@patze/code-cli 0.10.2

package/docs/beta-feedback-template.md

@@ -0,0 +1,75 @@
+# Beta feedback template
+
+Copy into your issue or team channel. **Redact secrets before sending.**
+
+---
+
+## Summary
+
+One-line description of the problem or suggestion.
+
+## Environment
+
+| Field | Value |
+|-------|-------|
+| `@patze/code-cli` version | `patze --version` output |
+| Node.js | `node --version` |
+| OS | e.g. Linux WSL2, macOS 14, Windows 11 |
+| Install method | npm `@beta` / local tarball / `npm link` |
+
+## Command / flow
+
+What you ran (exact command or slash sequence):
+
+```text
+(paste commands — no secrets)
+```
+
+## Trust-loop step
+
+Where in the loop did behavior diverge?
+
+- [ ] prompt / agent loop
+- [ ] inspect / plan / diff
+- [ ] permissions / approve
+- [ ] apply (typed confirmation)
+- [ ] verify / drift recovery
+- [ ] status / doctor / other CLI
+
+## Expected vs actual
+
+**Expected:**
+
+**Actual:**
+
+## Redacted diagnostics
+
+```text
+patze doctor
+(paste output — should already mask tokens)
+
+patze status
+(optional — redact any remaining sensitive lines)
+```
+
+## Logs
+
+Paste relevant stderr/stdout. Replace tokens with `<redacted>`.
+
+## Safety concern?
+
+- [ ] No
+- [ ] Yes — describe (unexpected write, bypass gate, secret leak, etc.)
+
+## Repro steps
+
+1.
+2.
+3.
+
+## Severity
+
+- [ ] Blocker — cannot test trust loop
+- [ ] Major — workaround exists
+- [ ] Minor — UX / docs
+- [ ] Enhancement — post-beta

package/docs/beta-feedback-triage.md

@@ -0,0 +1,169 @@
+# Beta feedback triage — @patze/code-cli@0.10.2
+
+Use this when sorting tester reports. Pair with [`beta-feedback-template.md`](beta-feedback-template.md) for submission format.
+
+**Principle:** trust loop and safety posture are fixed for 0.10.x beta — triage separates real defects from expected limitations and install/auth noise.
+
+---
+
+## Redaction (always enforce)
+
+Before filing or forwarding any report:
+
+| Never paste | Use instead |
+|-------------|-------------|
+| Full `PATZE_CODE_TOKEN` / API keys | `<redacted>` |
+| Raw `patze login` arguments | "configured via login" |
+| Unmasked artifact digests | Masked form only (`artifa…xxxx`) |
+| Home paths with usernames | `~` paths or "WSL/Linux" |
+| Internal URLs with embedded creds | Hostname only |
+
+Preferred diagnostics: `patze doctor` (masks tokens by default), then `patze status`.
+
+---
+
+## Severity levels
+
+| Level | Definition | Response SLA (internal) |
+|-------|------------|-------------------------|
+| **P0 — Safety** | Unexpected write, gate bypass, secret leak, auto-apply | Stop beta; hotfix or rollback `@beta` tag |
+| **P1 — Blocker** | Cannot complete trust loop in temp git repo | Fix before expanding beta |
+| **P2 — Major** | Trust loop works with painful workaround | Next patch (`0.10.x`) |
+| **P3 — Minor** | UX/copy/docs confusion | Batch with feedback |
+| **P4 — Expected** | Matches known limitations | Close as expected; improve docs if repeated |
+| **P5 — Enhancement** | Post-beta feature request | Backlog; do not implement during beta |
+
+---
+
+## Categories
+
+### 1. Install issue
+
+**Signals:** `npm install -g @patze/code-cli@beta` fails; wrong version; `patze: command not found`; global prefix permissions.
+
+**Collect:** Node version, OS, install command, npm error (redacted), `npm prefix -g`.
+
+**Common causes:**
+- Package not published / wrong dist-tag → verify `npm view @patze/code-cli@beta version`
+- Node < 20 → upgrade
+- Global npm prefix not on `PATH`
+
+**Not a product bug:** corporate proxy blocking npm (ops/network).
+
+---
+
+### 2. Auth issue
+
+**Signals:** `patze status` / `patze doctor` show `auth: incomplete`; `patze code plan --preview` fails; `doctor --check` skips or fails health.
+
+**Collect:** Redacted `patze doctor`, whether env vs `patze login`, API host (no token).
+
+**Expected (P4):**
+- `patze status` **exit 1** before login — **normal**
+- `patze doctor` **exit 1** when auth incomplete but package health ok — **normal**
+
+**Real bug (P1–P2):** token configured but still incomplete; health probe leaks token; login writes wrong path.
+
+---
+
+### 3. Trust-loop issue (non-apply)
+
+**Signals:** `/goal`, `/plan`, `/diff`, `/permissions`, `/approve` behave unexpectedly; agent loop errors; wrong session state.
+
+**Collect:** Slash sequence, permission mode, redacted `/status` or `/context`, trust-loop step checkbox from template.
+
+**Check first:**
+- Was `/diff` run before `/approve`?
+- Permission mode `suggest` vs `edit-with-approval`?
+- Server auth required for `/plan` server preview?
+
+---
+
+### 4. Apply / verify issue
+
+**Signals:** `/apply` confirmation fails; wrong files touched; `/verify` false pass/fail; drift recovery stuck.
+
+**Collect:** Permission mode, whether typed `APPLY <masked-digest>` exact, file paths (relative), `/verify` output, manual edits for drift tests.
+
+**Expected (P4):**
+- `patze code apply` disabled — **by design**
+- No `--yes` — **by design**
+- Verify is hash-only — no npm test
+
+**Safety (P0):** apply without confirmation; apply outside workspace; gate bypass after verify fail.
+
+---
+
+### 5. Docs confusion
+
+**Signals:** tester expected OAuth, runs sync, shell verify, persistent session, or non-interactive apply.
+
+**Action:** Point to [`known-limitations.md`](known-limitations.md); if repeated, improve README/install-beta (P3).
+
+---
+
+### 6. Expected limitation
+
+**Close as P4** when report matches [`known-limitations.md`](known-limitations.md):
+
+| Report | Verdict |
+|--------|---------|
+| OAuth / dashboard login missing | Expected |
+| `patze runs` not implemented | Expected |
+| Session lost on restart | Expected |
+| Shell verify not run | Expected |
+| `full-auto` refused | Expected (forbidden) |
+| Non-interactive apply disabled | Expected |
+
+---
+
+### 7. Safety concern
+
+**Always P0 until disproved.**
+
+Examples: secret in logs, unexpected file write, auto-apply, `--yes` path, verify spawning shell, digest/token printed in full.
+
+**Action:** reproduce in temp repo → rollback `@beta` if confirmed → patch before continued beta.
+
+---
+
+## Triage workflow
+
+```text
+1. Redact report (reject if secrets present — ask tester to resubmit)
+2. Assign category (one primary)
+3. Assign severity (P0–P5)
+4. Reproduce in temp git repo with @patze/code-cli@beta
+5. If P4 → reply with known-limitation link
+6. If P0–P2 → file issue + owner + target patch
+7. If P5 → backlog (post-beta feedback window)
+```
+
+---
+
+## Quick repro commands (maintainer)
+
+```bash
+mkdir ~/patze-triage-test && cd ~/patze-triage-test && git init
+npm install -g @patze/code-cli@beta
+patze --version
+patze doctor          # expect exit 1 without auth; dist_main ok
+patze status || true  # expect exit 1 without auth
+patze code apply      # must say disabled
+patze                 # trust loop manual
+```
+
+Tarball fallback if registry unavailable:
+
+```bash
+npm install -g ./patze-code-cli-0.10.2.tgz
+```
+
+---
+
+## Related docs
+
+- Submit: [`beta-feedback-template.md`](beta-feedback-template.md)
+- Tester checklist: [`beta-tester-checklist.md`](beta-tester-checklist.md)
+- Publish/rollback: [`beta-release-handoff.md`](beta-release-handoff.md)
+- Limits: [`known-limitations.md`](known-limitations.md)

package/docs/beta-release-handoff.md

@@ -0,0 +1,182 @@
+# Beta release handoff — @patze/code-cli@0.10.2
+
+**Audience:** maintainers publishing `@beta` and 2–3 internal testers.  
+**Safety:** trust loop unchanged from 0.10.1 — no new mutation paths.
+
+---
+
+## Readiness (maintainer pre-flight)
+
+Run from `packages/patze-code-cli`:
+
+```bash
+npm run verify
+npm pack --dry-run
+```
+
+Expected:
+
+- `VERSION` = `package.json` = **0.10.2**
+- **93/93** tests, smoke OK, verify-pack OK (~266 files, ~94 KB packed)
+- No `src/`, `tests/`, `.cookbook-vendor` in tarball
+- Secret scan clean (no raw tokens, home paths, bearer strings in publish tree)
+
+---
+
+## Publish
+
+```bash
+cd packages/patze-code-cli
+npm run verify
+npm publish --tag beta
+```
+
+Confirm dist-tag:
+
+```bash
+npm view @patze/code-cli dist-tags
+npm view @patze/code-cli@beta version   # expect 0.10.2
+```
+
+**Do not** publish as `latest` until release blockers in README are cleared.
+
+---
+
+## Rollback / recovery
+
+npm **cannot reliably unpublish** after 72h; prefer **dist-tag move**, not delete.
+
+| Action | Command |
+|--------|---------|
+| Point `@beta` back to prior version | `npm dist-tag add @patze/code-cli@0.10.1 beta` |
+| Remove bad tag from a version | `npm dist-tag rm @patze/code-cli@0.10.2 beta` |
+| Tester reinstall after rollback | `npm install -g @patze/code-cli@beta` |
+
+Tarball handoff (no registry):
+
+```bash
+npm pack
+# share patze-code-cli-0.10.2.tgz
+npm install -g ./patze-code-cli-0.10.2.tgz
+```
+
+---
+
+## Tester install
+
+```bash
+npm install -g @patze/code-cli@beta
+# or pinned:
+npm install -g @patze/code-cli@0.10.2
+
+patze --version
+patze doctor
+patze status    # exit 1 without auth is EXPECTED
+```
+
+Optional auth (env — never paste into issues):
+
+```bash
+export PATZE_CODE_API=https://api.example.com
+export PATZE_CODE_TOKEN=<internal-api-key>
+export PATZE_CODE_USER_ID=<user-uuid>
+patze status --check
+patze doctor --check
+```
+
+Uninstall: `npm uninstall -g @patze/code-cli` — see `docs/uninstall-reset.md`.
+
+---
+
+## Short tester checklist (2–3 people)
+
+### A. Read-only (5 min)
+
+Use a **temp git repo** only:
+
+```bash
+mkdir ~/patze-beta-test && cd ~/patze-beta-test && git init
+patze doctor
+patze status          # expect exit 1 if no auth — OK
+patze code inspect
+patze goal "smoke" --dry-run
+patze code apply      # must say disabled
+```
+
+### B. Trust loop (15 min, temp repo)
+
+```bash
+patze
+```
+
+Run: `/goal` → `/plan` → `/diff` → `/permissions suggest` → `/approve` → `/permissions edit-with-approval` → `/apply` → type `APPLY <masked-digest>` → `/verify` → `/status`.
+
+Optional: edit file after apply → `/verify` fails → `/apply` blocked until `/reject` or fix + verify pass.
+
+### C. Report back
+
+Copy template: `docs/beta-feedback-template.md`
+
+**Include:**
+
+- `patze --version`, `node --version`, OS
+- `patze doctor` output (already redacted)
+- Trust-loop step where behavior differed
+- Redacted stderr if any
+
+**Do NOT paste:**
+
+- Full `PATZE_CODE_TOKEN` or API keys
+- Unmasked artifact digests
+- Raw `patze login` arguments
+- Internal URLs with embedded credentials
+
+---
+
+## Expected non-failures (not bugs)
+
+| Symptom | Why |
+|---------|-----|
+| `patze status` exit **1** | Auth incomplete before login/env |
+| `patze doctor` exit **1** | Same — auth incomplete |
+| `patze code plan --preview` fails | No auth or API down |
+| `patze code apply` disabled | By design — use `/apply` in shell |
+| `/plan` local-only without auth | By design |
+| Session history lost on restart | In-memory only (known limit) |
+| No npm test from `/verify` | Shell verify not implemented |
+
+Full limits: `docs/known-limitations.md`
+
+---
+
+## Maintainer smoke (post-publish)
+
+```bash
+npm install -g @patze/code-cli@beta
+patze --version
+patze doctor
+patze status || true
+```
+
+Or run repo smoke: `npm run smoke` (includes local pack install).
+
+---
+
+## Publish notes (changelog summary)
+
+**0.10.2** — internal beta rollout assets only:
+
+- `patze doctor [--check]` (read-only diagnostics)
+- Install helper + rollout docs (checklist, feedback template, known limits)
+- No trust-loop or safety posture changes
+
+---
+
+## After beta feedback — recommended next slice
+
+1. **`patze runs` read-only sync** (no mutation; closes biggest “planned” gap)
+2. **OAuth / dashboard login** (replace token paste)
+3. **Session persistence decision** (SQLite vs server transcript)
+4. **Optional gated shell verify** (explicit opt-in only; never default)
+
+Do **not** start with `--yes`, auto-apply, full-auto, SSE, or telemetry until beta trust-loop feedback is collected.

package/docs/beta-tester-checklist.md

@@ -0,0 +1,62 @@
+# Beta tester checklist
+
+Use this before reporting feedback. Safety posture must match **0.10.1+** — no new mutation shortcuts.
+
+## Environment
+
+- [ ] Node 20+ (`node --version`)
+- [ ] `@patze/code-cli` 0.10.x (`patze --version`)
+- [ ] Clean git workspace for apply tests (`git init` in a temp dir is fine)
+- [ ] `patze doctor` — dist ok, trust loop posture lines present
+
+## Read-only smoke (no writes)
+
+```bash
+mkdir -p ~/patze-beta-test && cd ~/patze-beta-test
+git init
+patze status
+patze doctor
+patze code inspect
+patze goal "Review README" --dry-run
+```
+
+Expected: commands complete; auth may show **incomplete** without credentials.
+
+## Interactive trust loop (writes — use temp repo only)
+
+```bash
+patze
+```
+
+| Step | Command | Expected |
+|------|---------|----------|
+| 1 | `/goal Update README quickstart` | Plan text, no file writes |
+| 2 | `/plan` | Preview or local plan |
+| 3 | `/diff` | Unified diff preview |
+| 4 | `/permissions suggest` | Mode set |
+| 5 | `/approve` | Gate opens (no writes) |
+| 6 | `/permissions edit-with-approval` | Apply-capable mode |
+| 7 | `/apply` | Prompts typed confirmation |
+| 8 | `APPLY artifa…xxxx` | Masked digest only |
+| 9 | `/verify` | Hash check pass/fail |
+| 10 | `/status` | Trust-loop snapshot with masked digests |
+
+## Drift recovery (optional)
+
+1. After `/apply`, manually edit an applied file.
+2. `/verify` → should fail.
+3. `/apply` or `/approve` → should block until `/reject` or passing `/verify`.
+
+## Must NOT work (by design)
+
+- [ ] `patze code apply` → disabled message
+- [ ] Non-interactive apply / `--yes` → not supported
+- [ ] `full-auto` permission → forbidden
+- [ ] Verify running shell/npm test → not implemented
+
+## Before filing feedback
+
+- [ ] Run `patze doctor` and copy redacted output
+- [ ] Note trust-loop step where behavior diverged
+- [ ] Use [`beta-feedback-template.md`](beta-feedback-template.md)
+- [ ] Never paste full tokens, API keys, or unmasked digests

package/docs/install-beta.md

@@ -0,0 +1,77 @@
+# Install — internal beta
+
+Audience: Patze team and trusted beta testers. Package: `@patze/code-cli@0.10.x`.
+
+## Prerequisites
+
+- **Node.js 20+**
+- Optional: PatzeAgents API credentials via env (never commit secrets)
+
+## Option A — npm registry (when published)
+
+```bash
+npm install -g @patze/code-cli@beta
+# or pinned:
+npm install -g @patze/code-cli@0.10.2
+```
+
+## Option B — local tarball (maintainers / monorepo)
+
+```bash
+cd packages/patze-code-cli
+./scripts/install-beta.sh local
+```
+
+Manual equivalent:
+
+```bash
+cd packages/patze-code-cli
+npm run build
+npm pack
+npm install -g ./patze-code-cli-0.10.2.tgz
+```
+
+## Option C — development link
+
+```bash
+cd packages/patze-code-cli
+npm run build
+npm link
+```
+
+## Verify install
+
+```bash
+patze --version          # expect @patze/code-cli 0.10.x
+patze status             # auth may be incomplete (exit 1) — OK for first run
+patze doctor             # read-only diagnostics, no network
+patze doctor --check     # optional /health probe (needs auth + api)
+patze                    # interactive shell — trust loop entry
+```
+
+## Optional auth (server preview)
+
+Use env vars — do not paste tokens into issue reports:
+
+```bash
+export PATZE_CODE_API=https://api.example.com
+export PATZE_CODE_TOKEN=<internal-api-key>
+export PATZE_CODE_USER_ID=<user-uuid>
+patze status --check
+```
+
+Or one-time local config:
+
+```bash
+patze login <api-url> <token> <user-uuid>
+```
+
+## Uninstall / reset
+
+See [`uninstall-reset.md`](uninstall-reset.md).
+
+## Related
+
+- [`beta-tester-checklist.md`](beta-tester-checklist.md)
+- [`internal-beta.md`](internal-beta.md)
+- [`known-limitations.md`](known-limitations.md)

package/docs/internal-beta.md

@@ -0,0 +1,84 @@
+# Internal beta — @patze/code-cli
+
+Status: **0.10.x internal beta** (trust loop complete, rollout assets for team feedback)
+
+Audience: Patze team and trusted beta testers only. Not `npm latest` / 1.0.
+
+## Install
+
+Quick path:
+
+```bash
+cd packages/patze-code-cli
+./scripts/install-beta.sh local
+```
+
+Or see [`install-beta.md`](install-beta.md) for npm `@beta`, tarball, and `npm link`.
+
+## Prerequisites
+
+- Node.js **20+**
+- Optional: PatzeAgents API + credentials for server preview (`PATZE_CODE_API`, `PATZE_CODE_TOKEN`, `PATZE_CODE_USER_ID`)
+
+## First run
+
+```bash
+mkdir ~/patze-beta && cd ~/patze-beta
+git init
+
+# Optional auth (replace placeholders — never commit real tokens)
+export PATZE_CODE_API=https://api.example.com
+export PATZE_CODE_TOKEN=<internal-api-key>
+export PATZE_CODE_USER_ID=<user-uuid>
+
+patze doctor
+patze status
+patze code inspect
+patze
+```
+
+Inside interactive shell, exercise the trust loop: `/diff` → `/approve` → `/apply` → `/verify`.
+
+## Beta tester workflow
+
+1. [`beta-tester-checklist.md`](beta-tester-checklist.md) — run through before reporting
+2. [`beta-feedback-template.md`](beta-feedback-template.md) — copy for issues
+3. [`known-limitations.md`](known-limitations.md) — intentional gaps
+4. [`uninstall-reset.md`](uninstall-reset.md) — clean uninstall
+
+## Release verification (maintainers)
+
+```bash
+cd packages/patze-code-cli
+npm run verify          # version + pack audit + typecheck + tests + smoke
+```
+
+See [`release-checklist.md`](release-checklist.md) and [`smoke-command-guide.md`](smoke-command-guide.md).
+
+### Pack audit checks
+
+- **Blocked:** `.cookbook-vendor`, `tests/`, `src/`, secrets-like patterns, full raw digests in publish tree
+- **Required:** core docs + rollout docs (see `scripts/verify-pack.mjs`)
+
+## Known limits (beta)
+
+Full list: [`known-limitations.md`](known-limitations.md)
+
+| Area | Limit |
+|------|-------|
+| Apply history | In-memory, current process only (max 20 records) |
+| Verify | Last apply only; no shell/npm test |
+| Apply | Interactive only; no `--yes` |
+| Runs | `patze runs` planned — not available |
+| OAuth | Dashboard login not implemented |
+| Persistence | No cross-restart session restore |
+
+## Reporting issues
+
+Use [`beta-feedback-template.md`](beta-feedback-template.md). Include `patze doctor` output (redacted by default).
+
+Maintainers: [`beta-release-handoff.md`](beta-release-handoff.md) — publish, rollback, tester checklist. Triage: [`beta-feedback-triage.md`](beta-feedback-triage.md).
+
+## Before npm `latest` / 1.0
+
+See README **Release blockers** section.

package/docs/known-limitations.md

@@ -0,0 +1,62 @@
+# Known limitations — internal beta (0.10.x)
+
+These are **intentional** for the current slice. Do not treat them as bugs unless behavior contradicts this list.
+
+## Authentication
+
+| Limitation | Status |
+|------------|--------|
+| OAuth / dashboard login | **Not implemented** — use `patze login` or env vars |
+| Token refresh | Manual re-login |
+
+## Apply and permissions
+
+| Limitation | Status |
+|------------|--------|
+| Non-interactive apply | **Disabled** — use interactive `/apply` only |
+| `patze code apply` | **Disabled** |
+| `--yes` flag | **Not supported** |
+| `full-auto` permission | **Forbidden permanently** |
+| Auto-apply | **Disabled** |
+
+## Verify
+
+| Limitation | Status |
+|------------|--------|
+| Shell verify (npm test/lint) | **Not implemented** |
+| Network verify | **Not implemented** — local hash check only |
+| `patze code verify` | Help-only summary when no session apply |
+
+## Runs and sync
+
+| Limitation | Status |
+|------------|--------|
+| `patze runs` sync | **Not implemented** |
+| SSE streaming | **Not implemented** |
+| Server execute from CLI | **Not exposed** |
+
+## Session and persistence
+
+| Limitation | Status |
+|------------|--------|
+| Apply history persistence | **In-memory only** (current process, max 20) |
+| Cross-restart session restore | **Not implemented** |
+| Transcript persistence | **Not implemented** |
+
+## Diagnostics
+
+| Capability | Notes |
+|------------|-------|
+| `patze doctor` | Read-only; **no network by default** |
+| `patze doctor --check` | Optional `/health` probe when auth configured |
+
+## Telemetry
+
+| Limitation | Status |
+|------------|--------|
+| Usage telemetry upload | **Not implemented** |
+| Error reporting to server | **Not implemented** |
+
+## Before 1.0 / npm latest
+
+See README **Release blockers** — public publish policy, optional gated shell verify, runs read-only sync, OAuth login, persistence decisions.