@pugi/cli 0.1.0-beta.3 → 0.1.0-beta.30

package/dist/tui/vim-input.js

@@ -0,0 +1,267 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Leak L26 (2026-05-27) — Vim-mode-aware REPL input.
+ *
+ * Thin wrapper that sits BETWEEN the REPL session and the legacy
+ * `InputBox`. When vim mode is off it forwards every prop unchanged
+ * so existing operators see zero behavioural delta. When vim mode is
+ * on it intercepts keystrokes through `useInput` BEFORE Ink's normal
+ * dispatch and either:
+ *
+ *   - in `insert` mode, lets the keystroke fall through to `InputBox`
+ *     so the legacy buffer / cursor / history / palette code stays
+ *     authoritative (we do NOT re-implement insert-mode editing);
+ *   - in `normal` mode, routes the key through `core/vim/keymap.ts`
+ *     and applies the result to a shadow buffer + cursor mirror that
+ *     it then pushes back into `InputBox` via the existing `initial`
+ *     prop on remount.
+ *
+ * Why a wrapper instead of inlining into `InputBox`?
+ *
+ *   - Keeps the legacy input surface untouched for non-vim operators
+ *     (the L26 ship risks zero regression to ~year-old code).
+ *   - The wrapper renders a thin status row ABOVE the input frame so
+ *     the active mode + pending sequence + cheat sheet are visible.
+ *   - Tests can exercise the wrapper without dragging in the full
+ *     ink + clipboard stack of `InputBox` (the spec drives the
+ *     keymap directly; the wrapper is exercised via the runtime
+ *     command tests + manual smoke from the REPL).
+ *
+ * The component intentionally only models the SINGLE-LINE REPL prompt
+ * buffer — that is the surface Claude Code's `/vim` covers, and that
+ * is what the leak research validated. Multi-line + visual-mode +
+ * counts are out of scope for this sprint.
+ *
+ * ─── Closure-staleness contract (post-L26 fix, 2026-05-27) ───
+ *
+ * Three-of-three reviewers flagged the original `setShadowLine`
+ * functional updater for reading `shadowCursor` and `pending` from
+ * the closure, which goes stale across consecutive keystrokes
+ * (React batches dispatch, so the second `d` of `dd` saw the
+ * `pending` value from the render that scheduled the first `d`,
+ * not the post-first-d value). Same problem for cursor advancement
+ * across chained `l`/`h`/`w`/`b` presses.
+ *
+ * Additionally, calling `props.onSubmit` inline inside a setState
+ * updater is double-fired by React strict mode (updaters MUST be
+ * pure — strict mode runs them twice to surface impurity).
+ *
+ * The fix moves shadow cursor + pending + mode into `useRef`
+ * (refs survive across renders, are read synchronously, and are
+ * not subject to closure capture), drives the keymap dispatch
+ * OUTSIDE any setState callback, and defers `props.onSubmit` /
+ * `props.onExit` invocations until AFTER the render via the
+ * `useEffect` queued by toggling a transition ref.
+ *
+ * The `line` state is the only React state we mutate per keystroke
+ * because the inner `InputBox` re-reads it via the `initial` prop
+ * on remount — refs alone cannot trigger that remount. Cursor + mode
+ * + pending are surfaced to the render path through the same
+ * `line`/`tick` rerender, so the status bar stays in sync without
+ * itself being captured by a stale closure.
+ */
+import { useEffect, useRef, useState } from 'react';
+import { Box, Text, useInput } from 'ink';
+import { handleNormalKey, PENDING_NONE, describePending, } from '../core/vim/keymap.js';
+import { InputBox } from './input-box.js';
+/**
+ * Render the mode badge + pending sequence + cheat sheet above the
+ * input frame. Two lines:
+ *
+ *   ─ NORMAL ─ d:                Esc=normal · i=insert · :w=submit · :q=cancel
+ *   ─ INSERT ─                   (mode-specific tail dropped when there's nothing to show)
+ *
+ * Plain ASCII + dim accents to match the rest of the REPL's chrome.
+ */
+function VimStatusBar(props) {
+    const modeLabel = props.mode === 'normal' ? '-- NORMAL --' : '-- INSERT --';
+    const pendingLabel = describePending(props.pending);
+    const hint = props.mode === 'normal'
+        ? 'h/j/k/l move  ·  i/a insert  ·  x del  ·  dd line  ·  :w submit  ·  :q cancel'
+        : 'Esc → normal mode';
+    return (_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", bold: true, children: modeLabel }), pendingLabel.length > 0 ? (_jsxs(_Fragment, { children: [_jsx(Text, { children: " " }), _jsx(Text, { color: "yellow", children: `${pendingLabel}` })] })) : null, _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: hint })] }));
+}
+export function VimInput(props) {
+    const { vimEnabled, initialMode, ...inputBoxProps } = props;
+    // When vim mode is off we DO NOT mount the `useInput` overlay — the
+    // legacy `InputBox` keeps full ownership of the keystrokes and
+    // behaves byte-for-byte the way it always did. This is the same
+    // pattern `output-style` followed (off → pass through; on → activate
+    // the modal surface).
+    if (!vimEnabled) {
+        return _jsx(InputBox, { ...inputBoxProps });
+    }
+    // ─── Render-driving state ─────────────────────────────────────
+    //
+    // `line` + `tick` are the only pieces of state the render path
+    // reads — the inner `InputBox` is remounted on every `tick` bump
+    // so the `initial` prop is honoured. Cursor / pending / mode are
+    // held in refs (see below) and mirrored into render state via the
+    // same setLine/setTick burst at the end of each keystroke so the
+    // status bar stays in lockstep without ever being captured by a
+    // stale closure inside a setState updater.
+    const [line, setLine] = useState(props.initial ?? '');
+    const [mode, setMode] = useState(initialMode ?? 'normal');
+    const [pending, setPending] = useState(PENDING_NONE);
+    const [remountTick, setRemountTick] = useState(0);
+    // ─── Closure-safe scratch refs ────────────────────────────────
+    //
+    // These refs are written synchronously inside the `useInput`
+    // handler and read on the NEXT keystroke. They survive across
+    // renders, are not captured by stale closures, and are NEVER
+    // mutated inside a setState updater — so React strict-mode's
+    // double-invocation cannot corrupt them.
+    //
+    // Why not `useReducer`? A reducer would also see fresh state on
+    // every dispatch, but the keymap result is a tagged union whose
+    // side effects (mode flip, submit, cancel, remount) are easier
+    // to read as imperative steps after the pure `handleNormalKey`
+    // call. Refs keep the dispatcher linear and the diff vs the
+    // pre-fix file minimal.
+    const lineRef = useRef(props.initial ?? '');
+    const cursorRef = useRef(props.initial?.length ?? 0);
+    const pendingRef = useRef(PENDING_NONE);
+    const modeRef = useRef(initialMode ?? 'normal');
+    // Deferred side-effect queue — submit / exit must NOT run inline
+    // inside a setState updater (strict mode double-invokes them).
+    // We stash the payload here and flush it from a `useEffect` after
+    // the render commits.
+    const pendingSubmitRef = useRef(null);
+    const pendingExitRef = useRef(false);
+    const [sideEffectTick, setSideEffectTick] = useState(0);
+    useEffect(() => {
+        // Flush any deferred host callback exactly once per scheduled
+        // burst. The refs are nulled BEFORE the call so a re-entrant
+        // host onSubmit handler that re-renders us cannot re-fire the
+        // same payload.
+        const submit = pendingSubmitRef.current;
+        if (submit !== null) {
+            pendingSubmitRef.current = null;
+            props.onSubmit(submit);
+        }
+        if (pendingExitRef.current) {
+            pendingExitRef.current = false;
+            props.onExit();
+        }
+        // Intentionally only depends on `sideEffectTick`: we want this
+        // effect to fire ONLY when the keystroke handler asked for it
+        // (via setSideEffectTick), not on every prop change.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [sideEffectTick]);
+    useInput((input, key) => {
+        // Esc always returns to normal mode (and clears any pending
+        // sequence). This binding wins over `InputBox`'s own Esc handling
+        // because we own the `useInput` hook earlier in the render tree.
+        if (key.escape) {
+            modeRef.current = 'normal';
+            pendingRef.current = PENDING_NONE;
+            setMode('normal');
+            setPending(PENDING_NONE);
+            return;
+        }
+        // In insert mode we relinquish dispatch entirely so the legacy
+        // input box owns typing / palette / history / clipboard / kill
+        // ring without interference. Returning `undefined` from a
+        // `useInput` callback is a no-op — InputBox's own `useInput` will
+        // receive the same event on the next frame.
+        if (modeRef.current === 'insert')
+            return;
+        // In normal mode we drive the buffer through the keymap.
+        //
+        // CRITICAL: all inputs to `handleNormalKey` are read from refs,
+        // not from the React state closure captured at render time.
+        // This is what makes consecutive keystrokes ("ll", "dd", ":w")
+        // observe the post-previous-keystroke state instead of the
+        // pre-batch render snapshot.
+        const ch = input ?? '';
+        const curLine = lineRef.current;
+        const curCursor = cursorRef.current;
+        const curPending = pendingRef.current;
+        const out = handleNormalKey({
+            line: curLine,
+            cursor: curCursor,
+            pending: curPending,
+            ch,
+            enter: key.return,
+            escape: false,
+            backspace: key.backspace || key.delete,
+        });
+        // Step 1: write the new pending state to BOTH the ref (read by
+        // the next keystroke synchronously) AND the React state (drives
+        // the status bar render).
+        pendingRef.current = out.pending;
+        setPending(out.pending);
+        // Step 2: apply the discriminated result. Each branch updates
+        // the refs first (synchronous, closure-safe) and then schedules
+        // any required React state update or deferred side effect.
+        switch (out.result.kind) {
+            case 'move': {
+                cursorRef.current = out.result.cursor;
+                // Cursor lives in the ref; the inner InputBox does not need
+                // a remount for a pure motion, so we skip the tick bump.
+                break;
+            }
+            case 'edit': {
+                cursorRef.current = out.result.cursor;
+                lineRef.current = out.result.line;
+                setLine(out.result.line);
+                setRemountTick((t) => t + 1);
+                break;
+            }
+            case 'mode': {
+                cursorRef.current = out.result.cursor;
+                modeRef.current = out.result.mode;
+                setMode(out.result.mode);
+                break;
+            }
+            case 'submit': {
+                // Forward to the host's onSubmit and clear the shadow buffer
+                // so the next prompt starts empty. We DO NOT re-route
+                // through InputBox's Enter handler — that path also writes
+                // history; submitting from `:w` should mirror that, so we
+                // call props.onSubmit indirectly via the deferred-effect
+                // queue. (The host's history append happens inside InputBox;
+                // for the modal path the host can observe via props.onSubmit
+                // and append manually if needed. The leak-parity surface for
+                // L26 documents `:w` as equivalent to Enter so this is fine.)
+                const payload = out.result.payload;
+                if (payload.trim().length > 0) {
+                    // Queue the host callback; useEffect flushes it after the
+                    // render commits. This avoids React strict-mode's
+                    // double-invocation of setState updaters double-firing
+                    // onSubmit (which would, e.g., submit the same prompt
+                    // twice to the agent on every `:w`).
+                    pendingSubmitRef.current = payload;
+                }
+                cursorRef.current = 0;
+                lineRef.current = '';
+                setLine('');
+                setRemountTick((t) => t + 1);
+                setSideEffectTick((t) => t + 1);
+                break;
+            }
+            case 'cancel': {
+                cursorRef.current = 0;
+                lineRef.current = '';
+                setLine('');
+                setRemountTick((t) => t + 1);
+                break;
+            }
+            case 'noop': {
+                // No-op result still may have advanced `pending` (e.g. the
+                // first `d` of `dd` arms the pending state). The pending ref
+                // and state were already updated above, so nothing else to
+                // do here.
+                break;
+            }
+        }
+    });
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(VimStatusBar, { mode: mode, pending: pending }), _jsx(InputBox, { ...inputBoxProps, 
+                // In normal mode we seed the (possibly mutated) shadow line +
+                // suppress the blink so the operator's caret is unambiguously
+                // controlled by h/l/0/$/w/b. In insert mode we hand the
+                // buffer back to InputBox as-is so the legacy typing path
+                // takes over.
+                initial: mode === 'normal' ? line : (props.initial ?? line), blinkCursor: mode === 'normal' ? false : (props.blinkCursor ?? true) }, `vim-${remountTick}`)] }));
+}
+//# sourceMappingURL=vim-input.js.map

package/docs/examples/codegraph.mcp.json

@@ -0,0 +1,10 @@
+{
+  "servers": {
+    "codegraph": {
+      "command": "codegraph",
+      "args": ["serve", "--mcp"],
+      "env": {},
+      "trust": "pending"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pugi/cli",
-  "version": "0.1.0-beta.3",
+  "version": "0.1.0-beta.30",
   "description": "Pugi CLI - terminal-native software execution system",
   "homepage": "https://pugi.io",
   "repository": {
@@ -29,8 +29,10 @@
     "bin/run.js",
     "dist/**/*.js",
     "assets/**/*.ansi",
+    "docs/examples/**/*.json",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md"
   ],
   "engines": {
     "node": ">=22.5.0"
@@ -46,13 +48,13 @@
     "ink": "^5.0.1",
     "linkedom": "^0.18.12",
     "react": "^18.3.1",
-    "tar": "^6.2.1",
+    "tar": "^7.5.11",
     "tinyglobby": "^0.2.16",
     "turndown": "^7.2.4",
     "undici": "^8.3.0",
     "zod": "^3.23.0",
     "@pugi/personas": "0.1.2",
-    "@pugi/sdk": "0.1.0-beta.3"
+    "@pugi/sdk": "0.1.0-beta.30"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
@@ -67,9 +69,10 @@
     "build": "pnpm --filter @pugi/personas --filter @pugi/sdk build && tsc -p tsconfig.json && node scripts/make-bin-executable.mjs",
     "dev": "tsx src/index.ts",
     "typecheck": "pnpm --filter @pugi/personas --filter @pugi/sdk build && tsc -p tsconfig.json --noEmit",
-    "test": "pnpm run build && node --test --import tsx 'test/**/*.spec.ts' 'test/**/*.spec.tsx'",
+    "test": "pnpm run check:version-lockstep && pnpm run build && node --test --import tsx 'test/**/*.spec.ts' 'test/**/*.spec.tsx'",
     "version:cli": "tsx src/index.ts version",
     "doctor": "tsx src/index.ts doctor --json",
-    "pack:smoke": "node scripts/pack-smoke.mjs"
+    "check:version-lockstep": "bash ../../scripts/check-version-lockstep.sh",
+    "pack:smoke": "pnpm run check:version-lockstep && node scripts/pack-smoke.mjs"
   }
 }