@adhamalkhaja/seyola-runtime 0.11.4

package/dist/bundle/index.js

@@ -0,0 +1,989 @@
+/**
+ * seyola-runtime bundle — generate a Client Alpha distribution folder.
+ *
+ * The bundle is meant to be zipped/copied to a friendly tester. The tester
+ * unzips, runs setup.ps1 (or setup.sh), and gets a working workspace.
+ *
+ * What bundle does:
+ *   1. Validate the pack (refuse to bundle from a broken pack).
+ *   2. Create the output directory if missing.
+ *   3. Create empty member-owned folders if missing (preserve if exist).
+ *   4. Copy the pack into <out>/.seyola/pack/.
+ *   5. Drop a runtime-info note at <out>/.seyola/runtime/.
+ *   6. Write <out>/.seyola/version.json with bundle metadata.
+ *   7. Write setup.ps1 (Windows) and setup.sh (mac/linux).
+ *   8. Write README.md and GETTING-STARTED.md only if missing.
+ *
+ * What bundle does NOT do:
+ *   - Run init. Init runs on the tester's machine, via setup script.
+ *   - Touch .claude/ — init creates .claude/skills + .claude/settings.json
+ *     using the TESTER's workspace path.
+ *   - Bundle Node.js or seyola-runtime itself. Setup script checks them
+ *     and fails loudly with install instructions if missing.
+ *
+ * Exposed skills (set when init runs on the tester's side):
+ *   linkedin-writer, brand-voice, audience-profile-builder, story-bank-builder.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, statSync, readdirSync, copyFileSync, rmSync } from "node:fs";
+import { join, resolve, dirname } from "node:path";
+import { validatePack } from "../validate-pack/index.js";
+const APPROVED_SKILLS = ["linkedin-writer", "brand-voice", "audience-profile-builder", "story-bank-builder"];
+const MEMBER_OWNED_DIRS = ["_foundations", "market", "market/audience-profiles", "market/language-bank", "clients", "runs", "output"];
+export async function runBundle(args) {
+    const start = Date.now();
+    const out = resolve(args.outPath);
+    const pack = resolve(args.packPath);
+    const bundleName = args.bundleName ?? "seyola-client-alpha";
+    const result = {
+        exitCode: 0,
+        status: "success",
+        out_path: out,
+        pack_path: pack,
+        pack_version: "",
+        runtime_version: readRuntimeVersion(),
+        bundle_name: bundleName,
+        files_written: [],
+        runtime_bundled: false,
+        warnings: [],
+        errors: [],
+        duration_ms: 0,
+    };
+    // 1. Pack must exist.
+    if (!existsSync(pack) || !statSync(pack).isDirectory()) {
+        result.exitCode = 1;
+        result.status = "failed";
+        result.errors.push({ code: "pack_not_found", message: `--pack '${pack}' does not exist or is not a directory.` });
+        return finalize(args, result, start);
+    }
+    // 2. Read pack version.
+    const manifestPath = join(pack, "manifests", "universal.pack.json");
+    if (!existsSync(manifestPath)) {
+        result.exitCode = 1;
+        result.status = "failed";
+        result.errors.push({ code: "pack_manifest_missing", message: `Pack manifest not found at ${manifestPath}.` });
+        return finalize(args, result, start);
+    }
+    try {
+        const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+        result.pack_version = manifest.version ?? "unknown";
+    }
+    catch {
+        result.warnings.push({ code: "pack_manifest_read_warning", message: "Could not read pack version." });
+    }
+    // 3. Pack must validate clean.
+    const validation = await validatePack({ packPath: pack, json: true });
+    if (validation.exitCode !== 0) {
+        result.exitCode = 1;
+        result.status = "failed";
+        result.errors.push({ code: "pack_validation_failed", message: `Pack at '${pack}' fails validate-pack. Refusing to bundle from a broken pack.` });
+        return finalize(args, result, start);
+    }
+    // 4. Output dir.
+    if (!existsSync(out)) {
+        mkdirSync(out, { recursive: true });
+    }
+    // 5. Member-owned dirs (preserve on rerun). Each gets a .gitkeep so the
+    // directory is tracked by git even when empty.
+    for (const d of MEMBER_OWNED_DIRS) {
+        const abs = join(out, d);
+        if (!existsSync(abs))
+            mkdirSync(abs, { recursive: true });
+        const keep = join(abs, ".gitkeep");
+        if (!existsSync(keep)) {
+            writeFileSync(keep, "", "utf8");
+            result.files_written.push(`${d}/.gitkeep`);
+        }
+    }
+    // 5a. Write .gitignore that protects member-owned folders. The bundle is
+    // distributed via git (or zip), so we must not track member-generated
+    // content. Always rewritten — system-owned.
+    const gitignore = bundleGitignore();
+    writeFileSync(join(out, ".gitignore"), gitignore, "utf8");
+    result.files_written.push(".gitignore");
+    // 6. .seyola/ tree (system-owned, replaced on every bundle).
+    const seyolaDir = join(out, ".seyola");
+    const seyolaPackDest = join(seyolaDir, "pack");
+    const seyolaRuntimeDest = join(seyolaDir, "runtime");
+    if (existsSync(seyolaPackDest))
+        rmSync(seyolaPackDest, { recursive: true, force: true });
+    mkdirSync(seyolaPackDest, { recursive: true });
+    copyAlphaPack(pack, seyolaPackDest);
+    result.files_written.push(".seyola/pack/  (allowlist copy from " + pack + ")");
+    if (existsSync(seyolaRuntimeDest))
+        rmSync(seyolaRuntimeDest, { recursive: true, force: true });
+    mkdirSync(seyolaRuntimeDest, { recursive: true });
+    // If --runtime <path> is supplied, copy a usable runtime artifact in.
+    // Otherwise leave a README that says runtime install is manual.
+    if (args.runtimePath) {
+        const rt = resolve(args.runtimePath);
+        const distSrc = join(rt, "dist");
+        const pkgSrc = join(rt, "package.json");
+        const lockSrc = join(rt, "package-lock.json");
+        if (!existsSync(distSrc)) {
+            result.warnings.push({
+                code: "runtime_dist_missing",
+                message: `--runtime '${rt}' has no dist/ directory. Run 'npm run build' in the runtime first. Bundle continuing without an embedded runtime.`,
+            });
+            writeFileSync(join(seyolaRuntimeDest, "README.md"), runtimeNote(result.runtime_version), "utf8");
+            result.files_written.push(".seyola/runtime/README.md");
+        }
+        else {
+            copyDir(distSrc, join(seyolaRuntimeDest, "dist"), {});
+            result.files_written.push(".seyola/runtime/dist/");
+            if (existsSync(pkgSrc)) {
+                copyFileSync(pkgSrc, join(seyolaRuntimeDest, "package.json"));
+                result.files_written.push(".seyola/runtime/package.json");
+            }
+            if (existsSync(lockSrc)) {
+                copyFileSync(lockSrc, join(seyolaRuntimeDest, "package-lock.json"));
+                result.files_written.push(".seyola/runtime/package-lock.json");
+            }
+            writeFileSync(join(seyolaRuntimeDest, "README.md"), runtimeBundledNote(result.runtime_version), "utf8");
+            result.files_written.push(".seyola/runtime/README.md");
+            result.runtime_bundled = true;
+        }
+    }
+    else {
+        writeFileSync(join(seyolaRuntimeDest, "README.md"), runtimeNote(result.runtime_version), "utf8");
+        result.files_written.push(".seyola/runtime/README.md");
+    }
+    const versionFile = {
+        bundle_name: bundleName,
+        workspace_version: "0.1.0",
+        pack_version: result.pack_version,
+        runtime_version: result.runtime_version,
+        runtime_bundled: result.runtime_bundled,
+        generated_at: new Date().toISOString(),
+        bundle_created_at: new Date().toISOString().slice(0, 10),
+        update_channel: "alpha",
+        exposed_skills: [...APPROVED_SKILLS],
+        note: "Run setup.ps1 (Windows) or setup.sh (mac/linux) to finalize this workspace on your machine.",
+    };
+    writeFileSync(join(seyolaDir, "version.json"), JSON.stringify(versionFile, null, 2) + "\n", "utf8");
+    result.files_written.push(".seyola/version.json");
+    // 7. Setup scripts.
+    writeFileSync(join(out, "setup.ps1"), setupPowershell(), "utf8");
+    result.files_written.push("setup.ps1");
+    writeFileSync(join(out, "setup.sh"), setupBash(), { encoding: "utf8", mode: 0o755 });
+    result.files_written.push("setup.sh");
+    // Windows convenience wrapper that bypasses PowerShell execution-policy
+    // restrictions on downloaded files. cmd files don't trigger the restriction.
+    writeFileSync(join(out, "setup.cmd"), setupCmd(), "utf8");
+    result.files_written.push("setup.cmd");
+    // 8. README + GETTING-STARTED — only write if missing.
+    const readmePath = join(out, "README.md");
+    if (!existsSync(readmePath)) {
+        writeFileSync(readmePath, bundleReadme(result.pack_version, result.runtime_version, bundleName), "utf8");
+        result.files_written.push("README.md");
+    }
+    const gsPath = join(out, "GETTING-STARTED.md");
+    if (!existsSync(gsPath)) {
+        writeFileSync(gsPath, bundleGettingStarted(), "utf8");
+        result.files_written.push("GETTING-STARTED.md");
+    }
+    return finalize(args, result, start);
+}
+// =====================================================================
+// Allowlist-based pack copy for Client Alpha.
+//
+// The bundle ships ONLY what the four approved workflows need:
+//   /linkedin-writer, /brand-voice, /audience-profile-builder, /story-bank-builder
+// Plus their runtime dependencies (atom.draft + linkedin-post methodology,
+// the registries, schemas, configs they reference).
+//
+// Strips internal docs, legacy library, unapproved skills, ARCHITECTURE,
+// CHANGELOG, MAP, audits, internal strategy docs.
+// =====================================================================
+const ALPHA_ALLOWED_CAPABILITIES = new Set([
+    "atom.draft",
+    "artifact.create.social.linkedin-post",
+    "artifact.create.analytical.voice-profile",
+    "artifact.create.analytical.audience-profile",
+    "artifact.create.analytical.story-bank",
+]);
+const ALPHA_ALLOWED_CONFIG_NAMESPACES = new Set([
+    "universal:voice:plain-business@v1",
+    "universal:structure:hell-heaven-bridge@v1",
+    "universal:structure:default@v1",
+    "universal:quality:default@v1",
+    "universal:quality:humanizer@v1",
+    "universal:quality:cringe-test@v1",
+    "universal:quality:would-i-send-this@v1",
+]);
+function copyAlphaPack(src, dest) {
+    // 1. Whole directories that are runtime-essential and contain no IP leak.
+    const wholeDirs = [
+        ".types",
+        ".tags",
+        ".substrate",
+        ".composer",
+        ".context",
+        ".harness/schemas",
+    ];
+    for (const d of wholeDirs) {
+        const srcDir = join(src, d);
+        if (existsSync(srcDir)) {
+            copyDir(srcDir, join(dest, d), {});
+        }
+    }
+    // 2. Selected harness files (policies + linkedin-only examples).
+    const harnessFiles = [
+        ".harness/routing-policy.json",
+        ".harness/planning-policy.json",
+        ".harness/README.md",
+        ".harness/examples/linkedin-post.task.yaml",
+        ".harness/examples/linkedin-post-inline.task.yaml",
+    ];
+    for (const f of harnessFiles) {
+        const srcFile = join(src, f);
+        if (existsSync(srcFile)) {
+            copyFileWithMkdir(srcFile, join(dest, f));
+        }
+    }
+    // 3. Trimmed registries (capabilities, artifacts, configs).
+    trimAndCopyCapabilitiesRegistry(src, dest);
+    const allowedArtifactTypes = trimAndCopyArtifactsRegistry(src, dest);
+    trimAndCopyConfigsRegistry(src, dest);
+    trimAndCopyShapes(src, dest, allowedArtifactTypes);
+    // 4. Format adapters and effects.
+    // For alpha, /linkedin-writer uses output_format=plain_text (no adapter)
+    // and file.export effect. So:
+    //   - Include effects/ implementation dir (file.export is real and used).
+    //   - Include .effects/registry.json (whole, file.export is the only entry).
+    //   - Include .formats/registry.json with no adapters (the gov-proposal
+    //     adapter is stripped because its owning capability was stripped).
+    //   - Skip formats/ implementation dir entirely (no adapters in alpha).
+    const effectsSrc = join(src, "effects");
+    if (existsSync(effectsSrc))
+        copyDir(effectsSrc, join(dest, "effects"), {});
+    const effectsRegSrc = join(src, ".effects/registry.json");
+    if (existsSync(effectsRegSrc)) {
+        copyFileWithMkdir(effectsRegSrc, join(dest, ".effects/registry.json"));
+    }
+    // Trimmed formats registry — empty adapters for alpha.
+    trimAndCopyFormatsRegistry(src, dest);
+    // 5. Approved skill folders (whole subtrees).
+    const approvedSkillFolders = [
+        "skills/layer-1/brand-voice",
+        "skills/layer-1/audience-profile-builder",
+        "skills/layer-1/story-bank-builder",
+        "skills/layer-3/linkedin-writer",
+    ];
+    for (const sk of approvedSkillFolders) {
+        const srcSk = join(src, sk);
+        if (existsSync(srcSk)) {
+            copyDir(srcSk, join(dest, sk), {});
+        }
+    }
+    // 6. Skill dependencies — only the parts of /draft that linkedin-post needs.
+    const draftDeps = [
+        "skills/layer-2/draft/SKILL.md",
+        "skills/layer-2/draft/methodologies/linkedin-post.md",
+    ];
+    for (const f of draftDeps) {
+        const srcFile = join(src, f);
+        if (existsSync(srcFile)) {
+            copyFileWithMkdir(srcFile, join(dest, f));
+        }
+    }
+    // If draft has a references/ dir, copy it (the SKILL.md references files there).
+    const draftRefs = join(src, "skills/layer-2/draft/references");
+    if (existsSync(draftRefs)) {
+        copyDir(draftRefs, join(dest, "skills/layer-2/draft/references"), {});
+    }
+    // 7. Manifest (universal pack only).
+    const manifestSrc = join(src, "manifests/universal.pack.json");
+    if (existsSync(manifestSrc)) {
+        copyFileWithMkdir(manifestSrc, join(dest, "manifests/universal.pack.json"));
+    }
+    // 8. VERSION (small, identifies pack).
+    const versionSrc = join(src, "VERSION");
+    if (existsSync(versionSrc)) {
+        copyFileSync(versionSrc, join(dest, "VERSION"));
+    }
+    // What is intentionally NOT copied (per docs/SHARING-AND-IP-MODEL.md):
+    //   docs/                          internal strategy + IP docs
+    //   skills/foundations/            legacy library
+    //   skills/layer-0/                untyped tour guide
+    //   skills/layer-1/{capacity,expertise,vault,...}  unapproved L1 builders
+    //   skills/layer-2/{review,frame,research,mine,capture}/   unused atoms
+    //   skills/layer-2/draft/methodologies/* (except linkedin-post.md)
+    //   skills/layer-3/* (except linkedin-writer)
+    //   ARCHITECTURE*.md, MAP.md, CHANGELOG.md, README.md (source-pack one)
+    //   .skills/inventory.json         the audit
+    //   bin/, knowledge/, seyola-paid-upgrade/, seyola-foundations/
+    //   formats/                       no format adapters used in alpha
+}
+function trimAndCopyCapabilitiesRegistry(src, dest) {
+    const srcFile = join(src, ".capabilities/registry.json");
+    if (!existsSync(srcFile))
+        return;
+    const reg = JSON.parse(readFileSync(srcFile, "utf8"));
+    const trimmed = {};
+    for (const [id, body] of Object.entries(reg.capabilities ?? {})) {
+        if (ALPHA_ALLOWED_CAPABILITIES.has(id)) {
+            trimmed[id] = body;
+        }
+    }
+    reg.capabilities = trimmed;
+    // Strip the verbose _log too — it names internal versions.
+    delete reg._log;
+    copyFileWithMkdir(srcFile, join(dest, ".capabilities/registry.json"));
+    writeFileSync(join(dest, ".capabilities/registry.json"), JSON.stringify(reg, null, 2) + "\n", "utf8");
+}
+function trimAndCopyArtifactsRegistry(src, dest) {
+    // Compute artifact types referenced by allowed capabilities.
+    const allowed = new Set(["derivation-record"]); // always include
+    const capsFile = join(src, ".capabilities/registry.json");
+    if (existsSync(capsFile)) {
+        const reg = JSON.parse(readFileSync(capsFile, "utf8"));
+        for (const [id, cap] of Object.entries(reg.capabilities ?? {})) {
+            if (!ALPHA_ALLOWED_CAPABILITIES.has(id))
+                continue;
+            if (cap.output_artifact_type)
+                allowed.add(cap.output_artifact_type);
+            for (const t of cap.input_artifact_types ?? [])
+                allowed.add(t);
+        }
+    }
+    const srcFile = join(src, ".artifacts/registry.json");
+    if (!existsSync(srcFile))
+        return allowed;
+    const reg = JSON.parse(readFileSync(srcFile, "utf8"));
+    const trimmed = {};
+    for (const [name, body] of Object.entries(reg.artifact_types ?? {})) {
+        if (allowed.has(name))
+            trimmed[name] = body;
+    }
+    reg.artifact_types = trimmed;
+    delete reg._log;
+    copyFileWithMkdir(srcFile, join(dest, ".artifacts/registry.json"));
+    writeFileSync(join(dest, ".artifacts/registry.json"), JSON.stringify(reg, null, 2) + "\n", "utf8");
+    return allowed;
+}
+function trimAndCopyConfigsRegistry(src, dest) {
+    const srcFile = join(src, ".configs/registry.json");
+    if (!existsSync(srcFile))
+        return;
+    const reg = JSON.parse(readFileSync(srcFile, "utf8"));
+    const trimmed = {};
+    for (const [ns, body] of Object.entries(reg.configs ?? {})) {
+        if (ALPHA_ALLOWED_CONFIG_NAMESPACES.has(ns)) {
+            trimmed[ns] = body;
+            // Copy the source file too.
+            if (body.source_file) {
+                const cfgSrc = join(src, body.source_file);
+                if (existsSync(cfgSrc)) {
+                    copyFileWithMkdir(cfgSrc, join(dest, body.source_file));
+                }
+            }
+        }
+    }
+    reg.configs = trimmed;
+    delete reg._log;
+    copyFileWithMkdir(srcFile, join(dest, ".configs/registry.json"));
+    writeFileSync(join(dest, ".configs/registry.json"), JSON.stringify(reg, null, 2) + "\n", "utf8");
+}
+function trimAndCopyFormatsRegistry(src, dest) {
+    const srcFile = join(src, ".formats/registry.json");
+    if (!existsSync(srcFile))
+        return;
+    const reg = JSON.parse(readFileSync(srcFile, "utf8"));
+    // Alpha ships with no format adapters — clear the adapters dict but keep
+    // the registry shape so the runtime's required-files check passes.
+    reg.adapters = {};
+    delete reg._log;
+    copyFileWithMkdir(srcFile, join(dest, ".formats/registry.json"));
+    writeFileSync(join(dest, ".formats/registry.json"), JSON.stringify(reg, null, 2) + "\n", "utf8");
+}
+function trimAndCopyShapes(src, dest, allowedArtifactTypes) {
+    // Shapes are needed for: every artifact type used + the type-family shapes
+    // referenced by the type registry (voice, structure, audience, quality, format).
+    const familyShapes = ["voice", "structure", "audience", "quality", "format"];
+    const shapeFiles = new Set(familyShapes);
+    for (const t of allowedArtifactTypes)
+        shapeFiles.add(t);
+    const srcDir = join(src, ".shapes");
+    if (!existsSync(srcDir))
+        return;
+    for (const entry of readdirSync(srcDir, { withFileTypes: true })) {
+        if (!entry.isFile() || !entry.name.endsWith(".json"))
+            continue;
+        const baseName = entry.name.replace(/\.json$/, "");
+        if (shapeFiles.has(baseName)) {
+            copyFileWithMkdir(join(srcDir, entry.name), join(dest, ".shapes", entry.name));
+        }
+    }
+}
+function copyFileWithMkdir(src, dest) {
+    mkdirSync(dirname(dest), { recursive: true });
+    copyFileSync(src, dest);
+}
+function copyDir(src, dest, opts) {
+    const exclude = new Set(opts.excludeRel ?? []);
+    if (!existsSync(dest))
+        mkdirSync(dest, { recursive: true });
+    const entries = readdirSync(src, { withFileTypes: true });
+    for (const entry of entries) {
+        if (exclude.has(entry.name))
+            continue;
+        const s = join(src, entry.name);
+        const d = join(dest, entry.name);
+        if (entry.isDirectory()) {
+            copyDir(s, d, opts);
+        }
+        else if (entry.isFile()) {
+            mkdirSync(dirname(d), { recursive: true });
+            copyFileSync(s, d);
+        }
+    }
+}
+function readRuntimeVersion() {
+    try {
+        const here = dirname(new URL(import.meta.url).pathname.replace(/^\/([A-Za-z]:)/, "$1"));
+        for (const candidate of [resolve(here, "../../package.json"), resolve(here, "../../../package.json")]) {
+            try {
+                const pkg = JSON.parse(readFileSync(candidate, "utf8"));
+                if (pkg.version)
+                    return pkg.version;
+            }
+            catch {
+                // try next
+            }
+        }
+    }
+    catch {
+        // fall through
+    }
+    return "unknown";
+}
+function setupPowershell() {
+    return `# Seyola Client Alpha — setup script (Windows / PowerShell)
+# Run from inside the bundle folder: ./setup.ps1
+
+$ErrorActionPreference = "Stop"
+
+Write-Host ""
+Write-Host "Seyola Client Alpha setup" -ForegroundColor Cyan
+Write-Host "============================="
+Write-Host ""
+
+# 1. Node check
+Write-Host "Checking Node.js..." -NoNewline
+try {
+  $nodeVersion = node --version 2>&1
+  if ($nodeVersion -match "v(\\d+)") {
+    $major = [int]$Matches[1]
+    if ($major -lt 20) {
+      Write-Host " FAIL" -ForegroundColor Red
+      Write-Host "  Node.js 20 or higher is required. Found: $nodeVersion"
+      Write-Host "  Install Node 20+ from https://nodejs.org/, then rerun this script."
+      exit 1
+    }
+    Write-Host " ok ($nodeVersion)" -ForegroundColor Green
+  } else {
+    throw "Could not parse Node version"
+  }
+} catch {
+  Write-Host " FAIL" -ForegroundColor Red
+  Write-Host "  Node.js is not installed or not on PATH."
+  Write-Host "  Install Node 20+ from https://nodejs.org/, then rerun this script."
+  exit 1
+}
+
+# 2. Claude Code check
+Write-Host "Checking Claude Code..." -NoNewline
+try {
+  $claudeVersion = claude --version 2>&1
+  Write-Host " ok ($claudeVersion)" -ForegroundColor Green
+} catch {
+  Write-Host " WARN" -ForegroundColor Yellow
+  Write-Host "  Claude Code is not detected on PATH."
+  Write-Host "  Install from https://claude.com/claude-code, authenticate (run claude once), then rerun this script."
+  Write-Host "  Continuing anyway so you can finish setup; the workspace will work once Claude Code is installed."
+}
+
+# 3. seyola-runtime check
+Write-Host "Checking seyola-runtime..." -NoNewline
+$rtFound = $false
+try {
+  $rtVersion = seyola-runtime --version 2>&1
+  Write-Host " ok ($rtVersion, global)" -ForegroundColor Green
+  $rtFound = $true
+} catch {
+  Write-Host " not on PATH; trying bundled runtime..." -ForegroundColor Yellow
+}
+
+if (-not $rtFound) {
+  $bundledRuntime = Join-Path (Get-Location).Path ".seyola/runtime"
+  $bundledDist = Join-Path $bundledRuntime "dist/cli/index.js"
+  if (Test-Path $bundledDist) {
+    Write-Host "Installing bundled runtime from .seyola/runtime/ ..." -ForegroundColor Cyan
+    Push-Location $bundledRuntime
+    npm install --omit=dev --silent
+    if ($LASTEXITCODE -ne 0) {
+      Write-Host "npm install failed in .seyola/runtime/." -ForegroundColor Red
+      Pop-Location
+      exit 1
+    }
+    npm link --silent 2>&1 | Out-Null
+    if ($LASTEXITCODE -ne 0) {
+      Write-Host "npm link failed. You may need elevated permissions." -ForegroundColor Red
+      Pop-Location
+      exit 1
+    }
+    Pop-Location
+    try {
+      $rtVersion = seyola-runtime --version 2>&1
+      Write-Host "  ok ($rtVersion, bundled)" -ForegroundColor Green
+      $rtFound = $true
+    } catch {
+      Write-Host "  installed but seyola-runtime still not on PATH. Open a new terminal and rerun." -ForegroundColor Red
+      exit 1
+    }
+  } else {
+    Write-Host "  no bundled runtime found at .seyola/runtime/dist/." -ForegroundColor Red
+    Write-Host "  Reach out to the Seyola maintainer for an updated bundle that includes the runtime."
+    exit 1
+  }
+}
+
+# 4. Run init against this folder.
+$workspace = (Get-Location).Path
+$pack = Join-Path $workspace ".seyola/pack"
+Write-Host ""
+Write-Host "Initializing workspace at $workspace" -ForegroundColor Cyan
+seyola-runtime init --workspace "$workspace" --pack "$pack"
+if ($LASTEXITCODE -ne 0) {
+  Write-Host "init failed. See output above." -ForegroundColor Red
+  exit 1
+}
+
+# 5. Run doctor.
+Write-Host ""
+Write-Host "Running health check..." -ForegroundColor Cyan
+seyola-runtime doctor --workspace "$workspace"
+
+Write-Host ""
+Write-Host "Setup complete." -ForegroundColor Green
+Write-Host ""
+Write-Host "Next steps:"
+Write-Host "  1. Run: claude"
+Write-Host "  2. Type: /linkedin-writer"
+Write-Host ""
+Write-Host "See GETTING-STARTED.md for the full first-run flow."
+Write-Host ""
+`;
+}
+function setupCmd() {
+    return `@echo off
+REM Seyola Client Alpha - Windows convenience wrapper.
+REM
+REM Why this file exists:
+REM   When you download Seyola as a zip from GitHub, Windows marks every
+REM   file inside as "potentially unsafe" (zone marker). PowerShell's
+REM   default execution policy then refuses to run setup.ps1 directly.
+REM   This wrapper invokes PowerShell with -ExecutionPolicy Bypass so the
+REM   setup runs without changing your global PowerShell settings.
+REM
+REM How to run:
+REM   - Double-click setup.cmd, OR
+REM   - From cmd / PowerShell, type: setup.cmd
+REM
+REM Either way, it calls setup.ps1 with the right policy flag.
+
+powershell -NoProfile -ExecutionPolicy Bypass -File "%~dp0setup.ps1" %*
+exit /B %ERRORLEVEL%
+`;
+}
+function setupBash() {
+    return `#!/usr/bin/env bash
+# Seyola Client Alpha — setup script (mac/linux)
+# Run from inside the bundle folder: ./setup.sh
+
+set -e
+
+echo ""
+echo "Seyola Client Alpha setup"
+echo "========================="
+echo ""
+
+# 1. Node check
+printf "Checking Node.js... "
+if ! command -v node >/dev/null 2>&1; then
+  echo "FAIL"
+  echo "  Node.js is not installed or not on PATH."
+  echo "  Install Node 20+ from https://nodejs.org/, then rerun this script."
+  exit 1
+fi
+NODE_VERSION=$(node --version)
+NODE_MAJOR=$(echo "$NODE_VERSION" | sed 's/v\\([0-9]*\\).*/\\1/')
+if [ "$NODE_MAJOR" -lt 20 ]; then
+  echo "FAIL"
+  echo "  Node.js 20 or higher is required. Found: $NODE_VERSION"
+  echo "  Install Node 20+ from https://nodejs.org/, then rerun this script."
+  exit 1
+fi
+echo "ok ($NODE_VERSION)"
+
+# 2. Claude Code check
+printf "Checking Claude Code... "
+if command -v claude >/dev/null 2>&1; then
+  CLAUDE_VERSION=$(claude --version 2>&1 || echo "unknown")
+  echo "ok ($CLAUDE_VERSION)"
+else
+  echo "WARN"
+  echo "  Claude Code is not detected on PATH."
+  echo "  Install from https://claude.com/claude-code, authenticate (run claude once), then rerun this script."
+  echo "  Continuing anyway."
+fi
+
+# 3. seyola-runtime check (global first, bundled fallback)
+printf "Checking seyola-runtime... "
+if command -v seyola-runtime >/dev/null 2>&1; then
+  RT_VERSION=$(seyola-runtime --version 2>&1)
+  echo "ok ($RT_VERSION, global)"
+else
+  echo "not on PATH; trying bundled runtime..."
+  BUNDLED_RUNTIME="$(pwd)/.seyola/runtime"
+  if [ -f "$BUNDLED_RUNTIME/dist/cli/index.js" ]; then
+    echo "Installing bundled runtime from .seyola/runtime/ ..."
+    (cd "$BUNDLED_RUNTIME" && npm install --omit=dev --silent && npm link --silent)
+    if ! command -v seyola-runtime >/dev/null 2>&1; then
+      echo "  installed but seyola-runtime still not on PATH. Open a new terminal and rerun."
+      exit 1
+    fi
+    RT_VERSION=$(seyola-runtime --version 2>&1)
+    echo "  ok ($RT_VERSION, bundled)"
+  else
+    echo "  no bundled runtime found at .seyola/runtime/dist/."
+    echo "  Reach out to the Seyola maintainer for an updated bundle that includes the runtime."
+    exit 1
+  fi
+fi
+
+# 4. Run init.
+WORKSPACE=$(pwd)
+PACK="$WORKSPACE/.seyola/pack"
+echo ""
+echo "Initializing workspace at $WORKSPACE"
+seyola-runtime init --workspace "$WORKSPACE" --pack "$PACK"
+
+# 5. Run doctor.
+echo ""
+echo "Running health check..."
+seyola-runtime doctor --workspace "$WORKSPACE"
+
+echo ""
+echo "Setup complete."
+echo ""
+echo "Next steps:"
+echo "  1. Run: claude"
+echo "  2. Type: /linkedin-writer"
+echo ""
+echo "See GETTING-STARTED.md for the full first-run flow."
+echo ""
+`;
+}
+function bundleGitignore() {
+    return `# Member-owned folders. The repo ships empty placeholders (.gitkeep).
+# Member-generated content stays local — never committed, never overwritten.
+_foundations/*
+!_foundations/.gitkeep
+
+market/*
+!market/.gitkeep
+
+clients/*
+!clients/.gitkeep
+
+runs/*
+!runs/.gitkeep
+
+output/*
+!output/.gitkeep
+
+# OS / editor noise
+.DS_Store
+Thumbs.db
+*.swp
+*.swo
+*~
+.idea/
+.vscode/
+
+# Node
+node_modules/
+
+# Misc
+.env
+.env.local
+`;
+}
+function runtimeNote(version) {
+    return `# Runtime placeholder
+
+This bundle does NOT include a built runtime. The setup script assumes \`seyola-runtime\` (v${version} or compatible) is installed globally on the tester's machine via \`npm link\` or a published package.
+
+Setup scripts will fail with a clear instruction if the runtime is missing.
+`;
+}
+function runtimeBundledNote(version) {
+    return `# Bundled runtime (v${version})
+
+This bundle ships a built copy of \`seyola-runtime\` so the tester does not need to clone the runtime source repo separately.
+
+The setup script will:
+1. Check whether \`seyola-runtime\` is already installed globally. If yes, use that.
+2. Otherwise, run \`npm install --omit=dev\` inside this directory and link it.
+
+Contents:
+- \`dist/\` — compiled CLI (TypeScript output).
+- \`package.json\` — declares the dependencies.
+- \`package-lock.json\` — pinned dependency versions.
+
+If you want to update or rebuild the runtime, replace the contents of this directory with a new build artifact and rerun setup.
+`;
+}
+function bundleReadme(packVersion, runtimeVersion, bundleName) {
+    return `# ${bundleName}
+
+Seyola Client Alpha bundle.
+
+- Pack version: ${packVersion}
+- Runtime version: ${runtimeVersion}
+- Channel: alpha
+
+## To use this bundle
+
+The most reliable path on Windows is to clone via git (avoids "downloaded from the internet" zone markers that Smart App Control and PowerShell's execution policy use to block scripts) OR to run the runtime commands directly without a script.
+
+### Path A — Manual commands (most reliable on Windows)
+
+This works around Smart App Control + execution policy entirely. From inside the unzipped folder, in any terminal:
+
+\`\`\`
+seyola-runtime init --workspace . --pack ./.seyola/pack
+seyola-runtime doctor --workspace .
+claude
+\`\`\`
+
+Three commands. \`seyola-runtime\` is an installed Node binary, so Windows Smart App Control doesn't block it.
+
+### Path B — Git clone instead of zip download
+
+\`\`\`
+git clone https://github.com/seyola-community/seyola-paid.git my-seyola
+cd my-seyola
+\`\`\`
+
+Then run Path A's commands, or try the scripts below.
+
+### Path C — Setup scripts (try if A or B felt fiddly)
+
+Scripts inside zips downloaded from GitHub are often blocked by Windows. If they work for you, great:
+
+- **Windows:** double-click \`setup.cmd\`, or run \`setup.cmd\` from any terminal. If blocked: right-click → Properties → Unblock → OK.
+- **PowerShell direct:** \`powershell -ExecutionPolicy Bypass -File .\\setup.ps1\` — bypasses execution policy but NOT Smart App Control.
+- **mac / linux:** \`bash setup.sh\` (no Windows blocking issues).
+
+If Smart App Control or execution policy is still blocking on Windows, fall back to Path A.
+
+The setup script:
+
+1. Checks that Node 20+, Claude Code, and \`seyola-runtime\` are on PATH.
+2. Runs \`seyola-runtime init\` against this folder.
+3. Runs \`seyola-runtime doctor\` to verify health.
+4. Tells you what to do next.
+
+After setup completes successfully:
+
+\`\`\`
+claude
+\`\`\`
+
+Then type \`/linkedin-writer\` in the chat.
+
+For detailed steps and what each folder is for, see \`GETTING-STARTED.md\`.
+
+## What's in this folder
+
+- \`.seyola/\` — system parts. Replaced on update. Do not edit.
+- \`.claude/\` — slash commands and settings. Generated by setup. Do not edit.
+- \`_foundations/\`, \`market/\`, \`clients/\`, \`runs/\`, \`output/\` — yours. Never overwritten on update.
+
+## Health check
+
+Any time:
+
+\`\`\`
+seyola-runtime doctor --workspace .
+\`\`\`
+`;
+}
+function bundleGettingStarted() {
+    return `# Getting Started with Seyola — Client Alpha
+
+This is your Seyola workspace. Everything you create stays here.
+
+## Step 1: Setup
+
+Open this folder in a terminal. The reliable Windows path is to run the runtime commands directly (the setup scripts can be blocked by Windows security on downloaded files — see notes below).
+
+### macOS / Linux
+
+\`\`\`
+bash setup.sh
+\`\`\`
+
+### Windows — recommended path (manual commands, most reliable)
+
+\`\`\`
+seyola-runtime init --workspace . --pack ./.seyola/pack
+seyola-runtime doctor --workspace .
+\`\`\`
+
+Then continue to Step 2.
+
+### Windows — try the script (sometimes works)
+
+Double-click \`setup.cmd\`, or from a terminal:
+
+\`\`\`
+setup.cmd
+\`\`\`
+
+If Windows says "this app was blocked" or "not digitally signed":
+- Right-click \`setup.cmd\` → **Properties** → check **Unblock** → **OK** → double-click again.
+- Or fall back to the manual commands above.
+
+> **Why scripts get blocked on Windows.** Files downloaded inside a zip get tagged as "potentially unsafe" by Windows. PowerShell's execution policy blocks unsigned scripts with that tag, and Windows 11's Smart App Control blocks dangerous file extensions (\`.cmd\`, \`.ps1\`, \`.bat\`) entirely. The manual command path sidesteps all of that — \`seyola-runtime\` is a regular installed Node binary that Windows trusts.
+
+The setup script checks prerequisites and finalizes the workspace. If anything is missing (Node, Claude Code, or the runtime), it tells you exactly what to install.
+
+## Step 2: Open Claude Code
+
+\`\`\`
+claude
+\`\`\`
+
+Claude Code launches in this folder and picks up the slash commands.
+
+## Step 3: Build your voice profile (~30 minutes)
+
+\`\`\`
+/brand-voice
+\`\`\`
+
+Interactive interview. Output: \`_foundations/voice-profile.md\`. Every drafting workflow reads this. Run it first.
+
+## Step 4: Build your audience profile (~20 minutes)
+
+\`\`\`
+/audience-profile-builder
+\`\`\`
+
+Interactive. One profile per session. Output: \`market/audience-profiles/[name].md\`.
+
+## Step 5: Build your story bank (~30-45 minutes)
+
+\`\`\`
+/story-bank-builder
+\`\`\`
+
+Interactive. Surfaces 5-15 signature stories. Output: \`_foundations/story-bank.md\`.
+
+## Step 6: Write a LinkedIn post
+
+\`\`\`
+/linkedin-writer
+\`\`\`
+
+Paste an idea or topic. The runtime drafts ONE post in your voice using the Hell-Heaven-Bridge structure. Outputs land in \`runs/run-YYYY-MM-DD-li<NN>/\` and \`output/socials/\`.
+
+## What's mine vs what's the system
+
+| Folder | Owner | Notes |
+|---|---|---|
+| \`_foundations/\` | yours | Voice profile, story bank. |
+| \`market/\` | yours | Audience profiles, language bank. |
+| \`clients/\` | yours | Per-client engagement folders. |
+| \`runs/\` | yours | Each workflow run gets a folder. |
+| \`output/\` | yours | Final exports. |
+| \`.seyola/\` | system | Replaced on update. Do not edit. |
+| \`.claude/\` | system | Regenerated on update. Do not edit. |
+
+## Health check anytime
+
+\`\`\`
+seyola-runtime doctor --workspace .
+\`\`\`
+
+If anything's wrong, this command tells you what.
+
+## Slash commands available in this Alpha
+
+- \`/brand-voice\`
+- \`/audience-profile-builder\`
+- \`/story-bank-builder\`
+- \`/linkedin-writer\`
+
+That's the complete loop for the Alpha. More workflows ship in later releases.
+
+## When something feels wrong
+
+If a post doesn't sound like you, the most common cause is: the voice profile hasn't been built yet, or the audience profile is missing. Run \`/brand-voice\` and \`/audience-profile-builder\` first; the difference is usually large.
+
+If the wrapper hangs at preflight, check that \`seyola-runtime --version\` works from this folder. If not, rerun the setup script.
+
+## Reporting issues during Alpha
+
+This is a friendly-tester release. If something breaks:
+
+1. Run \`seyola-runtime doctor --workspace .\` and capture the output.
+2. Note which slash command was invoked and what idea/input you provided.
+3. Share both with the developer.
+`;
+}
+function finalize(args, result, start) {
+    result.duration_ms = Date.now() - start;
+    if (args.json) {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+    }
+    else {
+        process.stderr.write(formatHuman(result));
+    }
+    return result;
+}
+function formatHuman(result) {
+    const lines = [];
+    lines.push("");
+    lines.push(`seyola-runtime bundle: status=${result.status}, exitCode=${result.exitCode}`);
+    lines.push(`  bundle_name:     ${result.bundle_name}`);
+    lines.push(`  out:             ${result.out_path}`);
+    lines.push(`  pack:            ${result.pack_path}`);
+    lines.push(`  pack_version:    ${result.pack_version}`);
+    lines.push(`  runtime_version: ${result.runtime_version}`);
+    lines.push(`  duration:        ${result.duration_ms}ms`);
+    if (result.files_written.length > 0) {
+        lines.push("");
+        lines.push("  written:");
+        for (const f of result.files_written)
+            lines.push(`    + ${f}`);
+    }
+    if (result.warnings.length > 0) {
+        lines.push("");
+        lines.push("  warnings:");
+        for (const w of result.warnings)
+            lines.push(`    [${w.code}] ${w.message}`);
+    }
+    if (result.errors.length > 0) {
+        lines.push("");
+        lines.push("  errors:");
+        for (const e of result.errors)
+            lines.push(`    [${e.code}] ${e.message}`);
+    }
+    lines.push("");
+    return lines.join("\n");
+}
+//# sourceMappingURL=index.js.map