Merge remote-tracking branch 'origin/main' into chore/compat-matrix-0-0-1

Author: Patel230

AGENTS.md

@@ -228,7 +228,7 @@ This project is indexed by GitNexus as **graycode** (97743 symbols, 322940 relat
 | `gitnexus://repo/graycode/context` | Codebase overview, check index freshness |
 | `gitnexus://repo/graycode/clusters` | All functional areas |
 | `gitnexus://repo/graycode/processes` | All execution flows |
-| `gitnexus://repo/graycode/process/{name}` | Step-by-step execution swift |
+| `gitnexus://repo/graycode/process/{name}` | Step-by-step execution trace |
 
 ## CLI
 

CLAUDE.md

@@ -28,7 +28,7 @@ This project is indexed by GitNexus as **graycode** (97743 symbols, 322940 relat
 | `gitnexus://repo/graycode/context` | Codebase overview, check index freshness |
 | `gitnexus://repo/graycode/clusters` | All functional areas |
 | `gitnexus://repo/graycode/processes` | All execution flows |
-| `gitnexus://repo/graycode/process/{name}` | Step-by-step execution swift |
+| `gitnexus://repo/graycode/process/{name}` | Step-by-step execution trace |
 
 ## CLI
 

README.md

@@ -128,6 +128,11 @@ graycode cloud graph sync <session-id>
 graycode cloud graph sync --mission-dir /path/to/mission
 ```
 
+Cloud commands require an endpoint. There is no default: pass `--endpoint` or
+set `GRAYCODE_CLOUD_URL` to your Graycode Cloud worker URL before running
+`graycode cloud login`. `https://api.graycodeai.com` is the browser BFF and
+will reject a device token.
+
 The export contains metadata and hashes, not prompts, tool arguments/results,
 policy reasons, verification evidence, or runtime output. Swift remains
 available separately as `graycode swift graph export`. Persisted chat sessions
@@ -483,6 +488,14 @@ You may keep a **personal** parent **`go.work`** that lists alternate clones on
 |---|---|---|
 | **graycode** | This repo | AI coding agent |
 | **graycode-router** | [GrayCodeAI/graycode-router](https://github.com/GrayCodeAI/graycode-router) | LLM provider runtime |
+| **graycode-skills** | [GrayCodeAI/graycode-skills](https://github.com/GrayCodeAI/graycode-skills) | Community skill registry |
+| **graycode-platform** | [GrayCodeAI/graycode-platform](https://github.com/GrayCodeAI/graycode-platform) | Web, BFF, and Graycode Cloud |
+
+`ecosystem.yaml` is the canonical inventory of repositories cloned as
+siblings in this local workspace; tooling reads it rather than carrying its
+own repo-name list. `harrier`, `shrike`, `swift`, `kestrel`, `merlin` and
+`falcon` above are consumed as pinned `go.mod` module dependencies rather
+than local workspace clones, so they are not listed there.
 
 For the consolidated repo map and the current-vs-proposed architecture diagrams, see [docs/architecture/graycode-current-vs-proposed.md](docs/architecture/graycode-current-vs-proposed.md).
 For execution-graph ownership, automatic capture seams, export/sync commands,

cmd/agent.go

@@ -5,9 +5,9 @@ import (
 	"fmt"
 	"os"
 	"path/filepath"
-	"text/tabwriter"
 
 	"github.com/GrayCodeAI/graycode-cli/internal/multiagent/agents"
+	"github.com/GrayCodeAI/graycode-cli/internal/theme"
 	"github.com/spf13/cobra"
 	"golang.org/x/text/cases"
 	"golang.org/x/text/language"
@@ -81,13 +81,12 @@ func runAgentList(cmd *cobra.Command, _ []string) error {
 		return nil
 	}
 	if len(all) == 0 {
-		fmt.Printf("No agents found. Create one with: graycode agent create <name>\n")
-		fmt.Printf("Agent directory: %s\n", agents.DefaultDir())
+		fmt.Printf("%s\n", auditTint("No agents found. Create one with: graycode agent create <name>", textMuted))
+		fmt.Printf("%s\n", auditTint("Agent directory: "+agents.DefaultDir(), textPrimary))
 		return nil
 	}
 
-	w := tabwriter.NewWriter(os.Stdout, 0, 0, 2, ' ', 0)
-	_, _ = fmt.Fprintf(w, "NAME\tMODEL\tDESCRIPTION\n")
+	rows := make([][]string, 0, len(all))
 	for _, a := range all {
 		model := a.Model
 		if model == "" {
@@ -100,9 +99,9 @@ func runAgentList(cmd *cobra.Command, _ []string) error {
 				desc = string(runes[:50]) + "..."
 			}
 		}
-		_, _ = fmt.Fprintf(w, "%s\t%s\t%s\n", a.Name, model, desc)
+		rows = append(rows, []string{a.Name, model, desc})
 	}
-	return w.Flush()
+	return theme.PrintTable(os.Stdout, []string{"NAME", "MODEL", "DESCRIPTION"}, rows)
 }
 
 func runAgentCreate(_ *cobra.Command, args []string) error {
@@ -146,8 +145,8 @@ You are a specialized agent. Complete tasks according to your expertise.
 		return err
 	}
 
-	fmt.Printf("Created agent %q at %s\n", name, path)
-	fmt.Printf("Edit the file to customize the system prompt.\n")
+	fmt.Printf("%s\n", auditTint("Created agent "+name+" at ", doneGreen)+auditTint(path, textPrimary))
+	fmt.Printf("%s\n", auditTint("Edit the file to customize the system prompt.", textMuted))
 	return nil
 }
 
@@ -157,15 +156,15 @@ func runAgentShow(_ *cobra.Command, args []string) error {
 		return err
 	}
 
-	fmt.Printf("Name:        %s\n", a.Name)
-	fmt.Printf("Description: %s\n", a.Description)
+	fmt.Printf("%s %s\n", auditTint("Name:", textMuted), auditTint(a.Name, textPrimary))
+	fmt.Printf("%s %s\n", auditTint("Description:", textMuted), auditTint(a.Description, textPrimary))
 	model := a.Model
 	if model == "" {
 		model = "(inherit from session)"
 	}
-	fmt.Printf("Model:       %s\n", model)
-	fmt.Printf("File:        %s\n", a.FilePath)
-	fmt.Printf("\n--- Prompt ---\n%s\n", a.Prompt)
+	fmt.Printf("%s %s\n", auditTint("Model:", textMuted), auditTint(model, textPrimary))
+	fmt.Printf("%s %s\n", auditTint("File:", textMuted), auditTint(a.FilePath, textPrimary))
+	fmt.Printf("\n%s\n%s\n", auditTint("--- Prompt ---", graycodeColor), a.Prompt)
 	return nil
 }
 
@@ -175,9 +174,18 @@ func runAgentRemove(_ *cobra.Command, args []string) error {
 		return err
 	}
 
+	ok, err := confirmDestructive(fmt.Sprintf("Remove agent %q (%s)?", a.Name, a.FilePath))
+	if err != nil {
+		return err
+	}
+	if !ok {
+		fmt.Printf("%s\n", auditTint("Cancelled.", textMuted))
+		return nil
+	}
+
 	if err := os.Remove(a.FilePath); err != nil {
 		return fmt.Errorf("remove %s: %w", a.FilePath, err)
 	}
-	fmt.Printf("Removed agent %q (%s)\n", a.Name, a.FilePath)
+	fmt.Printf("%s\n", auditTint("Removed agent "+a.Name+" ("+a.FilePath+")", textPrimary))
 	return nil
 }

cmd/ai_comments.go

@@ -150,7 +150,7 @@ func processAIDirectives(dir string, ignore []string) int {
 	processed := 0
 	for _, d := range directives {
 		if err := aiDispatchFn(d); err != nil {
-			fmt.Fprintf(os.Stderr, "AI directive %s:%d failed: %v\n", d.Path, d.Line, err)
+			fmt.Fprintf(os.Stderr, "%s\n", auditTint(fmt.Sprintf("AI directive %s:%d failed: %v", d.Path, d.Line, err), errorCoral))
 			continue
 		}
 		// Resolve back to an absolute path for removal; scan returns paths
@@ -160,7 +160,7 @@ func processAIDirectives(dir string, ignore []string) int {
 			full = filepath.Join(dir, d.Path)
 		}
 		if err := removeAIComment(full, d.Line); err != nil {
-			fmt.Fprintf(os.Stderr, "AI directive %s:%d: failed to strip token: %v\n", d.Path, d.Line, err)
+			fmt.Fprintf(os.Stderr, "%s\n", auditTint(fmt.Sprintf("AI directive %s:%d: failed to strip token: %v", d.Path, d.Line, err), errorCoral))
 			continue
 		}
 		processed++

cmd/audit.go

@@ -3,12 +3,14 @@ package cmd
 import (
 	"encoding/json"
 	"fmt"
+	"image/color"
 	"os"
 	"path/filepath"
 	"sort"
 	"strings"
 	"time"
 
+	lipgloss "charm.land/lipgloss/v2"
 	"github.com/GrayCodeAI/graycode-cli/internal/hooks/audit"
 	"github.com/GrayCodeAI/graycode-cli/internal/storage"
 	"github.com/spf13/cobra"
@@ -65,6 +67,13 @@ type AuditResult struct {
 	Detectors []AuditCount `json:"detectors"`
 }
 
+// auditProgressEnabled reports whether per-session progress should be shown.
+// JSON output must stay pure (progress lines would corrupt it) and piped
+// text should not be spammed with per-session lines.
+func auditProgressEnabled(format string, tty bool) bool {
+	return format != "json" && tty
+}
+
 func runAudit(cmd *cobra.Command, args []string) error {
 	if auditJSON {
 		auditFormat = "json"
@@ -77,18 +86,37 @@ func runAudit(cmd *cobra.Command, args []string) error {
 	}
 
 	if len(sessions) == 0 {
-		cmd.Println("No session transcripts found for the specified time period.")
+		cmd.Println(auditTint("No session transcripts found for the specified time period.", textMuted))
 		return nil
 	}
 
+	// Animated per-session progress only on a TTY and only for text output.
+	// JSON output must stay pure (progress lines would corrupt it) and piped
+	// text should not be spammed with per-session lines.
+	var prog *CLIProgress
+	if auditProgressEnabled(auditFormat, stdoutIsTerminal()) && !IsQuiet() {
+		names := make([]string, len(sessions))
+		for i := range sessions {
+			names[i] = fmt.Sprintf("Scanning session %d/%d", i+1, len(sessions))
+		}
+		prog = NewCLIProgress("Audit", names)
+		defer prog.Abort()
+	}
+
 	// Run audit detectors on each session
 	detectors := audit.AllDetectors()
 	counts := make(map[string]*AuditCount)
 	totalHits := 0
 
-	for _, sess := range sessions {
+	for i, sess := range sessions {
+		if prog != nil {
+			prog.StartStep(i)
+		}
 		events, err := loadSessionEvents(sess.Path)
 		if err != nil {
+			if prog != nil {
+				prog.FailStep(i, "load failed")
+			}
 			continue
 		}
 
@@ -125,6 +153,12 @@ func runAudit(cmd *cobra.Command, args []string) error {
 				}
 			}
 		}
+		if prog != nil {
+			prog.CompleteStep(i)
+		}
+	}
+	if prog != nil {
+		prog.Done()
 	}
 
 	// Count unique projects per detector
@@ -250,25 +284,54 @@ func loadSessionEvents(path string) ([]audit.ToolEvent, error) {
 	return events, nil
 }
 
+// auditTint applies a theme foreground color when color output is appropriate
+// (honors --quiet, NO_COLOR, FORCE_COLOR, and TTY state via ShouldColor).
+// Piped output stays plain so scripts never see stray ANSI escapes.
+func auditTint(s string, color color.Color) string {
+	if !ShouldColor() || s == "" {
+		return s
+	}
+	return lipgloss.NewStyle().Foreground(color).Render(s)
+}
+
+// auditSeverityColor maps a detector severity to a semantic theme color.
+func auditSeverityColor(sev string) color.Color {
+	switch sev {
+	case "high", "critical":
+		return errorCoral
+	case "medium":
+		return warnAmber
+	default: // info, low
+		return infoSky
+	}
+}
+
 func printAuditText(cmd *cobra.Command, result AuditResult) {
 	w := cmd.OutOrStdout()
 
 	_, _ = fmt.Fprintf(w, "\n")
 	_, _ = fmt.Fprintf(w, "═══════════════════════════════════════════════════════════════\n")
-	_, _ = fmt.Fprintf(w, "  Graycode Audit Report\n")
+	_, _ = fmt.Fprintf(w, "  %s\n", auditTint("Graycode Audit Report", graycodeColor))
 	_, _ = fmt.Fprintf(w, "═══════════════════════════════════════════════════════════════\n")
 	_, _ = fmt.Fprintf(w, "\n")
-	_, _ = fmt.Fprintf(w, "  Scanned:     %d sessions (last %d days)\n", result.Sessions, result.Days)
-	_, _ = fmt.Fprintf(w, "  Total hits:  %d\n", result.TotalHits)
-	_, _ = fmt.Fprintf(w, "  Scanned at:  %s\n", result.ScannedAt)
+	_, _ = fmt.Fprintf(w, "  %s %d sessions (last %d days)\n",
+		auditTint("Scanned:", textMuted), result.Sessions, result.Days)
+	hitsColor := doneGreen
+	if result.TotalHits > 0 {
+		hitsColor = errorCoral
+	}
+	_, _ = fmt.Fprintf(w, "  %s %s\n",
+		auditTint("Total hits:", textMuted), auditTint(fmt.Sprintf("%d", result.TotalHits), hitsColor))
+	_, _ = fmt.Fprintf(w, "  %s %s\n",
+		auditTint("Scanned at:", textMuted), auditTint(result.ScannedAt, textPrimary))
 
 	if len(result.Detectors) == 0 {
-		_, _ = fmt.Fprintf(w, "\n  No wasteful patterns detected. Great job!\n\n")
+		_, _ = fmt.Fprintf(w, "\n  %s\n\n", auditTint("No wasteful patterns detected. Great job!", doneGreen))
 		return
 	}
 
 	_, _ = fmt.Fprintf(w, "\n")
-	_, _ = fmt.Fprintf(w, "─── Detected Patterns ───\n\n")
+	_, _ = fmt.Fprintf(w, "─── %s ───\n\n", auditTint("Detected Patterns", infoSky))
 	_, _ = fmt.Fprintf(w, "  %-30s %6s %8s  %s\n", "DETECTOR", "HITS", "SEVERITY", "EXAMPLE")
 	_, _ = fmt.Fprintf(w, "  %-30s %6s %8s  %s\n", strings.Repeat("─", 30), strings.Repeat("─", 6), strings.Repeat("─", 8), strings.Repeat("─", 30))
 
@@ -277,11 +340,14 @@ func printAuditText(cmd *cobra.Command, result AuditResult) {
 		if len(d.Examples) > 0 {
 			example = d.Examples[0]
 		}
-		_, _ = fmt.Fprintf(w, "  %-30s %6d %8s  %s\n", d.Name, d.Hits, d.Severity, example)
+		// Pad to the column width first, then colorize, so ANSI escapes
+		// (zero-width) don't break the fixed-width alignment.
+		sev := auditTint(fmt.Sprintf("%8s", d.Severity), auditSeverityColor(d.Severity))
+		_, _ = fmt.Fprintf(w, "  %-30s %6d %s  %s\n", d.Name, d.Hits, sev, example)
 	}
 
 	_, _ = fmt.Fprintf(w, "\n")
-	_, _ = fmt.Fprintf(w, "─── Remediation Tips ───\n\n")
+	_, _ = fmt.Fprintf(w, "─── %s ───\n\n", auditTint("Remediation Tips", infoSky))
 
 	for _, d := range result.Detectors {
 		switch d.Name {

cmd/audit_progress_test.go

@@ -0,0 +1,46 @@
+package cmd
+
+import "testing"
+
+// TestAuditProgressEnabled guards the JSON-purity contract: per-session
+// progress must never render when output is JSON (it would corrupt the
+// payload) or when stdout is piped (it would spam the report).
+func TestAuditProgressEnabled(t *testing.T) {
+	cases := []struct {
+		format string
+		tty    bool
+		want   bool
+	}{
+		{"json", true, false},  // JSON output must stay pure even on a TTY
+		{"json", false, false}, // JSON + piped: never
+		{"text", false, false}, // piped text: no per-session spam
+		{"text", true, true},   // interactive text: animate
+		{"", true, true},       // default format on a TTY: animate
+		{"", false, false},     // default format piped: no spam
+	}
+	for _, c := range cases {
+		if got := auditProgressEnabled(c.format, c.tty); got != c.want {
+			t.Errorf("auditProgressEnabled(%q, %v) = %v, want %v", c.format, c.tty, got, c.want)
+		}
+	}
+}
+
+// TestAuditSeverityColor verifies severity maps to the expected semantic
+// theme color so the report's severity column reads consistently.
+func TestAuditSeverityColor(t *testing.T) {
+	if auditSeverityColor("high") != errorCoral {
+		t.Error("high should map to errorCoral")
+	}
+	if auditSeverityColor("critical") != errorCoral {
+		t.Error("critical should map to errorCoral")
+	}
+	if auditSeverityColor("medium") != warnAmber {
+		t.Error("medium should map to warnAmber")
+	}
+	if auditSeverityColor("low") != infoSky {
+		t.Error("low should map to infoSky")
+	}
+	if auditSeverityColor("info") != infoSky {
+		t.Error("info should map to infoSky")
+	}
+}