ziphro-cli 0.0.0-stage → 2.0.0-preview.0

package/dist/index.js

@@ -0,0 +1,3719 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import React17 from "react";
+import { render as render4 } from "ink";
+import { program } from "commander";
+
+// src/commands/config.tsx
+import React3, { useState as useState3, useEffect as useEffect3 } from "react";
+import { Box as Box4, Text as Text4, useInput, useApp } from "ink";
+import { hostname as hostname2 } from "os";
+import http from "http";
+import { parse as parseUrl } from "url";
+import { exec } from "child_process";
+
+// src/lib/auth.ts
+import { homedir, hostname, userInfo } from "os";
+import { join } from "path";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, chmodSync, statSync } from "fs";
+import { randomBytes, createCipheriv, createDecipheriv, pbkdf2Sync, hkdfSync } from "crypto";
+var ZIPHRO_DIR = join(homedir(), ".ziphro");
+var CREDENTIALS_FILE = join(ZIPHRO_DIR, "credentials");
+var SEED_FILE = join(ZIPHRO_DIR, ".seed");
+function ensureZiphroDir() {
+  if (existsSync(ZIPHRO_DIR)) {
+    try {
+      const stat = statSync(ZIPHRO_DIR);
+      if (!stat.isDirectory()) {
+        throw new Error(`Path ${ZIPHRO_DIR} exists but is not a directory.`);
+      }
+    } catch (err) {
+      if (err.code !== "ENOENT") {
+        throw err;
+      }
+    }
+    return;
+  }
+  try {
+    mkdirSync(ZIPHRO_DIR, { recursive: true, mode: 448 });
+  } catch (err) {
+    if (err.code !== "EEXIST") {
+      throw err;
+    }
+  }
+}
+function getMachineKey() {
+  ensureZiphroDir();
+  let seed;
+  if (existsSync(SEED_FILE)) {
+    try {
+      seed = readFileSync(SEED_FILE);
+      if (seed.length < 32) throw new Error("Invalid seed length");
+    } catch {
+      seed = randomBytes(32);
+      writeFileSync(SEED_FILE, seed, { mode: 384 });
+    }
+  } else {
+    seed = randomBytes(32);
+    try {
+      writeFileSync(SEED_FILE, seed, { mode: 384 });
+    } catch {
+      writeFileSync(SEED_FILE, seed);
+    }
+  }
+  const user = userInfo?.()?.username || "user";
+  const host = hostname() || "local";
+  const info = `ziphro-vault-v2-${user}-${host}-${process.platform}`;
+  return Buffer.from(hkdfSync("sha256", seed, Buffer.alloc(0), Buffer.from(info), 32));
+}
+function encryptSecret(plaintext) {
+  if (!plaintext) return "";
+  try {
+    const key = getMachineKey();
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    const ciphertext = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return `enc:v1:${iv.toString("hex")}:${ciphertext.toString("hex")}:${tag.toString("hex")}`;
+  } catch {
+    return plaintext;
+  }
+}
+function decryptSecret(value) {
+  if (!value) return void 0;
+  if (!value.startsWith("enc:v1:")) {
+    return value;
+  }
+  try {
+    const parts = value.split(":");
+    if (parts.length !== 5) return void 0;
+    const iv = Buffer.from(parts[2], "hex");
+    const ciphertext = Buffer.from(parts[3], "hex");
+    const tag = Buffer.from(parts[4], "hex");
+    const key = getMachineKey();
+    const decipher = createDecipheriv("aes-256-gcm", key, iv);
+    decipher.setAuthTag(tag);
+    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return decrypted.toString("utf8");
+  } catch {
+    return void 0;
+  }
+}
+function deriveVaultKeySync(passphrase, email) {
+  const normalizedSalt = Buffer.from(email.trim().toLowerCase(), "utf8");
+  const masterKey = pbkdf2Sync(passphrase, normalizedSalt, 6e5, 32, "sha256");
+  const encKey = hkdfSync("sha256", masterKey, Buffer.alloc(0), Buffer.from("ziphro-encryption-v2"), 32);
+  return Buffer.from(encKey).toString("base64");
+}
+function parseIni(content) {
+  const result = {};
+  for (const line of content.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith("#") || trimmed.startsWith(";") || trimmed.startsWith("[") || !trimmed) continue;
+    const eqIdx = trimmed.indexOf("=");
+    if (eqIdx === -1) continue;
+    const key = trimmed.slice(0, eqIdx).trim();
+    const value = trimmed.slice(eqIdx + 1).trim();
+    result[key] = value;
+  }
+  return result;
+}
+function toIni(data) {
+  const lines = ["[default]"];
+  for (const [key, value] of Object.entries(data)) {
+    if (value !== void 0 && value !== "") {
+      lines.push(`${key} = ${value}`);
+    }
+  }
+  return lines.join("\n") + "\n";
+}
+function readCredentials() {
+  ensureZiphroDir();
+  if (!existsSync(CREDENTIALS_FILE)) return null;
+  try {
+    const content = readFileSync(CREDENTIALS_FILE, "utf8");
+    const raw = parseIni(content);
+    const rawExpires = raw.expires_at ? parseInt(raw.expires_at, 10) : void 0;
+    const email = raw.email || "";
+    const accessToken = decryptSecret(raw.access_token);
+    const refreshToken = decryptSecret(raw.refresh_token);
+    let vaultKey = decryptSecret(raw.vault_key);
+    if (raw.password) {
+      if (!vaultKey && email) {
+        vaultKey = deriveVaultKeySync(raw.password, email);
+      }
+      writeCredentials({
+        api_url: raw.api_url || "https://api-ziphro.vercel.app",
+        email,
+        access_token: accessToken,
+        refresh_token: refreshToken,
+        expires_at: rawExpires,
+        device_id: raw.device_id,
+        vault_key: vaultKey
+        // Password is purposefully omitted so it is wiped from disk
+      });
+    }
+    return {
+      api_url: raw.api_url || "https://api-ziphro.vercel.app",
+      email,
+      access_token: accessToken,
+      refresh_token: refreshToken,
+      expires_at: rawExpires && !isNaN(rawExpires) ? rawExpires : void 0,
+      device_id: raw.device_id || void 0,
+      vault_key: vaultKey
+    };
+  } catch {
+    return null;
+  }
+}
+function writeCredentials(creds) {
+  ensureZiphroDir();
+  let vaultKeyToWrite = creds.vault_key;
+  if (creds.password && creds.email && !vaultKeyToWrite) {
+    vaultKeyToWrite = deriveVaultKeySync(creds.password, creds.email);
+  }
+  const encryptedAccessToken = creds.access_token ? encryptSecret(creds.access_token) : void 0;
+  const encryptedRefreshToken = creds.refresh_token ? encryptSecret(creds.refresh_token) : void 0;
+  const encryptedVaultKey = vaultKeyToWrite ? encryptSecret(vaultKeyToWrite) : void 0;
+  const data = {
+    api_url: creds.api_url,
+    email: creds.email,
+    device_id: creds.device_id,
+    expires_at: creds.expires_at,
+    access_token: encryptedAccessToken,
+    refresh_token: encryptedRefreshToken,
+    vault_key: encryptedVaultKey
+    // Note: 'password' is intentionally NOT in data — never stored in plain text
+  };
+  try {
+    writeFileSync(CREDENTIALS_FILE, toIni(data), { encoding: "utf8", mode: 384 });
+  } catch (err) {
+    writeFileSync(CREDENTIALS_FILE, toIni(data), { encoding: "utf8" });
+  }
+  try {
+    chmodSync(CREDENTIALS_FILE, 384);
+  } catch {
+  }
+}
+function clearTokens() {
+  const creds = readCredentials();
+  if (!creds) return;
+  writeCredentials({
+    ...creds,
+    access_token: void 0,
+    refresh_token: void 0,
+    expires_at: void 0,
+    device_id: void 0,
+    vault_key: void 0,
+    password: void 0
+  });
+}
+function requireAuth() {
+  const creds = readCredentials();
+  if (!creds || !creds.access_token) {
+    throw new Error("Not authenticated. Run `ziphro login` first.");
+  }
+  if (creds.expires_at && Date.now() / 1e3 > creds.expires_at) {
+    throw new Error("Session expired. Run `ziphro login` to re-authenticate.");
+  }
+  const vaultKeyBuf = creds.vault_key ? Buffer.from(creds.vault_key, "base64") : void 0;
+  return {
+    email: creds.email,
+    deviceId: creds.device_id ?? "default",
+    accessToken: creds.access_token,
+    apiUrl: creds.api_url,
+    expiresAt: creds.expires_at ?? 0,
+    password: vaultKeyBuf ? vaultKeyBuf.toString("hex") : void 0,
+    vaultKey: vaultKeyBuf ? new Uint8Array(vaultKeyBuf) : void 0
+  };
+}
+function readAuth() {
+  try {
+    return requireAuth();
+  } catch {
+    return null;
+  }
+}
+
+// src/lib/version.ts
+var CLI_VERSION = "2.0.0-preview.0";
+function parseSemver(version) {
+  const cleaned = version.trim().replace(/^v/i, "").split("+")[0] ?? "";
+  const dashIndex = cleaned.indexOf("-");
+  const core = dashIndex === -1 ? cleaned : cleaned.slice(0, dashIndex);
+  const pre = dashIndex === -1 ? "" : cleaned.slice(dashIndex + 1);
+  const [major = 0, minor = 0, patch = 0] = core.split(".").map((part) => {
+    const num = Number.parseInt(part, 10);
+    return Number.isNaN(num) ? 0 : num;
+  });
+  return {
+    major,
+    minor,
+    patch,
+    prerelease: pre ? pre.split(".").filter(Boolean) : []
+  };
+}
+function isOutdated(current, latest) {
+  if (!current) return true;
+  if (!latest) return false;
+  const c = parseSemver(current);
+  const l = parseSemver(latest);
+  if (l.major !== c.major) return l.major > c.major;
+  if (l.minor !== c.minor) return l.minor > c.minor;
+  if (l.patch !== c.patch) return l.patch > c.patch;
+  if (c.prerelease.length > 0 && l.prerelease.length === 0) return true;
+  if (c.prerelease.length === 0 && l.prerelease.length > 0) return false;
+  const maxLen = Math.max(c.prerelease.length, l.prerelease.length);
+  for (let i = 0; i < maxLen; i++) {
+    const cId = c.prerelease[i];
+    const lId = l.prerelease[i];
+    if (cId === void 0 && lId !== void 0) return true;
+    if (cId !== void 0 && lId === void 0) return false;
+    if (cId === lId) continue;
+    const cIsNum = /^\d+$/.test(cId);
+    const lIsNum = /^\d+$/.test(lId);
+    if (cIsNum && lIsNum) {
+      return Number(lId) > Number(cId);
+    }
+    if (cIsNum !== lIsNum) {
+      return !lIsNum;
+    }
+    return lId > cId;
+  }
+  return false;
+}
+
+// src/lib/api.ts
+async function request(apiUrl, path, options = {}) {
+  const url = `${apiUrl.replace(/\/$/, "")}${path}`;
+  const headers = {
+    "Content-Type": "application/json",
+    "User-Agent": `ziphro-cli/${CLI_VERSION}`
+  };
+  if (options.token) {
+    headers["Authorization"] = `Bearer ${options.token}`;
+  }
+  try {
+    const res = await fetch(url, {
+      method: options.method ?? "GET",
+      headers,
+      body: options.body ? JSON.stringify(options.body) : void 0
+    });
+    const json = await res.json();
+    return json;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Network error";
+    return {
+      success: false,
+      error: {
+        code: "NETWORK_ERROR",
+        message: `Cannot reach API: ${message}`
+      }
+    };
+  }
+}
+async function apiLogin(apiUrl, email, password) {
+  return request(apiUrl, "/auth/login", {
+    method: "POST",
+    body: { email, password }
+  });
+}
+async function apiLogout(apiUrl, token) {
+  return request(apiUrl, "/auth/logout", {
+    method: "POST",
+    token
+  });
+}
+async function apiRegisterDevice(apiUrl, token, deviceName, platform) {
+  return request(apiUrl, "/auth/device", {
+    method: "POST",
+    token,
+    body: { device_name: deviceName, platform }
+  });
+}
+async function apiUploadSync(apiUrl, token, encryptedBlob, chk, deviceId, expectedRevision) {
+  return request(apiUrl, "/api/v1/tasks", {
+    method: "POST",
+    token,
+    body: {
+      encrypted_blob: encryptedBlob,
+      checksum: chk,
+      device_id: deviceId,
+      expected_revision: expectedRevision
+    }
+  });
+}
+async function apiDownloadSync(apiUrl, token, revision) {
+  const path = revision !== void 0 ? `/api/v1/tasks?revision=${revision}` : "/api/v1/tasks";
+  return request(apiUrl, path, { token });
+}
+
+// src/components/StarBurst.tsx
+import { useState, useEffect } from "react";
+import { Box, Text } from "ink";
+
+// src/lib/theme.ts
+var BRAND = {
+  // Primary brand accents
+  orange: "#f54e00",
+  white: "#f5f4ef",
+  muted: "#73726c",
+  subtle: "#8e8e93",
+  border: "#3a3a3c",
+  borderDark: "#2a2a28",
+  // Semantic status colors
+  success: "#22c55e",
+  warning: "#eab308",
+  error: "#ef4444",
+  info: "#06b6d4",
+  tag: "#a78bfa"
+};
+
+// src/components/StarBurst.tsx
+import { jsx, jsxs } from "react/jsx-runtime";
+var STARS = ["\u2726", "\u2727", "\u2605", "\u2606", "\u2738", "\u2739", "\u273A", "\u273B", "\u273C", "\u273D"];
+function randomStar() {
+  return STARS[Math.floor(Math.random() * STARS.length)] ?? "\u2726";
+}
+function randomStars(count) {
+  return Array.from({ length: count }, () => randomStar()).join(" ");
+}
+function StarBurst({
+  label,
+  color = BRAND.orange
+}) {
+  const [frame, setFrame] = useState(0);
+  const [done, setDone] = useState(false);
+  useEffect(() => {
+    const timer = setInterval(() => {
+      setFrame((f) => {
+        if (f >= 5) {
+          clearInterval(timer);
+          setDone(true);
+          return f;
+        }
+        return f + 1;
+      });
+    }, 80);
+    return () => clearInterval(timer);
+  }, []);
+  if (done) {
+    return /* @__PURE__ */ jsxs(Box, { children: [
+      /* @__PURE__ */ jsxs(Text, { color: BRAND.success, bold: true, children: [
+        "\u2713",
+        " "
+      ] }),
+      /* @__PURE__ */ jsx(Text, { color: BRAND.white, bold: true, children: label })
+    ] });
+  }
+  const count = Math.min(frame + 1, 4);
+  return /* @__PURE__ */ jsx(Box, { flexDirection: "column", children: /* @__PURE__ */ jsxs(Box, { children: [
+    /* @__PURE__ */ jsxs(Text, { color, children: [
+      randomStars(count),
+      " "
+    ] }),
+    /* @__PURE__ */ jsx(Text, { color: BRAND.white, bold: true, children: label }),
+    /* @__PURE__ */ jsxs(Text, { color, children: [
+      " ",
+      randomStars(count)
+    ] })
+  ] }) });
+}
+function StatusBadge({
+  type,
+  message
+}) {
+  const config = {
+    success: { icon: "\u2713", color: BRAND.success },
+    error: { icon: "\u2717", color: BRAND.error },
+    info: { icon: "\u2192", color: BRAND.info },
+    warn: { icon: "\u26A0", color: BRAND.warning }
+  }[type];
+  return /* @__PURE__ */ jsxs(Box, { children: [
+    /* @__PURE__ */ jsxs(Text, { color: config.color, bold: true, children: [
+      config.icon,
+      " "
+    ] }),
+    /* @__PURE__ */ jsx(Text, { color: type === "error" ? BRAND.error : BRAND.white, children: message })
+  ] });
+}
+
+// src/components/Spinner.tsx
+import { useState as useState2, useEffect as useEffect2 } from "react";
+import { Box as Box2, Text as Text2 } from "ink";
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+var ORBIT_FRAMES = ["\u25D0", "\u25D3", "\u25D1", "\u25D2"];
+var STAR_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+function Spinner({
+  label = "Loading...",
+  type = "orbit",
+  color = BRAND.orange
+}) {
+  const frames = type === "orbit" ? ORBIT_FRAMES : STAR_FRAMES;
+  const [frame, setFrame] = useState2(0);
+  useEffect2(() => {
+    const timer = setInterval(() => {
+      setFrame((f) => (f + 1) % frames.length);
+    }, 80);
+    return () => clearInterval(timer);
+  }, [frames.length]);
+  return /* @__PURE__ */ jsxs2(Box2, { children: [
+    /* @__PURE__ */ jsxs2(Text2, { color, bold: true, children: [
+      frames[frame],
+      " "
+    ] }),
+    /* @__PURE__ */ jsx2(Text2, { color: BRAND.white, children: label })
+  ] });
+}
+
+// src/components/AsciiHeader.tsx
+import { Box as Box3, Text as Text3 } from "ink";
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+var LOGO_LINES = [
+  { ziph: "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557  \u2588\u2588\u2557", ro: "\u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2557 " },
+  { ziph: "\u255A\u2550\u2550\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551  \u2588\u2588\u2551", ro: "\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557" },
+  { ziph: "  \u2588\u2588\u2588\u2554\u255D \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551", ro: "\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551   \u2588\u2588\u2551" },
+  { ziph: " \u2588\u2588\u2588\u2554\u255D  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551", ro: "\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551   \u2588\u2588\u2551" },
+  { ziph: "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2551  \u2588\u2588\u2551", ro: "\u2588\u2588\u2551  \u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D" },
+  { ziph: "\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D\u255A\u2550\u255D     \u255A\u2550\u255D  \u255A\u2550\u255D", ro: "\u255A\u2550\u255D  \u255A\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D " }
+];
+var TAGLINE = "\u2726 CLI \xB7 MCP \xB7 E2EE VAULT \u2726";
+function AsciiHeader() {
+  return /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", marginBottom: 1, children: [
+    LOGO_LINES.map((line, i) => /* @__PURE__ */ jsxs3(Box3, { children: [
+      /* @__PURE__ */ jsx3(Text3, { color: BRAND.white, bold: true, children: line.ziph }),
+      /* @__PURE__ */ jsx3(Text3, { color: BRAND.orange, bold: true, children: line.ro })
+    ] }, i)),
+    /* @__PURE__ */ jsx3(Box3, { marginTop: 0, children: /* @__PURE__ */ jsxs3(Text3, { color: BRAND.muted, children: [
+      " ",
+      TAGLINE
+    ] }) }),
+    /* @__PURE__ */ jsx3(Box3, { marginTop: 0, children: /* @__PURE__ */ jsx3(Text3, { color: BRAND.borderDark, children: "\u2500".repeat(54) }) })
+  ] });
+}
+function MiniHeader() {
+  return /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", marginBottom: 0, children: [
+    LOGO_LINES.map((line, i) => /* @__PURE__ */ jsxs3(Box3, { children: [
+      /* @__PURE__ */ jsx3(Text3, { color: BRAND.white, bold: true, children: line.ziph }),
+      /* @__PURE__ */ jsx3(Text3, { color: BRAND.orange, bold: true, children: line.ro })
+    ] }, i)),
+    /* @__PURE__ */ jsx3(Box3, { marginTop: 0, children: /* @__PURE__ */ jsxs3(Text3, { color: BRAND.muted, children: [
+      " ",
+      TAGLINE
+    ] }) })
+  ] });
+}
+
+// src/commands/config.tsx
+import { Fragment, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+function openBrowser(url) {
+  const start = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
+  const cmd = process.platform === "win32" ? `start "" "${url}"` : `${start} "${url}"`;
+  exec(cmd);
+}
+function ConfigUI() {
+  const { exit } = useApp();
+  const [stage, setStage] = useState3("waiting_for_browser");
+  const apiUrl = "https://api-ziphro.vercel.app";
+  const [port, setPort] = useState3(0);
+  const [errorMsg, setErrorMsg] = useState3("");
+  const [authDetails, setAuthDetails] = useState3(null);
+  useInput((input, key) => {
+    if (key.escape) {
+      exit();
+    }
+  });
+  useEffect3(() => {
+    if (stage !== "waiting_for_browser") return;
+    let server = null;
+    let isActive = true;
+    async function runServer() {
+      try {
+        const srv = http.createServer((req, res) => {
+          const parsed = parseUrl(req.url || "", true);
+          if (parsed.pathname === "/callback") {
+            const q = parsed.query;
+            const accessToken = q.access_token;
+            const refreshToken = q.refresh_token;
+            const expiresAt = q.expires_at;
+            const email = q.email;
+            const password = q.password;
+            if (!accessToken || !email) {
+              res.writeHead(400, { "Content-Type": "text/html" });
+              res.end("<h1>Authentication Failed</h1><p>Missing credentials.</p>");
+              if (isActive) {
+                setErrorMsg("Authentication failed: Missing credentials from redirect.");
+                setStage("error");
+                setTimeout(() => exit(new Error("Missing credentials")), 1500);
+              }
+              return;
+            }
+            res.writeHead(200, { "Content-Type": "text/html" });
+            res.end(`
+              <!DOCTYPE html>
+              <html>
+                <head>
+                  <title>Ziphro CLI Authenticated</title>
+                  <style>
+                    body {
+                      background: 
+                        radial-gradient(ellipse 80% 60% at 50% -20%, rgba(123, 97, 255, 0.15) 0%, transparent 70%),
+                        radial-gradient(ellipse 60% 50% at 80% 20%, rgba(0, 112, 243, 0.12) 0%, transparent 60%),
+                        radial-gradient(ellipse 50% 40% at 20% 30%, rgba(0, 223, 216, 0.1) 0%, transparent 60%),
+                        radial-gradient(ellipse 70% 40% at 60% 60%, rgba(235, 54, 127, 0.08) 0%, transparent 70%),
+                        #0D0D11;
+                      color: #FFFFFF;
+                      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+                      display: flex;
+                      align-items: center;
+                      justify-content: center;
+                      min-height: 100vh;
+                      margin: 0;
+                    }
+                    .card {
+                      background: rgba(19, 19, 26, 0.8);
+                      backdrop-filter: blur(12px);
+                      -webkit-backdrop-filter: blur(12px);
+                      border: 1px solid rgba(255, 255, 255, 0.08);
+                      border-radius: 16px;
+                      padding: 40px;
+                      text-align: center;
+                      box-shadow: 0 12px 40px rgba(0, 0, 0, 0.6);
+                      max-width: 400px;
+                      width: 100%;
+                      animation: fadeUp 0.6s cubic-bezier(0.16, 1, 0.3, 1) forwards;
+                    }
+                    .logo-container {
+                      background: #0D0D11;
+                      border: 1px solid #1F1F2E;
+                      border-radius: 8px;
+                      padding: 8px 16px;
+                      display: inline-flex;
+                      align-items: center;
+                      justify-content: center;
+                      margin-bottom: 24px;
+                      animation: pulseRing 2s infinite ease-in-out;
+                    }
+                    .text-logo {
+                      display: inline-flex;
+                      align-items: center;
+                      gap: 6px;
+                      text-decoration: none !important;
+                      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+                      font-size: 16px;
+                      font-weight: 600;
+                      letter-spacing: -0.5px;
+                      color: #FFFFFF;
+                      transition: all 0.3s cubic-bezier(0.16, 1, 0.3, 1);
+                      flex-shrink: 0;
+                    }
+                    .text-logo-brand {
+                      transition: letter-spacing 0.3s ease, color 0.3s ease;
+                    }
+                    .text-logo-accent {
+                      background: linear-gradient(135deg, #7B61FF, #0070f3);
+                      -webkit-background-clip: text;
+                      -webkit-text-fill-color: transparent;
+                    }
+                    .text-logo-spark {
+                      color: #7B61FF;
+                      font-size: 11px;
+                      opacity: 0.7;
+                      transition: transform 0.4s cubic-bezier(0.16, 1, 0.3, 1), opacity 0.3s ease, color 0.3s ease;
+                    }
+                    .text-logo:hover {
+                      opacity: 0.95;
+                    }
+                    .text-logo:hover .text-logo-brand {
+                      letter-spacing: 0.3px;
+                    }
+                    .text-logo:hover .text-logo-spark {
+                      transform: scale(1.3) rotate(180deg);
+                      opacity: 1;
+                      color: #00dfd8;
+                    }
+                    .success-badge {
+                      display: inline-flex;
+                      align-items: center;
+                      gap: 6px;
+                      background: rgba(16, 185, 129, 0.1);
+                      color: #10B981;
+                      border: 1px solid rgba(16, 185, 129, 0.2);
+                      padding: 6px 14px;
+                      border-radius: 99px;
+                      font-size: 13px;
+                      font-weight: 500;
+                      margin-bottom: 20px;
+                    }
+                    h1 {
+                      color: #FFFFFF;
+                      margin: 0 0 12px 0;
+                      font-size: 22px;
+                      font-weight: 600;
+                      letter-spacing: -0.5px;
+                    }
+                    p {
+                      color: #A1A1B5;
+                      font-size: 14px;
+                      line-height: 1.6;
+                      margin: 0;
+                    }
+                    @keyframes fadeUp {
+                      from { opacity: 0; transform: translateY(20px); }
+                      to { opacity: 1; transform: translateY(0); }
+                    }
+                    @keyframes pulseRing {
+                      0% { transform: scale(1); box-shadow: 0 4px 14px rgba(123, 97, 255, 0.15); }
+                      50% { transform: scale(1.03); box-shadow: 0 6px 20px rgba(123, 97, 255, 0.35); }
+                      100% { transform: scale(1); box-shadow: 0 4px 14px rgba(123, 97, 255, 0.15); }
+                    }
+                  </style>
+                </head>
+                <body>
+                  <div class="card">
+                    <div class="logo-container">
+                      <a href="#" class="text-logo">
+                        <span class="text-logo-brand" style="color: #FFFFFF;">Task<span class="text-logo-accent">Air</span></span>
+                        <span class="text-logo-spark">\u2726</span>
+                      </a>
+                    </div>
+                    <div>
+                      <div class="success-badge">
+                        <svg width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.5" viewBox="0 0 24 24" style="margin-top: 1px;">
+                          <polyline points="20 6 9 17 4 12"/>
+                        </svg>
+                        <span>CLI Connected</span>
+                      </div>
+                    </div>
+                    <h1>Authenticated Successfully</h1>
+                    <p>You can close this tab and return to your terminal.</p>
+                  </div>
+                </body>
+              </html>
+            `);
+            if (isActive) {
+              setAuthDetails({
+                accessToken,
+                refreshToken,
+                expiresAt: parseInt(expiresAt, 10),
+                email,
+                password: password || void 0
+              });
+              setStage("registering");
+            }
+          } else {
+            res.writeHead(404);
+            res.end("Not Found");
+          }
+        });
+        server = srv;
+        srv.listen(0, "127.0.0.1", () => {
+          const addr = srv.address();
+          const p = typeof addr === "string" ? 0 : addr?.port || 0;
+          setPort(p);
+          const authUrl = `https://api-ziphro.vercel.app/cli-auth?callback=http://localhost:${p}/callback`;
+          openBrowser(authUrl);
+        });
+      } catch (err) {
+        if (isActive) {
+          setErrorMsg(err.message || "Failed to start local server");
+          setStage("error");
+          setTimeout(() => exit(err), 1500);
+        }
+      }
+    }
+    runServer();
+    return () => {
+      isActive = false;
+      if (server) {
+        server.close();
+      }
+    };
+  }, [stage, apiUrl]);
+  useEffect3(() => {
+    if (stage !== "registering" || !authDetails) return;
+    async function registerAndSave() {
+      try {
+        const deviceName = `${hostname2() || "CLI"} - ${process.platform || "Client"}`;
+        const devRes = await apiRegisterDevice(apiUrl, authDetails.accessToken, deviceName, "cli");
+        if (devRes.success && devRes.data) {
+          const existing = readCredentials();
+          writeCredentials({
+            ...existing,
+            api_url: apiUrl,
+            email: authDetails.email,
+            access_token: authDetails.accessToken,
+            refresh_token: authDetails.refreshToken,
+            expires_at: authDetails.expiresAt,
+            device_id: devRes.data.id,
+            password: authDetails.password
+          });
+          setStage("success");
+          setTimeout(() => exit(), 1200);
+        } else {
+          setErrorMsg(devRes.error?.message ?? "Device registration failed");
+          setStage("error");
+          setTimeout(() => exit(new Error(devRes.error?.message)), 1500);
+        }
+      } catch (err) {
+        setErrorMsg(err.message || "Error completing configuration");
+        setStage("error");
+        setTimeout(() => exit(err), 1500);
+      }
+    }
+    registerAndSave();
+  }, [stage, authDetails, apiUrl]);
+  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx4(AsciiHeader, {}),
+    /* @__PURE__ */ jsx4(Box4, { flexDirection: "column", marginBottom: 1, children: /* @__PURE__ */ jsx4(Text4, { color: "cyan", bold: true, children: "\u2726 Configure Ziphro" }) }),
+    stage === "waiting_for_browser" && /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", gap: 0.5, children: [
+      /* @__PURE__ */ jsxs4(Text4, { color: BRAND.success, children: [
+        "\u2713 API URL set to: ",
+        apiUrl
+      ] }),
+      port > 0 ? /* @__PURE__ */ jsxs4(Fragment, { children: [
+        /* @__PURE__ */ jsxs4(Text4, { color: BRAND.warning, children: [
+          "\u2726 Started local server on port ",
+          port
+        ] }),
+        /* @__PURE__ */ jsx4(Spinner, { label: "Opening browser to authenticate\u2026", type: "orbit", color: BRAND.orange }),
+        /* @__PURE__ */ jsx4(Text4, { color: BRAND.muted, children: "If the page does not load, open this URL manually:" }),
+        /* @__PURE__ */ jsx4(Text4, { color: BRAND.orange, underline: true, children: `https://api-ziphro.vercel.app/cli-auth?callback=http://localhost:${port}/callback` })
+      ] }) : /* @__PURE__ */ jsx4(Spinner, { label: "Starting local server\u2026", type: "orbit", color: BRAND.orange })
+    ] }),
+    stage === "registering" && /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx4(Text4, { color: BRAND.success, children: "\u2713 Received credentials from browser" }),
+      /* @__PURE__ */ jsx4(Spinner, { label: "Registering device with backend\u2026", type: "orbit", color: BRAND.orange })
+    ] }),
+    stage === "success" && /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(StatusBadge, { type: "success", message: "Configuration saved successfully! E2E Encryption Active." }) }),
+    stage === "error" && /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(StatusBadge, { type: "error", message: errorMsg }) }),
+    stage === "waiting_for_browser" && /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(Text4, { color: "gray", dimColor: true, children: "Press Esc to cancel" }) })
+  ] });
+}
+function registerConfig(program2) {
+  program2.command("config").alias("configure").description("Authenticate and configure CLI via browser").action(async () => {
+    const { render: render5 } = await import("ink");
+    render5(
+      React3.createElement(ConfigUI)
+    );
+  });
+}
+
+// src/commands/login.tsx
+import React4, { useState as useState4, useEffect as useEffect4 } from "react";
+import { Box as Box5, Text as Text5, useInput as useInput2, useApp as useApp2 } from "ink";
+import { hostname as hostname3 } from "os";
+
+// ../packages/crypto/dist/web.js
+var KEY_LENGTH = 32;
+var PBKDF2_ITERATIONS_V2 = 6e5;
+var PBKDF2_ITERATIONS_V1 = 1e5;
+function uint8ArrayToBase64(arr) {
+  const binString = Array.from(arr, (byte) => String.fromCharCode(byte)).join("");
+  return btoa(binString);
+}
+function base64ToUint8Array(str) {
+  const binString = atob(str);
+  return Uint8Array.from(binString, (char) => char.charCodeAt(0));
+}
+function getSubtleCrypto() {
+  const c = typeof window !== "undefined" ? window.crypto : globalThis.crypto;
+  if (!c || !c.subtle) {
+    throw new Error("Web Crypto Subtle is not available in this environment.");
+  }
+  return c.subtle;
+}
+function getRandomValues(arr) {
+  const c = typeof window !== "undefined" ? window.crypto : globalThis.crypto;
+  return c.getRandomValues(arr);
+}
+function toBufferSource(bytes) {
+  if (bytes.buffer instanceof ArrayBuffer) {
+    return new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  }
+  return new Uint8Array(bytes);
+}
+async function deriveAccountKeys(passphrase, emailSalt) {
+  const subtle = getSubtleCrypto();
+  const encoder = new TextEncoder();
+  const normalizedSalt = encoder.encode(emailSalt.trim().toLowerCase());
+  const passphraseBytes = encoder.encode(passphrase);
+  const pbkdf2Key = await subtle.importKey("raw", passphraseBytes, { name: "PBKDF2" }, false, ["deriveBits"]);
+  const masterBits = await subtle.deriveBits({
+    name: "PBKDF2",
+    salt: normalizedSalt,
+    iterations: PBKDF2_ITERATIONS_V2,
+    hash: "SHA-256"
+  }, pbkdf2Key, KEY_LENGTH * 8);
+  const hkdfKey = await subtle.importKey("raw", masterBits, "HKDF", false, ["deriveBits"]);
+  const authBits = await subtle.deriveBits({
+    name: "HKDF",
+    hash: "SHA-256",
+    salt: new Uint8Array(0),
+    info: encoder.encode("ziphro-auth-v2")
+  }, hkdfKey, KEY_LENGTH * 8);
+  const encBits = await subtle.deriveBits({
+    name: "HKDF",
+    hash: "SHA-256",
+    salt: new Uint8Array(0),
+    info: encoder.encode("ziphro-encryption-v2")
+  }, hkdfKey, KEY_LENGTH * 8);
+  return {
+    authSecret: uint8ArrayToBase64(new Uint8Array(authBits)),
+    encKey: new Uint8Array(encBits)
+  };
+}
+function buildAADBytes(meta) {
+  return new TextEncoder().encode(JSON.stringify({
+    u: meta.userId,
+    r: meta.revision,
+    v: meta.version ?? 2
+  }));
+}
+async function encryptWithAAD(plaintext, encKey, meta) {
+  const subtle = getSubtleCrypto();
+  const iv = getRandomValues(new Uint8Array(12));
+  const salt = getRandomValues(new Uint8Array(16));
+  const aad = buildAADBytes(meta);
+  const cryptoKey = ArrayBuffer.isView(encKey) ? await subtle.importKey("raw", toBufferSource(encKey), { name: "AES-GCM" }, false, ["encrypt"]) : encKey;
+  const plaintextBytes = new TextEncoder().encode(plaintext);
+  const encryptedBuffer = await subtle.encrypt({
+    name: "AES-GCM",
+    iv: toBufferSource(iv),
+    additionalData: toBufferSource(aad),
+    tagLength: 128
+  }, cryptoKey, plaintextBytes);
+  const encryptedBytes = new Uint8Array(encryptedBuffer);
+  const ciphertextBytes = encryptedBytes.slice(0, -16);
+  const authTagBytes = encryptedBytes.slice(-16);
+  return {
+    version: "2",
+    iterations: PBKDF2_ITERATIONS_V2,
+    revision: meta.revision,
+    salt: uint8ArrayToBase64(salt),
+    iv: uint8ArrayToBase64(iv),
+    ciphertext: uint8ArrayToBase64(ciphertextBytes),
+    authTag: uint8ArrayToBase64(authTagBytes)
+  };
+}
+async function decryptWithAAD(blob, encKey, meta) {
+  const subtle = getSubtleCrypto();
+  const iv = base64ToUint8Array(blob.iv);
+  const ciphertextBytes = base64ToUint8Array(blob.ciphertext);
+  const authTagBytes = base64ToUint8Array(blob.authTag);
+  const combined = new Uint8Array(ciphertextBytes.length + authTagBytes.length);
+  combined.set(ciphertextBytes, 0);
+  combined.set(authTagBytes, ciphertextBytes.length);
+  const cryptoKey = ArrayBuffer.isView(encKey) ? await subtle.importKey("raw", toBufferSource(encKey), { name: "AES-GCM" }, false, ["decrypt"]) : encKey;
+  const gcmParams = {
+    name: "AES-GCM",
+    iv: toBufferSource(iv),
+    tagLength: 128
+  };
+  if (blob.version === "2" && meta) {
+    gcmParams.additionalData = toBufferSource(buildAADBytes({
+      userId: meta.userId,
+      revision: meta.revision,
+      version: meta.version ?? 2
+    }));
+  }
+  const decryptedBuffer = await subtle.decrypt(gcmParams, cryptoKey, combined);
+  return new TextDecoder().decode(decryptedBuffer);
+}
+async function legacyDecrypt(blob, password, meta) {
+  const subtle = getSubtleCrypto();
+  const encoder = new TextEncoder();
+  const salt = base64ToUint8Array(blob.salt);
+  const iv = base64ToUint8Array(blob.iv);
+  const ciphertextBytes = base64ToUint8Array(blob.ciphertext);
+  const authTagBytes = base64ToUint8Array(blob.authTag);
+  const combined = new Uint8Array(ciphertextBytes.length + authTagBytes.length);
+  combined.set(ciphertextBytes, 0);
+  combined.set(authTagBytes, ciphertextBytes.length);
+  const isV2 = blob.version === "2";
+  const iterations = isV2 ? blob.iterations || PBKDF2_ITERATIONS_V2 : PBKDF2_ITERATIONS_V1;
+  const passwordBytes = encoder.encode(password);
+  const pbkdf2Key = await subtle.importKey("raw", passwordBytes, { name: "PBKDF2" }, false, ["deriveBits"]);
+  const masterBits = await subtle.deriveBits({
+    name: "PBKDF2",
+    salt: toBufferSource(salt),
+    iterations,
+    hash: "SHA-256"
+  }, pbkdf2Key, KEY_LENGTH * 8);
+  let cryptoKey;
+  if (isV2) {
+    const hkdfKey = await subtle.importKey("raw", masterBits, "HKDF", false, ["deriveKey"]);
+    cryptoKey = await subtle.deriveKey({
+      name: "HKDF",
+      hash: "SHA-256",
+      salt: new Uint8Array(0),
+      info: encoder.encode("ziphro-encryption")
+    }, hkdfKey, { name: "AES-GCM", length: 256 }, false, ["decrypt"]);
+  } else {
+    const labelBytes = encoder.encode("ziphro-encryption");
+    const combinedKey = new Uint8Array(masterBits.byteLength + labelBytes.length);
+    combinedKey.set(new Uint8Array(masterBits), 0);
+    combinedKey.set(labelBytes, masterBits.byteLength);
+    const hashBuffer = await subtle.digest("SHA-256", combinedKey);
+    cryptoKey = await subtle.importKey("raw", hashBuffer, { name: "AES-GCM" }, false, ["decrypt"]);
+  }
+  const gcmParams = {
+    name: "AES-GCM",
+    iv: toBufferSource(iv),
+    tagLength: 128
+  };
+  if (isV2 && meta) {
+    try {
+      const decryptedWithAAD = await subtle.decrypt({
+        ...gcmParams,
+        additionalData: toBufferSource(buildAADBytes(meta))
+      }, cryptoKey, combined);
+      return new TextDecoder().decode(decryptedWithAAD);
+    } catch {
+    }
+  }
+  const decryptedBuffer = await subtle.decrypt(gcmParams, cryptoKey, combined);
+  return new TextDecoder().decode(decryptedBuffer);
+}
+async function checksum(plaintext) {
+  const subtle = getSubtleCrypto();
+  const data = new TextEncoder().encode(plaintext);
+  const hashBuffer = await subtle.digest("SHA-256", data);
+  const hashArray = Array.from(new Uint8Array(hashBuffer));
+  return hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+
+// src/lib/crypto.ts
+async function encrypt(plaintext, passphraseOrKey, meta) {
+  let encKey;
+  if (typeof passphraseOrKey === "string") {
+    const salt = meta?.userId || "ziphro-cli-user";
+    const keys = await deriveAccountKeys(passphraseOrKey, salt);
+    encKey = keys.encKey;
+  } else {
+    encKey = passphraseOrKey;
+  }
+  const envelope = meta || {
+    userId: "cli",
+    revision: 1,
+    version: 2
+  };
+  return encryptWithAAD(plaintext, encKey, envelope);
+}
+async function decrypt(blob, passphraseOrKey, meta) {
+  if (typeof passphraseOrKey !== "string") {
+    return decryptWithAAD(blob, passphraseOrKey, meta);
+  }
+  try {
+    const salt = meta?.userId || "ziphro-cli-user";
+    const keys = await deriveAccountKeys(passphraseOrKey, salt);
+    return await decryptWithAAD(blob, keys.encKey, meta);
+  } catch {
+    return legacyDecrypt(blob, passphraseOrKey, meta);
+  }
+}
+
+// src/commands/login.tsx
+import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
+function LoginUI() {
+  const { exit } = useApp2();
+  const creds = readCredentials();
+  const [email, setEmail] = useState4(creds?.email ?? "");
+  const [password, setPassword] = useState4("");
+  const [stage, setStage] = useState4("input_email");
+  const [currentInput, setCurrentInput] = useState4(creds?.email ?? "");
+  const [errorMsg, setErrorMsg] = useState4("");
+  useEffect4(() => {
+    if (stage === "loading") {
+      const apiUrl = creds?.api_url ?? "https://api-ziphro.vercel.app";
+      (async () => {
+        try {
+          const { authSecret, encKey } = await deriveAccountKeys(password, email);
+          let res = await apiLogin(apiUrl, email, authSecret);
+          if (!res.success) {
+            const legacyRes = await apiLogin(apiUrl, email, password);
+            if (legacyRes.success) {
+              res = legacyRes;
+            }
+          }
+          if (res.success && res.data) {
+            const accessToken = res.data.access_token;
+            const deviceName = `${hostname3() || "CLI"} - ${process.platform || "Client"}`;
+            const devRes = await apiRegisterDevice(apiUrl, accessToken, deviceName, "cli");
+            if (devRes.success && devRes.data) {
+              const existing = readCredentials();
+              writeCredentials({
+                ...existing,
+                api_url: apiUrl,
+                email,
+                access_token: accessToken,
+                refresh_token: res.data.refresh_token,
+                expires_at: res.data.expires_at,
+                device_id: devRes.data.id,
+                vault_key: Buffer.from(encKey).toString("base64")
+              });
+              setStage("success");
+              setTimeout(() => exit(), 1200);
+            } else {
+              setErrorMsg(devRes.error?.message ?? "Device registration failed");
+              setStage("error");
+              setTimeout(() => exit(new Error(devRes.error?.message)), 1500);
+            }
+          } else {
+            setErrorMsg(res.error?.message ?? "Login failed");
+            setStage("error");
+            setTimeout(() => exit(new Error(res.error?.message)), 1500);
+          }
+        } catch (err) {
+          setErrorMsg(err.message || "Authentication error");
+          setStage("error");
+          setTimeout(() => exit(err), 1500);
+        }
+      })();
+    }
+  }, [stage]);
+  useInput2((input, key) => {
+    if (stage === "loading" || stage === "success") return;
+    if (key.return) {
+      if (stage === "input_email") {
+        if (!currentInput.trim()) return;
+        setEmail(currentInput.trim());
+        setCurrentInput("");
+        setStage("input_password");
+      } else if (stage === "input_password") {
+        if (!currentInput.trim()) return;
+        setPassword(currentInput.trim());
+        setCurrentInput("");
+        setStage("loading");
+      }
+      return;
+    }
+    if (key.backspace || key.delete) {
+      setCurrentInput((v) => v.slice(0, -1));
+      return;
+    }
+    if (key.escape) {
+      exit();
+      return;
+    }
+    setCurrentInput((v) => v + input);
+  });
+  return /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx5(MiniHeader, {}),
+    /* @__PURE__ */ jsxs5(
+      Box5,
+      {
+        flexDirection: "column",
+        borderStyle: "round",
+        borderColor: BRAND.border,
+        paddingX: 2,
+        paddingY: 1,
+        marginTop: 1,
+        children: [
+          /* @__PURE__ */ jsxs5(Box5, { marginBottom: 1, justifyContent: "space-between", children: [
+            /* @__PURE__ */ jsx5(Text5, { color: BRAND.orange, bold: true, children: "\u2726 Ziphro Vault Authentication" }),
+            /* @__PURE__ */ jsx5(Text5, { color: BRAND.muted, children: "E2EE AES-256-GCM" })
+          ] }),
+          /* @__PURE__ */ jsxs5(Box5, { marginBottom: 0, children: [
+            /* @__PURE__ */ jsx5(Text5, { color: stage === "input_email" ? BRAND.orange : BRAND.success, bold: true, children: stage !== "input_email" ? "\u2713 " : "\u2192 " }),
+            /* @__PURE__ */ jsx5(Text5, { color: BRAND.muted, children: "Email:    " }),
+            stage === "input_email" ? /* @__PURE__ */ jsxs5(Text5, { color: BRAND.white, bold: true, children: [
+              currentInput,
+              /* @__PURE__ */ jsx5(Text5, { color: BRAND.orange, children: "\u2588" })
+            ] }) : /* @__PURE__ */ jsx5(Text5, { color: BRAND.white, children: email })
+          ] }),
+          (stage === "input_password" || stage === "loading" || stage === "success" || stage === "error") && /* @__PURE__ */ jsxs5(Box5, { marginBottom: 0, children: [
+            /* @__PURE__ */ jsx5(
+              Text5,
+              {
+                color: stage === "input_password" ? BRAND.orange : stage === "success" ? BRAND.success : BRAND.muted,
+                bold: true,
+                children: stage !== "input_password" ? "\u2713 " : "\u2192 "
+              }
+            ),
+            /* @__PURE__ */ jsx5(Text5, { color: BRAND.muted, children: "Password: " }),
+            stage === "input_password" ? /* @__PURE__ */ jsxs5(Text5, { color: BRAND.orange, children: [
+              "\u2022".repeat(currentInput.length),
+              /* @__PURE__ */ jsx5(Text5, { color: BRAND.orange, children: "\u2588" })
+            ] }) : /* @__PURE__ */ jsx5(Text5, { color: BRAND.muted, children: "\u2022".repeat(8) })
+          ] }),
+          /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, children: [
+            stage === "loading" && /* @__PURE__ */ jsx5(Spinner, { label: "Deriving zero-knowledge keys & authenticating\u2026", type: "orbit", color: BRAND.orange }),
+            stage === "success" && /* @__PURE__ */ jsx5(StatusBadge, { type: "success", message: `Authenticated successfully as ${email}` }),
+            stage === "error" && /* @__PURE__ */ jsx5(StatusBadge, { type: "error", message: errorMsg })
+          ] }),
+          (stage === "input_email" || stage === "input_password") && /* @__PURE__ */ jsx5(Box5, { marginTop: 1, children: /* @__PURE__ */ jsxs5(Text5, { color: BRAND.muted, children: [
+            "Press ",
+            /* @__PURE__ */ jsx5(Text5, { color: BRAND.orange, bold: true, children: "[Enter]" }),
+            " to confirm \xB7 ",
+            /* @__PURE__ */ jsx5(Text5, { color: BRAND.orange, bold: true, children: "[Esc]" }),
+            " to cancel"
+          ] }) })
+        ]
+      }
+    )
+  ] });
+}
+function registerLogin(program2) {
+  program2.command("login").description("Authenticate with Ziphro API (Zero-Knowledge)").action(async () => {
+    const { render: render5 } = await import("ink");
+    render5(React4.createElement(LoginUI));
+  });
+}
+
+// src/commands/logout.tsx
+import React5, { useEffect as useEffect5, useState as useState5 } from "react";
+import { Box as Box6, useApp as useApp3 } from "ink";
+import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
+function LogoutUI() {
+  const { exit } = useApp3();
+  const [status, setStatus] = useState5("loading");
+  const [message, setMessage] = useState5("");
+  useEffect5(() => {
+    const creds = readCredentials();
+    if (!creds?.access_token) {
+      setMessage("Not logged in.");
+      setStatus("error");
+      setTimeout(() => exit(), 1e3);
+      return;
+    }
+    apiLogout(creds.api_url, creds.access_token).finally(() => {
+      clearTokens();
+      setMessage(`Logged out. Session cleared for ${creds.email}`);
+      setStatus("success");
+      setTimeout(() => exit(), 1200);
+    });
+  }, []);
+  return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx6(MiniHeader, {}),
+    /* @__PURE__ */ jsxs6(Box6, { marginTop: 1, children: [
+      status === "loading" && /* @__PURE__ */ jsx6(Spinner, { label: "Logging out\u2026", type: "orbit" }),
+      status === "success" && /* @__PURE__ */ jsx6(StatusBadge, { type: "success", message }),
+      status === "error" && /* @__PURE__ */ jsx6(StatusBadge, { type: "error", message })
+    ] })
+  ] });
+}
+function registerLogout(program2) {
+  program2.command("logout").description("Clear local credentials and revoke session").action(async () => {
+    const { render: render5 } = await import("ink");
+    render5(React5.createElement(LogoutUI));
+  });
+}
+
+// src/commands/whoami.tsx
+import React6 from "react";
+import { Box as Box7, Text as Text7 } from "ink";
+import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+function WhoamiUI() {
+  let auth = null;
+  let error = "";
+  try {
+    auth = requireAuth();
+  } catch (e) {
+    error = e.message;
+  }
+  const creds = readCredentials();
+  if (error || !auth) {
+    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+      /* @__PURE__ */ jsx7(MiniHeader, {}),
+      /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx7(StatusBadge, { type: "error", message: error || "Not authenticated" }) }),
+      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
+        /* @__PURE__ */ jsx7(Text7, { color: BRAND.muted, children: "Run " }),
+        /* @__PURE__ */ jsx7(Text7, { color: BRAND.orange, bold: true, children: "ziphro login" }),
+        /* @__PURE__ */ jsx7(Text7, { color: BRAND.muted, children: " to authenticate into your cryptographic vault." })
+      ] })
+    ] });
+  }
+  const expiresAt = new Date(auth.expiresAt * 1e3);
+  const now = /* @__PURE__ */ new Date();
+  const msLeft = expiresAt.getTime() - now.getTime();
+  const hoursLeft = Math.floor(msLeft / 1e3 / 60 / 60);
+  const minutesLeft = Math.floor(msLeft / 1e3 / 60 % 60);
+  return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx7(AsciiHeader, {}),
+    /* @__PURE__ */ jsxs7(
+      Box7,
+      {
+        flexDirection: "column",
+        borderStyle: "round",
+        borderColor: BRAND.border,
+        paddingX: 2,
+        paddingY: 1,
+        children: [
+          /* @__PURE__ */ jsxs7(Box7, { marginBottom: 1, justifyContent: "space-between", children: [
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.orange, bold: true, children: "\u2726 Authenticated Vault Session" }),
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.muted, children: "ACTIVE" })
+          ] }),
+          /* @__PURE__ */ jsxs7(Box7, { marginBottom: 0, children: [
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.muted, children: "  Email:     " }),
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.white, bold: true, children: auth.email })
+          ] }),
+          /* @__PURE__ */ jsxs7(Box7, { marginBottom: 0, children: [
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.muted, children: "  Device ID: " }),
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.orange, children: auth.deviceId })
+          ] }),
+          /* @__PURE__ */ jsxs7(Box7, { marginBottom: 0, children: [
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.muted, children: "  API URL:   " }),
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.subtle, children: creds?.api_url ?? "\u2014" })
+          ] }),
+          /* @__PURE__ */ jsxs7(Box7, { marginBottom: 0, children: [
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.muted, children: "  Expires:   " }),
+            /* @__PURE__ */ jsx7(Text7, { color: hoursLeft < 1 ? BRAND.error : BRAND.success, bold: true, children: hoursLeft > 0 ? `${hoursLeft}h ${minutesLeft}m remaining` : `${minutesLeft}m remaining` })
+          ] }),
+          /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.success, bold: true, children: "  \u2713 " }),
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.muted, children: "Zero-knowledge encryption active \xB7 " }),
+            /* @__PURE__ */ jsx7(Text7, { color: BRAND.orange, bold: true, children: "AES-256-GCM" })
+          ] })
+        ]
+      }
+    )
+  ] });
+}
+function registerWhoami(program2) {
+  program2.command("whoami").description("Display the currently authenticated user").action(async () => {
+    const { render: render5 } = await import("ink");
+    render5(React6.createElement(WhoamiUI));
+  });
+}
+
+// src/commands/add.tsx
+import React7, { useEffect as useEffect6, useState as useState6 } from "react";
+import { Box as Box8, Text as Text8, useApp as useApp4 } from "ink";
+import { v4 as uuidv42 } from "uuid";
+
+// src/lib/storage.ts
+import { join as join2 } from "path";
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, renameSync } from "fs";
+import { v4 as uuidv4 } from "uuid";
+var STORE_FILE = join2(ZIPHRO_DIR, "tasks.json");
+function defaultStore() {
+  return { tasks: [], sync_queue: [] };
+}
+function ensureDir() {
+  if (!existsSync2(ZIPHRO_DIR)) {
+    mkdirSync2(ZIPHRO_DIR, { recursive: true, mode: 448 });
+  }
+}
+function writeStoreSecurely(storeDir, storePath, data) {
+  ensureDir();
+  const tmpPath = join2(storeDir, `.store.${process.pid}.${Date.now()}.tmp`);
+  writeFileSync2(tmpPath, JSON.stringify(data, null, 2), {
+    encoding: "utf8",
+    mode: 384
+  });
+  renameSync(tmpPath, storePath);
+}
+function readStore() {
+  ensureDir();
+  if (!existsSync2(STORE_FILE)) return defaultStore();
+  try {
+    return JSON.parse(readFileSync2(STORE_FILE, "utf8"));
+  } catch {
+    return defaultStore();
+  }
+}
+function writeStore(store) {
+  writeStoreSecurely(ZIPHRO_DIR, STORE_FILE, store);
+}
+function getAllTasks() {
+  return readStore().tasks;
+}
+function replaceTasks(tasks) {
+  const store = readStore();
+  store.tasks = tasks;
+  writeStore(store);
+}
+function getTask(id) {
+  const matches = readStore().tasks.filter((t) => t.id === id || t.id.startsWith(id));
+  if (matches.length > 1) {
+    const list = matches.map((t) => `${t.id.substring(0, 8)} ("${t.description}")`).join(", ");
+    throw new Error(`Ambiguous ID "${id}". Matches multiple tasks: ${list}`);
+  }
+  return matches[0];
+}
+function insertTask(task) {
+  const store = readStore();
+  store.tasks.push(task);
+  queueOperation(store, "add", task.id);
+  writeStore(store);
+}
+function updateTask(id, updates) {
+  const store = readStore();
+  const matches = store.tasks.filter((t) => t.id === id || t.id.startsWith(id));
+  if (matches.length === 0) return null;
+  if (matches.length > 1) {
+    const list = matches.map((t) => `${t.id.substring(0, 8)} ("${t.description}")`).join(", ");
+    throw new Error(`Ambiguous ID "${id}". Matches multiple tasks: ${list}`);
+  }
+  const targetId = matches[0].id;
+  const idx = store.tasks.findIndex((t) => t.id === targetId);
+  store.tasks[idx] = {
+    ...store.tasks[idx],
+    ...updates,
+    updated_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  queueOperation(store, "update", store.tasks[idx].id);
+  writeStore(store);
+  return store.tasks[idx];
+}
+function deleteTask(id) {
+  const store = readStore();
+  const matches = store.tasks.filter((t) => t.id === id || t.id.startsWith(id));
+  if (matches.length === 0) return false;
+  if (matches.length > 1) {
+    const list = matches.map((t) => `${t.id.substring(0, 8)} ("${t.description}")`).join(", ");
+    throw new Error(`Ambiguous ID "${id}". Matches multiple tasks: ${list}`);
+  }
+  const targetId = matches[0].id;
+  const idx = store.tasks.findIndex((t) => t.id === targetId);
+  const taskId = store.tasks[idx].id;
+  store.tasks.splice(idx, 1);
+  queueOperation(store, "delete", taskId);
+  writeStore(store);
+  return true;
+}
+function queueOperation(store, operation, taskId) {
+  store.sync_queue.push({
+    id: uuidv4(),
+    operation,
+    task_id: taskId,
+    created_at: (/* @__PURE__ */ new Date()).toISOString()
+  });
+}
+function clearSyncQueue() {
+  const store = readStore();
+  store.sync_queue = [];
+  store.last_synced_at = (/* @__PURE__ */ new Date()).toISOString();
+  writeStore(store);
+}
+function getLastSyncedAt() {
+  return readStore().last_synced_at;
+}
+function filterTasks(filter) {
+  let tasks = getAllTasks();
+  if (filter.status && filter.status !== "all") {
+    tasks = tasks.filter((t) => t.status === filter.status);
+  }
+  if (filter.priority && filter.priority !== "all") {
+    tasks = tasks.filter((t) => t.priority === filter.priority);
+  }
+  if (filter.tags && filter.tags.length > 0) {
+    tasks = tasks.filter(
+      (t) => filter.tags.some((tag) => t.tags.includes(tag))
+    );
+  }
+  return tasks;
+}
+function computeStats() {
+  const tasks = getAllTasks();
+  const now = /* @__PURE__ */ new Date();
+  const pending = tasks.filter((t) => t.status === "pending").length;
+  const in_progress = tasks.filter((t) => t.status === "in_progress").length;
+  const completed = tasks.filter((t) => t.status === "completed").length;
+  const overdue = tasks.filter(
+    (t) => t.due_date && t.status !== "completed" && new Date(t.due_date) < now
+  ).length;
+  return {
+    total: tasks.length,
+    pending,
+    in_progress,
+    completed,
+    high_priority: tasks.filter((t) => t.priority === "high").length,
+    medium_priority: tasks.filter((t) => t.priority === "medium").length,
+    low_priority: tasks.filter((t) => t.priority === "low").length,
+    overdue,
+    completion_rate: tasks.length > 0 ? Math.round(completed / tasks.length * 100) : 0
+  };
+}
+
+// src/commands/add.tsx
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+function AddUI({
+  description,
+  priority,
+  due,
+  tags
+}) {
+  const { exit } = useApp4();
+  const [status, setStatus] = useState6("working");
+  const [syncStatus, setSyncStatus] = useState6("idle");
+  const [syncMessage, setSyncMessage] = useState6("");
+  const [taskId, setTaskId] = useState6("");
+  const [errorMsg, setErrorMsg] = useState6("");
+  useEffect6(() => {
+    async function createTaskAndSync() {
+      try {
+        const auth = requireAuth();
+        const task = {
+          id: uuidv42(),
+          description,
+          priority,
+          status: "pending",
+          tags,
+          due_date: due,
+          created_at: (/* @__PURE__ */ new Date()).toISOString(),
+          updated_at: (/* @__PURE__ */ new Date()).toISOString(),
+          device_id: auth.deviceId,
+          vector_clock: { [auth.deviceId]: 1 }
+        };
+        insertTask(task);
+        setTaskId(task.id.slice(0, 8));
+        setStatus("success");
+        setSyncStatus("syncing");
+        const tasks = getAllTasks();
+        const bundle = {
+          tasks,
+          schema_version: "1",
+          exported_at: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        const plaintext = JSON.stringify(bundle);
+        const blobChecksum = await checksum(plaintext);
+        const syncPassword = auth.password;
+        if (!syncPassword) {
+          setSyncStatus("failed");
+          setSyncMessage('Encryption password required. Run "ziphro sync --password <pwd>".');
+          setTimeout(() => exit(), 3e3);
+          return;
+        }
+        const blob = encrypt(plaintext, syncPassword);
+        const res = await apiUploadSync(
+          auth.apiUrl,
+          auth.accessToken,
+          blob,
+          blobChecksum,
+          auth.deviceId
+        );
+        if (res.success) {
+          clearSyncQueue();
+          setSyncStatus("synced");
+          setTimeout(() => exit(), 2e3);
+        } else if (res.error?.code === "NETWORK_ERROR") {
+          setSyncStatus("offline");
+          setTimeout(() => exit(), 2500);
+        } else {
+          setSyncStatus("failed");
+          setSyncMessage(res.error?.message ?? "Sync failed");
+          setTimeout(() => exit(), 3500);
+        }
+      } catch (e) {
+        setErrorMsg(e.message);
+        setStatus("error");
+        setTimeout(() => exit(e), 2e3);
+      }
+    }
+    createTaskAndSync();
+  }, []);
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx8(MiniHeader, {}),
+    status === "working" && /* @__PURE__ */ jsx8(Spinner, { label: "Creating task\u2026", type: "star", color: BRAND.orange }),
+    status === "success" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx8(StarBurst, { label: `Task created! ID: ${taskId}`, color: BRAND.orange }),
+      /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs8(Box8, { children: [
+          /* @__PURE__ */ jsx8(Text8, { color: BRAND.muted, children: "  Description: " }),
+          /* @__PURE__ */ jsx8(Text8, { color: BRAND.white, bold: true, children: description })
+        ] }),
+        /* @__PURE__ */ jsxs8(Box8, { children: [
+          /* @__PURE__ */ jsx8(Text8, { color: BRAND.muted, children: "  Priority:    " }),
+          /* @__PURE__ */ jsx8(
+            Text8,
+            {
+              color: priority === "high" ? BRAND.error : priority === "medium" ? BRAND.warning : BRAND.success,
+              bold: true,
+              children: priority.toUpperCase()
+            }
+          )
+        ] }),
+        due && /* @__PURE__ */ jsxs8(Box8, { children: [
+          /* @__PURE__ */ jsx8(Text8, { color: BRAND.muted, children: "  Due date:    " }),
+          /* @__PURE__ */ jsx8(Text8, { color: BRAND.orange, children: due })
+        ] }),
+        tags.length > 0 && /* @__PURE__ */ jsxs8(Box8, { children: [
+          /* @__PURE__ */ jsx8(Text8, { color: BRAND.muted, children: "  Tags:        " }),
+          /* @__PURE__ */ jsx8(Text8, { color: BRAND.tag, children: tags.map((t) => `#${t}`).join(" ") })
+        ] }),
+        /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
+          /* @__PURE__ */ jsx8(Text8, { color: BRAND.muted, children: "  Sync:        " }),
+          syncStatus === "syncing" && /* @__PURE__ */ jsx8(Text8, { color: BRAND.orange, children: "Syncing to cloud (E2E encrypted)..." }),
+          syncStatus === "synced" && /* @__PURE__ */ jsx8(Text8, { color: BRAND.success, children: "\u2713 Synced to cloud" }),
+          syncStatus === "offline" && /* @__PURE__ */ jsx8(Text8, { color: BRAND.warning, children: "\u2601 Offline (queued locally)" }),
+          syncStatus === "failed" && /* @__PURE__ */ jsxs8(Text8, { color: BRAND.error, children: [
+            "\u2717 ",
+            syncMessage
+          ] })
+        ] })
+      ] })
+    ] }),
+    status === "error" && /* @__PURE__ */ jsx8(StatusBadge, { type: "error", message: errorMsg })
+  ] });
+}
+function registerAdd(program2) {
+  program2.command("add [description]").alias("-a").description("Create a new task").option("-p, --priority <level>", "Priority: high | medium | low", "medium").option("-d, --due <datetime>", "Due date (ISO 8601 or YYYY-MM-DD)").option("-t, --tags <tags>", "Comma-separated tags").action(async (description, options) => {
+    if (!description) {
+      console.error('\u2717 Description is required. Usage: ziphro add "description"');
+      process.exit(1);
+    }
+    const priority = ["high", "medium", "low"].includes(options.priority) ? options.priority : "medium";
+    const tags = options.tags ? options.tags.split(",").map((t) => t.trim()).filter(Boolean) : [];
+    const { render: render5 } = await import("ink");
+    render5(
+      React7.createElement(AddUI, {
+        description,
+        priority,
+        due: options.due,
+        tags
+      })
+    );
+  });
+}
+
+// src/commands/list.tsx
+import React9, { useEffect as useEffect8, useState as useState8 } from "react";
+import { Box as Box11, Text as Text11, useApp as useApp6, render } from "ink";
+
+// src/components/TaskTable.tsx
+import { Box as Box9, Text as Text9 } from "ink";
+import { Fragment as Fragment2, jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+function priorityBadge(p) {
+  switch (p) {
+    case "high":
+      return { icon: "\u25CF", label: "HIGH", color: BRAND.error };
+    case "medium":
+      return { icon: "\u25B2", label: "MED ", color: BRAND.warning };
+    case "low":
+      return { icon: "\u25C6", label: "LOW ", color: BRAND.success };
+    default:
+      return { icon: "\u25CB", label: "NONE", color: BRAND.muted };
+  }
+}
+function statusBadge(s) {
+  switch (s) {
+    case "completed":
+      return { icon: "\u2713", label: "DONE", color: BRAND.success };
+    case "in_progress":
+      return { icon: "\u27F3", label: "IN PROG", color: BRAND.info };
+    case "pending":
+    default:
+      return { icon: "\u25CB", label: "PENDING", color: BRAND.subtle };
+  }
+}
+function truncate(str, max) {
+  if (!str) return "";
+  if (str.length <= max) return str;
+  return str.slice(0, Math.max(1, max - 1)) + "\u2026";
+}
+function formatDate(iso) {
+  if (!iso) return "\u2014";
+  try {
+    const d = new Date(iso);
+    if (isNaN(d.getTime())) return "\u2014";
+    const m = String(d.getMonth() + 1).padStart(2, "0");
+    const day = String(d.getDate()).padStart(2, "0");
+    return `${m}-${day}`;
+  } catch {
+    return "\u2014";
+  }
+}
+function isOverdue(task) {
+  if (!task.due_date || task.status === "completed") return false;
+  try {
+    const due = new Date(task.due_date).getTime();
+    return !isNaN(due) && due < Date.now();
+  } catch {
+    return false;
+  }
+}
+function getResponsiveColumns(totalCols) {
+  const terminalWidth = totalCols || process.stdout?.columns || 80;
+  const effectiveWidth = Math.max(54, terminalWidth - 4);
+  const colId = { id: "id", header: "ID", width: 11 };
+  const colPriority = { id: "priority", header: "PRIORITY", width: 8 };
+  const colStatus = { id: "status", header: "STATUS", width: 11 };
+  const colDue = { id: "due", header: "DUE", width: 7 };
+  const colTags = { id: "tags", header: "TAGS", width: 12 };
+  if (effectiveWidth >= 92) {
+    const fixedTotal2 = colId.width + colPriority.width + colStatus.width + colDue.width + colTags.width;
+    const borders2 = 6 * 3 + 1;
+    const descWidth2 = Math.max(20, effectiveWidth - (fixedTotal2 + borders2));
+    return [
+      colId,
+      { id: "desc", header: "TASK DESCRIPTION", width: descWidth2 },
+      colPriority,
+      colStatus,
+      colDue,
+      colTags
+    ];
+  }
+  if (effectiveWidth >= 72) {
+    const fixedTotal2 = colId.width + colPriority.width + colStatus.width + colDue.width;
+    const borders2 = 5 * 3 + 1;
+    const descWidth2 = Math.max(18, effectiveWidth - (fixedTotal2 + borders2));
+    return [
+      colId,
+      { id: "desc", header: "TASK DESCRIPTION", width: descWidth2 },
+      colPriority,
+      colStatus,
+      colDue
+    ];
+  }
+  const fixedTotal = colId.width + colPriority.width + colStatus.width;
+  const borders = 4 * 3 + 1;
+  const descWidth = Math.max(14, effectiveWidth - (fixedTotal + borders));
+  return [
+    colId,
+    { id: "desc", header: "TASK DESCRIPTION", width: descWidth },
+    colPriority,
+    colStatus
+  ];
+}
+function TaskTable({
+  tasks,
+  selectedIndex,
+  maxRows = 12,
+  terminalWidth
+}) {
+  const cols = getResponsiveColumns(terminalWidth);
+  const borderColor = BRAND.border;
+  const headerColor = BRAND.white;
+  if (tasks.length === 0) {
+    const width = Math.max(50, cols.reduce((sum, c) => sum + c.width + 3, 1));
+    return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginY: 1, children: [
+      /* @__PURE__ */ jsxs9(Text9, { color: borderColor, children: [
+        "\u250C",
+        "\u2500".repeat(width - 2),
+        "\u2510"
+      ] }),
+      /* @__PURE__ */ jsxs9(Box9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: "\u2502 " }),
+        /* @__PURE__ */ jsx9(Text9, { color: BRAND.muted, children: "\u25CB No tasks found matching the current filter." }),
+        /* @__PURE__ */ jsxs9(Text9, { color: borderColor, children: [
+          " ".repeat(Math.max(0, width - 47)),
+          "\u2502"
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs9(Box9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: "\u2502 " }),
+        /* @__PURE__ */ jsx9(Text9, { color: BRAND.orange, children: "  Press [a] to create a new task or [f] to switch filters." }),
+        /* @__PURE__ */ jsxs9(Text9, { color: borderColor, children: [
+          " ".repeat(Math.max(0, width - 60)),
+          "\u2502"
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs9(Text9, { color: borderColor, children: [
+        "\u2514",
+        "\u2500".repeat(width - 2),
+        "\u2518"
+      ] })
+    ] });
+  }
+  let displayTasks = tasks;
+  let startIndex = 0;
+  if (tasks.length > maxRows) {
+    const curr = selectedIndex ?? 0;
+    const half = Math.floor(maxRows / 2);
+    startIndex = Math.max(0, Math.min(curr - half, tasks.length - maxRows));
+    displayTasks = tasks.slice(startIndex, startIndex + maxRows);
+  }
+  const topBorder = "\u250C" + cols.map((c) => "\u2500".repeat(c.width + 2)).join("\u252C") + "\u2510";
+  const headerSeparator = "\u251C" + cols.map((c) => "\u2500".repeat(c.width + 2)).join("\u253C") + "\u2524";
+  const bottomBorder = "\u2514" + cols.map((c) => "\u2500".repeat(c.width + 2)).join("\u2534") + "\u2518";
+  const colMap = new Map(cols.map((c) => [c.id, c.width]));
+  const hasDue = colMap.has("due");
+  const hasTags = colMap.has("tags");
+  const wId = colMap.get("id") ?? 11;
+  const wDesc = colMap.get("desc") ?? 24;
+  const wPriority = colMap.get("priority") ?? 8;
+  const wStatus = colMap.get("status") ?? 11;
+  const wDue = colMap.get("due") ?? 7;
+  const wTags = colMap.get("tags") ?? 12;
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: topBorder }),
+    /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: "\u2502 " }),
+      /* @__PURE__ */ jsx9(Text9, { color: headerColor, bold: true, children: "ID".padEnd(wId) }),
+      /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+      /* @__PURE__ */ jsx9(Text9, { color: headerColor, bold: true, children: "TASK DESCRIPTION".padEnd(wDesc) }),
+      /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+      /* @__PURE__ */ jsx9(Text9, { color: headerColor, bold: true, children: "PRIORITY".padEnd(wPriority) }),
+      /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+      /* @__PURE__ */ jsx9(Text9, { color: headerColor, bold: true, children: "STATUS".padEnd(wStatus) }),
+      hasDue && /* @__PURE__ */ jsxs9(Fragment2, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+        /* @__PURE__ */ jsx9(Text9, { color: headerColor, bold: true, children: "DUE".padEnd(wDue) })
+      ] }),
+      hasTags && /* @__PURE__ */ jsxs9(Fragment2, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+        /* @__PURE__ */ jsx9(Text9, { color: headerColor, bold: true, children: "TAGS".padEnd(wTags) })
+      ] }),
+      /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502" })
+    ] }),
+    /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: headerSeparator }),
+    displayTasks.map((task, localIdx) => {
+      const actualIdx = startIndex + localIdx;
+      const isSelected = selectedIndex !== void 0 && actualIdx === selectedIndex;
+      const overdue = isOverdue(task);
+      const pBadge = priorityBadge(task.priority);
+      const sBadge = statusBadge(task.status);
+      const cursor = isSelected ? "\u25B8 " : "  ";
+      const idText = task.id.slice(0, 8);
+      const idFormatted = idText.padEnd(wId - 2);
+      const descText = truncate(task.description, wDesc).padEnd(wDesc);
+      const pText = `${pBadge.icon} ${pBadge.label}`.padEnd(wPriority);
+      const sText = `${sBadge.icon} ${sBadge.label}`.padEnd(wStatus);
+      const dueDate = formatDate(task.due_date);
+      const dueText = (overdue ? `! ${dueDate}` : dueDate).padEnd(wDue);
+      const tagContent = task.tags.length > 0 ? truncate(task.tags.map((t) => `#${t}`).join(" "), wTags) : "\u2014";
+      const tagText = tagContent.padEnd(wTags);
+      return /* @__PURE__ */ jsxs9(Box9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: "\u2502 " }),
+        /* @__PURE__ */ jsx9(Text9, { color: isSelected ? BRAND.orange : BRAND.muted, bold: isSelected, children: cursor }),
+        /* @__PURE__ */ jsx9(Text9, { color: isSelected ? BRAND.white : BRAND.muted, bold: isSelected, children: idFormatted }),
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+        /* @__PURE__ */ jsx9(
+          Text9,
+          {
+            color: isSelected ? BRAND.white : task.status === "completed" ? BRAND.muted : overdue ? BRAND.error : "#e5e5ea",
+            bold: isSelected,
+            children: descText
+          }
+        ),
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+        /* @__PURE__ */ jsx9(Text9, { color: pBadge.color, bold: task.priority === "high" || isSelected, children: pText }),
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+        /* @__PURE__ */ jsx9(Text9, { color: sBadge.color, bold: isSelected, children: sText }),
+        hasDue && /* @__PURE__ */ jsxs9(Fragment2, { children: [
+          /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+          /* @__PURE__ */ jsx9(Text9, { color: overdue ? BRAND.error : BRAND.subtle, bold: overdue, children: dueText })
+        ] }),
+        hasTags && /* @__PURE__ */ jsxs9(Fragment2, { children: [
+          /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502 " }),
+          /* @__PURE__ */ jsx9(Text9, { color: BRAND.tag, children: tagText })
+        ] }),
+        /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: " \u2502" })
+      ] }, task.id);
+    }),
+    /* @__PURE__ */ jsx9(Text9, { color: borderColor, children: bottomBorder }),
+    /* @__PURE__ */ jsxs9(Box9, { marginTop: 0, paddingX: 1, justifyContent: "space-between", children: [
+      /* @__PURE__ */ jsxs9(Box9, { gap: 1, children: [
+        /* @__PURE__ */ jsx9(Text9, { color: BRAND.muted, children: "Total:" }),
+        /* @__PURE__ */ jsx9(Text9, { color: BRAND.white, bold: true, children: tasks.length }),
+        /* @__PURE__ */ jsx9(Text9, { color: BRAND.muted, children: "\xB7 Completed:" }),
+        /* @__PURE__ */ jsx9(Text9, { color: BRAND.success, bold: true, children: tasks.filter((t) => t.status === "completed").length }),
+        /* @__PURE__ */ jsx9(Text9, { color: BRAND.muted, children: "\xB7 Overdue:" }),
+        /* @__PURE__ */ jsx9(Text9, { color: tasks.some(isOverdue) ? BRAND.error : BRAND.muted, bold: true, children: tasks.filter(isOverdue).length }),
+        tasks.length > maxRows && /* @__PURE__ */ jsxs9(Text9, { color: BRAND.warning, children: [
+          " ",
+          "(Showing ",
+          startIndex + 1,
+          "\u2013",
+          Math.min(startIndex + maxRows, tasks.length),
+          ")"
+        ] })
+      ] }),
+      selectedIndex !== void 0 && tasks.length > 0 && /* @__PURE__ */ jsxs9(Text9, { color: BRAND.muted, children: [
+        "Item ",
+        selectedIndex + 1,
+        " of ",
+        tasks.length
+      ] })
+    ] })
+  ] });
+}
+function TaskCompact({ tasks, selectedIndex }) {
+  if (tasks.length === 0) {
+    return /* @__PURE__ */ jsx9(Text9, { color: BRAND.muted, children: "No tasks found." });
+  }
+  return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", borderStyle: "round", borderColor: BRAND.border, paddingX: 1, paddingY: 0, children: tasks.map((task, i) => {
+    const overdue = isOverdue(task);
+    const pBadge = priorityBadge(task.priority);
+    const sBadge = statusBadge(task.status);
+    const isSelected = selectedIndex !== void 0 && selectedIndex === i;
+    return /* @__PURE__ */ jsxs9(Box9, { marginBottom: 0, children: [
+      /* @__PURE__ */ jsx9(Text9, { color: isSelected ? BRAND.orange : BRAND.muted, children: isSelected ? "\u25B8 " : "  " }),
+      /* @__PURE__ */ jsxs9(Text9, { color: BRAND.muted, children: [
+        task.id.slice(0, 8),
+        " "
+      ] }),
+      /* @__PURE__ */ jsxs9(Text9, { color: pBadge.color, bold: true, children: [
+        "[",
+        task.priority.slice(0, 1).toUpperCase(),
+        "]",
+        " "
+      ] }),
+      /* @__PURE__ */ jsxs9(
+        Text9,
+        {
+          color: task.status === "completed" ? BRAND.muted : isSelected ? BRAND.white : overdue ? BRAND.error : "#e5e5ea",
+          bold: isSelected,
+          children: [
+            truncate(task.description, 45),
+            " "
+          ]
+        }
+      ),
+      /* @__PURE__ */ jsx9(Text9, { color: sBadge.color, children: sBadge.icon })
+    ] }, task.id);
+  }) });
+}
+
+// src/components/InteractiveDashboard.tsx
+import { useState as useState7, useEffect as useEffect7, useMemo, useCallback } from "react";
+import { Box as Box10, Text as Text10, useApp as useApp5, useInput as useInput3 } from "ink";
+import { v4 as uuidv43 } from "uuid";
+
+// ../packages/crdt/dist/index.js
+function compareClocks(a = {}, b = {}) {
+  const devices = /* @__PURE__ */ new Set([...Object.keys(a), ...Object.keys(b)]);
+  let hasGreater = false;
+  let hasLess = false;
+  for (const device of devices) {
+    const valA = a[device] ?? 0;
+    const valB = b[device] ?? 0;
+    if (valA > valB)
+      hasGreater = true;
+    if (valA < valB)
+      hasLess = true;
+  }
+  if (hasGreater && hasLess)
+    return "concurrent";
+  if (hasGreater)
+    return "greater";
+  if (hasLess)
+    return "less";
+  return "equal";
+}
+function mergeClocks(a = {}, b = {}) {
+  const result = { ...a };
+  for (const [device, val] of Object.entries(b)) {
+    result[device] = Math.max(result[device] ?? 0, val);
+  }
+  return result;
+}
+function mergeSingleTask(local, remote) {
+  const comp = compareClocks(local.vector_clock, remote.vector_clock);
+  const mergedClock = mergeClocks(local.vector_clock, remote.vector_clock);
+  let winner;
+  if (comp === "greater") {
+    winner = local;
+  } else if (comp === "less") {
+    winner = remote;
+  } else {
+    const localTime = new Date(local.updated_at).getTime() || 0;
+    const remoteTime = new Date(remote.updated_at).getTime() || 0;
+    if (localTime > remoteTime) {
+      winner = local;
+    } else if (remoteTime > localTime) {
+      winner = remote;
+    } else {
+      winner = (local.device_id || "") >= (remote.device_id || "") ? local : remote;
+    }
+  }
+  return {
+    ...winner,
+    vector_clock: mergedClock
+  };
+}
+function mergeTasks(localTasks, remoteTasks, _currentDeviceId) {
+  const map = /* @__PURE__ */ new Map();
+  for (const task of localTasks) {
+    if (task && task.id) {
+      map.set(task.id, task);
+    }
+  }
+  for (const remote of remoteTasks) {
+    if (!remote || !remote.id)
+      continue;
+    const existing = map.get(remote.id);
+    if (!existing) {
+      map.set(remote.id, remote);
+    } else {
+      map.set(remote.id, mergeSingleTask(existing, remote));
+    }
+  }
+  const merged = [];
+  for (const task of map.values()) {
+    if (!task.deleted) {
+      merged.push(task);
+    }
+  }
+  return merged.sort((a, b) => {
+    const timeA = new Date(a.updated_at).getTime() || 0;
+    const timeB = new Date(b.updated_at).getTime() || 0;
+    if (timeB !== timeA)
+      return timeB - timeA;
+    return a.id.localeCompare(b.id);
+  });
+}
+
+// src/components/InteractiveDashboard.tsx
+import { Fragment as Fragment3, jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
+function InteractiveDashboard() {
+  const { exit } = useApp5();
+  const [tasks, setTasks] = useState7([]);
+  const [selectedIndex, setSelectedIndex] = useState7(0);
+  const [filterStatus, setFilterStatus] = useState7("all");
+  const [searchQuery, setSearchQuery] = useState7("");
+  const [mode, setMode] = useState7("view");
+  const [addDescription, setAddDescription] = useState7("");
+  const [addPriority, setAddPriority] = useState7("medium");
+  const [deleteTarget, setDeleteTarget] = useState7(null);
+  const [notice, setNotice] = useState7(null);
+  const [syncStatus, setSyncStatus] = useState7("idle");
+  const [syncDetail, setSyncDetail] = useState7("");
+  const [termDimensions, setTermDimensions] = useState7(() => ({
+    columns: process.stdout?.columns || 80,
+    rows: process.stdout?.rows || 24
+  }));
+  useEffect7(() => {
+    const onResize = () => {
+      setTermDimensions({
+        columns: process.stdout?.columns || 80,
+        rows: process.stdout?.rows || 24
+      });
+    };
+    process.stdout?.on("resize", onResize);
+    return () => {
+      process.stdout?.off("resize", onResize);
+    };
+  }, []);
+  const reloadTasks = useCallback(() => {
+    try {
+      const stored = getAllTasks();
+      setTasks(stored);
+    } catch {
+      setTasks([]);
+    }
+  }, []);
+  useEffect7(() => {
+    reloadTasks();
+  }, [reloadTasks]);
+  const flashNotice = (message, color = "cyan", duration = 2500) => {
+    setNotice({ message, color });
+    const timer = setTimeout(() => {
+      setNotice(null);
+    }, duration);
+    return () => clearTimeout(timer);
+  };
+  const filteredTasks = useMemo(() => {
+    let result = [...tasks];
+    if (filterStatus !== "all") {
+      result = result.filter((t) => t.status === filterStatus);
+    }
+    if (searchQuery.trim()) {
+      const q = searchQuery.toLowerCase();
+      result = result.filter(
+        (t) => t.description.toLowerCase().includes(q) || t.tags.some((tag) => tag.toLowerCase().includes(q)) || t.id.toLowerCase().startsWith(q)
+      );
+    }
+    result.sort((a, b) => {
+      const pOrder = { high: 0, medium: 1, low: 2 };
+      const diff = pOrder[a.priority] - pOrder[b.priority];
+      if (diff !== 0) return diff;
+      return new Date(b.updated_at).getTime() - new Date(a.updated_at).getTime();
+    });
+    return result;
+  }, [tasks, filterStatus, searchQuery]);
+  useEffect7(() => {
+    if (filteredTasks.length === 0) {
+      setSelectedIndex(0);
+    } else if (selectedIndex >= filteredTasks.length) {
+      setSelectedIndex(Math.max(0, filteredTasks.length - 1));
+    }
+  }, [filteredTasks.length, selectedIndex]);
+  const triggerSync = async () => {
+    const auth = readAuth();
+    if (!auth || !auth.apiUrl || !auth.accessToken) {
+      flashNotice('Offline mode (no active cloud session). Run "ziphro login"', "yellow");
+      return;
+    }
+    const syncPassword = auth.password;
+    if (!syncPassword) {
+      flashNotice('Sync password missing. Run "ziphro sync --password <pwd>"', "yellow");
+      return;
+    }
+    setSyncStatus("syncing");
+    setSyncDetail("Contacting sync server\u2026");
+    try {
+      let currentRevision = 1;
+      let currentLocalTasks = getAllTasks();
+      const downloadRes = await apiDownloadSync(auth.apiUrl, auth.accessToken);
+      if (downloadRes.success && downloadRes.data?.encrypted_blob) {
+        try {
+          currentRevision = downloadRes.data.revision || 1;
+          const decrypted = await decrypt(downloadRes.data.encrypted_blob, syncPassword, {
+            userId: auth.email,
+            revision: currentRevision,
+            version: 2
+          });
+          const remoteBundle = JSON.parse(decrypted);
+          if (remoteBundle.tasks && Array.isArray(remoteBundle.tasks)) {
+            currentLocalTasks = mergeTasks(currentLocalTasks, remoteBundle.tasks, auth.deviceId);
+            replaceTasks(currentLocalTasks);
+            reloadTasks();
+          }
+        } catch {
+        }
+      }
+      const nextRevision = currentRevision + 1;
+      const bundle = {
+        tasks: currentLocalTasks,
+        schema_version: "2",
+        exported_at: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      const plaintext = JSON.stringify(bundle);
+      const blobChecksum = await checksum(plaintext);
+      const blob = await encrypt(plaintext, syncPassword, {
+        userId: auth.email,
+        revision: nextRevision,
+        version: 2
+      });
+      const uploadRes = await apiUploadSync(
+        auth.apiUrl,
+        auth.accessToken,
+        blob,
+        blobChecksum,
+        auth.deviceId,
+        currentRevision
+      );
+      if (uploadRes.success) {
+        setSyncStatus("synced");
+        setSyncDetail(`Rev ${nextRevision}`);
+        flashNotice(`\u2726 Cloud synced \xB7 Revision ${nextRevision}`, "green");
+      } else {
+        setSyncStatus("error");
+        setSyncDetail(uploadRes.error?.message ?? "Sync failed");
+        flashNotice(`Sync warning: ${uploadRes.error?.message ?? "Upload failed"}`, "yellow");
+      }
+    } catch (err) {
+      setSyncStatus("error");
+      flashNotice(`Sync error: ${err.message}`, "red");
+    }
+  };
+  useInput3((input, key) => {
+    if (mode === "view") {
+      if (key.ctrl && input === "c") {
+        exit();
+        return;
+      }
+      if (input === "q" || key.escape) {
+        exit();
+        return;
+      }
+      if (key.upArrow || input === "k") {
+        if (filteredTasks.length > 0) {
+          setSelectedIndex((prev) => prev > 0 ? prev - 1 : filteredTasks.length - 1);
+        }
+        return;
+      }
+      if (key.downArrow || input === "j") {
+        if (filteredTasks.length > 0) {
+          setSelectedIndex((prev) => prev < filteredTasks.length - 1 ? prev + 1 : 0);
+        }
+        return;
+      }
+      if (input === " " || key.return) {
+        const selected = filteredTasks[selectedIndex];
+        if (!selected) return;
+        const cycle = {
+          pending: "in_progress",
+          in_progress: "completed",
+          completed: "pending"
+        };
+        const nextStatus = cycle[selected.status] || "pending";
+        const updates = {
+          status: nextStatus,
+          completed_at: nextStatus === "completed" ? (/* @__PURE__ */ new Date()).toISOString() : void 0
+        };
+        updateTask(selected.id, updates);
+        reloadTasks();
+        flashNotice(`\u2713 Status updated to ${nextStatus.toUpperCase()}`, "green");
+        return;
+      }
+      if (input === "a") {
+        setAddDescription("");
+        setAddPriority("medium");
+        setMode("add");
+        return;
+      }
+      if (input === "d" || input === "x") {
+        const selected = filteredTasks[selectedIndex];
+        if (selected) {
+          setDeleteTarget(selected);
+          setMode("confirm_delete");
+        }
+        return;
+      }
+      if (input === "p") {
+        const selected = filteredTasks[selectedIndex];
+        if (!selected) return;
+        const pCycle = {
+          low: "medium",
+          medium: "high",
+          high: "low"
+        };
+        const nextP = pCycle[selected.priority] || "medium";
+        updateTask(selected.id, { priority: nextP });
+        reloadTasks();
+        flashNotice(`Priority set to ${nextP.toUpperCase()}`, "yellow");
+        return;
+      }
+      if (input === "f") {
+        const fCycle = {
+          all: "pending",
+          pending: "in_progress",
+          in_progress: "completed",
+          completed: "all"
+        };
+        const nextFilter = fCycle[filterStatus] || "all";
+        setFilterStatus(nextFilter);
+        setSelectedIndex(0);
+        flashNotice(`Filter: ${String(nextFilter).toUpperCase()}`, "cyan");
+        return;
+      }
+      if (input === "/") {
+        setMode("search");
+        return;
+      }
+      if (input === "s") {
+        triggerSync();
+        return;
+      }
+      if (input === "c" && searchQuery) {
+        setSearchQuery("");
+        flashNotice("Search query cleared", "cyan");
+        return;
+      }
+    }
+    if (mode === "add") {
+      if (key.escape) {
+        setMode("view");
+        flashNotice("Add task cancelled", "gray");
+        return;
+      }
+      if (key.tab) {
+        const pCycle = {
+          low: "medium",
+          medium: "high",
+          high: "low"
+        };
+        setAddPriority((prev) => pCycle[prev] || "medium");
+        return;
+      }
+      if (key.return) {
+        if (!addDescription.trim()) {
+          setMode("view");
+          return;
+        }
+        const auth = readAuth();
+        const deviceId = auth?.deviceId || "cli-local";
+        const newTask = {
+          id: uuidv43(),
+          description: addDescription.trim(),
+          priority: addPriority,
+          status: "pending",
+          tags: [],
+          created_at: (/* @__PURE__ */ new Date()).toISOString(),
+          updated_at: (/* @__PURE__ */ new Date()).toISOString(),
+          device_id: deviceId,
+          vector_clock: { [deviceId]: 1 }
+        };
+        insertTask(newTask);
+        reloadTasks();
+        setMode("view");
+        flashNotice(`\u2726 Task created: "${newTask.description.slice(0, 24)}"`, "green");
+        return;
+      }
+      if (key.backspace || key.delete) {
+        setAddDescription((prev) => prev.slice(0, -1));
+        return;
+      }
+      if (input && !key.ctrl && !key.meta) {
+        setAddDescription((prev) => prev + input);
+      }
+    }
+    if (mode === "confirm_delete") {
+      if (input === "y" || input === "Y") {
+        if (deleteTarget) {
+          deleteTask(deleteTarget.id);
+          reloadTasks();
+          flashNotice(`\u2713 Task "${deleteTarget.description.slice(0, 20)}" deleted`, "green");
+        }
+        setDeleteTarget(null);
+        setMode("view");
+        return;
+      }
+      if (input === "n" || input === "N" || key.escape) {
+        setDeleteTarget(null);
+        setMode("view");
+        flashNotice("Deletion cancelled", "gray");
+        return;
+      }
+    }
+    if (mode === "search") {
+      if (key.escape || key.return) {
+        setMode("view");
+        return;
+      }
+      if (key.backspace || key.delete) {
+        setSearchQuery((prev) => prev.slice(0, -1));
+        return;
+      }
+      if (input && !key.ctrl && !key.meta) {
+        setSearchQuery((prev) => prev + input);
+      }
+    }
+  }, { isActive: Boolean(process.stdin?.isTTY && typeof process.stdin?.setRawMode === "function") });
+  const totalCount = tasks.length;
+  const pendingCount = tasks.filter((t) => t.status === "pending").length;
+  const inProgressCount = tasks.filter((t) => t.status === "in_progress").length;
+  const completedCount = tasks.filter((t) => t.status === "completed").length;
+  const overdueCount = tasks.filter(isOverdue).length;
+  const completionRate = totalCount > 0 ? Math.round(completedCount / totalCount * 100) : 0;
+  const authInfo = readAuth();
+  const userAccount = authInfo?.email ? authInfo.email.split("@")[0] : "local";
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsxs10(Box10, { justifyContent: "space-between", alignItems: "center", marginBottom: 0, children: [
+      /* @__PURE__ */ jsx10(MiniHeader, {}),
+      /* @__PURE__ */ jsxs10(Box10, { gap: 1, children: [
+        /* @__PURE__ */ jsxs10(Box10, { borderStyle: "round", borderColor: "#3a3a3c", paddingX: 1, children: [
+          /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", bold: true, children: "E2E " }),
+          /* @__PURE__ */ jsx10(Text10, { color: "#f5f4ef", children: "AES-256-GCM" })
+        ] }),
+        /* @__PURE__ */ jsxs10(
+          Box10,
+          {
+            borderStyle: "round",
+            borderColor: syncStatus === "synced" ? "#22c55e" : syncStatus === "error" ? "#ef4444" : "#3a3a3c",
+            paddingX: 1,
+            children: [
+              /* @__PURE__ */ jsx10(
+                Text10,
+                {
+                  color: syncStatus === "synced" ? "#22c55e" : syncStatus === "syncing" ? "#06b6d4" : syncStatus === "error" ? "#ef4444" : "#73726c",
+                  bold: true,
+                  children: syncStatus === "syncing" ? "\u27F3 Syncing" : syncStatus === "synced" ? "\u2713 Synced" : syncStatus === "error" ? "\u26A0 Error" : "\u25CF Ready"
+                }
+              ),
+              syncDetail && /* @__PURE__ */ jsxs10(Text10, { color: "#73726c", children: [
+                " (",
+                syncDetail,
+                ")"
+              ] })
+            ]
+          }
+        )
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs10(
+      Box10,
+      {
+        borderStyle: "round",
+        borderColor: "#3a3a3c",
+        paddingX: 1,
+        paddingY: 0,
+        marginBottom: 1,
+        justifyContent: "space-around",
+        children: [
+          /* @__PURE__ */ jsxs10(Box10, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: "USER: " }),
+            /* @__PURE__ */ jsx10(Text10, { color: "#f5f4ef", bold: true, children: userAccount })
+          ] }),
+          /* @__PURE__ */ jsx10(Text10, { color: "#3a3a3c", children: "\u2502" }),
+          /* @__PURE__ */ jsxs10(Box10, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: "TOTAL: " }),
+            /* @__PURE__ */ jsx10(Text10, { color: "#f5f4ef", bold: true, children: totalCount })
+          ] }),
+          /* @__PURE__ */ jsx10(Text10, { color: "#3a3a3c", children: "\u2502" }),
+          /* @__PURE__ */ jsxs10(Box10, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: "PENDING: " }),
+            /* @__PURE__ */ jsx10(Text10, { color: "#94a3b8", bold: true, children: pendingCount })
+          ] }),
+          /* @__PURE__ */ jsx10(Text10, { color: "#3a3a3c", children: "\u2502" }),
+          /* @__PURE__ */ jsxs10(Box10, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: "ACTIVE: " }),
+            /* @__PURE__ */ jsx10(Text10, { color: "#06b6d4", bold: true, children: inProgressCount })
+          ] }),
+          /* @__PURE__ */ jsx10(Text10, { color: "#3a3a3c", children: "\u2502" }),
+          /* @__PURE__ */ jsxs10(Box10, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: "DONE: " }),
+            /* @__PURE__ */ jsxs10(Text10, { color: "#22c55e", bold: true, children: [
+              completedCount,
+              " (",
+              completionRate,
+              "%)"
+            ] })
+          ] }),
+          /* @__PURE__ */ jsx10(Text10, { color: "#3a3a3c", children: "\u2502" }),
+          /* @__PURE__ */ jsxs10(Box10, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: "OVERDUE: " }),
+            /* @__PURE__ */ jsx10(Text10, { color: overdueCount > 0 ? "#ef4444" : "#73726c", bold: true, children: overdueCount })
+          ] })
+        ]
+      }
+    ),
+    /* @__PURE__ */ jsxs10(Box10, { justifyContent: "space-between", marginBottom: 0, paddingX: 1, children: [
+      /* @__PURE__ */ jsxs10(Box10, { gap: 1, children: [
+        /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: "Filter: " }),
+        /* @__PURE__ */ jsxs10(Text10, { color: filterStatus === "all" ? "#f54e00" : "#06b6d4", bold: true, children: [
+          "[",
+          String(filterStatus).toUpperCase(),
+          "]"
+        ] }),
+        searchQuery && /* @__PURE__ */ jsxs10(Fragment3, { children: [
+          /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: " | Search: " }),
+          /* @__PURE__ */ jsxs10(Text10, { color: "#eab308", children: [
+            '"',
+            searchQuery,
+            '"'
+          ] }),
+          /* @__PURE__ */ jsx10(Text10, { color: "#73726c", children: " (press 'c' to clear)" })
+        ] })
+      ] }),
+      notice && /* @__PURE__ */ jsx10(Box10, { children: /* @__PURE__ */ jsx10(Text10, { color: notice.color, bold: true, children: notice.message }) })
+    ] }),
+    mode === "add" && /* @__PURE__ */ jsxs10(
+      Box10,
+      {
+        flexDirection: "column",
+        borderStyle: "round",
+        borderColor: BRAND.orange,
+        paddingX: 2,
+        paddingY: 1,
+        marginBottom: 1,
+        children: [
+          /* @__PURE__ */ jsx10(Text10, { color: BRAND.orange, bold: true, children: "\u2726 New Task Entry" }),
+          /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, children: [
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.muted, children: "Description: " }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.white, bold: true, children: addDescription }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.orange, children: "\u2588" })
+          ] }),
+          /* @__PURE__ */ jsxs10(Box10, { marginTop: 0, children: [
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.muted, children: "Priority:    " }),
+            /* @__PURE__ */ jsxs10(
+              Text10,
+              {
+                color: addPriority === "high" ? BRAND.error : addPriority === "medium" ? BRAND.warning : BRAND.success,
+                bold: true,
+                children: [
+                  "[",
+                  addPriority.toUpperCase(),
+                  "]"
+                ]
+              }
+            ),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.muted, children: " (Press [Tab] to cycle priority)" })
+          ] }),
+          /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, children: [
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.muted, children: "Press " }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.success, bold: true, children: "[Enter]" }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.muted, children: " to save \xB7 " }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.error, bold: true, children: "[Esc]" }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.muted, children: " to cancel" })
+          ] })
+        ]
+      }
+    ),
+    mode === "confirm_delete" && deleteTarget && /* @__PURE__ */ jsxs10(
+      Box10,
+      {
+        flexDirection: "column",
+        borderStyle: "round",
+        borderColor: BRAND.error,
+        paddingX: 2,
+        paddingY: 1,
+        marginBottom: 1,
+        children: [
+          /* @__PURE__ */ jsx10(Text10, { color: BRAND.error, bold: true, children: "\u26A0 Confirm Delete" }),
+          /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, children: [
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.muted, children: "Are you sure you want to delete task: " }),
+            /* @__PURE__ */ jsxs10(Text10, { color: BRAND.white, bold: true, children: [
+              '"',
+              deleteTarget.description,
+              '"'
+            ] }),
+            /* @__PURE__ */ jsxs10(Text10, { color: BRAND.muted, children: [
+              " (",
+              deleteTarget.id.slice(0, 8),
+              ")?"
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, children: [
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.success, bold: true, children: "[y]" }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.white, children: " Yes, delete \xB7 " }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.error, bold: true, children: "[n / Esc]" }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.white, children: " Cancel" })
+          ] })
+        ]
+      }
+    ),
+    mode === "search" && /* @__PURE__ */ jsxs10(
+      Box10,
+      {
+        flexDirection: "column",
+        borderStyle: "round",
+        borderColor: BRAND.warning,
+        paddingX: 2,
+        paddingY: 0,
+        marginBottom: 1,
+        children: [
+          /* @__PURE__ */ jsxs10(Box10, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.warning, bold: true, children: "Search Tasks: " }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.white, children: searchQuery }),
+            /* @__PURE__ */ jsx10(Text10, { color: BRAND.warning, children: "\u2588" })
+          ] }),
+          /* @__PURE__ */ jsx10(Text10, { color: BRAND.muted, children: "Press [Enter] or [Esc] to commit filter" })
+        ]
+      }
+    ),
+    /* @__PURE__ */ jsx10(
+      TaskTable,
+      {
+        tasks: filteredTasks,
+        selectedIndex: mode === "view" ? selectedIndex : void 0,
+        terminalWidth: termDimensions.columns,
+        maxRows: Math.max(5, termDimensions.rows - 18)
+      }
+    ),
+    /* @__PURE__ */ jsxs10(
+      Box10,
+      {
+        marginTop: 1,
+        borderStyle: "round",
+        borderColor: "#3a3a3c",
+        paddingX: 1,
+        justifyContent: "space-between",
+        children: [
+          /* @__PURE__ */ jsxs10(Text10, { color: "#73726c", children: [
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[\u2191\u2193/jk]" }),
+            " Move \xB7",
+            " ",
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[Space]" }),
+            " Toggle \xB7",
+            " ",
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[a]" }),
+            " Add \xB7",
+            " ",
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[d]" }),
+            " Del \xB7",
+            " ",
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[p]" }),
+            " Priority \xB7",
+            " ",
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[f]" }),
+            " Filter \xB7",
+            " ",
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[/]" }),
+            " Search \xB7",
+            " ",
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[s]" }),
+            " Sync \xB7",
+            " ",
+            /* @__PURE__ */ jsx10(Text10, { color: "#f54e00", children: "[q]" }),
+            " Quit"
+          ] }),
+          /* @__PURE__ */ jsxs10(Text10, { color: "#73726c", children: [
+            "Ziphro v",
+            CLI_VERSION
+          ] })
+        ]
+      }
+    )
+  ] });
+}
+
+// src/commands/list.tsx
+import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
+function ListUI({ filter, format }) {
+  const { exit } = useApp6();
+  const [tasks] = useState8(() => {
+    const results = filterTasks(filter);
+    results.sort((a, b) => {
+      const pOrder = { high: 0, medium: 1, low: 2 };
+      const pDiff = pOrder[a.priority] - pOrder[b.priority];
+      if (pDiff !== 0) return pDiff;
+      return new Date(b.updated_at).getTime() - new Date(a.updated_at).getTime();
+    });
+    return results;
+  });
+  useEffect8(() => {
+    if (format === "json") {
+      console.log(JSON.stringify(tasks, null, 2));
+      exit();
+    } else {
+      const t = setTimeout(() => exit(), 50);
+      return () => clearTimeout(t);
+    }
+  }, [exit, format, tasks]);
+  if (format === "json") {
+    return /* @__PURE__ */ jsx11(Box11, {});
+  }
+  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx11(MiniHeader, {}),
+    (filter.status || filter.priority || filter.tags?.length) && /* @__PURE__ */ jsxs11(Box11, { marginBottom: 1, gap: 1, children: [
+      /* @__PURE__ */ jsx11(Text11, { color: BRAND.muted, children: "Active Filters:" }),
+      filter.status && /* @__PURE__ */ jsxs11(Text11, { color: BRAND.orange, bold: true, children: [
+        "status=",
+        filter.status
+      ] }),
+      filter.priority && /* @__PURE__ */ jsxs11(
+        Text11,
+        {
+          color: filter.priority === "high" ? BRAND.error : filter.priority === "medium" ? BRAND.warning : BRAND.success,
+          bold: true,
+          children: [
+            "priority=",
+            filter.priority
+          ]
+        }
+      ),
+      filter.tags?.map((t) => /* @__PURE__ */ jsxs11(Text11, { color: BRAND.tag, children: [
+        "#",
+        t
+      ] }, t))
+    ] }),
+    format === "table" && /* @__PURE__ */ jsx11(TaskTable, { tasks, maxRows: 100 }),
+    format === "compact" && /* @__PURE__ */ jsx11(TaskCompact, { tasks })
+  ] });
+}
+function registerList(program2) {
+  program2.command("list").alias("-l").description("List tasks with optional filters or interactive mode").option("-s, --status <status>", "Filter by status: pending | in_progress | completed | all", "all").option("-p, --priority <priority>", "Filter by priority: high | medium | low | all", "all").option("-t, --tags <tags>", "Filter by comma-separated tags").option("-f, --format <format>", "Output format: table | compact | json", "table").option("-i, --interactive", "Open in interactive TUI mode with keyboard navigation", false).action(async (options) => {
+    if (options.interactive) {
+      render(React9.createElement(InteractiveDashboard));
+      return;
+    }
+    const filter = {};
+    if (options.status && options.status !== "all") {
+      filter.status = options.status;
+    }
+    if (options.priority && options.priority !== "all") {
+      filter.priority = options.priority;
+    }
+    if (options.tags) {
+      filter.tags = options.tags.split(",").map((t) => t.trim());
+    }
+    const format = ["table", "compact", "json"].includes(options.format || "table") ? options.format : "table";
+    render(React9.createElement(ListUI, { filter, format }));
+  });
+}
+
+// src/commands/done.tsx
+import React10, { useEffect as useEffect9, useState as useState9 } from "react";
+import { Box as Box12, Text as Text12, useApp as useApp7 } from "ink";
+import { jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
+function DoneUI({ id, note }) {
+  const { exit } = useApp7();
+  const [status, setStatus] = useState9("working");
+  const [syncStatus, setSyncStatus] = useState9("idle");
+  const [syncMessage, setSyncMessage] = useState9("");
+  const [message, setMessage] = useState9("");
+  const [description, setDescription] = useState9("");
+  useEffect9(() => {
+    async function completeTaskAndSync() {
+      try {
+        const auth = requireAuth();
+        const task = getTask(id);
+        if (!task) {
+          setMessage(`No task found with ID starting with "${id}"`);
+          setStatus("error");
+          setTimeout(() => exit(new Error("Task not found")), 1200);
+          return;
+        }
+        if (task.status === "completed") {
+          setMessage(`Task is already marked as completed.`);
+          setStatus("error");
+          setTimeout(() => exit(), 1200);
+          return;
+        }
+        const updated = updateTask(task.id, {
+          status: "completed",
+          completed_at: (/* @__PURE__ */ new Date()).toISOString(),
+          completion_note: note
+        });
+        if (updated) {
+          setDescription(task.description);
+          setMessage(`Task marked complete!`);
+          setStatus("success");
+          setSyncStatus("syncing");
+          const tasks = getAllTasks();
+          const bundle = {
+            tasks,
+            schema_version: "1",
+            exported_at: (/* @__PURE__ */ new Date()).toISOString()
+          };
+          const plaintext = JSON.stringify(bundle);
+          const blobChecksum = await checksum(plaintext);
+          const syncPassword = auth.password;
+          if (!syncPassword) {
+            setSyncStatus("failed");
+            setSyncMessage('Encryption password required. Run "ziphro sync --password <pwd>".');
+            setTimeout(() => exit(), 3e3);
+            return;
+          }
+          const blob = encrypt(plaintext, syncPassword);
+          const res = await apiUploadSync(
+            auth.apiUrl,
+            auth.accessToken,
+            blob,
+            blobChecksum,
+            auth.deviceId
+          );
+          if (res.success) {
+            clearSyncQueue();
+            setSyncStatus("synced");
+            setTimeout(() => exit(), 2e3);
+          } else if (res.error?.code === "NETWORK_ERROR") {
+            setSyncStatus("offline");
+            setTimeout(() => exit(), 2500);
+          } else {
+            setSyncStatus("failed");
+            setSyncMessage(res.error?.message ?? "Sync failed");
+            setTimeout(() => exit(), 3500);
+          }
+        }
+      } catch (e) {
+        setMessage(e.message);
+        setStatus("error");
+        setTimeout(() => exit(e), 2e3);
+      }
+    }
+    completeTaskAndSync();
+  }, []);
+  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx12(MiniHeader, {}),
+    status === "working" && /* @__PURE__ */ jsx12(Spinner, { label: "Updating task\u2026", type: "star", color: BRAND.orange }),
+    status === "success" && /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx12(StarBurst, { label: message, color: BRAND.success }),
+      /* @__PURE__ */ jsxs12(Box12, { marginTop: 1, flexDirection: "column", children: [
+        description && /* @__PURE__ */ jsxs12(Box12, { children: [
+          /* @__PURE__ */ jsx12(Text12, { color: BRAND.muted, children: "  Task: " }),
+          /* @__PURE__ */ jsx12(Text12, { color: BRAND.white, bold: true, children: description })
+        ] }),
+        note && /* @__PURE__ */ jsxs12(Box12, { children: [
+          /* @__PURE__ */ jsx12(Text12, { color: BRAND.muted, children: "  Note: " }),
+          /* @__PURE__ */ jsx12(Text12, { color: BRAND.orange, children: note })
+        ] }),
+        /* @__PURE__ */ jsxs12(Box12, { marginTop: 1, children: [
+          /* @__PURE__ */ jsx12(Text12, { color: BRAND.muted, children: "  Sync: " }),
+          syncStatus === "syncing" && /* @__PURE__ */ jsx12(Text12, { color: BRAND.orange, children: "Syncing to cloud (E2E encrypted)..." }),
+          syncStatus === "synced" && /* @__PURE__ */ jsx12(Text12, { color: BRAND.success, children: "\u2713 Synced to cloud" }),
+          syncStatus === "offline" && /* @__PURE__ */ jsx12(Text12, { color: BRAND.warning, children: "\u2601 Offline (queued locally)" }),
+          syncStatus === "failed" && /* @__PURE__ */ jsxs12(Text12, { color: BRAND.error, children: [
+            "\u2717 ",
+            syncMessage
+          ] })
+        ] })
+      ] })
+    ] }),
+    status === "error" && /* @__PURE__ */ jsx12(Box12, { marginTop: 1, children: /* @__PURE__ */ jsx12(StatusBadge, { type: "error", message }) })
+  ] });
+}
+function registerDone(program2) {
+  program2.command("done <id>").alias("-d").description("Mark a task as complete").option("-n, --note <note>", "Completion note").action(async (id, options) => {
+    const { render: render5 } = await import("ink");
+    render5(React10.createElement(DoneUI, { id, note: options.note }));
+  });
+}
+
+// src/commands/remove.tsx
+import React11, { useEffect as useEffect10, useState as useState10 } from "react";
+import { Box as Box13, Text as Text13, useApp as useApp8, useInput as useInput4 } from "ink";
+import { jsx as jsx13, jsxs as jsxs13 } from "react/jsx-runtime";
+function RemoveUI({ id, force }) {
+  const { exit } = useApp8();
+  const [stage, setStage] = useState10("confirm");
+  const [syncStatus, setSyncStatus] = useState10("idle");
+  const [syncMessage, setSyncMessage] = useState10("");
+  const [message, setMessage] = useState10("");
+  const task = getTask(id);
+  const performDeleteAndSync = async () => {
+    try {
+      const auth = requireAuth();
+      setStage("deleting");
+      const deleted = deleteTask(task.id);
+      if (deleted) {
+        setMessage(`Task removed: ${task.description}`);
+        setSyncStatus("syncing");
+        const tasks = getAllTasks();
+        const bundle = {
+          tasks,
+          schema_version: "1",
+          exported_at: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        const plaintext = JSON.stringify(bundle);
+        const blobChecksum = await checksum(plaintext);
+        const syncPassword = auth.password;
+        if (!syncPassword) {
+          setSyncStatus("failed");
+          setSyncMessage('Encryption password required. Run "ziphro sync --password <pwd>".');
+          setStage("success");
+          setTimeout(() => exit(), 3e3);
+          return;
+        }
+        const blob = encrypt(plaintext, syncPassword);
+        const res = await apiUploadSync(
+          auth.apiUrl,
+          auth.accessToken,
+          blob,
+          blobChecksum,
+          auth.deviceId
+        );
+        setStage("success");
+        if (res.success) {
+          clearSyncQueue();
+          setSyncStatus("synced");
+          setTimeout(() => exit(), 2e3);
+        } else if (res.error?.code === "NETWORK_ERROR") {
+          setSyncStatus("offline");
+          setTimeout(() => exit(), 2500);
+        } else {
+          setSyncStatus("failed");
+          setSyncMessage(res.error?.message ?? "Sync failed");
+          setTimeout(() => exit(), 3500);
+        }
+      } else {
+        setMessage("Failed to delete task.");
+        setStage("error");
+        setTimeout(() => exit(new Error("Delete failed")), 1200);
+      }
+    } catch (e) {
+      setMessage(e.message);
+      setStage("error");
+      setTimeout(() => exit(e), 2e3);
+    }
+  };
+  useEffect10(() => {
+    try {
+      requireAuth();
+    } catch (e) {
+      setMessage(e.message);
+      setStage("error");
+      setTimeout(() => exit(e), 2e3);
+      return;
+    }
+    if (!task) {
+      setMessage(`No task found with ID starting with "${id}"`);
+      setStage("error");
+      setTimeout(() => exit(new Error("Task not found")), 1200);
+      return;
+    }
+    if (force) {
+      performDeleteAndSync();
+    }
+  }, []);
+  useInput4((input) => {
+    if (stage !== "confirm" || !task) return;
+    if (input.toLowerCase() === "y") {
+      performDeleteAndSync();
+    } else if (input.toLowerCase() === "n" || input === "") {
+      setStage("cancelled");
+      setTimeout(() => exit(), 800);
+    }
+  });
+  return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx13(MiniHeader, {}),
+    !task && stage !== "error" && /* @__PURE__ */ jsx13(Box13, { marginTop: 1, children: /* @__PURE__ */ jsx13(StatusBadge, { type: "error", message: `No task found with ID "${id}"` }) }),
+    task && stage === "confirm" && /* @__PURE__ */ jsxs13(
+      Box13,
+      {
+        flexDirection: "column",
+        borderStyle: "round",
+        borderColor: BRAND.border,
+        paddingX: 2,
+        paddingY: 1,
+        marginTop: 1,
+        children: [
+          /* @__PURE__ */ jsxs13(Box13, { marginBottom: 1, children: [
+            /* @__PURE__ */ jsx13(Text13, { color: BRAND.warning, bold: true, children: "\u26A0 " }),
+            /* @__PURE__ */ jsx13(Text13, { color: BRAND.white, bold: true, children: "Delete this task?" })
+          ] }),
+          /* @__PURE__ */ jsxs13(Box13, { marginBottom: 1, paddingX: 1, flexDirection: "column", children: [
+            /* @__PURE__ */ jsxs13(Box13, { children: [
+              /* @__PURE__ */ jsx13(Text13, { color: BRAND.muted, children: "ID:          " }),
+              /* @__PURE__ */ jsx13(Text13, { color: BRAND.orange, bold: true, children: task.id.slice(0, 8) })
+            ] }),
+            /* @__PURE__ */ jsxs13(Box13, { children: [
+              /* @__PURE__ */ jsx13(Text13, { color: BRAND.muted, children: "Description: " }),
+              /* @__PURE__ */ jsx13(Text13, { color: BRAND.white, children: task.description })
+            ] }),
+            /* @__PURE__ */ jsxs13(Box13, { children: [
+              /* @__PURE__ */ jsx13(Text13, { color: BRAND.muted, children: "Status:      " }),
+              /* @__PURE__ */ jsx13(Text13, { color: task.status === "completed" ? BRAND.success : BRAND.warning, children: task.status })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxs13(Box13, { children: [
+            /* @__PURE__ */ jsx13(Text13, { color: BRAND.muted, children: "Type " }),
+            /* @__PURE__ */ jsx13(Text13, { color: BRAND.success, bold: true, children: "[y]" }),
+            /* @__PURE__ */ jsx13(Text13, { color: BRAND.muted, children: " to confirm or " }),
+            /* @__PURE__ */ jsx13(Text13, { color: BRAND.error, bold: true, children: "[n / Esc]" }),
+            /* @__PURE__ */ jsx13(Text13, { color: BRAND.muted, children: " to cancel" })
+          ] })
+        ]
+      }
+    ),
+    stage === "deleting" && /* @__PURE__ */ jsx13(Box13, { marginTop: 1, children: /* @__PURE__ */ jsx13(Spinner, { label: "Removing task\u2026", type: "star", color: BRAND.orange }) }),
+    stage === "success" && /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx13(StarBurst, { label: message, color: BRAND.orange }),
+      /* @__PURE__ */ jsx13(Box13, { marginTop: 1, flexDirection: "column", children: /* @__PURE__ */ jsxs13(Box13, { children: [
+        /* @__PURE__ */ jsx13(Text13, { color: BRAND.muted, children: "  Sync: " }),
+        syncStatus === "syncing" && /* @__PURE__ */ jsx13(Text13, { color: BRAND.orange, children: "Syncing to cloud (E2E encrypted)..." }),
+        syncStatus === "synced" && /* @__PURE__ */ jsx13(Text13, { color: BRAND.success, children: "\u2713 Synced to cloud" }),
+        syncStatus === "offline" && /* @__PURE__ */ jsx13(Text13, { color: BRAND.warning, children: "\u2601 Offline (queued locally)" }),
+        syncStatus === "failed" && /* @__PURE__ */ jsxs13(Text13, { color: BRAND.error, children: [
+          "\u2717 ",
+          syncMessage
+        ] })
+      ] }) })
+    ] }),
+    stage === "error" && /* @__PURE__ */ jsx13(StatusBadge, { type: "error", message }),
+    stage === "cancelled" && /* @__PURE__ */ jsx13(StatusBadge, { type: "info", message: "Deletion cancelled." })
+  ] });
+}
+function registerRemove(program2) {
+  program2.command("remove <id>").alias("-r").description("Delete a task").option("--force", "Skip confirmation prompt", false).action(async (id, options) => {
+    const { render: render5 } = await import("ink");
+    render5(React11.createElement(RemoveUI, { id, force: options.force }));
+  });
+}
+
+// src/commands/edit.tsx
+import React12, { useState as useState11, useEffect as useEffect11 } from "react";
+import { Box as Box14, Text as Text14, useApp as useApp9 } from "ink";
+import { jsx as jsx14, jsxs as jsxs14 } from "react/jsx-runtime";
+function EditUI({ id, updates }) {
+  const { exit } = useApp9();
+  const [status, setStatus] = useState11("working");
+  const [syncStatus, setSyncStatus] = useState11("idle");
+  const [syncMessage, setSyncMessage] = useState11("");
+  const [message, setMessage] = useState11("");
+  const [changes, setChanges] = useState11([]);
+  useEffect11(() => {
+    async function editTaskAndSync() {
+      try {
+        const auth = requireAuth();
+        const task = getTask(id);
+        if (!task) {
+          setMessage(`No task found with ID starting with "${id}"`);
+          setStatus("error");
+          setTimeout(() => exit(new Error("Task not found")), 1200);
+          return;
+        }
+        const taskUpdates = {};
+        const changesLog = [];
+        if (updates.description) {
+          taskUpdates.description = updates.description;
+          changesLog.push(`description \u2192 "${updates.description}"`);
+        }
+        if (updates.priority) {
+          taskUpdates.priority = updates.priority;
+          changesLog.push(`priority \u2192 ${updates.priority}`);
+        }
+        if (updates.status) {
+          taskUpdates.status = updates.status;
+          if (updates.status === "completed") {
+            taskUpdates.completed_at = (/* @__PURE__ */ new Date()).toISOString();
+          }
+          changesLog.push(`status \u2192 ${updates.status}`);
+        }
+        if (updates.due) {
+          taskUpdates.due_date = updates.due;
+          changesLog.push(`due date \u2192 ${updates.due}`);
+        }
+        if (updates.tags) {
+          taskUpdates.tags = updates.tags.split(",").map((t) => t.trim());
+          changesLog.push(`tags \u2192 [${taskUpdates.tags.join(", ")}]`);
+        }
+        if (updates.note) {
+          taskUpdates.completion_note = updates.note;
+          changesLog.push(`note \u2192 "${updates.note}"`);
+        }
+        if (changesLog.length === 0) {
+          setMessage("No changes specified. Use options like --description, --priority, etc.");
+          setStatus("error");
+          setTimeout(() => exit(), 1200);
+          return;
+        }
+        const updated = updateTask(task.id, taskUpdates);
+        if (updated) {
+          setChanges(changesLog);
+          setMessage(`Task ${task.id.slice(0, 8)} updated!`);
+          setStatus("success");
+          setSyncStatus("syncing");
+          const tasks = getAllTasks();
+          const bundle = {
+            tasks,
+            schema_version: "1",
+            exported_at: (/* @__PURE__ */ new Date()).toISOString()
+          };
+          const plaintext = JSON.stringify(bundle);
+          const blobChecksum = await checksum(plaintext);
+          const syncPassword = auth.password;
+          if (!syncPassword) {
+            setSyncStatus("failed");
+            setSyncMessage('Encryption password required. Run "ziphro sync --password <pwd>".');
+            setTimeout(() => exit(), 3e3);
+            return;
+          }
+          const blob = encrypt(plaintext, syncPassword);
+          const res = await apiUploadSync(
+            auth.apiUrl,
+            auth.accessToken,
+            blob,
+            blobChecksum,
+            auth.deviceId
+          );
+          if (res.success) {
+            clearSyncQueue();
+            setSyncStatus("synced");
+            setTimeout(() => exit(), 2e3);
+          } else if (res.error?.code === "NETWORK_ERROR") {
+            setSyncStatus("offline");
+            setTimeout(() => exit(), 2500);
+          } else {
+            setSyncStatus("failed");
+            setSyncMessage(res.error?.message ?? "Sync failed");
+            setTimeout(() => exit(), 3500);
+          }
+        }
+      } catch (e) {
+        setMessage(e.message);
+        setStatus("error");
+        setTimeout(() => exit(e), 2e3);
+      }
+    }
+    editTaskAndSync();
+  }, []);
+  return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx14(MiniHeader, {}),
+    status === "working" && /* @__PURE__ */ jsx14(Spinner, { label: "Updating task\u2026", type: "star", color: BRAND.orange }),
+    status === "success" && /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsx14(StarBurst, { label: message, color: BRAND.orange }),
+      /* @__PURE__ */ jsxs14(Box14, { marginTop: 1, flexDirection: "column", children: [
+        changes.map((c) => /* @__PURE__ */ jsxs14(Box14, { marginTop: 0, children: [
+          /* @__PURE__ */ jsx14(Text14, { color: BRAND.muted, children: "  \u21B3 " }),
+          /* @__PURE__ */ jsx14(Text14, { color: BRAND.white, children: c })
+        ] }, c)),
+        /* @__PURE__ */ jsxs14(Box14, { marginTop: 1, children: [
+          /* @__PURE__ */ jsx14(Text14, { color: BRAND.muted, children: "  Sync: " }),
+          syncStatus === "syncing" && /* @__PURE__ */ jsx14(Text14, { color: BRAND.orange, children: "Syncing to cloud (E2E encrypted)..." }),
+          syncStatus === "synced" && /* @__PURE__ */ jsx14(Text14, { color: BRAND.success, children: "\u2713 Synced to cloud" }),
+          syncStatus === "offline" && /* @__PURE__ */ jsx14(Text14, { color: BRAND.warning, children: "\u2601 Offline (queued locally)" }),
+          syncStatus === "failed" && /* @__PURE__ */ jsxs14(Text14, { color: BRAND.error, children: [
+            "\u2717 ",
+            syncMessage
+          ] })
+        ] })
+      ] })
+    ] }),
+    status === "error" && /* @__PURE__ */ jsx14(Box14, { marginTop: 1, children: /* @__PURE__ */ jsx14(StatusBadge, { type: "error", message }) })
+  ] });
+}
+function registerEdit(program2) {
+  program2.command("edit <id>").alias("-e").description("Update one or more fields of a task").option("--description <text>", "New description").option("--priority <level>", "New priority: high | medium | low").option("--status <status>", "New status: pending | in_progress | completed").option("--due <datetime>", "New due date").option("--tags <tags>", "New comma-separated tags").option("--note <note>", "Add a completion note").action(async (id, options) => {
+    const { render: render5 } = await import("ink");
+    render5(React12.createElement(EditUI, { id, updates: options }));
+  });
+}
+
+// src/commands/stats.tsx
+import React13, { useEffect as useEffect12, useState as useState12 } from "react";
+import { Box as Box15, Text as Text15, useApp as useApp10, useInput as useInput5, render as render2 } from "ink";
+import { jsx as jsx15, jsxs as jsxs15 } from "react/jsx-runtime";
+function ProgressBar({
+  value,
+  max,
+  width = 24,
+  color = "cyan",
+  showPercent = false
+}) {
+  const percent = max > 0 ? Math.round(value / max * 100) : 0;
+  const filled = max > 0 ? Math.min(width, Math.round(value / max * width)) : 0;
+  const empty = Math.max(0, width - filled);
+  return /* @__PURE__ */ jsxs15(Box15, { children: [
+    /* @__PURE__ */ jsx15(Text15, { color: "gray", children: "\u2562" }),
+    /* @__PURE__ */ jsx15(Text15, { color, children: "\u2588".repeat(filled) }),
+    /* @__PURE__ */ jsx15(Text15, { color: "gray", children: "\u2591".repeat(empty) }),
+    /* @__PURE__ */ jsx15(Text15, { color: "gray", children: "\u255F" }),
+    showPercent && /* @__PURE__ */ jsxs15(Text15, { color, bold: true, children: [
+      " ",
+      String(percent).padStart(3),
+      "%"
+    ] })
+  ] });
+}
+function StatCard({
+  title,
+  value,
+  subtitle,
+  borderColor = "gray",
+  valueColor = "white"
+}) {
+  return /* @__PURE__ */ jsxs15(
+    Box15,
+    {
+      flexDirection: "column",
+      borderStyle: "round",
+      borderColor,
+      paddingX: 2,
+      paddingY: 0,
+      flexGrow: 1,
+      minWidth: 16,
+      children: [
+        /* @__PURE__ */ jsx15(Text15, { color: "gray", dimColor: true, wrap: "truncate", children: title.toUpperCase() }),
+        /* @__PURE__ */ jsx15(Text15, { color: valueColor, bold: true, wrap: "truncate", children: value }),
+        subtitle && /* @__PURE__ */ jsx15(Text15, { color: "gray", dimColor: true, wrap: "truncate", children: subtitle })
+      ]
+    }
+  );
+}
+function StatsUI({ live = false }) {
+  const { exit } = useApp10();
+  const [stats, setStats] = useState12(computeStats());
+  const [tasks, setTasks] = useState12(getAllTasks());
+  useEffect12(() => {
+    if (!live) {
+      const timer = setTimeout(() => exit(), 100);
+      return () => clearTimeout(timer);
+    }
+  }, [live, exit]);
+  useEffect12(() => {
+    if (!live) return;
+    const interval = setInterval(() => {
+      setStats(computeStats());
+      setTasks(getAllTasks());
+    }, 1e3);
+    return () => clearInterval(interval);
+  }, [live]);
+  useInput5(
+    (input, key) => {
+      if (live && (input === "q" || key.escape || key.ctrl && input === "c")) {
+        exit();
+      }
+    },
+    { isActive: Boolean(live && process.stdin?.isTTY && typeof process.stdin?.setRawMode === "function") }
+  );
+  const overdueTasks = tasks.filter(isOverdue);
+  const completionRate = stats.completion_rate;
+  const statusRows = [
+    { label: "Pending", value: stats.pending, color: BRAND.muted, desc: "Awaiting action" },
+    { label: "In Progress", value: stats.in_progress, color: BRAND.info, desc: "Currently active" },
+    { label: "Completed", value: stats.completed, color: BRAND.success, desc: "Resolved" },
+    { label: "Overdue", value: stats.overdue, color: stats.overdue > 0 ? BRAND.error : BRAND.success, desc: "Past due date" }
+  ];
+  const priorityRows = [
+    { label: "\u25CF High Priority", value: stats.high_priority, color: BRAND.error },
+    { label: "\u25B2 Medium Priority", value: stats.medium_priority, color: BRAND.warning },
+    { label: "\u25C6 Low Priority", value: stats.low_priority, color: BRAND.success }
+  ];
+  return /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx15(MiniHeader, {}),
+    /* @__PURE__ */ jsxs15(Box15, { marginBottom: 1, justifyContent: "space-between", alignItems: "center", children: [
+      /* @__PURE__ */ jsx15(Text15, { color: BRAND.orange, bold: true, children: "\u2726 Ziphro Performance Analytics" }),
+      live && /* @__PURE__ */ jsx15(Box15, { borderStyle: "round", borderColor: BRAND.success, paddingX: 1, children: /* @__PURE__ */ jsx15(Text15, { color: BRAND.success, children: "\u25CF LIVE (Press 'q' to exit)" }) })
+    ] }),
+    /* @__PURE__ */ jsxs15(Box15, { gap: 1, marginBottom: 1, children: [
+      /* @__PURE__ */ jsx15(
+        StatCard,
+        {
+          title: "Total Tasks",
+          value: stats.total,
+          subtitle: "All items in local store",
+          borderColor: BRAND.border,
+          valueColor: BRAND.white
+        }
+      ),
+      /* @__PURE__ */ jsx15(
+        StatCard,
+        {
+          title: "Completion Rate",
+          value: `${completionRate}%`,
+          subtitle: `${stats.completed} of ${stats.total} resolved`,
+          borderColor: BRAND.border,
+          valueColor: completionRate > 75 ? BRAND.success : BRAND.orange
+        }
+      ),
+      /* @__PURE__ */ jsx15(
+        StatCard,
+        {
+          title: "Active (In Prog)",
+          value: stats.in_progress,
+          subtitle: "Focused in flight",
+          borderColor: BRAND.border,
+          valueColor: BRAND.info
+        }
+      ),
+      /* @__PURE__ */ jsx15(
+        StatCard,
+        {
+          title: "Overdue Alert",
+          value: stats.overdue,
+          subtitle: stats.overdue > 0 ? "Action required!" : "Zero overdue items",
+          borderColor: stats.overdue > 0 ? BRAND.error : BRAND.border,
+          valueColor: stats.overdue > 0 ? BRAND.error : BRAND.success
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxs15(Box15, { gap: 1, marginBottom: 1, children: [
+      /* @__PURE__ */ jsxs15(
+        Box15,
+        {
+          flexDirection: "column",
+          borderStyle: "round",
+          borderColor: BRAND.border,
+          paddingX: 2,
+          paddingY: 1,
+          flexGrow: 1,
+          children: [
+            /* @__PURE__ */ jsx15(Text15, { color: BRAND.white, bold: true, children: "Status Distribution" }),
+            /* @__PURE__ */ jsx15(Box15, { height: 1 }),
+            statusRows.map((row) => /* @__PURE__ */ jsxs15(Box15, { justifyContent: "space-between", alignItems: "center", marginBottom: 0, children: [
+              /* @__PURE__ */ jsx15(Box15, { width: 16, children: /* @__PURE__ */ jsx15(Text15, { color: BRAND.muted, children: row.label }) }),
+              /* @__PURE__ */ jsx15(Box15, { width: 6, children: /* @__PURE__ */ jsx15(Text15, { color: row.color, bold: true, children: String(row.value).padStart(4) }) }),
+              /* @__PURE__ */ jsx15(
+                ProgressBar,
+                {
+                  value: row.value,
+                  max: stats.total,
+                  width: 16,
+                  color: row.color,
+                  showPercent: true
+                }
+              )
+            ] }, row.label))
+          ]
+        }
+      ),
+      /* @__PURE__ */ jsxs15(
+        Box15,
+        {
+          flexDirection: "column",
+          borderStyle: "round",
+          borderColor: BRAND.border,
+          paddingX: 2,
+          paddingY: 1,
+          flexGrow: 1,
+          children: [
+            /* @__PURE__ */ jsx15(Text15, { color: BRAND.white, bold: true, children: "Priority Allocation" }),
+            /* @__PURE__ */ jsx15(Box15, { height: 1 }),
+            priorityRows.map((row) => /* @__PURE__ */ jsxs15(Box15, { justifyContent: "space-between", alignItems: "center", marginBottom: 0, children: [
+              /* @__PURE__ */ jsx15(Box15, { width: 20, children: /* @__PURE__ */ jsx15(Text15, { color: row.color, children: row.label }) }),
+              /* @__PURE__ */ jsx15(Box15, { width: 6, children: /* @__PURE__ */ jsx15(Text15, { color: row.color, bold: true, children: String(row.value).padStart(4) }) }),
+              /* @__PURE__ */ jsx15(
+                ProgressBar,
+                {
+                  value: row.value,
+                  max: stats.total,
+                  width: 16,
+                  color: row.color,
+                  showPercent: true
+                }
+              )
+            ] }, row.label))
+          ]
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxs15(
+      Box15,
+      {
+        borderStyle: "round",
+        borderColor: "gray",
+        paddingX: 2,
+        paddingY: 0,
+        justifyContent: "space-between",
+        children: [
+          /* @__PURE__ */ jsxs15(Text15, { color: "gray", children: [
+            "Health:",
+            " ",
+            /* @__PURE__ */ jsx15(Text15, { color: stats.overdue === 0 ? "green" : "yellow", bold: true, children: stats.overdue === 0 ? "Optimal \xB7 All tasks on track" : `Attention \xB7 ${stats.overdue} tasks overdue` })
+          ] }),
+          /* @__PURE__ */ jsxs15(Text15, { color: "gray", children: [
+            "Storage: ",
+            /* @__PURE__ */ jsxs15(Text15, { color: "cyan", children: [
+              tasks.length,
+              " local records"
+            ] }),
+            " \xB7 Sync ready"
+          ] })
+        ]
+      }
+    )
+  ] });
+}
+function registerStats(program2) {
+  program2.command("stats").description("View task analytics, completion rates, and priority breakdown").option("-l, --live", "Keep dashboard open with real-time updates", false).action((options) => {
+    render2(React13.createElement(StatsUI, { live: options.live }));
+  });
+}
+
+// src/commands/sync.tsx
+import React14, { useState as useState13, useEffect as useEffect13 } from "react";
+import { Box as Box16, Text as Text16, useApp as useApp11 } from "ink";
+import { Fragment as Fragment4, jsx as jsx16, jsxs as jsxs16 } from "react/jsx-runtime";
+function SyncUI({ dryRun, password }) {
+  const { exit } = useApp11();
+  const [status, setStatus] = useState13("loading");
+  const [message, setMessage] = useState13("");
+  const [details, setDetails] = useState13([]);
+  useEffect13(() => {
+    async function doSync() {
+      try {
+        const auth = requireAuth();
+        let tasks = getAllTasks();
+        const syncPassword = password || auth.password;
+        if (!syncPassword) {
+          setMessage("Encryption password required. Use --password flag or configure it.");
+          setStatus("error");
+          setTimeout(() => exit(new Error("Password required")), 1200);
+          return;
+        }
+        let currentRevision = 1;
+        const downloadRes = await apiDownloadSync(auth.apiUrl, auth.accessToken);
+        if (downloadRes.success && downloadRes.data?.encrypted_blob) {
+          try {
+            currentRevision = downloadRes.data.revision || 1;
+            const decrypted = await decrypt(downloadRes.data.encrypted_blob, syncPassword, {
+              userId: auth.email,
+              revision: currentRevision,
+              version: 2
+            });
+            const remoteBundle = JSON.parse(decrypted);
+            if (remoteBundle.tasks && Array.isArray(remoteBundle.tasks)) {
+              tasks = mergeTasks(tasks, remoteBundle.tasks, auth.deviceId);
+              replaceTasks(tasks);
+            }
+          } catch (decryptErr) {
+            console.warn("[Sync] Could not decrypt existing remote blob (new master key?):", decryptErr);
+          }
+        }
+        const nextRevision = currentRevision + 1;
+        const bundle = {
+          tasks,
+          schema_version: "2",
+          exported_at: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        const plaintext = JSON.stringify(bundle);
+        const blobChecksum = await checksum(plaintext);
+        if (dryRun) {
+          const lastSync = getLastSyncedAt();
+          setDetails([
+            `Tasks to sync: ${tasks.length}`,
+            `Checksum: ${blobChecksum.slice(0, 16)}\u2026`,
+            `Revision: ${nextRevision} (current: ${currentRevision})`,
+            `Last synced: ${lastSync ?? "never"}`,
+            `API endpoint: ${auth.apiUrl}/api/v1/tasks`,
+            "(dry-run: no changes made)"
+          ]);
+          setStatus("dry-run");
+          setTimeout(() => exit(), 100);
+          return;
+        }
+        const blob = await encrypt(plaintext, syncPassword, {
+          userId: auth.email,
+          revision: nextRevision,
+          version: 2
+        });
+        const res = await apiUploadSync(
+          auth.apiUrl,
+          auth.accessToken,
+          blob,
+          blobChecksum,
+          auth.deviceId,
+          currentRevision
+        );
+        if (res.success) {
+          clearSyncQueue();
+          setMessage(`Synced ${tasks.length} task${tasks.length !== 1 ? "s" : ""} to cloud`);
+          setDetails([
+            `Encrypted with AES-256-GCM + AAD (Revision ${nextRevision})`,
+            `Checksum: ${blobChecksum.slice(0, 16)}\u2026`,
+            `CRDT Conflict-Free Merge verified`
+          ]);
+          setStatus("success");
+          setTimeout(() => exit(), 1500);
+        } else if (res.error?.code === "NETWORK_ERROR") {
+          setMessage("System is offline. Sync is queued!");
+          setDetails([
+            "Tasks stored locally in cache (tasks.json) at zero cost",
+            `Sync queue contains ${tasks.length} pending task(s)`,
+            "Will upload to cloud & Google Drive once internet is restored."
+          ]);
+          setStatus("offline");
+          setTimeout(() => exit(), 3e3);
+        } else {
+          setMessage(res.error?.message ?? "Sync failed");
+          setStatus("error");
+          setTimeout(() => exit(new Error(res.error?.message)), 1200);
+        }
+      } catch (e) {
+        setMessage(e.message);
+        setStatus("error");
+        setTimeout(() => exit(e), 1200);
+      }
+    }
+    doSync();
+  }, []);
+  return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx16(MiniHeader, {}),
+    /* @__PURE__ */ jsxs16(Box16, { marginTop: 1, flexDirection: "column", children: [
+      status === "loading" && /* @__PURE__ */ jsx16(Spinner, { label: "Syncing to cloud (E2E encrypted + CRDT)\u2026", type: "orbit", color: BRAND.orange }),
+      status === "success" && /* @__PURE__ */ jsxs16(Fragment4, { children: [
+        /* @__PURE__ */ jsx16(StarBurst, { label: message, color: BRAND.orange }),
+        details.map((d) => /* @__PURE__ */ jsxs16(Box16, { children: [
+          /* @__PURE__ */ jsx16(Text16, { color: BRAND.muted, children: "  \xB7 " }),
+          /* @__PURE__ */ jsx16(Text16, { color: BRAND.muted, children: d })
+        ] }, d))
+      ] }),
+      status === "error" && /* @__PURE__ */ jsx16(StatusBadge, { type: "error", message }),
+      status === "offline" && /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx16(StatusBadge, { type: "warn", message }),
+        details.map((d) => /* @__PURE__ */ jsxs16(Box16, { children: [
+          /* @__PURE__ */ jsx16(Text16, { color: BRAND.muted, children: "  \xB7 " }),
+          /* @__PURE__ */ jsx16(Text16, { color: BRAND.warning, children: d })
+        ] }, d))
+      ] }),
+      status === "dry-run" && /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx16(StatusBadge, { type: "info", message: "Dry run \u2014 sync preview:" }),
+        details.map((d) => /* @__PURE__ */ jsxs16(Box16, { children: [
+          /* @__PURE__ */ jsx16(Text16, { color: BRAND.muted, children: "  \xB7 " }),
+          /* @__PURE__ */ jsx16(Text16, { color: BRAND.info, children: d })
+        ] }, d))
+      ] })
+    ] })
+  ] });
+}
+function registerSync(program2) {
+  program2.command("sync").description("Sync tasks with cloud (E2E encrypted + CRDT merge)").option("--dry-run", "Preview what would be synced without making changes", false).option("--password <password>", "Master password for encryption").action(async (options) => {
+    const { render: render5 } = await import("ink");
+    render5(React14.createElement(SyncUI, { dryRun: options.dryRun, password: options.password }));
+  });
+}
+
+// src/commands/export.ts
+import { writeFileSync as writeFileSync3 } from "fs";
+function tasksToCSV(bundle) {
+  const headers = ["id", "description", "priority", "status", "tags", "due_date", "created_at", "updated_at", "completed_at", "completion_note"];
+  const rows = bundle.tasks.map((t) => [
+    t.id,
+    `"${t.description.replace(/"/g, '""')}"`,
+    t.priority,
+    t.status,
+    `"${t.tags.join(";")}"`,
+    t.due_date ?? "",
+    t.created_at,
+    t.updated_at,
+    t.completed_at ?? "",
+    t.completion_note ? `"${t.completion_note.replace(/"/g, '""')}"` : ""
+  ]);
+  return [headers.join(","), ...rows.map((r) => r.join(","))].join("\n");
+}
+function tasksToMarkdown(bundle) {
+  const lines = [
+    "# Ziphro Export",
+    `_Exported at: ${bundle.exported_at}_`,
+    "",
+    "| ID | Description | Priority | Status | Due | Tags |",
+    "|---|---|---|---|---|---|"
+  ];
+  for (const t of bundle.tasks) {
+    lines.push(
+      `| ${t.id.slice(0, 8)} | ${t.description} | ${t.priority} | ${t.status} | ${t.due_date ?? "\u2014"} | ${t.tags.join(", ")} |`
+    );
+  }
+  return lines.join("\n");
+}
+function registerExport(program2) {
+  program2.command("export").description("Export tasks to JSON, CSV, or Markdown").option("-f, --format <format>", "Export format: json | csv | markdown", "json").option("-o, --output <file>", "Output file path (default: stdout)").action((options) => {
+    const tasks = getAllTasks();
+    const bundle = {
+      tasks,
+      schema_version: "1",
+      exported_at: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    let content;
+    switch (options.format) {
+      case "csv":
+        content = tasksToCSV(bundle);
+        break;
+      case "markdown":
+        content = tasksToMarkdown(bundle);
+        break;
+      default:
+        content = JSON.stringify(bundle, null, 2);
+    }
+    if (options.output) {
+      writeFileSync3(options.output, content, "utf8");
+      console.log(`\u2713 Exported ${tasks.length} tasks to ${options.output}`);
+    } else {
+      console.log(content);
+    }
+  });
+}
+
+// src/commands/upgrade.tsx
+import React15, { useState as useState14, useEffect as useEffect14 } from "react";
+import { Box as Box17, Text as Text17, useApp as useApp12 } from "ink";
+import { exec as exec2 } from "child_process";
+import { jsx as jsx17, jsxs as jsxs17 } from "react/jsx-runtime";
+async function fetchTargetVersion(pkgName, currentVersion) {
+  const isPrerelease = currentVersion.includes("-");
+  try {
+    const res = await fetch(`https://registry.npmjs.org/-/package/${pkgName}/dist-tags`, {
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!res.ok) return { version: "", tag: "latest" };
+    const tags = await res.json();
+    const latestTag = tags.latest || "";
+    const previewTag = tags.preview || "";
+    if (isPrerelease && previewTag) {
+      if (latestTag && isOutdated(previewTag, latestTag)) {
+        return { version: latestTag, tag: "latest" };
+      }
+      return { version: previewTag, tag: "preview" };
+    }
+    return { version: latestTag || previewTag, tag: latestTag ? "latest" : "preview" };
+  } catch {
+    return { version: "", tag: "latest" };
+  }
+}
+function installGlobalPackage(spec, setState) {
+  return new Promise((resolve) => {
+    exec2(`npm install -g ${spec}`, (error, _stdout, stderr) => {
+      if (error) {
+        setState((prev) => ({
+          ...prev,
+          status: "error",
+          errorMsg: error.message || stderr || "Failed to install updates"
+        }));
+      } else {
+        setState((prev) => ({ ...prev, status: "success" }));
+      }
+      resolve();
+    });
+  });
+}
+function UpgradeUI({ target }) {
+  const { exit } = useApp12();
+  const shouldUpgradeCli = !target || target.toLowerCase() === "cli";
+  const shouldUpgradeMcp = !target || target.toLowerCase() === "mcp";
+  const [cliState, setCliState] = useState14({
+    name: "Ziphro CLI",
+    pkgName: "ziphro-cli",
+    current: CLI_VERSION,
+    latest: "",
+    status: shouldUpgradeCli ? "checking" : "up-to-date",
+    errorMsg: ""
+  });
+  const [mcpState, setMcpState] = useState14({
+    name: "Ziphro MCP Server",
+    pkgName: "ziphro-mcp",
+    current: "",
+    latest: "",
+    status: shouldUpgradeMcp ? "checking" : "up-to-date",
+    errorMsg: ""
+  });
+  useEffect14(() => {
+    async function checkAndUpgrade() {
+      const tasks = [];
+      let mcpCurrent = "";
+      if (shouldUpgradeMcp) {
+        mcpCurrent = await new Promise((resolve) => {
+          exec2("npm list -g ziphro-mcp --json", (err, stdout) => {
+            if (err) {
+              resolve("");
+              return;
+            }
+            try {
+              const data = JSON.parse(stdout);
+              resolve(data.dependencies?.["ziphro-mcp"]?.version || "");
+            } catch {
+              resolve("");
+            }
+          });
+        });
+      }
+      const cliTarget = shouldUpgradeCli ? await fetchTargetVersion("ziphro-cli", CLI_VERSION) : { version: "", tag: "latest" };
+      const mcpTarget = shouldUpgradeMcp ? await fetchTargetVersion("ziphro-mcp", mcpCurrent || CLI_VERSION) : { version: "", tag: "latest" };
+      if (shouldUpgradeCli) {
+        if (!cliTarget.version) {
+          setCliState((prev) => ({
+            ...prev,
+            status: "error",
+            errorMsg: "Could not fetch latest version from registry."
+          }));
+        } else {
+          setCliState((prev) => ({ ...prev, latest: cliTarget.version }));
+          if (isOutdated(CLI_VERSION, cliTarget.version)) {
+            setCliState((prev) => ({ ...prev, status: "upgrading" }));
+            tasks.push(installGlobalPackage(`ziphro-cli@${cliTarget.tag}`, setCliState));
+          } else {
+            setCliState((prev) => ({ ...prev, status: "up-to-date" }));
+          }
+        }
+      }
+      if (shouldUpgradeMcp) {
+        if (!mcpTarget.version) {
+          setMcpState((prev) => ({
+            ...prev,
+            status: "error",
+            errorMsg: "Could not fetch latest version from registry."
+          }));
+        } else {
+          setMcpState((prev) => ({ ...prev, latest: mcpTarget.version, current: mcpCurrent }));
+          const isMcpInstalled = !!mcpCurrent;
+          if (!isMcpInstalled) {
+            if (target === "mcp") {
+              setMcpState((prev) => ({ ...prev, status: "upgrading" }));
+              tasks.push(installGlobalPackage(`ziphro-mcp@${mcpTarget.tag}`, setMcpState));
+            } else {
+              setMcpState((prev) => ({ ...prev, status: "not-installed" }));
+            }
+          } else if (isOutdated(mcpCurrent, mcpTarget.version)) {
+            setMcpState((prev) => ({ ...prev, status: "upgrading" }));
+            tasks.push(installGlobalPackage(`ziphro-mcp@${mcpTarget.tag}`, setMcpState));
+          } else {
+            setMcpState((prev) => ({ ...prev, status: "up-to-date" }));
+          }
+        }
+      }
+      if (tasks.length > 0) {
+        await Promise.all(tasks);
+      }
+      setTimeout(() => exit(), 2500);
+    }
+    checkAndUpgrade();
+  }, []);
+  const manualInstallHint = CLI_VERSION.includes("-") ? "@preview" : "";
+  return /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", paddingX: 1, paddingY: 0, children: [
+    /* @__PURE__ */ jsx17(MiniHeader, {}),
+    /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", borderStyle: "round", borderColor: BRAND.border, paddingX: 2, paddingY: 1, marginTop: 1, children: [
+      /* @__PURE__ */ jsx17(Box17, { marginBottom: 1, children: /* @__PURE__ */ jsx17(Text17, { color: BRAND.orange, bold: true, children: "\u2726 Ziphro Upgrade" }) }),
+      shouldUpgradeCli && /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", marginBottom: 1, children: [
+        /* @__PURE__ */ jsx17(Text17, { bold: true, color: "white", children: "Ziphro CLI:" }),
+        cliState.status === "checking" && /* @__PURE__ */ jsx17(Spinner, { label: `Checking latest version... (Current: v${CLI_VERSION})`, type: "orbit" }),
+        cliState.status === "upgrading" && /* @__PURE__ */ jsx17(Spinner, { label: `Upgrading globally: v${CLI_VERSION} \u2192 v${cliState.latest}...`, type: "star", color: "yellow" }),
+        cliState.status === "success" && /* @__PURE__ */ jsxs17(Text17, { color: "green", children: [
+          "\u2713 Successfully upgraded to v",
+          cliState.latest,
+          "!"
+        ] }),
+        cliState.status === "up-to-date" && /* @__PURE__ */ jsxs17(Text17, { color: "gray", children: [
+          "\u2713 Already up to date (v",
+          CLI_VERSION,
+          ")"
+        ] }),
+        cliState.status === "error" && /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
+          /* @__PURE__ */ jsxs17(Text17, { color: "red", children: [
+            "\u2717 Upgrade failed: ",
+            cliState.errorMsg
+          ] }),
+          /* @__PURE__ */ jsxs17(Text17, { color: "gray", dimColor: true, children: [
+            "Run manually: npm install -g ziphro-cli",
+            manualInstallHint
+          ] })
+        ] })
+      ] }),
+      shouldUpgradeMcp && /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx17(Text17, { bold: true, color: "white", children: "Ziphro MCP Server:" }),
+        mcpState.status === "checking" && /* @__PURE__ */ jsx17(Spinner, { label: `Checking latest version... (Current: ${mcpState.current ? "v" + mcpState.current : "not installed"})`, type: "orbit" }),
+        mcpState.status === "upgrading" && /* @__PURE__ */ jsx17(Spinner, { label: `Upgrading globally: ${mcpState.current ? "v" + mcpState.current : "installing"} \u2192 v${mcpState.latest}...`, type: "star", color: "yellow" }),
+        mcpState.status === "success" && /* @__PURE__ */ jsxs17(Text17, { color: "green", children: [
+          "\u2713 Successfully upgraded to v",
+          mcpState.latest,
+          "!"
+        ] }),
+        mcpState.status === "up-to-date" && /* @__PURE__ */ jsxs17(Text17, { color: "gray", children: [
+          "\u2713 Already up to date (v",
+          mcpState.current,
+          ")"
+        ] }),
+        mcpState.status === "not-installed" && /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
+          /* @__PURE__ */ jsx17(Text17, { color: "yellow", children: "\u2601 Not installed globally." }),
+          /* @__PURE__ */ jsxs17(Text17, { color: "gray", dimColor: true, children: [
+            "Install manually: npm install -g ziphro-mcp",
+            manualInstallHint
+          ] }),
+          /* @__PURE__ */ jsx17(Text17, { color: "gray", dimColor: true, children: "Or install now with: ziphro upgrade mcp" })
+        ] }),
+        mcpState.status === "error" && /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
+          /* @__PURE__ */ jsxs17(Text17, { color: "red", children: [
+            "\u2717 Upgrade failed: ",
+            mcpState.errorMsg
+          ] }),
+          /* @__PURE__ */ jsxs17(Text17, { color: "gray", dimColor: true, children: [
+            "Run manually: npm install -g ziphro-mcp",
+            manualInstallHint
+          ] })
+        ] })
+      ] })
+    ] })
+  ] });
+}
+function registerUpgrade(program2) {
+  program2.command("upgrade [target]").description('Upgrade Ziphro CLI and MCP Server. Target can be "cli", "mcp", or omitted to upgrade both.').action(async (target) => {
+    const { render: render5 } = await import("ink");
+    render5(React15.createElement(UpgradeUI, { target }));
+  });
+}
+
+// src/commands/dashboard.tsx
+import React16 from "react";
+import { render as render3 } from "ink";
+function registerDashboard(program2) {
+  program2.command("dashboard").alias("dash").alias("tui").description("Launch the full interactive TUI Command Deck with live task navigation").action(() => {
+    render3(React16.createElement(InteractiveDashboard));
+  });
+}
+
+// src/index.ts
+program.name("ziphro").description(
+  "\u2726 Privacy-first task management with E2E encryption \xB7 AI-native \xB7 CLI \xB7 MCP \xB7 Web"
+).version(CLI_VERSION, "-v, --version", "Output the current version").helpOption("-h, --help", "Display help information");
+registerDashboard(program);
+registerConfig(program);
+registerLogin(program);
+registerLogout(program);
+registerWhoami(program);
+registerUpgrade(program);
+registerAdd(program);
+registerList(program);
+registerDone(program);
+registerRemove(program);
+registerEdit(program);
+registerStats(program);
+registerSync(program);
+registerExport(program);
+program.addHelpText(
+  "beforeAll",
+  `
+\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557  \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2557 
+\u255A\u2550\u2550\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557
+  \u2588\u2588\u2588\u2554\u255D \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551   \u2588\u2588\u2551
+ \u2588\u2588\u2588\u2554\u255D  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551   \u2588\u2588\u2551
+\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2551  \u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D
+\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D\u255A\u2550\u255D     \u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D 
+
+  \u2726 CLI \xB7 MCP \xB7 Web \u2726
+`
+);
+var args = [...process.argv];
+var aliasMap = {
+  "-a": "add",
+  "-l": "list",
+  "-d": "done",
+  "-r": "remove",
+  "-e": "edit"
+};
+if (args[2] && aliasMap[args[2]]) {
+  args[2] = aliasMap[args[2]];
+}
+if (args.length <= 2 && process.stdout.isTTY) {
+  render4(React17.createElement(InteractiveDashboard));
+} else {
+  program.parseAsync(args).catch((err) => {
+    console.error(`
+\u2717 ${err.message}`);
+    process.exit(1);
+  });
+}