    const [sideIndex, setSideIndex] = useState(0);
-    const [focusRight, setFocusRight] = useState(false);
-    const [setIndex, setSetIndex] = useState(0);
-    const [pending, setPending] = useState({});
-    const [confirm4, setConfirm] = useState(null);
-    const [actCursor, setActCursor] = useState(0);
-    const [actChecked, setActChecked] = useState({});
-    const [busyTitle, setBusyTitle] = useState("");
-    const [result, setResult] = useState(null);
-    const [resultScroll, setResultScroll] = useState(0);
-    const current = sideItems[sideIndex];
-    const category = current.kind === "category" ? CATEGORIES[current.catIndex] : null;
-    const action = current.kind === "action" ? current.action : null;
-    useEffect(() => {
-      if (!action) return;
-      setActCursor(0);
-      if (action === "security") {
-        setActChecked(Object.fromEntries(protections.map((p7) => [p7.value, true])));
-      } else {
-        const detected = agents.filter((a) => a.installed);
-        const preselect = detected.length ? detected : agents;
-        setActChecked(Object.fromEntries(agents.map((a) => [a.name, preselect.some((d) => d.name === a.name)])));
-      }
-    }, [action]);
-    const resultRows = Math.max(3, size.rows - 7);
-    const maxResultScroll = Math.max(0, (result?.lines.length ?? 0) - resultRows);
-    const valueOf = (setting, sc) => {
-      const k = stageKey2(setting.key, sc);
-      return k in pending ? pending[k] : setting.read(sc);
-    };
-    const isModified = (setting, sc) => {
-      const k = stageKey2(setting.key, sc);
-      return k in pending && pending[k] !== setting.read(sc);
-    };
-    const dirty = Object.entries(pending).some(([k, v]) => {
-      const { key, scope: sc } = parseStageKey2(k);
-      return SETTING_BY_KEY2.get(key)?.read(sc) !== v;
-    });
-    const persistPending = () => {
-      for (const [k, v] of Object.entries(pending)) {
-        const { key, scope: sc } = parseStageKey2(k);
-        const setting = SETTING_BY_KEY2.get(key);
-        if (setting && setting.read(sc) !== v) setting.write(v, sc);
-      }
-    };
-    const runChosen = (act) => {
-      const chosen = actionItemKeys(act).filter((k) => actChecked[k]);
-      const req = act === "security" ? { action: act, protections: chosen } : { action: act, scope, agents: chosen };
-      persistPending();
-      setPending({});
-      setBusyTitle(actionTitle2(act));
-      setResult(null);
-      setResultScroll(0);
-      setMode("running");
-      hub.runAction(req).then((res) => {
-        setResult(res);
-        setMode("result");
-      }).catch((err) => {
-        setResult({ ok: false, title: actionTitle2(act), lines: [`Error: ${err.message}`] });
-        setMode("result");
-      });
-    };
-    useKeyboard((key) => {
-      const name = key.name;
-      const up = name === "up", down = name === "down", left = name === "left", right = name === "right";
-      const enter = name === "return", esc = name === "escape", tab = name === "tab", space = name === "space";
-      const ch = name && name.length === 1 ? name : "";
-      if (confirm4) {
-        if (esc) {
-          setConfirm(null);
-          return;
-        }
-        if (up || ch === "k") {
-          setConfirm((c) => c && { index: Math.max(0, c.index - 1) });
-          return;
-        }
-        if (down || ch === "j") {
-          setConfirm((c) => c && { index: Math.min(EXIT_OPTIONS2.length - 1, c.index + 1) });
-          return;
-        }
-        if (enter || space) {
-          const index = confirm4.index;
-          setConfirm(null);
-          if (index === 2) return;
-          if (index === 0) persistPending();
-          setPending({});
-          onExit();
-        }
-        return;
-      }
-      if (mode === "running") return;
-      if (mode === "result") {
-        if (enter || esc || space || ch === "q") {
-          setMode("menu");
-          return;
-        }
-        if (up || ch === "k") {
-          setResultScroll((s) => Math.max(0, s - 1));
-          return;
-        }
-        if (down || ch === "j") {
-          setResultScroll((s) => Math.min(maxResultScroll, s + 1));
-          return;
-        }
-        return;
-      }
-      if (ch === "q" || esc) {
-        dirty ? setConfirm({ index: 0 }) : onExit();
-        return;
-      }
-      if (ch === "s") {
-        persistPending();
-        setPending({});
-        return;
-      }
-      if (ch === "x") {
-        persistPending();
-        setPending({});
-        onExit();
-        return;
-      }
-      if (ch === "g") {
-        setScope((s) => s === "global" ? "local" : "global");
-        return;
-      }
-      if (tab) {
-        setFocusRight((f) => !f);
-        return;
-      }
-      if (left || ch === "h") {
-        setFocusRight(false);
-        return;
-      }
-      if (right || ch === "l") {
-        setFocusRight(true);
-        return;
-      }
-      if (up || ch === "k") {
-        if (focusRight && category) setSetIndex((i) => Math.max(0, i - 1));
-        else if (focusRight && action) setActCursor((i) => Math.max(0, i - 1));
-        else {
-          setSideIndex((i) => Math.max(0, i - 1));
-          setSetIndex(0);
-          setFocusRight(false);
-        }
-        return;
-      }
-      if (down || ch === "j") {
-        if (focusRight && category) setSetIndex((i) => Math.min(category.settings.length - 1, i + 1));
-        else if (focusRight && action) setActCursor((i) => Math.min(actionItemKeys(action).length - 1, i + 1));
-        else {
-          setSideIndex((i) => Math.min(sideItems.length - 1, i + 1));
-          setSetIndex(0);
-          setFocusRight(false);
-        }
-        return;
-      }
-      if (space && focusRight && action) {
-        const k = actionItemKeys(action)[actCursor];
-        setActChecked((c) => ({ ...c, [k]: !c[k] }));
-        return;
-      }
-      if (enter || space) {
-        if (!focusRight) {
-          setFocusRight(true);
-          return;
-        }
-        if (action) {
-          runChosen(action);
-          return;
-        }
-        const setting = category.settings[setIndex];
-        setPending((p7) => ({ ...p7, [stageKey2(setting.key, scope)]: !valueOf(setting, scope) }));
-      }
-    });
-    const headerRight = confirm4 ? txt("unsaved changes", { fg: COL.yellow }) : mode === "running" ? txt("working", { fg: COL.gray }) : mode === "result" ? txt("result", { fg: COL.gray }) : h(
-      box,
-      { flexDirection: "row" },
-      txt("scope ", { fg: COL.gray }),
-      txt(scope, { fg: scope === "global" ? COL.green : COL.yellow, attributes: BOLD }),
-      txt("  (g)", { fg: COL.gray }),
-      dirty ? txt("   * unsaved", { fg: COL.yellow }) : null
-    );
-    const titleBar = h(
-      box,
-      { width: size.columns, flexDirection: "row", paddingLeft: 1, paddingRight: 1, justifyContent: "space-between" },
-      txt("enigma", { fg: COL.cyan, attributes: BOLD }),
-      headerRight
-    );
-    let content;
-    if (confirm4) {
-      content = renderConfirm2(confirm4.index);
-    } else if (mode === "running") {
-      content = renderRunning2(busyTitle);
-    } else if (mode === "result" && result) {
-      content = renderResult2(result, Math.min(resultScroll, maxResultScroll), resultRows);
-    } else {
-      const sidebarWidth = Math.min(28, Math.max(20, Math.floor(size.columns * 0.3)));
-      const panel = category ? renderCategoryPanel2({ category, scope, focusRight, setIndex, valueOf, isModified }) : renderChecklist2({
-        title: actionTitle2(action),
-        blurb: action === "skills" ? `Scope ${scope} (g to change). Choose agents, then enter to install.` : "Choose what the commit guard enforces, then enter to apply.",
-        items: action === "security" ? protections.map((p7) => ({ key: p7.value, label: p7.label, hint: p7.hint })) : agents.map((a) => ({ key: a.name, label: a.label, hint: a.installed ? "detected" : "not detected" })),
-        cursor: actCursor,
-        checked: actChecked,
-        focused: focusRight
-      });
-      content = h(box, { flexGrow: 1, flexDirection: "row" }, renderSidebar2(sideItems, sideIndex, focusRight, sidebarWidth), panel);
-    }
-    const footerLine = (s) => h(box, { width: size.columns, paddingLeft: 1, paddingRight: 1 }, txt(s, { fg: COL.gray, attributes: DIM }));
-    const menuNav = focusRight && action ? action === "skills" ? "up/down move   space toggle   g scope   enter install   tab back" : "up/down move   space toggle   enter apply   tab back" : focusRight && category ? "up/down move   enter toggle   g scope   tab back" : `up/down move   tab switch   enter ${action ? "edit" : "focus"}`;
-    let footer;
-    if (confirm4) {
-      footer = footerLine("up/down move   enter select   esc cancel");
-    } else if (mode === "running") {
-      footer = footerLine("working...");
-    } else if (mode === "result") {
-      footer = footerLine(`${maxResultScroll > 0 ? "up/down scroll   " : ""}enter / esc   back to menu`);
-    } else {
-      footer = h(
-        box,
-        { width: size.columns, flexDirection: "row", justifyContent: "space-between", paddingLeft: 1, paddingRight: 1 },
-        txt(menuNav, { fg: COL.gray, attributes: DIM }),
-        txt("s save   x save & exit   q quit", { fg: COL.gray, attributes: DIM })
-      );
-    }
-    return h(box, { width: size.columns, height: size.rows, flexDirection: "column" }, titleBar, content, footer);
-  }
-  const renderer = await createCliRenderer({ exitOnCtrlC: true });
-  await new Promise((resolve3) => {
-    const root = createRoot(renderer);
-    const onExit = () => {
-      try {
-        root.unmount();
-      } catch {
-      }
-      try {
-        renderer.destroy();
-      } catch {
-      }
-      resolve3();
-    };
-    root.render(h(App, { onExit }));
-  });
-}
-var COL, SEL_BG, SEL_FG, SETTING_BY_KEY2, stageKey2, parseStageKey2, ACTION_ITEMS2, actionTitle2, EXIT_OPTIONS2;
-var init_opentui = __esm({
-  "src/tui/opentui.ts"() {
-    "use strict";
-    init_settings_registry();
-    COL = {
-      cyan: "#22d3ee",
-      green: "#22c55e",
-      yellow: "#eab308",
-      red: "#ef4444",
-      gray: "#6b7280"
-    };
-    SEL_BG = "#155e75";
-    SEL_FG = "#ffffff";
-    SETTING_BY_KEY2 = new Map(ALL_SETTINGS.map((s) => [s.key, s]));
-    stageKey2 = (key, scope) => `${scope}/${key}`;
-    parseStageKey2 = (composite) => {
-      const i = composite.indexOf("/");
-      return { scope: composite.slice(0, i), key: composite.slice(i + 1) };
-    };
-    ACTION_ITEMS2 = [
-      { action: "skills", title: "Install agent skills", blurb: "Claude Code, Codex, OpenCode" },
-      { action: "security", title: "Git security hooks", blurb: "block secrets, .env, node_modules on commit" }
-    ];
-    actionTitle2 = (action) => ACTION_ITEMS2.find((a) => a.action === action).title;
-    EXIT_OPTIONS2 = ["Save & exit", "Exit without saving", "Cancel"];
-  }
-});
-
-// src/cli.ts
-init_util();
-import { dirname as dirname4, join as join10 } from "path";
-import { fileURLToPath as fileURLToPath4 } from "url";
-import * as p6 from "@clack/prompts";
-
-// src/runtime.ts
-var isBun = () => typeof process.versions.bun === "string";
-
-// src/reporter.ts
-import * as p from "@clack/prompts";
-function clackReporter() {
-  return {
-    info: (m) => p.log.info(m),
-    success: (m) => p.log.success(m),
-    warn: (m) => p.log.warn(m),
-    error: (m) => p.log.error(m),
-    note: (body, title) => p.note(body, title),
-    spinner: () => {
-      const s = p.spinner();
-      return { start: (m) => s.start(m), stop: (m) => s.stop(m) };
-    },
-    fatal: (m) => {
-      p.cancel(m);
-      process.exit(1);
-    }
-  };
-}
-function collectReporter() {
-  const lines = [];
-  const push = (prefix, message) => {
-    for (const line of message.split("\n")) lines.push(prefix ? `${prefix} ${line}` : line);
-  };
-  return {
-    lines,
-    info: (m) => push("", m),
-    success: (m) => push("", m),
-    warn: (m) => push("!", m),
-    error: (m) => push("x", m),
-    note: (body, title) => {
-      if (title) lines.push(title);
-      push("  ", body);
-    },
-    spinner: () => ({ start: () => {
-    }, stop: (m) => push("", m) }),
-    fatal: (m) => {
-      throw new Error(m);
-    }
-  };
-}
-
-// src/skills.ts
-init_util();
-init_agents();
-import { existsSync as existsSync5, readdirSync, readFileSync as readFileSync3, writeFileSync as writeFileSync4, cpSync as cpSync2, mkdirSync as mkdirSync4, rmSync } from "fs";
-import { dirname as dirname2, join as join6, resolve as resolve2, relative as relative2, sep as sep2 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-import { createHash } from "crypto";
-import * as p4 from "@clack/prompts";
-
-// src/security.ts
-init_util();
-import { existsSync as existsSync3, mkdirSync, cpSync, writeFileSync, chmodSync } from "fs";
-import { dirname, join as join3, resolve, relative } from "path";
-import { fileURLToPath } from "url";
-import { execFileSync as execFileSync2 } from "child_process";
-import * as p2 from "@clack/prompts";
-var __dirname = dirname(fileURLToPath(import.meta.url));
-function findGuardSrc() {
-  const candidates = [
-    join3(__dirname, "guard.js"),
-    join3(__dirname, "..", "dist", "guard.js")
-  ];
-  return candidates.find((c) => existsSync3(c)) ?? null;
-}
-var GUARD_PROTECTIONS = [
-  { value: "secrets", label: "Block committed secrets", hint: "API keys, tokens, private keys" },
-  { value: "envFiles", label: "Block .env files", hint: "allows .env.example / .sample / .template" },
-  { value: "depDirs", label: "Block dependency/cache dirs", hint: "node_modules, __pycache__, venv" },
-  { value: "generatedDirs", label: "Warn on generated dirs", hint: "dist, build, .next, coverage" },
-  { value: "junkFiles", label: "Warn on log / OS junk files", hint: ".log, .DS_Store, Thumbs.db" },
-  { value: "largeFiles", label: "Warn on files over 5 MB", hint: "oversized blobs" }
-];
-function findGitRoot(start) {
-  let dir = resolve(start);
-  for (; ; ) {
-    if (existsSync3(join3(dir, ".git"))) return dir;
-    const parent = dirname(dir);
-    if (parent === dir) return null;
-    dir = parent;
-  }
-}
-function currentHooksPath(root) {
-  try {
-    return execFileSync2("git", ["-C", root, "config", "--get", "core.hooksPath"], { encoding: "utf8" }).trim();
-  } catch {
-    return "";
-  }
-}
-async function setupGitHooks(opts, interactive, reporter = clackReporter()) {
-  const root = findGitRoot(process.cwd());
-  if (!root) {
-    reporter.error("Not inside a git repository (no .git found). Run this from your project root.");
-    return false;
-  }
-  const guardSrc = findGuardSrc();
-  if (!guardSrc) {
-    reporter.error("Cannot find the built guard (dist/guard.js). Run 'npm run build' first.");
-    return false;
-  }
-  const current = currentHooksPath(root);
-  if (current && current !== ".githooks" && !opts.force) {
-    reporter.warn(`core.hooksPath is already set to '${current}'.`);
-    if (interactive) {
-      const ok = await p2.confirm({ message: `Override existing core.hooksPath '${current}' with '.githooks'?` });
-      if (p2.isCancel(ok) || !ok) {
-        reporter.info("Left git hooks unchanged.");
-        return false;
-      }
-    } else {
-      reporter.info("Re-run with --force to override.");
-      return false;
-    }
-  }
-  let enabled = opts.protections;
-  if (!enabled && interactive) {
-    const r = await p2.multiselect({
-      message: "Which protections should the commit guard enforce?",
-      options: GUARD_PROTECTIONS,
-      initialValues: GUARD_PROTECTIONS.map((o) => o.value),
-      required: true
-    });
-    if (p2.isCancel(r)) {
-      reporter.info("Left git hooks unchanged.");
-      return false;
-    }
-    enabled = r;
-  }
-  const config = {};
-  for (const o of GUARD_PROTECTIONS) config[o.value] = enabled ? enabled.includes(o.value) : true;
-  const hooksDir = join3(root, ".githooks");
-  mkdirSync(hooksDir, { recursive: true });
-  cpSync(guardSrc, join3(hooksDir, "guard.mjs"), { force: true });
-  writeFileSync(join3(hooksDir, "enigma-guard.json"), JSON.stringify(config, null, 2) + "\n");
-  const shimPath = join3(hooksDir, "pre-commit");
-  const shim = [
-    "#!/bin/sh",
-    "# Managed by enigma (enigma-cli) - blocks committed secrets, .env files, and dependency dirs.",
-    "# Toggle protections in .githooks/enigma-guard.json. Bypass once: git commit --no-verify",
-    'exec node "$(git rev-parse --show-toplevel)/.githooks/guard.mjs" "$@"',
-    ""
-  ].join("\n");
-  writeFileSync(shimPath, shim);
-  try {
-    chmodSync(shimPath, 493);
-  } catch {
-  }
-  try {
-    chmodSync(join3(hooksDir, "guard.mjs"), 493);
-  } catch {
-  }
-  try {
-    execFileSync2("git", ["-C", root, "config", "core.hooksPath", ".githooks"]);
-  } catch (err) {
-    reporter.error(`Failed to set core.hooksPath: ${err.message}`);
-    return false;
-  }
-  const on = Object.entries(config).filter(([, v]) => v).map(([k]) => k);
-  reporter.success(`Git security hooks installed in ${relative(process.cwd(), hooksDir) || ".githooks"} (core.hooksPath set).`);
-  reporter.info(`Enforcing: ${on.join(", ") || "nothing"}. Commit .githooks/ so your team inherits it.`);
-  if (isOnPath("gh")) {
-    reporter.info("GitHub CLI (gh) detected: these hooks also run for commits made via gh, since gh uses git underneath.");
-  }
-  return true;
-}
-async function maybeOfferGitHooks(interactive, opts) {
-  if (!interactive || opts.security) return;
-  const root = findGitRoot(process.cwd());
-  if (!root) return;
-  if (currentHooksPath(root) === ".githooks") return;
-  const ok = await p2.confirm({ message: "Set up git security hooks here too (block secrets, .env, node_modules)?" });
-  if (!p2.isCancel(ok) && ok) await setupGitHooks({ ...opts, protections: void 0 }, interactive);
-}
-
-// src/skills.ts
-init_claude();
-init_permissions();
-var __dirname2 = dirname2(fileURLToPath2(import.meta.url));
-var PKG_ROOT = resolve2(__dirname2, "..");
-var ASSETS = join6(PKG_ROOT, "assets");
-var SKILLS_ROOT = join6(ASSETS, "skills");
-var MEMORY_ROOT = join6(ASSETS, "memory");
-function cliVersion() {
-  return (readJson(join6(PKG_ROOT, "package.json")) || {}).version || "0.0.0";
-}
-function serializeMeta(meta) {
-  const ordered = {};
-  for (const k of ["name", "version", "provider", "description", "cliVersion", "sha"]) {
-    if (meta[k] !== void 0) ordered[k] = meta[k];
-  }
-  for (const k of Object.keys(meta)) if (!(k in ordered)) ordered[k] = meta[k];
-  return JSON.stringify(ordered, null, 2) + "\n";
-}
-function readSkillMeta(skillDir) {
-  return readJson(join6(skillDir, "skill.json")) || {};
-}
-function listFilesRel(dir, base = dir) {
-  const out = [];
-  for (const e of readdirSync(dir)) {
-    const full = join6(dir, e);
-    if (isDir(full)) out.push(...listFilesRel(full, base));
-    else out.push(relative2(base, full).split(sep2).join("/"));
-  }
-  return out;
-}
-function computeContentSha(dir) {
-  const files = listFilesRel(dir).filter((f) => f !== "skill.json").sort();
-  const h = createHash("sha256");
-  for (const f of files) {
-    h.update(f);
-    h.update("\0");
-    h.update(readFileSync3(join6(dir, f)));
-    h.update("\0");
-  }
-  return h.digest("hex");
-}
-function skillStatus(destDir, srcMeta) {
-  if (!existsSync5(destDir)) return { kind: "install", from: null, to: srcMeta.version || null };
-  const destMeta = readSkillMeta(destDir);
-  const from = destMeta.version || null;
-  const to = srcMeta.version || null;
-  if (from && to && from !== to) return { kind: "update", from, to };
-  const recordedSha = destMeta.sha || null;
-  if (!recordedSha) return { kind: "reinstall", from, to };
-  const actualSha = computeContentSha(destDir);
-  if (actualSha !== recordedSha) return { kind: "tampered", from, to };
-  return { kind: "identical", from, to };
-}
-function statusLabel(st) {
-  switch (st.kind) {
-    case "install":
-      return st.to ? `install v${st.to}` : "install";
-    case "update":
-      return `update ${st.from} -> ${st.to}`;
-    case "identical":
-      return st.to ? `up-to-date v${st.to} (skip)` : "up-to-date (skip)";
-    case "tampered":
-      return st.to ? `MODIFIED locally v${st.to}` : "MODIFIED locally";
-    default:
-      return st.to ? `reinstall v${st.to}` : "reinstall";
-  }
-}
-function filesEqual(a, b) {
-  try {
-    return readFileSync3(a).equals(readFileSync3(b));
-  } catch {
-    return false;
-  }
-}
-function memoryStatus(srcFile, destFile) {
-  if (!existsSync5(destFile)) return "install";
-  return filesEqual(srcFile, destFile) ? "identical" : "overwrite";
-}
-function computePrune(destSkillsDir, sourceNames) {
-  if (!isDir(destSkillsDir)) return [];
-  return readdirSync(destSkillsDir).filter((e) => isDir(join6(destSkillsDir, e)) && existsSync5(join6(destSkillsDir, e, "SKILL.md"))).filter((e) => !sourceNames.includes(e)).map((e) => ({ name: e, dir: join6(destSkillsDir, e), meta: readSkillMeta(join6(destSkillsDir, e)) })).filter((s) => isManagedProvider(s.meta.provider));
-}
-function inspectSkills() {
-  if (!isDir(SKILLS_ROOT)) return [];
-  return readdirSync(SKILLS_ROOT).filter((e) => isDir(join6(SKILLS_ROOT, e)) && existsSync5(join6(SKILLS_ROOT, e, "SKILL.md"))).map((e) => ({ name: e, src: join6(SKILLS_ROOT, e), meta: readSkillMeta(join6(SKILLS_ROOT, e)) }));
-}
-function inspectMemory(agent) {
-  if (!agent.memoryFile) return [];
-  const src = join6(MEMORY_ROOT, agent.memoryFile);
-  return existsSync5(src) ? [{ name: agent.memoryFile, src }] : [];
-}
-function sealSources() {
-  if (!isDir(SKILLS_ROOT)) {
-    console.error(`No skills directory found at ${SKILLS_ROOT}.`);
-    process.exit(1);
-  }
-  const cli = cliVersion();
-  let sealed = 0;
-  for (const name of readdirSync(SKILLS_ROOT)) {
-    const dir = join6(SKILLS_ROOT, name);
-    if (!isDir(dir) || !existsSync5(join6(dir, "SKILL.md"))) continue;
-    const metaPath = join6(dir, "skill.json");
-    const meta = readJson(metaPath) || { name };
-    const before = JSON.stringify(meta);
-    meta.provider = MANAGED_PROVIDER;
-    meta.cliVersion = cli;
-    meta.sha = computeContentSha(dir);
-    const changed = JSON.stringify(meta) !== before;
-    writeFileSync4(metaPath, serializeMeta(meta));
-    console.log(`${changed ? "updated" : "ok     "}  ${name}  cli=${cli}  sha=${meta.sha.slice(0, 12)}`);
-    sealed++;
-  }
-  console.log(`
-Sealed ${sealed} skill(s) at cliVersion ${cli}.`);
-}
-function checkSources() {
-  if (!isDir(SKILLS_ROOT)) {
-    console.error(`No skills directory found at ${SKILLS_ROOT}.`);
-    process.exit(1);
-  }
-  const cli = cliVersion();
-  const problems = [];
-  let checked = 0;
-  for (const name of readdirSync(SKILLS_ROOT)) {
-    const dir = join6(SKILLS_ROOT, name);
-    if (!isDir(dir) || !existsSync5(join6(dir, "SKILL.md"))) continue;
-    checked++;
-    const md = readFileSync3(join6(dir, "SKILL.md"), "utf8");
-    const fm = md.match(/^---\n([\s\S]*?)\n---/);
-    if (!fm) problems.push(`${name}: SKILL.md is missing YAML frontmatter`);
-    else {
-      if (!/^name:\s*\S/m.test(fm[1])) problems.push(`${name}: frontmatter missing 'name'`);
-      if (!/^description:\s*\S/m.test(fm[1])) problems.push(`${name}: frontmatter missing 'description'`);
-    }
-    const metaPath = join6(dir, "skill.json");
-    if (!existsSync5(metaPath)) {
-      problems.push(`${name}: missing skill.json`);
-      continue;
-    }
-    const meta = readJson(metaPath);
-    if (!meta) {
-      problems.push(`${name}: skill.json is not valid JSON`);
-      continue;
-    }
-    if (!isManagedProvider(meta.provider)) problems.push(`${name}: skill.json provider is not ${MANAGED_PROVIDER}`);
-    if (!meta.version) problems.push(`${name}: skill.json missing 'version'`);
-    if (meta.cliVersion !== cli) problems.push(`${name}: stale cliVersion (${meta.cliVersion || "none"} != ${cli}) - run 'enigma seal'`);
-    if (!meta.sha) problems.push(`${name}: not sealed (run 'enigma seal')`);
-    else if (meta.sha !== computeContentSha(dir)) problems.push(`${name}: stale sha - content changed since seal (run 'enigma seal')`);
-  }
-  if (problems.length) {
-    console.error(`Integrity check FAILED (${problems.length} problem(s) across ${checked} skill(s)):`);
-    for (const pr of problems) console.error(`  - ${pr}`);
-    process.exit(1);
-  }
-  console.log(`Integrity check passed: ${checked} skill(s) well-formed and sealed.`);
-}
-async function installSkills(opts, interactive, reporter = clackReporter()) {
-  const available = discoverAgents();
-  if (available.length === 0) reporter.fatal("No installable agents known.");
-  let scope;
-  if (opts.scope) {
-    scope = opts.scope;
-  } else if (interactive) {
-    const r = await p4.select({
-      message: "Where should skills be installed?",
-      options: [
-        { value: "global", label: "Global (user)", hint: "~/.claude, ~/.codex, ~/.config/opencode" },
-        { value: "local", label: "Local (this project)", hint: process.cwd() }
-      ]
-    });
-    if (p4.isCancel(r)) {
-      p4.cancel("Aborted.");
-      return;
-    }
-    scope = r;
-  } else {
-    scope = "global";
-  }
-  const detected = available.filter((a) => a.installed);
-  let chosenAgents = available;
-  if (opts.agents.length) {
-    chosenAgents = available.filter((a) => opts.agents.includes(a.name));
-    const unknown = opts.agents.filter((n) => !available.some((a) => a.name === n));
-    if (unknown.length) reporter.warn(`Skipping unknown/absent agents: ${unknown.join(", ")}`);
-  } else if (opts.allAgents) {
-    chosenAgents = available;
-  } else if (interactive && available.length > 1) {
-    const preselect = (detected.length ? detected : available).map((a) => a.name);
-    const r = await p4.multiselect({
-      message: "Which agents? (detected on this system are preselected)",
-      options: available.map((a) => ({ value: a.name, label: a.label, hint: a.installed ? "detected" : "not detected" })),
-      initialValues: preselect,
-      required: true
-    });
-    if (p4.isCancel(r)) {
-      p4.cancel("Aborted.");
-      return;
-    }
-    chosenAgents = available.filter((a) => r.includes(a.name));
-  } else if (detected.length) {
-    chosenAgents = detected;
-  } else {
-    chosenAgents = available;
-    reporter.warn("No installed agents detected; defaulting to all supported agents.");
-  }
-  if (chosenAgents.length === 0) reporter.fatal("No matching agents selected.");
-  const claudeScope = chosenAgents.some((a) => a.name === "claude") ? scope : null;
-  const applyClaudeConfig = () => {
-    if (!claudeScope || opts.dryRun) return;
-    if (disableClaudeAttribution(claudeScope)) {
-      reporter.info("Claude Code: disabled Co-Authored-By and PR attribution in settings.json.");
-    }
-  };
-  const bypassAgents = await resolveBypassSelection(chosenAgents, opts, interactive);
-  const applyBypassConfig = () => applyBypass(bypassAgents, scope, opts.dryRun);
-  const plan = [];
-  for (const agent of chosenAgents) {
-    const target = agent.targets[scope];
-    if (!target) {
-      reporter.warn(`${agent.label} has no '${scope}' target - skipping.`);
-      continue;
-    }
-    const skills = inspectSkills();
-    const memory = inspectMemory(agent);
-    let chosenSkills = skills;
-    if (!opts.memoryOnly && opts.skills.length) {
-      chosenSkills = skills.filter((s2) => opts.skills.includes(s2.name));
-    } else if (!opts.memoryOnly && interactive && skills.length > 1) {
-      const r = await p4.multiselect({
-        message: `Skills for ${agent.label} - all selected; deselect any you don't want`,
-        options: skills.map((s2) => {
-          const st = skillStatus(join6(target.skills, s2.name), s2.meta);
-          const prov = s2.meta.provider ? ` ${s2.meta.provider}` : "";
-          return { value: s2.name, label: s2.name, hint: `${statusLabel(st)}${prov}` };
-        }),
-        initialValues: skills.map((s2) => s2.name),
-        required: false
-      });
-      if (p4.isCancel(r)) {
-        p4.cancel("Aborted.");
-        return;
-      }
-      chosenSkills = skills.filter((s2) => r.includes(s2.name));
-    }
-    const skillsWithStatus = (opts.memoryOnly ? [] : chosenSkills).map((s2) => ({
-      ...s2,
-      status: skillStatus(join6(target.skills, s2.name), s2.meta),
-      overwrite: true
-    }));
-    const prune = opts.prune && !opts.memoryOnly ? computePrune(target.skills, skills.map((s2) => s2.name)) : [];
-    plan.push({ agent, target, skills: skillsWithStatus, memory: opts.skillsOnly ? [] : memory, prune });
-  }
-  const tampered = plan.flatMap((x) => x.skills.filter((s2) => s2.status.kind === "tampered"));
-  if (tampered.length) {
-    if (opts.keepModified) {
-      for (const s2 of tampered) s2.overwrite = false;
-      reporter.warn(`${tampered.length} locally-modified skill(s) will be kept (--keep-modified).`);
-    } else if (interactive && !opts.dryRun) {
-      const sel = await p4.multiselect({
-        message: `${tampered.length} skill(s) were modified locally since install. Select which to OVERWRITE`,
-        options: tampered.map((s2, i) => ({ value: i, label: s2.name, hint: s2.meta.version ? `v${s2.meta.version}` : "modified" })),
-        initialValues: tampered.map((_, i) => i),
-        required: false
-      });
-      if (p4.isCancel(sel)) {
-        p4.cancel("Aborted.");
-        return;
-      }
-      tampered.forEach((s2, i) => {
-        s2.overwrite = sel.includes(i);
-      });
-    }
-  }
-  const willCopy = (s2) => s2.status.kind === "install" || s2.status.kind === "update" || s2.status.kind === "reinstall" || s2.status.kind === "tampered" && s2.overwrite;
-  let nInstall = 0, nUpdate = 0, nRemove = 0, nSkip = 0, nKept = 0;
-  const lines = [];
-  for (const x of plan) {
-    lines.push(`${x.agent.label}  (${scope})`);
-    for (const s2 of x.skills) {
-      const prov = s2.meta.provider ? `  [${s2.meta.provider}]` : "";
-      let label;
-      if (s2.status.kind === "identical") {
-        nSkip++;
-        label = statusLabel(s2.status);
-      } else if (s2.status.kind === "tampered" && !s2.overwrite) {
-        nKept++;
-        label = `keep modified v${s2.meta.version || "?"}`;
-      } else if (s2.status.kind === "tampered") {
-        nUpdate++;
-        label = `overwrite modified v${s2.meta.version || "?"}`;
-      } else if (s2.status.kind === "install") {
-        nInstall++;
-        label = statusLabel(s2.status);
-      } else {
-        nUpdate++;
-        label = statusLabel(s2.status);
-      }
-      lines.push(`  ${label.padEnd(26)} skill   ${s2.name}${prov}`);
-    }
-    for (const m of x.memory) {
-      const ms = memoryStatus(m.src, join6(x.target.memory, m.name));
-      if (ms === "identical") {
-        nSkip++;
-        lines.push(`  ${"up-to-date (skip)".padEnd(26)} memory  ${m.name}`);
-      } else if (ms === "install") {
-        nInstall++;
-        lines.push(`  ${"install".padEnd(26)} memory  ${m.name}`);
-      } else {
-        nUpdate++;
-        lines.push(`  ${"overwrite".padEnd(26)} memory  ${m.name}`);
-      }
-    }
-    for (const s2 of x.prune) {
-      nRemove++;
-      const ver = s2.meta.version ? ` v${s2.meta.version}` : "";
-      lines.push(`  ${"remove (orphaned)".padEnd(26)} skill   ${s2.name}  [${s2.meta.provider}${ver}]`);
-    }
-  }
-  if (nInstall + nUpdate + nRemove === 0) {
-    reporter.note(lines.join("\n"), "Nothing to do");
-    applyClaudeConfig();
-    applyBypassConfig();
-    await maybeOfferGitHooks(interactive, opts);
-    reporter.success(`Everything up-to-date - ${nSkip} item(s) unchanged${nKept ? `, ${nKept} kept modified` : ""} (${scope}).`);
-    return;
-  }
-  reporter.note(lines.join("\n"), opts.dryRun ? "Dry run - planned changes" : "Planned changes");
-  if (interactive && !opts.dryRun) {
-    const summary = [
-      nInstall && `${nInstall} to install`,
-      nUpdate && `${nUpdate} to update/overwrite`,
-      nRemove && `${nRemove} to remove`,
-      nSkip && `${nSkip} unchanged`
-    ].filter(Boolean).join(", ");
-    const ok = await p4.confirm({ message: `Apply: ${summary}?` });
-    if (p4.isCancel(ok) || !ok) {
-      p4.cancel("Aborted.");
-      return;
-    }
-  }
-  if (opts.dryRun) {
-    applyBypassConfig();
-    reporter.info("Dry run complete - no files written.");
-    return;
-  }
-  const changedAgents = plan.filter(
-    (x) => x.skills.some(willCopy) || x.memory.some((m) => memoryStatus(m.src, join6(x.target.memory, m.name)) !== "identical") || x.prune.length > 0
-  );
-  const s = reporter.spinner();
-  s.start("Installing...");
-  let copied = 0;
-  try {
-    for (const x of plan) {
-      mkdirSync4(x.target.skills, { recursive: true });
-      mkdirSync4(x.target.memory, { recursive: true });
-      for (const sk of x.skills) {
-        if (!willCopy(sk)) continue;
-        cpSync2(sk.src, join6(x.target.skills, sk.name), { recursive: true, force: true });
-        copied++;
-      }
-      for (const m of x.memory) {
-        if (memoryStatus(m.src, join6(x.target.memory, m.name)) === "identical") continue;
-        cpSync2(m.src, join6(x.target.memory, m.name), { force: true });
-        copied++;
-      }
-      for (const pr of x.prune) rmSync(pr.dir, { recursive: true, force: true });
-    }
-  } catch (err) {
-    s.stop("Failed.");
-    reporter.fatal(`Error while installing: ${err.message}`);
-  }
-  s.stop(`Wrote ${copied} item(s)${nRemove ? `, removed ${nRemove}` : ""}.`);
-  applyClaudeConfig();
-  applyBypassConfig();
-  await maybeOfferGitHooks(interactive, opts);
-  reporter.success(`${nInstall} installed, ${nUpdate} updated/overwritten` + (nRemove ? `, ${nRemove} removed` : "") + (nSkip ? `, ${nSkip} unchanged` : "") + (nKept ? `, ${nKept} kept modified` : "") + ` (${scope}).`);
-  if (changedAgents.length) {
-    const { known, running } = runningStatus(changedAgents.map((x) => x.agent));
-    if (running.size) {
-      const names = changedAgents.filter((x) => running.has(x.agent.name)).map((x) => x.agent.label);
-      reporter.warn(`Restart ${names.join(", ")} to apply the changes (running now).`);
-    } else if (!known) {
-      const names = changedAgents.map((x) => x.agent.label);
-      reporter.info(`If any of these agents are running, restart them to apply the changes: ${names.join(", ")}.`);
-    }
-  }
-}
-
-// src/cli.ts
-init_agents();
-
-// src/guard.ts
-import { readFileSync as readFileSync4, statSync as statSync2 } from "fs";
-import { execFileSync as execFileSync3 } from "child_process";
-import { basename, extname, dirname as dirname3, join as join7 } from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
-var LARGE_FILE_BYTES = 5 * 1024 * 1024;
-var ENV_ALLOWED = /(example|sample|template)/i;
-var isForbiddenEnv = (base) => /^\.env(\..+)?$/.test(base) && !ENV_ALLOWED.test(base);
-var BLOCK_DIRS = [
-  /(^|\/)node_modules\//,
-  /(^|\/)bower_components\//,
-  /(^|\/)\.pnp(\/|$)/,
-  /(^|\/)__pycache__\//,
-  /(^|\/)\.venv\//,
-  /(^|\/)venv\//,
-  /(^|\/)\.mypy_cache\//,
-  /(^|\/)\.pytest_cache\//,
-  /(^|\/)\.gradle\//
-];
-var WARN_DIRS = [
-  /(^|\/)dist\//,
-  /(^|\/)build\//,
-  /(^|\/)out\//,
-  /(^|\/)\.next\//,
-  /(^|\/)\.nuxt\//,
-  /(^|\/)\.svelte-kit\//,
-  /(^|\/)\.turbo\//,
-  /(^|\/)coverage\//
-];
-var WARN_FILES = [/\.log$/i, /(^|\/)\.DS_Store$/, /(^|\/)Thumbs\.db$/i];
-var SECRET_SKIP_EXT = /* @__PURE__ */ new Set([
-  ".png",
-  ".jpg",
-  ".jpeg",
-  ".gif",
-  ".webp",
-  ".ico",
-  ".pdf",
-  ".zip",
-  ".gz",
-  ".woff",
-  ".woff2",
-  ".ttf",
-  ".eot",
-  ".mp4",
-  ".mov",
-  ".lock"
-]);
-var SECRET_PATTERNS = [
-  ["AWS access key id", /\bAKIA[0-9A-Z]{16}\b/],
-  ["GitHub token", /\bgh[pousr]_[A-Za-z0-9]{36,}\b/],
-  ["OpenAI API key", /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}\b/],
-  ["Anthropic API key", /\bsk-ant-[A-Za-z0-9_-]{20,}\b/],
-  ["Slack token", /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/],
-  ["Google API key", /\bAIza[0-9A-Za-z_-]{35}\b/],
-  ["Stripe secret key", /\bsk_live_[0-9A-Za-z]{24,}\b/],
-  ["Private key block", /-----BEGIN (?:RSA |EC |OPENSSH |DSA |PGP )?PRIVATE KEY-----/],
-  ["Generic bearer secret", /\b(?:secret|token|api[_-]?key|passwd|password)\s*[:=]\s*["'][A-Za-z0-9_\-./+]{16,}["']/i]
-];
-var SECRET_SKIP_PATH = [/(^|\/)node_modules\//, /(^|\/)\.git\//, /package-lock\.json$/, /guard\.[mc]?js$/];
-var SELF_DIR = dirname3(fileURLToPath3(import.meta.url));
-function loadConfig() {
-  const defaults = { secrets: true, envFiles: true, depDirs: true, generatedDirs: true, junkFiles: true, largeFiles: true };
-  try {
-    const raw = JSON.parse(readFileSync4(join7(SELF_DIR, "enigma-guard.json"), "utf8"));
-    return { ...defaults, ...raw };
-  } catch {
-    return defaults;
-  }
-}
-function gitFiles(all) {
-  const out = execFileSync3("git", all ? ["ls-files"] : ["diff", "--cached", "--name-only", "--diff-filter=ACM"], { encoding: "utf8" });
-  return out.split("\n").map((s) => s.trim()).filter(Boolean);
-}
-function scanSecrets(file, blocks) {
-  if (SECRET_SKIP_PATH.some((re) => re.test(file))) return;
-  if (SECRET_SKIP_EXT.has(extname(file).toLowerCase())) return;
-  let text;
-  try {
-    text = readFileSync4(file, "utf8");
-  } catch {
-    return;
-  }
-  if (text.includes("\0")) return;
-  text.split("\n").forEach((line, i) => {
-    for (const [label, re] of SECRET_PATTERNS) {
-      if (re.test(line)) blocks.push(`${file}:${i + 1}  [secret: ${label}]`);
-    }
-  });
-}
-function runGuard({ all = false } = {}) {
-  const cfg = loadConfig();
-  let files;
-  try {
-    files = gitFiles(all);
-  } catch {
-    return { ok: true, blocks: [], warns: [], notRepo: true };
-  }
-  const blocks = [];
-  const warns = [];
-  for (const file of files) {
-    const base = basename(file);
-    if (cfg.envFiles && isForbiddenEnv(base)) {
-      blocks.push(`${file}  [env file with secrets - commit .env.example/.template instead]`);
-    }
-    if (cfg.depDirs && BLOCK_DIRS.some((re) => re.test(file))) {
-      blocks.push(`${file}  [dependency/cache dir - must not be committed]`);
-    } else if (cfg.generatedDirs && WARN_DIRS.some((re) => re.test(file))) {
-      warns.push(`${file}  [looks generated - confirm you really want it tracked]`);
-    }
-    if (cfg.junkFiles && WARN_FILES.some((re) => re.test(file))) warns.push(`${file}  [log / OS junk file]`);
-    if (cfg.largeFiles) {
-      try {
-        if (statSync2(file).size > LARGE_FILE_BYTES) warns.push(`${file}  [larger than 5 MB]`);
-      } catch {
-      }
-    }
-    if (cfg.secrets) scanSecrets(file, blocks);
-  }
-  return { ok: blocks.length === 0, blocks, warns, count: files.length, all };
-}
-function runGuardCli(all) {
-  const r = runGuard({ all });
-  if (r.notRepo) {
-    console.error("enigma-guard: not a git repository; nothing to check.");
-    return 0;
-  }
-  if (r.warns.length) {
-    console.error(`enigma-guard: ${r.warns.length} warning(s):`);
-    for (const w of r.warns) console.error(`  ! ${w}`);
-  }
-  if (r.blocks.length) {
-    console.error(`
-enigma-guard: BLOCKED - ${r.blocks.length} problem(s) must be fixed before committing:`);
-    for (const b of r.blocks) console.error(`  x ${b}`);
-    console.error("\nFix the above (move secrets to env/secret manager, gitignore generated paths).");
-    console.error("To bypass intentionally for one commit: git commit --no-verify");
-    return 1;
-  }
-  console.log(`enigma-guard: ${r.count} ${r.all ? "tracked" : "staged"} file(s) checked, no blocking problems.`);
-  return 0;
-}
-var guardEntry = process.argv[1] ?? "";
-var isGuardEntry = /(^|[\\/])guard\.[mc]?[jt]s$/.test(guardEntry);
-if (isGuardEntry && fileURLToPath3(import.meta.url) === guardEntry) {
-  process.exit(runGuardCli(process.argv.includes("--all")));
-}
-
-// src/settings.ts
-init_config();
-init_settings_registry();
-function printEffective() {
-  console.log("Effective enigma settings:\n");
-  for (const category of CATEGORIES) {
-    console.log(`${category.title}:`);
-    for (const s of category.settings) console.log(`  ${s.key}: ${valueLabel(s.read("global"))}`);
-    console.log("");
-  }
-  const { sources } = readConfig();
-  console.log(sources.length ? `.enigma.json sources: ${sources.join(", ")}` : ".enigma.json: built-in defaults (no file found)");
-  console.log("Agent settings (attribution, bypass) reflect each agent's own config at the global scope.");
-}
-async function runConfigCli(positionals, scope, interactive) {
-  const [rawKey, rawValue] = positionals;
-  if (!rawKey) {
-    if (interactive) {
-      const { runSettingsTui: runSettingsTui2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
-      await runSettingsTui2();
-    } else {
-      printEffective();
-    }
-    return 0;
-  }
-  const setting = ALL_SETTINGS.find((s) => s.key === rawKey);
-  if (!setting) {
-    console.error(`Unknown config key: ${rawKey}. Known keys: ${ALL_SETTINGS.map((s) => s.key).join(", ")}.`);
-    return 1;
-  }
-  if (rawValue === void 0) {
-    console.error(`Missing value for '${rawKey}'. Usage: enigma config ${rawKey} <on|off> [-g|-l]`);
-    return 1;
-  }
-  const value = parseBool(rawValue);
-  if (value === null) {
-    console.error(`Invalid value '${rawValue}' for '${rawKey}'. Use on or off.`);
-    return 1;
-  }
-  const target = setting.globalOnly ? "global" : scope || "global";
-  const result = setting.write(value, target);
-  const where = result.path ? ` in ${result.path}` : "";
-  console.log(`Set ${rawKey} = ${valueLabel(value)} (${target})${where}.`);
-  return 0;
-}
-
-// src/update.ts
-init_util();
-init_config();
-import { homedir as homedir5 } from "os";
-import { join as join9 } from "path";
-import { writeFileSync as writeFileSync6 } from "fs";
-import { spawn, spawnSync } from "child_process";
-import * as p5 from "@clack/prompts";
-var REGISTRY_URL = "https://registry.npmjs.org/enigma-cli/latest";
-var UPDATE_COMMAND = "npm i -g enigma-cli@latest";
-var CACHE_FILE = join9(homedir5(), ".enigma-update-check.json");
-var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
-var CHILD_SCRIPT = [
-  "const fs = require('fs');",
-  "const ctrl = new AbortController();",
-  "const t = setTimeout(() => ctrl.abort(), 5000);",
-  "fetch(process.env.E_URL, { signal: ctrl.signal, headers: { 'user-agent': 'enigma-cli-update-check' } })",
-  "  .then((r) => (r.ok ? r.json() : null))",
-  "  .then((d) => { if (d && d.version) fs.writeFileSync(process.env.E_FILE, JSON.stringify({ latest: d.version, checkedAt: Date.now() })); })",
-  "  .catch(() => {})",
-  "  .finally(() => clearTimeout(t));"
-].join("\n");
-function parseVersion(version) {
-  const core = String(version).trim().replace(/^v/, "").split("-")[0];
-  const [major, minor, patch] = core.split(".").map((n) => parseInt(n, 10) || 0);
-  return [major || 0, minor || 0, patch || 0];
-}
-function isNewer(latest, current) {
-  const a = parseVersion(latest);
-  const b = parseVersion(current);
-  for (let i = 0; i < 3; i++) {
-    if (a[i] > b[i]) return true;
-    if (a[i] < b[i]) return false;
-  }
-  return false;
-}
-function paint(text, code) {
-  return process.stdout.isTTY && !process.env.NO_COLOR ? `\x1B[${code}m${text}\x1B[0m` : text;
-}
-function renderUpdateBox(current, latest) {
-  const lines = [
-    { text: `Update available  ${current} -> ${latest}`, color: "1;33" },
-    { text: `Run ${UPDATE_COMMAND} to update`, color: "36" }
-  ];
-  const width = Math.max(...lines.map((l) => l.text.length));
-  const border = `+${"-".repeat(width + 4)}+`;
-  const blank = `|${" ".repeat(width + 4)}|`;
-  const rows = lines.map((l) => `|${paint(`  ${l.text}${" ".repeat(width - l.text.length)}  `, l.color)}|`);
-  return [border, blank, ...rows, blank, border].join("\n");
-}
-function readCache() {
-  return readJson(CACHE_FILE);
-}
-function scheduleUpdateCheck() {
-  try {
-    const cache = readCache();
-    if (cache && Date.now() - cache.checkedAt < CHECK_INTERVAL_MS) return;
-    writeFileSync6(CACHE_FILE, JSON.stringify({ latest: cache?.latest ?? null, checkedAt: Date.now() }));
-    const child = spawn(process.execPath, ["-e", CHILD_SCRIPT], {
-      detached: true,
-      stdio: "ignore",
-      windowsHide: true,
-      env: { ...process.env, E_URL: REGISTRY_URL, E_FILE: CACHE_FILE }
-    });
-    child.unref();
-  } catch {
-  }
-}
-function runUpdate() {
-  try {
-    const result = spawnSync("npm", ["i", "-g", "enigma-cli@latest"], {
-      stdio: "inherit",
-      shell: process.platform === "win32"
-    });
-    if (result.status === 0) console.log("Updated. Re-run your command to use the new version.");
-    else console.log(`Update did not complete. Run '${UPDATE_COMMAND}' manually.`);
-  } catch {
-    console.log(`Could not run the update. Run '${UPDATE_COMMAND}' manually.`);
-  }
-}
-async function notifyUpdate(current, interactive) {
-  if (!process.stdout.isTTY || process.env.CI) return;
-  try {
-    if (!readConfig().config.updateNotifier) return;
-    scheduleUpdateCheck();
-    const cache = readCache();
-    const latest = cache?.latest ? String(cache.latest).replace(/[^\w.+-]/g, "") : "";
-    if (!latest || !isNewer(latest, current)) return;
-    process.stdout.write(`
-${renderUpdateBox(current, latest)}
-`);
-    if (!interactive) return;
-    const ok = await p5.confirm({ message: `Update now with ${UPDATE_COMMAND}?`, initialValue: true });
-    if (p5.isCancel(ok) || !ok) return;
-    runUpdate();
-  } catch {
-  }
-}
-
-// src/cli.ts
-var __dirname3 = dirname4(fileURLToPath4(import.meta.url));
-var PKG = readJson(join10(__dirname3, "..", "package.json")) || {};
-var COMMANDS = /* @__PURE__ */ new Set(["install", "security", "guard", "seal", "check", "config", "help", "version"]);
-function parseArgs(argv) {
-  const opts = {
-    command: null,
-    positionals: [],
-    scope: null,
-    agents: [],
-    allAgents: false,
-    skills: [],
-    skillsOnly: false,
-    memoryOnly: false,
-    prune: true,
-    keepModified: false,
-    bypass: null,
-    noBypass: false,
-    force: false,
-    all: false,
-    yes: false,
-    dryRun: false,
-    help: false,
-    version: false
-  };
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    const next = () => argv[++i];
-    if (i === 0 && COMMANDS.has(a)) {
-      opts.command = a;
-      continue;
-    }
-    switch (a) {
-      case "-g":
-      case "--global":
-        opts.scope = "global";
-        break;
-      case "-l":
-      case "--local":
-        opts.scope = "local";
-        break;
-      case "-a":
-      case "--agent":
-        opts.agents.push(...next().split(","));
-        break;
-      case "-s":
-      case "--skill":
-        opts.skills.push(...next().split(","));
-        break;
-      case "--all":
-        opts.allAgents = true;
-        opts.all = true;
-        break;
-      case "--skills-only":
-        opts.skillsOnly = true;
-        break;
-      case "--memory-only":
-        opts.memoryOnly = true;
-        break;
-      case "--no-prune":
-        opts.prune = false;
-        break;
-      case "--keep-modified":
-        opts.keepModified = true;
-        break;
-      case "--bypass":
-        opts.bypass = (opts.bypass || []).concat(next().split(","));
-        break;
-      case "--no-bypass":
-        opts.noBypass = true;
-        break;
-      case "--force":
-        opts.force = true;
-        break;
-      case "-y":
-      case "--yes":
-        opts.yes = true;
-        break;
-      case "--dry-run":
-        opts.dryRun = true;
-        break;
-      case "-h":
-      case "--help":
-        opts.help = true;
-        break;
-      case "-v":
-      case "--version":
-        opts.version = true;
-        break;
-      default:
-        if (a.startsWith("-")) {
-          console.error(`Unknown option: ${a}`);
-          process.exit(1);
-        } else if (opts.command) {
-          opts.positionals.push(a);
-        } else {
-          console.error(`Unknown command: ${a}`);
-          process.exit(1);
-        }
-    }
-  }
-  return opts;
-}
-function printHelp() {
-  console.log(`
-enigma - everything you need to work with a coding agent
-
-Usage:
-  enigma [command] [options]
-
-Commands:
-  (none)               Interactive hub: configure settings or set up features
-  install              Install/update agent skills (Claude Code, Codex, OpenCode)
-  security             Set up git security hooks in the current repo
-  guard [--all]        Run the commit guard (staged files, or --all for every tracked file)
-  config [key val]     Configure settings: no args opens the interactive menu;
-                       'config <key> <on|off> [-g|-l]' sets one (e.g. config claude-attribution on)
-  seal                 Maintenance: (re)compute skill content hashes
-  check                Integrity gate: verify skills are well-formed and sealed
-  help, version
-
-Config keys: commit-emoji, update-notifier, fullscreen, claude-attribution,
-             bypass-claude, bypass-codex, bypass-opencode
-
-Install options:
-  -g, --global         Install at user level
-  -l, --local          Install into the current project
-  -a, --agent <name>   Target agent(s) (default: auto-detect installed)
-  -s, --skill <name>   Skill(s) to install (default: all)
-      --all            Target every supported agent, ignoring detection
-      --skills-only    Only skill folders   --memory-only  Only memory files
-      --no-prune       Keep orphaned skills  --keep-modified  Don't overwrite local edits
-      --bypass <names> Disable approval prompts for agents (claude,codex,opencode | all | none)
-      --no-bypass      Never configure permission bypass (skip the prompt)
-      --dry-run        Show the plan without writing
-
-Security options:
-      --force          Override an existing core.hooksPath
-
-Global:
-  -y, --yes            Non-interactive   -h, --help   -v, --version
-
-Examples:
-  enigma                              # interactive
-  enigma install --global             # skills for detected agents, user level
-  enigma install --all -y             # every supported agent, non-interactive
-  enigma install -y --bypass claude,codex  # also disable approval prompts (unattended)
-  enigma security                     # configure git hooks (choose protections)
-  enigma config                       # show effective runtime config
-  enigma config commit-emoji off      # opt out of commit-message emojis (global)
-`);
-}
-async function run(argv) {
-  const opts = parseArgs(argv);
-  const interactive = Boolean(process.stdout.isTTY) && !opts.yes;
-  const version = PKG.version || "0.0.0";
-  if (opts.help || opts.command === "help") {
-    printHelp();
-    await notifyUpdate(version, interactive);
-    return;
-  }
-  if (opts.version || opts.command === "version") {
-    console.log(version);
-    await notifyUpdate(version, interactive);
-    return;
-  }
-  if (opts.command === "seal") return sealSources();
-  if (opts.command === "check") return checkSources();
-  if (opts.command === "guard") {
-    process.exit(runGuardCli(opts.all));
-  }
-  if (opts.command === "config") {
-    process.exit(await runConfigCli(opts.positionals, opts.scope, interactive));
-  }
-  if (opts.command === "install") {
-    p6.intro("enigma - install agent skills");
-    await installSkills(opts, interactive);
-    p6.outro("Done.");
-    await notifyUpdate(version, interactive);
-    return;
-  }
-  if (opts.command === "security") {
-    p6.intro("enigma - git security hooks");
-    const done = await setupGitHooks(opts, interactive);
-    p6.outro(done ? "Git hooks configured." : "No changes made.");
-    await notifyUpdate(version, interactive);
-    return;
-  }
-  if (!interactive) {
-    await installSkills(opts, interactive);
-    await notifyUpdate(version, interactive);
-    return;
-  }
-  const { runHomeTui: runHomeTui3 } = isBun() ? await Promise.resolve().then(() => (init_opentui(), opentui_exports)) : await Promise.resolve().then(() => (init_settings(), settings_exports));
-  await runHomeTui3({
-    agents: discoverAgents().map((a) => ({ name: a.name, label: a.label, installed: a.installed })),
-    protections: GUARD_PROTECTIONS,
-    runAction: async (req) => {
-      const reporter = collectReporter();
-      const title = req.action === "skills" ? "Install agent skills" : "Git security hooks";
-      try {
-        if (req.action === "skills") {
-          await installSkills({ ...opts, scope: req.scope ?? opts.scope, agents: req.agents ?? [], allAgents: !(req.agents && req.agents.length) }, false, reporter);
-          return { ok: true, title, lines: reporter.lines };
-        }
-        const done = await setupGitHooks({ ...opts, protections: req.protections, force: true }, false, reporter);
-        return { ok: done, title, lines: reporter.lines };
-      } catch (err) {
-        reporter.error(`Error: ${err.message}`);
-        return { ok: false, title, lines: reporter.lines };
-      }
-    }
-  });
-  await notifyUpdate(version, interactive);
-}
-
-// src/bin/enigma.ts
-run(process.argv.slice(2)).catch((err) => {
-  console.error(err);
-  process.exit(1);
-});