sf-intelligence 0.1.12 → 0.1.13

package/dist/index.js

@@ -59767,7 +59767,7 @@ var init_package_version = __esm({
     "use strict";
     readCliPackageVersion = () => {
       if (true)
-        return "0.1.12";
+        return "0.1.13";
       for (const rel of ["../package.json", "../../package.json"]) {
         try {
           const raw = readFileSync3(fileURLToPath(new URL(rel, import.meta.url)), "utf8");
@@ -128395,8 +128395,8 @@ ${typesXml}
 });
 
 // dist/src/commands/stale-sweep.js
-import { writeFile as writeFile13 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { writeFile as writeFile14 } from "node:fs/promises";
+import { join as join30 } from "node:path";
 var SOURCE_MEMBER_TYPE_RE, runStaleSweep, registerStaleSweepCommand;
 var init_stale_sweep = __esm({
   "dist/src/commands/stale-sweep.js"() {
@@ -128405,8 +128405,8 @@ var init_stale_sweep = __esm({
     init_src2();
     SOURCE_MEMBER_TYPE_RE = /^[A-Za-z][A-Za-z0-9_]*$/;
     runStaleSweep = async (options) => {
-      const paths = vaultPaths(join28(options.cwd, "org-kb"));
-      const manifestResult = await loadManifest(join28(options.cwd, "org-kb"));
+      const paths = vaultPaths(join30(options.cwd, "org-kb"));
+      const manifestResult = await loadManifest(join30(options.cwd, "org-kb"));
       if (!manifestResult.ok) {
         return { ok: false, message: `vault manifest unavailable: ${manifestResult.error.message} \u2014 run sfi init / refresh first` };
       }
@@ -128462,7 +128462,7 @@ var init_stale_sweep = __esm({
           erroredTypes: result.value.erroredTypes
         };
       }
-      await writeFile13(join28(paths.meta, "staleness.json"), `${JSON.stringify(snapshot, null, 2)}
+      await writeFile14(join30(paths.meta, "staleness.json"), `${JSON.stringify(snapshot, null, 2)}
 `, "utf8");
       return { ok: true, snapshot };
     };
@@ -128497,8 +128497,8 @@ __export(watch_exports, {
   watchDailyTicks: () => watchDailyTicks
 });
 import { spawn } from "node:child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync4, rmSync, writeFileSync } from "node:fs";
-import { join as join29 } from "node:path";
+import { existsSync as existsSync7, readFileSync as readFileSync5, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join31 } from "node:path";
 var PIDFILE, DEFAULT_INTERVAL_MS2, MIN_INTERVAL_MS, JITTER_RATIO, watchDailyTicks, pidPath, processAlive, readWatchState, alreadyExists, removeStaleWatchLock, claimWatchLock, releaseWatchLock, jitteredDelay, runWatchLoop, parseInterval, registerWatchCommand;
 var init_watch = __esm({
   "dist/src/commands/watch.js"() {
@@ -128513,7 +128513,7 @@ var init_watch = __esm({
       const n2 = raw ? Number(raw) : NaN;
       return Number.isFinite(n2) && n2 >= 1 ? Math.floor(n2) : 96;
     };
-    pidPath = (cwd) => join29(cwd, "org-kb", "meta", PIDFILE);
+    pidPath = (cwd) => join31(cwd, "org-kb", "meta", PIDFILE);
     processAlive = (pid) => {
       try {
         process.kill(pid, 0);
@@ -128524,10 +128524,10 @@ var init_watch = __esm({
     };
     readWatchState = (cwd) => {
       const p2 = pidPath(cwd);
-      if (!existsSync6(p2))
+      if (!existsSync7(p2))
         return { state: "absent" };
       try {
-        const parsed = JSON.parse(readFileSync4(p2, "utf8"));
+        const parsed = JSON.parse(readFileSync5(p2, "utf8"));
         if (!Number.isInteger(parsed.pid) || parsed.pid < 1)
           return { state: "stale" };
         return processAlive(parsed.pid) ? { state: "running", pidState: parsed } : { state: "stale", pidState: parsed };
@@ -128552,7 +128552,7 @@ var init_watch = __esm({
 `;
       for (let attempt = 0; attempt < 2; attempt += 1) {
         try {
-          writeFileSync(pidPath(cwd), contents, { flag: "wx" });
+          writeFileSync2(pidPath(cwd), contents, { flag: "wx" });
           return true;
         } catch (error) {
           if (!alreadyExists(error))
@@ -128667,7 +128667,7 @@ var init_watch = __esm({
       const watch = program.command("watch").description("Org-drift watcher: a small detached daemon running one read-only stale-sweep tick per interval (default 15m, floor 5m, \xB110% jitter, separate daily tick budget) so meta/staleness.json stays current. Single-instance per vault (stale pidfiles recovered). Subcommands: status, stop.").option("--interval <duration>", "Tick interval, e.g. 15m or 1h (floor 5m)", "15m").option("--auto-refresh <mode>", "When a tick detects drift, run `sfi refresh --incremental` automatically \u2014 at most once per hour; lock-safe (epoch side-build); a failure logs and the watcher continues. Mode: 'incremental'.").option("--foreground", "Run the loop in THIS process (used by the detached child)").option("--drain-demand-queue", "After a tick, drain queued automation-critical phantom hits (`meta/demand-queue.jsonl`, recorded by sfi.get_component) via the demand-retrieve gate \u2014 at most once per hour; a failure logs and the watcher continues.").action(async (flags) => {
         const cwd = process.cwd();
         const intervalMs = parseInterval(flags.interval);
-        if (!existsSync6(join29(cwd, "org-kb", "meta"))) {
+        if (!existsSync7(join31(cwd, "org-kb", "meta"))) {
           process.stderr.write("watch: no vault here \u2014 run from the vault directory (org-kb/ missing).\n");
           process.exit(1);
         }
@@ -128699,11 +128699,11 @@ var init_watch = __esm({
               drainQueue: {
                 peek: async (dir) => {
                   const { queuedDrainIds: queuedDrainIds2, readDemandQueue: readDemandQueue2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
-                  return queuedDrainIds2(await readDemandQueue2(join29(dir, "org-kb"))).length;
+                  return queuedDrainIds2(await readDemandQueue2(join31(dir, "org-kb"))).length;
                 },
                 drain: async (dir) => {
                   const { queuedDrainIds: queuedDrainIds2, readDemandQueue: readDemandQueue2 } = await Promise.resolve().then(() => (init_src2(), src_exports));
-                  const ids = queuedDrainIds2(await readDemandQueue2(join29(dir, "org-kb")));
+                  const ids = queuedDrainIds2(await readDemandQueue2(join31(dir, "org-kb")));
                   if (ids.length === 0)
                     return;
                   const { runDemandRetrieve: runDemandRetrieve2 } = await Promise.resolve().then(() => (init_refresh(), refresh_exports));
@@ -128736,8 +128736,8 @@ var init_watch = __esm({
       watch.command("status").description("Report the watcher daemon state and the last sweep stamp.").action(() => {
         const cwd = process.cwd();
         const state = readWatchState(cwd);
-        const stalenessPath = join29(cwd, "org-kb", "meta", "staleness.json");
-        const lastSweep = existsSync6(stalenessPath) ? JSON.parse(readFileSync4(stalenessPath, "utf8")).generatedAt : void 0;
+        const stalenessPath = join31(cwd, "org-kb", "meta", "staleness.json");
+        const lastSweep = existsSync7(stalenessPath) ? JSON.parse(readFileSync5(stalenessPath, "utf8")).generatedAt : void 0;
         if (state.state === "running") {
           process.stdout.write(`watch: RUNNING (pid ${state.pidState?.pid} since ${state.pidState?.startedAt}, every ~${Math.round((state.pidState?.intervalMs ?? 0) / 6e4)}m). Last sweep: ${lastSweep ?? "(none yet)"}.
 `);
@@ -128769,8 +128769,8 @@ var init_watch = __esm({
 });
 
 // dist/src/program.js
-import { readFileSync as readFileSync5 } from "node:fs";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { readFileSync as readFileSync6 } from "node:fs";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { Command } from "commander";
 
 // dist/src/commands/annotate.js
@@ -129099,26 +129099,506 @@ var registerCompareVaultsCommand = (program) => {
   });
 };
 
-// dist/src/commands/doctor.js
+// dist/src/commands/demo.js
 init_src7();
+import { cpSync, existsSync as existsSync6, mkdirSync, readFileSync as readFileSync4, writeFileSync } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { dirname as dirname20, join as join28 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+
+// dist/src/commands/init.js
+init_dist();
 init_src2();
+init_package_version();
 import { exec as exec2 } from "node:child_process";
-import { existsSync as existsSync7 } from "node:fs";
-import { readFile as readFile81, stat as stat12 } from "node:fs/promises";
-import { resolve as resolve8 } from "node:path";
+import { mkdir as mkdir13, readFile as readFile80, stat as stat11, writeFile as writeFile12 } from "node:fs/promises";
+import { isAbsolute as isAbsolute5, join as join27, resolve as resolve6 } from "node:path";
 import { promisify as promisify5 } from "node:util";
+import { confirm, input } from "@inquirer/prompts";
+
+// dist/src/commands/trust-statement.js
+var TRUST_GUARANTEES = [
+  {
+    headline: "READ-ONLY to your org",
+    detail: "sf-intelligence never writes, deploys, or modifies anything in Salesforce. It only RETRIEVES metadata (`sf project retrieve`). No create, no update, no delete."
+  },
+  {
+    headline: "OFFLINE by default",
+    detail: "Every answer comes from the local vault built at the last refresh \u2014 not a live call. The org is contacted only when you run `sfi refresh`."
+  },
+  {
+    headline: "LOCAL & private",
+    detail: "The vault lives on THIS machine (org-kb/) and is never uploaded anywhere. No telemetry, no phone-home \u2014 feedback (`sfi feedback`) is captured locally and shared only if you choose to."
+  },
+  {
+    headline: "Live plane is OFF until you turn it on",
+    detail: "The opt-in live read-only plane (capped record counts/samples) stays disabled until you set SFI_LIVE_PLANE_ENABLED=1 (or `sfi.live_consent`). Even enabled it is READ-ONLY and runs only a curated query roster \u2014 never arbitrary SOQL, never a write."
+  },
+  {
+    headline: "The npm package ships NO org data",
+    detail: "The published package contains only code (a `files` whitelist blocks the vault/source/snapshots). Every public version has been downloaded and grepped clean of org identifiers (the leak audit)."
+  }
+];
+var formatTrustStatement = () => {
+  const lines = [];
+  lines.push("");
+  lines.push("  \u250C\u2500 What sf-intelligence does (and does NOT) to your org \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+  lines.push("  \u2502");
+  for (const g2 of TRUST_GUARANTEES) {
+    lines.push(`  \u2502  \u2713 ${g2.headline}`);
+    for (const wrapped of wrap(g2.detail, 64)) {
+      lines.push(`  \u2502      ${wrapped}`);
+    }
+    lines.push("  \u2502");
+  }
+  lines.push("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+  lines.push("");
+  return lines.join("\n");
+};
+var wrap = (text, width) => {
+  const words = text.split(/\s+/);
+  const out = [];
+  let line = "";
+  for (const word of words) {
+    if (line === "") {
+      line = word;
+    } else if (`${line} ${word}`.length <= width) {
+      line = `${line} ${word}`;
+    } else {
+      out.push(line);
+      line = word;
+    }
+  }
+  if (line !== "")
+    out.push(line);
+  return out;
+};
+
+// dist/src/commands/init.js
+var DEFAULT_VAULT_ROOT = "org-kb";
+var JSON_INDENT6 = 2;
+var GITIGNORE_ENTRIES = ["org-kb/source/", "org-kb/graph/"];
+var SF_API_VERSION3 = "62.0";
+var DEFAULT_PACKAGE_DIR = "force-app";
+var execAsync2 = promisify5(exec2);
+var runInit = async (opts) => {
+  const resolvedRoot = isAbsolute5(opts.vaultRoot) ? opts.vaultRoot : resolve6(opts.cwd, opts.vaultRoot);
+  if (!opts.force && await pathExists3(resolvedRoot)) {
+    return err({
+      kind: "already-exists",
+      message: `vault already exists: ${resolvedRoot}`,
+      path: resolvedRoot
+    });
+  }
+  const paths = vaultPaths(resolvedRoot);
+  const mkdirResult = await createVaultDirs(paths);
+  if (!mkdirResult.ok)
+    return mkdirResult;
+  const writeResult = await writeVaultMetadata(paths, opts.targetOrg, resolvedRoot);
+  if (!writeResult.ok)
+    return writeResult;
+  const dxProjectScaffolded = await ensureDxProject(opts.cwd);
+  const gitignoreUpdated = await updateGitignore(opts.cwd);
+  return ok({ vaultRoot: resolvedRoot, targetOrg: opts.targetOrg, gitignoreUpdated, dxProjectScaffolded });
+};
+var ensureDxProject = async (cwd) => {
+  const projectPath = join27(cwd, "sfdx-project.json");
+  let wrote = false;
+  if (!await pathExists3(projectPath)) {
+    const project = {
+      packageDirectories: [{ path: DEFAULT_PACKAGE_DIR, default: true }],
+      namespace: "",
+      sourceApiVersion: SF_API_VERSION3
+    };
+    try {
+      await writeFile12(projectPath, `${JSON.stringify(project, null, JSON_INDENT6)}
+`, "utf8");
+      wrote = true;
+    } catch {
+    }
+  }
+  try {
+    await mkdir13(join27(cwd, DEFAULT_PACKAGE_DIR), { recursive: true });
+  } catch {
+  }
+  return wrote;
+};
+var createVaultDirs = async (paths) => {
+  for (const dir of [paths.root, paths.source, paths.components, paths.graph, paths.meta]) {
+    try {
+      await mkdir13(dir, { recursive: true });
+    } catch (cause) {
+      return err({ kind: "mkdir-failed", message: `failed to create directory: ${dir}`, path: dir, cause });
+    }
+  }
+  return ok(void 0);
+};
+var writeVaultMetadata = async (paths, targetOrg, resolvedRoot) => {
+  const config = {
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    targetOrg,
+    vaultRoot: resolvedRoot,
+    version: readCliPackageVersion(),
+    snapshotOnRefresh: true
+  };
+  try {
+    await writeFile12(paths.config, `${JSON.stringify(config, null, JSON_INDENT6)}
+`, "utf8");
+  } catch (cause) {
+    return err({ kind: "write-failed", message: `failed to write config: ${paths.config}`, path: paths.config, cause });
+  }
+  const versionTxtPath = join27(paths.meta, "version.txt");
+  try {
+    await writeFile12(versionTxtPath, `${readCliPackageVersion()}
+`, "utf8");
+  } catch (cause) {
+    return err({ kind: "write-failed", message: `failed to write version.txt: ${versionTxtPath}`, path: versionTxtPath, cause });
+  }
+  return ok(void 0);
+};
+var updateGitignore = async (cwd) => {
+  const gitignorePath = join27(cwd, ".gitignore");
+  let existing = "";
+  let exists = true;
+  try {
+    existing = await readFile80(gitignorePath, "utf8");
+  } catch (cause) {
+    if (!isEnoent3(cause))
+      return false;
+    exists = false;
+  }
+  const present = new Set(existing.split(/\r?\n/).map((line) => line.trim()));
+  const missing = GITIGNORE_ENTRIES.filter((entry) => !present.has(entry));
+  if (missing.length === 0)
+    return false;
+  const needsNewline = exists && existing.length > 0 && !existing.endsWith("\n");
+  const next = `${existing}${needsNewline ? "\n" : ""}${missing.join("\n")}
+`;
+  try {
+    await writeFile12(gitignorePath, next, "utf8");
+    return true;
+  } catch {
+    return false;
+  }
+};
+var pathExists3 = async (path) => {
+  try {
+    await stat11(path);
+    return true;
+  } catch (cause) {
+    return !isEnoent3(cause);
+  }
+};
+var isEnoent3 = (cause) => typeof cause === "object" && cause !== null && "code" in cause && cause.code === "ENOENT";
+var ORG_CATEGORIES = ["nonScratchOrgs", "scratchOrgs", "otherOrgs", "devHubs", "sandboxes"];
+var getDefaultOrgAlias = async () => {
+  try {
+    const { stdout } = await execAsync2("sf org list --json");
+    const parsed = JSON.parse(stdout);
+    const result = parsed.result;
+    if (result === void 0 || result === null)
+      return null;
+    for (const key of ORG_CATEGORIES) {
+      const entries = result[key];
+      if (!Array.isArray(entries))
+        continue;
+      for (const item of entries) {
+        if (typeof item !== "object" || item === null)
+          continue;
+        const entry = item;
+        if (entry["isDefaultUsername"] !== true && entry["isDefaultDevHubUsername"] !== true)
+          continue;
+        const alias = entry["alias"] ?? entry["username"];
+        if (typeof alias === "string" && alias.length > 0)
+          return alias;
+      }
+    }
+    return null;
+  } catch {
+    return null;
+  }
+};
+var registerInitCommand = (program) => {
+  program.command("init").description("Initialise a new org-kb vault in the current directory").option("--target-org <alias>", "Salesforce org alias to bind to this vault").option("--vault-root <path>", "Vault root directory (relative to CWD)").option("--force", "Overwrite an existing org-kb/ vault config", false).action(async (flags) => {
+    const cwd = process.cwd();
+    const exitCode = await handleInit(cwd, flags);
+    if (exitCode !== 0)
+      process.exit(exitCode);
+  });
+};
+var handleInit = async (cwd, flags) => {
+  const interactive = process.stdin.isTTY === true;
+  const vaultRoot = flags.vaultRoot ?? (interactive ? await input({ message: "Vault root directory:", default: DEFAULT_VAULT_ROOT }) : DEFAULT_VAULT_ROOT);
+  const resolvedRoot = isAbsolute5(vaultRoot) ? vaultRoot : resolve6(cwd, vaultRoot);
+  let force = flags.force ?? false;
+  if (!force && await pathExists3(resolvedRoot)) {
+    if (!interactive) {
+      process.stderr.write(`sfi init: ${vaultRoot}/ already exists. Re-run with --force to overwrite.
+`);
+      return 1;
+    }
+    const overwrite = await confirm({
+      message: `${vaultRoot}/ already exists. Overwrite config?`,
+      default: false
+    });
+    if (!overwrite) {
+      process.stdout.write("Existing init preserved.\n");
+      return 0;
+    }
+    force = true;
+  }
+  const targetOrg = await resolveTargetOrg(flags, interactive);
+  if (targetOrg === null) {
+    process.stderr.write("sfi init: no --target-org given and no default Salesforce org found. Pass --target-org <alias>.\n");
+    return 1;
+  }
+  return runAndReport({ cwd, targetOrg, vaultRoot, force });
+};
+var resolveTargetOrg = async (flags, interactive) => {
+  if (flags.targetOrg !== void 0)
+    return flags.targetOrg;
+  const detected = await getDefaultOrgAlias();
+  if (!interactive)
+    return detected;
+  return input({
+    message: "Target org alias:",
+    ...detected !== null ? { default: detected } : {}
+  });
+};
+var runAndReport = async (opts) => {
+  const result = await runInit(opts);
+  if (!result.ok) {
+    process.stderr.write(`sfi init: ${result.error.message}
+`);
+    return 1;
+  }
+  process.stdout.write([
+    `Initialised vault at ${result.value.vaultRoot}`,
+    `Target org: ${result.value.targetOrg}`,
+    result.value.gitignoreUpdated ? "Updated .gitignore" : ".gitignore already up to date (or could not be written)",
+    result.value.dxProjectScaffolded ? "Scaffolded sfdx-project.json (ready for sf project retrieve)" : "sfdx-project.json already present",
+    ""
+  ].join("\n"));
+  process.stdout.write(formatTrustStatement());
+  process.stdout.write("Next: run sfi refresh\n\n");
+  return 0;
+};
+
+// dist/src/commands/mcp.js
+init_dist();
+init_src7();
+init_src2();
+import { execFile as execFile4 } from "node:child_process";
+import { readFile as readFile81, stat as stat12 } from "node:fs/promises";
+import { resolve as resolve7 } from "node:path";
+import { promisify as promisify6 } from "node:util";
+var DEFAULT_VAULT_ROOT2 = "org-kb";
+var SHUTDOWN_SIGNALS = ["SIGINT", "SIGTERM"];
+var readBoundOrg = async (configPath) => {
+  try {
+    const raw = await readFile81(configPath, "utf8");
+    const parsed = JSON.parse(raw);
+    return typeof parsed.targetOrg === "string" ? parsed.targetOrg : null;
+  } catch {
+    return null;
+  }
+};
+var nodeExecFile3 = promisify6(execFile4);
+var defaultListOrgs = async () => {
+  try {
+    const { stdout } = await nodeExecFile3("sf", ["org", "list", "--json"], {
+      maxBuffer: 10 * 1024 * 1024
+    });
+    const json = JSON.parse(stdout);
+    const groups = json.result ?? {};
+    const seen = /* @__PURE__ */ new Set();
+    const out = [];
+    for (const list of Object.values(groups)) {
+      for (const org of list ?? []) {
+        const label = org.alias ?? org.username;
+        if (label && !seen.has(label)) {
+          seen.add(label);
+          out.push(label);
+        }
+      }
+    }
+    return out;
+  } catch {
+    return [];
+  }
+};
+var prepareMcp = async (opts) => {
+  const vaultRoot = opts.vaultRoot !== void 0 ? resolve7(opts.cwd, opts.vaultRoot) : resolve7(opts.cwd, DEFAULT_VAULT_ROOT2);
+  const paths = vaultPaths(vaultRoot);
+  if (!await pathExists4(paths.config)) {
+    const orgs = await (opts.listOrgs ?? defaultListOrgs)();
+    const where = opts.vaultRoot !== void 0 ? ` at ${vaultRoot}` : "";
+    const base = `No vault${where}. Run \`sfi init\` followed by \`sfi refresh\`, or point \`sfi mcp --vault <path>\` at an existing org-kb.`;
+    const hint = orgs.length > 0 ? ` You are authenticated to ${orgs.length} org(s): ${orgs.slice(0, 8).join(", ")}${orgs.length > 8 ? ", \u2026" : ""}. Run \`sfi init\` to pick the one you want and build its knowledge base \u2014 live answers attach to a vault's org, so the product never guesses which of your orgs to query.` : "";
+    return err({ kind: "no-vault", message: base + hint });
+  }
+  const ctxResult = await buildContext(vaultRoot);
+  if (!ctxResult.ok) {
+    return err({ kind: "buildContext-failed", message: ctxResult.error.message });
+  }
+  const targetOrg = await readBoundOrg(paths.config);
+  return ok({
+    ctx: ctxResult.value,
+    server: createServer(ctxResult.value),
+    vaultRoot,
+    targetOrg
+  });
+};
+var pathExists4 = async (path) => {
+  try {
+    await stat12(path);
+    return true;
+  } catch (cause) {
+    return !isEnoent4(cause);
+  }
+};
+var isEnoent4 = (cause) => typeof cause === "object" && cause !== null && "code" in cause && cause.code === "ENOENT";
+var registerMcpCommand = (program) => {
+  program.command("mcp").description("Run the MCP server backing the org-kb vault").option("--vault <path>", "Serve a specific org-kb vault instead of ./org-kb (bind a project to the right org)").action(async (cmdOpts) => {
+    const prepared = await prepareMcp({
+      cwd: process.cwd(),
+      ...cmdOpts.vault !== void 0 ? { vaultRoot: cmdOpts.vault } : {}
+    });
+    if (!prepared.ok) {
+      process.stderr.write(`sfi mcp: ${prepared.error.message}
+`);
+      process.exit(1);
+    }
+    const { ctx, server, vaultRoot, targetOrg } = prepared.value;
+    process.stderr.write(`sfi mcp: serving vault ${vaultRoot}${targetOrg !== null ? ` (org: ${targetOrg})` : " (no targetOrg in config)"}
+`);
+    const shutdownOnce = makeShutdownOnce(ctx);
+    for (const signal of SHUTDOWN_SIGNALS) {
+      process.on(signal, () => {
+        void shutdownOnce().then(() => process.exit(0));
+      });
+    }
+    await startServer(server);
+    await shutdownOnce();
+  });
+};
+var makeShutdownOnce = (ctx) => {
+  let done = null;
+  return () => {
+    if (done === null)
+      done = shutdown(ctx);
+    return done;
+  };
+};
+
+// dist/src/commands/demo.js
+init_refresh();
+var buildVersion = () => true ? "0.1.13" : "dev";
+var SHUTDOWN_SIGNALS2 = ["SIGINT", "SIGTERM"];
+var resolveDemoSource = () => {
+  let dir = dirname20(fileURLToPath2(import.meta.url));
+  for (let i2 = 0; i2 < 7; i2 += 1) {
+    const shipped = join28(dir, "demo-source", "main", "default");
+    if (existsSync6(shipped))
+      return shipped;
+    const repo = join28(dir, "examples", "demo-vault", "source", "main", "default");
+    if (existsSync6(repo))
+      return repo;
+    const parent = dirname20(dir);
+    if (parent === dir)
+      break;
+    dir = parent;
+  }
+  return null;
+};
+var registerDemoCommand = (program) => {
+  program.command("demo").description("Try sf-intelligence with no Salesforce org \u2014 serve a built-in synthetic demo org over MCP").option("--rebuild", "Force a rebuild of the cached demo vault", false).action(async (opts) => {
+    const source = resolveDemoSource();
+    if (source === null) {
+      process.stderr.write("sfi demo: bundled demo source not found (expected a shipped demo-source/ or examples/demo-vault/source).\n");
+      process.exit(1);
+    }
+    const cacheCwd = join28(homedir4(), ".sf-intelligence", "demo");
+    const vaultRoot = join28(cacheCwd, "org-kb");
+    const graphDb = join28(vaultRoot, "graph", "graph.duckdb");
+    const stampPath = join28(vaultRoot, "meta", "demo-build.stamp");
+    const stamp = `${buildVersion()}`;
+    const stampOk = (() => {
+      try {
+        return readFileSync4(stampPath, "utf8").trim() === stamp;
+      } catch {
+        return false;
+      }
+    })();
+    const needBuild = opts.rebuild === true || !existsSync6(graphDb) || !stampOk;
+    if (needBuild) {
+      process.stderr.write("sfi demo: building the synthetic demo vault (first run, ~a few seconds)...\n");
+      const init = await runInit({
+        cwd: cacheCwd,
+        targetOrg: "demo-org",
+        vaultRoot: "org-kb",
+        force: true
+      });
+      if (!init.ok) {
+        process.stderr.write(`sfi demo: could not initialise the demo vault: ${init.error.message}
+`);
+        process.exit(1);
+      }
+      const sourceDest = join28(vaultRoot, "source", "main", "default");
+      mkdirSync(dirname20(sourceDest), { recursive: true });
+      cpSync(source, sourceDest, { recursive: true });
+      await runRefresh({ cwd: cacheCwd, noPull: true });
+      if (!existsSync6(graphDb)) {
+        process.stderr.write("sfi demo: demo build failed \u2014 no graph was produced.\n");
+        process.exit(1);
+      }
+      try {
+        writeFileSync(stampPath, `${stamp}
+`);
+      } catch {
+      }
+    }
+    const prepared = await prepareMcp({ cwd: cacheCwd, vaultRoot: "org-kb" });
+    if (!prepared.ok) {
+      process.stderr.write(`sfi demo: ${prepared.error.message}
+`);
+      process.exit(1);
+    }
+    const { ctx, server, vaultRoot: served } = prepared.value;
+    process.stderr.write(`sfi demo: serving the synthetic "Verdant Energy" demo org from ${served} (read-only, offline).
+`);
+    let shuttingDown = null;
+    const shutdownOnce = () => shuttingDown ??= shutdown(ctx);
+    for (const signal of SHUTDOWN_SIGNALS2) {
+      process.on(signal, () => {
+        void shutdownOnce().then(() => process.exit(0));
+      });
+    }
+    await startServer(server);
+    await shutdownOnce();
+  });
+};
+
+// dist/src/commands/doctor.js
+init_src7();
+init_src2();
+import { exec as exec3 } from "node:child_process";
+import { existsSync as existsSync8 } from "node:fs";
+import { readFile as readFile83, stat as stat14 } from "node:fs/promises";
+import { resolve as resolve10 } from "node:path";
+import { promisify as promisify7 } from "node:util";
 
 // dist/src/commands/feedback.js
 init_src7();
-import { appendFile as appendFile5, mkdir as mkdir13, readFile as readFile80, writeFile as writeFile12 } from "node:fs/promises";
-import { homedir as homedir4 } from "node:os";
-import { dirname as dirname20, join as join27, resolve as resolve6 } from "node:path";
+import { appendFile as appendFile5, mkdir as mkdir14, readFile as readFile82, writeFile as writeFile13 } from "node:fs/promises";
+import { homedir as homedir5 } from "node:os";
+import { dirname as dirname21, join as join29, resolve as resolve8 } from "node:path";
 var FEEDBACK_ISSUES_URL = "https://github.com/PranavNagrecha/Salesforce-Intelligence/issues";
-var feedbackLogPath = () => process.env["SFI_FEEDBACK_LOG_PATH"] ?? join27(homedir4(), ".sf-intelligence", "feedback.jsonl");
+var feedbackLogPath = () => process.env["SFI_FEEDBACK_LOG_PATH"] ?? join29(homedir5(), ".sf-intelligence", "feedback.jsonl");
 var recordFeedback = async (question, rating, path = feedbackLogPath()) => {
   const entry = { at: (/* @__PURE__ */ new Date()).toISOString(), question, rating };
   try {
-    await mkdir13(dirname20(path), { recursive: true });
+    await mkdir14(dirname21(path), { recursive: true });
     await appendFile5(path, `${JSON.stringify(entry)}
 `, "utf8");
     return true;
@@ -129130,7 +129610,7 @@ var scrubText = (s2) => s2.replace(/[\w.+-]+@[\w-]+\.[\w.-]+/g, "[email]").repla
 var readJsonl = async (path) => {
   let raw;
   try {
-    raw = await readFile80(path, "utf8");
+    raw = await readFile82(path, "utf8");
   } catch {
     return [];
   }
@@ -129176,7 +129656,7 @@ var registerFeedbackCommand = (program) => {
 ` : "Could not write the local feedback log.\n");
   });
   feedback.command("export").description("Write a scrubbed, shareable feedback file (route gaps + ratings) \u2014 no org PII, nothing uploaded. Gaps are scoped to the CURRENT vault by default; --all exports the whole machine-global log (review before sharing on a multi-org machine).").option("--out <file>", "output path", "sfi-feedback.json").option("--all", "include every vault's gaps + unstamped pre-0.1.10 entries (machine-global)").action(async (flags) => {
-    const vaultRoot = resolve6(process.cwd(), "org-kb");
+    const vaultRoot = resolve8(process.cwd(), "org-kb");
     const data = await buildFeedbackExport({
       vaultRoot,
       ...flags.all === true ? { all: true } : {}
@@ -129186,9 +129666,9 @@ var registerFeedbackCommand = (program) => {
 ` : 'Mark a weak answer first: `sfi feedback mark "<question>" --wrong` (or `--weak`).\n'));
       return;
     }
-    const out = resolve6(process.cwd(), flags.out);
+    const out = resolve8(process.cwd(), flags.out);
     try {
-      await writeFile12(out, `${JSON.stringify(data, null, 2)}
+      await writeFile13(out, `${JSON.stringify(data, null, 2)}
 `, "utf8");
     } catch (cause) {
       process.stderr.write(`Could not write ${out}: ${cause instanceof Error ? cause.message : String(cause)}
@@ -129206,19 +129686,19 @@ Pick a writable path with \`--out <file>\`.
 
 // dist/src/commands/status.js
 init_src2();
-import { stat as stat11 } from "node:fs/promises";
-import { resolve as resolve7 } from "node:path";
-var JSON_INDENT6 = 2;
-var DEFAULT_VAULT_ROOT = "org-kb";
+import { stat as stat13 } from "node:fs/promises";
+import { resolve as resolve9 } from "node:path";
+var JSON_INDENT7 = 2;
+var DEFAULT_VAULT_ROOT3 = "org-kb";
 var HASH_PREFIX_LENGTH = 12;
 var LABEL_WIDTH = 20;
 var SECONDS_PER_MINUTE = 60;
 var MINUTES_PER_HOUR = 60;
 var HOURS_PER_DAY = 24;
 var runStatus = async (opts) => {
-  const vaultRoot = resolve7(opts.cwd, DEFAULT_VAULT_ROOT);
+  const vaultRoot = resolve9(opts.cwd, DEFAULT_VAULT_ROOT3);
   const paths = vaultPaths(vaultRoot);
-  if (!await pathExists3(paths.config)) {
+  if (!await pathExists5(paths.config)) {
     return {
       kind: "no-vault",
       message: "No vault. Run `sfi init` followed by `sfi refresh`."
@@ -129256,15 +129736,15 @@ var runStatus = async (opts) => {
     currentSourceHash
   };
 };
-var pathExists3 = async (path) => {
+var pathExists5 = async (path) => {
   try {
-    await stat11(path);
+    await stat13(path);
     return true;
   } catch (cause) {
-    return !isEnoent3(cause);
+    return !isEnoent5(cause);
   }
 };
-var isEnoent3 = (cause) => typeof cause === "object" && cause !== null && "code" in cause && cause.code === "ENOENT";
+var isEnoent5 = (cause) => typeof cause === "object" && cause !== null && "code" in cause && cause.code === "ENOENT";
 var formatAge = (iso, now = /* @__PURE__ */ new Date()) => {
   const then = new Date(iso);
   if (Number.isNaN(then.getTime()))
@@ -129352,7 +129832,7 @@ var registerStatusCommand = (program) => {
   program.command("status").description("Report the freshness of the local vault").option("--json", "Print the raw status as pretty-printed JSON instead of the table", false).option("--skipped", "Print the per-directory skip inventory the refresh walker recorded. Use this when the warning at the end of `sfi refresh` flagged unknown directories.", false).action(async (flags) => {
     const out = await runStatus({ cwd: process.cwd() });
     if (flags.json === true) {
-      process.stdout.write(`${JSON.stringify(out, null, JSON_INDENT6)}
+      process.stdout.write(`${JSON.stringify(out, null, JSON_INDENT7)}
 `);
       return;
     }
@@ -129365,8 +129845,8 @@ var registerStatusCommand = (program) => {
 };
 
 // dist/src/commands/doctor.js
-var execAsync2 = promisify5(exec2);
-var DEFAULT_VAULT_ROOT2 = "org-kb";
+var execAsync3 = promisify7(exec3);
+var DEFAULT_VAULT_ROOT4 = "org-kb";
 var parseSfCliVersion = (versionLine) => {
   const m2 = /(\d+)\.(\d+)\.(\d+)/.exec(versionLine);
   if (m2 === null)
@@ -129378,7 +129858,7 @@ var formatVersion = (v2) => v2.join(".");
 var summarizeRouteGaps = async (logFile) => {
   let raw;
   try {
-    raw = await readFile81(logFile, "utf8");
+    raw = await readFile83(logFile, "utf8");
   } catch {
     return { exists: false, count: 0, topCategory: null, topCount: 0 };
   }
@@ -129405,9 +129885,9 @@ var summarizeRouteGaps = async (logFile) => {
   }
   return { exists: true, count, topCategory, topCount };
 };
-var pathExists4 = async (p2) => {
+var pathExists6 = async (p2) => {
   try {
-    await stat12(p2);
+    await stat14(p2);
     return true;
   } catch {
     return false;
@@ -129415,7 +129895,7 @@ var pathExists4 = async (p2) => {
 };
 var readTargetOrg = async (configPath) => {
   try {
-    const raw = await readFile81(configPath, "utf8");
+    const raw = await readFile83(configPath, "utf8");
     const parsed = JSON.parse(raw);
     return typeof parsed.targetOrg === "string" ? parsed.targetOrg : null;
   } catch {
@@ -129423,9 +129903,9 @@ var readTargetOrg = async (configPath) => {
   }
 };
 var runDoctor = async (opts) => {
-  const run = opts.exec ?? ((cmd) => execAsync2(cmd, { maxBuffer: 64 * 1024 * 1024 }));
+  const run = opts.exec ?? ((cmd) => execAsync3(cmd, { maxBuffer: 64 * 1024 * 1024 }));
   const checks = [];
-  const vaultRoot = resolve8(opts.cwd, DEFAULT_VAULT_ROOT2);
+  const vaultRoot = resolve10(opts.cwd, DEFAULT_VAULT_ROOT4);
   const paths = vaultPaths(vaultRoot);
   const SF_FALLBACK_PATHS = ["/usr/local/bin/sf", "/opt/homebrew/bin/sf"];
   let sfBin = "sf";
@@ -129472,7 +129952,7 @@ var runDoctor = async (opts) => {
       fix: "Install the Salesforce CLI (npm install --global @salesforce/cli). If it IS installed, add its directory (/usr/local/bin or /opt/homebrew/bin) to your PATH; IDE/MCP subprocesses often do not inherit it."
     });
   }
-  const vaultInit = await pathExists4(paths.config);
+  const vaultInit = await pathExists6(paths.config);
   if (!vaultInit) {
     checks.push({
       name: "Vault",
@@ -129561,7 +130041,7 @@ var runDoctor = async (opts) => {
     }
   }
   if (vaultInit) {
-    const graphOk = await pathExists4(paths.graphDb);
+    const graphOk = await pathExists6(paths.graphDb);
     checks.push(graphOk ? { name: "Graph", status: "pass", detail: "graph.duckdb present" } : { name: "Graph", status: "warn", detail: "graph.duckdb missing", fix: "Run `sfi refresh` to rebuild the graph." });
   }
   const gaps = await summarizeRouteGaps(opts.gapLogFile ?? gapLogPath());
@@ -129628,7 +130108,7 @@ var runDoctor = async (opts) => {
       });
     }
     const registryFile = findRegistryFile(vaultRoot);
-    if (existsSync7(registryFile)) {
+    if (existsSync8(registryFile)) {
       const listed = await listRegisteredVaults(findRegistryRoot(vaultRoot));
       if (listed.ok && listed.value.length >= 2) {
         checks.push({
@@ -129674,284 +130154,6 @@ var registerDoctorCommand = (program) => {
   });
 };
 
-// dist/src/commands/init.js
-init_dist();
-init_src2();
-init_package_version();
-import { exec as exec3 } from "node:child_process";
-import { mkdir as mkdir14, readFile as readFile82, stat as stat13, writeFile as writeFile14 } from "node:fs/promises";
-import { isAbsolute as isAbsolute5, join as join30, resolve as resolve9 } from "node:path";
-import { promisify as promisify6 } from "node:util";
-import { confirm, input } from "@inquirer/prompts";
-
-// dist/src/commands/trust-statement.js
-var TRUST_GUARANTEES = [
-  {
-    headline: "READ-ONLY to your org",
-    detail: "sf-intelligence never writes, deploys, or modifies anything in Salesforce. It only RETRIEVES metadata (`sf project retrieve`). No create, no update, no delete."
-  },
-  {
-    headline: "OFFLINE by default",
-    detail: "Every answer comes from the local vault built at the last refresh \u2014 not a live call. The org is contacted only when you run `sfi refresh`."
-  },
-  {
-    headline: "LOCAL & private",
-    detail: "The vault lives on THIS machine (org-kb/) and is never uploaded anywhere. No telemetry, no phone-home \u2014 feedback (`sfi feedback`) is captured locally and shared only if you choose to."
-  },
-  {
-    headline: "Live plane is OFF until you turn it on",
-    detail: "The opt-in live read-only plane (capped record counts/samples) stays disabled until you set SFI_LIVE_PLANE_ENABLED=1 (or `sfi.live_consent`). Even enabled it is READ-ONLY and runs only a curated query roster \u2014 never arbitrary SOQL, never a write."
-  },
-  {
-    headline: "The npm package ships NO org data",
-    detail: "The published package contains only code (a `files` whitelist blocks the vault/source/snapshots). Every public version has been downloaded and grepped clean of org identifiers (the leak audit)."
-  }
-];
-var formatTrustStatement = () => {
-  const lines = [];
-  lines.push("");
-  lines.push("  \u250C\u2500 What sf-intelligence does (and does NOT) to your org \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
-  lines.push("  \u2502");
-  for (const g2 of TRUST_GUARANTEES) {
-    lines.push(`  \u2502  \u2713 ${g2.headline}`);
-    for (const wrapped of wrap(g2.detail, 64)) {
-      lines.push(`  \u2502      ${wrapped}`);
-    }
-    lines.push("  \u2502");
-  }
-  lines.push("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
-  lines.push("");
-  return lines.join("\n");
-};
-var wrap = (text, width) => {
-  const words = text.split(/\s+/);
-  const out = [];
-  let line = "";
-  for (const word of words) {
-    if (line === "") {
-      line = word;
-    } else if (`${line} ${word}`.length <= width) {
-      line = `${line} ${word}`;
-    } else {
-      out.push(line);
-      line = word;
-    }
-  }
-  if (line !== "")
-    out.push(line);
-  return out;
-};
-
-// dist/src/commands/init.js
-var DEFAULT_VAULT_ROOT3 = "org-kb";
-var JSON_INDENT7 = 2;
-var GITIGNORE_ENTRIES = ["org-kb/source/", "org-kb/graph/"];
-var SF_API_VERSION3 = "62.0";
-var DEFAULT_PACKAGE_DIR = "force-app";
-var execAsync3 = promisify6(exec3);
-var runInit = async (opts) => {
-  const resolvedRoot = isAbsolute5(opts.vaultRoot) ? opts.vaultRoot : resolve9(opts.cwd, opts.vaultRoot);
-  if (!opts.force && await pathExists5(resolvedRoot)) {
-    return err({
-      kind: "already-exists",
-      message: `vault already exists: ${resolvedRoot}`,
-      path: resolvedRoot
-    });
-  }
-  const paths = vaultPaths(resolvedRoot);
-  const mkdirResult = await createVaultDirs(paths);
-  if (!mkdirResult.ok)
-    return mkdirResult;
-  const writeResult = await writeVaultMetadata(paths, opts.targetOrg, resolvedRoot);
-  if (!writeResult.ok)
-    return writeResult;
-  const dxProjectScaffolded = await ensureDxProject(opts.cwd);
-  const gitignoreUpdated = await updateGitignore(opts.cwd);
-  return ok({ vaultRoot: resolvedRoot, targetOrg: opts.targetOrg, gitignoreUpdated, dxProjectScaffolded });
-};
-var ensureDxProject = async (cwd) => {
-  const projectPath = join30(cwd, "sfdx-project.json");
-  let wrote = false;
-  if (!await pathExists5(projectPath)) {
-    const project = {
-      packageDirectories: [{ path: DEFAULT_PACKAGE_DIR, default: true }],
-      namespace: "",
-      sourceApiVersion: SF_API_VERSION3
-    };
-    try {
-      await writeFile14(projectPath, `${JSON.stringify(project, null, JSON_INDENT7)}
-`, "utf8");
-      wrote = true;
-    } catch {
-    }
-  }
-  try {
-    await mkdir14(join30(cwd, DEFAULT_PACKAGE_DIR), { recursive: true });
-  } catch {
-  }
-  return wrote;
-};
-var createVaultDirs = async (paths) => {
-  for (const dir of [paths.root, paths.source, paths.components, paths.graph, paths.meta]) {
-    try {
-      await mkdir14(dir, { recursive: true });
-    } catch (cause) {
-      return err({ kind: "mkdir-failed", message: `failed to create directory: ${dir}`, path: dir, cause });
-    }
-  }
-  return ok(void 0);
-};
-var writeVaultMetadata = async (paths, targetOrg, resolvedRoot) => {
-  const config = {
-    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-    targetOrg,
-    vaultRoot: resolvedRoot,
-    version: readCliPackageVersion(),
-    snapshotOnRefresh: true
-  };
-  try {
-    await writeFile14(paths.config, `${JSON.stringify(config, null, JSON_INDENT7)}
-`, "utf8");
-  } catch (cause) {
-    return err({ kind: "write-failed", message: `failed to write config: ${paths.config}`, path: paths.config, cause });
-  }
-  const versionTxtPath = join30(paths.meta, "version.txt");
-  try {
-    await writeFile14(versionTxtPath, `${readCliPackageVersion()}
-`, "utf8");
-  } catch (cause) {
-    return err({ kind: "write-failed", message: `failed to write version.txt: ${versionTxtPath}`, path: versionTxtPath, cause });
-  }
-  return ok(void 0);
-};
-var updateGitignore = async (cwd) => {
-  const gitignorePath = join30(cwd, ".gitignore");
-  let existing = "";
-  let exists = true;
-  try {
-    existing = await readFile82(gitignorePath, "utf8");
-  } catch (cause) {
-    if (!isEnoent4(cause))
-      return false;
-    exists = false;
-  }
-  const present = new Set(existing.split(/\r?\n/).map((line) => line.trim()));
-  const missing = GITIGNORE_ENTRIES.filter((entry) => !present.has(entry));
-  if (missing.length === 0)
-    return false;
-  const needsNewline = exists && existing.length > 0 && !existing.endsWith("\n");
-  const next = `${existing}${needsNewline ? "\n" : ""}${missing.join("\n")}
-`;
-  try {
-    await writeFile14(gitignorePath, next, "utf8");
-    return true;
-  } catch {
-    return false;
-  }
-};
-var pathExists5 = async (path) => {
-  try {
-    await stat13(path);
-    return true;
-  } catch (cause) {
-    return !isEnoent4(cause);
-  }
-};
-var isEnoent4 = (cause) => typeof cause === "object" && cause !== null && "code" in cause && cause.code === "ENOENT";
-var ORG_CATEGORIES = ["nonScratchOrgs", "scratchOrgs", "otherOrgs", "devHubs", "sandboxes"];
-var getDefaultOrgAlias = async () => {
-  try {
-    const { stdout } = await execAsync3("sf org list --json");
-    const parsed = JSON.parse(stdout);
-    const result = parsed.result;
-    if (result === void 0 || result === null)
-      return null;
-    for (const key of ORG_CATEGORIES) {
-      const entries = result[key];
-      if (!Array.isArray(entries))
-        continue;
-      for (const item of entries) {
-        if (typeof item !== "object" || item === null)
-          continue;
-        const entry = item;
-        if (entry["isDefaultUsername"] !== true && entry["isDefaultDevHubUsername"] !== true)
-          continue;
-        const alias = entry["alias"] ?? entry["username"];
-        if (typeof alias === "string" && alias.length > 0)
-          return alias;
-      }
-    }
-    return null;
-  } catch {
-    return null;
-  }
-};
-var registerInitCommand = (program) => {
-  program.command("init").description("Initialise a new org-kb vault in the current directory").option("--target-org <alias>", "Salesforce org alias to bind to this vault").option("--vault-root <path>", "Vault root directory (relative to CWD)").option("--force", "Overwrite an existing org-kb/ vault config", false).action(async (flags) => {
-    const cwd = process.cwd();
-    const exitCode = await handleInit(cwd, flags);
-    if (exitCode !== 0)
-      process.exit(exitCode);
-  });
-};
-var handleInit = async (cwd, flags) => {
-  const interactive = process.stdin.isTTY === true;
-  const vaultRoot = flags.vaultRoot ?? (interactive ? await input({ message: "Vault root directory:", default: DEFAULT_VAULT_ROOT3 }) : DEFAULT_VAULT_ROOT3);
-  const resolvedRoot = isAbsolute5(vaultRoot) ? vaultRoot : resolve9(cwd, vaultRoot);
-  let force = flags.force ?? false;
-  if (!force && await pathExists5(resolvedRoot)) {
-    if (!interactive) {
-      process.stderr.write(`sfi init: ${vaultRoot}/ already exists. Re-run with --force to overwrite.
-`);
-      return 1;
-    }
-    const overwrite = await confirm({
-      message: `${vaultRoot}/ already exists. Overwrite config?`,
-      default: false
-    });
-    if (!overwrite) {
-      process.stdout.write("Existing init preserved.\n");
-      return 0;
-    }
-    force = true;
-  }
-  const targetOrg = await resolveTargetOrg(flags, interactive);
-  if (targetOrg === null) {
-    process.stderr.write("sfi init: no --target-org given and no default Salesforce org found. Pass --target-org <alias>.\n");
-    return 1;
-  }
-  return runAndReport({ cwd, targetOrg, vaultRoot, force });
-};
-var resolveTargetOrg = async (flags, interactive) => {
-  if (flags.targetOrg !== void 0)
-    return flags.targetOrg;
-  const detected = await getDefaultOrgAlias();
-  if (!interactive)
-    return detected;
-  return input({
-    message: "Target org alias:",
-    ...detected !== null ? { default: detected } : {}
-  });
-};
-var runAndReport = async (opts) => {
-  const result = await runInit(opts);
-  if (!result.ok) {
-    process.stderr.write(`sfi init: ${result.error.message}
-`);
-    return 1;
-  }
-  process.stdout.write([
-    `Initialised vault at ${result.value.vaultRoot}`,
-    `Target org: ${result.value.targetOrg}`,
-    result.value.gitignoreUpdated ? "Updated .gitignore" : ".gitignore already up to date (or could not be written)",
-    result.value.dxProjectScaffolded ? "Scaffolded sfdx-project.json (ready for sf project retrieve)" : "sfdx-project.json already present",
-    ""
-  ].join("\n"));
-  process.stdout.write(formatTrustStatement());
-  process.stdout.write("Next: run sfi refresh\n\n");
-  return 0;
-};
-
 // dist/src/commands/list-vaults.js
 init_src2();
 var JSON_INDENT8 = 2;
@@ -129997,113 +130199,6 @@ var registerListVaultsCommand = (program) => {
   });
 };
 
-// dist/src/commands/mcp.js
-init_dist();
-init_src7();
-init_src2();
-import { execFile as execFile4 } from "node:child_process";
-import { readFile as readFile83, stat as stat14 } from "node:fs/promises";
-import { resolve as resolve10 } from "node:path";
-import { promisify as promisify7 } from "node:util";
-var DEFAULT_VAULT_ROOT4 = "org-kb";
-var SHUTDOWN_SIGNALS = ["SIGINT", "SIGTERM"];
-var readBoundOrg = async (configPath) => {
-  try {
-    const raw = await readFile83(configPath, "utf8");
-    const parsed = JSON.parse(raw);
-    return typeof parsed.targetOrg === "string" ? parsed.targetOrg : null;
-  } catch {
-    return null;
-  }
-};
-var nodeExecFile3 = promisify7(execFile4);
-var defaultListOrgs = async () => {
-  try {
-    const { stdout } = await nodeExecFile3("sf", ["org", "list", "--json"], {
-      maxBuffer: 10 * 1024 * 1024
-    });
-    const json = JSON.parse(stdout);
-    const groups = json.result ?? {};
-    const seen = /* @__PURE__ */ new Set();
-    const out = [];
-    for (const list of Object.values(groups)) {
-      for (const org of list ?? []) {
-        const label = org.alias ?? org.username;
-        if (label && !seen.has(label)) {
-          seen.add(label);
-          out.push(label);
-        }
-      }
-    }
-    return out;
-  } catch {
-    return [];
-  }
-};
-var prepareMcp = async (opts) => {
-  const vaultRoot = opts.vaultRoot !== void 0 ? resolve10(opts.cwd, opts.vaultRoot) : resolve10(opts.cwd, DEFAULT_VAULT_ROOT4);
-  const paths = vaultPaths(vaultRoot);
-  if (!await pathExists6(paths.config)) {
-    const orgs = await (opts.listOrgs ?? defaultListOrgs)();
-    const where = opts.vaultRoot !== void 0 ? ` at ${vaultRoot}` : "";
-    const base = `No vault${where}. Run \`sfi init\` followed by \`sfi refresh\`, or point \`sfi mcp --vault <path>\` at an existing org-kb.`;
-    const hint = orgs.length > 0 ? ` You are authenticated to ${orgs.length} org(s): ${orgs.slice(0, 8).join(", ")}${orgs.length > 8 ? ", \u2026" : ""}. Run \`sfi init\` to pick the one you want and build its knowledge base \u2014 live answers attach to a vault's org, so the product never guesses which of your orgs to query.` : "";
-    return err({ kind: "no-vault", message: base + hint });
-  }
-  const ctxResult = await buildContext(vaultRoot);
-  if (!ctxResult.ok) {
-    return err({ kind: "buildContext-failed", message: ctxResult.error.message });
-  }
-  const targetOrg = await readBoundOrg(paths.config);
-  return ok({
-    ctx: ctxResult.value,
-    server: createServer(ctxResult.value),
-    vaultRoot,
-    targetOrg
-  });
-};
-var pathExists6 = async (path) => {
-  try {
-    await stat14(path);
-    return true;
-  } catch (cause) {
-    return !isEnoent5(cause);
-  }
-};
-var isEnoent5 = (cause) => typeof cause === "object" && cause !== null && "code" in cause && cause.code === "ENOENT";
-var registerMcpCommand = (program) => {
-  program.command("mcp").description("Run the MCP server backing the org-kb vault").option("--vault <path>", "Serve a specific org-kb vault instead of ./org-kb (bind a project to the right org)").action(async (cmdOpts) => {
-    const prepared = await prepareMcp({
-      cwd: process.cwd(),
-      ...cmdOpts.vault !== void 0 ? { vaultRoot: cmdOpts.vault } : {}
-    });
-    if (!prepared.ok) {
-      process.stderr.write(`sfi mcp: ${prepared.error.message}
-`);
-      process.exit(1);
-    }
-    const { ctx, server, vaultRoot, targetOrg } = prepared.value;
-    process.stderr.write(`sfi mcp: serving vault ${vaultRoot}${targetOrg !== null ? ` (org: ${targetOrg})` : " (no targetOrg in config)"}
-`);
-    const shutdownOnce = makeShutdownOnce(ctx);
-    for (const signal of SHUTDOWN_SIGNALS) {
-      process.on(signal, () => {
-        void shutdownOnce().then(() => process.exit(0));
-      });
-    }
-    await startServer(server);
-    await shutdownOnce();
-  });
-};
-var makeShutdownOnce = (ctx) => {
-  let done = null;
-  return () => {
-    if (done === null)
-      done = shutdown(ctx);
-    return done;
-  };
-};
-
 // dist/src/commands/quickstart.js
 init_src();
 init_src2();
@@ -130361,9 +130456,9 @@ init_vault_git();
 init_watch();
 var readVersion = () => {
   if (true)
-    return "0.1.12";
+    return "0.1.13";
   const pkgUrl = new URL("../../package.json", import.meta.url);
-  const raw = readFileSync5(fileURLToPath2(pkgUrl), "utf8");
+  const raw = readFileSync6(fileURLToPath3(pkgUrl), "utf8");
   const parsed = JSON.parse(raw);
   return parsed.version ?? "0.0.0";
 };
@@ -130380,6 +130475,7 @@ var createProgram = () => {
   registerVaultCommand(program);
   registerDoctorCommand(program);
   registerMcpCommand(program);
+  registerDemoCommand(program);
   registerServeCommand(program);
   registerSelftestCommand(program);
   registerFeedbackCommand(program);