@pugi/cli 0.1.0-beta.1 → 0.1.0-beta.100

package/CHANGELOG.md

@@ -0,0 +1,132 @@
+# Changelog
+
+All notable changes to `@pugi/cli` are documented here. The file follows the
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/) convention with newer
+releases listed first. Section format: `## [<version>] - <YYYY-MM-DD>`.
+
+The bundled `pugi release-notes` command parses this file and renders sections
+strictly newer than `~/.pugi/.last-seen-version` after every upgrade.
+
+## [0.1.0-beta.88] - 2026-06-02
+
+### Fixed
+- **Pugi identity intro no longer chants on later turns**. The output gate now
+  strips the canonical long-form intro ("I'm Pugi - your engineering copilot.
+  Tell me what you need...") and its Russian variant on mid-thread replies.
+  Operators were seeing the intro re-emit on turn 2+ after a session-resume
+  or autonomous tick.
+- **Ctrl+C double-press exit guard**. A single Ctrl+C in the REPL no longer
+  kills the CLI. First press prompts "Press Ctrl+C again to exit (within 2s)
+  or any key to continue". Second press within 2s exits cleanly; any other
+  key cancels. Headless mode emits a `session-end` envelope and exits 0.
+- **Persona no longer over-clarifies trivial creative tasks**. Asking for a
+  well-known game / demo / todo app now picks reasonable defaults and starts
+  building in one turn. Ambiguous tasks (auth, deploy targets) still ask
+  ≤ 3 short choices via the `ask_user_question` tool.
+
+### Added
+- **Short-format AskUserQuestion chip renderer**. Up to 3 questions render
+  side-by-side as Ink chips with ▸ default highlight, ↑↓ in-question nav,
+  ←→/Tab between questions, 1-9 jump, [s] skip-with-default, [Esc] cancel,
+  [Enter] commit. Labels truncate at 5 words / 22 chars. Caller can opt
+  into a non-TTY numbered fallback via `forceFallback`.
+
+### Security
+- **npm publish leak-gate hardening**. `prepublishOnly` now runs a
+  banned-string scan against the staged tarball (`tools/scrub/scan-tarball.sh`)
+  covering personal names, competitor refs, internal codenames, engineering
+  provenance, absolute paths, brand legacy, and secret-token shapes.
+  Per-line `[pugi-leak-ok]` allowlist marker for legitimate references;
+  path allowlist for LICENSE / THIRD_PARTY_NOTICES files where MIT requires
+  copyright-holder name. Synthetic injection regression test runs in CI.
+
+### Chore
+- MIT LICENSE copyright holder set to `Pugi.io` (was personal name).
+
+## [0.1.0-beta.26] - 2026-05-27
+
+### Added
+- RAG consumer middleware on admin-api () — XML `<rag-context>`
+ block, persona allowlist (Pugi / Hiroshi / Vera), 2000-token cap,
+ and the Pugi observability stack () shipped earlier today.
+
+### Notes
+- CLI surface unchanged in this bump — the version bump tracks lockstep with
+ the admin-api redeploy so `--version` reflects the live server's
+ feature set during the alpha-7 sprint.
+
+## [0.1.0-beta.23] - 2026-05-27
+
+### Added
+- L30 `pugi theme` + `/theme` — TUI color presets (default / dark / light / colorblind) ().
+- L24 `pugi release-notes` + `/release-notes` — changelog diff after upgrade
+ with `~/.pugi/.last-seen-version` tracking and `--reset` flag ().
+
+### Fixed
+- vim-input — useRef for shadow cursor + pending, lift `onSubmit` out of `setState` ().
+
+## [0.1.0-beta.22] - 2026-05-27
+
+### Added
+- L24 `pugi release-notes` + `/release-notes` — changelog diff after upgrade
+ with `~/.pugi/.last-seen-version` tracking and `--reset` flag.
+- L25 `/onboarding` first-run interactive setup wizard ().
+- L18 output-style presets — voice register dial ().
+- L33 `/stickers` brand-personality gimmick ().
+- L16 `TodoWriteTool` single-in-progress invariant ().
+- L22 `--bare` flag — skip project auto-discovery ().
+- L21 `/feedback` in-CLI collector.
+- L20 `/share` session transcript export.
+
+### Fixed
+- P1 stickers await + style buffered output + todo-write zod parse ().
+
+## [0.1.0-beta.21] - 2026-05-27
+
+### Added
+- L7 `/plan` quick mode-switch + one-shot dispatch ().
+- L31 tool retry budget per command ().
+- L19 `/cost` + `/usage` token + dollar accounting ().
+- L34 `pugi status` — session snapshot ().
+- L11 `DenialTrackingState` model-facing denial aggregate ().
+- L6 permission modes — canonical 4-mode gate ().
+- L8 `/compact` command + auto-trigger + boundary marker ().
+- L17 `pugi doctor` — environment health report ().
+- L13 `/mcp remove` + `doctor` + `logs` + `restart` subcommands ().
+- L3 internal underscore-prefix tool-arg convention ().
+- L2 `z.strictObject` all tool schemas + revert beta.17 aliases ().
+- L5 `AskUserQuestionTool` structured multi-choice — kills fake-dispatch ().
+- L1 stale-read gate — reject `FileEdit` if file changed since last read ().
+
+### Fixed
+- Pugi-review per-file chunking — unblock multi-file diffs (Anvil HTTP 400) ().
+- Privacy `PiiScrubberService` regex fallback + `@Inject` DI fix ().
+
+## [0.1.0-beta.20] - 2026-05-26
+
+### Added
+- Pugi codegen real dispatch — Pugi actually writes files instead of describing
+ them ().
+- Live agent progress display — `pugi jobs --watch` (CC compact style) ().
+- PAVF-7 `pugi report --from-error` — field bug capture ().
+- Opensource template fetch + bundled starters — не reinventing ().
+
+### Fixed
+- Dialog quality — RU mirror + brevity + memory + force dispatch + render ().
+- Pugi anti-greenfield + anti-emoji discipline rules ().
+- Persona output gate — Pugi strip + fake-dispatch detector (P0) ().
+
+## [0.1.0-beta.19] - 2026-05-26
+
+### Added
+- Pugi-review batch review followups — silent PASS + safeGit split + quota
+ migration + cleanup dead code ().
+
+### Fixed
+- Replace CJS `require()` в ESM bundle — bare REPL crash on beta.16 ().
+
+## [0.1.0-beta.18] - 2026-05-26
+
+### Added
+- Initial public beta of `@pugi/cli` with REPL, dispatch, sync, review, and
+ doctor surfaces. Establishes the baseline for the leak-parity sprint.

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Yurii Bulakh
+Copyright (c) 2026 Pugi.io
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,23 +1,65 @@
 # Pugi CLI
 
 `pugi` — terminal-native software execution system. Run agents on your repo,
-hand jobs off to the cabinet or a remote runner, and keep every artifact local
-by default.
+hand jobs off to the Pugi Console or a remote runner, and keep every artifact
+local by default.
+
+Current published version: **`@pugi/cli@0.1.0-beta.99`** (2026-06-05).
 
 - **Local-first.** Every plan, diff, and artifact lives under `.pugi/` in your
   repo. Nothing leaves the machine unless you explicitly run `pugi handoff` or
   `pugi sync`.
+- **REPL-default.** Type `pugi` with no arguments and you drop into an
+  engine-backed chat REPL that can write files, start dev servers, probe
+  health, and run tests against real evidence (beta.96+).
 - **Web continuation.** When a job needs collaboration, an approval, or a clean
-  Linux runner, hand it off to the cabinet at `app.pugi.io`.
+  Linux runner, hand it off to the Console at `app.pugi.io`.
 - **One CLI, three install paths.** npm, Homebrew tap, and a one-liner shell
   script.
 
+## Recent shipped (beta.94 → beta.99)
+
+- **REPL as first-class engine path** (beta.96, PR A). REPL chat goes through
+  the Pugi engine loop, advertises tools, writes files on disk.
+- **Phase 1 runtime primitives** (beta.97, ): `server_start`,
+  `server_stop`, `server_health`, `server_logs`, `http_request` available in
+  the tool surface so the agent can prove a server is up (pid + health 200)
+  rather than narrating it.
+- **Conversation-aware artifact intent** (beta.97, ). Multi-turn
+  confirmation triggers auto-dispatch; the agent stops asking "should I?" mid
+  build.
+- **Multi-turn context threading** (beta.98, PR C). REPL `dispatchBrief`
+  threads recent turns to the engine bridge; engine budget bumped к 400K.
+- **Budget cap removed** (beta.99). 120K cap retired in favour of the
+  Claude/Codex/Aider auto-compact pattern. Effective ceiling is now 5M tokens
+  on the long-context lane.
+- **Verification gate** (beta.94, ). Failing `npm test` propagates
+  `exit != 0` and forces `status != done`. No more "fake green" completions.
+
+## Coming next (open PRs, awaiting merge as of 2026-06-05)
+
+- **LLM-summary auto-compact** (PR E #916). REPL session history is summarized
+  via Gemini Flash on the Anvil gateway before re-entering the context window,
+  so long sessions stay coherent instead of getting truncated.
+- **Obsidian-style notes** (PR F #918). Every session writes to
+  `.pugi/notes/<session-id>.md`, per-file notes to `.pugi/notes/files/<path>.md`,
+  and a daily journal entry to `.pugi/journal/YYYY-MM-DD.md`. Backed by
+  Obsidian-compatible wiki-link syntax.
+- **`/servers` slash command** (PR H #919). List and kill dev servers spawned
+  via `server_start` from the REPL. `/servers` prints the running set,
+  `/servers stop <jobId>` terminates one.
+- **USD + English defaults for generated apps** (PR I #920). When you brief the
+  agent in Russian or any other locale, generated UIs default к **English text
+  + USD prices** unless you explicitly say "target market is X" in the brief.
+  Eliminates the "₽ rubles in a UI for US customers" regression. Pair with the
+  `/servers stop` hint в the `code` / `build` / `fix` prompts.
+
 ## Install
 
 ### npm (works everywhere with Node 20+)
 
 ```bash
-npm install -g pugi
+npm install -g @pugi/cli
 pugi --version
 ```
 
@@ -29,7 +71,7 @@ pugi --version
 ```
 
 The formula declares a Node 20+ runtime dependency and downloads the published
-npm tarball, so the result is identical to `npm install -g pugi`.
+npm tarball, so the result is identical to `npm install -g @pugi/cli`.
 
 ### One-liner (curl)
 
@@ -38,8 +80,8 @@ curl -fsSL https://pugi.dev/install | sh
 ```
 
 The script detects your OS (Darwin / Linux), bootstraps Node 20+ via Homebrew
-or `apt` if it is missing, and then runs `npm install -g pugi`. It prints the
-installed version on success and exits non-zero on any failure. The script
+or `apt` if it is missing, and then runs `npm install -g @pugi/cli`. It prints
+the installed version on success and exits non-zero on any failure. The script
 itself is served from `pugi.dev`; review it at `https://pugi.dev/install` or
 in `apps/admin-api/public/install.sh` before piping into a shell.
 
@@ -143,15 +185,15 @@ returns `status: blocked, reason: sync_upload_not_implemented`).
 ## Updating
 
 ```bash
-npm install -g pugi@latest      # if you installed via npm
-brew upgrade pugi                # if you installed via Homebrew
-curl -fsSL https://pugi.dev/install | sh   # one-liner re-run is idempotent
+npm install -g @pugi/cli@latest             # if you installed via npm
+brew upgrade pugi                           # if you installed via Homebrew
+curl -fsSL https://pugi.dev/install | sh    # one-liner re-run is idempotent
 ```
 
 ## Uninstall
 
 ```bash
-npm uninstall -g pugi
+npm uninstall -g @pugi/cli
 # or
 brew uninstall pugi
 ```

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,40 @@
+# Third-Party Notices
+
+`@pugi/cli` bundles default skill content from third parties on `pugi init`.
+Each entry below carries the full upstream MIT license text required for
+redistribution.
+
+## mattpocock/skills
+
+Pugi bundles the following skill bodies (ported, attribution preserved in
+each `SKILL.md` header) from https://github.com/mattpocock/skills:
+
+- `zoom-out` — `skills/engineering/zoom-out/SKILL.md`
+- `diagnose` — `skills/engineering/diagnose/SKILL.md`
+- `grill-me` — `skills/productivity/grill-me/SKILL.md`
+
+Upstream license follows verbatim.
+
+---
+
+MIT License
+
+Copyright (c) 2026 Matt Pocock
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/assets/pugi-mascot.ansi

@@ -1,41 +1,16 @@
-[?25l▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
-▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
+[?25l                              
+                              
+                              
+        ▄▄▄▄▄▄▄▄▄▄▄▄▄▄        
+       ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄       
+       ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄       
+         ▄▄▄▄▄▄▄▄▄▄▄▄         
+         ▄▄▄▄▄▄▄▄▄▄▄▄         
+          ▄▄▄▄▄▄▄▄▄▄▄         
+            ▄▄▄▄▄▄            
+       ▄▄▄▄   ▄▄              
+       ▄     ▄ ▄▄▄            
+               ▄              
+                              
+                              
 [?25h

package/assets/pugi-prozr2-mascot.ansi

@@ -0,0 +1,9 @@
+[?25l                
+                
+    ▄▄▄▄▄▄▄▄    
+     ▄▄▄▄▄▄     
+     ▄▄▄▄▄▄     
+    ▄▄          
+        ▄       
+                
+[?25h

package/bin/run.js

@@ -1,2 +1,34 @@
 #!/usr/bin/env node
-import '../dist/index.js';
+// 2026-05-27 — silence the noisy `node:sqlite` ExperimentalWarning.
+// Node 22.x prints a multi-line warning the first time any consumer
+// imports `node:sqlite` (see core/repl/store/session-store.ts). CEO has
+// pinged this surface twice now ("(node:XXXXX) ExperimentalWarning:
+// SQLite is an experimental feature and might change at any time" +
+// trace-warnings hint). Hiding it cleanly requires a tap on
+// process.emitWarning BEFORE any module loads the sqlite binding —
+// hence wiring it here in the binary entry, not deep inside the CLI.
+//
+// We allowlist only the exact sqlite warning + leave every other
+// runtime warning (deprecation, security, custom code paths) intact.
+// Operator can still re-enable the noise by exporting
+// PUGI_SHOW_EXPERIMENTAL_WARNINGS=1 — useful when debugging a node
+// version bump that might surface a new experimental flag we should
+// notice.
+if (!process.env.PUGI_SHOW_EXPERIMENTAL_WARNINGS) {
+  const originalEmit = process.emit;
+  process.emit = function patchedEmit(name, ...args) {
+    if (name === 'warning') {
+      const w = args[0];
+      const isSqliteExperimental =
+        w &&
+        typeof w === 'object' &&
+        w.name === 'ExperimentalWarning' &&
+        typeof w.message === 'string' &&
+        /SQLite is an experimental feature/i.test(w.message);
+      if (isSqliteExperimental) return false;
+    }
+    return originalEmit.call(this, name, ...args);
+  };
+}
+
+import('../dist/index.js');

package/dist/commands/deploy.js

@@ -1,27 +1,27 @@
 /**
- * `pugi deploy` command surface — Wave 3 P2 (Task #34, 2026-05-25).
+ * `pugi deploy` command surface — P2 (Task #34).
  *
  * Subcommands:
- *   pugi deploy --target vercel <vercelProject> [--project <id>] [--ref <ref>] [--target-env production|preview] [--integration <id>]
- *   pugi deploy --target render <renderService> [--project <id>] [--ref <ref>]
- *   pugi deploy --status <deployment-id>
- *   pugi deploy --logs <deployment-id> [--tail]
+ *  pugi deploy --target vercel <vercelProject> [--project <id>] [--ref <ref>] [--target-env production|preview] [--integration <id>]
+ *  pugi deploy --target render <renderService> [--project <id>] [--ref <ref>]
+ *  pugi deploy --status <deployment-id>
+ *  pugi deploy --logs <deployment-id> [--tail]
  *
  * Exit codes (per task spec):
- *   0   success (trigger queued, status terminal=ready, logs printed)
- *   1   deployment failed (status=error or trigger refused)
- *   2   transient (rate-limited, runtime down, retry-safe)
+ *  0  success (trigger queued, status terminal=ready, logs printed)
+ *  1  deployment failed (status=error or trigger refused)
+ *  2  transient (rate-limited, runtime down, retry-safe)
  *
  * Project resolution:
- *   `--project <id>` is required for trigger commands because the CLI's
- *   credential store is tenant-scoped but not project-scoped. A future
- *   sprint (Wave 4) auto-detects the project from `.pugi/settings.json`
- *   bound to the workspace; until then the operator passes it explicitly.
+ *  `--project <id>` is required for trigger commands because the CLI's
+ *  credential store is tenant-scoped but not project-scoped. A future
+ *  sprint auto-detects the project from `.pugi/settings.json`
+ *  bound to the workspace; until then the operator passes it explicitly.
  *
- * Local-first invariant (ADR-0037):
- *   `pugi deploy` does NOT read repository files. The Vercel deploy
- *   resolves source from the existing ProjectGitBinding row on the
- *   admin-api side — the CLI is only a request initiator + status poller.
+ * Local-first invariant :
+ *  `pugi deploy` does NOT read repository files. The Vercel deploy
+ *  resolves source from the existing ProjectGitBinding row on the
+ *  admin-api side — the CLI is only a request initiator + status poller.
  */
 import { fetchDeployStatus, fetchDeployLogs, submitDeployTrigger, } from '@pugi/sdk';
 /**
@@ -143,26 +143,26 @@ export function parseDeployArgs(args) {
 export function usage() {
     return [
         'Usage:',
-        '  pugi deploy --target vercel <vercelProject> --project <id> [--target-env production|preview] [--ref <git-ref>] [--integration <id>]',
-        '  pugi deploy --target render <renderService> --project <id> [--ref <git-ref>]',
-        '  pugi deploy --status <deployment-id>',
-        '  pugi deploy --logs <deployment-id> [--tail]',
+        ' pugi deploy --target vercel <vercelProject> --project <id> [--target-env production|preview] [--ref <git-ref>] [--integration <id>]',
+        ' pugi deploy --target render <renderService> --project <id> [--ref <git-ref>]',
+        ' pugi deploy --status <deployment-id>',
+        ' pugi deploy --logs <deployment-id> [--tail]',
         '',
         'Flags:',
-        '  --target vercel|render    Provider to deploy to.',
-        '  --project <id>            Pugi project id (required for trigger).',
-        '  --ref <git-ref>           Optional Git ref. Defaults to the binding default branch.',
-        '  --target-env production|preview',
-        '                            Vercel deploy environment. Defaults to production.',
-        '  --integration <id>        Disambiguate when multiple integrations are active.',
-        '  --status <id>             Show the current status for a deployment.',
-        '  --logs <id> [--tail]      Fetch log tail. With --tail, polls until terminal.',
-        '  --json                    Emit machine-readable JSON envelopes.',
+        ' --target vercel|render   Provider to deploy to.',
+        ' --project <id>           Pugi project id (required for trigger).',
+        ' --ref <git-ref>          Optional Git ref. Defaults to the binding default branch.',
+        ' --target-env production|preview',
+        '                           Vercel deploy environment. Defaults to production.',
+        ' --integration <id>       Disambiguate when multiple integrations are active.',
+        ' --status <id>            Show the current status for a deployment.',
+        ' --logs <id> [--tail]     Fetch log tail. With --tail, polls until terminal.',
+        ' --json                   Emit machine-readable JSON envelopes.',
         '',
         'Exit codes:',
-        '  0  success',
-        '  1  deployment failed / refused',
-        '  2  transient (rate-limited, runtime down, retry-safe)',
+        ' 0 success',
+        ' 1 deployment failed / refused',
+        ' 2 transient (rate-limited, runtime down, retry-safe)',
     ].join('\n');
 }
 /**
@@ -418,16 +418,16 @@ function statusToExitCode(status) {
 function renderStatusTable(response, context) {
     const lines = [];
     lines.push(context === 'queued' ? 'Deployment queued.' : 'Deployment status:');
-    lines.push(`  id:                  ${response.id}`);
-    lines.push(`  provider:            ${response.provider}`);
-    lines.push(`  project:             ${response.projectId}`);
-    lines.push(`  status:              ${response.status}`);
+    lines.push(` id:                 ${response.id}`);
+    lines.push(` provider:           ${response.provider}`);
+    lines.push(` project:            ${response.projectId}`);
+    lines.push(` status:             ${response.status}`);
     if (response.url)
-        lines.push(`  url:                 ${response.url}`);
+        lines.push(` url:                ${response.url}`);
     if (response.providerDeploymentId)
-        lines.push(`  providerDeploymentId: ${response.providerDeploymentId}`);
-    lines.push(`  createdAt:           ${response.createdAt}`);
-    lines.push(`  updatedAt:           ${response.updatedAt}`);
+        lines.push(` providerDeploymentId: ${response.providerDeploymentId}`);
+    lines.push(` createdAt:          ${response.createdAt}`);
+    lines.push(` updatedAt:          ${response.updatedAt}`);
     if (response.error) {
         lines.push('');
         lines.push('--- build error tail ---');