predators-protocol 1.0.0 → 1.2.0

package/bin/predators-cli.js

@@ -1,777 +1,825 @@
-#!/usr/bin/env node
-// packages/predators-protocol/bin/predators-cli.js
-// NPX CLI canon Predators Protocol · 11 comandos fase BETA cumulativa
-// Lei #11 honest UPFRONT · Lei #14 PERFEITO OU FIX-GERAL · Lei #13 Pureza canon
-
-"use strict";
-
-const fs = require("fs");
-const path = require("path");
-const { spawnSync } = require("child_process");
-
-const CLI_VERSION_CANON = "predators-cli-canon-1.0.0-STABLE-14-leis-14-canon-docs-brain-100pct-2026-05-28";
-
-const PACKAGE_ROOT = path.resolve(__dirname, "..");
-const BUNDLE_DIR = path.join(PACKAGE_ROOT, "bundle");
-const LIB_DIR = path.join(PACKAGE_ROOT, "lib");
-
-// UX layer (additive · Lei #4 byte-canon preserve · 11 comandos existentes inalterados)
-let uxLib = null;
-function loadUxLib() {
-  if (uxLib) return uxLib;
-  try {
-    uxLib = {
-      splash: require(path.join(LIB_DIR, "splash.js")),
-      config: require(path.join(LIB_DIR, "config.js")),
-      audio: require(path.join(LIB_DIR, "audio.js")),
-      colors: require(path.join(LIB_DIR, "colors.js")),
-      asciiArt: require(path.join(LIB_DIR, "ascii-art.js")),
-      spinners: require(path.join(LIB_DIR, "spinners.js")),
-    };
-    return uxLib;
-  } catch (err) {
-    return null;
-  }
-}
-
-function bundlePath(relPath) {
-  return path.join(BUNDLE_DIR, relPath);
-}
-
-function detectPythonCanon() {
-  // Priority: PREDATORS_PYTHON env override → repo .venv (if in dev) → python3 → python
-  const candidates = [];
-
-  if (process.env.PREDATORS_PYTHON && fs.existsSync(process.env.PREDATORS_PYTHON)) {
-    candidates.push(process.env.PREDATORS_PYTHON);
-  }
-
-  // Dev mode: if invoked from within Predators repo (next to .venv)
-  const devVenvWin = path.resolve(PACKAGE_ROOT, "..", "..", ".venv", "Scripts", "python.exe");
-  const devVenvUnix = path.resolve(PACKAGE_ROOT, "..", "..", ".venv", "bin", "python");
-  if (fs.existsSync(devVenvWin)) candidates.push(devVenvWin);
-  if (fs.existsSync(devVenvUnix)) candidates.push(devVenvUnix);
-
-  // System python
-  for (const cmd of ["python3", "python"]) {
-    const probe = spawnSync(cmd, ["--version"], { encoding: "utf8" });
-    if (probe.status === 0) {
-      candidates.push(cmd);
-      break;
-    }
-  }
-
-  return candidates.length > 0 ? candidates[0] : null;
-}
-
-function printHelpCanon() {
-  console.error(`
-predators-cli · canon Predators NPX CLI 1.0.0 STABLE (canon 100% · 14 leis ratificadas)
-
-USO:
-  npx predators-protocol <comando>
-
-COMANDOS canon vigentes (17 comandos):
-
-  -- fase 1 (introspecção · 4 comandos) --
-  version           Exibe versão canon
-  status            Estado atual canon · bundle integrity check
-  list-predators    Lista 64 predadores frota canon vigente
-  list-workflows    Lista 4 workflows canon (caca-sistematica · pacto-cyber-squad · pipeline-fenix · saneamento-brownfield)
-
-  -- fase BETA (state machines · 5 comandos) --
-  workflow-states   Lista 6 WorkflowStateCanon (PENDING/SCHEDULED/RUNNING/COMPLETED/FAILED/PAUSED)
-  story-states      Lista 5 StoryStateCanon (DRAFT/REFINEMENT/READY/IN_PROGRESS/DONE)
-  layers-list       Lista 7 ContextLayerCanon L0-L6 (Lei do Sangue → user input)
-  benchmark-info    Mostra benchmark scipy protocol canon (N=180 p<0.05)
-  metrics-list      Lista 4 golden signals canon M1 APM (latency + traffic + errors + saturation)
-
-  -- fase UX (additive · Lei #4 byte-canon preserve · 5 comandos) --
-  init              Polimórfico · sem arg = splash cinematográfico · com <name> = scaffolda projeto novo + sync
-                    Flags: --force (sempre cinemático · ignora cache) · --minimal (1-linha)
-  config            Preferências user (theme · audio · splash · telemetry)
-  show              Renderiza ASCII art predator card OR The Eye logo
-  sync              Sincroniza canon files (predators/ + docs/ + .claude/ + CLAUDE.md) do bundle NPX para CWD
-  tour              Cinematic walkthrough · 5 atos canon (camadas · leis · diretrizes · comandos · próximos passos)
-
-  -- fase R2 (onboarding · 2026-05-26 · Polvo · 1 comando novo) --
-  install           Alias semântico para 'sync --force' · UX onboarding clearer
-
-  -- fase TOKEN-COLABORADOR (2026-05-27 · Borboleta + Jaguar · 2 comandos novos) --
-  unlock <TOKEN>    Ativa acesso colaborador via token (canon access-token-client)
-  gen-token         Apex T7 gera token via CLI (PREDATORS_OWNER_KEY_BACKEND env)
-                    Usage: gen-token --name "Nome" [--email x] [--list]
-
-  -- fase BRAIN (2026-05-28 · 1.0.0 STABLE · 1 comando novo) --
-  brain-status      Snapshot canon estrutura cerebral · 11 daemons + 6 flags + Elefante (READ-only)
-                    Runtime real exige Python + clonar repo + brain-on.cmd · ver caminho em docs
-
-  help              Exibe esta mensagem
-
-Lei #11 honest UPFRONT 1.0.0 STABLE cumulativa:
-  · Bundle 162 files · 64 predadores + 14 LEI canon-docs + AUDIT-FIRM + SH-CATALOG + 7 skills · ZERO infra leak
-  · sync command requer CWD contendo predators/ OU --force flag · pattern canon partner-bundle
-  · NPX = portal READ canon · scaffold projeto novo + token unlock. Encarnação real exige Claude Code CLI + repo + chave LLM
-  · brain-status = snapshot canon (não-live) · runtime real exige Python 3.11+ + brain-on.cmd · ver QUICKSTART-SOCIO.md
-`);
-}
-
-function printVersionCanon() {
-  console.log(CLI_VERSION_CANON);
-}
-
-function printStatusCanon() {
-  const synapseMd = bundlePath("docs/SYNAPSE.md");
-  const encarnacaoMd = bundlePath("docs/ENCARNACAO.md");
-  const claudeMd = bundlePath("CLAUDE.md");
-  const predatorsDir = bundlePath("predators");
-  const skillsDir = bundlePath(".claude/commands");
-  let predatorCount = 0;
-  if (fs.existsSync(predatorsDir)) {
-    const walk = (dir) => {
-      for (const e of fs.readdirSync(dir, { withFileTypes: true })) {
-        const p = path.join(dir, e.name);
-        if (e.isDirectory()) walk(p);
-        else if (e.name === "predator.json") predatorCount++;
-      }
-    };
-    walk(predatorsDir);
-  }
-  console.log("canon Predators status:");
-  console.log(`  CLI version: ${CLI_VERSION_CANON}`);
-  console.log(`  bundle root: ${BUNDLE_DIR}`);
-  console.log(`  CLAUDE.md: ${fs.existsSync(claudeMd) ? "PRESENT" : "MISSING"}`);
-  console.log(`  SYNAPSE.md: ${fs.existsSync(synapseMd) ? "PRESENT" : "MISSING"}`);
-  console.log(`  ENCARNACAO.md: ${fs.existsSync(encarnacaoMd) ? "PRESENT" : "MISSING"}`);
-  console.log(`  predators canon: ${predatorCount}/63 byte-presente`);
-  console.log(`  .claude/commands/: ${fs.existsSync(skillsDir) ? "PRESENT" : "MISSING"}`);
-  console.log(`  Lei #14 canon: PERFEITO OU FIX-GERAL ratificada constitucional`);
-  console.log(`  Lei #1 reign: bundle slim · ZERO infra leak audit (0.3.0-beta.0)`);
-  console.log(`  Diretrizes 4 (2026-05-24): Lei do Tom · Autonomia Sequencial · PASSO 0 EVERY · Separação canon-doc/comunicação`);
-}
-
-function listPredatorsCanon() {
-  console.log("64 predadores frota canon vigente pós-F4 Baleia-cantora:");
-  console.log("  apex:       4 (Águia + Leão + Orca + Tigre-siberiano)");
-  console.log("  hunter:     5 (Tubarão-branco JUIZ FINAL Art. 14 + Escorpião + Hiena + Crocodilo + Piranha)");
-  console.log("  builder:    9 (Jaguar + Tatu-bola + Coruja + Pirarucu + Lince + Polvo + 3)");
-  console.log("  designer:   8 (Borboleta-azul + Tucano-toco + Baleia-cantora + 5)");
-  console.log("  copy:       6 (Serpente-coral + 5)");
-  console.log("  intel:      8 (Lobo-solitário + Tarântula + Jiboia + 5)");
-  console.log("  governance: 6");
-  console.log("  growth:     6");
-  console.log("  web3:       6 (Medusa + 5)");
-  console.log("  meta:       6 (Dragão-ancestral + Elefante + Fênix + Camaleão + Serpente + 1)");
-}
-
-function listWorkflowsCanon() {
-  console.log("4 workflows canon Predators (Lei #13 Pureza):");
-  console.log("  - caca-sistematica");
-  console.log("  - pacto-cyber-squad");
-  console.log("  - pipeline-fenix");
-  console.log("  - saneamento-brownfield");
-}
-
-function listWorkflowStatesCanon() {
-  console.log("6 WorkflowStateCanon canon Predators (D2 ETAPA 2 state machine):");
-  console.log("  PENDING     · workflow definição cravada · zero execução");
-  console.log("  SCHEDULED   · próxima execução planejada · cron canon");
-  console.log("  RUNNING     · steps em execução runtime");
-  console.log("  COMPLETED   · todos steps OK · success path");
-  console.log("  FAILED      · step falhou · rollback canon");
-  console.log("  PAUSED      · humano interrompeu · retomar manual");
-  console.log("");
-  console.log("7 transições válidas canon (Lei #4 reign state machine):");
-  console.log("  PENDING → SCHEDULED · SCHEDULED → RUNNING · RUNNING → COMPLETED");
-  console.log("  RUNNING → FAILED · RUNNING → PAUSED · PAUSED → RUNNING · FAILED → PENDING");
-}
-
-function listStoryStatesCanon() {
-  console.log("5 StoryStateCanon canon Predators (D3 ETAPA 3 state machine):");
-  console.log("  DRAFT       · criação inicial · briefing parcial");
-  console.log("  REFINEMENT  · briefing completo · Águia preside refinamento");
-  console.log("  READY       · predator owner identificado · scope clear");
-  console.log("  IN_PROGRESS · predator encarnado executando");
-  console.log("  DONE        · 5 garantias entregues · audit Tubarão PASS");
-  console.log("");
-  console.log("7 transições válidas canon:");
-  console.log("  DRAFT → REFINEMENT → READY → IN_PROGRESS → DONE (caminho canônico)");
-  console.log("  REFINEMENT/READY/IN_PROGRESS → DRAFT (rejeição com feedback)");
-}
-
-function listLayersCanon() {
-  console.log("7 ContextLayerCanon L0-L6 canon Predators (D5 ETAPA 1 runtime middleware):");
-  console.log("  L0 LEI_DO_SANGUE_ART_1            · CRITICAL_imutavel    priority 1000");
-  console.log("  L1 LEI_4_SYNAPSE_5_GARANTIAS      · CRITICAL_reign       priority 900");
-  console.log("  L2 5_IMUTAVEIS_BYTE_PRESERVED     · CRITICAL_byte_preserved priority 800");
-  console.log("  L3 14_LEIS_CANON_VIGENTES         · ALTA_vigente         priority 600");
-  console.log("  L4 PREDATOR_ENCARNADO_CONSTITUTION · ALTA_encarnacao     priority 500");
-  console.log("  L5 TASK_ESPECIFICA_CONTEXTO       · MEDIA_task           priority 300");
-  console.log("  L6 USER_PROMPT_INPUT              · INFO_user_input      priority 100");
-  console.log("");
-  console.log("L0+L1+L2 CRITICAL mandatory · Lei #14 BINARY FIX-GERAL trigger se ausentes");
-}
-
-function showBenchmarkInfoCanon() {
-  console.log("Benchmark canon Predators · scipy.stats N=180 p<0.05 protocol:");
-  console.log("");
-  console.log("  dimensions canon (6):");
-  console.log("    D5_context_layers_L0_L6");
-  console.log("    D2_workflows_engine");
-  console.log("    D3_stories_lifecycle");
-  console.log("    D4_multi_project_filesystem");
-  console.log("    D1_mcp_consuming");
-  console.log("    D6_dispatcher_integration");
-  console.log("");
-  console.log("  parâmetros estatísticos canon:");
-  console.log("    sample size per dimension: 30");
-  console.log("    total samples N: 180");
-  console.log("    p-value threshold: < 0.05");
-  console.log("    confidence interval: 95%");
-  console.log("");
-  console.log("  ttest_ind canon próprio Lei #13 Pureza (sem scipy hard-dep)");
-  console.log("");
-  console.log("Lei #11 honest UPFRONT: execução real depende provisioning Apex T7");
-}
-
-function listGoldenSignalsCanon() {
-  console.log("4 Golden Signals canon M1 APM Predators (B2 ONDA PRIORIDADES):");
-  console.log("  latency_milliseconds  · CanonMetricHistogram (p50/p95/p99 via percentile_canon)");
-  console.log("  traffic_total         · CanonMetricCounter");
-  console.log("  errors_total          · CanonMetricCounter");
-  console.log("  saturation_active     · CanonMetricGauge");
-  console.log("");
-  console.log("5 dimensões instrumentadas canon:");
-  console.log("  D1_mcp_consuming · D2_workflows_engine · D3_stories_lifecycle · D4_multi_project_filesystem · D5_context_layers_middleware");
-  console.log("");
-  console.log("Lei #13 Pureza: metrics canon próprio · duck-type prometheus_client (sem hard-dep externa)");
-}
-
-// ──────────────────────────────────────────────────────────────────────
-// UX layer commands (additive · Lei #4 byte-canon preserve)
-// ──────────────────────────────────────────────────────────────────────
-
-async function runInitCommand() {
-  const args = process.argv.slice(3);
-  const positionalArgs = args.filter(a => !a.startsWith("-"));
-  const projectName = positionalArgs[0] || null;
-
-  // Polymorphic init (R2 onda · 2026-05-26 · Polvo Builder)
-  // - no positional arg → splash UX (backward compat byte-preserved)
-  // - positional arg → project scaffolding (mkdir + sync inside)
-  if (projectName) {
-    return runInitProjectMode(projectName, args);
-  }
-
-  const ux = loadUxLib();
-  if (!ux) {
-    console.error("UX layer não-disponível neste pacote.");
-    process.exit(1);
-  }
-  const forceFlag = args.includes("--force") || args.includes("-f");
-  const minimalFlag = args.includes("--minimal") || args.includes("-m");
-  await ux.splash.runInitSplash({ force: forceFlag, minimal: minimalFlag });
-}
-
-function runInitProjectMode(projectName, args) {
-  const cwd = process.cwd();
-  const targetDir = path.resolve(cwd, projectName);
-  const force = args.includes("--force") || args.includes("-f");
-
-  if (fs.existsSync(targetDir)) {
-    const contents = fs.readdirSync(targetDir);
-    if (contents.length > 0 && !force) {
-      console.error(`init · diretório ${projectName} já existe e não está vazio.`);
-      console.error("  · Use diretório vazio · OU passe --force para sobrescrever (cuidado)");
-      process.exit(1);
-    }
-  } else {
-    fs.mkdirSync(targetDir, { recursive: true });
-  }
-
-  console.log("Predators Protocol · init project canon (R2 onda 2026-05-26 · Polvo)");
-  console.log(`  projeto: ${projectName}`);
-  console.log(`  path:    ${targetDir}`);
-  console.log("");
-
-  process.chdir(targetDir);
-  if (!process.argv.includes("--force")) {
-    process.argv.push("--force");
-  }
-  runSyncCommand();
-
-  console.log("");
-  console.log("Próximos passos:");
-  console.log(`  cd ${projectName}`);
-  console.log("  npx predators-protocol tour       # tour cinematográfico");
-  console.log("  npx predators-protocol show eye   # logo canon");
-}
-
-function runInstallCommand() {
-  // Alias semântico canon para `sync --force` (UX onboarding clearer)
-  // R2 onda · 2026-05-26 · Polvo · LMAS parity sem violar Lei #13 (canon próprio)
-  console.log("install · alias canon para `sync --force` · instala canon files no CWD");
-  console.log("");
-  if (!process.argv.includes("--force")) {
-    process.argv.push("--force");
-  }
-  runSyncCommand();
-}
-
-function runConfigCommand() {
-  const ux = loadUxLib();
-  if (!ux) {
-    console.error("UX layer não-disponível neste pacote.");
-    process.exit(1);
-  }
-  const subcommand = process.argv[3] || "show";
-  const arg = process.argv[4];
-
-  if (subcommand === "show" || subcommand === "status") {
-    const cfg = ux.config.readConfig();
-    console.log("Predators Protocol · user config");
-    console.log(`  path: ${ux.config.getConfigPath()}`);
-    console.log(`  theme: ${cfg.theme}`);
-    console.log(`  splash.enabled: ${cfg.splash.enabled}`);
-    console.log(`  audio.enabled: ${cfg.audio.enabled}`);
-    console.log(`  firstConnectionAt: ${cfg.firstConnectionAt || "(never)"}`);
-    console.log(`  lastConnectionAt: ${cfg.lastConnectionAt || "(never)"}`);
-    return;
-  }
-  if (subcommand === "theme") {
-    if (!arg) {
-      console.log(`Current theme: ${ux.config.getTheme()}`);
-      console.log("Available: default, dark, light, monochrome");
-      return;
-    }
-    const result = ux.config.setTheme(arg);
-    if (result) {
-      console.log(`Theme set: ${arg}`);
-    } else {
-      console.error(`Invalid theme: ${arg} · available: default, dark, light, monochrome`);
-      process.exit(1);
-    }
-    return;
-  }
-  if (subcommand === "audio") {
-    if (arg === "--enable" || arg === "on") {
-      ux.config.setAudioEnabled(true);
-      console.log("Audio: enabled · .mp3 byte pendentes produção externa (Suno/ElevenLabs/Stable Audio · canon spec docs/PRDs/ONDA-BALEIA-CANTORA-FASE-2-SIGNATURES-2026-05-24/)");
-      return;
-    }
-    if (arg === "--disable" || arg === "off") {
-      ux.config.setAudioEnabled(false);
-      console.log("Audio: disabled");
-      return;
-    }
-    if (arg === "--status" || !arg) {
-      const status = ux.audio.getStatusReport();
-      console.log("Audio status canon:");
-      console.log(`  enabled: ${status.enabled}`);
-      console.log(`  platform: ${status.platform} (WSL: ${status.is_wsl})`);
-      console.log(`  player_available: ${status.player_available} (${status.player_cmd || "none"})`);
-      console.log(`  ${status.canon_note}`);
-      console.log("  signatures Baleia-cantora F4 Fase 2:");
-      for (const s of status.sounds) {
-        console.log(`    · ${s.name} - ${s.description} (file: ${s.file_present ? "PRESENT" : "PENDENTE"})`);
-      }
-      return;
-    }
-  }
-  if (subcommand === "telemetry") {
-    if (arg === "--enable" || arg === "on") {
-      ux.config.setTelemetryEnabled(true);
-      const status = ux.config.getTelemetryStatus();
-      console.log("Telemetry: enabled");
-      console.log(`  anonymous_id: ${status.anonymous_id} (gerado runtime · zero PII)`);
-      console.log(`  endpoint: ${status.endpoint || "local-only (future network endpoint TBD Apex T7)"}`);
-      console.log("  Lei #1 reign: zero PII · zero IP capture · zero hostname · só sync events anônimos");
-      return;
-    }
-    if (arg === "--disable" || arg === "off") {
-      ux.config.setTelemetryEnabled(false);
-      console.log("Telemetry: disabled · zero coleta");
-      return;
-    }
-    if (arg === "--status" || !arg) {
-      const status = ux.config.getTelemetryStatus();
-      console.log("Telemetry status canon:");
-      console.log(`  enabled: ${status.enabled}`);
-      console.log(`  anonymous_id: ${status.anonymous_id || "(não gerado · opt-in pendente)"}`);
-      console.log(`  sync_count: ${status.sync_count}`);
-      console.log(`  last_sync_at: ${status.last_sync_at || "(nunca)"}`);
-      console.log(`  endpoint: ${status.endpoint || "local-only (null)"}`);
-      console.log(`  ${status.canon_note}`);
-      return;
-    }
-  }
-  console.error(`Config subcommand desconhecido: ${subcommand}`);
-  console.error("Available: show · theme [default|dark|light|monochrome] · audio [--enable|--disable|--status] · telemetry [--enable|--disable|--status]");
-  process.exit(1);
-}
-
-function runShowCommand() {
-  const ux = loadUxLib();
-  if (!ux) {
-    console.error("UX layer não-disponível neste pacote.");
-    process.exit(1);
-  }
-  const target = process.argv[3] || "eye";
-  const theme = ux.config.getTheme();
-
-  if (target === "eye" || target === "logo") {
-    console.log(ux.asciiArt.renderEye(theme));
-    return;
-  }
-  if (target === "banner") {
-    console.log(ux.asciiArt.renderHeroBanner(theme));
-    return;
-  }
-  if (target === "list") {
-    console.log("Predator cards canon vigentes:");
-    for (const id of ux.asciiArt.listPredatorsWithCards()) {
-      console.log(`  · ${id}`);
-    }
-    return;
-  }
-  const card = ux.asciiArt.renderPredatorCard(target, theme);
-  if (!card) {
-    console.error(`Predator card não-disponível: ${target}`);
-    console.error("Disponíveis: " + ux.asciiArt.listPredatorsWithCards().join(", "));
-    console.error("Outros targets: eye | logo | banner | list");
-    process.exit(1);
-  }
-  console.log(card);
-}
-
-// ──────────────────────────────────────────────────────────────────────
-// sync command · canon files refresh CWD from bundle (0.3.0-beta.0)
-// ──────────────────────────────────────────────────────────────────────
-
-function copyDirRecursive(src, dst) {
-  if (!fs.existsSync(src)) return { copied: 0, skipped: 0 };
-  fs.mkdirSync(dst, { recursive: true });
-  let copied = 0;
-  let skipped = 0;
-  for (const e of fs.readdirSync(src, { withFileTypes: true })) {
-    const s = path.join(src, e.name);
-    const d = path.join(dst, e.name);
-    if (e.isDirectory()) {
-      const r = copyDirRecursive(s, d);
-      copied += r.copied;
-      skipped += r.skipped;
-    } else {
-      fs.copyFileSync(s, d);
-      copied++;
-    }
-  }
-  return { copied, skipped };
-}
-
-function backupExistingPath(target) {
-  if (!fs.existsSync(target)) return null;
-  const ts = new Date().toISOString().replace(/[:.]/g, "-");
-  const backup = `${target}.backup-${ts}`;
-  fs.renameSync(target, backup);
-  return backup;
-}
-
-function runSyncCommand() {
-  const args = process.argv.slice(3);
-  const dryRun = args.includes("--dry-run");
-  const force = args.includes("--force") || args.includes("-f");
-  const cwd = process.cwd();
-
-  // Refuse to overwrite a non-Predators directory unless --force passed.
-  const looksLikePredatorsCwd =
-    fs.existsSync(path.join(cwd, "predators")) ||
-    fs.existsSync(path.join(cwd, "CLAUDE.md")) ||
-    fs.existsSync(path.join(cwd, ".claude")) ||
-    fs.existsSync(path.join(cwd, "QUICKSTART-SOCIO.md"));
-
-  if (!looksLikePredatorsCwd && !force) {
-    console.error("sync · CWD não parece ser pasta Predators (sem predators/ · CLAUDE.md · .claude/).");
-    console.error(`  CWD: ${cwd}`);
-    console.error("  · Para sync inicial em pasta vazia · use: npx predators-protocol sync --force");
-    console.error("  · Para sync em pasta Predators existente · CWD precisa conter CLAUDE.md ou predators/");
-    process.exit(1);
-  }
-
-  const SYNC_TARGETS = [
-    { rel: "predators", type: "dir" },
-    { rel: "docs", type: "dir" },
-    { rel: ".claude/commands", type: "dir" },
-    { rel: "CLAUDE.md", type: "file" },
-    { rel: "QUICKSTART-SOCIO.md", type: "file" },
-  ];
-
-  console.log("Predators Protocol · sync canon files do bundle NPX para CWD");
-  console.log(`  bundle:  ${BUNDLE_DIR}`);
-  console.log(`  target:  ${cwd}`);
-  if (dryRun) console.log("  mode:    DRY-RUN (zero writes)");
-  console.log("");
-
-  let totalCopied = 0;
-  for (const { rel, type } of SYNC_TARGETS) {
-    const src = path.join(BUNDLE_DIR, rel);
-    const dst = path.join(cwd, rel);
-
-    if (!fs.existsSync(src)) {
-      console.log(`  skip:    ${rel} (não-presente no bundle)`);
-      continue;
-    }
-
-    if (dryRun) {
-      console.log(`  preview: ${rel} (${type}) · would sync from bundle`);
-      continue;
-    }
-
-    const backup = backupExistingPath(dst);
-    if (backup) {
-      console.log(`  backup:  ${path.basename(backup)}`);
-    }
-
-    if (type === "dir") {
-      const r = copyDirRecursive(src, dst);
-      console.log(`  sync:    ${rel}/ (${r.copied} files)`);
-      totalCopied += r.copied;
-    } else {
-      fs.mkdirSync(path.dirname(dst), { recursive: true });
-      fs.copyFileSync(src, dst);
-      console.log(`  sync:    ${rel}`);
-      totalCopied++;
-    }
-  }
-
-  if (dryRun) {
-    console.log("\nDRY-RUN complete · use sem --dry-run para aplicar.");
-  } else {
-    // Record sync event canon (local always · network telemetry if opt-in + endpoint configured)
-    const ux = loadUxLib();
-    if (ux && ux.config && ux.config.recordSyncEvent) {
-      try { ux.config.recordSyncEvent(); } catch (e) { /* graceful · sync continua */ }
-    }
-    console.log(`\nsync complete · ${totalCopied} files canon writados · backups com sufixo .backup-<timestamp>`);
-    console.log("Lei #1 reign: bundle slim · ZERO infra leak (1.0.0 STABLE)");
-  }
-}
-
-// ──────────────────────────────────────────────────────────────────────
-// tour command · cinematic walkthrough canon vigente (1.0.0 STABLE)
-// ──────────────────────────────────────────────────────────────────────
-
-function sleep(ms) {
-  return new Promise(resolve => setTimeout(resolve, ms));
-}
-
-async function runTourCommand() {
-  const ux = loadUxLib();
-  if (!ux) {
-    console.error("UX layer não-disponível neste pacote.");
-    process.exit(1);
-  }
-  const args = process.argv.slice(3);
-  const fast = args.includes("--fast");
-  const beat = fast ? 200 : 800;
-
-  const theme = ux.config.getTheme();
-  console.log("");
-  console.log(ux.asciiArt.renderEye(theme));
-  await sleep(beat);
-
-  console.log("");
-  console.log("PREDADORES PROTOCOL · tour canon vigente (1.0.0 STABLE)");
-  console.log("64 predadores · 10 camadas · 14 leis · 5 garantias Synapse");
-  await sleep(beat);
-
-  console.log("");
-  console.log("─── 1/5 · 10 camadas trofic ───");
-  await sleep(beat / 2);
-  const layers = [
-    ["apex",       "4 predators", "T5", "Águia + Leão + Orca + Tigre"],
-    ["hunter",     "5 predators", "T4-T5", "Tubarão JUIZ + Cyber Squad"],
-    ["builder",    "9 predators", "T3", "Polvo + Tatu + Jaguar + 6"],
-    ["designer",   "8 predators", "T3-T4", "Borboleta + Tucano + Baleia-cantora F4"],
-    ["copy",       "6 predators", "T3", "Serpente-coral + 5"],
-    ["intel",      "8 predators", "T3", "Lobo-solitário + Tarântula + 6"],
-    ["governance", "6 predators", "T3", "Tigre + Gorila + Lince + 3"],
-    ["growth",     "6 predators", "T2-T3", "Leão push + Formiga + 4"],
-    ["web3",       "6 predators", "T3", "Medusa veto + 5"],
-    ["meta",       "6 predators", "T1-T2", "Dragão + Fênix + Elefante + 3"],
-  ];
-  for (const [layer, count, trophic, examples] of layers) {
-    console.log(`  · ${layer.padEnd(11)} ${count.padEnd(12)} ${trophic.padEnd(6)} ${examples}`);
-    await sleep(beat / 4);
-  }
-
-  console.log("");
-  console.log("─── 2/5 · 14 leis canon vigentes ───");
-  await sleep(beat / 2);
-  const laws = [
-    "Lei #1  Lei do Sangue (ABSOLUTO · Tubarão Art. 1 imutável)",
-    "Lei #2  Lei dos Predadores (Fênix Protocol exclusive)",
-    "Lei #3  Lei da Melhoria Disciplinada",
-    "Lei #4  Lei da Synapse (5 garantias canon)",
-    "Lei #5  Canon dos 3 Vetos (Sangue · Operacional · Constitucional)",
-    "Lei #6  Lei dos Predadores Reais (zero demo)",
-    "Lei #7  Lei da Matilha Paralela",
-    "Lei #8  Verificação Empírica (ABSOLUTO)",
-    "Lei #9  Análise antes de Execução",
-    "Lei #10 Skill canon estrito",
-    "Lei #11 NUNCA MINTA JAMAIS (ABSOLUTO)",
-    "Lei #12 O melhor dos melhores",
-    "Lei #13 Pureza Predators (ABSOLUTO)",
-    "Lei #14 PERFEITO OU FIX-GERAL (BINARY)",
-  ];
-  for (const law of laws) {
-    console.log(`  · ${law}`);
-    await sleep(beat / 5);
-  }
-
-  console.log("");
-  console.log("─── 3/5 · 4 Diretrizes Comunicação ───");
-  await sleep(beat / 2);
-  console.log("  1. Lei do Tom Conversacional (Apex T7 direct)");
-  console.log("  2. Autonomia Sequencial (Lei #9)");
-  console.log("  3. PASSO 0 EVERY ONDA (Lei #8 baseline)");
-  console.log("  4. Separação canon-doc vs comunicação direta");
-  await sleep(beat);
-
-  console.log("");
-  console.log("─── 4/5 · 13 comandos NPX vigentes ───");
-  await sleep(beat / 2);
-  console.log("  introspecção:  version · status · list-predators · list-workflows");
-  console.log("  state machines: workflow-states · story-states · layers-list · benchmark-info · metrics-list");
-  console.log("  experiência UX: init · config · show · sync · tour");
-  await sleep(beat);
-
-  console.log("");
-  console.log("─── 5/5 · Comando canon para sócios ───");
-  await sleep(beat / 2);
-  console.log("");
-  console.log("  mkdir predators-protocol && cd predators-protocol");
-  console.log("  npx predators-protocol@beta sync --force");
-  console.log("");
-  console.log("  → 143 files canon na pasta (64 predadores + docs + skills + CLAUDE.md)");
-  console.log("  → abre no VS Code · ativa extensão Claude Code");
-  console.log("  → /encarnar tubarao-branco (ou qualquer dos 64 IDs)");
-  await sleep(beat);
-
-  console.log("");
-  console.log("─── fim do tour ───");
-  console.log("");
-  console.log("Próximos passos sugeridos:");
-  console.log("  · npx predators-protocol@beta sync --force  (instala canon na pasta atual)");
-  console.log("  · npx predators-protocol@beta show eye      (logo cinematográfico)");
-  console.log("  · npx predators-protocol@beta show list     (lista predator cards disponíveis)");
-  console.log("  · npx predators-protocol@beta help          (todos os 13 comandos)");
-  console.log("");
-  console.log("🦈🐋 Predators Protocol · proprietário · Alex Gonzaga (Tubarão-Apex) · 2026-05-24");
-}
-
-// ──────────────────────────────────────────────────────────────────────
-
-const command = process.argv[2] || "help";
-
-// Lei #1 [a-m] gates · access-token middleware canon 2026-05-27
-// Sócios bypass via PREDATORS_OWNER_KEY env var · colaboradores via `unlock <TOKEN>`
-const { runUnlock, requireValidAccess } = require("../lib/access-token-client.js");
-// Lei #1 [ok1-ok4] gates · gen-token CLI canon 2026-05-27
-const { runGenToken } = require("../lib/gen-token-client.js");
-
-async function runUnlockCommand() {
-  const token = process.argv[3];
-  await runUnlock(token);
-}
-
-async function runGenTokenCommand() {
-  await runGenToken();
-}
-
-// brain-status command · 1.0.0 STABLE · ONDA-NPX-100-RELEASE
-// Snapshot canon estrutura cerebral · READ-only · runtime real exige Python
-async function runBrainStatusCommand() {
-  const snapshotPath = bundlePath("docs/CANON/BRAIN-STATUS-SNAPSHOT.json");
-  if (!fs.existsSync(snapshotPath)) {
-    console.error("brain-status snapshot ausente no bundle · re-sync canon necessário");
-    process.exit(1);
-  }
-  let snapshot;
-  try {
-    snapshot = JSON.parse(fs.readFileSync(snapshotPath, "utf-8"));
-  } catch (err) {
-    console.error(`brain-status snapshot JSON inválido: ${err.message}`);
-    process.exit(1);
-  }
-  console.log("");
-  console.log("PREDADORES PROTOCOL · ESTRUTURA CEREBRAL · snapshot canon");
-  console.log("==========================================================");
-  console.log(`Snapshot cravado: ${snapshot.snapshot_at}`);
-  console.log(`Commit master:    ${snapshot.commit_hash_short}`);
-  console.log(`Status agregado:  ${snapshot.status_aggregate}`);
-  console.log("");
-  console.log("11 daemons cerebrais (runtime real · não-snapshot):");
-  for (const d of snapshot.daemons) {
-    console.log(`  · ${d.name.padEnd(22)} ${d.role}`);
-  }
-  console.log("");
-  console.log("6 feature flags Híbrida (default canon vigente):");
-  for (const f of snapshot.feature_flags) {
-    const mark = f.default === "true" ? "LIVE" : "OPT-IN";
-    console.log(`  · ${f.name.padEnd(28)} default=${f.default.padEnd(5)} ${mark}`);
-  }
-  console.log("");
-  console.log("Elefante · memória institucional Art. 6 imutável:");
-  console.log(`  · pointers cumulative:  ${snapshot.elefante.memory_pointers_count}`);
-  console.log(`  · trace neural files:   ${snapshot.elefante.trace_neural_files_count}`);
-  console.log(`  · consolidation cycles: ${snapshot.elefante.consolidation_cycles_cumulative}`);
-  console.log("");
-  console.log("Honest UPFRONT (Lei #11):");
-  console.log("  · brain-status é READ-only snapshot · cravado no commit acima");
-  console.log("  · runtime real exige: clone repo + Python 3.11+ + brain-on.cmd");
-  console.log("  · 11 daemons LIVE só rodam em clone do repositório · não-NPX");
-  console.log("  · ver bundle/QUICKSTART-SOCIO.md para caminho completo");
-}
-
-const commandsCanon = {
-  version: printVersionCanon,
-  status: printStatusCanon,
-  "list-predators": listPredatorsCanon,
-  "list-workflows": listWorkflowsCanon,
-  "workflow-states": listWorkflowStatesCanon,
-  "story-states": listStoryStatesCanon,
-  "layers-list": listLayersCanon,
-  "benchmark-info": showBenchmarkInfoCanon,
-  "metrics-list": listGoldenSignalsCanon,
-  init: runInitCommand,
-  config: runConfigCommand,
-  show: runShowCommand,
-  sync: runSyncCommand,
-  install: runInstallCommand,
-  tour: runTourCommand,
-  unlock: runUnlockCommand,
-  "gen-token": runGenTokenCommand,
-  "brain-status": runBrainStatusCommand,
-  help: printHelpCanon,
-  "--help": printHelpCanon,
-  "-h": printHelpCanon,
-};
-
-const handler = commandsCanon[command];
-if (!handler) {
-  console.error(`Comando canon NÃO vigente: ${command}`);
-  printHelpCanon();
-  process.exit(1);
-}
-
-// Lei #1 middleware · valida acesso ANTES de executar comando sensível
-// (PUBLIC_COMMANDS · owner bypass · cache local 5min · phone-home revalidação)
-(async () => {
-  try {
-    await requireValidAccess(command);
-    await handler();
-  } catch (err) {
-    console.error(`Falha runtime canon: ${err && err.message ? err.message : err}`);
-    process.exit(1);
-  }
-})();
+#!/usr/bin/env node
+// packages/predators-protocol/bin/predators-cli.js
+// NPX CLI canon Predators Protocol · 11 comandos fase BETA cumulativa
+// Lei #11 honest UPFRONT · Lei #14 PERFEITO OU FIX-GERAL · Lei #13 Pureza canon
+
+"use strict";
+
+const fs = require("fs");
+const path = require("path");
+const { spawnSync } = require("child_process");
+
+const CLI_VERSION_CANON = "predators-cli-canon-1.0.0-STABLE-14-leis-14-canon-docs-brain-100pct-2026-05-28";
+
+const PACKAGE_ROOT = path.resolve(__dirname, "..");
+const BUNDLE_DIR = path.join(PACKAGE_ROOT, "bundle");
+const LIB_DIR = path.join(PACKAGE_ROOT, "lib");
+
+// UX layer (additive · Lei #4 byte-canon preserve · 11 comandos existentes inalterados)
+let uxLib = null;
+function loadUxLib() {
+  if (uxLib) return uxLib;
+  try {
+    uxLib = {
+      splash: require(path.join(LIB_DIR, "splash.js")),
+      config: require(path.join(LIB_DIR, "config.js")),
+      audio: require(path.join(LIB_DIR, "audio.js")),
+      colors: require(path.join(LIB_DIR, "colors.js")),
+      asciiArt: require(path.join(LIB_DIR, "ascii-art.js")),
+      spinners: require(path.join(LIB_DIR, "spinners.js")),
+    };
+    return uxLib;
+  } catch (err) {
+    return null;
+  }
+}
+
+function bundlePath(relPath) {
+  return path.join(BUNDLE_DIR, relPath);
+}
+
+function detectPythonCanon() {
+  // Priority: PREDATORS_PYTHON env override → repo .venv (if in dev) → python3 → python
+  const candidates = [];
+
+  if (process.env.PREDATORS_PYTHON && fs.existsSync(process.env.PREDATORS_PYTHON)) {
+    candidates.push(process.env.PREDATORS_PYTHON);
+  }
+
+  // Dev mode: if invoked from within Predators repo (next to .venv)
+  const devVenvWin = path.resolve(PACKAGE_ROOT, "..", "..", ".venv", "Scripts", "python.exe");
+  const devVenvUnix = path.resolve(PACKAGE_ROOT, "..", "..", ".venv", "bin", "python");
+  if (fs.existsSync(devVenvWin)) candidates.push(devVenvWin);
+  if (fs.existsSync(devVenvUnix)) candidates.push(devVenvUnix);
+
+  // System python
+  for (const cmd of ["python3", "python"]) {
+    const probe = spawnSync(cmd, ["--version"], { encoding: "utf8" });
+    if (probe.status === 0) {
+      candidates.push(cmd);
+      break;
+    }
+  }
+
+  return candidates.length > 0 ? candidates[0] : null;
+}
+
+function printHelpCanon() {
+  console.error(`
+predators-cli · canon Predators NPX CLI 1.0.0 STABLE (canon 100% · 14 leis ratificadas)
+
+USO:
+  npx predators-protocol <comando>
+
+COMANDOS canon vigentes (17 comandos):
+
+  -- fase 1 (introspecção · 4 comandos) --
+  version           Exibe versão canon
+  status            Estado atual canon · bundle integrity check
+  list-predators    Lista 64 predadores frota canon vigente
+  list-workflows    Lista 4 workflows canon (caca-sistematica · pacto-cyber-squad · pipeline-fenix · saneamento-brownfield)
+
+  -- fase BETA (state machines · 5 comandos) --
+  workflow-states   Lista 6 WorkflowStateCanon (PENDING/SCHEDULED/RUNNING/COMPLETED/FAILED/PAUSED)
+  story-states      Lista 5 StoryStateCanon (DRAFT/REFINEMENT/READY/IN_PROGRESS/DONE)
+  layers-list       Lista 7 ContextLayerCanon L0-L6 (Lei do Sangue → user input)
+  benchmark-info    Mostra benchmark scipy protocol canon (N=180 p<0.05)
+  metrics-list      Lista 4 golden signals canon M1 APM (latency + traffic + errors + saturation)
+
+  -- fase UX (additive · Lei #4 byte-canon preserve · 5 comandos) --
+  init              Polimórfico · sem arg = splash cinematográfico · com <name> = scaffolda projeto novo + sync
+                    Flags: --force (sempre cinemático · ignora cache) · --minimal (1-linha)
+  config            Preferências user (theme · audio · splash · telemetry)
+  show              Renderiza ASCII art predator card OR The Eye logo
+  sync              Sincroniza canon files (predators/ + docs/ + .claude/ + CLAUDE.md) do bundle NPX para CWD
+  tour              Cinematic walkthrough · 5 atos canon (camadas · leis · diretrizes · comandos · próximos passos)
+
+  -- fase R2 (onboarding · 2026-05-26 · Polvo · 1 comando novo) --
+  install           Alias semântico para 'sync --force' · UX onboarding clearer
+
+  -- fase TOKEN-COLABORADOR (2026-05-27 · Borboleta + Jaguar · 2 comandos novos) --
+  unlock <TOKEN>    Ativa acesso colaborador via token (canon access-token-client)
+  gen-token         Apex T7 gera token via CLI (PREDATORS_OWNER_KEY_BACKEND env)
+                    Usage: gen-token --name "Nome" [--email x] [--list]
+
+  -- fase BRAIN (2026-05-28 · 1.0.0 STABLE · 1 comando novo) --
+  brain-status      Snapshot canon estrutura cerebral · 11 daemons + 6 flags + Elefante (READ-only)
+                    Runtime real exige Python + clonar repo + brain-on.cmd · ver caminho em docs
+
+  -- fase BRAND (2026-05-29 · BrandBook v2 OBSIDIANA · 1 comando novo) --
+  brand-status      Snapshot canon paleta v2 + tipografia + cadeia de ratificacao (READ-only)
+                    13 hex byte-canon · Archivo/Inter/JetBrains Mono · Pavao Art. 4 v2 + Dragao Art. 3
+
+  help              Exibe esta mensagem
+
+Lei #11 honest UPFRONT 1.0.0 STABLE cumulativa:
+  · Bundle 163 files · 64 predadores + 14 LEI canon-docs + AUDIT-FIRM + SH-CATALOG + BRAND-CANON + 7 skills · ZERO infra leak
+  · sync command requer CWD contendo predators/ OU --force flag · pattern canon partner-bundle
+  · NPX = portal READ canon · scaffold projeto novo + token unlock. Encarnação real exige Claude Code CLI + repo + chave LLM
+  · brain-status = snapshot canon (não-live) · runtime real exige Python 3.11+ + brain-on.cmd · ver QUICKSTART-SOCIO.md
+`);
+}
+
+function printVersionCanon() {
+  console.log(CLI_VERSION_CANON);
+}
+
+function printStatusCanon() {
+  const synapseMd = bundlePath("docs/SYNAPSE.md");
+  const encarnacaoMd = bundlePath("docs/ENCARNACAO.md");
+  const claudeMd = bundlePath("CLAUDE.md");
+  const predatorsDir = bundlePath("predators");
+  const skillsDir = bundlePath(".claude/commands");
+  let predatorCount = 0;
+  if (fs.existsSync(predatorsDir)) {
+    const walk = (dir) => {
+      for (const e of fs.readdirSync(dir, { withFileTypes: true })) {
+        const p = path.join(dir, e.name);
+        if (e.isDirectory()) walk(p);
+        else if (e.name === "predator.json") predatorCount++;
+      }
+    };
+    walk(predatorsDir);
+  }
+  console.log("canon Predators status:");
+  console.log(`  CLI version: ${CLI_VERSION_CANON}`);
+  console.log(`  bundle root: ${BUNDLE_DIR}`);
+  console.log(`  CLAUDE.md: ${fs.existsSync(claudeMd) ? "PRESENT" : "MISSING"}`);
+  console.log(`  SYNAPSE.md: ${fs.existsSync(synapseMd) ? "PRESENT" : "MISSING"}`);
+  console.log(`  ENCARNACAO.md: ${fs.existsSync(encarnacaoMd) ? "PRESENT" : "MISSING"}`);
+  console.log(`  predators canon: ${predatorCount}/63 byte-presente`);
+  console.log(`  .claude/commands/: ${fs.existsSync(skillsDir) ? "PRESENT" : "MISSING"}`);
+  console.log(`  Lei #14 canon: PERFEITO OU FIX-GERAL ratificada constitucional`);
+  console.log(`  Lei #1 reign: bundle slim · ZERO infra leak audit (0.3.0-beta.0)`);
+  console.log(`  Diretrizes 4 (2026-05-24): Lei do Tom · Autonomia Sequencial · PASSO 0 EVERY · Separação canon-doc/comunicação`);
+}
+
+function listPredatorsCanon() {
+  console.log("64 predadores frota canon vigente pós-F4 Baleia-cantora:");
+  console.log("  apex:       4 (Águia + Leão + Orca + Tigre-siberiano)");
+  console.log("  hunter:     5 (Tubarão-branco JUIZ FINAL Art. 14 + Escorpião + Hiena + Crocodilo + Piranha)");
+  console.log("  builder:    9 (Jaguar + Tatu-bola + Coruja + Pirarucu + Lince + Polvo + 3)");
+  console.log("  designer:   8 (Borboleta-azul + Tucano-toco + Baleia-cantora + 5)");
+  console.log("  copy:       6 (Serpente-coral + 5)");
+  console.log("  intel:      8 (Lobo-solitário + Tarântula + Jiboia + 5)");
+  console.log("  governance: 6");
+  console.log("  growth:     6");
+  console.log("  web3:       6 (Medusa + 5)");
+  console.log("  meta:       6 (Dragão-ancestral + Elefante + Fênix + Camaleão + Serpente + 1)");
+}
+
+function listWorkflowsCanon() {
+  console.log("4 workflows canon Predators (Lei #13 Pureza):");
+  console.log("  - caca-sistematica");
+  console.log("  - pacto-cyber-squad");
+  console.log("  - pipeline-fenix");
+  console.log("  - saneamento-brownfield");
+}
+
+function listWorkflowStatesCanon() {
+  console.log("6 WorkflowStateCanon canon Predators (D2 ETAPA 2 state machine):");
+  console.log("  PENDING     · workflow definição cravada · zero execução");
+  console.log("  SCHEDULED   · próxima execução planejada · cron canon");
+  console.log("  RUNNING     · steps em execução runtime");
+  console.log("  COMPLETED   · todos steps OK · success path");
+  console.log("  FAILED      · step falhou · rollback canon");
+  console.log("  PAUSED      · humano interrompeu · retomar manual");
+  console.log("");
+  console.log("7 transições válidas canon (Lei #4 reign state machine):");
+  console.log("  PENDING → SCHEDULED · SCHEDULED → RUNNING · RUNNING → COMPLETED");
+  console.log("  RUNNING → FAILED · RUNNING → PAUSED · PAUSED → RUNNING · FAILED → PENDING");
+}
+
+function listStoryStatesCanon() {
+  console.log("5 StoryStateCanon canon Predators (D3 ETAPA 3 state machine):");
+  console.log("  DRAFT       · criação inicial · briefing parcial");
+  console.log("  REFINEMENT  · briefing completo · Águia preside refinamento");
+  console.log("  READY       · predator owner identificado · scope clear");
+  console.log("  IN_PROGRESS · predator encarnado executando");
+  console.log("  DONE        · 5 garantias entregues · audit Tubarão PASS");
+  console.log("");
+  console.log("7 transições válidas canon:");
+  console.log("  DRAFT → REFINEMENT → READY → IN_PROGRESS → DONE (caminho canônico)");
+  console.log("  REFINEMENT/READY/IN_PROGRESS → DRAFT (rejeição com feedback)");
+}
+
+function listLayersCanon() {
+  console.log("7 ContextLayerCanon L0-L6 canon Predators (D5 ETAPA 1 runtime middleware):");
+  console.log("  L0 LEI_DO_SANGUE_ART_1            · CRITICAL_imutavel    priority 1000");
+  console.log("  L1 LEI_4_SYNAPSE_5_GARANTIAS      · CRITICAL_reign       priority 900");
+  console.log("  L2 5_IMUTAVEIS_BYTE_PRESERVED     · CRITICAL_byte_preserved priority 800");
+  console.log("  L3 14_LEIS_CANON_VIGENTES         · ALTA_vigente         priority 600");
+  console.log("  L4 PREDATOR_ENCARNADO_CONSTITUTION · ALTA_encarnacao     priority 500");
+  console.log("  L5 TASK_ESPECIFICA_CONTEXTO       · MEDIA_task           priority 300");
+  console.log("  L6 USER_PROMPT_INPUT              · INFO_user_input      priority 100");
+  console.log("");
+  console.log("L0+L1+L2 CRITICAL mandatory · Lei #14 BINARY FIX-GERAL trigger se ausentes");
+}
+
+function showBenchmarkInfoCanon() {
+  console.log("Benchmark canon Predators · scipy.stats N=180 p<0.05 protocol:");
+  console.log("");
+  console.log("  dimensions canon (6):");
+  console.log("    D5_context_layers_L0_L6");
+  console.log("    D2_workflows_engine");
+  console.log("    D3_stories_lifecycle");
+  console.log("    D4_multi_project_filesystem");
+  console.log("    D1_mcp_consuming");
+  console.log("    D6_dispatcher_integration");
+  console.log("");
+  console.log("  parâmetros estatísticos canon:");
+  console.log("    sample size per dimension: 30");
+  console.log("    total samples N: 180");
+  console.log("    p-value threshold: < 0.05");
+  console.log("    confidence interval: 95%");
+  console.log("");
+  console.log("  ttest_ind canon próprio Lei #13 Pureza (sem scipy hard-dep)");
+  console.log("");
+  console.log("Lei #11 honest UPFRONT: execução real depende provisioning Apex T7");
+}
+
+function listGoldenSignalsCanon() {
+  console.log("4 Golden Signals canon M1 APM Predators (B2 ONDA PRIORIDADES):");
+  console.log("  latency_milliseconds  · CanonMetricHistogram (p50/p95/p99 via percentile_canon)");
+  console.log("  traffic_total         · CanonMetricCounter");
+  console.log("  errors_total          · CanonMetricCounter");
+  console.log("  saturation_active     · CanonMetricGauge");
+  console.log("");
+  console.log("5 dimensões instrumentadas canon:");
+  console.log("  D1_mcp_consuming · D2_workflows_engine · D3_stories_lifecycle · D4_multi_project_filesystem · D5_context_layers_middleware");
+  console.log("");
+  console.log("Lei #13 Pureza: metrics canon próprio · duck-type prometheus_client (sem hard-dep externa)");
+}
+
+// ──────────────────────────────────────────────────────────────────────
+// UX layer commands (additive · Lei #4 byte-canon preserve)
+// ──────────────────────────────────────────────────────────────────────
+
+async function runInitCommand() {
+  const args = process.argv.slice(3);
+  const positionalArgs = args.filter(a => !a.startsWith("-"));
+  const projectName = positionalArgs[0] || null;
+
+  // Polymorphic init (R2 onda · 2026-05-26 · Polvo Builder)
+  // - no positional arg → splash UX (backward compat byte-preserved)
+  // - positional arg → project scaffolding (mkdir + sync inside)
+  if (projectName) {
+    return runInitProjectMode(projectName, args);
+  }
+
+  const ux = loadUxLib();
+  if (!ux) {
+    console.error("UX layer não-disponível neste pacote.");
+    process.exit(1);
+  }
+  const forceFlag = args.includes("--force") || args.includes("-f");
+  const minimalFlag = args.includes("--minimal") || args.includes("-m");
+  await ux.splash.runInitSplash({ force: forceFlag, minimal: minimalFlag });
+}
+
+function runInitProjectMode(projectName, args) {
+  const cwd = process.cwd();
+  const targetDir = path.resolve(cwd, projectName);
+  const force = args.includes("--force") || args.includes("-f");
+
+  if (fs.existsSync(targetDir)) {
+    const contents = fs.readdirSync(targetDir);
+    if (contents.length > 0 && !force) {
+      console.error(`init · diretório ${projectName} já existe e não está vazio.`);
+      console.error("  · Use diretório vazio · OU passe --force para sobrescrever (cuidado)");
+      process.exit(1);
+    }
+  } else {
+    fs.mkdirSync(targetDir, { recursive: true });
+  }
+
+  console.log("Predators Protocol · init project canon (R2 onda 2026-05-26 · Polvo)");
+  console.log(`  projeto: ${projectName}`);
+  console.log(`  path:    ${targetDir}`);
+  console.log("");
+
+  process.chdir(targetDir);
+  if (!process.argv.includes("--force")) {
+    process.argv.push("--force");
+  }
+  runSyncCommand();
+
+  console.log("");
+  console.log("Próximos passos:");
+  console.log(`  cd ${projectName}`);
+  console.log("  npx predators-protocol tour       # tour cinematográfico");
+  console.log("  npx predators-protocol show eye   # logo canon");
+}
+
+function runInstallCommand() {
+  // Alias semântico canon para `sync --force` (UX onboarding clearer)
+  // R2 onda · 2026-05-26 · Polvo · LMAS parity sem violar Lei #13 (canon próprio)
+  console.log("install · alias canon para `sync --force` · instala canon files no CWD");
+  console.log("");
+  if (!process.argv.includes("--force")) {
+    process.argv.push("--force");
+  }
+  runSyncCommand();
+}
+
+function runConfigCommand() {
+  const ux = loadUxLib();
+  if (!ux) {
+    console.error("UX layer não-disponível neste pacote.");
+    process.exit(1);
+  }
+  const subcommand = process.argv[3] || "show";
+  const arg = process.argv[4];
+
+  if (subcommand === "show" || subcommand === "status") {
+    const cfg = ux.config.readConfig();
+    console.log("Predators Protocol · user config");
+    console.log(`  path: ${ux.config.getConfigPath()}`);
+    console.log(`  theme: ${cfg.theme}`);
+    console.log(`  splash.enabled: ${cfg.splash.enabled}`);
+    console.log(`  audio.enabled: ${cfg.audio.enabled}`);
+    console.log(`  firstConnectionAt: ${cfg.firstConnectionAt || "(never)"}`);
+    console.log(`  lastConnectionAt: ${cfg.lastConnectionAt || "(never)"}`);
+    return;
+  }
+  if (subcommand === "theme") {
+    if (!arg) {
+      console.log(`Current theme: ${ux.config.getTheme()}`);
+      console.log("Available: default, dark, light, monochrome");
+      return;
+    }
+    const result = ux.config.setTheme(arg);
+    if (result) {
+      console.log(`Theme set: ${arg}`);
+    } else {
+      console.error(`Invalid theme: ${arg} · available: default, dark, light, monochrome`);
+      process.exit(1);
+    }
+    return;
+  }
+  if (subcommand === "audio") {
+    if (arg === "--enable" || arg === "on") {
+      ux.config.setAudioEnabled(true);
+      console.log("Audio: enabled · .mp3 byte pendentes produção externa (Suno/ElevenLabs/Stable Audio · canon spec docs/PRDs/ONDA-BALEIA-CANTORA-FASE-2-SIGNATURES-2026-05-24/)");
+      return;
+    }
+    if (arg === "--disable" || arg === "off") {
+      ux.config.setAudioEnabled(false);
+      console.log("Audio: disabled");
+      return;
+    }
+    if (arg === "--status" || !arg) {
+      const status = ux.audio.getStatusReport();
+      console.log("Audio status canon:");
+      console.log(`  enabled: ${status.enabled}`);
+      console.log(`  platform: ${status.platform} (WSL: ${status.is_wsl})`);
+      console.log(`  player_available: ${status.player_available} (${status.player_cmd || "none"})`);
+      console.log(`  ${status.canon_note}`);
+      console.log("  signatures Baleia-cantora F4 Fase 2:");
+      for (const s of status.sounds) {
+        console.log(`    · ${s.name} - ${s.description} (file: ${s.file_present ? "PRESENT" : "PENDENTE"})`);
+      }
+      return;
+    }
+  }
+  if (subcommand === "telemetry") {
+    if (arg === "--enable" || arg === "on") {
+      ux.config.setTelemetryEnabled(true);
+      const status = ux.config.getTelemetryStatus();
+      console.log("Telemetry: enabled");
+      console.log(`  anonymous_id: ${status.anonymous_id} (gerado runtime · zero PII)`);
+      console.log(`  endpoint: ${status.endpoint || "local-only (future network endpoint TBD Apex T7)"}`);
+      console.log("  Lei #1 reign: zero PII · zero IP capture · zero hostname · só sync events anônimos");
+      return;
+    }
+    if (arg === "--disable" || arg === "off") {
+      ux.config.setTelemetryEnabled(false);
+      console.log("Telemetry: disabled · zero coleta");
+      return;
+    }
+    if (arg === "--status" || !arg) {
+      const status = ux.config.getTelemetryStatus();
+      console.log("Telemetry status canon:");
+      console.log(`  enabled: ${status.enabled}`);
+      console.log(`  anonymous_id: ${status.anonymous_id || "(não gerado · opt-in pendente)"}`);
+      console.log(`  sync_count: ${status.sync_count}`);
+      console.log(`  last_sync_at: ${status.last_sync_at || "(nunca)"}`);
+      console.log(`  endpoint: ${status.endpoint || "local-only (null)"}`);
+      console.log(`  ${status.canon_note}`);
+      return;
+    }
+  }
+  console.error(`Config subcommand desconhecido: ${subcommand}`);
+  console.error("Available: show · theme [default|dark|light|monochrome] · audio [--enable|--disable|--status] · telemetry [--enable|--disable|--status]");
+  process.exit(1);
+}
+
+function runShowCommand() {
+  const ux = loadUxLib();
+  if (!ux) {
+    console.error("UX layer não-disponível neste pacote.");
+    process.exit(1);
+  }
+  const target = process.argv[3] || "eye";
+  const theme = ux.config.getTheme();
+
+  if (target === "eye" || target === "logo") {
+    console.log(ux.asciiArt.renderEye(theme));
+    return;
+  }
+  if (target === "banner") {
+    console.log(ux.asciiArt.renderHeroBanner(theme));
+    return;
+  }
+  if (target === "list") {
+    console.log("Predator cards canon vigentes:");
+    for (const id of ux.asciiArt.listPredatorsWithCards()) {
+      console.log(`  · ${id}`);
+    }
+    return;
+  }
+  const card = ux.asciiArt.renderPredatorCard(target, theme);
+  if (!card) {
+    console.error(`Predator card não-disponível: ${target}`);
+    console.error("Disponíveis: " + ux.asciiArt.listPredatorsWithCards().join(", "));
+    console.error("Outros targets: eye | logo | banner | list");
+    process.exit(1);
+  }
+  console.log(card);
+}
+
+// ──────────────────────────────────────────────────────────────────────
+// sync command · canon files refresh CWD from bundle (0.3.0-beta.0)
+// ──────────────────────────────────────────────────────────────────────
+
+function copyDirRecursive(src, dst) {
+  if (!fs.existsSync(src)) return { copied: 0, skipped: 0 };
+  fs.mkdirSync(dst, { recursive: true });
+  let copied = 0;
+  let skipped = 0;
+  for (const e of fs.readdirSync(src, { withFileTypes: true })) {
+    const s = path.join(src, e.name);
+    const d = path.join(dst, e.name);
+    if (e.isDirectory()) {
+      const r = copyDirRecursive(s, d);
+      copied += r.copied;
+      skipped += r.skipped;
+    } else {
+      fs.copyFileSync(s, d);
+      copied++;
+    }
+  }
+  return { copied, skipped };
+}
+
+function backupExistingPath(target) {
+  if (!fs.existsSync(target)) return null;
+  const ts = new Date().toISOString().replace(/[:.]/g, "-");
+  const backup = `${target}.backup-${ts}`;
+  fs.renameSync(target, backup);
+  return backup;
+}
+
+function runSyncCommand() {
+  const args = process.argv.slice(3);
+  const dryRun = args.includes("--dry-run");
+  const force = args.includes("--force") || args.includes("-f");
+  const cwd = process.cwd();
+
+  // Refuse to overwrite a non-Predators directory unless --force passed.
+  const looksLikePredatorsCwd =
+    fs.existsSync(path.join(cwd, "predators")) ||
+    fs.existsSync(path.join(cwd, "CLAUDE.md")) ||
+    fs.existsSync(path.join(cwd, ".claude")) ||
+    fs.existsSync(path.join(cwd, "QUICKSTART-SOCIO.md"));
+
+  if (!looksLikePredatorsCwd && !force) {
+    console.error("sync · CWD não parece ser pasta Predators (sem predators/ · CLAUDE.md · .claude/).");
+    console.error(`  CWD: ${cwd}`);
+    console.error("  · Para sync inicial em pasta vazia · use: npx predators-protocol sync --force");
+    console.error("  · Para sync em pasta Predators existente · CWD precisa conter CLAUDE.md ou predators/");
+    process.exit(1);
+  }
+
+  const SYNC_TARGETS = [
+    { rel: "predators", type: "dir" },
+    { rel: "docs", type: "dir" },
+    { rel: ".claude/commands", type: "dir" },
+    { rel: "CLAUDE.md", type: "file" },
+    { rel: "QUICKSTART-SOCIO.md", type: "file" },
+  ];
+
+  console.log("Predators Protocol · sync canon files do bundle NPX para CWD");
+  console.log(`  bundle:  ${BUNDLE_DIR}`);
+  console.log(`  target:  ${cwd}`);
+  if (dryRun) console.log("  mode:    DRY-RUN (zero writes)");
+  console.log("");
+
+  let totalCopied = 0;
+  for (const { rel, type } of SYNC_TARGETS) {
+    const src = path.join(BUNDLE_DIR, rel);
+    const dst = path.join(cwd, rel);
+
+    if (!fs.existsSync(src)) {
+      console.log(`  skip:    ${rel} (não-presente no bundle)`);
+      continue;
+    }
+
+    if (dryRun) {
+      console.log(`  preview: ${rel} (${type}) · would sync from bundle`);
+      continue;
+    }
+
+    const backup = backupExistingPath(dst);
+    if (backup) {
+      console.log(`  backup:  ${path.basename(backup)}`);
+    }
+
+    if (type === "dir") {
+      const r = copyDirRecursive(src, dst);
+      console.log(`  sync:    ${rel}/ (${r.copied} files)`);
+      totalCopied += r.copied;
+    } else {
+      fs.mkdirSync(path.dirname(dst), { recursive: true });
+      fs.copyFileSync(src, dst);
+      console.log(`  sync:    ${rel}`);
+      totalCopied++;
+    }
+  }
+
+  if (dryRun) {
+    console.log("\nDRY-RUN complete · use sem --dry-run para aplicar.");
+  } else {
+    // Record sync event canon (local always · network telemetry if opt-in + endpoint configured)
+    const ux = loadUxLib();
+    if (ux && ux.config && ux.config.recordSyncEvent) {
+      try { ux.config.recordSyncEvent(); } catch (e) { /* graceful · sync continua */ }
+    }
+    console.log(`\nsync complete · ${totalCopied} files canon writados · backups com sufixo .backup-<timestamp>`);
+    console.log("Lei #1 reign: bundle slim · ZERO infra leak (1.0.0 STABLE)");
+  }
+}
+
+// ──────────────────────────────────────────────────────────────────────
+// tour command · cinematic walkthrough canon vigente (1.0.0 STABLE)
+// ──────────────────────────────────────────────────────────────────────
+
+function sleep(ms) {
+  return new Promise(resolve => setTimeout(resolve, ms));
+}
+
+async function runTourCommand() {
+  const ux = loadUxLib();
+  if (!ux) {
+    console.error("UX layer não-disponível neste pacote.");
+    process.exit(1);
+  }
+  const args = process.argv.slice(3);
+  const fast = args.includes("--fast");
+  const beat = fast ? 200 : 800;
+
+  const theme = ux.config.getTheme();
+  console.log("");
+  console.log(ux.asciiArt.renderEye(theme));
+  await sleep(beat);
+
+  console.log("");
+  console.log("PREDADORES PROTOCOL · tour canon vigente (1.0.0 STABLE)");
+  console.log("64 predadores · 10 camadas · 14 leis · 5 garantias Synapse");
+  await sleep(beat);
+
+  console.log("");
+  console.log("─── 1/5 · 10 camadas trofic ───");
+  await sleep(beat / 2);
+  const layers = [
+    ["apex",       "4 predators", "T5", "Águia + Leão + Orca + Tigre"],
+    ["hunter",     "5 predators", "T4-T5", "Tubarão JUIZ + Cyber Squad"],
+    ["builder",    "9 predators", "T3", "Polvo + Tatu + Jaguar + 6"],
+    ["designer",   "8 predators", "T3-T4", "Borboleta + Tucano + Baleia-cantora F4"],
+    ["copy",       "6 predators", "T3", "Serpente-coral + 5"],
+    ["intel",      "8 predators", "T3", "Lobo-solitário + Tarântula + 6"],
+    ["governance", "6 predators", "T3", "Tigre + Gorila + Lince + 3"],
+    ["growth",     "6 predators", "T2-T3", "Leão push + Formiga + 4"],
+    ["web3",       "6 predators", "T3", "Medusa veto + 5"],
+    ["meta",       "6 predators", "T1-T2", "Dragão + Fênix + Elefante + 3"],
+  ];
+  for (const [layer, count, trophic, examples] of layers) {
+    console.log(`  · ${layer.padEnd(11)} ${count.padEnd(12)} ${trophic.padEnd(6)} ${examples}`);
+    await sleep(beat / 4);
+  }
+
+  console.log("");
+  console.log("─── 2/5 · 14 leis canon vigentes ───");
+  await sleep(beat / 2);
+  const laws = [
+    "Lei #1  Lei do Sangue (ABSOLUTO · Tubarão Art. 1 imutável)",
+    "Lei #2  Lei dos Predadores (Fênix Protocol exclusive)",
+    "Lei #3  Lei da Melhoria Disciplinada",
+    "Lei #4  Lei da Synapse (5 garantias canon)",
+    "Lei #5  Canon dos 3 Vetos (Sangue · Operacional · Constitucional)",
+    "Lei #6  Lei dos Predadores Reais (zero demo)",
+    "Lei #7  Lei da Matilha Paralela",
+    "Lei #8  Verificação Empírica (ABSOLUTO)",
+    "Lei #9  Análise antes de Execução",
+    "Lei #10 Skill canon estrito",
+    "Lei #11 NUNCA MINTA JAMAIS (ABSOLUTO)",
+    "Lei #12 O melhor dos melhores",
+    "Lei #13 Pureza Predators (ABSOLUTO)",
+    "Lei #14 PERFEITO OU FIX-GERAL (BINARY)",
+  ];
+  for (const law of laws) {
+    console.log(`  · ${law}`);
+    await sleep(beat / 5);
+  }
+
+  console.log("");
+  console.log("─── 3/5 · 4 Diretrizes Comunicação ───");
+  await sleep(beat / 2);
+  console.log("  1. Lei do Tom Conversacional (Apex T7 direct)");
+  console.log("  2. Autonomia Sequencial (Lei #9)");
+  console.log("  3. PASSO 0 EVERY ONDA (Lei #8 baseline)");
+  console.log("  4. Separação canon-doc vs comunicação direta");
+  await sleep(beat);
+
+  console.log("");
+  console.log("─── 4/5 · 13 comandos NPX vigentes ───");
+  await sleep(beat / 2);
+  console.log("  introspecção:  version · status · list-predators · list-workflows");
+  console.log("  state machines: workflow-states · story-states · layers-list · benchmark-info · metrics-list");
+  console.log("  experiência UX: init · config · show · sync · tour");
+  await sleep(beat);
+
+  console.log("");
+  console.log("─── 5/5 · Comando canon para sócios ───");
+  await sleep(beat / 2);
+  console.log("");
+  console.log("  mkdir predators-protocol && cd predators-protocol");
+  console.log("  npx predators-protocol@beta sync --force");
+  console.log("");
+  console.log("  → 143 files canon na pasta (64 predadores + docs + skills + CLAUDE.md)");
+  console.log("  → abre no VS Code · ativa extensão Claude Code");
+  console.log("  → /encarnar tubarao-branco (ou qualquer dos 64 IDs)");
+  await sleep(beat);
+
+  console.log("");
+  console.log("─── fim do tour ───");
+  console.log("");
+  console.log("Próximos passos sugeridos:");
+  console.log("  · npx predators-protocol@beta sync --force  (instala canon na pasta atual)");
+  console.log("  · npx predators-protocol@beta show eye      (logo cinematográfico)");
+  console.log("  · npx predators-protocol@beta show list     (lista predator cards disponíveis)");
+  console.log("  · npx predators-protocol@beta help          (todos os 13 comandos)");
+  console.log("");
+  console.log("🦈🐋 Predators Protocol · proprietário · Alex Gonzaga (Tubarão-Apex) · 2026-05-24");
+}
+
+// ──────────────────────────────────────────────────────────────────────
+
+const command = process.argv[2] || "help";
+
+// Lei #1 [a-m] gates · access-token middleware canon 2026-05-27
+// Sócios bypass via PREDATORS_OWNER_KEY env var · colaboradores via `unlock <TOKEN>`
+const { runUnlock, requireValidAccess } = require("../lib/access-token-client.js");
+// Lei #1 [ok1-ok4] gates · gen-token CLI canon 2026-05-27
+const { runGenToken } = require("../lib/gen-token-client.js");
+
+async function runUnlockCommand() {
+  const token = process.argv[3];
+  await runUnlock(token);
+}
+
+async function runGenTokenCommand() {
+  await runGenToken();
+}
+
+// brain-status command · 1.0.0 STABLE · ONDA-NPX-100-RELEASE
+// Snapshot canon estrutura cerebral · READ-only · runtime real exige Python
+async function runBrainStatusCommand() {
+  const snapshotPath = bundlePath("docs/CANON/BRAIN-STATUS-SNAPSHOT.json");
+  if (!fs.existsSync(snapshotPath)) {
+    console.error("brain-status snapshot ausente no bundle · re-sync canon necessário");
+    process.exit(1);
+  }
+  let snapshot;
+  try {
+    snapshot = JSON.parse(fs.readFileSync(snapshotPath, "utf-8"));
+  } catch (err) {
+    console.error(`brain-status snapshot JSON inválido: ${err.message}`);
+    process.exit(1);
+  }
+  console.log("");
+  console.log("PREDADORES PROTOCOL · ESTRUTURA CEREBRAL · snapshot canon");
+  console.log("==========================================================");
+  console.log(`Snapshot cravado: ${snapshot.snapshot_at}`);
+  console.log(`Commit master:    ${snapshot.commit_hash_short}`);
+  console.log(`Status agregado:  ${snapshot.status_aggregate}`);
+  console.log("");
+  console.log("11 daemons cerebrais (runtime real · não-snapshot):");
+  for (const d of snapshot.daemons) {
+    console.log(`  · ${d.name.padEnd(22)} ${d.role}`);
+  }
+  console.log("");
+  console.log("6 feature flags Híbrida (default canon vigente):");
+  for (const f of snapshot.feature_flags) {
+    const mark = f.default === "true" ? "LIVE" : "OPT-IN";
+    console.log(`  · ${f.name.padEnd(28)} default=${f.default.padEnd(5)} ${mark}`);
+  }
+  console.log("");
+  console.log("Elefante · memória institucional Art. 6 imutável:");
+  console.log(`  · pointers cumulative:  ${snapshot.elefante.memory_pointers_count}`);
+  console.log(`  · trace neural files:   ${snapshot.elefante.trace_neural_files_count}`);
+  console.log(`  · consolidation cycles: ${snapshot.elefante.consolidation_cycles_cumulative}`);
+  console.log("");
+  console.log("Honest UPFRONT (Lei #11):");
+  console.log("  · brain-status é READ-only snapshot · cravado no commit acima");
+  console.log("  · runtime real exige: clone repo + Python 3.11+ + brain-on.cmd");
+  console.log("  · 11 daemons LIVE só rodam em clone do repositório · não-NPX");
+  console.log("  · ver bundle/QUICKSTART-SOCIO.md para caminho completo");
+}
+
+// brand-status command · BrandBook v2 OBSIDIANA · ONDA-BRANDBOOK-CANON-V2 Frente F
+// Snapshot canon paleta + tipografia + cadeia de ratificacao · READ-only
+async function runBrandStatusCommand() {
+  const snapshotPath = bundlePath("docs/CANON/BRAND-CANON.json");
+  if (!fs.existsSync(snapshotPath)) {
+    console.error("brand-status snapshot ausente no bundle · re-sync canon necessário");
+    process.exit(1);
+  }
+  let brand;
+  try {
+    brand = JSON.parse(fs.readFileSync(snapshotPath, "utf-8"));
+  } catch (err) {
+    console.error(`brand-status snapshot JSON inválido: ${err.message}`);
+    process.exit(1);
+  }
+  console.log("");
+  console.log("PREDADORES PROTOCOL · BRAND CANON · snapshot");
+  console.log("============================================");
+  console.log(`BrandBook:        ${brand.brandbook_version}`);
+  console.log(`Snapshot cravado: ${brand.snapshot_at}`);
+  console.log(`Onda:             ${brand.ratificacao.onda}`);
+  console.log(`Canon-doc:        ${brand.ratificacao.canon_doc}`);
+  console.log(`Substitui:        ${brand.ratificacao.substitui}`);
+  console.log("");
+  console.log(`Paleta · ${brand.paleta.familias} familias canon (WCAG base ${brand.paleta.wcag_base}):`);
+  for (const t of brand.paleta.tokens) {
+    const wcag = t.wcag ? `  [${t.wcag}]` : "";
+    console.log(`  · ${t.token.padEnd(16)} ${t.hex.padEnd(9)} ${t.papel}${wcag}`);
+  }
+  console.log("");
+  console.log("Tipografia canon:");
+  console.log(`  · display  ${brand.tipografia.display.familia.padEnd(14)} ${brand.tipografia.display.papel} (${brand.tipografia.display.pesos})`);
+  console.log(`  · body     ${brand.tipografia.body.familia.padEnd(14)} ${brand.tipografia.body.papel}`);
+  console.log(`  · mono     ${brand.tipografia.mono.familia.padEnd(14)} ${brand.tipografia.mono.papel}`);
+  console.log("");
+  console.log(`Runtime source-of-truth: ${brand.runtime_source_of_truth}`);
+  console.log("");
+  console.log("Honest UPFRONT (Lei #11):");
+  for (const h of brand.honest_upfront) {
+    console.log(`  · ${h}`);
+  }
+}
+
+const commandsCanon = {
+  version: printVersionCanon,
+  status: printStatusCanon,
+  "list-predators": listPredatorsCanon,
+  "list-workflows": listWorkflowsCanon,
+  "workflow-states": listWorkflowStatesCanon,
+  "story-states": listStoryStatesCanon,
+  "layers-list": listLayersCanon,
+  "benchmark-info": showBenchmarkInfoCanon,
+  "metrics-list": listGoldenSignalsCanon,
+  init: runInitCommand,
+  config: runConfigCommand,
+  show: runShowCommand,
+  sync: runSyncCommand,
+  install: runInstallCommand,
+  tour: runTourCommand,
+  unlock: runUnlockCommand,
+  "gen-token": runGenTokenCommand,
+  "brain-status": runBrainStatusCommand,
+  "brand-status": runBrandStatusCommand,
+  help: printHelpCanon,
+  "--help": printHelpCanon,
+  "-h": printHelpCanon,
+};
+
+const handler = commandsCanon[command];
+if (!handler) {
+  console.error(`Comando canon NÃO vigente: ${command}`);
+  printHelpCanon();
+  process.exit(1);
+}
+
+// Lei #1 middleware · valida acesso ANTES de executar comando sensível
+// (PUBLIC_COMMANDS · owner bypass · cache local 5min · phone-home revalidação)
+(async () => {
+  try {
+    await requireValidAccess(command);
+    await handler();
+  } catch (err) {
+    console.error(`Falha runtime canon: ${err && err.message ? err.message : err}`);
+    process.exit(1);
+  }
+})();