@pugi/cli 0.1.0-beta.5 → 0.1.0-beta.50

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (263) hide show
  1. package/THIRD_PARTY_NOTICES.md +40 -0
  2. package/assets/pugi-mascot.ansi +15 -25
  3. package/assets/pugi-prozr2-mascot.ansi +9 -0
  4. package/bin/run.js +33 -1
  5. package/dist/commands/jobs-watch.js +201 -0
  6. package/dist/commands/jobs.js +15 -0
  7. package/dist/commands/smoke.js +133 -0
  8. package/dist/core/agent-progress/cleanup.js +134 -0
  9. package/dist/core/agent-progress/schema.js +144 -0
  10. package/dist/core/agent-progress/writer.js +101 -0
  11. package/dist/core/artifact-chain/dispatcher.js +148 -0
  12. package/dist/core/artifact-chain/exporter.js +164 -0
  13. package/dist/core/artifact-chain/state.js +243 -0
  14. package/dist/core/artifact-chain/steps.js +169 -0
  15. package/dist/core/auth/ensure-authenticated.js +129 -0
  16. package/dist/core/auth/env-provider.js +238 -0
  17. package/dist/core/auto-update/channels.js +122 -0
  18. package/dist/core/auto-update/checker.js +241 -0
  19. package/dist/core/auto-update/state.js +235 -0
  20. package/dist/core/bare-mode/index.js +107 -0
  21. package/dist/core/bash-classifier.js +400 -4
  22. package/dist/core/checkpoint/resumer.js +149 -0
  23. package/dist/core/checkpoint/rewinder.js +291 -0
  24. package/dist/core/codegraph/decision-store.js +248 -0
  25. package/dist/core/codegraph/detect-repo.js +459 -0
  26. package/dist/core/codegraph/install.js +134 -0
  27. package/dist/core/codegraph/offer-hook.js +220 -0
  28. package/dist/core/compact/auto-trigger.js +96 -0
  29. package/dist/core/compact/buffer-rewriter.js +115 -0
  30. package/dist/core/compact/summarizer.js +208 -0
  31. package/dist/core/compact/token-counter.js +108 -0
  32. package/dist/core/consensus/diff-capture.js +112 -3
  33. package/dist/core/context/index.js +7 -0
  34. package/dist/core/context/markdown-traverse.js +255 -0
  35. package/dist/core/cost/rate-card.js +129 -0
  36. package/dist/core/cost/tracker.js +221 -0
  37. package/dist/core/denial-tracking/index.js +8 -0
  38. package/dist/core/denial-tracking/state.js +264 -0
  39. package/dist/core/diagnostics/probe-runner.js +93 -0
  40. package/dist/core/diagnostics/probes/api.js +46 -0
  41. package/dist/core/diagnostics/probes/auth.js +86 -0
  42. package/dist/core/diagnostics/probes/bare-mode.js +42 -0
  43. package/dist/core/diagnostics/probes/cli-version.js +127 -0
  44. package/dist/core/diagnostics/probes/config.js +72 -0
  45. package/dist/core/diagnostics/probes/denial-tracking.js +57 -0
  46. package/dist/core/diagnostics/probes/disk.js +81 -0
  47. package/dist/core/diagnostics/probes/git.js +65 -0
  48. package/dist/core/diagnostics/probes/hooks.js +118 -0
  49. package/dist/core/diagnostics/probes/mcp.js +75 -0
  50. package/dist/core/diagnostics/probes/node.js +59 -0
  51. package/dist/core/diagnostics/probes/pnpm.js +36 -0
  52. package/dist/core/diagnostics/probes/pugi-md.js +89 -0
  53. package/dist/core/diagnostics/probes/sandbox.js +40 -0
  54. package/dist/core/diagnostics/probes/session.js +74 -0
  55. package/dist/core/diagnostics/probes/status-snapshot.js +488 -0
  56. package/dist/core/diagnostics/probes/workspace.js +63 -0
  57. package/dist/core/diagnostics/types.js +70 -0
  58. package/dist/core/dispatch/cache-cleanup.js +197 -0
  59. package/dist/core/dispatch/cache-handoff.js +295 -0
  60. package/dist/core/edits/dispatch.js +218 -2
  61. package/dist/core/edits/journal.js +199 -0
  62. package/dist/core/edits/layer-d-ast.js +557 -14
  63. package/dist/core/edits/verify-hook.js +273 -0
  64. package/dist/core/edits/worktree.js +322 -0
  65. package/dist/core/engine/anvil-client.js +115 -5
  66. package/dist/core/engine/budgets.js +98 -0
  67. package/dist/core/engine/context-prefix.js +155 -0
  68. package/dist/core/engine/intent.js +260 -0
  69. package/dist/core/engine/native-pugi.js +860 -211
  70. package/dist/core/engine/prompts.js +88 -2
  71. package/dist/core/engine/strip-internal-fields.js +124 -0
  72. package/dist/core/engine/tool-bridge.js +1045 -36
  73. package/dist/core/feedback/queue.js +177 -0
  74. package/dist/core/feedback/submitter.js +145 -0
  75. package/dist/core/file-cache.js +113 -1
  76. package/dist/core/hooks/events.js +44 -0
  77. package/dist/core/hooks/index.js +15 -0
  78. package/dist/core/hooks/registry.js +213 -0
  79. package/dist/core/hooks/runner.js +236 -0
  80. package/dist/core/hooks/v2/event-emitter.js +115 -0
  81. package/dist/core/hooks/v2/executor.js +282 -0
  82. package/dist/core/hooks/v2/index.js +25 -0
  83. package/dist/core/hooks/v2/lifecycle.js +104 -0
  84. package/dist/core/hooks/v2/loader.js +216 -0
  85. package/dist/core/hooks/v2/matcher.js +125 -0
  86. package/dist/core/hooks/v2/trust.js +143 -0
  87. package/dist/core/hooks/v2/types.js +86 -0
  88. package/dist/core/lsp/cache.js +105 -0
  89. package/dist/core/lsp/client.js +776 -0
  90. package/dist/core/lsp/language-detect.js +66 -0
  91. package/dist/core/lsp/post-edit-diagnostics.js +171 -0
  92. package/dist/core/mcp/client.js +75 -6
  93. package/dist/core/mcp/http-server.js +553 -0
  94. package/dist/core/mcp/orchestrator-tools.js +662 -0
  95. package/dist/core/mcp/permission.js +190 -0
  96. package/dist/core/mcp/registry.js +24 -2
  97. package/dist/core/mcp/server-tools.js +219 -0
  98. package/dist/core/mcp/server.js +397 -0
  99. package/dist/core/memory/dual-write.js +416 -0
  100. package/dist/core/memory/phase1-kinds.js +20 -0
  101. package/dist/core/memory-sync/queue.js +158 -0
  102. package/dist/core/onboarding/ensure-initialized.js +133 -0
  103. package/dist/core/onboarding/marker.js +111 -0
  104. package/dist/core/onboarding/telemetry-state.js +108 -0
  105. package/dist/core/output-style/presets.js +176 -0
  106. package/dist/core/output-style/state.js +185 -0
  107. package/dist/core/path-security.js +284 -2
  108. package/dist/core/permissions/auto-classifier.js +124 -0
  109. package/dist/core/permissions/circuit-breaker.js +83 -0
  110. package/dist/core/permissions/gate.js +278 -0
  111. package/dist/core/permissions/index.js +20 -0
  112. package/dist/core/permissions/mode.js +174 -0
  113. package/dist/core/permissions/state.js +241 -0
  114. package/dist/core/permissions/tool-class.js +93 -0
  115. package/dist/core/prd-check/parser.js +215 -0
  116. package/dist/core/prd-check/reporter.js +127 -0
  117. package/dist/core/prd-check/session-review.js +557 -0
  118. package/dist/core/prd-check/verifiers.js +223 -0
  119. package/dist/core/pugi-md/context-injector.js +76 -0
  120. package/dist/core/pugi-md/walk-up.js +207 -0
  121. package/dist/core/release-notes/parser.js +241 -0
  122. package/dist/core/release-notes/state.js +116 -0
  123. package/dist/core/repl/history.js +11 -1
  124. package/dist/core/repl/model-pricing.js +135 -0
  125. package/dist/core/repl/session.js +1897 -37
  126. package/dist/core/repl/slash-commands.js +430 -15
  127. package/dist/core/repl/store/session-store.js +31 -2
  128. package/dist/core/repl/workspace-context.js +22 -0
  129. package/dist/core/repo-map/build.js +125 -0
  130. package/dist/core/repo-map/cache.js +185 -0
  131. package/dist/core/repo-map/extractor.js +254 -0
  132. package/dist/core/repo-map/formatter.js +145 -0
  133. package/dist/core/repo-map/scanner.js +211 -0
  134. package/dist/core/retry-budget/budget.js +284 -0
  135. package/dist/core/retry-budget/index.js +5 -0
  136. package/dist/core/session.js +92 -0
  137. package/dist/core/settings.js +80 -0
  138. package/dist/core/share/formatter.js +271 -0
  139. package/dist/core/share/redactor.js +221 -0
  140. package/dist/core/share/uploader.js +267 -0
  141. package/dist/core/skills/defaults.js +457 -0
  142. package/dist/core/smoke/headless-driver.js +174 -0
  143. package/dist/core/smoke/orchestrator.js +194 -0
  144. package/dist/core/smoke/runner.js +238 -0
  145. package/dist/core/smoke/scenario-parser.js +316 -0
  146. package/dist/core/subagents/dispatcher-real.js +600 -0
  147. package/dist/core/subagents/dispatcher.js +113 -24
  148. package/dist/core/subagents/index.js +18 -5
  149. package/dist/core/subagents/isolation-matrix.js +213 -0
  150. package/dist/core/subagents/spawn.js +19 -4
  151. package/dist/core/telemetry/emitter.js +229 -0
  152. package/dist/core/telemetry/queue.js +251 -0
  153. package/dist/core/theme/context.js +91 -0
  154. package/dist/core/theme/presets.js +228 -0
  155. package/dist/core/theme/state.js +181 -0
  156. package/dist/core/todos/invariant.js +10 -0
  157. package/dist/core/todos/state.js +177 -0
  158. package/dist/core/transport/version-interceptor.js +166 -0
  159. package/dist/core/vim/keymap.js +288 -0
  160. package/dist/core/vim/state.js +92 -0
  161. package/dist/core/worktree-manager/cleanup.js +123 -0
  162. package/dist/core/worktree-manager/manager.js +303 -0
  163. package/dist/index.js +28 -0
  164. package/dist/runtime/bootstrap.js +190 -0
  165. package/dist/runtime/cli.js +3241 -343
  166. package/dist/runtime/commands/cancel.js +231 -0
  167. package/dist/runtime/commands/chain.js +489 -0
  168. package/dist/runtime/commands/codegraph-status.js +227 -0
  169. package/dist/runtime/commands/compact.js +297 -0
  170. package/dist/runtime/commands/cost.js +199 -0
  171. package/dist/runtime/commands/delegate.js +242 -11
  172. package/dist/runtime/commands/dispatch.js +126 -0
  173. package/dist/runtime/commands/doctor.js +412 -0
  174. package/dist/runtime/commands/feedback.js +184 -0
  175. package/dist/runtime/commands/hooks.js +184 -0
  176. package/dist/runtime/commands/lsp.js +368 -0
  177. package/dist/runtime/commands/mcp.js +879 -0
  178. package/dist/runtime/commands/memory.js +508 -0
  179. package/dist/runtime/commands/model.js +237 -0
  180. package/dist/runtime/commands/onboarding.js +275 -0
  181. package/dist/runtime/commands/patch.js +128 -0
  182. package/dist/runtime/commands/permissions.js +112 -0
  183. package/dist/runtime/commands/plan.js +143 -0
  184. package/dist/runtime/commands/prd-check.js +285 -0
  185. package/dist/runtime/commands/redo-blob-store.js +92 -0
  186. package/dist/runtime/commands/redo.js +361 -0
  187. package/dist/runtime/commands/release-notes.js +229 -0
  188. package/dist/runtime/commands/repo-map.js +95 -0
  189. package/dist/runtime/commands/report.js +299 -0
  190. package/dist/runtime/commands/resume.js +118 -0
  191. package/dist/runtime/commands/review-consensus.js +17 -2
  192. package/dist/runtime/commands/rewind.js +333 -0
  193. package/dist/runtime/commands/sessions.js +163 -0
  194. package/dist/runtime/commands/share.js +316 -0
  195. package/dist/runtime/commands/status.js +186 -0
  196. package/dist/runtime/commands/stickers.js +82 -0
  197. package/dist/runtime/commands/style.js +194 -0
  198. package/dist/runtime/commands/theme.js +196 -0
  199. package/dist/runtime/commands/undo.js +32 -0
  200. package/dist/runtime/commands/update.js +289 -0
  201. package/dist/runtime/commands/vim.js +140 -0
  202. package/dist/runtime/commands/worktree.js +177 -0
  203. package/dist/runtime/commands/worktrees.js +155 -0
  204. package/dist/runtime/headless-repl.js +195 -0
  205. package/dist/runtime/headless.js +543 -0
  206. package/dist/runtime/load-hooks-or-exit.js +71 -0
  207. package/dist/runtime/plan-decompose.js +531 -0
  208. package/dist/runtime/version.js +65 -0
  209. package/dist/tools/agent-tool.js +229 -0
  210. package/dist/tools/apply-patch.js +556 -0
  211. package/dist/tools/ask-user-question.js +213 -0
  212. package/dist/tools/ask-user.js +115 -0
  213. package/dist/tools/bash.js +203 -4
  214. package/dist/tools/file-tools.js +85 -14
  215. package/dist/tools/lsp-tools.js +189 -0
  216. package/dist/tools/mcp-tool.js +260 -0
  217. package/dist/tools/multi-edit.js +361 -0
  218. package/dist/tools/powershell.js +268 -0
  219. package/dist/tools/registry.js +51 -0
  220. package/dist/tools/skill-tool.js +96 -0
  221. package/dist/tools/tasks.js +208 -0
  222. package/dist/tools/todo-write.js +184 -0
  223. package/dist/tools/web-fetch.js +147 -2
  224. package/dist/tools/web-search.js +458 -0
  225. package/dist/tui/agent-progress-card.js +111 -0
  226. package/dist/tui/agent-tree.js +10 -0
  227. package/dist/tui/ask-modal.js +2 -2
  228. package/dist/tui/ask-user-question-prompt.js +192 -0
  229. package/dist/tui/compact-banner.js +81 -0
  230. package/dist/tui/conversation-pane.js +82 -8
  231. package/dist/tui/cost-table.js +111 -0
  232. package/dist/tui/doctor-table.js +46 -0
  233. package/dist/tui/feedback-prompt.js +156 -0
  234. package/dist/tui/input-box.js +218 -3
  235. package/dist/tui/markdown-render.js +4 -4
  236. package/dist/tui/onboarding-wizard.js +240 -0
  237. package/dist/tui/permissions-picker.js +86 -0
  238. package/dist/tui/render.js +35 -0
  239. package/dist/tui/repl-render.js +313 -35
  240. package/dist/tui/repl-splash-art.js +1 -1
  241. package/dist/tui/repl-splash-mascot.js +32 -8
  242. package/dist/tui/repl-splash.js +2 -2
  243. package/dist/tui/repl.js +85 -5
  244. package/dist/tui/splash.js +1 -1
  245. package/dist/tui/status-bar.js +94 -16
  246. package/dist/tui/status-table.js +7 -0
  247. package/dist/tui/stickers-art.js +136 -0
  248. package/dist/tui/style-table.js +28 -0
  249. package/dist/tui/theme-table.js +29 -0
  250. package/dist/tui/thinking-spinner.js +123 -0
  251. package/dist/tui/tool-stream-pane.js +52 -3
  252. package/dist/tui/update-banner.js +27 -2
  253. package/dist/tui/vim-input.js +267 -0
  254. package/dist/tui/welcome-banner.js +107 -0
  255. package/dist/tui/welcome-data.js +293 -0
  256. package/docs/examples/codegraph.mcp.json +10 -0
  257. package/package.json +12 -6
  258. package/test/scenarios/codegen-create-file.scenario.txt +13 -0
  259. package/test/scenarios/compact-force.scenario.txt +11 -0
  260. package/test/scenarios/identity.scenario.txt +11 -0
  261. package/test/scenarios/persona-handoff.scenario.txt +11 -0
  262. package/test/scenarios/walkback.scenario.txt +12 -0
  263. package/dist/core/engine/compaction-hook.js +0 -154
@@ -0,0 +1,86 @@
1
+ /**
2
+ * AUTH probe — verifies the active credential resolves to a working
3
+ * Bearer token by calling `GET /api/pugi/health` with it.
4
+ *
5
+ * Failure modes (deterministic mapping):
6
+ * - no credential found in env or `~/.pugi/credentials.json`
7
+ * → status `error`, remediation = `pugi login`
8
+ * - credential exists but server returns 401/403
9
+ * → status `error`, remediation = `pugi login` (token expired/revoked)
10
+ * - credential exists but server returns 5xx OR network fails
11
+ * → status `warn` (server-side; don't blame the operator)
12
+ * - credential exists and server returns 200
13
+ * → status `ok` (latency captured)
14
+ *
15
+ * NOTE: the probe must NEVER log the token itself. Memory hit
16
+ * `feedback_no_claude_attribution_anywhere_hard_rule` plus the CSO
17
+ * sweep on bearer leaks (history: PR-AGENT-MERGE-GATE 2026-05-15)
18
+ * frame why this is enforced at the probe layer.
19
+ */
20
+ export async function probeAuth(ctx, deps) {
21
+ const credential = deps.resolveCredential(ctx.env, ctx.home);
22
+ if (!credential) {
23
+ return {
24
+ name: 'AUTH',
25
+ status: 'error',
26
+ detail: 'No credential — no PUGI_API_KEY env and no ~/.pugi/credentials.json',
27
+ remediation: 'Run `pugi login` to authenticate',
28
+ };
29
+ }
30
+ const startedAt = deps.now();
31
+ let response;
32
+ try {
33
+ response = await deps.fetchImpl(`${stripTrailingSlash(credential.apiUrl)}/api/pugi/health`, {
34
+ method: 'GET',
35
+ headers: {
36
+ Authorization: `Bearer ${credential.apiKey}`,
37
+ },
38
+ });
39
+ }
40
+ catch (error) {
41
+ const message = error instanceof Error ? error.message : String(error);
42
+ return {
43
+ name: 'AUTH',
44
+ status: 'warn',
45
+ detail: `Auth check skipped — network error contacting ${credential.apiUrl}`,
46
+ remediation: `Verify network: ${message}`,
47
+ };
48
+ }
49
+ const latencyMs = deps.now() - startedAt;
50
+ if (response.status === 401 || response.status === 403) {
51
+ return {
52
+ name: 'AUTH',
53
+ status: 'error',
54
+ detail: `Token rejected (${response.status}) by ${credential.apiUrl}`,
55
+ latencyMs,
56
+ remediation: 'Token expired or revoked — run `pugi login`',
57
+ };
58
+ }
59
+ if (response.status >= 500) {
60
+ return {
61
+ name: 'AUTH',
62
+ status: 'warn',
63
+ detail: `Server error ${response.status} from ${credential.apiUrl}`,
64
+ latencyMs,
65
+ remediation: 'Try again in a moment; if it persists, check api.pugi.io status',
66
+ };
67
+ }
68
+ if (response.status !== 200) {
69
+ return {
70
+ name: 'AUTH',
71
+ status: 'warn',
72
+ detail: `Unexpected status ${response.status} from /api/pugi/health`,
73
+ latencyMs,
74
+ };
75
+ }
76
+ return {
77
+ name: 'AUTH',
78
+ status: 'ok',
79
+ detail: `Authenticated against ${credential.apiUrl}`,
80
+ latencyMs,
81
+ };
82
+ }
83
+ function stripTrailingSlash(url) {
84
+ return url.endsWith('/') ? url.slice(0, -1) : url;
85
+ }
86
+ //# sourceMappingURL=auth.js.map
@@ -0,0 +1,42 @@
1
+ /**
2
+ * BARE MODE probe — Leak L22 (2026-05-27).
3
+ *
4
+ * Surfaces the `--bare` activation state inside `pugi doctor`. The row is
5
+ * informational: bare mode is an opt-in operator choice, never an error.
6
+ * Operators triaging "why is Pugi ignoring my PUGI.md / why was the
7
+ * `.pugi/` scaffold skipped" see the cause without grep'ing the env.
8
+ *
9
+ * Status semantics:
10
+ * - `skipped` when bare mode is OFF (default). The probe stays silent
11
+ * in the table since there is nothing to report; the row still
12
+ * renders so the JSON consumer can read a stable schema.
13
+ * - `ok` when bare mode is ON via `--bare` or `PUGI_BARE=1`. The detail
14
+ * enumerates the surfaces that are currently bypassed.
15
+ *
16
+ * No I/O — pure env probe. Wired into `buildDefaultProbes` in
17
+ * `runtime/commands/doctor.ts`.
18
+ */
19
+ import { isBareMode, BARE_MODE_DOCTOR_LABEL } from '../../bare-mode/index.js';
20
+ /**
21
+ * One-line summary printed in the `--bare` row when bare mode is on.
22
+ * Exported so the spec can assert the exact wording — operators reading
23
+ * `pugi doctor` should see the list of surfaces that the flag disables.
24
+ */
25
+ export const BARE_MODE_ACTIVE_DETAIL = 'bare mode active: PUGI.md walk-up + auto-init + persona auto-load disabled';
26
+ export const BARE_MODE_INACTIVE_DETAIL = 'bare mode off (default auto-discovery)';
27
+ export function probeBareMode(input = {}) {
28
+ const env = input.env ?? process.env;
29
+ if (isBareMode(env)) {
30
+ return {
31
+ name: BARE_MODE_DOCTOR_LABEL,
32
+ status: 'ok',
33
+ detail: BARE_MODE_ACTIVE_DETAIL,
34
+ };
35
+ }
36
+ return {
37
+ name: BARE_MODE_DOCTOR_LABEL,
38
+ status: 'skipped',
39
+ detail: BARE_MODE_INACTIVE_DETAIL,
40
+ };
41
+ }
42
+ //# sourceMappingURL=bare-mode.js.map
@@ -0,0 +1,127 @@
1
+ /**
2
+ * CLI VERSION probe — compares the running @pugi/cli version against
3
+ * the npm registry's `latest` tag. Surfaces an upgrade banner when
4
+ * the operator is behind.
5
+ *
6
+ * Semver comparison is intentionally minimal — we only need to answer
7
+ * "is local strictly older than latest" for the WARN gate. Edge cases
8
+ * (pre-release ordering, build metadata) collapse к string equality
9
+ * because the publish pipeline only tags clean `X.Y.Z[-channel.N]`.
10
+ *
11
+ * Network failure is NOT an error — the operator is offline, that's
12
+ * a transient condition surfaced by the API probe; this probe reports
13
+ * `warn` so the doctor table still ships a usable verdict.
14
+ */
15
+ const REGISTRY_URL = 'https://registry.npmjs.org/@pugi/cli/latest';
16
+ /**
17
+ * Strict-newer comparison. Returns true when `b` is strictly newer
18
+ * than `a`. Treats unparseable inputs as equal (no false-positive
19
+ * upgrade banner on a hand-edited local version).
20
+ */
21
+ export function isNewerVersion(a, b) {
22
+ const left = parseSemver(a);
23
+ const right = parseSemver(b);
24
+ if (!left || !right)
25
+ return false;
26
+ if (right.major !== left.major)
27
+ return right.major > left.major;
28
+ if (right.minor !== left.minor)
29
+ return right.minor > left.minor;
30
+ if (right.patch !== left.patch)
31
+ return right.patch > left.patch;
32
+ // Same X.Y.Z — pre-release ordering: a stable release is newer
33
+ // than any pre-release of the same X.Y.Z; otherwise compare
34
+ // pre-release tokens lexicographically as a coarse heuristic
35
+ // sufficient for the upgrade banner.
36
+ if (!right.pre && left.pre)
37
+ return true;
38
+ if (right.pre && !left.pre)
39
+ return false;
40
+ if (right.pre && left.pre)
41
+ return right.pre > left.pre;
42
+ return false;
43
+ }
44
+ function parseSemver(version) {
45
+ const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?/.exec(version);
46
+ if (!match)
47
+ return null;
48
+ const major = Number(match[1]);
49
+ const minor = Number(match[2]);
50
+ const patch = Number(match[3]);
51
+ if (!Number.isFinite(major) || !Number.isFinite(minor) || !Number.isFinite(patch)) {
52
+ return null;
53
+ }
54
+ return { major, minor, patch, pre: match[4] ?? '' };
55
+ }
56
+ export async function probeCliVersion(deps) {
57
+ const url = deps.registryUrl ?? REGISTRY_URL;
58
+ const timeoutMs = deps.timeoutMs ?? 3_000;
59
+ const controller = new AbortController();
60
+ const timer = setTimeout(() => controller.abort(), timeoutMs);
61
+ const startedAt = deps.now();
62
+ let response;
63
+ try {
64
+ response = await deps.fetchImpl(url, {
65
+ method: 'GET',
66
+ headers: { Accept: 'application/json' },
67
+ signal: controller.signal,
68
+ });
69
+ }
70
+ catch (error) {
71
+ clearTimeout(timer);
72
+ const message = error instanceof Error ? error.message : String(error);
73
+ return {
74
+ name: 'CLI VERSION',
75
+ status: 'warn',
76
+ detail: `local=${deps.localVersion} — registry unreachable`,
77
+ remediation: `Skip-able. Network error: ${message}`,
78
+ };
79
+ }
80
+ clearTimeout(timer);
81
+ const latencyMs = deps.now() - startedAt;
82
+ if (!response.ok) {
83
+ return {
84
+ name: 'CLI VERSION',
85
+ status: 'warn',
86
+ detail: `local=${deps.localVersion} — registry returned ${response.status}`,
87
+ latencyMs,
88
+ };
89
+ }
90
+ let body;
91
+ try {
92
+ body = (await response.json());
93
+ }
94
+ catch {
95
+ return {
96
+ name: 'CLI VERSION',
97
+ status: 'warn',
98
+ detail: `local=${deps.localVersion} — registry JSON unparseable`,
99
+ latencyMs,
100
+ };
101
+ }
102
+ const remote = body.version;
103
+ if (typeof remote !== 'string' || remote.length === 0) {
104
+ return {
105
+ name: 'CLI VERSION',
106
+ status: 'warn',
107
+ detail: `local=${deps.localVersion} — registry response missing version`,
108
+ latencyMs,
109
+ };
110
+ }
111
+ if (isNewerVersion(deps.localVersion, remote)) {
112
+ return {
113
+ name: 'CLI VERSION',
114
+ status: 'warn',
115
+ detail: `local=${deps.localVersion}, latest=${remote}`,
116
+ latencyMs,
117
+ remediation: 'Run `npm i -g @pugi/cli@latest` to upgrade',
118
+ };
119
+ }
120
+ return {
121
+ name: 'CLI VERSION',
122
+ status: 'ok',
123
+ detail: `${deps.localVersion} (latest)`,
124
+ latencyMs,
125
+ };
126
+ }
127
+ //# sourceMappingURL=cli-version.js.map
@@ -0,0 +1,72 @@
1
+ /**
2
+ * CONFIG probe — verifies `~/.pugi/credentials.json` exists, parses,
3
+ * and carries the canonical shape (a `tokens` array). Lighter-weight
4
+ * than the auth probe (no network); catches `corrupted JSON` /
5
+ * `accidentally overwrote with empty file` / `bad permissions` cases
6
+ * that would otherwise surface as confusing errors deeper in the
7
+ * auth path.
8
+ *
9
+ * Absence of the file is NOT an error here — the operator may not
10
+ * have run `pugi login` yet. That case is caught by the AUTH probe
11
+ * with a clean "run pugi login" remediation. CONFIG's job is to
12
+ * verify the file is sane WHEN it exists.
13
+ */
14
+ export function probeConfig(ctx, fs) {
15
+ const credPath = `${ctx.home}/.pugi/credentials.json`;
16
+ if (!fs.existsSync(credPath)) {
17
+ return {
18
+ name: 'CONFIG',
19
+ status: 'skipped',
20
+ detail: '~/.pugi/credentials.json absent (operator has not logged in)',
21
+ };
22
+ }
23
+ let raw;
24
+ try {
25
+ raw = fs.readFileSync(credPath, 'utf8');
26
+ }
27
+ catch (error) {
28
+ const message = error instanceof Error ? error.message : String(error);
29
+ return {
30
+ name: 'CONFIG',
31
+ status: 'error',
32
+ detail: `Cannot read ~/.pugi/credentials.json`,
33
+ remediation: `Fix permissions or delete and re-login: ${message}`,
34
+ };
35
+ }
36
+ let parsed;
37
+ try {
38
+ parsed = JSON.parse(raw);
39
+ }
40
+ catch (error) {
41
+ const message = error instanceof Error ? error.message : String(error);
42
+ return {
43
+ name: 'CONFIG',
44
+ status: 'error',
45
+ detail: `~/.pugi/credentials.json is not valid JSON`,
46
+ remediation: `Delete and re-login: ${message}`,
47
+ };
48
+ }
49
+ if (!parsed || typeof parsed !== 'object') {
50
+ return {
51
+ name: 'CONFIG',
52
+ status: 'error',
53
+ detail: `credentials.json root is not an object`,
54
+ remediation: 'Delete and re-login',
55
+ };
56
+ }
57
+ const tokens = parsed.tokens;
58
+ if (!Array.isArray(tokens)) {
59
+ return {
60
+ name: 'CONFIG',
61
+ status: 'error',
62
+ detail: `credentials.json missing required \`tokens\` array`,
63
+ remediation: 'Delete and re-login',
64
+ };
65
+ }
66
+ return {
67
+ name: 'CONFIG',
68
+ status: 'ok',
69
+ detail: `~/.pugi/credentials.json valid (${tokens.length} token(s) stored)`,
70
+ };
71
+ }
72
+ //# sourceMappingURL=config.js.map
@@ -0,0 +1,57 @@
1
+ /**
2
+ * α7 L11 (2026-05-27) — DENIAL TRACKING probe for `pugi doctor`.
3
+ *
4
+ * Reports the current session's denial pressure: total denial count,
5
+ * unique (tool, args) patterns, and how many patterns have repeated
6
+ * past the reminder threshold. Operators read this to spot:
7
+ *
8
+ * - A hook script refusing more dispatches than expected (mis-
9
+ * configured `.pugi/hooks.json`).
10
+ * - Plan-mode runs where the model keeps trying mutating tools
11
+ * (a sign the prompt is not anchoring it correctly).
12
+ * - Stale-read loops indicating concurrent multi-agent writes.
13
+ *
14
+ * Status semantics:
15
+ *
16
+ * - `ok` when the tracker is empty OR carries denials but none have
17
+ * repeated past the threshold. Single denials are normal session
18
+ * hygiene; repeats are the signal.
19
+ * - `warn` when one or more patterns repeated >= the reminder
20
+ * threshold. The probe surfaces the count so the operator can act.
21
+ * - `skipped` when no tracker is wired (e.g. doctor invoked outside
22
+ * a live REPL session, top-level `pugi doctor`).
23
+ *
24
+ * Pure: takes a tracker snapshot — no I/O, no module-level state.
25
+ */
26
+ import { DENIAL_REMINDER_THRESHOLD, } from '../../denial-tracking/state.js';
27
+ export function probeDenialTracking(deps) {
28
+ if (!deps.tracker) {
29
+ return {
30
+ name: 'DENIAL TRACKING',
31
+ status: 'skipped',
32
+ detail: 'No live session — run `pugi doctor` from inside the REPL to see denials.',
33
+ };
34
+ }
35
+ const summary = deps.tracker.summary();
36
+ if (summary.totalDenials === 0) {
37
+ return {
38
+ name: 'DENIAL TRACKING',
39
+ status: 'ok',
40
+ detail: 'No tool denials this session.',
41
+ };
42
+ }
43
+ if (summary.repeatedPatterns === 0) {
44
+ return {
45
+ name: 'DENIAL TRACKING',
46
+ status: 'ok',
47
+ detail: `${summary.totalDenials} denial(s), ${summary.uniquePatterns} unique pattern(s), none repeated.`,
48
+ };
49
+ }
50
+ return {
51
+ name: 'DENIAL TRACKING',
52
+ status: 'warn',
53
+ detail: `${summary.totalDenials} denial(s), ${summary.repeatedPatterns} pattern(s) repeated >= ${DENIAL_REMINDER_THRESHOLD}.`,
54
+ remediation: 'Inspect via `/permissions denials` (when L6 lands) or check `.pugi/events.jsonl` for the latest refusals.',
55
+ };
56
+ }
57
+ //# sourceMappingURL=denial-tracking.js.map
@@ -0,0 +1,81 @@
1
+ /**
2
+ * DISK probe — warn the operator when the home partition is dangerously
3
+ * full. The session log, file cache, MCP working dirs, and the engine
4
+ * artifact bundle all land under `~/.pugi/`, so a full disk produces
5
+ * cryptic ENOSPC errors mid-dispatch. We catch that early.
6
+ *
7
+ * Implementation strategy: call `df -k` (POSIX-portable BSD tool with a
8
+ * stable column ordering) on the home dir and parse the available
9
+ * column. Bytes math + 1k blocks = simple integer arithmetic. We
10
+ * deliberately avoid `statvfs` because Node's stable surface for it
11
+ * (`fs.statfs` introduced in Node 18.15) returns BigInts that callers
12
+ * routinely mishandle on cross-platform builds.
13
+ *
14
+ * Thresholds:
15
+ * - `< 256 MiB` available → error (Pugi cannot do meaningful work)
16
+ * - `< 1 GiB` available → warn (operator should clear space soon)
17
+ * - otherwise → ok
18
+ */
19
+ const MIB = 1024 * 1024;
20
+ const GIB = MIB * 1024;
21
+ const ERROR_THRESHOLD_BYTES = 256 * MIB;
22
+ const WARN_THRESHOLD_BYTES = 1 * GIB;
23
+ export function probeDisk(ctx, deps) {
24
+ let freeBytes;
25
+ try {
26
+ freeBytes = deps.getFreeBytes(ctx.home);
27
+ }
28
+ catch (error) {
29
+ const message = error instanceof Error ? error.message : String(error);
30
+ return {
31
+ name: 'DISK',
32
+ status: 'warn',
33
+ detail: `Cannot determine free space on ${ctx.home}`,
34
+ remediation: `Inspection failed: ${message}`,
35
+ };
36
+ }
37
+ if (!Number.isFinite(freeBytes) || freeBytes < 0) {
38
+ return {
39
+ name: 'DISK',
40
+ status: 'warn',
41
+ detail: `df returned implausible value (${freeBytes}) for ${ctx.home}`,
42
+ };
43
+ }
44
+ const human = formatBytes(freeBytes);
45
+ if (freeBytes < ERROR_THRESHOLD_BYTES) {
46
+ return {
47
+ name: 'DISK',
48
+ status: 'error',
49
+ detail: `${human} free on home partition`,
50
+ remediation: 'Free disk space — Pugi writes ~/.pugi/sessions and cache files',
51
+ };
52
+ }
53
+ if (freeBytes < WARN_THRESHOLD_BYTES) {
54
+ return {
55
+ name: 'DISK',
56
+ status: 'warn',
57
+ detail: `${human} free on home partition`,
58
+ remediation: 'Consider clearing ~/.pugi/sessions older entries',
59
+ };
60
+ }
61
+ return {
62
+ name: 'DISK',
63
+ status: 'ok',
64
+ detail: `${human} free on home partition`,
65
+ };
66
+ }
67
+ /**
68
+ * Format bytes as `1.2GB` / `512MB` / `42KB`. Stays in IEC base-1024
69
+ * because that's what `df -k` returns and what operators reading the
70
+ * doctor table expect to see on their `df` follow-up.
71
+ */
72
+ export function formatBytes(bytes) {
73
+ if (bytes >= GIB)
74
+ return `${(bytes / GIB).toFixed(1)}GB`;
75
+ if (bytes >= MIB)
76
+ return `${Math.round(bytes / MIB)}MB`;
77
+ if (bytes >= 1024)
78
+ return `${Math.round(bytes / 1024)}KB`;
79
+ return `${bytes}B`;
80
+ }
81
+ //# sourceMappingURL=disk.js.map
@@ -0,0 +1,65 @@
1
+ /**
2
+ * GIT probe — verifies git is on PATH AND the current cwd is inside a
3
+ * git work tree. Reports the short HEAD sha + repo root for context.
4
+ *
5
+ * Pugi treats the workspace as a git project (worktree isolation,
6
+ * /codex review, /triple-review and the entire agent loop assume
7
+ * `git diff origin/main..HEAD` is meaningful). A workspace that is
8
+ * not a git work tree still works for read-only commands but the
9
+ * doctor surface flags this so the operator knows where the limits
10
+ * are.
11
+ */
12
+ export function probeGit(ctx, deps) {
13
+ let version;
14
+ try {
15
+ version = deps.resolveVersion();
16
+ }
17
+ catch (error) {
18
+ const message = error instanceof Error ? error.message : String(error);
19
+ return {
20
+ name: 'GIT',
21
+ status: 'warn',
22
+ detail: 'git not on PATH',
23
+ remediation: `Install git (error: ${message})`,
24
+ };
25
+ }
26
+ let inWorkTree = false;
27
+ try {
28
+ inWorkTree = deps.isInWorkTree(ctx.cwd);
29
+ }
30
+ catch {
31
+ inWorkTree = false;
32
+ }
33
+ if (!inWorkTree) {
34
+ return {
35
+ name: 'GIT',
36
+ status: 'warn',
37
+ detail: `${version} (cwd is not a git work tree)`,
38
+ remediation: 'Run `git init` to enable diff-based commands',
39
+ };
40
+ }
41
+ const sha = (() => {
42
+ try {
43
+ return deps.resolveHeadSha(ctx.cwd);
44
+ }
45
+ catch {
46
+ return null;
47
+ }
48
+ })();
49
+ const root = (() => {
50
+ try {
51
+ return deps.resolveRoot(ctx.cwd);
52
+ }
53
+ catch {
54
+ return null;
55
+ }
56
+ })();
57
+ const shaSuffix = sha ? ` @ ${sha.slice(0, 8)}` : '';
58
+ const rootSuffix = root ? ` (${root})` : '';
59
+ return {
60
+ name: 'GIT',
61
+ status: 'ok',
62
+ detail: `${version}${shaSuffix}${rootSuffix}`,
63
+ };
64
+ }
65
+ //# sourceMappingURL=git.js.map
@@ -0,0 +1,118 @@
1
+ /**
2
+ * HOOKS probe — verifies `.pugi/hooks-mvp.json` and `.pugi/hook-chains.json`
3
+ * exist + parse + carry their declared shape. Absence is OK (most workspaces
4
+ * don't ship hooks); presence с invalid JSON is a deployment-blocking error
5
+ * the operator wants surfaced before a tool dispatch fires a malformed hook
6
+ * and the model sees a confusing failure.
7
+ *
8
+ * Validation tier:
9
+ * 1. JSON.parse — catches typos / trailing commas / bad escapes.
10
+ * 2. Top-level shape sniff — `hooks-mvp.json` MUST be an object с a
11
+ * `hooks` array property; `hook-chains.json` MUST be an object
12
+ * с string-keyed event names mapping to arrays.
13
+ * 3. Per-entry require-fields sniff — minimal так что probe stays cheap.
14
+ *
15
+ * Out of scope: full Zod schema validation. That lives in the hook loader
16
+ * itself (apps/pugi-cli/src/core/hooks/v2/loader.ts). The probe is a
17
+ * fast sanity check; the loader produces the canonical error message
18
+ * when a hook actually fires.
19
+ */
20
+ function loadHookFile(fs, path) {
21
+ if (!fs.existsSync(path))
22
+ return null;
23
+ try {
24
+ const raw = fs.readFileSync(path, 'utf8');
25
+ return { path, parsed: JSON.parse(raw) };
26
+ }
27
+ catch (error) {
28
+ const message = error instanceof Error ? error.message : String(error);
29
+ return { parseError: `${path}: ${message}` };
30
+ }
31
+ }
32
+ function validateMvpShape(parsed) {
33
+ if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
34
+ return 'top-level value must be an object';
35
+ }
36
+ const hooks = parsed['hooks'];
37
+ if (hooks !== undefined && !Array.isArray(hooks)) {
38
+ return '`hooks` property must be an array when present';
39
+ }
40
+ return null;
41
+ }
42
+ function validateChainsShape(parsed) {
43
+ if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
44
+ return 'top-level value must be an object';
45
+ }
46
+ for (const [event, body] of Object.entries(parsed)) {
47
+ if (!Array.isArray(body)) {
48
+ return `event "${event}": value must be an array of hook entries`;
49
+ }
50
+ }
51
+ return null;
52
+ }
53
+ export function probeHooks(ctx, fs) {
54
+ const mvpPath = `${ctx.cwd}/.pugi/hooks-mvp.json`;
55
+ const chainsPath = `${ctx.cwd}/.pugi/hook-chains.json`;
56
+ const mvp = loadHookFile(fs, mvpPath);
57
+ const chains = loadHookFile(fs, chainsPath);
58
+ const issues = [];
59
+ let mvpCount = 0;
60
+ let chainEvents = 0;
61
+ if (mvp !== null) {
62
+ if ('parseError' in mvp) {
63
+ issues.push(`hooks-mvp.json parse failed: ${mvp.parseError}`);
64
+ }
65
+ else {
66
+ const shapeIssue = validateMvpShape(mvp.parsed);
67
+ if (shapeIssue) {
68
+ issues.push(`hooks-mvp.json: ${shapeIssue}`);
69
+ }
70
+ else {
71
+ const hooksArr = mvp.parsed['hooks'];
72
+ mvpCount = Array.isArray(hooksArr) ? hooksArr.length : 0;
73
+ }
74
+ }
75
+ }
76
+ if (chains !== null) {
77
+ if ('parseError' in chains) {
78
+ issues.push(`hook-chains.json parse failed: ${chains.parseError}`);
79
+ }
80
+ else {
81
+ const shapeIssue = validateChainsShape(chains.parsed);
82
+ if (shapeIssue) {
83
+ issues.push(`hook-chains.json: ${shapeIssue}`);
84
+ }
85
+ else {
86
+ chainEvents = Object.keys(chains.parsed).length;
87
+ }
88
+ }
89
+ }
90
+ if (issues.length > 0) {
91
+ return {
92
+ name: 'HOOKS',
93
+ status: 'error',
94
+ detail: issues.join('; '),
95
+ remediation: 'Fix the JSON syntax / shape, or delete the file if hooks are not in use. The hook loader surfaces the canonical error when a hook actually fires; this probe catches the problem before the first dispatch.',
96
+ };
97
+ }
98
+ if (mvp === null && chains === null) {
99
+ return {
100
+ name: 'HOOKS',
101
+ status: 'skipped',
102
+ detail: 'no hook config files in .pugi/ (workspace has not opted into hooks)',
103
+ };
104
+ }
105
+ const parts = [];
106
+ if (mvp !== null && !('parseError' in mvp)) {
107
+ parts.push(`hooks-mvp.json OK (${mvpCount} entr${mvpCount === 1 ? 'y' : 'ies'})`);
108
+ }
109
+ if (chains !== null && !('parseError' in chains)) {
110
+ parts.push(`hook-chains.json OK (${chainEvents} event${chainEvents === 1 ? '' : 's'})`);
111
+ }
112
+ return {
113
+ name: 'HOOKS',
114
+ status: 'ok',
115
+ detail: parts.join('; '),
116
+ };
117
+ }
118
+ //# sourceMappingURL=hooks.js.map