oxe-cc 0.6.5 → 0.7.0

package/bin/oxe-cc.js

@@ -18,6 +18,9 @@ const oxeAgentInstall = require(path.join(__dirname, 'lib', 'oxe-agent-install.c
 const oxeWorkflows = require(path.join(__dirname, 'lib', 'oxe-workflows.cjs'));
 const oxeInstallResolve = require(path.join(__dirname, 'lib', 'oxe-install-resolve.cjs'));
 const oxeNpmVersion = require(path.join(__dirname, 'lib', 'oxe-npm-version.cjs'));
+const oxeDashboard = require(path.join(__dirname, 'lib', 'oxe-dashboard.cjs'));
+const oxeOperational = require(path.join(__dirname, 'lib', 'oxe-operational.cjs'));
+const oxeAzure = require(path.join(__dirname, 'lib', 'oxe-azure.cjs'));
 
 /** Merge markers for ~/.copilot/copilot-instructions.md (bloco OXE). */
 const OXE_INST_BEGIN = '<!-- oxe-cc:install-begin -->';
@@ -259,6 +262,7 @@ function buildUninstallFooter(u) {
       `${p}${rm} integrações OXE no repositório (.cursor, .github, .claude, .copilot, .opencode, … conforme flags).`
     );
   }
+  if (u.globalCli) bullets.push(`${p}${rm} também o pacote npm global oxe-cc do PATH.`);
   if (!u.noProject) {
     bullets.push(
       `${p}${u.dryRun ? 'Seriam removidas' : 'Removidas'} no repositório: .oxe/workflows, .oxe/templates, oxe/ e commands/oxe (o que existir).`
@@ -328,6 +332,8 @@ function parseInstallArgs(argv) {
     jsonOutput: false,
     /** Lembretes agregados scan/compact em `status`. */
     statusHints: false,
+    /** Visão extendida CLI-first: coverage matrix + readiness gate no terminal. */
+    statusFull: false,
     restPositional: [],
   };
   for (let i = 0; i < argv.length; i++) {
@@ -372,6 +378,7 @@ function parseInstallArgs(argv) {
       out.dir = path.resolve(argv[++i]);
     } else if (a === '--json') out.jsonOutput = true;
     else if (a === '--hints') out.statusHints = true;
+    else if (a === '--full') out.statusFull = true;
     else if (!a.startsWith('-')) out.restPositional.push(a);
     else {
       out.parseError = true;
@@ -1014,6 +1021,9 @@ function ensureGitignoreIgnoresOxeDir(projectRoot, opts = {}) {
 function bootstrapOxe(target, opts) {
   const oxeDir = path.join(target, '.oxe');
   const codebaseDir = path.join(oxeDir, 'codebase');
+  const capabilitiesDir = path.join(oxeDir, 'capabilities');
+  const investigationsDir = path.join(oxeDir, 'investigations');
+  const dashboardDir = path.join(oxeDir, 'dashboard');
   const stateSrc = path.join(PKG_ROOT, 'oxe', 'templates', 'STATE.md');
   const stateDest = path.join(oxeDir, 'STATE.md');
   const configSrc = path.join(PKG_ROOT, 'oxe', 'templates', 'config.template.json');
@@ -1025,12 +1035,15 @@ function bootstrapOxe(target, opts) {
   }
 
   if (opts.dryRun) {
-    console.log(`${dim}init${reset}  ${oxeDir}/ (STATE.md, config.json, codebase/)`);
+    console.log(`${dim}init${reset}  ${oxeDir}/ (STATE.md, config.json, codebase/, capabilities/, investigations/, dashboard/, runs/, OXE-EVENTS.ndjson, ACTIVE-RUN.json)`);
     ensureGitignoreIgnoresOxeDir(target, { dryRun: true });
     return;
   }
 
   ensureDir(codebaseDir);
+  ensureDir(capabilitiesDir);
+  ensureDir(investigationsDir);
+  ensureDir(dashboardDir);
 
   if (!fs.existsSync(stateDest) || opts.force) {
     copyFile(stateSrc, stateDest, { dryRun: false });
@@ -1067,14 +1080,107 @@ function bootstrapOxe(target, opts) {
     ensureDir(workstreamsDir);
   }
 
+  const sessionsDir = path.join(oxeDir, 'sessions');
+  if (!fs.existsSync(sessionsDir)) {
+    ensureDir(sessionsDir);
+  }
+
+  const globalDir = path.join(oxeDir, 'global');
+  if (!fs.existsSync(globalDir)) {
+    ensureDir(globalDir);
+  }
+
+  const globalMilestonesDir = path.join(globalDir, 'milestones');
+  if (!fs.existsSync(globalMilestonesDir)) {
+    ensureDir(globalMilestonesDir);
+  }
+
+  const lessonsSrc = path.join(PKG_ROOT, 'oxe', 'templates', 'LESSONS.template.md');
+  const lessonsDest = path.join(globalDir, 'LESSONS.md');
+  if (fs.existsSync(lessonsSrc) && !fs.existsSync(lessonsDest)) {
+    copyFile(lessonsSrc, lessonsDest, { dryRun: false });
+    console.log(`${green}init${reset}  ${lessonsDest}`);
+  }
+
+  const milestonesSrc = path.join(PKG_ROOT, 'oxe', 'templates', 'MILESTONES.template.md');
+  const milestonesDest = path.join(globalDir, 'MILESTONES.md');
+  if (fs.existsSync(milestonesSrc) && !fs.existsSync(milestonesDest)) {
+    copyFile(milestonesSrc, milestonesDest, { dryRun: false });
+    console.log(`${green}init${reset}  ${milestonesDest}`);
+  }
+
   const memoryDir = path.join(oxeDir, 'memory');
   if (!fs.existsSync(memoryDir)) {
     ensureDir(memoryDir);
   }
 
+  const runsDir = path.join(oxeDir, 'runs');
+  if (!fs.existsSync(runsDir)) {
+    ensureDir(runsDir);
+  }
+
+  const runtimeSrc = path.join(PKG_ROOT, 'oxe', 'templates', 'EXECUTION-RUNTIME.template.md');
+  const runtimeDest = path.join(oxeDir, 'EXECUTION-RUNTIME.md');
+  if (fs.existsSync(runtimeSrc) && !fs.existsSync(runtimeDest)) {
+    copyFile(runtimeSrc, runtimeDest, { dryRun: false });
+    console.log(`${green}init${reset}  ${runtimeDest}`);
+  }
+
+  const activeRunSrc = path.join(PKG_ROOT, 'oxe', 'templates', 'ACTIVE-RUN.template.json');
+  const activeRunDest = path.join(oxeDir, 'ACTIVE-RUN.json');
+  if (fs.existsSync(activeRunSrc) && !fs.existsSync(activeRunDest)) {
+    copyFile(activeRunSrc, activeRunDest, { dryRun: false });
+    console.log(`${green}init${reset}  ${activeRunDest}`);
+  }
+
+  const eventsDest = path.join(oxeDir, 'OXE-EVENTS.ndjson');
+  if (!fs.existsSync(eventsDest)) {
+    fs.writeFileSync(eventsDest, '', 'utf8');
+    console.log(`${green}init${reset}  ${eventsDest}`);
+  }
+
+  const checkpointsSrc = path.join(PKG_ROOT, 'oxe', 'templates', 'CHECKPOINTS.template.md');
+  const checkpointsDest = path.join(oxeDir, 'CHECKPOINTS.md');
+  if (fs.existsSync(checkpointsSrc) && !fs.existsSync(checkpointsDest)) {
+    copyFile(checkpointsSrc, checkpointsDest, { dryRun: false });
+    console.log(`${green}init${reset}  ${checkpointsDest}`);
+  }
+
+  const capabilitiesSrc = path.join(PKG_ROOT, 'oxe', 'templates', 'CAPABILITIES.template.md');
+  const capabilitiesDest = path.join(oxeDir, 'CAPABILITIES.md');
+  if (fs.existsSync(capabilitiesSrc) && !fs.existsSync(capabilitiesDest)) {
+    copyFile(capabilitiesSrc, capabilitiesDest, { dryRun: false });
+    console.log(`${green}init${reset}  ${capabilitiesDest}`);
+  }
+
+  const investigationsIndexDest = path.join(oxeDir, 'INVESTIGATIONS.md');
+  if (!fs.existsSync(investigationsIndexDest)) {
+    fs.writeFileSync(
+      investigationsIndexDest,
+      '# OXE — Investigações\n\n| Data | Ficheiro | Objetivo | Modo | Estado |\n|------|----------|----------|------|--------|\n',
+      'utf8'
+    );
+    console.log(`${green}init${reset}  ${investigationsIndexDest}`);
+  }
+
   ensureGitignoreIgnoresOxeDir(target, { dryRun: false });
 }
 
+/**
+ * @param {string} url
+ */
+function openUrlInBrowser(url) {
+  if (process.platform === 'win32') {
+    spawnSync('cmd', ['/c', 'start', '', url], { stdio: 'ignore', detached: true, shell: false });
+    return;
+  }
+  if (process.platform === 'darwin') {
+    spawnSync('open', [url], { stdio: 'ignore', detached: true, shell: false });
+    return;
+  }
+  spawnSync('xdg-open', [url], { stdio: 'ignore', detached: true, shell: false });
+}
+
 /**
  * Lembretes de rotina (scan/compact antigos) para `status --hints` ou JSON.
  * @param {string} target
@@ -1120,6 +1226,7 @@ function printOxeHealthDiagnostics(target, c, diagOpts = {}) {
   const { config } = oxeHealth.loadOxeConfigMerged(target);
 
   console.log(`\n  ${c ? cyan : ''}▸ Coerência .oxe/ e config${reset}`);
+  console.log(`  ${c ? dim : ''}Saúde lógica:${c ? reset : ''} ${r.healthStatus}`);
 
   if (r.configParseError) {
     console.log(`  ${red}FALHA${reset} config.json: ${r.configParseError}`);
@@ -1138,6 +1245,34 @@ function printOxeHealthDiagnostics(target, c, diagOpts = {}) {
   if (r.phase) {
     console.log(`  ${c ? dim : ''}Fase (STATE.md):${c ? reset : ''} ${r.phase}`);
   }
+  if (r.activeSession) {
+    console.log(`  ${c ? dim : ''}Sessão ativa:${c ? reset : ''} ${r.activeSession}`);
+  }
+    if (r.planReviewStatus) {
+      console.log(`  ${c ? dim : ''}Revisão do plano:${c ? reset : ''} ${r.planReviewStatus}`);
+    }
+    if (r.activeRun && r.activeRun.run_id) {
+      console.log(`  ${c ? dim : ''}Run ativo:${c ? reset : ''} ${r.activeRun.run_id} (${r.activeRun.status || 'planned'})`);
+    }
+    if (r.eventsSummary) {
+      console.log(`  ${c ? dim : ''}Tracing:${c ? reset : ''} ${r.eventsSummary.total} evento(s)`);
+    }
+  if (r.planSelfEvaluation && r.planSelfEvaluation.hasSection) {
+    const best = r.planSelfEvaluation.bestPlan || '—';
+    const conf =
+      typeof r.planSelfEvaluation.confidence === 'number' ? `${r.planSelfEvaluation.confidence}%` : '—';
+    console.log(`  ${c ? dim : ''}Plano (autoavaliação):${c ? reset : ''} melhor=${best} | confiança=${conf}`);
+  }
+  if (r.azureActive && r.azure) {
+    console.log(`  ${c ? dim : ''}Azure:${c ? reset : ''} ${r.azure.authStatus && r.azure.authStatus.login_active ? 'login ativo' : 'sem login'} | subscription=${r.azure.profile && (r.azure.profile.subscription_name || r.azure.profile.subscription_id) || '—'}`);
+    console.log(`  ${c ? dim : ''}Azure inventory:${c ? reset : ''} total=${r.azure.inventorySummary ? r.azure.inventorySummary.total : 0} | pendências=${r.azure.pendingOperations || 0}`);
+    if (r.azure.inventoryStale && r.azure.inventoryStale.stale) {
+      console.log(`  ${yellow}AVISO${reset} Inventário Azure stale — rode ${cyan}npx oxe-cc azure sync${reset}`);
+    }
+    for (const warning of r.azure.warnings || []) {
+      console.log(`  ${yellow}AVISO${reset} ${warning}`);
+    }
+  }
 
   if (!skipAge) {
     if (config.scan_max_age_days > 0 && r.scanDate && r.stale.stale) {
@@ -1175,6 +1310,24 @@ function printOxeHealthDiagnostics(target, c, diagOpts = {}) {
   for (const w of r.phaseWarn) {
     console.log(`  ${yellow}AVISO${reset} ${w}`);
   }
+  for (const w of r.runtimeWarn) {
+    console.log(`  ${yellow}AVISO${reset} ${w}`);
+  }
+  for (const w of r.reviewWarn) {
+    console.log(`  ${yellow}AVISO${reset} ${w}`);
+  }
+  for (const w of r.capabilityWarn) {
+    console.log(`  ${yellow}AVISO${reset} ${w}`);
+  }
+  for (const w of r.investigationWarn) {
+    console.log(`  ${yellow}AVISO${reset} ${w}`);
+  }
+  for (const w of r.sessionWarn) {
+    console.log(`  ${yellow}AVISO${reset} ${w}`);
+  }
+  for (const w of r.installWarn) {
+    console.log(`  ${yellow}AVISO${reset} ${w}`);
+  }
   if (r.summaryGapWarn) {
     console.log(`  ${yellow}AVISO${reset} ${r.summaryGapWarn}`);
   }
@@ -1186,15 +1339,100 @@ function printOxeHealthDiagnostics(target, c, diagOpts = {}) {
   }
 }
 
+/**
+ * Imprime uma célula de coverage com cor ANSI.
+ * @param {boolean} exists
+ * @param {string} label
+ */
+function coverageCell(exists, label) {
+  const c = useAnsiColors();
+  return exists ? `${c ? green : ''}✓ ${label}${c ? reset : ''}` : `${c ? dim : ''}✗ ${label}${c ? reset : ''}`;
+}
+
+/**
+ * Visão CLI-first: health + coverage matrix + readiness gate no terminal.
+ * @param {string} target
+ */
+function runStatusFull(target) {
+  const c = useAnsiColors();
+  const report = oxeHealth.buildHealthReport(target);
+  const p = oxeHealth.oxePaths(target);
+  const activeSession = report.activeSession || null;
+  let sp = p;
+  if (activeSession) {
+    sp = oxeHealth.scopedOxePaths(target, activeSession);
+  }
+
+  printSection('OXE ▸ status --full');
+  console.log(`  ${c ? green : ''}Projeto:${c ? reset : ''} ${c ? cyan : ''}${target}${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}Sessão:${c ? reset : ''} ${c ? cyan : ''}${activeSession || 'modo legado'}${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}Fase:${c ? reset : ''} ${report.phase || '—'}`);
+
+  const healthColor = report.healthStatus === 'healthy' ? green : report.healthStatus === 'warning' ? yellow : red;
+  console.log(`  ${c ? green : ''}Saúde:${c ? reset : ''} ${c ? healthColor : ''}${report.healthStatus}${c ? reset : ''}`);
+
+  // Coverage matrix
+  const specPath = activeSession && sp.spec ? sp.spec : p.spec;
+  const planPath = activeSession && sp.plan ? sp.plan : p.plan;
+  const verifyPath = activeSession && sp.verify ? sp.verify : p.verify;
+  const specExists = fs.existsSync(specPath);
+  const planExists = fs.existsSync(planPath);
+  const verifyExists = fs.existsSync(verifyPath);
+  const lessonsExists = fs.existsSync(p.globalLessons || p.lessons);
+  const codebaseExists = fs.existsSync(p.codebase);
+
+  console.log(`\n  ${c ? yellow : ''}Coverage matrix${c ? reset : ''}`);
+  console.log(`  ${coverageCell(codebaseExists, 'codebase scan')}   ${coverageCell(specExists, 'SPEC.md')}   ${coverageCell(planExists, 'PLAN.md')}   ${coverageCell(verifyExists, 'VERIFY.md')}   ${coverageCell(lessonsExists, 'LESSONS.md')}`);
+
+  // Readiness gate
+  const ready = specExists && planExists && !report.planWarn.length && !report.runtimeWarn.length;
+  const gateColor = ready ? green : yellow;
+  console.log(`\n  ${c ? yellow : ''}Readiness gate${c ? reset : ''}`);
+  console.log(`  ${c ? gateColor : ''}${ready ? '✓ Pronto para executar' : '✗ Não pronto para executar'}${c ? reset : ''}`);
+  if (!specExists) console.log(`  ${c ? dim : ''}  • SPEC.md ausente — rode /oxe-spec${c ? reset : ''}`);
+  if (!planExists) console.log(`  ${c ? dim : ''}  • PLAN.md ausente — rode /oxe-plan${c ? reset : ''}`);
+  if (report.planWarn.length) {
+    for (const w of report.planWarn) {
+      console.log(`  ${c ? yellow : ''}  • ${w}${c ? reset : ''}`);
+    }
+  }
+
+  // Active run summary
+  if (report.activeRun) {
+    const ar = report.activeRun;
+    console.log(`\n  ${c ? yellow : ''}Active run${c ? reset : ''}`);
+    console.log(`  ${c ? dim : ''}Run:${c ? reset : ''} ${ar.run_id || '—'}   ${c ? dim : ''}Estado:${c ? reset : ''} ${ar.status || '—'}   ${c ? dim : ''}Onda:${c ? reset : ''} ${ar.current_wave != null ? ar.current_wave : '—'}`);
+  }
+
+  // Plan self-evaluation
+  if (report.planSelfEvaluation) {
+    const pse = report.planSelfEvaluation;
+    console.log(`\n  ${c ? yellow : ''}Autoavaliação do plano${c ? reset : ''}`);
+    if (pse.best_plan_current != null) {
+      const bestColor = pse.best_plan_current ? green : red;
+      console.log(`  ${c ? dim : ''}Melhor plano atual:${c ? reset : ''} ${c ? bestColor : ''}${pse.best_plan_current ? 'sim' : 'não'}${c ? reset : ''}`);
+    }
+    if (pse.confidence != null) {
+      const confColor = Number(pse.confidence) >= 70 ? green : Number(pse.confidence) >= 50 ? yellow : red;
+      console.log(`  ${c ? dim : ''}Confiança:${c ? reset : ''} ${c ? confColor : ''}${pse.confidence}%${c ? reset : ''}`);
+    }
+  }
+
+  console.log(`\n  ${c ? dim : ''}Próximo passo:${c ? reset : ''} ${c ? cyan : ''}${report.next && report.next.cursorCmd ? report.next.cursorCmd : '—'}${c ? reset : ''}`);
+  console.log(`  ${c ? dim : ''}Motivo:${c ? reset : ''} ${report.next && report.next.reason ? report.next.reason : '—'}`);
+  console.log(`\n  ${c ? dim : ''}Para visão operacional completa (web): ${cyan}oxe-cc dashboard${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}✓${c ? reset : ''} status --full concluído.\n`);
+}
+
 /**
  * @param {string} target
- * @param {{ json?: boolean, hints?: boolean }} [opts]
+ * @param {{ json?: boolean, hints?: boolean, full?: boolean }} [opts]
  */
 function runStatus(target, opts = {}) {
   const { config } = oxeHealth.loadOxeConfigMerged(target);
-  const next = oxeHealth.suggestNextStep(target, { discuss_before_plan: config.discuss_before_plan });
   const report = oxeHealth.buildHealthReport(target);
   const routineHints = collectOxeRoutineHints(target, report, config);
+  const next = report.next;
 
   if (opts.json) {
     /** @type {Record<string, unknown>} */
@@ -1206,15 +1444,30 @@ function runStatus(target, opts = {}) {
       reason: report.next.reason,
       artifacts: report.next.artifacts,
       phase: report.phase,
+      healthStatus: report.healthStatus,
+      activeSession: report.activeSession,
       scanDate: report.scanDate,
       staleScan: report.stale,
       compactDate: report.compactDate,
-      staleCompact: report.staleCompact,
-      diagnostics: {
+        staleCompact: report.staleCompact,
+        planSelfEvaluation: report.planSelfEvaluation,
+        planReviewStatus: report.planReviewStatus,
+        activeRun: report.activeRun,
+        eventsSummary: report.eventsSummary,
+        memoryLayers: report.memoryLayers,
+        azureActive: report.azureActive,
+        azure: report.azure,
+        diagnostics: {
         configParseError: report.configParseError,
         typeErrors: report.typeErrors,
         unknownConfigKeys: report.unknownConfigKeys,
         phaseWarnings: report.phaseWarn,
+        runtimeWarnings: report.runtimeWarn,
+        reviewWarnings: report.reviewWarn,
+        capabilityWarnings: report.capabilityWarn,
+        investigationWarnings: report.investigationWarn,
+        sessionWarnings: report.sessionWarn,
+        installWarnings: report.installWarn,
         summaryGapWarning: report.summaryGapWarn,
         specWarnings: report.specWarn,
         planWarnings: report.planWarn,
@@ -1255,7 +1508,10 @@ function runStatus(target, opts = {}) {
   console.log(`  ${c ? dim : ''}Motivo:${c ? reset : ''} ${next.reason}`);
 
   printSummaryAndNextSteps(c, {
-    bullets: [`Artefatos em jogo: ${next.artifacts.join(', ')}`],
+    bullets: [
+      `Saúde lógica: ${report.healthStatus}`,
+      `Artefatos em jogo: ${next.artifacts.join(', ')}`,
+    ],
     nextSteps: [
       { desc: 'Diagnóstico completo (inclui pacote de workflows):', cmd: 'npx oxe-cc doctor' },
       { desc: 'Ação sugerida no agente:', cmd: next.cursorCmd },
@@ -1367,13 +1623,17 @@ function runDoctor(target) {
   }
 
   printOxeHealthDiagnostics(target, c);
-
-  console.log(`\n  ${green}Diagnóstico OK — nenhum bloqueio crítico encontrado.${reset}`);
+  const report = oxeHealth.buildHealthReport(target);
+  const statusColor = report.healthStatus === 'healthy' ? green : report.healthStatus === 'warning' ? yellow : red;
+  console.log(`\n  ${statusColor}Diagnóstico ${report.healthStatus}${reset}`);
+  if (report.healthStatus === 'broken') {
+    process.exitCode = 1;
+  }
   printSummaryAndNextSteps(c, {
     bullets: [
       `Projeto em ${target}`,
       `Workflows conferidos em ${wfLabel}`,
-      'Node.js e (quando existir) config.json validados',
+      `Saúde lógica: ${report.healthStatus}`,
     ],
     nextSteps: [
       { desc: 'Mapear ou atualizar o codebase no agente:', cmd: '/oxe-scan' },
@@ -1413,6 +1673,98 @@ function installGlobalCliPackage() {
   return false;
 }
 
+/**
+ * `npm uninstall -g oxe-cc` com a mesma semântica cross-platform do instalador.
+ * @returns {boolean}
+ */
+function uninstallGlobalCliPackage() {
+  const name = readPkgName();
+  const c = useAnsiColors();
+  const dimOrEmpty = c ? dim : '';
+  const resetOrEmpty = c ? reset : '';
+  console.log(`\n  ${dimOrEmpty}npm uninstall -g ${name}${resetOrEmpty}\n`);
+  const r = spawnSync('npm', ['uninstall', '-g', name], {
+    stdio: 'inherit',
+    shell: true,
+    env: process.env,
+  });
+  if (r.status === 0) {
+    console.log(
+      `\n  ${c ? green : ''}✓${c ? reset : ''} pacote global ${c ? cyan : ''}${name}${c ? reset : ''} removido do npm global.\n`
+    );
+    return true;
+  }
+  console.log(
+    `\n  ${c ? yellow : ''}⚠${c ? reset : ''} npm uninstall -g falhou. Remova manualmente: ${c ? cyan : ''}npm uninstall -g ${name}${c ? reset : ''}\n`
+  );
+  return false;
+}
+
+/**
+ * Best-effort: detecta se esta execução vem de uma instalação global do npm.
+ * Usa `npm root -g` para evitar confundir execução local do repositório com pacote global.
+ * @returns {boolean}
+ */
+function isRunningFromGlobalNpmInstall() {
+  try {
+    const r = spawnSync('npm', ['root', '-g'], {
+      encoding: 'utf8',
+      shell: true,
+      env: process.env,
+    });
+    if (r.status !== 0) return false;
+    const root = String(r.stdout || '').trim();
+    if (!root) return false;
+    const rel = path.relative(path.resolve(root), PKG_ROOT);
+    return rel && !rel.startsWith('..') && !path.isAbsolute(rel);
+  } catch {
+    return false;
+  }
+}
+
+/** @returns {string[]} */
+function updateForwardedInstallFlags() {
+  return [
+    '--cursor',
+    '--copilot',
+    '--copilot-cli',
+    '--all-agents',
+    '--opencode',
+    '--gemini',
+    '--codex',
+    '--windsurf',
+    '--antigravity',
+    '--vscode',
+    '--no-commands',
+    '--no-agents',
+    '--no-init-oxe',
+    '--oxe-only',
+    '--global',
+    '--local',
+    '--ide-global',
+    '--ide-local',
+    '--global-cli',
+    '-g',
+    '--no-global-cli',
+    '-l',
+    '--no-install-config',
+    '--force',
+    '-f',
+    '--all',
+    '-a',
+    '--config-dir',
+    '-c',
+  ];
+}
+
+/**
+ * @param {string[]} rest
+ * @returns {boolean}
+ */
+function updateArgsExplicitlyControlGlobalCli(rest) {
+  return rest.includes('--global-cli') || rest.includes('-g') || rest.includes('--no-global-cli') || rest.includes('-l');
+}
+
 /**
  * After copying OXE into the project: optionally install the CLI globally (pergunta interativa ou flags).
  * @param {InstallOpts} opts
@@ -1496,6 +1848,10 @@ ${green}Uso:${reset}
   npx oxe-cc doctor [opções] [pasta-do-projeto]
   npx oxe-cc status [opções] [pasta-do-projeto]
   npx oxe-cc init-oxe [opções] [pasta-do-projeto]
+  npx oxe-cc dashboard [opções] [pasta-do-projeto]
+  npx oxe-cc runtime <status|start|pause|resume|replay> [opções] [pasta-do-projeto]
+  npx oxe-cc azure <status|doctor|auth|sync|find|servicebus|eventgrid|sql|operations> [opções] [pasta-do-projeto]
+  npx oxe-cc capabilities <list|install|remove|update> [opções] [id]
   npx oxe-cc uninstall [opções] [pasta-do-projeto]
   npx oxe-cc update [opções] [argumentos extras…]
 
@@ -1504,6 +1860,7 @@ ${green}uninstall${reset} (remove OXE da pasta do usuário + pastas de workflows
   --all-agents                           também remove ficheiros multi-plataforma (com --copilot-cli implícito)
   --ide-local                            remove integrações IDE neste repositório (.cursor, .github, .claude, .copilot, …)
   --ide-only                             não apagar .oxe/workflows, oxe/, etc. no projeto
+  --global-cli, -g                       também executa npm uninstall -g oxe-cc
   --config-dir <caminho>                 com exatamente uma flag IDE acima (não combina com --ide-local)
   --dry-run
   --dir <pasta>                          raiz do projeto (padrão: diretório atual)
@@ -1513,9 +1870,70 @@ ${green}update${reset} (executa npx oxe-cc@latest --force na pasta do projeto)
   --if-newer                             só executa o npx se existir versão mais nova no npm (falha de rede/registry: saída 2, sem npx)
   --dir <pasta>                          pasta em que o npx roda (padrão: atual; ignorada com --check)
   --dry-run                              mostra o comando sem executar
-  [argumentos extras…]                   repassados ao oxe-cc (ex.: --cursor --global)
+  [argumentos extras…]                   repassados ao oxe-cc (ex.: --cursor --global, --ide-local, --global-cli)
   ${dim}CI / sem rede:${reset} OXE_UPDATE_SKIP_REGISTRY=1 desativa consultas (--check sai 2; --if-newer sai 2 sem npx)
 
+${green}dashboard${reset} (interface web local para revisão e aprovação do plano)
+  --port <número>                        porta local (padrão: 4173)
+  --no-open                              não abre o browser automaticamente
+  --session <sessions/sNNN-slug>         força visualização de uma sessão específica
+  --dump-context                         imprime JSON consolidado e sai
+  --dir <pasta>                          raiz do projeto (padrão: diretório atual)
+
+${green}runtime${reset} (controle operacional explícito do ACTIVE-RUN)
+  status                                 mostra o run ativo resolvido para a sessão atual
+  start                                  cria um novo run com tracing inicial
+  pause                                  pausa o run ativo e preserva o cursor
+  resume                                 retoma o run ativo
+  replay                                 marca replay parcial por onda ou tarefa
+  --session <sessions/sNNN-slug>         força sessão específica
+  --wave <número>                        fixa onda atual/cursor
+  --task <Tn>                            fixa tarefa atual/cursor
+  --mode <complete|wave|task>            modo operacional do cursor
+  --reason <texto>                       motivo explícito da transição
+  --dir <pasta>                          raiz do projeto (padrão: diretório atual)
+
+${green}azure${reset} (provider Azure nativo via Azure CLI no Windows)
+  status                                 estado compacto: CLI, login, subscription, inventário, pendências
+  doctor                                 valida Azure CLI, login, subscription e inventário
+  auth login [--tenant <id>]             login interativo via Azure CLI (Entra ID: use --tenant <tenant-id>)
+  auth whoami                            mostra identidade, tenant, subscription e cloud
+  auth set-subscription --subscription <id|nome>
+                                         fixa a subscription operacional do projeto
+  Fluxo corporativo: auth login --tenant <tenant-id> → auth set-subscription --subscription <dev-sub-id>
+  sync                                   sincroniza inventário via Azure Resource Graph
+  sync --diff                            sincroniza e mostra recursos adicionados/removidos
+  find <texto>                           busca recursos no inventário local materializado
+  find <texto> --type <tipo>             filtra por tipo de serviço (ex.: servicebus, eventgrid, sql)
+  find <texto> --filter-rg <rg>          filtra por resource group
+  servicebus <list|show|plan|apply>      namespace, queue, topic, subscription
+  eventgrid <list|show|plan|apply>       topic, system-topic, event-subscription
+  sql <list|show|plan|apply>             server, database, firewall-rule
+  operations list                        histórico de operações planejadas/aplicadas/pendentes
+  --kind <tipo>                          ex.: namespace, queue, topic, system-topic, database
+  --resource-group <rg>                  resource group alvo
+  --name <nome>                          nome principal do recurso
+  --namespace <nome>                     namespace Service Bus
+  --topic-name <nome>                    topic Service Bus
+  --subscription-name <nome>             subscription de topic Service Bus
+  --source-resource-id <id>              origem de event subscription
+  --endpoint <url|id>                    endpoint de Event Grid
+  --server <nome> / --database <nome>    recursos Azure SQL
+  --location <região>                    localização alvo
+  --admin-user <user>                    admin do SQL server (plan/apply)
+  --admin-password-env <ENV>             variável de ambiente com password do SQL admin
+  --start-ip-address / --end-ip-address  faixa de firewall rule para Azure SQL
+  --approve                              aplica mutação já planejada após checkpoint formal
+  --dry-run                              pré-visualiza comando sem executar nem criar artefatos
+  --diff                                 (sync) exibe diff de recursos adicionados/removidos
+  --type <tipo>                          (find) filtra por família de serviço
+  --filter-rg <rg>                       (find) filtra por resource group
+  --tenant <id>                          (auth login) tenant Entra ID para contas corporativas
+  --vpn-confirmed                        confirma conexão VPN quando vpn_required está configurado
+  --override-policy                      override explícito para policy deny_unless_overridden
+  --session <sessions/sNNN-slug>         associa a operação ao runtime da sessão ativa
+  --dir <pasta>                          raiz do projeto (padrão: diretório atual)
+
 ${green}Opções da instalação:${reset}
   --cursor       Copia comandos e regras para ~/.cursor (padrão com --all)
   --copilot      Mescla instruções + prompts em ~/.copilot (global) ou .github/ (com --ide-local)
@@ -1555,6 +1973,13 @@ ${green}status${reset} (coerência .oxe/ + um próximo passo sugerido; não exig
   --json          imprime um único objeto JSON (próximo passo + diagnósticos) em stdout; adequado a CI
   --hints         lembretes de rotina (idade scan/compact quando configurado em config.json); com --json inclui array \`hints\`
 
+${green}capabilities${reset} (catálogo nativo de extensões do projeto)
+  list                               lista capabilities instaladas em .oxe/capabilities/
+  install <id>                       cria capability local a partir do template nativo
+  remove <id>                        remove capability do catálogo local
+  update                             regera .oxe/CAPABILITIES.md a partir dos manifestos locais
+  --dir <pasta>                      raiz do projeto (padrão: diretório atual)
+
 ${green}Atualizar (projeto já tem OXE):${reset}
   /oxe-update                            no Cursor (outras IDEs: mesmo fluxo pelo terminal)
   npx oxe-cc update --check              só ver se há versão nova no npm
@@ -1856,7 +2281,7 @@ function runInstall(opts) {
   console.log(`  ${c ? green : ''}✓${c ? reset : ''} Instalação concluída com sucesso.\n`);
 }
 
-/** @typedef {{ help: boolean, dryRun: boolean, cursor: boolean, copilot: boolean, copilotCli: boolean, allAgents: boolean, ideLocal: boolean, ideExplicit: boolean, noProject: boolean, dir: string, explicitConfigDir: string | null, parseError: boolean, unknownFlag: string, conflictFlags: string }} UninstallOpts */
+/** @typedef {{ help: boolean, dryRun: boolean, cursor: boolean, copilot: boolean, copilotCli: boolean, allAgents: boolean, globalCli: boolean, ideLocal: boolean, ideExplicit: boolean, noProject: boolean, dir: string, explicitConfigDir: string | null, parseError: boolean, unknownFlag: string, conflictFlags: string }} UninstallOpts */
 
 /**
  * @param {UninstallOpts} u
@@ -1965,6 +2390,7 @@ function parseUninstallArgs(argv) {
     copilot: false,
     copilotCli: false,
     allAgents: false,
+    globalCli: false,
     ideLocal: false,
     ideExplicit: false,
     noProject: false,
@@ -1994,6 +2420,8 @@ function parseUninstallArgs(argv) {
       out.allAgents = true;
       out.copilotCli = true;
       out.ideExplicit = true;
+    } else if (a === '--global-cli' || a === '-g') {
+      out.globalCli = true;
     } else if (a === '--ide-local') out.ideLocal = true;
     else if (a === '--ide-only') out.noProject = true;
     else if (a === '--dir' && argv[i + 1]) out.dir = path.resolve(argv[++i]);
@@ -2252,7 +2680,18 @@ function runUninstall(u) {
     oxeManifest.writeFileManifest(home, next, readPkgVersion());
   }
 
+  if (u.globalCli && !u.dryRun) {
+    uninstallGlobalCliPackage();
+  } else if (u.globalCli && u.dryRun) {
+    console.log(`${dim}npm${reset}    npm uninstall -g ${readPkgName()}`);
+  }
+
   printSummaryAndNextSteps(c, buildUninstallFooter(u));
+  if (!u.globalCli) {
+    console.log(
+      `  ${c ? yellow : ''}Nota:${c ? reset : ''} o pacote npm global ${c ? cyan : ''}${readPkgName()}${c ? reset : ''} não é removido por padrão. Use ${c ? cyan : ''}oxe-cc uninstall --global-cli${c ? reset : ''} ou ${c ? cyan : ''}npm uninstall -g ${readPkgName()}${c ? reset : ''}.\n`
+    );
+  }
   console.log(`  ${c ? green : ''}✓${c ? reset : ''} Desinstalação concluída com sucesso.\n`);
 }
 
@@ -2277,6 +2716,7 @@ function parseUpdateArgs(argv) {
   };
   let dirExplicit = false;
   let firstPositionalConsumed = false;
+  const passthroughFlags = new Set(updateForwardedInstallFlags());
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
     if (a === '-h' || a === '--help') out.help = true;
@@ -2291,6 +2731,11 @@ function parseUpdateArgs(argv) {
         out.dir = path.resolve(a);
         firstPositionalConsumed = true;
       } else out.rest.push(a);
+    } else if (passthroughFlags.has(a)) {
+      out.rest.push(a);
+      if ((a === '--config-dir' || a === '-c') && argv[i + 1]) {
+        out.rest.push(argv[++i]);
+      }
     } else {
       out.parseError = true;
       out.unknownFlag = a;
@@ -2359,7 +2804,11 @@ function runUpdate(u) {
       );
     }
     console.log(`  ${dim}Comando que seria executado (instalação):${reset}`);
-    console.log(`  ${cyan}npx -y oxe-cc@latest --force --no-global-cli -l${reset} ${u.rest.join(' ')}`);
+    const dryRunArgs = ['-y', 'oxe-cc@latest', '--force'];
+    if (updateArgsExplicitlyControlGlobalCli(u.rest)) dryRunArgs.push(...u.rest);
+    else if (isRunningFromGlobalNpmInstall()) dryRunArgs.push('--global-cli');
+    else dryRunArgs.push('--no-global-cli', '-l');
+    console.log(`  ${cyan}npx ${dryRunArgs.join(' ')}${reset}`);
     console.log(`  ${dim}Diretório:${reset} ${u.dir}`);
     printSummaryAndNextSteps(c, {
       bullets: [
@@ -2408,7 +2857,14 @@ function runUpdate(u) {
   }
 
   printSection('OXE ▸ update');
-  const args = ['-y', 'oxe-cc@latest', '--force', '--no-global-cli', '-l', ...u.rest];
+  const args = ['-y', 'oxe-cc@latest', '--force'];
+  if (updateArgsExplicitlyControlGlobalCli(u.rest)) {
+    args.push(...u.rest);
+  } else if (isRunningFromGlobalNpmInstall()) {
+    args.push('--global-cli', ...u.rest);
+  } else {
+    args.push('--no-global-cli', '-l', ...u.rest);
+  }
   const r = spawnSync('npx', args, {
     cwd: u.dir,
     stdio: 'inherit',
@@ -2434,6 +2890,823 @@ function runUpdate(u) {
   console.log(`  ${c ? green : ''}✓${c ? reset : ''} Atualização concluída com sucesso.\n`);
 }
 
+/**
+ * @typedef {{ help: boolean, dir: string, action: string, id: string, parseError: boolean, unknownFlag: string }} CapabilityOpts
+ */
+
+/**
+ * @param {string[]} argv
+ * @returns {CapabilityOpts}
+ */
+function parseCapabilitiesArgs(argv) {
+  /** @type {CapabilityOpts} */
+  const out = {
+    help: false,
+    dir: process.cwd(),
+    action: 'list',
+    id: '',
+    parseError: false,
+    unknownFlag: '',
+  };
+  const positionals = [];
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '-h' || a === '--help') out.help = true;
+    else if (a === '--dir' && argv[i + 1]) out.dir = path.resolve(argv[++i]);
+    else if (!a.startsWith('-')) positionals.push(a);
+    else {
+      out.parseError = true;
+      out.unknownFlag = a;
+      break;
+    }
+  }
+  if (positionals.length) {
+    out.action = positionals[0];
+    out.id = positionals[1] || '';
+  }
+  return out;
+}
+
+/**
+ * @typedef {{ help: boolean, dir: string, port: number, noOpen: boolean, readOnly: boolean, dumpContext: boolean, activeSession: string|null, parseError: boolean, unknownFlag: string }} DashboardOpts
+ */
+
+/**
+ * @typedef {{ help: boolean, dir: string, action: string, activeSession: string|null, wave: number|null, task: string, mode: string, reason: string, parseError: boolean, unknownFlag: string }} RuntimeOpts
+ */
+
+/**
+ * @typedef {{
+ *   help: boolean,
+ *   dir: string,
+ *   scope: string,
+ *   action: string,
+ *   query: string,
+ *   activeSession: string|null,
+ *   subscription: string,
+ *   kind: string,
+ *   resourceGroup: string,
+ *   name: string,
+ *   namespace: string,
+ *   topicName: string,
+ *   subscriptionName: string,
+ *   sourceResourceId: string,
+ *   endpoint: string,
+ *   location: string,
+ *   server: string,
+ *   database: string,
+ *   adminUser: string,
+ *   adminPasswordEnv: string,
+ *   startIpAddress: string,
+ *   endIpAddress: string,
+ *   approve: boolean,
+ *   overridePolicy: boolean,
+ *   dryRun: boolean,
+ *   diff: boolean,
+ *   filterType: string,
+ *   filterRg: string,
+ *   vpnConfirmed: boolean,
+ *   tenant: string,
+ *   parseError: boolean,
+ *   unknownFlag: string
+ * }} AzureOpts
+ */
+
+/**
+ * @param {string[]} argv
+ * @returns {DashboardOpts}
+ */
+function parseDashboardArgs(argv) {
+  /** @type {DashboardOpts} */
+  const out = {
+    help: false,
+    dir: process.cwd(),
+    port: 4173,
+    noOpen: false,
+    readOnly: false,
+    dumpContext: false,
+    activeSession: null,
+    parseError: false,
+    unknownFlag: '',
+  };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '-h' || a === '--help') out.help = true;
+    else if (a === '--dir' && argv[i + 1]) out.dir = path.resolve(argv[++i]);
+    else if (a === '--port' && argv[i + 1]) out.port = Number(argv[++i]) || 4173;
+    else if (a === '--no-open') out.noOpen = true;
+    else if (a === '--read-only') out.readOnly = true;
+    else if (a === '--dump-context') out.dumpContext = true;
+    else if (a === '--session' && argv[i + 1]) out.activeSession = String(argv[++i]).replace(/\\/g, '/');
+    else if (!a.startsWith('-') && i === 0) out.dir = path.resolve(a);
+    else {
+      out.parseError = true;
+      out.unknownFlag = a;
+      break;
+    }
+  }
+  return out;
+}
+
+/**
+ * @param {string[]} argv
+ * @returns {RuntimeOpts}
+ */
+function parseRuntimeArgs(argv) {
+  /** @type {RuntimeOpts} */
+  const out = {
+    help: false,
+    dir: process.cwd(),
+    action: 'status',
+    activeSession: null,
+    wave: null,
+    task: '',
+    mode: '',
+    reason: '',
+    parseError: false,
+    unknownFlag: '',
+  };
+  const positionals = [];
+  for (let i = 0; i < argv.length; i += 1) {
+    const a = argv[i];
+    if (a === '-h' || a === '--help') out.help = true;
+    else if (a === '--dir' && argv[i + 1]) out.dir = path.resolve(argv[++i]);
+    else if (a === '--session' && argv[i + 1]) out.activeSession = String(argv[++i]).replace(/\\/g, '/');
+    else if (a === '--wave' && argv[i + 1]) out.wave = Number(argv[++i]);
+    else if (a === '--task' && argv[i + 1]) out.task = String(argv[++i]);
+    else if (a === '--mode' && argv[i + 1]) out.mode = String(argv[++i]);
+    else if (a === '--reason' && argv[i + 1]) out.reason = String(argv[++i]);
+    else if (!a.startsWith('-')) positionals.push(a);
+    else {
+      out.parseError = true;
+      out.unknownFlag = a;
+      break;
+    }
+  }
+  if (positionals[0]) out.action = positionals[0];
+  if (positionals[1]) out.dir = path.resolve(positionals[1]);
+  if (Number.isNaN(out.wave)) out.wave = null;
+  return out;
+}
+
+/**
+ * @param {string[]} argv
+ * @returns {AzureOpts}
+ */
+function parseAzureArgs(argv) {
+  /** @type {AzureOpts} */
+  const out = {
+    help: false,
+    dir: process.cwd(),
+    scope: 'doctor',
+    action: '',
+    query: '',
+    activeSession: null,
+    subscription: '',
+    kind: '',
+    resourceGroup: '',
+    name: '',
+    namespace: '',
+    topicName: '',
+    subscriptionName: '',
+    sourceResourceId: '',
+    endpoint: '',
+    location: '',
+    server: '',
+    database: '',
+    adminUser: '',
+    adminPasswordEnv: '',
+    startIpAddress: '',
+    endIpAddress: '',
+    approve: false,
+    overridePolicy: false,
+    dryRun: false,
+    diff: false,
+    filterType: '',
+    filterRg: '',
+    vpnConfirmed: false,
+    tenant: '',
+    parseError: false,
+    unknownFlag: '',
+  };
+  const positionals = [];
+  for (let i = 0; i < argv.length; i += 1) {
+    const a = argv[i];
+    if (a === '-h' || a === '--help') out.help = true;
+    else if (a === '--dir' && argv[i + 1]) out.dir = path.resolve(argv[++i]);
+    else if (a === '--session' && argv[i + 1]) out.activeSession = String(argv[++i]).replace(/\\/g, '/');
+    else if (a === '--subscription' && argv[i + 1]) out.subscription = String(argv[++i]);
+    else if (a === '--kind' && argv[i + 1]) out.kind = String(argv[++i]);
+    else if (a === '--resource-group' && argv[i + 1]) out.resourceGroup = String(argv[++i]);
+    else if (a === '--name' && argv[i + 1]) out.name = String(argv[++i]);
+    else if (a === '--namespace' && argv[i + 1]) out.namespace = String(argv[++i]);
+    else if (a === '--topic-name' && argv[i + 1]) out.topicName = String(argv[++i]);
+    else if (a === '--subscription-name' && argv[i + 1]) out.subscriptionName = String(argv[++i]);
+    else if (a === '--source-resource-id' && argv[i + 1]) out.sourceResourceId = String(argv[++i]);
+    else if (a === '--endpoint' && argv[i + 1]) out.endpoint = String(argv[++i]);
+    else if (a === '--location' && argv[i + 1]) out.location = String(argv[++i]);
+    else if (a === '--server' && argv[i + 1]) out.server = String(argv[++i]);
+    else if (a === '--database' && argv[i + 1]) out.database = String(argv[++i]);
+    else if (a === '--admin-user' && argv[i + 1]) out.adminUser = String(argv[++i]);
+    else if (a === '--admin-password-env' && argv[i + 1]) out.adminPasswordEnv = String(argv[++i]);
+    else if (a === '--start-ip-address' && argv[i + 1]) out.startIpAddress = String(argv[++i]);
+    else if (a === '--end-ip-address' && argv[i + 1]) out.endIpAddress = String(argv[++i]);
+    else if (a === '--approve') out.approve = true;
+    else if (a === '--override-policy') out.overridePolicy = true;
+    else if (a === '--dry-run') out.dryRun = true;
+    else if (a === '--diff') out.diff = true;
+    else if (a === '--type' && argv[i + 1]) out.filterType = String(argv[++i]);
+    else if (a === '--filter-rg' && argv[i + 1]) out.filterRg = String(argv[++i]);
+    else if (a === '--vpn-confirmed') out.vpnConfirmed = true;
+    else if (a === '--tenant' && argv[i + 1]) out.tenant = String(argv[++i]);
+    else if (!a.startsWith('-')) positionals.push(a);
+    else {
+      out.parseError = true;
+      out.unknownFlag = a;
+      break;
+    }
+  }
+  if (positionals[0]) out.scope = String(positionals[0]);
+  if (positionals[1]) out.action = String(positionals[1]);
+  if (out.scope === 'find') {
+    out.query = positionals.slice(1).join(' ').trim();
+  } else if (!out.action && positionals[2]) {
+    out.query = positionals.slice(2).join(' ').trim();
+  } else if (positionals[2]) {
+    out.query = positionals.slice(2).join(' ').trim();
+  }
+  return out;
+}
+
+/**
+ * @param {DashboardOpts} opts
+ */
+async function runDashboard(opts) {
+  assertNotWslWindowsNode();
+  if (!fs.existsSync(opts.dir)) {
+    console.error(`${yellow}Diretório não encontrado: ${opts.dir}${reset}`);
+    process.exit(1);
+  }
+  const target = opts.dir;
+  if (opts.dumpContext) {
+    console.log(JSON.stringify(oxeDashboard.loadDashboardContext(target, { activeSession: opts.activeSession }), null, 2));
+    return;
+  }
+  const c = useAnsiColors();
+  printSection('OXE ▸ dashboard');
+  const server = oxeDashboard.createDashboardServer(target, { activeSession: opts.activeSession });
+  await new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(opts.port, '127.0.0.1', () => resolve());
+  });
+  const address = server.address();
+  const port = address && typeof address === 'object' ? address.port : opts.port;
+  const url = `http://127.0.0.1:${port}/`;
+  console.log(`  ${c ? green : ''}Projeto:${c ? reset : ''} ${c ? cyan : ''}${target}${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}URL:${c ? reset : ''} ${c ? cyan : ''}${url}${c ? reset : ''}`);
+  if (opts.readOnly) {
+    console.log(`  ${c ? yellow : ''}Modo:${c ? reset : ''} read-only (UI visual; persistência deve ser evitada no uso desta flag)`);
+  }
+  if (!opts.noOpen) {
+    try {
+      openUrlInBrowser(url);
+      console.log(`  ${c ? green : ''}✓${c ? reset : ''} Browser aberto.`);
+    } catch {
+      console.log(`  ${yellow}Não foi possível abrir o browser automaticamente.${reset}`);
+    }
+  }
+  console.log(`  ${dim}Pressione Ctrl+C para encerrar o servidor local.${reset}\n`);
+  await new Promise(() => {});
+}
+
+/**
+ * @param {RuntimeOpts} opts
+ */
+function runRuntime(opts) {
+  const c = useAnsiColors();
+  printSection('OXE ▸ runtime');
+  if (!fs.existsSync(opts.dir)) {
+    console.error(`${yellow}Diretório não encontrado: ${opts.dir}${reset}`);
+    process.exit(1);
+  }
+  bootstrapOxe(opts.dir, { dryRun: false, force: false });
+  const statePath = oxeHealth.oxePaths(opts.dir).state;
+  const stateText = fs.existsSync(statePath) ? fs.readFileSync(statePath, 'utf8') : '';
+  const activeSession = opts.activeSession || oxeHealth.parseActiveSession(stateText) || null;
+  const p = oxeOperational.operationalPaths(opts.dir, activeSession);
+  console.log(`  ${c ? green : ''}Projeto:${c ? reset : ''} ${c ? cyan : ''}${opts.dir}${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}Sessão:${c ? reset : ''} ${c ? cyan : ''}${activeSession || 'modo legado'}${c ? reset : ''}`);
+
+  if (opts.action === 'status') {
+    const current = oxeOperational.readRunState(opts.dir, activeSession);
+    if (!current) {
+      console.log(`  ${yellow}Nenhum ACTIVE-RUN encontrado.${reset}`);
+      return;
+    }
+    console.log(`  ${c ? green : ''}Run:${c ? reset : ''} ${current.run_id}`);
+    console.log(`  ${c ? green : ''}Estado:${c ? reset : ''} ${current.status}`);
+    console.log(`  ${c ? green : ''}Cursor:${c ? reset : ''} onda=${current.cursor && current.cursor.wave != null ? current.cursor.wave : '—'} tarefa=${current.cursor && current.cursor.task ? current.cursor.task : '—'} modo=${current.cursor && current.cursor.mode ? current.cursor.mode : '—'}`);
+    console.log(`  ${c ? green : ''}Arquivo:${c ? reset : ''} ${path.join(p.runsDir, `${current.run_id}.json`)}`);
+    return;
+  }
+
+  try {
+    const next = oxeOperational.applyRuntimeAction(opts.dir, activeSession, {
+      action: opts.action,
+      wave: opts.wave,
+      task: opts.task || null,
+      mode: opts.mode || null,
+      reason: opts.reason || '',
+    });
+    console.log(`  ${c ? green : ''}✓${c ? reset : ''} Runtime atualizado.`);
+    console.log(`  ${c ? green : ''}Run:${c ? reset : ''} ${next.run_id}`);
+    console.log(`  ${c ? green : ''}Estado:${c ? reset : ''} ${next.status}`);
+    console.log(`  ${c ? green : ''}Cursor:${c ? reset : ''} onda=${next.cursor && next.cursor.wave != null ? next.cursor.wave : '—'} tarefa=${next.cursor && next.cursor.task ? next.cursor.task : '—'} modo=${next.cursor && next.cursor.mode ? next.cursor.mode : '—'}`);
+    console.log(`  ${c ? green : ''}Trace:${c ? reset : ''} ${p.events}`);
+  } catch (err) {
+    console.error(`${red}${err && err.message ? err.message : 'Falha ao atualizar runtime.'}${reset}`);
+    process.exit(1);
+  }
+}
+
+/**
+ * @param {AzureOpts} opts
+ */
+function runAzure(opts) {
+  const c = useAnsiColors();
+  printSection('OXE ▸ azure');
+  if (!fs.existsSync(opts.dir)) {
+    console.error(`${yellow}Diretório não encontrado: ${opts.dir}${reset}`);
+    process.exit(1);
+  }
+  bootstrapOxe(opts.dir, { dryRun: false, force: false });
+  oxeAzure.ensureAzureArtifacts(opts.dir);
+  oxeAzure.ensureAzureCapabilities(opts.dir);
+  writeCapabilitiesIndex(opts.dir);
+  const { config } = oxeHealth.loadOxeConfigMerged(opts.dir);
+  const statePath = oxeHealth.oxePaths(opts.dir).state;
+  const stateText = fs.existsSync(statePath) ? fs.readFileSync(statePath, 'utf8') : '';
+  const activeSession = opts.activeSession || oxeHealth.parseActiveSession(stateText) || null;
+  const azureCfg = config.azure && typeof config.azure === 'object' ? config.azure : {};
+  const preferredLocation = Array.isArray(azureCfg.preferred_locations) && azureCfg.preferred_locations.length
+    ? String(azureCfg.preferred_locations[0])
+    : '';
+  const input = {
+    kind: opts.kind,
+    resourceGroup: opts.resourceGroup || String(azureCfg.default_resource_group || ''),
+    name: opts.name || opts.server,
+    namespace: opts.namespace,
+    topicName: opts.topicName,
+    subscriptionName: opts.subscriptionName,
+    sourceResourceId: opts.sourceResourceId,
+    endpoint: opts.endpoint,
+    location: opts.location || preferredLocation,
+    server: opts.server,
+    database: opts.database,
+    adminUser: opts.adminUser,
+    adminPasswordEnv: opts.adminPasswordEnv || 'AZURE_SQL_ADMIN_PASSWORD',
+    startIpAddress: opts.startIpAddress,
+    endIpAddress: opts.endIpAddress,
+    env: process.env,
+  };
+
+  console.log(`  ${c ? green : ''}Projeto:${c ? reset : ''} ${c ? cyan : ''}${opts.dir}${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}Sessão:${c ? reset : ''} ${c ? cyan : ''}${activeSession || 'modo legado'}${c ? reset : ''}`);
+
+  try {
+    if (opts.scope === 'status') {
+      const st = oxeAzure.statusAzure(opts.dir, config);
+      const loginColor = st.loginActive ? green : red;
+      const invColor = st.inventoryPresent && !st.inventoryStale ? green : yellow;
+      console.log(`  ${c ? (st.cliInstalled ? green : red) : ''}CLI:${c ? reset : ''}       ${st.cliInstalled ? `Azure CLI ${st.cliVersion || 'detectada'}` : 'não instalada'}`);
+      console.log(`  ${c ? loginColor : ''}Login:${c ? reset : ''}     ${st.loginActive ? 'ativo' : 'ausente'}`);
+      console.log(`  ${c ? green : ''}Sub:${c ? reset : ''}       ${st.subscription || '—'}`);
+      console.log(`  ${c ? invColor : ''}Inventário:${c ? reset : ''} ${st.inventoryPresent ? `${st.inventoryAgeHours !== null ? `${st.inventoryAgeHours}h atrás` : 'presente'}${st.inventoryStale ? ' (stale)' : ''}` : 'ausente'}`);
+      if (st.inventorySummary) {
+        console.log(`  ${c ? green : ''}Recursos:${c ? reset : ''}  total=${st.inventorySummary.total} sb=${st.inventorySummary.servicebus} eg=${st.inventorySummary.eventgrid} sql=${st.inventorySummary.sql}`);
+      }
+      if (st.pendingOperations > 0) {
+        console.log(`  ${yellow}Ops pendentes:${reset} ${st.pendingOperations} (${st.pendingOperationIds.join(', ')})`);
+      }
+      if (st.vpnRequired) {
+        console.log(`  ${yellow}VPN:${reset}       requerida pela configuração do projeto`);
+      }
+      return;
+    }
+
+    if (opts.scope === 'operations') {
+      const ops = oxeAzure.listAzureOperations(opts.dir);
+      if (!ops.length) {
+        console.log(`  ${c ? dim : ''}Nenhuma operação registrada.${c ? reset : ''}`);
+        return;
+      }
+      for (const op of ops) {
+        const phaseColor = op.phase === 'applied' ? green : op.phase === 'waiting_approval' ? yellow : op.phase === 'failed' ? red : dim;
+        console.log(`  ${c ? phaseColor : ''}${op.phase}${c ? reset : ''} · ${op.operation_id} · ${op.domain}/${op.kind} · ${op.summary || '—'}`);
+      }
+      return;
+    }
+
+    if (opts.scope === 'doctor') {
+      const report = oxeAzure.azureDoctor(opts.dir, config, {
+        autoInstall: Boolean(azureCfg.resource_graph_auto_install !== false),
+      });
+      console.log(`  ${c ? green : ''}CLI:${c ? reset : ''} ${report.authStatus.installed ? `Azure CLI ${report.authStatus.version || 'detectada'}` : 'não instalada'}`);
+      console.log(`  ${c ? green : ''}Login:${c ? reset : ''} ${report.authStatus.login_active ? 'ativo' : 'ausente'}`);
+      console.log(`  ${c ? green : ''}Subscription:${c ? reset : ''} ${report.profile.subscription_name || report.profile.subscription_id || '—'}`);
+      console.log(`  ${c ? green : ''}Inventário:${c ? reset : ''} ${report.inventory && report.inventory.synced_at ? `sync em ${report.inventory.synced_at}` : 'ausente'}`);
+      if (report.warnings.length) {
+        for (const warning of report.warnings) {
+          console.log(`  ${yellow}AVISO${reset} ${warning}`);
+        }
+      } else {
+        console.log(`  ${c ? green : ''}✓${c ? reset : ''} Contexto Azure saudável.`);
+      }
+      if (!report.authStatus.installed || !report.authStatus.login_active || !report.profile.subscription_id) {
+        process.exit(1);
+      }
+      return;
+    }
+
+    if (opts.scope === 'auth') {
+      if (opts.action === 'login') {
+        const context = oxeAzure.loginAzure(opts.dir, { inherit: true, tenant: opts.tenant || undefined });
+        console.log(`  ${c ? green : ''}✓${c ? reset : ''} Login Azure concluído.`);
+        console.log(`  ${c ? green : ''}Conta:${c ? reset : ''} ${context.authStatus.user || '—'}`);
+        console.log(`  ${c ? green : ''}Subscription:${c ? reset : ''} ${context.profile.subscription_name || context.profile.subscription_id || '—'}`);
+        return;
+      }
+      if (opts.action === 'whoami' || !opts.action) {
+        const context = oxeAzure.getAzureContext(opts.dir);
+        console.log(`  ${c ? green : ''}Cloud:${c ? reset : ''} ${context.profile.cloud || '—'}`);
+        console.log(`  ${c ? green : ''}Conta:${c ? reset : ''} ${context.authStatus.user || '—'}`);
+        console.log(`  ${c ? green : ''}Tipo:${c ? reset : ''} ${context.authStatus.user_type || context.profile.auth_mode || '—'}`);
+        console.log(`  ${c ? green : ''}Tenant:${c ? reset : ''} ${context.profile.tenant_id || '—'}`);
+        console.log(`  ${c ? green : ''}Subscription:${c ? reset : ''} ${context.profile.subscription_name || context.profile.subscription_id || '—'}`);
+        console.log(`  ${c ? green : ''}Resource Graph:${c ? reset : ''} ${context.authStatus.resource_graph_enabled ? 'habilitado' : 'ausente'}`);
+        return;
+      }
+      if (opts.action === 'set-subscription') {
+        if (!opts.subscription) {
+          console.error(`${red}Informe --subscription <id|nome>.${reset}`);
+          process.exit(1);
+        }
+        const context = oxeAzure.setAzureSubscription(opts.dir, opts.subscription);
+        console.log(`  ${c ? green : ''}✓${c ? reset : ''} Subscription selecionada.`);
+        console.log(`  ${c ? green : ''}Subscription:${c ? reset : ''} ${context.profile.subscription_name || context.profile.subscription_id || '—'}`);
+        return;
+      }
+      throw new Error(`Subcomando Azure auth desconhecido: ${opts.action || '—'}`);
+    }
+
+    if (opts.scope === 'sync') {
+      const synced = oxeAzure.syncAzureInventory(opts.dir, {
+        autoInstall: Boolean(azureCfg.resource_graph_auto_install !== false),
+        diff: opts.diff,
+      });
+      console.log(`  ${c ? green : ''}✓${c ? reset : ''} Inventário Azure sincronizado.`);
+      console.log(`  ${c ? green : ''}Subscription:${c ? reset : ''} ${synced.profile.subscription_name || synced.profile.subscription_id || '—'}`);
+      console.log(`  ${c ? green : ''}Resumo:${c ? reset : ''} total=${synced.inventory.summary.total} servicebus=${synced.inventory.summary.servicebus} eventgrid=${synced.inventory.summary.eventgrid} sql=${synced.inventory.summary.sql}`);
+      console.log(`  ${c ? green : ''}Artefato:${c ? reset : ''} ${synced.paths.inventory}`);
+      if (synced.diff) {
+        const d = synced.diff;
+        console.log(`  ${c ? green : ''}Diff:${c ? reset : ''} +${d.added.length} adicionados · -${d.removed.length} removidos · ${d.unchanged} inalterados`);
+        for (const item of d.added) console.log(`    ${c ? green : ''}+${c ? reset : ''} ${item.name} · ${item.type} · ${item.resourceGroup || '—'}`);
+        for (const item of d.removed) console.log(`    ${c ? red : ''}-${c ? reset : ''} ${item.name} · ${item.type} · ${item.resourceGroup || '—'}`);
+      }
+      return;
+    }
+
+    if (opts.scope === 'find') {
+      const filters = {};
+      if (opts.filterType) filters.type = opts.filterType;
+      if (opts.filterRg) filters.resourceGroup = opts.filterRg;
+      const matches = oxeAzure.searchAzureInventory(opts.dir, opts.query, filters);
+      if (!matches.length) {
+        console.log(`  ${yellow}Nenhum recurso encontrado no inventário local.${reset}`);
+        return;
+      }
+      for (const item of matches) {
+        console.log(`  ${c ? dim : ''}•${c ? reset : ''} ${item.name} · ${item.type} · ${item.resourceGroup || '—'} · ${item.location || '—'}`);
+      }
+      return;
+    }
+
+    if (!['servicebus', 'eventgrid', 'sql'].includes(opts.scope)) {
+      throw new Error(`Escopo Azure desconhecido: ${opts.scope}. Use: doctor | status | auth | sync | find | operations | servicebus | eventgrid | sql`);
+    }
+    if (!opts.action) {
+      throw new Error(`Informe a ação para ${opts.scope}: list | show | plan | apply`);
+    }
+
+    if (opts.action === 'list' || opts.action === 'show') {
+      const result = oxeAzure.executeAzureRead(opts.dir, activeSession, opts.scope, opts.action, input);
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+    if (opts.action === 'plan') {
+      const planned = oxeAzure.planAzureOperation(opts.dir, activeSession, opts.scope, input);
+      console.log(`  ${c ? green : ''}✓${c ? reset : ''} Operação Azure planejada.`);
+      console.log(`  ${c ? green : ''}Operation ID:${c ? reset : ''} ${planned.operation.operation_id}`);
+      console.log(`  ${c ? green : ''}Checkpoint:${c ? reset : ''} ${planned.operation.checkpoint_id}`);
+      console.log(`  ${c ? green : ''}Comando:${c ? reset : ''} ${planned.operation.command_display_redacted}`);
+      console.log(`  ${c ? green : ''}Resumo:${c ? reset : ''} ${planned.operation.summary}`);
+      console.log(`  ${c ? green : ''}Artefatos:${c ? reset : ''} ${planned.files.jsonPath} · ${planned.files.mdPath}`);
+      return;
+    }
+    if (opts.action === 'apply') {
+      const applied = oxeAzure.applyAzureOperation(opts.dir, activeSession, opts.scope, input, {
+        approve: opts.approve,
+        overridePolicy: opts.overridePolicy,
+        dryRun: opts.dryRun,
+        vpnRequired: Boolean(azureCfg.vpn_required),
+        vpnConfirmed: opts.vpnConfirmed,
+      });
+      if (applied.dryRun) {
+        console.log(`  ${yellow}[dry-run]${reset} Validação OK — nenhuma alteração foi feita.`);
+        console.log(`  ${c ? green : ''}Comando:${c ? reset : ''} ${applied.commandPreview}`);
+        console.log(`  ${c ? green : ''}Resumo:${c ? reset : ''} ${applied.operation.summary}`);
+        return;
+      }
+      if (!applied.approved) {
+        console.log(`  ${yellow}Checkpoint aberto antes da mutação.${reset}`);
+        console.log(`  ${c ? green : ''}Operation ID:${c ? reset : ''} ${applied.operation.operation_id}`);
+        console.log(`  ${c ? green : ''}Checkpoint:${c ? reset : ''} ${applied.checkpoint_id}`);
+        console.log(`  ${c ? green : ''}Resumo:${c ? reset : ''} ${applied.operation.summary}`);
+        console.log(`  ${c ? green : ''}Reexecute:${c ? reset : ''} npx oxe-cc azure ${opts.scope} apply --approve --kind ${applied.operation.kind} --resource-group ${applied.operation.resource_group}`);
+        return;
+      }
+      console.log(`  ${c ? green : ''}✓${c ? reset : ''} Operação Azure aplicada.`);
+      console.log(`  ${c ? green : ''}Operation ID:${c ? reset : ''} ${applied.operation.operation_id}`);
+      console.log(`  ${c ? green : ''}Artefatos:${c ? reset : ''} ${applied.files.jsonPath} · ${applied.files.mdPath}`);
+      return;
+    }
+
+    throw new Error(`Ação Azure desconhecida: ${opts.action}`);
+  } catch (err) {
+    console.error(`${red}${err && err.message ? err.message : 'Falha no provider Azure.'}${reset}`);
+    process.exit(1);
+  }
+}
+
+function capabilityManifestPath(target, id) {
+  return path.join(target, '.oxe', 'capabilities', id, 'CAPABILITY.md');
+}
+
+function listLocalCapabilities(target) {
+  const dir = path.join(target, '.oxe', 'capabilities');
+  if (!fs.existsSync(dir)) return [];
+  return fs
+    .readdirSync(dir, { withFileTypes: true })
+    .filter((e) => e.isDirectory() && fs.existsSync(path.join(dir, e.name, 'CAPABILITY.md')))
+    .map((e) => e.name)
+    .sort();
+}
+
+function renderCapabilitiesIndex(target) {
+  const template = ['# OXE — Capabilities Instaladas', '', '> Catálogo local de capabilities do projeto. Cada capability vive em `.oxe/capabilities/<id>/`.', '', '| ID | Tipo | Status | Escopo | Política | Side effects | Requer env | Evidência | Resumo |', '|----|------|--------|--------|-----------|--------------|------------|-----------|--------|'];
+  const catalog = oxeOperational.readCapabilityCatalog(target);
+  if (!catalog.length) {
+    template.push('| (vazio) | — | — | — | — | — | — | — | Nenhuma capability instalada |');
+    return template.join('\n') + '\n';
+  }
+  for (const cap of catalog) {
+    template.push(`| ${cap.id} | ${cap.type} | ${cap.status} | ${cap.scope} | ${cap.approvalPolicy || '—'} | ${(cap.sideEffects || []).join(', ') || '—'} | ${(cap.requiresEnv || []).join(', ') || '—'} | ${(cap.evidenceOutputs || []).join(', ') || '—'} | ${cap.description} |`);
+  }
+  return template.join('\n') + '\n';
+}
+
+function writeCapabilitiesIndex(target) {
+  const dest = path.join(target, '.oxe', 'CAPABILITIES.md');
+  fs.writeFileSync(dest, renderCapabilitiesIndex(target), 'utf8');
+}
+
+/**
+ * @param {CapabilityOpts} opts
+ */
+function runCapabilities(opts) {
+  const c = useAnsiColors();
+  printSection('OXE ▸ capabilities');
+  if (!fs.existsSync(opts.dir)) {
+    console.error(`${yellow}Diretório não encontrado: ${opts.dir}${reset}`);
+    process.exit(1);
+  }
+  bootstrapOxe(opts.dir, { dryRun: false, force: false });
+  const capsDir = path.join(opts.dir, '.oxe', 'capabilities');
+  ensureDir(capsDir);
+  if (opts.action === 'list') {
+    const ids = listLocalCapabilities(opts.dir);
+    console.log(`  ${c ? green : ''}Projeto:${c ? reset : ''} ${c ? cyan : ''}${opts.dir}${c ? reset : ''}`);
+    if (!ids.length) {
+      console.log(`  ${yellow}Nenhuma capability instalada.${reset}`);
+    } else {
+      for (const id of ids) console.log(`  ${c ? dim : ''}•${c ? reset : ''} ${id}`);
+    }
+    return;
+  }
+  if (!opts.id && (opts.action === 'install' || opts.action === 'remove')) {
+    console.error(`${red}Informe o ID da capability.${reset}`);
+    process.exit(1);
+  }
+  if (opts.action === 'install') {
+    const safeId = opts.id.trim().toLowerCase();
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(safeId)) {
+      console.error(`${red}ID inválido para capability:${reset} ${opts.id}`);
+      process.exit(1);
+    }
+    const dir = path.join(capsDir, safeId);
+    ensureDir(dir);
+    const manifest = capabilityManifestPath(opts.dir, safeId);
+    if (!fs.existsSync(manifest)) {
+      const src = path.join(PKG_ROOT, 'oxe', 'templates', 'CAPABILITY.template.md');
+      let raw = fs.readFileSync(src, 'utf8');
+      raw = raw.replace(/^id:\s*sample-capability$/m, `id: ${safeId}`);
+      fs.writeFileSync(manifest, raw, 'utf8');
+    }
+    writeCapabilitiesIndex(opts.dir);
+    oxeOperational.appendEvent(opts.dir, null, { type: 'capability_installed', payload: { capability_id: safeId } });
+    console.log(`  ${c ? green : ''}✓${c ? reset : ''} Capability instalada: ${safeId}`);
+    return;
+  }
+  if (opts.action === 'remove') {
+    fs.rmSync(path.join(capsDir, opts.id), { recursive: true, force: true });
+    writeCapabilitiesIndex(opts.dir);
+    oxeOperational.appendEvent(opts.dir, null, { type: 'capability_removed', payload: { capability_id: opts.id } });
+    console.log(`  ${c ? green : ''}✓${c ? reset : ''} Capability removida: ${opts.id}`);
+    return;
+  }
+  if (opts.action === 'update') {
+    writeCapabilitiesIndex(opts.dir);
+    oxeOperational.appendEvent(opts.dir, null, { type: 'capability_index_refreshed' });
+    console.log(`  ${c ? green : ''}✓${c ? reset : ''} Índice de capabilities atualizado.`);
+    return;
+  }
+  console.error(`${red}Ação desconhecida:${reset} ${opts.action}`);
+  process.exit(1);
+}
+
+/**
+ * @param {string[]} argv
+ * @returns {{ help: boolean, dir: string, visual: boolean, activeSession: string|null, parseError: boolean, unknownFlag: string }}
+ */
+function parsePlanArgs(argv) {
+  const out = { help: false, dir: process.cwd(), visual: false, activeSession: null, parseError: false, unknownFlag: '' };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '-h' || a === '--help') out.help = true;
+    else if (a === '--visual') out.visual = true;
+    else if (a === '--dir' && argv[i + 1]) out.dir = path.resolve(argv[++i]);
+    else if (a === '--session' && argv[i + 1]) out.activeSession = String(argv[++i]).replace(/\\/g, '/');
+    else if (!a.startsWith('-') && i === 0) out.dir = path.resolve(a);
+    else { out.parseError = true; out.unknownFlag = a; break; }
+  }
+  return out;
+}
+
+/**
+ * @param {string[]} argv
+ * @returns {{ help: boolean, dir: string, matrix: boolean, activeSession: string|null, parseError: boolean, unknownFlag: string }}
+ */
+function parseVerifyArgs(argv) {
+  const out = { help: false, dir: process.cwd(), matrix: false, activeSession: null, parseError: false, unknownFlag: '' };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '-h' || a === '--help') out.help = true;
+    else if (a === '--matrix') out.matrix = true;
+    else if (a === '--dir' && argv[i + 1]) out.dir = path.resolve(argv[++i]);
+    else if (a === '--session' && argv[i + 1]) out.activeSession = String(argv[++i]).replace(/\\/g, '/');
+    else if (!a.startsWith('-') && i === 0) out.dir = path.resolve(a);
+    else { out.parseError = true; out.unknownFlag = a; break; }
+  }
+  return out;
+}
+
+/**
+ * Imprime grafo ASCII de ondas e tarefas lido do PLAN.md.
+ * @param {{ dir: string, activeSession: string|null }} opts
+ */
+function runPlanVisual(opts) {
+  const c = useAnsiColors();
+  printSection('OXE ▸ plan --visual');
+  const statePath = oxeHealth.oxePaths(opts.dir).state;
+  const stateText = fs.existsSync(statePath) ? fs.readFileSync(statePath, 'utf8') : '';
+  const activeSession = opts.activeSession || oxeHealth.parseActiveSession(stateText) || null;
+  const sp = oxeHealth.scopedOxePaths(opts.dir, activeSession);
+  const planPath = sp.plan || oxeHealth.oxePaths(opts.dir).plan;
+
+  console.log(`  ${c ? green : ''}Projeto:${c ? reset : ''} ${c ? cyan : ''}${opts.dir}${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}Sessão:${c ? reset : ''} ${c ? cyan : ''}${activeSession || 'modo legado'}${c ? reset : ''}`);
+
+  if (!fs.existsSync(planPath)) {
+    console.log(`\n  ${yellow}PLAN.md não encontrado em ${planPath}${reset}`);
+    console.log(`  ${dim}Rode /oxe-plan para criar o plano.${reset}\n`);
+    return;
+  }
+
+  const planMd = fs.readFileSync(planPath, 'utf8');
+  const plan = oxeDashboard.parsePlan(planMd);
+
+  if (!plan.waves.length) {
+    console.log(`\n  ${yellow}Nenhuma onda encontrada no PLAN.md.${reset}\n`);
+    return;
+  }
+
+  console.log('');
+  for (const wave of plan.waves) {
+    const waveLabel = `  ${c ? yellow : ''}Onda ${wave.wave}${c ? reset : ''}`;
+    for (let i = 0; i < wave.tasks.length; i++) {
+      const task = wave.tasks[i];
+      const deps = task.dependsOn.length ? ` ${c ? dim : ''}← ${task.dependsOn.join(', ')}${c ? reset : ''}` : '';
+      const complexity = task.complexity ? ` ${c ? dim : ''}[${task.complexity}]${c ? reset : ''}` : '';
+      if (i === 0) {
+        console.log(`${waveLabel}   ${c ? cyan : ''}${task.id}${c ? reset : ''} — ${task.title}${complexity}${deps}`);
+      } else {
+        console.log(`${''.padEnd(waveLabel.replace(/\x1b\[[0-9;]*m/g, '').length + 3)}${c ? cyan : ''}${task.id}${c ? reset : ''} — ${task.title}${complexity}${deps}`);
+      }
+    }
+    console.log('');
+  }
+
+  const total = plan.totalTasks;
+  const waveCount = plan.waves.length;
+  console.log(`  ${c ? dim : ''}${total} tarefa${total !== 1 ? 's' : ''} · ${waveCount} onda${waveCount !== 1 ? 's' : ''}${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}✓${c ? reset : ''} plan --visual concluído.\n`);
+}
+
+/**
+ * Imprime tabela ANSI spec → plan → verify (coverage matrix).
+ * @param {{ dir: string, activeSession: string|null }} opts
+ */
+function runVerifyMatrix(opts) {
+  const c = useAnsiColors();
+  printSection('OXE ▸ verify --matrix');
+  const statePath = oxeHealth.oxePaths(opts.dir).state;
+  const stateText = fs.existsSync(statePath) ? fs.readFileSync(statePath, 'utf8') : '';
+  const activeSession = opts.activeSession || oxeHealth.parseActiveSession(stateText) || null;
+  const sp = oxeHealth.scopedOxePaths(opts.dir, activeSession);
+  const specPath = sp.spec || oxeHealth.oxePaths(opts.dir).spec;
+  const planPath = sp.plan || oxeHealth.oxePaths(opts.dir).plan;
+  const verifyPath = sp.verify || oxeHealth.oxePaths(opts.dir).verify;
+
+  console.log(`  ${c ? green : ''}Projeto:${c ? reset : ''} ${c ? cyan : ''}${opts.dir}${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}Sessão:${c ? reset : ''} ${c ? cyan : ''}${activeSession || 'modo legado'}${c ? reset : ''}`);
+
+  const specMd = fs.existsSync(specPath) ? fs.readFileSync(specPath, 'utf8') : '';
+  const planMd = fs.existsSync(planPath) ? fs.readFileSync(planPath, 'utf8') : '';
+  const verifyMd = fs.existsSync(verifyPath) ? fs.readFileSync(verifyPath, 'utf8') : '';
+
+  const spec = oxeDashboard.parseSpec(specMd);
+  const plan = oxeDashboard.parsePlan(planMd);
+  const verify = oxeDashboard.parseVerify(verifyMd);
+  const matrix = oxeDashboard.buildCoverageMatrix(spec, plan, verify);
+
+  if (!matrix.length) {
+    if (!spec.criteria.length) {
+      console.log(`\n  ${yellow}Nenhum critério A* encontrado no SPEC.md.${reset}`);
+      console.log(`  ${dim}Rode /oxe-spec para criar a especificação.${reset}\n`);
+    } else {
+      console.log(`\n  ${yellow}Nenhum dado disponível para a matriz.${reset}\n`);
+    }
+    return;
+  }
+
+  const statusSymbol = (s) => {
+    if (s === 'passed') return c ? `${green}✓${reset}` : '✓';
+    if (s === 'failed') return c ? `${red}✗${reset}` : '✗';
+    return c ? `${dim}—${reset}` : '—';
+  };
+  const planSymbol = (covered) => covered ? (c ? `${green}✓${reset}` : '✓') : (c ? `${dim}✗${reset}` : '✗');
+
+  // Compute column widths
+  const colId = Math.max(9, ...matrix.map((r) => r.id.length)) + 2;
+  const colTasks = Math.max(12, ...matrix.map((r) => (r.tasks.join(', ') || '—').length)) + 2;
+
+  const sep = `  ${'─'.repeat(colId)}┼${'─'.repeat(colTasks)}┼──────────┼──────────`;
+  const header = `  ${' Critério'.padEnd(colId)}│${'  Tarefas'.padEnd(colTasks)}│  PLAN    │  VERIFY`;
+
+  console.log('');
+  console.log(c ? `${dim}${header}${reset}` : header);
+  console.log(sep);
+
+  let covered = 0;
+  let verified = 0;
+  for (const row of matrix) {
+    const tasks = row.tasks.length ? row.tasks.join(', ') : '—';
+    const planCell = planSymbol(row.planCovered);
+    const verifyCell = statusSymbol(row.verifyStatus);
+    const label = `  ${row.id}`.padEnd(colId);
+    const taskCell = `  ${tasks}`.padEnd(colTasks);
+    console.log(`${label}│${taskCell}│  ${planCell}       │  ${verifyCell}`);
+    if (row.planCovered) covered++;
+    if (row.verifyStatus === 'passed') verified++;
+  }
+
+  console.log(sep);
+  const total = matrix.length;
+  console.log(`\n  ${c ? dim : ''}${covered}/${total} critérios cobertos pelo plano · ${verified}/${total} aprovados no verify${c ? reset : ''}`);
+  console.log(`  ${c ? green : ''}✓${c ? reset : ''} verify --matrix concluído.\n`);
+}
+
 async function main() {
   const argv = process.argv.slice(2);
   let command = 'install';
@@ -2441,8 +3714,14 @@ async function main() {
     argv[0] === 'doctor' ||
     argv[0] === 'status' ||
     argv[0] === 'init-oxe' ||
+    argv[0] === 'dashboard' ||
+    argv[0] === 'runtime' ||
+    argv[0] === 'azure' ||
     argv[0] === 'uninstall' ||
     argv[0] === 'update' ||
+    argv[0] === 'capabilities' ||
+    argv[0] === 'plan' ||
+    argv[0] === 'verify' ||
     argv[0] === 'install'
   ) {
     command = argv[0];
@@ -2509,6 +3788,108 @@ async function main() {
     return;
   }
 
+  if (command === 'capabilities') {
+    const cap = parseCapabilitiesArgs(argv);
+    if (cap.help) {
+      printBanner();
+      usage();
+      process.exit(0);
+    }
+    if (cap.parseError) {
+      printBanner();
+      console.error(`${red}Opção desconhecida:${reset} ${cap.unknownFlag}`);
+      usage();
+      process.exit(1);
+    }
+    printBanner();
+    if (!fs.existsSync(cap.dir)) {
+      console.error(`${yellow}Diretório não encontrado: ${cap.dir}${reset}`);
+      process.exit(1);
+    }
+    runCapabilities(cap);
+    return;
+  }
+
+  if (command === 'dashboard') {
+    const d = parseDashboardArgs(argv);
+    if (d.help) {
+      printBanner();
+      usage();
+      process.exit(0);
+    }
+    if (d.parseError) {
+      printBanner();
+      console.error(`${red}Opção desconhecida:${reset} ${d.unknownFlag}`);
+      usage();
+      process.exit(1);
+    }
+    printBanner();
+    await runDashboard(d);
+    return;
+  }
+
+  if (command === 'runtime') {
+    const runtime = parseRuntimeArgs(argv);
+    if (runtime.help) {
+      printBanner();
+      usage();
+      process.exit(0);
+    }
+    if (runtime.parseError) {
+      printBanner();
+      console.error(`${red}Opção desconhecida:${reset} ${runtime.unknownFlag}`);
+      usage();
+      process.exit(1);
+    }
+    printBanner();
+    if (!fs.existsSync(runtime.dir)) {
+      console.error(`${yellow}Diretório não encontrado: ${runtime.dir}${reset}`);
+      process.exit(1);
+    }
+    runRuntime(runtime);
+    return;
+  }
+
+  if (command === 'azure') {
+    const azure = parseAzureArgs(argv);
+    if (azure.help) {
+      printBanner();
+      usage();
+      process.exit(0);
+    }
+    if (azure.parseError) {
+      printBanner();
+      console.error(`${red}Opção desconhecida:${reset} ${azure.unknownFlag}`);
+      usage();
+      process.exit(1);
+    }
+    printBanner();
+    runAzure(azure);
+    return;
+  }
+
+  if (command === 'plan') {
+    const planOpts = parsePlanArgs(argv);
+    if (planOpts.help) { printBanner(); usage(); process.exit(0); }
+    if (planOpts.parseError) { printBanner(); console.error(`${red}Opção desconhecida:${reset} ${planOpts.unknownFlag}`); usage(); process.exit(1); }
+    if (!planOpts.visual) { printBanner(); console.error(`${yellow}Use oxe-cc plan --visual${reset}`); process.exit(1); }
+    printBanner();
+    if (!fs.existsSync(planOpts.dir)) { console.error(`${yellow}Diretório não encontrado: ${planOpts.dir}${reset}`); process.exit(1); }
+    runPlanVisual(planOpts);
+    return;
+  }
+
+  if (command === 'verify') {
+    const verifyOpts = parseVerifyArgs(argv);
+    if (verifyOpts.help) { printBanner(); usage(); process.exit(0); }
+    if (verifyOpts.parseError) { printBanner(); console.error(`${red}Opção desconhecida:${reset} ${verifyOpts.unknownFlag}`); usage(); process.exit(1); }
+    if (!verifyOpts.matrix) { printBanner(); console.error(`${yellow}Use oxe-cc verify --matrix${reset}`); process.exit(1); }
+    printBanner();
+    if (!fs.existsSync(verifyOpts.dir)) { console.error(`${yellow}Diretório não encontrado: ${verifyOpts.dir}${reset}`); process.exit(1); }
+    runVerifyMatrix(verifyOpts);
+    return;
+  }
+
   const opts = parseInstallArgs(argv);
 
   if (opts.version) {
@@ -2555,7 +3936,11 @@ async function main() {
       console.error(`${yellow}Diretório não encontrado: ${target}${reset}`);
       process.exit(1);
     }
-    runStatus(target, { json: opts.jsonOutput, hints: opts.statusHints });
+    if (opts.statusFull) {
+      runStatusFull(target);
+    } else {
+      runStatus(target, { json: opts.jsonOutput, hints: opts.statusHints });
+    }
     return;
   }
 
@@ -2571,8 +3956,8 @@ async function main() {
     bootstrapOxe(target, { dryRun: opts.dryRun, force: opts.force });
     printSummaryAndNextSteps(c0, {
       bullets: opts.dryRun
-        ? ['[simulação] Seriam criados ou atualizados .oxe/STATE.md, .oxe/config.json e .oxe/codebase/']
-        : ['.oxe/STATE.md, .oxe/config.json e pasta .oxe/codebase/ (criados ou atualizados conforme --force)'],
+        ? ['[simulação] Seriam criados ou atualizados .oxe/STATE.md, .oxe/config.json, .oxe/codebase/, .oxe/ACTIVE-RUN.json e .oxe/OXE-EVENTS.ndjson']
+        : ['.oxe/STATE.md, .oxe/config.json, .oxe/codebase/, .oxe/ACTIVE-RUN.json e .oxe/OXE-EVENTS.ndjson (criados ou atualizados conforme --force)'],
       nextSteps: [
         { desc: 'Validar o projeto:', cmd: 'npx oxe-cc doctor' },
         { desc: 'Instalar integrações IDE/CLI (se ainda não fez):', cmd: 'npx oxe-cc@latest' },
@@ -2590,6 +3975,8 @@ async function main() {
 }
 
 main().catch((err) => {
-  console.error(err);
+  const msg = err && err.message ? err.message : String(err);
+  console.error(`${red}Erro:${reset} ${msg}`);
+  if (process.env.OXE_DEBUG === '1') console.error(err);
   process.exit(1);
 });