@pugi/cli 0.1.0-beta.9 → 0.1.0-beta.90

package/CHANGELOG.md

@@ -0,0 +1,132 @@
+# Changelog
+
+All notable changes to `@pugi/cli` are documented here. The file follows the
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/) convention with newer
+releases listed first. Section format: `## [<version>] - <YYYY-MM-DD>`.
+
+The bundled `pugi release-notes` command parses this file and renders sections
+strictly newer than `~/.pugi/.last-seen-version` after every upgrade.
+
+## [0.1.0-beta.88] - 2026-06-02
+
+### Fixed
+- **Pugi identity intro no longer chants on later turns**. The output gate now
+  strips the canonical long-form intro ("I'm Pugi - your engineering copilot.
+  Tell me what you need...") and its Russian variant on mid-thread replies.
+  Operators were seeing the intro re-emit on turn 2+ after a session-resume
+  or autonomous tick.
+- **Ctrl+C double-press exit guard**. A single Ctrl+C in the REPL no longer
+  kills the CLI. First press prompts "Press Ctrl+C again to exit (within 2s)
+  or any key to continue". Second press within 2s exits cleanly; any other
+  key cancels. Headless mode emits a `session-end` envelope and exits 0.
+- **Persona no longer over-clarifies trivial creative tasks**. Asking for a
+  well-known game / demo / todo app now picks reasonable defaults and starts
+  building in one turn. Ambiguous tasks (auth, deploy targets) still ask
+  ≤ 3 short choices via the `ask_user_question` tool.
+
+### Added
+- **Short-format AskUserQuestion chip renderer**. Up to 3 questions render
+  side-by-side as Ink chips with ▸ default highlight, ↑↓ in-question nav,
+  ←→/Tab between questions, 1-9 jump, [s] skip-with-default, [Esc] cancel,
+  [Enter] commit. Labels truncate at 5 words / 22 chars. Caller can opt
+  into a non-TTY numbered fallback via `forceFallback`.
+
+### Security
+- **npm publish leak-gate hardening**. `prepublishOnly` now runs a
+  banned-string scan against the staged tarball (`tools/scrub/scan-tarball.sh`)
+  covering personal names, competitor refs, internal codenames, engineering
+  provenance, absolute paths, brand legacy, and secret-token shapes.
+  Per-line `[pugi-leak-ok]` allowlist marker for legitimate references;
+  path allowlist for LICENSE / THIRD_PARTY_NOTICES files where MIT requires
+  copyright-holder name. Synthetic injection regression test runs in CI.
+
+### Chore
+- MIT LICENSE copyright holder set to `Pugi.io` (was personal name).
+
+## [0.1.0-beta.26] - 2026-05-27
+
+### Added
+- RAG consumer middleware on admin-api () — XML `<rag-context>`
+ block, persona allowlist (Pugi / Hiroshi / Vera), 2000-token cap,
+ and the Pugi observability stack () shipped earlier today.
+
+### Notes
+- CLI surface unchanged in this bump — the version bump tracks lockstep with
+ the admin-api redeploy so `--version` reflects the live server's
+ feature set during the alpha-7 sprint.
+
+## [0.1.0-beta.23] - 2026-05-27
+
+### Added
+- L30 `pugi theme` + `/theme` — TUI color presets (default / dark / light / colorblind) ().
+- L24 `pugi release-notes` + `/release-notes` — changelog diff after upgrade
+ with `~/.pugi/.last-seen-version` tracking and `--reset` flag ().
+
+### Fixed
+- vim-input — useRef for shadow cursor + pending, lift `onSubmit` out of `setState` ().
+
+## [0.1.0-beta.22] - 2026-05-27
+
+### Added
+- L24 `pugi release-notes` + `/release-notes` — changelog diff after upgrade
+ with `~/.pugi/.last-seen-version` tracking and `--reset` flag.
+- L25 `/onboarding` first-run interactive setup wizard ().
+- L18 output-style presets — voice register dial ().
+- L33 `/stickers` brand-personality gimmick ().
+- L16 `TodoWriteTool` single-in-progress invariant ().
+- L22 `--bare` flag — skip project auto-discovery ().
+- L21 `/feedback` in-CLI collector.
+- L20 `/share` session transcript export.
+
+### Fixed
+- P1 stickers await + style buffered output + todo-write zod parse ().
+
+## [0.1.0-beta.21] - 2026-05-27
+
+### Added
+- L7 `/plan` quick mode-switch + one-shot dispatch ().
+- L31 tool retry budget per command ().
+- L19 `/cost` + `/usage` token + dollar accounting ().
+- L34 `pugi status` — session snapshot ().
+- L11 `DenialTrackingState` model-facing denial aggregate ().
+- L6 permission modes — canonical 4-mode gate ().
+- L8 `/compact` command + auto-trigger + boundary marker ().
+- L17 `pugi doctor` — environment health report ().
+- L13 `/mcp remove` + `doctor` + `logs` + `restart` subcommands ().
+- L3 internal underscore-prefix tool-arg convention ().
+- L2 `z.strictObject` all tool schemas + revert beta.17 aliases ().
+- L5 `AskUserQuestionTool` structured multi-choice — kills fake-dispatch ().
+- L1 stale-read gate — reject `FileEdit` if file changed since last read ().
+
+### Fixed
+- Pugi-review per-file chunking — unblock multi-file diffs (Anvil HTTP 400) ().
+- Privacy `PiiScrubberService` regex fallback + `@Inject` DI fix ().
+
+## [0.1.0-beta.20] - 2026-05-26
+
+### Added
+- Pugi codegen real dispatch — Pugi actually writes files instead of describing
+ them ().
+- Live agent progress display — `pugi jobs --watch` (CC compact style) ().
+- PAVF-7 `pugi report --from-error` — field bug capture ().
+- Opensource template fetch + bundled starters — не reinventing ().
+
+### Fixed
+- Dialog quality — RU mirror + brevity + memory + force dispatch + render ().
+- Pugi anti-greenfield + anti-emoji discipline rules ().
+- Persona output gate — Pugi strip + fake-dispatch detector (P0) ().
+
+## [0.1.0-beta.19] - 2026-05-26
+
+### Added
+- Pugi-review batch review followups — silent PASS + safeGit split + quota
+ migration + cleanup dead code ().
+
+### Fixed
+- Replace CJS `require()` в ESM bundle — bare REPL crash on beta.16 ().
+
+## [0.1.0-beta.18] - 2026-05-26
+
+### Added
+- Initial public beta of `@pugi/cli` with REPL, dispatch, sync, review, and
+ doctor surfaces. Establishes the baseline for the leak-parity sprint.

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Yurii Bulakh
+Copyright (c) 2026 Pugi.io
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/assets/pugi-prozr2-mascot.ansi

@@ -0,0 +1,9 @@
+[?25l                
+                
+    ▄▄▄▄▄▄▄▄    
+     ▄▄▄▄▄▄     
+     ▄▄▄▄▄▄     
+    ▄▄          
+        ▄       
+                
+[?25h

package/bin/run.js

@@ -1,2 +1,34 @@
 #!/usr/bin/env node
-import '../dist/index.js';
+// 2026-05-27 — silence the noisy `node:sqlite` ExperimentalWarning.
+// Node 22.x prints a multi-line warning the first time any consumer
+// imports `node:sqlite` (see core/repl/store/session-store.ts). CEO has
+// pinged this surface twice now ("(node:XXXXX) ExperimentalWarning:
+// SQLite is an experimental feature and might change at any time" +
+// trace-warnings hint). Hiding it cleanly requires a tap on
+// process.emitWarning BEFORE any module loads the sqlite binding —
+// hence wiring it here in the binary entry, not deep inside the CLI.
+//
+// We allowlist only the exact sqlite warning + leave every other
+// runtime warning (deprecation, security, custom code paths) intact.
+// Operator can still re-enable the noise by exporting
+// PUGI_SHOW_EXPERIMENTAL_WARNINGS=1 — useful when debugging a node
+// version bump that might surface a new experimental flag we should
+// notice.
+if (!process.env.PUGI_SHOW_EXPERIMENTAL_WARNINGS) {
+  const originalEmit = process.emit;
+  process.emit = function patchedEmit(name, ...args) {
+    if (name === 'warning') {
+      const w = args[0];
+      const isSqliteExperimental =
+        w &&
+        typeof w === 'object' &&
+        w.name === 'ExperimentalWarning' &&
+        typeof w.message === 'string' &&
+        /SQLite is an experimental feature/i.test(w.message);
+      if (isSqliteExperimental) return false;
+    }
+    return originalEmit.call(this, name, ...args);
+  };
+}
+
+import('../dist/index.js');

package/dist/commands/deploy.js

@@ -1,27 +1,27 @@
 /**
- * `pugi deploy` command surface — Wave 3 P2 (Task #34, 2026-05-25).
+ * `pugi deploy` command surface — P2 (Task #34).
  *
  * Subcommands:
- *   pugi deploy --target vercel <vercelProject> [--project <id>] [--ref <ref>] [--target-env production|preview] [--integration <id>]
- *   pugi deploy --target render <renderService> [--project <id>] [--ref <ref>]
- *   pugi deploy --status <deployment-id>
- *   pugi deploy --logs <deployment-id> [--tail]
+ *  pugi deploy --target vercel <vercelProject> [--project <id>] [--ref <ref>] [--target-env production|preview] [--integration <id>]
+ *  pugi deploy --target render <renderService> [--project <id>] [--ref <ref>]
+ *  pugi deploy --status <deployment-id>
+ *  pugi deploy --logs <deployment-id> [--tail]
  *
  * Exit codes (per task spec):
- *   0   success (trigger queued, status terminal=ready, logs printed)
- *   1   deployment failed (status=error or trigger refused)
- *   2   transient (rate-limited, runtime down, retry-safe)
+ *  0  success (trigger queued, status terminal=ready, logs printed)
+ *  1  deployment failed (status=error or trigger refused)
+ *  2  transient (rate-limited, runtime down, retry-safe)
  *
  * Project resolution:
- *   `--project <id>` is required for trigger commands because the CLI's
- *   credential store is tenant-scoped but not project-scoped. A future
- *   sprint (Wave 4) auto-detects the project from `.pugi/settings.json`
- *   bound to the workspace; until then the operator passes it explicitly.
+ *  `--project <id>` is required for trigger commands because the CLI's
+ *  credential store is tenant-scoped but not project-scoped. A future
+ *  sprint auto-detects the project from `.pugi/settings.json`
+ *  bound to the workspace; until then the operator passes it explicitly.
  *
- * Local-first invariant (ADR-0037):
- *   `pugi deploy` does NOT read repository files. The Vercel deploy
- *   resolves source from the existing ProjectGitBinding row on the
- *   admin-api side — the CLI is only a request initiator + status poller.
+ * Local-first invariant :
+ *  `pugi deploy` does NOT read repository files. The Vercel deploy
+ *  resolves source from the existing ProjectGitBinding row on the
+ *  admin-api side — the CLI is only a request initiator + status poller.
  */
 import { fetchDeployStatus, fetchDeployLogs, submitDeployTrigger, } from '@pugi/sdk';
 /**
@@ -143,26 +143,26 @@ export function parseDeployArgs(args) {
 export function usage() {
     return [
         'Usage:',
-        '  pugi deploy --target vercel <vercelProject> --project <id> [--target-env production|preview] [--ref <git-ref>] [--integration <id>]',
-        '  pugi deploy --target render <renderService> --project <id> [--ref <git-ref>]',
-        '  pugi deploy --status <deployment-id>',
-        '  pugi deploy --logs <deployment-id> [--tail]',
+        ' pugi deploy --target vercel <vercelProject> --project <id> [--target-env production|preview] [--ref <git-ref>] [--integration <id>]',
+        ' pugi deploy --target render <renderService> --project <id> [--ref <git-ref>]',
+        ' pugi deploy --status <deployment-id>',
+        ' pugi deploy --logs <deployment-id> [--tail]',
         '',
         'Flags:',
-        '  --target vercel|render    Provider to deploy to.',
-        '  --project <id>            Pugi project id (required for trigger).',
-        '  --ref <git-ref>           Optional Git ref. Defaults to the binding default branch.',
-        '  --target-env production|preview',
-        '                            Vercel deploy environment. Defaults to production.',
-        '  --integration <id>        Disambiguate when multiple integrations are active.',
-        '  --status <id>             Show the current status for a deployment.',
-        '  --logs <id> [--tail]      Fetch log tail. With --tail, polls until terminal.',
-        '  --json                    Emit machine-readable JSON envelopes.',
+        ' --target vercel|render   Provider to deploy to.',
+        ' --project <id>           Pugi project id (required for trigger).',
+        ' --ref <git-ref>          Optional Git ref. Defaults to the binding default branch.',
+        ' --target-env production|preview',
+        '                           Vercel deploy environment. Defaults to production.',
+        ' --integration <id>       Disambiguate when multiple integrations are active.',
+        ' --status <id>            Show the current status for a deployment.',
+        ' --logs <id> [--tail]     Fetch log tail. With --tail, polls until terminal.',
+        ' --json                   Emit machine-readable JSON envelopes.',
         '',
         'Exit codes:',
-        '  0  success',
-        '  1  deployment failed / refused',
-        '  2  transient (rate-limited, runtime down, retry-safe)',
+        ' 0 success',
+        ' 1 deployment failed / refused',
+        ' 2 transient (rate-limited, runtime down, retry-safe)',
     ].join('\n');
 }
 /**
@@ -418,16 +418,16 @@ function statusToExitCode(status) {
 function renderStatusTable(response, context) {
     const lines = [];
     lines.push(context === 'queued' ? 'Deployment queued.' : 'Deployment status:');
-    lines.push(`  id:                  ${response.id}`);
-    lines.push(`  provider:            ${response.provider}`);
-    lines.push(`  project:             ${response.projectId}`);
-    lines.push(`  status:              ${response.status}`);
+    lines.push(` id:                 ${response.id}`);
+    lines.push(` provider:           ${response.provider}`);
+    lines.push(` project:            ${response.projectId}`);
+    lines.push(` status:             ${response.status}`);
     if (response.url)
-        lines.push(`  url:                 ${response.url}`);
+        lines.push(` url:                ${response.url}`);
     if (response.providerDeploymentId)
-        lines.push(`  providerDeploymentId: ${response.providerDeploymentId}`);
-    lines.push(`  createdAt:           ${response.createdAt}`);
-    lines.push(`  updatedAt:           ${response.updatedAt}`);
+        lines.push(` providerDeploymentId: ${response.providerDeploymentId}`);
+    lines.push(` createdAt:          ${response.createdAt}`);
+    lines.push(` updatedAt:          ${response.updatedAt}`);
     if (response.error) {
         lines.push('');
         lines.push('--- build error tail ---');

package/dist/commands/flatten.js

@@ -0,0 +1,191 @@
+/**
+ * `pugi flatten` — CLI surface for the rendergit-port flatten engine.
+ *
+ * The runner lives here (not in `runtime/cli.ts`) so the dispatch
+ * surface stays focused on argv routing. This module owns:
+ *
+ *  - Parsing the command-local flags (`--mode`, `--max-file-size`,
+ *    `--include`, `--exclude`, `--stdout`, `--open`, `--out`).
+ *  - Routing to `flattenRepo` with a resolved option bag.
+ *  - Forwarding the rendered text + summary through the unified
+ *    `writeOutput` writer so `--json` mode works without a second
+ *    code path.
+ *
+ * Ported from karpathy/rendergit (BSD-0). License compatible with
+ * Pugi's open-source posture.
+ */
+import { resolve } from 'node:path';
+import { DEFAULT_MAX_FILE_SIZE, flattenRepo, } from '../core/flatten/flatten-repo.js';
+/**
+ * Entry point invoked by `runtime/cli.ts::dispatchFlatten`. Returns
+ * the desired process exit code so the dispatcher can set
+ * `process.exitCode` without a second round-trip.
+ */
+export async function runFlattenCommand(ctx) {
+    const parsed = parseArgs(ctx.args);
+    if ('error' in parsed) {
+        ctx.writeOutput({ ok: false, error: parsed.error }, `pugi flatten: ${parsed.error}`);
+        return 2;
+    }
+    const options = {
+        cwd: parsed.cwd,
+        mode: parsed.mode,
+        stdout: parsed.stdout,
+        maxFileSize: parsed.maxFileSize,
+        include: parsed.include,
+        exclude: parsed.exclude,
+        open: parsed.open,
+    };
+    try {
+        const result = await flattenRepo(options);
+        if (parsed.stdout) {
+            // Always emit the rendered text to stdout. JSON mode wraps it
+            // in an envelope so scripted callers can demux the result from
+            // the summary line.
+            if (ctx.json) {
+                ctx.writeOutput({
+                    ok: true,
+                    mode: parsed.mode,
+                    files: result.files.length,
+                    skipped: result.skipped.length,
+                    html: result.html,
+                }, result.html);
+            }
+            else {
+                process.stdout.write(result.html);
+            }
+            return 0;
+        }
+        const summary = `pugi flatten: wrote ${result.files.length} files (${result.skipped.length} skipped) to ${result.path ?? '<unknown>'}`;
+        ctx.writeOutput({
+            ok: true,
+            mode: parsed.mode,
+            path: result.path,
+            files: result.files.length,
+            skipped: result.skipped.length,
+        }, summary);
+        return 0;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        ctx.writeOutput({ ok: false, error: msg }, `pugi flatten: ${msg}`);
+        return 1;
+    }
+}
+function parseArgs(args) {
+    let cwd = process.cwd();
+    let mode = 'human';
+    let stdout = false;
+    let open = false;
+    let maxFileSize = DEFAULT_MAX_FILE_SIZE;
+    const include = [];
+    const exclude = [];
+    let positionalConsumed = false;
+    for (let i = 0; i < args.length; i += 1) {
+        const arg = args[i] ?? '';
+        if (arg === '--stdout') {
+            stdout = true;
+            continue;
+        }
+        if (arg === '--open') {
+            open = true;
+            continue;
+        }
+        if (arg === '--mode') {
+            const next = args[i + 1];
+            if (!next)
+                return { error: '--mode requires a value (human | llm)' };
+            const m = parseMode(next);
+            if (!m)
+                return { error: `--mode: unknown value "${next}" (expected human | llm)` };
+            mode = m;
+            i += 1;
+            continue;
+        }
+        if (arg.startsWith('--mode=')) {
+            const m = parseMode(arg.slice('--mode='.length));
+            if (!m)
+                return { error: `--mode: unknown value "${arg.slice('--mode='.length)}" (expected human | llm)` };
+            mode = m;
+            continue;
+        }
+        if (arg === '--max-file-size') {
+            const next = args[i + 1];
+            if (!next)
+                return { error: '--max-file-size requires a value (e.g. 200kb)' };
+            const n = parseSize(next);
+            if (n === undefined)
+                return { error: `--max-file-size: cannot parse "${next}"` };
+            maxFileSize = n;
+            i += 1;
+            continue;
+        }
+        if (arg.startsWith('--max-file-size=')) {
+            const v = arg.slice('--max-file-size='.length);
+            const n = parseSize(v);
+            if (n === undefined)
+                return { error: `--max-file-size: cannot parse "${v}"` };
+            maxFileSize = n;
+            continue;
+        }
+        if (arg === '--include') {
+            const next = args[i + 1];
+            if (!next)
+                return { error: '--include requires a pattern' };
+            include.push(next);
+            i += 1;
+            continue;
+        }
+        if (arg.startsWith('--include=')) {
+            include.push(arg.slice('--include='.length));
+            continue;
+        }
+        if (arg === '--exclude') {
+            const next = args[i + 1];
+            if (!next)
+                return { error: '--exclude requires a pattern' };
+            exclude.push(next);
+            i += 1;
+            continue;
+        }
+        if (arg.startsWith('--exclude=')) {
+            exclude.push(arg.slice('--exclude='.length));
+            continue;
+        }
+        if (arg.startsWith('--')) {
+            return { error: `unknown flag "${arg}"` };
+        }
+        // Positional: workspace path. Only the first non-flag wins; extras
+        // are an error so a typo (`pugi flatten . foo`) surfaces.
+        if (positionalConsumed) {
+            return { error: `unexpected positional argument "${arg}"` };
+        }
+        cwd = resolve(arg);
+        positionalConsumed = true;
+    }
+    return { cwd, mode, stdout, open, maxFileSize, include, exclude };
+}
+function parseMode(v) {
+    if (v === 'human' || v === 'llm')
+        return v;
+    return undefined;
+}
+/**
+ * Parse a size literal: bare number = bytes; `200kb` / `1mb` / `2gb`
+ * (case-insensitive, binary units — 1KB = 1024 bytes).
+ */
+export function parseSize(raw) {
+    const trimmed = raw.trim().toLowerCase();
+    if (trimmed.length === 0)
+        return undefined;
+    const match = /^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb)?$/.exec(trimmed);
+    if (!match)
+        return undefined;
+    const n = Number(match[1]);
+    if (!Number.isFinite(n) || n < 0)
+        return undefined;
+    const unit = match[2] ?? 'b';
+    const multiplier = unit === 'b' ? 1 : unit === 'kb' ? 1024 : unit === 'mb' ? 1024 * 1024 : 1024 * 1024 * 1024;
+    return Math.floor(n * multiplier);
+}
+//# sourceMappingURL=flatten.js.map