@pugi/cli 0.1.0-beta.46 → 0.1.0-beta.48

package/assets/pugi-prozr2-mascot.ansi

@@ -0,0 +1,9 @@
+[?25l                
+                
+    ▄▄▄▄▄▄▄▄    
+     ▄▄▄▄▄▄     
+     ▄▄▄▄▄▄     
+    ▄▄          
+        ▄       
+                
+[?25h

package/dist/core/bash-classifier.js

@@ -346,6 +346,93 @@ const BUILD_TEST_PREFIXES = [
     'tsc -p',
     'eslint',
     'prettier --check',
+    // P0 fix 2026-05-29 (#37 CRITICAL): customer-blocking gap surfaced
+    // during dogfood. Engine emitted `chmod +x build.sh`, `node script.js`,
+    // `python3 -m pytest`, `git status`, `pnpm build`, `docker ps`, etc.
+    // and the classifier returned `unknown` → permission matrix denied
+    // в bypassPermissions mode (which the customer expected to auto-allow
+    // basic dev tools). Customers could not run ANY real build/test/git
+    // workflow through Pugi.
+    //
+    // The prefixes below cover three classes of developer tooling that
+    // are always allowed in `auto`/`dontAsk`/`bypassPermissions` modes,
+    // `ask` in interactive modes, and `deny` in `plan` (read-only) mode:
+    //   - Language runtimes: `node`, `python`, `python3`, `ruby`, etc.
+    //   - Native build chains: `gcc`, `clang`, `cmake`, `rustc`, etc.
+    //   - Container/k8s read-class: `docker ps/inspect/logs`, `kubectl get`.
+    //
+    // Destructive variants are already gated upstream by DESTRUCTIVE_PATTERNS
+    // (e.g. `docker system prune`, `kubectl delete --all`). The first-token
+    // gate in classifyComponent runs THIS list before the unknown fallback.
+    //
+    // Language runtime invocations (first-token match, with or without args).
+    'node',
+    'python',
+    'python3',
+    'ruby',
+    'perl',
+    'php',
+    'deno',
+    'bun',
+    'tsx',
+    'ts-node',
+    // Native build chains.
+    'gcc',
+    'g++',
+    'clang',
+    'clang++',
+    'cmake',
+    'rustc',
+    'javac',
+    'java',
+    // Container/k8s read-class (the destructive subcommands are pre-empted
+    // by DESTRUCTIVE_PATTERNS: `docker system prune`, `kubectl delete --all`,
+    // `kubectl delete namespace`).
+    'docker ps',
+    'docker images',
+    'docker inspect',
+    'docker logs',
+    'docker version',
+    'docker info',
+    'docker exec',
+    'docker run',
+    'docker stop',
+    'docker start',
+    'docker restart',
+    'docker rm',
+    'docker rmi',
+    'docker build',
+    'docker tag',
+    'docker compose',
+    'docker-compose',
+    'kubectl get',
+    'kubectl describe',
+    'kubectl logs',
+    'kubectl exec',
+    'kubectl apply',
+    'kubectl create',
+    'kubectl rollout',
+    'kubectl port-forward',
+    'kubectl config',
+    // Git read+write surface (network ops already handled by NETWORK_PREFIXES;
+    // destructive ops `reset --hard`/`clean -fdx`/`push --force` blocked above).
+    // Note: WRITE_WORKSPACE_PREFIXES already covers `git commit/add/checkout/...`.
+    // These entries handle plain `git rev-list`, `git cherry-pick`, `git worktree`,
+    // `git submodule`, etc that customer scripts commonly invoke.
+    'git rev-list',
+    'git cherry-pick',
+    'git worktree',
+    'git submodule',
+    'git blame',
+    'git describe',
+    'git tag --list',
+    'git tag -l',
+    'git for-each-ref',
+    'git ls-remote',
+    // gh CLI (GitHub). `gh repo delete` / `gh release delete` reach into
+    // network operations but are non-destructive for the local workspace.
+    // Permission matrix asks before allowing in auto.
+    'gh',
 ];
 /** Single-token read-only commands. Argument-free entries match exact. */
 const READ_TOKENS = new Set([
@@ -384,6 +471,16 @@ const READ_TOKENS = new Set([
     'cut',
     'sort',
     'uniq',
+    // P0 fix 2026-05-29 (#37 CRITICAL): structured-data inspection tools
+    // are pure stdin/stdout transformers (no FS write, no network) when
+    // не paired с `>` redirection (the redirection branch above promotes
+    // к write_workspace independently). Common в dev scripts for parsing
+    // package.json, tsconfig.json, Helm values.yaml, etc.
+    // `tee` is INTENTIONALLY excluded — it writes by definition, even
+    // в protected paths (`tee /etc/...` is already in DESTRUCTIVE_PATTERNS).
+    'jq',
+    'yq',
+    'column',
 ]);
 const READ_PREFIXES = [
     'git status',
@@ -418,6 +515,16 @@ const WRITE_WORKSPACE_PREFIXES = [
     'git tag',
     'git rebase',
     'git merge',
+    // P0 fix 2026-05-29 (#37 CRITICAL): file-permission ops are common
+    // в build scripts (`chmod +x build.sh`, `chown $USER file`). The
+    // destructive variants (`chmod 777 /`, `chmod -R 777 /`, `chmod -R
+    // 777 ~`, `chown -R root /`, `chown -R / ...`) are pre-empted by
+    // DESTRUCTIVE_PATTERNS which runs BEFORE this list — safe to add
+    // here for the non-destructive path. detectProtectedWrite's `\bchmod\b`
+    // / `\bchown\b` regex also catches writes into protected paths
+    // regardless of this list.
+    'chmod ',
+    'chown ',
 ];
 /**
  * Protected-write triggers. If a command writes to any of these paths
@@ -636,6 +743,25 @@ function classifyComponent(cmd, ctx) {
     if (trimmed === 'make' || trimmed.startsWith('make ')) {
         return { class: 'build_test', reason: 'make runner', matched: 'make' };
     }
+    // 7c. Operator-override safe tokens (P0 fix 2026-05-29 #37).
+    // `PUGI_CLASSIFIER_EXTRA_SAFE=tool1,tool2,...` extends the BUILD_TEST
+    // first-token list at runtime. This is a security-sensitive escape
+    // hatch — operators can add their custom build tools without a
+    // recompile. Destructive patterns ALREADY ran above (step 1) so this
+    // cannot whitelist `rm`, `mkfs`, `git push --force`, etc. The match
+    // is strict first-token equality — not substring — and the env var
+    // is read fresh on every classify call so tests can mutate it.
+    const extraSafe = readExtraSafeTokens();
+    if (extraSafe.size > 0) {
+        const firstTokenForExtraSafe = trimmed.split(/\s+/)[0] ?? '';
+        if (extraSafe.has(firstTokenForExtraSafe)) {
+            return {
+                class: 'build_test',
+                reason: `PUGI_CLASSIFIER_EXTRA_SAFE override: ${firstTokenForExtraSafe}`,
+                matched: firstTokenForExtraSafe,
+            };
+        }
+    }
     // 7c. Bare `cd <path>` (inside workspace — the cwd-escape detector
     // upgrades the class to write_protected when the target is
     // outside). Standalone `cd` (HOME) is escape, also handled by the
@@ -756,6 +882,40 @@ function nestingDepth(cmd, open, close) {
 function escapeRegex(s) {
     return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
+/**
+ * Operator-override safe tokens. Read from `PUGI_CLASSIFIER_EXTRA_SAFE`
+ * (comma-separated). Allows operators to extend the BUILD_TEST first-
+ * token list at runtime for site-specific tooling без recompile.
+ *
+ * Security note: destructive substring patterns run BEFORE this gate
+ * (step 1 in classifyComponent), so this cannot whitelist `rm`, `mkfs`,
+ * `git push --force`, etc. The env var only adds tools to the benign
+ * build_test class. Invalid entries (empty strings, тokens containing
+ * shell metas) are silently dropped to avoid surprising classifications.
+ *
+ * Read fresh on every call so per-test mutations work и so operators
+ * can update without restarting the agent loop. The cost (one env var
+ * read + Set construction per call) is negligible for the classifier's
+ * call frequency.
+ */
+function readExtraSafeTokens() {
+    const raw = process.env.PUGI_CLASSIFIER_EXTRA_SAFE;
+    if (!raw || raw.trim() === '')
+        return new Set();
+    const tokens = new Set();
+    for (const candidate of raw.split(',')) {
+        const trimmed = candidate.trim();
+        if (trimmed === '')
+            continue;
+        // Reject anything containing shell metas or whitespace — only bare
+        // tool names allowed. Defends against accidental
+        // `PUGI_CLASSIFIER_EXTRA_SAFE='rm -rf /'` smuggling.
+        if (/[\s;|&<>$`(){}\[\]'"\\]/.test(trimmed))
+            continue;
+        tokens.add(trimmed);
+    }
+    return tokens;
+}
 function detectProtectedWrite(cmd, ctx) {
     // Surface every write target this command produces so we can both
     // protected-path-check and outside-workspace-check them uniformly.

package/dist/runtime/cli.js

@@ -32,7 +32,6 @@ import { runStyleCommand } from './commands/style.js';
 import { runThemeCommand } from './commands/theme.js';
 import { runOnboardingCommand } from './commands/onboarding.js';
 import { runVimCommand } from './commands/vim.js';
-import { isOnboarded } from '../core/onboarding/marker.js';
 import { ensureInitialized as ensureInitializedHelper } from '../core/onboarding/ensure-initialized.js';
 import { ensureAuthenticated as ensureAuthenticatedHelper } from '../core/auth/ensure-authenticated.js';
 import { runPrivacyCommand } from './commands/privacy.js';
@@ -1140,19 +1139,22 @@ export async function runCli(argv) {
         process.exitCode = exitCode;
         return;
     }
-    // Leak L25 (2026-05-27): first-run hint. When the operator types a
-    // bare `pugi` on a real TTY AND the onboarding marker is absent, drop
-    // a one-line hint on stderr BEFORE the REPL splash mounts. Stderr so
-    // the line never lands in a `--json` envelope or a scripted stdout
-    // pipe; suppressed when --json is set or the operator already walked
-    // the wizard. The marker check is best-effort — a fs glitch returns
-    // false and we print the hint, which is harmless.
-    if (isBareInvocation
-        && isInteractive(flags)
-        && !flags.json
-        && !isOnboarded(process.env)) {
-        process.stderr.write('Tip: run `pugi onboarding` to configure defaults.\n');
-    }
+    // CEO P0 escalation #2 (2026-05-29) — boot polish.
+    //
+    // Leak L25 (2026-05-27) used к drop a one-line stderr hint
+    // ("Tip: run `pugi onboarding` to configure defaults.") BEFORE the
+    // REPL mounted. Combined with beta.46's surfaced "(Y/n)" prompt the
+    // boot read as a noisy three-line vault door instead of Claude
+    // Code's silent, friendly welcome card. The new `WelcomeBanner` in
+    // the REPL surfaces the "/init" tip inline (right column) so this
+    // pre-Ink stderr write is redundant — suppress it on the bare REPL
+    // path. The hint stays available for any future non-REPL bare entry
+    // (no current callers, but keep the helper for symmetry).
+    //
+    // Leaving the suppression here as a hard branch (no env override)
+    // because the welcome banner is the authoritative surface — a stray
+    // stderr line above the alt-screen flicker would race against the
+    // banner paint on slow terminals.
     // Bare `pugi` on a TTY enters the REPL-by-default agentic session
     // (Sprint α5.7, ADR-0056). The REPL is the customer-facing surface
     // that brings Pugi to parity with Claude Code / Codex CLI. When the
@@ -1168,25 +1170,32 @@ export async function runCli(argv) {
             // Propagating via env keeps the session module transport-free.
             if (flags.allowFetch)
                 process.env.PUGI_ALLOW_FETCH = '1';
-            // CEO P0 (2026-05-28): auto-init pre-flight on the bare REPL
-            // boot path. PR #628 wired `runAutoInitPreflight` into every
-            // engine command (`pugi code/fix/build/...`) but the bare
-            // `pugi` REPL entry boots straight into the workspace label
-            // resolver — which surfaces the "(not bound — run /init OR cd
-            // into project)" banner without ever asking the operator
-            // whether к initialise the workspace. CEO escalation: closed
-            // multiple times wrong; the operator hits the banner and walks
-            // away thinking Pugi is broken. We use the REPL-tuned variant
-            // that NEVER throws — `n`, `--bare`, `--no-init`, non-TTY all
-            // fall through к the legacy "not bound" banner so the existing
-            // contract (booting REPL still works without `.pugi/`) holds.
-            // The prompt fires ONLY on the happy path: interactive TTY,
-            // no `.pugi/`, no opt-out flag. Wrapped in a defensive try/
-            // catch — the scaffold may legitimately fail (read-only fs,
-            // permission denied) but the REPL still needs to boot so the
-            // operator gets a usable surface к diagnose the failure.
+            // CEO P0 escalation #2 (2026-05-29) — silent auto-init.
+            //
+            // PR #628 + the first P0 fix wired `runReplAutoInitPreflight`
+            // into the bare REPL boot path. That helper PROMPTED
+            // "Initialize a new Pugi workspace here? (Y/n)" before mounting
+            // Ink, which on a TTY in a fresh dir read as a noisy gate the
+            // operator had to consciously accept just к see Pugi. The CEO
+            // dogfood transcript called this out as visually broken vs
+            // Claude Code, which silently inits and surfaces "/init to
+            // create CLAUDE.md" as an inline tip in the welcome banner.
+            //
+            // The fix swaps the prompt variant for `runReplSilentInitPreflight`
+            // which scaffolds inline без prompt on the happy path
+            // (interactive TTY, project root, no opt-out flag). The
+            // welcome banner (rendered by Ink immediately after) surfaces
+            // a one-line "Initialised Pugi workspace" toast so the
+            // operator still sees the side-effect — just без a Y/N stop.
+            //
+            // Opt-outs (`--bare`, `--no-init`, `PUGI_BARE`, `PUGI_NO_AUTO_INIT`)
+            // and non-TTY fall-through preserved verbatim from the prompt
+            // variant. Wrapped in try/catch — a scaffold failure (read-only
+            // fs, perms) still lets the REPL boot so the operator can
+            // diagnose.
+            let silentInitOutcome = null;
             try {
-                await runReplAutoInitPreflight(process.cwd(), flags);
+                silentInitOutcome = await runReplSilentInitPreflight(process.cwd(), flags);
             }
             catch (error) {
                 // Surface the scaffold error on stderr but proceed to mount
@@ -1225,6 +1234,11 @@ export async function runCli(argv) {
                 updateBanner,
                 skipSplash: flags.noSplash,
                 hideToolStream: flags.noToolStream,
+                // CEO P0 #2 (2026-05-29): forward the silent-init outcome so
+                // the welcome banner can surface a one-line toast on the
+                // "initialized" branch ("Pugi workspace initialised at .pugi/.")
+                // and skip the toast on the "already" / "declined" branches.
+                autoInitStatus: silentInitOutcome?.status ?? null,
             });
             return;
         }
@@ -6520,6 +6534,51 @@ export async function runReplAutoInitPreflight(root, flags, overrides = {}) {
             }),
     });
 }
+export async function runReplSilentInitPreflight(root, flags, overrides = {}) {
+    const interactive = overrides.interactive ?? isInteractive(flags);
+    return ensureInitializedHelper({
+        cwd: root,
+        interactive,
+        skip: flags.noInit
+            || flags.bare
+            || process.env.PUGI_NO_AUTO_INIT === '1'
+            || process.env.PUGI_BARE === '1',
+        // CC-style silent init: the prompt callback returns 'y' immediately
+        // so the helper proceeds straight to scaffold. The helper's
+        // contract treats empty / 'y' / 'yes' as the default-Y answer, so
+        // returning 'y' is the canonical way to drive the happy path
+        // without surfacing the (Y/n) string on stderr. The
+        // `write` callback is silenced (no-op) so the helper does not
+        // print the legacy "No Pugi workspace found at ..." line either —
+        // the welcome banner surfaces the post-scaffold success toast
+        // instead. Note: the helper's `write` ALSO swallows the
+        // "Initialization declined" footer, but that branch never fires
+        // here because our prompt always returns 'y'.
+        prompt: async () => 'y',
+        write: () => {
+            /* silent — banner owns the operator-visible signal */
+        },
+        scaffold: overrides.scaffold
+            ?? (async (input) => {
+                // CEO P0 #2 (2026-05-29): forward а no-op `log` callback so
+                // the default-skills installer ("[pugi init] installed default
+                // skill …") does not leak к stderr above the Ink welcome
+                // banner. The welcome banner already surfaces the one-line
+                // "Pugi workspace initialised at .pugi/." toast — the per-
+                // skill detail is noise on the cold-start path и kills the
+                // CC-style silent boot the operator expects. The non-silent
+                // `pugi init` command remains noisy by passing the default
+                // stderr writer.
+                await scaffoldPugiWorkspace({
+                    cwd: input.cwd,
+                    noDefaults: flags.noDefaults,
+                    log: () => {
+                        /* silent — banner owns the operator-visible signal */
+                    },
+                });
+            }),
+    });
+}
 /**
  * Wave 6 UX (2026-05-27): async pre-flight wrapper around the
  * `ensureAuthenticatedHelper` from `core/auth/ensure-authenticated.ts`.

package/dist/runtime/version.js

@@ -44,7 +44,7 @@ export function sanitizeSemver(raw) {
  * during import). When bumping the CLI version BOTH literals must be
  * updated; the release smoke-test (`pack:smoke`) verifies they agree.
  */
-export const PUGI_CLI_VERSION = sanitizeSemver('0.1.0-beta.46');
+export const PUGI_CLI_VERSION = sanitizeSemver('0.1.0-beta.48');
 /**
  * Outbound: the CLI's installed semver. Read at request time by
  * `version-interceptor.ts` and injected on every `fetch` call.

package/dist/tui/input-box.js

@@ -83,6 +83,13 @@ export function InputBox(props) {
     const [history, setHistory] = useState(seededHistory);
     const [historyIndex, setHistoryIndex] = useState(-1);
     const [lastCtrlCAt, setLastCtrlCAt] = useState(undefined);
+    // CEO P0 #2 (2026-05-29): Claude Code parity — surface а visible
+    // "Press Ctrl+C again to exit" toast on the first Ctrl+C press so
+    // the operator knows the second press will terminate the REPL.
+    // Auto-clears after CTRL_C_DOUBLE_TAP_MS so it never lingers past
+    // the double-tap window.
+    const [ctrlCToast, setCtrlCToast] = useState(null);
+    const ctrlCToastTimerRef = useRef(null);
     // Wave 6 BT 8: Esc-Esc walkback double-tap window. Tracks the epoch
     // ms of the most recent Esc press so the next Esc within
     // ESCAPE_DOUBLE_TAP_MS triggers the walkback handler instead of
@@ -191,6 +198,28 @@ export function InputBox(props) {
                 return;
             }
             setLastCtrlCAt(t);
+            // CEO P0 #2 (2026-05-29): surface the "Press Ctrl+C again to
+            // exit" toast on the first press so the operator sees the
+            // double-tap semantics in the UI, not just в the bottom hint
+            // line. Mirrors Claude Code's exit affordance verbatim. The
+            // toast string varies by which branch fired (cancel vs idle
+            // clear) so the operator learns what the press just did:
+            //
+            //   - cancelResult === true  → "Aborted. Press Ctrl+C again to exit."
+            //   - cancelResult === false → "Press Ctrl+C again to exit."
+            //
+            // (The undefined branch already returned above — а modal owns
+            // input и the toast is suppressed.)
+            const toastCopy = cancelResult === true
+                ? 'Aborted. Press Ctrl+C again to exit.'
+                : 'Press Ctrl+C again to exit.';
+            setCtrlCToast(toastCopy);
+            if (ctrlCToastTimerRef.current)
+                clearTimeout(ctrlCToastTimerRef.current);
+            ctrlCToastTimerRef.current = setTimeout(() => {
+                setCtrlCToast(null);
+                ctrlCToastTimerRef.current = null;
+            }, CTRL_C_DOUBLE_TAP_MS);
             // Legacy behaviour: on idle (or no onCancel wired), clear the
             // buffer + reset search so the operator's screen is calm before
             // they confirm exit. When we DID cancel a live dispatch, keep
@@ -685,7 +714,7 @@ export function InputBox(props) {
         : Math.min(paletteIndex, paletteView.rows.length - 1);
     const divider = '─'.repeat(innerWidth);
     const focusedMatch = search ? search.matches[search.focusedIndex] : undefined;
-    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { color: "#3da9fc", dimColor: true, children: divider }), _jsx(Box, { paddingX: 1, flexDirection: "column", children: search ? (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", children: '(reverse-i-search) ' }), _jsx(Text, { children: `\`${search.query}\`: ` }), _jsx(Text, { color: "yellow", children: focusedMatch ? focusedMatch.brief : '(no match)' })] }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: `Ctrl+R next  ·  Ctrl+S prev  ·  Enter accept  ·  Esc cancel  ·  ${search.matches.length} match${search.matches.length === 1 ? '' : 'es'}` }) })] })) : (_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", children: '› ' }), _jsx(Text, { children: renderLineWithCursor(line, cursor, cursorVisible) })] })) }), _jsx(Text, { color: "#3da9fc", dimColor: true, children: divider }), modeCycleToast ? (_jsx(Box, { children: _jsx(Text, { color: "#3da9fc", bold: true, children: `  ${modeCycleToast}` }) })) : null, line.length > innerWidth - 4 ? (_jsxs(Box, { children: [_jsx(Text, { color: "gray", children: '┊ ' }), _jsx(Text, { dimColor: true, children: 'line wraps - Enter still submits' })] })) : null, _jsx(SlashPalette, { rows: paletteView.rows, focusedIndex: clampedPaletteIndex, totalBeforeLimit: paletteView.totalBeforeLimit }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: '↑/↓ history  ·  Ctrl+R search  ·  / commands  ·  Shift+Tab mode  ·  Enter brief  ·  Esc cancel  ·  Ctrl+C abort / ×2 exit' }) })] }));
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { color: "#3da9fc", dimColor: true, children: divider }), _jsx(Box, { paddingX: 1, flexDirection: "column", children: search ? (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", children: '(reverse-i-search) ' }), _jsx(Text, { children: `\`${search.query}\`: ` }), _jsx(Text, { color: "yellow", children: focusedMatch ? focusedMatch.brief : '(no match)' })] }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: `Ctrl+R next  ·  Ctrl+S prev  ·  Enter accept  ·  Esc cancel  ·  ${search.matches.length} match${search.matches.length === 1 ? '' : 'es'}` }) })] })) : (_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", children: '› ' }), _jsx(Text, { children: renderLineWithCursor(line, cursor, cursorVisible) })] })) }), _jsx(Text, { color: "#3da9fc", dimColor: true, children: divider }), modeCycleToast ? (_jsx(Box, { children: _jsx(Text, { color: "#3da9fc", bold: true, children: `  ${modeCycleToast}` }) })) : null, ctrlCToast ? (_jsx(Box, { children: _jsx(Text, { color: "yellow", bold: true, children: `  ${ctrlCToast}` }) })) : null, line.length > innerWidth - 4 ? (_jsxs(Box, { children: [_jsx(Text, { color: "gray", children: '┊ ' }), _jsx(Text, { dimColor: true, children: 'line wraps - Enter still submits' })] })) : null, _jsx(SlashPalette, { rows: paletteView.rows, focusedIndex: clampedPaletteIndex, totalBeforeLimit: paletteView.totalBeforeLimit }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: '↑/↓ history  ·  Ctrl+R search  ·  / commands  ·  Shift+Tab mode  ·  Enter brief  ·  Esc cancel  ·  Ctrl+C abort / ×2 exit' }) })] }));
 }
 /**
  * Render the line with the cursor glyph inserted at `cursor`. The cursor

package/dist/tui/repl-render.js

@@ -22,6 +22,7 @@ import React from 'react';
 import { render } from 'ink';
 import { Repl } from './repl.js';
 import { printPugMascotPreInk } from './repl-splash-mascot.js';
+import { collectWelcomeData } from './welcome-data.js';
 import { ThemeProvider } from '../core/theme/context.js';
 import { resolveTheme } from '../core/theme/state.js';
 import { ReplSession, } from '../core/repl/session.js';
@@ -196,12 +197,31 @@ export async function renderRepl(options) {
         workspaceRoot: process.cwd(),
         env: process.env,
     });
+    // CEO P0 #2 (2026-05-29): collect welcome banner data BEFORE Ink
+    // mounts so the banner paints on the first frame instead of swapping
+    // in mid-render. The collector swallows every IO error so а missing
+    // CHANGELOG / unreadable credential / malformed settings never
+    // blocks the boot.
+    let welcomeData;
+    if (options.skipSplash !== true) {
+        try {
+            welcomeData = collectWelcomeData({
+                cliVersion: options.cliVersion,
+                cwd: process.cwd(),
+            });
+        }
+        catch {
+            welcomeData = undefined;
+        }
+    }
     const instance = render(React.createElement(ThemeProvider, { slug: resolvedTheme.slug }, React.createElement(Repl, {
         session,
         updateBanner: options.updateBanner ?? null,
         skipSplash: options.skipSplash === true,
         hideToolStream: options.hideToolStream === true,
         mascotPrePrinted,
+        welcomeData,
+        autoInitStatus: options.autoInitStatus ?? null,
     })));
     // Make sure we leave the alt screen on abrupt exits too. Without
     // this the operator's shell stays "frozen" on the Pugi splash.

package/dist/tui/repl-splash-mascot.js

@@ -48,9 +48,21 @@ import { fileURLToPath } from 'node:url';
  * — two directory hops up from this file. In a local `pnpm dev`
  * checkout the structure is the same (`src/tui/` ⇒ `../../assets/`)
  * because tsx re-resolves the same relative tree.
+ *
+ * CEO P0 #2 (2026-05-29) — banner mascot bake. The prozr2 portrait is
+ * the canonical brand-pug glyph from `apps/console-web/public/brand/
+ * Pugi-prozr2.png`, baked к а 16x8 vhalf truecolor render. We prefer
+ * the prozr2 bake when it ships alongside the CLI (small — ~900 bytes,
+ * shaped for the compact welcome-banner left column) and fall back к
+ * the legacy 40KB `pugi-mascot.ansi` (hero-pug 80x40) when prozr2 is
+ * missing — preserves the splash-mascot install surface for any
+ * tarball that predates the bake.
  */
 export function pugMascotAssetPath() {
     const here = dirname(fileURLToPath(import.meta.url));
+    const prozr2 = resolvePath(here, '..', '..', 'assets', 'pugi-prozr2-mascot.ansi');
+    if (existsSync(prozr2))
+        return prozr2;
     return resolvePath(here, '..', '..', 'assets', 'pugi-mascot.ansi');
 }
 /**

package/dist/tui/repl.js

@@ -26,8 +26,10 @@ import { ConversationPane } from './conversation-pane.js';
 import { InputBox } from './input-box.js';
 import { ReplSplash } from './repl-splash.js';
 import { StatusBar } from './status-bar.js';
+import { ThinkingSpinner } from './thinking-spinner.js';
 import { ToolStreamPane } from './tool-stream-pane.js';
 import { UpdateBanner } from './update-banner.js';
+import { WelcomeBanner } from './welcome-banner.js';
 import { collectWorkspaceContext } from './workspace-context.js';
 import { useTheme } from '../core/theme/context.js';
 import { slugForCwd } from '../core/repl/history.js';
@@ -57,6 +59,12 @@ export function Repl(props) {
     // Tenant block crowding the top.
     const [splashVisible, setSplashVisible] = useState(false);
     const dismissSplash = useCallback(() => setSplashVisible(false), []);
+    // CEO P0 #2 (2026-05-29): CC-style welcome banner. Visible from boot
+    // until the operator submits the first brief OR the session emits
+    // its first agent event. The host owns dismissal lifecycle (kept
+    // symmetric with the splash) so the welcome card never lingers
+    // behind а live transcript.
+    const [welcomeVisible, setWelcomeVisible] = useState(Boolean(props.welcomeData));
     // α6.14 wave 3: workspace context snapshot for the status bar. We
     // read once at mount and freeze; a brand-new PUGI.md or skill is
     // surfaced on the next REPL boot rather than via a watcher.
@@ -100,6 +108,17 @@ export function Repl(props) {
             setSplashVisible(false);
         }
     }, [splashVisible, state.agents.length, state.transcript.length]);
+    // CEO P0 #2 (2026-05-29): same dismissal contract for the welcome
+    // banner. The banner is the "boot card" — once any agent fires or
+    // the transcript gains а row, the banner clears так the conversation
+    // pane owns the vertical real estate.
+    useEffect(() => {
+        if (!welcomeVisible)
+            return;
+        if (state.agents.length > 0 || state.transcript.length > 0) {
+            setWelcomeVisible(false);
+        }
+    }, [welcomeVisible, state.agents.length, state.transcript.length]);
     const personaNames = useMemo(() => buildPersonaNameMap(), []);
     const { exit } = useApp();
     const handleSubmit = useCallback((line) => {
@@ -107,6 +126,10 @@ export function Repl(props) {
         // `setSplashVisible(false)` is a no-op once the state already
         // settled to false (timer fired or `agent.spawned` arrived).
         setSplashVisible(false);
+        // CEO P0 #2 (2026-05-29): same dismissal for the welcome banner
+        // — the operator engaging the input box is the cleanest signal
+        // they have finished reading the boot card.
+        setWelcomeVisible(false);
         // Run async without awaiting - the session module owns the
         // network call, errors land in the transcript automatically.
         void props.session.handleInput(line).then((verdict) => {
@@ -232,11 +255,11 @@ export function Repl(props) {
     // input, and the input stays the sole focusable surface adjacent
     // to the cursor row, so all keystrokes route through it.
     const altScreenRows = process.stdout.rows ?? 24;
-    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, minHeight: altScreenRows, children: [props.updateBanner ? _jsx(UpdateBanner, { result: props.updateBanner }) : null, splashVisible ? (_jsx(ReplSplash, { cliVersion: state.cliVersion, workspaceLabel: state.workspaceLabel, plan: props.splashPlan, model: props.splashModel, tenant: props.splashTenant, onDismiss: dismissSplash, mascotPrePrinted: props.mascotPrePrinted === true })) : null, _jsx(Header, { state: state }), _jsx(Box, { flexDirection: "column", marginTop: 1, flexGrow: 1, justifyContent: "flex-end", children: overlay === 'help' ? (_jsx(HelpOverlay, {})) : overlay === 'roster' ? (_jsx(RosterOverlay, {})) : overlay === 'farewell' ? (_jsx(FarewellOverlay, {})) : (_jsx(MainArea, { state: state, personaNames: personaNames, nowEpochMs: tickNow, hideToolStream: props.hideToolStream === true, toolStreamCollapsed: toolStreamCollapsed })) }), state.pendingAsk ? (_jsx(Box, { marginTop: 1, children: _jsx(AskModal, { tag: state.pendingAsk, onResolve: handleAskResolve }) })) : null, state.pendingPlanReview ? (_jsx(Box, { marginTop: 1, children: _jsx(PlanReviewModal, { tag: state.pendingPlanReview, onResolve: handlePlanReviewResolve }) })) : null, _jsxs(Box, { flexDirection: "column", marginTop: 1, children: [overlay === 'farewell' || modalActive ? null : (_jsx(InputBox, { onSubmit: handleSubmit, onExit: handleExit, onCancel: handleCancel, onWalkback: handleWalkback, onCyclePermissionMode: handleCyclePermissionMode, now: props.now, 
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, minHeight: altScreenRows, children: [props.updateBanner ? _jsx(UpdateBanner, { result: props.updateBanner }) : null, welcomeVisible && props.welcomeData ? (_jsx(WelcomeBanner, { data: props.welcomeData, mascotPrePrinted: props.mascotPrePrinted === true, autoInitStatus: props.autoInitStatus ?? null })) : null, splashVisible ? (_jsx(ReplSplash, { cliVersion: state.cliVersion, workspaceLabel: state.workspaceLabel, plan: props.splashPlan, model: props.splashModel, tenant: props.splashTenant, onDismiss: dismissSplash, mascotPrePrinted: props.mascotPrePrinted === true })) : null, _jsx(Header, { state: state }), _jsx(Box, { flexDirection: "column", marginTop: 1, flexGrow: 1, justifyContent: "flex-end", children: overlay === 'help' ? (_jsx(HelpOverlay, {})) : overlay === 'roster' ? (_jsx(RosterOverlay, {})) : overlay === 'farewell' ? (_jsx(FarewellOverlay, {})) : (_jsx(MainArea, { state: state, personaNames: personaNames, nowEpochMs: tickNow, hideToolStream: props.hideToolStream === true, toolStreamCollapsed: toolStreamCollapsed })) }), state.pendingAsk ? (_jsx(Box, { marginTop: 1, children: _jsx(AskModal, { tag: state.pendingAsk, onResolve: handleAskResolve }) })) : null, state.pendingPlanReview ? (_jsx(Box, { marginTop: 1, children: _jsx(PlanReviewModal, { tag: state.pendingPlanReview, onResolve: handlePlanReviewResolve }) })) : null, _jsxs(Box, { flexDirection: "column", marginTop: 1, children: [overlay === 'farewell' || modalActive ? null : (_jsx(InputBox, { onSubmit: handleSubmit, onExit: handleExit, onCancel: handleCancel, onWalkback: handleWalkback, onCyclePermissionMode: handleCyclePermissionMode, now: props.now, 
                         // Slug from process.cwd() (full path) so two workspaces with
                         // the same basename do not share history. state.workspaceLabel
                         // is the basename only. Codex review P2.
-                        workspaceSlug: slugForCwd(process.cwd()) })), _jsx(StatusBar, { connection: state.connection, activeAgentCount: countActive(state), tokensDownstreamTotal: state.tokensDownstreamTotal, briefStartedAtEpochMs: state.briefStartedAtEpochMs, nowEpochMs: tickNow, pulsePhase: pulsePhase, pugiMdCount: workspaceContext.pugiMdCount, mcpServerCount: workspaceContext.mcpServerCount, skillCount: workspaceContext.skillCount, quotaPct: props.quotaPct, dispatchState: state.dispatchState, dispatchToolLabel: state.dispatchToolLabel, lastCompletedOutcome: state.lastCompletedOutcome, 
+                        workspaceSlug: slugForCwd(process.cwd()) })), _jsx(ThinkingSpinner, { dispatchState: state.dispatchState, dispatchToolLabel: state.dispatchToolLabel }), _jsx(StatusBar, { connection: state.connection, activeAgentCount: countActive(state), tokensDownstreamTotal: state.tokensDownstreamTotal, briefStartedAtEpochMs: state.briefStartedAtEpochMs, nowEpochMs: tickNow, pulsePhase: pulsePhase, pugiMdCount: workspaceContext.pugiMdCount, mcpServerCount: workspaceContext.mcpServerCount, skillCount: workspaceContext.skillCount, quotaPct: props.quotaPct, dispatchState: state.dispatchState, dispatchToolLabel: state.dispatchToolLabel, lastCompletedOutcome: state.lastCompletedOutcome, 
                         // α7 cost-meter sprint — surface accumulated session totals
                         // + per-turn delta flash on the status bar's top row. The
                         // session module owns accumulation; the bar is a pure render.

package/dist/tui/thinking-spinner.js

@@ -0,0 +1,123 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Thinking spinner — animated dispatch indicator (CEO P0 #2, 2026-05-29).
+ *
+ * Replaces the static `dispatching` / `tool: <name>` strings the bottom
+ * status row used к paint during active brief dispatch with а Claude-
+ * Code-style rotating verb + glyph pair:
+ *
+ *     ✽ Briefing…       (awaiting_response, before the first tool call)
+ *     ◆ Dispatching…    (awaiting_response, после the first tool call)
+ *     ◇ Reviewing…      (tool_running)
+ *     ✦ Synthesizing…   (awaiting_response, late in turn)
+ *     ❋ Shipping…       (tool_running, edit/write/build family tool)
+ *
+ * The rotation cadence is ~800 ms per step so the verb feels alive but
+ * never strobes. The component owns its own timer (cleared on unmount)
+ * и takes the active dispatch state + the optional tool label so the
+ * "Shipping…" branch can light up specifically для write-class tools.
+ *
+ * Mount lifecycle: the REPL renders `<ThinkingSpinner />` only while
+ * `dispatchState` ∈ {`awaiting_response`, `tool_running`}. The
+ * status-bar's legacy `composeStatusLabel` row stays mounted too — they
+ * are not mutually exclusive — but the spinner row sits above the
+ * status row так the operator's eye lands on the live signal first.
+ *
+ * Brand discipline:
+ *   - Verbs from the approved power-words list: `Briefing`,
+ *     `Dispatching`, `Reviewing`, `Synthesizing`, `Shipping`. No
+ *     `Thinking…` (forbidden cool word per DESIGN.md §3.2 voice gate).
+ *   - Glyphs from the Pugi mascot brand glyph kit (`✽ ◆ ◇ ✦ ❋`). No
+ *     emoji — the spinner must paint in а narrow Bash / WSL terminal
+ *     где emoji fall back к `?`.
+ *   - Cyan accent (`#3da9fc`) on the glyph; verb stays default-tone so
+ *     the rotation does not compete with the cost-meter row above.
+ *   - Trailing ellipsis is а single Unicode `…` (DESIGN.md §4 — three-
+ *     dot ellipsis is the ONLY allowed truncation glyph).
+ *
+ * Test surface: `tickSpinnerFrame` is exported so the spec can drive
+ * the frame index without а real-clock timer.
+ */
+import { useEffect, useState } from 'react';
+import { Box, Text } from 'ink';
+/* ------------------------------------------------------------------ */
+/* Constants                                                          */
+/* ------------------------------------------------------------------ */
+const ACCENT = '#3da9fc';
+const FRAME_INTERVAL_MS = 800;
+const FRAMES = [
+    { glyph: '✽', verb: 'Briefing' },
+    { glyph: '◆', verb: 'Dispatching' },
+    { glyph: '◇', verb: 'Reviewing' },
+    { glyph: '✦', verb: 'Synthesizing' },
+    { glyph: '❋', verb: 'Shipping' },
+];
+/**
+ * Tool labels that anchor к the `Shipping…` frame regardless of
+ * rotation index. These are the write-class tools — the operator sees
+ * "shipping" the moment а real file mutation fires так the indicator
+ * matches the visible filesystem effect.
+ */
+const SHIPPING_TOOLS = new Set([
+    'edit',
+    'write',
+    'build',
+    'multi_edit',
+    'apply_patch',
+]);
+/* ------------------------------------------------------------------ */
+/* Helpers                                                            */
+/* ------------------------------------------------------------------ */
+/**
+ * Compute the visible frame для the current tick. The base index is
+ * derived from а monotonically-incrementing counter (one increment per
+ * `FRAME_INTERVAL_MS` window), и а ship-class tool label overrides the
+ * base so write-tools light up `Shipping…` immediately.
+ *
+ * Exported for the spec so the frame selection is testable without
+ * mounting Ink.
+ */
+export function tickSpinnerFrame(baseIndex, toolLabel) {
+    if (toolLabel && SHIPPING_TOOLS.has(toolLabel.toLowerCase())) {
+        return FRAMES[FRAMES.length - 1] ?? FRAMES[0];
+    }
+    const wrapped = ((baseIndex % FRAMES.length) + FRAMES.length) % FRAMES.length;
+    return FRAMES[wrapped] ?? FRAMES[0];
+}
+/**
+ * Decide whether the spinner should be visible for а dispatch state.
+ * `awaiting_response` и `tool_running` are the only active states; all
+ * other states (`idle`, `aborting`, `aborted`, `completed`, `failed`)
+ * suppress the spinner так the operator does not see а phantom verb
+ * after the dispatch settles.
+ */
+export function isSpinnerActive(dispatchState) {
+    return dispatchState === 'awaiting_response' || dispatchState === 'tool_running';
+}
+/* ------------------------------------------------------------------ */
+/* Component                                                          */
+/* ------------------------------------------------------------------ */
+export function ThinkingSpinner(props) {
+    const active = isSpinnerActive(props.dispatchState);
+    const [frameIndex, setFrameIndex] = useState(0);
+    const intervalMs = props.frameIntervalMs ?? FRAME_INTERVAL_MS;
+    useEffect(() => {
+        if (!active) {
+            // Reset так the next dispatch starts on `Briefing` instead of
+            // mid-rotation. Without this the spinner would resume one verb
+            // later on every turn и quickly drift to `Synthesizing` even на
+            // а fresh brief.
+            setFrameIndex(0);
+            return;
+        }
+        const timer = setInterval(() => {
+            setFrameIndex((previous) => (previous + 1) % FRAMES.length);
+        }, intervalMs);
+        return () => clearInterval(timer);
+    }, [active, intervalMs]);
+    if (!active)
+        return null;
+    const frame = tickSpinnerFrame(frameIndex, props.dispatchToolLabel ?? null);
+    return (_jsxs(Box, { children: [_jsx(Text, { color: ACCENT, children: `${frame.glyph} ` }), _jsx(Text, { children: `${frame.verb}…` })] }));
+}
+//# sourceMappingURL=thinking-spinner.js.map

package/dist/tui/welcome-banner.js

@@ -0,0 +1,107 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Box, Text } from 'ink';
+import { PUG_MASCOT, PUG_MASCOT_CYAN_MASK, PUG_MASCOT_MAX_WIDTH, } from './repl-splash-art.js';
+/* ------------------------------------------------------------------ */
+/* Layout constants                                                   */
+/* ------------------------------------------------------------------ */
+/** Default left-column width when the parent box doesn't pin one. */
+const LEFT_COLUMN_WIDTH = 44;
+/** Default right-column width. */
+const RIGHT_COLUMN_WIDTH = 44;
+const ACCENT = '#3da9fc';
+const BULLET = '·';
+/* ------------------------------------------------------------------ */
+/* Component                                                          */
+/* ------------------------------------------------------------------ */
+export function WelcomeBanner(props) {
+    const { data } = props;
+    const showHandCraftedMascot = props.mascotPrePrinted !== true;
+    const initToast = props.autoInitStatus === 'initialized'
+        ? 'Pugi workspace initialised at .pugi/.'
+        : null;
+    const accountLine = formatAccountLine(data);
+    const modelLine = formatModelLine(data);
+    return (_jsx(Box, { flexDirection: "column", children: _jsxs(Box, { borderStyle: "round", borderColor: ACCENT, paddingX: 1, flexDirection: "row", children: [_jsx(LeftColumn, { greetingName: data.greetingName, cwd: data.cwd, modelLine: modelLine, accountLine: accountLine, cliVersion: data.cliVersion, showHandCraftedMascot: showHandCraftedMascot, initToast: initToast }), _jsx(Box, { width: 2 }), _jsx(RightColumn, { whatsNew: data.whatsNew })] }) }));
+}
+/* ------------------------------------------------------------------ */
+/* Left column — greeting + mascot + status                            */
+/* ------------------------------------------------------------------ */
+function LeftColumn({ greetingName, cwd, modelLine, accountLine, cliVersion, showHandCraftedMascot, initToast, }) {
+    return (_jsxs(Box, { flexDirection: "column", width: LEFT_COLUMN_WIDTH, children: [_jsxs(Box, { children: [_jsx(Text, { bold: true, children: "Pugi" }), _jsx(Text, { bold: true, color: ACCENT, children: ".io" }), _jsx(Text, { dimColor: true, children: `  v${cliVersion}` })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { children: `Welcome back ${greetingName}!` }) }), showHandCraftedMascot ? (_jsx(Box, { marginTop: 1, children: _jsx(MascotColumn, {}) })) : null, _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: modelLine }), _jsx(Text, { dimColor: true, children: accountLine }), _jsx(Text, { dimColor: true, children: truncatePath(cwd, LEFT_COLUMN_WIDTH - 2) })] }), initToast ? (_jsx(Box, { marginTop: 1, children: _jsx(Text, { color: ACCENT, children: initToast }) })) : null] }));
+}
+/* ------------------------------------------------------------------ */
+/* Right column — tips + what's new                                    */
+/* ------------------------------------------------------------------ */
+function RightColumn({ whatsNew, }) {
+    return (_jsxs(Box, { flexDirection: "column", width: RIGHT_COLUMN_WIDTH, children: [_jsx(Text, { dimColor: true, children: "Tips for getting started" }), _jsxs(Box, { flexDirection: "column", children: [_jsx(TipRow, { text: "Run /init to scaffold PUGI.md instructions" }), _jsx(TipRow, { text: "Brief Pugi \u2014 the workforce dispatches" }), _jsx(TipRow, { text: "Triple-review gate before push: /review --triple" }), _jsx(TipRow, { text: "/help for every slash command" })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: '─'.repeat(Math.min(RIGHT_COLUMN_WIDTH - 2, 18)) }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: "What's new" }) }), _jsx(Box, { flexDirection: "column", children: whatsNew.length > 0 ? (whatsNew.map((line, index) => (_jsx(TipRow, { text: line }, `whatsnew-${index}`)))) : (_jsx(Text, { dimColor: true, children: `  ${BULLET} /release-notes for the full changelog` })) })] }));
+}
+function TipRow({ text }) {
+    return (_jsxs(Text, { children: [_jsx(Text, { color: ACCENT, children: `  ${BULLET} ` }), _jsx(Text, { children: text })] }));
+}
+/* ------------------------------------------------------------------ */
+/* Mascot column (hand-crafted ASCII fallback path)                    */
+/* ------------------------------------------------------------------ */
+function MascotColumn() {
+    return (_jsx(Box, { flexDirection: "column", minWidth: PUG_MASCOT_MAX_WIDTH, children: PUG_MASCOT.map((row, rowIndex) => (_jsx(MascotRow, { row: row, mask: PUG_MASCOT_CYAN_MASK[rowIndex] ?? [] }, `mascot-row-${rowIndex}`))) }));
+}
+function MascotRow({ row, mask, }) {
+    // Split into contiguous same-color runs so we emit one <Text> per
+    // run instead of one per character (keeps the Ink tree shallow и
+    // the snapshot diff readable).
+    const runs = [];
+    let buffer = '';
+    let bufferCyan = false;
+    for (let column = 0; column < row.length; column += 1) {
+        const ch = row.charAt(column);
+        const cyan = mask[column] === true;
+        if (buffer.length === 0) {
+            buffer = ch;
+            bufferCyan = cyan;
+            continue;
+        }
+        if (cyan === bufferCyan) {
+            buffer += ch;
+        }
+        else {
+            runs.push({ text: buffer, cyan: bufferCyan });
+            buffer = ch;
+            bufferCyan = cyan;
+        }
+    }
+    if (buffer.length > 0)
+        runs.push({ text: buffer, cyan: bufferCyan });
+    return (_jsx(Text, { children: runs.map((run, runIndex) => run.cyan ? (_jsx(Text, { color: ACCENT, children: run.text }, runIndex)) : (_jsx(Text, { color: "gray", children: run.text }, runIndex))) }));
+}
+/* ------------------------------------------------------------------ */
+/* Formatters                                                         */
+/* ------------------------------------------------------------------ */
+function formatModelLine(data) {
+    const tierLabel = data.plan ? ` ${BULLET} ${capitalize(data.plan)} Tier` : '';
+    return `${data.model}${tierLabel}`;
+}
+function formatAccountLine(data) {
+    if (!data.email) {
+        return 'Anonymous (run /login to authenticate)';
+    }
+    const tenant = data.tenant ? ` ${BULLET} ${data.tenant} Org` : '';
+    return `${data.email}${tenant}`;
+}
+function capitalize(value) {
+    if (value.length === 0)
+        return value;
+    return value.charAt(0).toUpperCase() + value.slice(1).toLowerCase();
+}
+/**
+ * Trim the cwd from the LEFT (preserving the basename) so the operator
+ * always sees which project they're in even when the column is narrow.
+ * Mirrors the Claude Code boot card convention: long paths get an
+ * ellipsis on the head, never on the tail.
+ */
+export function truncatePath(path, max) {
+    if (path.length <= max)
+        return path;
+    if (max <= 3)
+        return path.slice(-max);
+    return `…${path.slice(-(max - 1))}`;
+}
+//# sourceMappingURL=welcome-banner.js.map

package/dist/tui/welcome-data.js

@@ -0,0 +1,293 @@
+/**
+ * Pure data layer for the `<WelcomeBanner />` component (CEO P0 #2,
+ * 2026-05-29). Lives in its own module so it can be unit-tested without
+ * rendering Ink, and so the banner component itself contains zero IO.
+ *
+ * The banner is the CC-style 2-column boxed greeting that replaces the
+ * α6.14 wave-3 `<ReplSplash />` on the bare REPL boot path. It mirrors
+ * Claude Code's boot layout:
+ *
+ *     ╭────── Pugi v0.1.0-beta.46 ──────╮
+ *     │                                  │ Tips for getting started
+ *     │      Welcome back Yurii!         │ Run /init to create PUGI.md...
+ *     │                                  │ ───────────
+ *     │         ▗ ▗   ▖ ▖                │ What's new
+ *     │           ▘▘ ▝▝                  │ * 0.1.0-beta.26 — Wave 6 RAG ...
+ *     │  Sonnet 4.6 (1M context) · Founder
+ *     │  yuriy.bulah@gmail.com · pugi-io Org
+ *     │  /Volumes/T9/Web/.../TestRepos2  │
+ *     ╰──────────────────────────────────╯
+ *
+ * Data sources, in priority order:
+ *
+ *   - Account email + tenant + plan: JWT principal decoded from the
+ *     active credential. Falls back to anonymous label when no
+ *     credential is on disk (operator boots `pugi` before login).
+ *   - Greeting first-name: best-effort split of the local part of the
+ *     email. Falls back к "operator" when unauthenticated.
+ *   - Model: env override `PUGI_ENGINE_MODEL_CODE`, then the operator's
+ *     workspace settings `defaultModel`, then "Sonnet 4.6 (1M context)"
+ *     as the locked α7 default.
+ *   - Cwd: absolute path of `process.cwd()` — banner left column shows
+ *     the full path so the operator confirms они are в the right repo.
+ *   - What's new: top 3 release-note titles from `apps/pugi-cli/CHANGELOG.md`
+ *     newer than `~/.pugi/.last-seen-version`. Falls back к the top 3
+ *     overall when last-seen marker is missing. Each entry is a one-line
+ *     headline ("0.1.0-beta.26 — Wave 6 RAG consumer middleware") trimmed
+ *     к 60 chars so the right column does not wrap on a 100-col terminal.
+ *
+ * Every resolver swallows its IO error and returns the documented
+ * fallback so a partial environment (missing CHANGELOG, malformed JWT,
+ * unreadable settings) never blocks the banner.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, resolve as resolvePath } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { DEFAULT_API_URL, normalizeApiUrl, readCredentialsFile, resolveActiveCredential, } from '../core/credentials.js';
+import { parseChangelog } from '../core/release-notes/parser.js';
+function decodeJwtPayload(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length < 2)
+            return null;
+        const payload = parts[1];
+        if (!payload)
+            return null;
+        const padded = payload
+            .replace(/-/g, '+')
+            .replace(/_/g, '/')
+            .padEnd(payload.length + ((4 - (payload.length % 4)) % 4), '=');
+        const json = Buffer.from(padded, 'base64').toString('utf8');
+        const obj = JSON.parse(json);
+        if (!obj || typeof obj !== 'object')
+            return null;
+        return {
+            ...(typeof obj.sub === 'string' && { sub: obj.sub }),
+            ...(typeof obj.email === 'string' && { email: obj.email }),
+            ...(typeof obj.customerId === 'string' && { customerId: obj.customerId }),
+            ...(typeof obj.plan === 'string' && { plan: obj.plan }),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/* ------------------------------------------------------------------ */
+/* Resolvers                                                          */
+/* ------------------------------------------------------------------ */
+/**
+ * Derive a greeting first-name from an email's local part. The split
+ * is intentionally aggressive: dot-separated, hyphen-separated, and
+ * digit-stripped so `yuriy.bulah@gmail.com` resolves к "Yuriy" instead
+ * of "yuriy.bulah". Title-cases the first segment. Falls back к
+ * "operator" when no email is available.
+ *
+ * Export so the spec can lock the heuristic against edge cases (numeric
+ * local part, plus-tag aliases, single-letter local part).
+ */
+export function deriveGreetingName(email) {
+    if (!email || typeof email !== 'string')
+        return 'operator';
+    const at = email.indexOf('@');
+    if (at <= 0)
+        return 'operator';
+    const local = email.slice(0, at);
+    // Strip plus-tag aliases (`name+tag@host` → `name`).
+    const noTag = local.split('+')[0] ?? local;
+    // First dot / hyphen / underscore segment wins; this is the
+    // colloquial "given name" surface for the vast majority of work
+    // emails ("first.last@..." / "first-last@...").
+    const firstSegment = noTag.split(/[._-]/)[0] ?? noTag;
+    // Strip trailing digits some signup flows append (`yurii2@`) so the
+    // greeting reads as a name, not a username.
+    const stripped = firstSegment.replace(/[0-9]+$/u, '');
+    if (stripped.length === 0)
+        return 'operator';
+    return stripped.charAt(0).toUpperCase() + stripped.slice(1);
+}
+/**
+ * Resolve the model display string. Priority:
+ *
+ *   1. `PUGI_ENGINE_MODEL_CODE` env override (operator-set in shell).
+ *   2. `.pugi/settings.json` → `defaultModel` field (per-workspace).
+ *   3. Locked α7 default `"Sonnet 4.6 (1M context)"`.
+ *
+ * Returns the value verbatim — the banner is responsible for trimming
+ * if the string is too long for the column.
+ */
+export function resolveModelDisplay(env, settingsOverride) {
+    const envModel = env.PUGI_ENGINE_MODEL_CODE;
+    if (typeof envModel === 'string' && envModel.length > 0)
+        return envModel;
+    const settingsModel = settingsOverride?.defaultModel;
+    if (typeof settingsModel === 'string' && settingsModel.length > 0) {
+        return settingsModel;
+    }
+    return 'Sonnet 4.6 (1M context)';
+}
+/**
+ * Locate the bundled CHANGELOG.md. The CLI ships к
+ * `node_modules/@pugi/cli/dist/tui/welcome-data.js` so the changelog
+ * lives at `node_modules/@pugi/cli/CHANGELOG.md` — two directory hops
+ * up from this file. In a local pnpm dev checkout the structure is the
+ * same (`src/tui/` ⇒ `../../CHANGELOG.md`) because tsx re-resolves the
+ * same relative tree.
+ */
+function defaultChangelogPath() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    return resolvePath(here, '..', '..', 'CHANGELOG.md');
+}
+/**
+ * Read top-3 "what's new" headlines from the CLI CHANGELOG.md. Each
+ * headline is `<version> — <first non-empty section body line>` trimmed
+ * к 60 chars so the right column does not wrap on a 100-col terminal.
+ * Returns an empty array when the file is missing / unparseable.
+ *
+ * The body-line heuristic walks к the first non-empty, non-section-
+ * header line below the version header. For Keep-a-Changelog entries
+ * the second line is usually `### Added` / `### Fixed`; we skip those
+ * headers и land on the first bullet, which is the operator-visible
+ * one-liner ("- L30 `pugi theme` ...").
+ */
+export function readWhatsNew(changelogPath) {
+    const path = changelogPath ?? defaultChangelogPath();
+    try {
+        if (!existsSync(path))
+            return [];
+        const raw = readFileSync(path, 'utf8');
+        if (!raw || raw.length === 0)
+            return [];
+        const sections = parseChangelog(raw);
+        const headlines = [];
+        for (const section of sections) {
+            if (headlines.length >= 3)
+                break;
+            // Skip the "[Unreleased]" / "[Unreleased] - YYYY-MM-DD" section —
+            // the banner is meant к surface SHIPPED notes only. The parser
+            // captures Unreleased identically к а tagged version, so we
+            // filter here.
+            if (/^unreleased$/i.test(section.version))
+                continue;
+            const firstBullet = pickFirstBullet(section.body);
+            if (!firstBullet)
+                continue;
+            const headline = `${section.version} — ${firstBullet}`;
+            headlines.push(truncate(headline, 60));
+        }
+        return headlines;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Pull the first bullet text out of a Keep-a-Changelog section body.
+ * Skips `### <subsection>` headers, blank lines, и non-bullet prose
+ * (release-note footers like "### Notes"). Returns undefined when no
+ * bullet is present.
+ *
+ * Body lines arrive verbatim from the parser; bullets follow the
+ * `- ` / `* ` Markdown convention. We strip the leading bullet glyph
+ * + the first whitespace run so the rendered string is the bullet
+ * content only.
+ */
+function pickFirstBullet(body) {
+    const lines = body.split('\n');
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (trimmed.length === 0)
+            continue;
+        if (trimmed.startsWith('### '))
+            continue;
+        if (trimmed.startsWith('- ') || trimmed.startsWith('* ')) {
+            // Strip leading bullet glyph + ws and collapse internal MD ticks.
+            return trimmed
+                .slice(2)
+                .replace(/`/g, '')
+                .replace(/\*\*/g, '')
+                .trim();
+        }
+    }
+    return undefined;
+}
+function truncate(text, max) {
+    if (text.length <= max)
+        return text;
+    // Reserve 1 char for the ellipsis so we land on EXACTLY `max`
+    // visible chars including the dot. Single Unicode ellipsis would be
+    // narrower but some terminals render it as а full-width glyph in
+    // CJK locales — ASCII three-dot stays predictable.
+    return `${text.slice(0, max - 1).trimEnd()}…`;
+}
+/**
+ * Resolve the active credential and decode the JWT principal. Returns
+ * the email / tenant / plan triple when authenticated, null fields when
+ * anonymous. Encapsulates the credential + JWT IO so the spec can drive
+ * the resolver via an env override.
+ */
+function resolvePrincipal(env, home) {
+    const credential = resolveActiveCredential(env, home);
+    if (!credential) {
+        const file = readCredentialsFile(home);
+        return {
+            apiUrl: normalizeApiUrl(env.PUGI_API_URL ?? file.activeApiUrl ?? DEFAULT_API_URL),
+        };
+    }
+    const principal = decodeJwtPayload(credential.apiKey);
+    return {
+        apiUrl: credential.apiUrl,
+        ...(principal?.email && { email: principal.email }),
+        ...(principal?.customerId && { tenant: principal.customerId }),
+        ...(principal?.plan && { plan: principal.plan }),
+    };
+}
+/**
+ * Best-effort read of `.pugi/settings.json`. Returns null when the file
+ * is missing / unreadable / malformed so the model resolver can fall
+ * back to the env override + locked default.
+ */
+function readSettingsBlob(cwd) {
+    try {
+        const path = resolvePath(cwd, '.pugi', 'settings.json');
+        if (!existsSync(path))
+            return null;
+        const raw = readFileSync(path, 'utf8');
+        if (!raw || raw.length === 0)
+            return null;
+        const obj = JSON.parse(raw);
+        if (typeof obj?.defaultModel === 'string') {
+            return { defaultModel: obj.defaultModel };
+        }
+        return {};
+    }
+    catch {
+        return null;
+    }
+}
+/* ------------------------------------------------------------------ */
+/* Entry point                                                        */
+/* ------------------------------------------------------------------ */
+export function collectWelcomeData(input) {
+    const env = input.env ?? process.env;
+    const home = input.home ?? homedir();
+    const cwd = input.cwd ?? process.cwd();
+    const principal = resolvePrincipal(env, home);
+    const settings = input.settingsOverride !== undefined
+        ? input.settingsOverride
+        : readSettingsBlob(cwd);
+    const greetingName = deriveGreetingName(principal.email);
+    const model = resolveModelDisplay(env, settings);
+    const whatsNew = readWhatsNew(input.changelogPath);
+    return {
+        greetingName,
+        ...(principal.email && { email: principal.email }),
+        ...(principal.tenant && { tenant: principal.tenant }),
+        ...(principal.plan && { plan: principal.plan }),
+        model,
+        cwd,
+        cliVersion: input.cliVersion,
+        whatsNew,
+    };
+}
+//# sourceMappingURL=welcome-data.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pugi/cli",
-  "version": "0.1.0-beta.46",
+  "version": "0.1.0-beta.48",
   "description": "Pugi CLI - terminal-native software execution system",
   "homepage": "https://pugi.io",
   "repository": {
@@ -55,7 +55,7 @@
     "undici": "^8.3.0",
     "zod": "^3.23.0",
     "@pugi/personas": "0.1.2",
-    "@pugi/sdk": "0.1.0-beta.46"
+    "@pugi/sdk": "0.1.0-beta.48"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",