@pugi/cli 0.1.0-beta.98 → 1.0.0-alpha.1

package/dist/core/diagnostics/probes/pugi-md.js

@@ -1,89 +0,0 @@
-/**
- * PUGI.md hierarchy probe — .
- *
- * Surfaces how many ambient `PUGI.md` / `CLAUDE.md` files were
- * discovered by the cwd → homedir walk-up. Operators triaging "why
- * is the model not following my project conventions" can run
- * `pugi doctor` and immediately see whether the hierarchy walk
- * loaded the file they expected.
- *
- * Status semantics:
- *  - `skipped` when bare mode is active (the walk is deliberately
- *    disabled). The row still renders so the JSON schema stays
- *    stable for downstream consumers.
- *  - `skipped` when zero files were found. This is the default
- *    state on a clean machine and is NOT an error — most operators
- *    do not maintain a `~/PUGI.md`.
- *  - `ok` when one or more files were discovered. The detail names
- *    the closest file and the total count.
- *
- * Side effects:
- *  - One filesystem walk from cwd to homedir (bounded by the walker's
- *    depth cap). Each level performs at most 2 `existsSync` calls.
- *    Cost is single-digit ms even on cold cache; well inside the
- *    doctor probe wall-clock budget.
- *
- * Wired into `buildDefaultProbes` in `runtime/commands/doctor.ts`.
- */
-import { isBareMode } from '../../bare-mode/index.js';
-import { walkUpPugiMd } from '../../pugi-md/walk-up.js';
-export const PUGI_MD_DOCTOR_LABEL = 'PUGI.md HIERARCHY';
-/** Detail string emitted when bare mode disables the walk. */
-export const PUGI_MD_BARE_SKIP_DETAIL = 'skipped (--bare)';
-/** Detail string emitted when the walk ran but found nothing. */
-export const PUGI_MD_EMPTY_DETAIL = 'no PUGI.md / CLAUDE.md found in cwd → homedir';
-export function probePugiMdHierarchy(input = {}) {
-    const env = input.env ?? process.env;
-    if (isBareMode(env)) {
-        return {
-            name: PUGI_MD_DOCTOR_LABEL,
-            status: 'skipped',
-            detail: PUGI_MD_BARE_SKIP_DETAIL,
-        };
-    }
-    const cwd = input.cwd ?? process.cwd();
-    const walk = input.walkImpl ?? ((c, o) => walkUpPugiMd(c, o));
-    let files;
-    try {
-        files = walk(cwd, input.homedir !== undefined ? { homedir: input.homedir } : {});
-    }
-    catch {
-        // Defensive: walker is wrapped in per-file try/catch already, so
-        // a throw here means a programmer error (bad input). Degrade to
-        // a `warn` row rather than crashing the doctor sweep.
-        return {
-            name: PUGI_MD_DOCTOR_LABEL,
-            status: 'warn',
-            detail: 'walk-up failed (see logs)',
-        };
-    }
-    if (files.length === 0) {
-        return {
-            name: PUGI_MD_DOCTOR_LABEL,
-            status: 'skipped',
-            detail: PUGI_MD_EMPTY_DETAIL,
-        };
-    }
-    // `files` is shallow-to-deep; the first entry is the closest to cwd.
-    // Operators reading the table care most about that one — it is the
-    // file that will most directly influence model behaviour. The
-    // additional count gives a quick "is the homedir / parent picked up
-    // too?" signal without listing every path.
-    const closest = files[0];
-    // closest is guaranteed non-undefined: files.length > 0 enforced
-    // by the early return above.
-    if (!closest) {
-        return {
-            name: PUGI_MD_DOCTOR_LABEL,
-            status: 'skipped',
-            detail: PUGI_MD_EMPTY_DETAIL,
-        };
-    }
-    const suffix = files.length === 1 ? '' : ` (+${files.length - 1} more)`;
-    return {
-        name: PUGI_MD_DOCTOR_LABEL,
-        status: 'ok',
-        detail: `${files.length} file${files.length === 1 ? '' : 's'}: ${closest.path}${suffix}`,
-    };
-}
-//# sourceMappingURL=pugi-md.js.map

package/dist/core/diagnostics/probes/sandbox.js

@@ -1,72 +0,0 @@
-/**
- * SANDBOX probe — surfaces the current OS-level sandbox posture (
- * Trust Sprint item 6: macOS Seatbelt adapter wired; Linux Landlock
- * and Docker variants still backlog).
- *
- * Sources `bash.sandbox` from `.pugi/settings.json`, defaults to
- * `none`. When set to `macOS-seatbelt` the probe verifies the OS
- * primitive is callable and reports `ok` (armed) or `error`
- * (configured-but-unavailable). When set to `none` the probe reports
- * `warn` with the operator-readable reason "policy 'none' selected".
- */
-import { homedir } from 'node:os';
-import { loadSettings } from '../../settings.js';
-import { probeSandbox as probeSandboxAdapter } from '../../sandboxing/index.js';
-export function probeSandbox(ctx) {
-    const settings = loadSettings(ctx.cwd);
-    const configured = (settings.bash?.sandbox ?? 'none');
-    const home = ctx.home || homedir();
-    const extraWritePaths = [`${home}/.pugi`];
-    try {
-        const state = probeSandboxAdapter({
-            mode: configured,
-            workspaceRoot: ctx.cwd,
-            extraWritePaths,
-        });
-        if (state.armed) {
-            // Discipline-gap honesty (Trust Sprint thesis): the adapter
-            // probes ok, but spawn-wrap is NOT yet wired into the bash
-            // runner (that file is owned by another agent on PUGI-VERIFY-
-            // GATE). Reporting status=ok would overstate the posture — an
-            // operator reading 'armed' would assume their bash calls were
-            // jailed when they still run with full process privileges. We
-            // surface 'warn' with a precise reason instead and flip к 'ok'
-            // when the runner indirection lands.
-            return {
-                name: 'SANDBOX',
-                status: 'warn',
-                detail: `configured (mode=${state.mode}) but spawn-wrap not yet wired — bash dispatches still run with full process privileges. ` +
-                    `Adapter posture: ${state.details.join('; ')}`,
-                remediation: 'The seatbelt adapter is in-tree and exercised by tests; the bash runner indirection that consumes it lands in a follow-up. ' +
-                    'Bash classifier denylist + permission FSM remain in force in the meantime.',
-            };
-        }
-        // Not armed — distinguish "operator chose none" from "configured
-        // mode failed". The latter is an error; the former is a documented
-        // posture and stays a warning.
-        if (state.mode === 'none') {
-            return {
-                name: 'SANDBOX',
-                status: 'warn',
-                detail: `not armed: ${state.reason ?? 'mode none'}`,
-                remediation: 'Set `bash.sandbox = "macOS-seatbelt"` in .pugi/settings.json on macOS to enable workspace-scoped write isolation. ' +
-                    'Bash classifier denylist + permission FSM still apply.',
-            };
-        }
-        return {
-            name: 'SANDBOX',
-            status: 'error',
-            detail: `configured mode "${state.mode}" failed to arm: ${state.reason ?? 'unknown'}`,
-            remediation: 'Set `bash.sandbox` to a supported mode for this platform or remove the key to fall back to "none".',
-        };
-    }
-    catch (err) {
-        return {
-            name: 'SANDBOX',
-            status: 'error',
-            detail: `sandbox probe threw: ${err.message}`,
-            remediation: 'Remove the bash.sandbox key from .pugi/settings.json or set it to "none".',
-        };
-    }
-}
-//# sourceMappingURL=sandbox.js.map

package/dist/core/diagnostics/probes/session.js

@@ -1,74 +0,0 @@
-/**
- * SESSION probe — reports the active session id + age when the doctor
- * runs from inside the REPL OR finds a recent NDJSON session log in
- * the workspace.
- *
- * The CLI command path has no live session context (each `pugi <cmd>`
- * invocation is a fresh process), so we read `.pugi/events.jsonl` if
- * present and report the most-recent event's age + total line count.
- * Inside the REPL we pass an explicit `sessionId` so the probe
- * surfaces the live state without re-reading disk.
- *
- * Absence of `.pugi/events.jsonl` is `skipped`, not an error — the
- * operator may simply be running `pugi doctor` in a workspace that
- * has not yet seen a dispatch.
- */
-export function probeSession(ctx, fs, deps) {
-    if (deps.liveSessionId) {
-        return {
-            name: 'SESSION',
-            status: 'ok',
-            detail: `session=${deps.liveSessionId} (live, REPL active)`,
-        };
-    }
-    const eventsPath = `${ctx.cwd}/.pugi/events.jsonl`;
-    if (!fs.existsSync(eventsPath)) {
-        return {
-            name: 'SESSION',
-            status: 'skipped',
-            detail: 'No prior dispatch logged in this workspace',
-        };
-    }
-    let stats;
-    try {
-        stats = fs.statSync(eventsPath);
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        return {
-            name: 'SESSION',
-            status: 'warn',
-            detail: `.pugi/events.jsonl present but unreadable`,
-            remediation: `Inspect: ${message}`,
-        };
-    }
-    const ageMs = Math.max(0, deps.now() - stats.mtimeMs);
-    const ageLabel = formatAge(ageMs);
-    // Counting lines is cheap on a small NDJSON file; a "huge" Pugi
-    // session is single-digit MB. We avoid loading binary blobs by
-    // simply walking the buffer count.
-    let lineCount = 0;
-    try {
-        const raw = fs.readFileSync(eventsPath, 'utf8');
-        lineCount = raw.split('\n').filter((line) => line.trim().length > 0).length;
-    }
-    catch {
-        lineCount = -1;
-    }
-    const linePart = lineCount >= 0 ? `, ${lineCount} event(s)` : '';
-    return {
-        name: 'SESSION',
-        status: 'ok',
-        detail: `last event ${ageLabel} ago${linePart}`,
-    };
-}
-export function formatAge(ms) {
-    if (ms < 60_000)
-        return `${Math.round(ms / 1000)}s`;
-    if (ms < 3_600_000)
-        return `${Math.round(ms / 60_000)}m`;
-    if (ms < 86_400_000)
-        return `${Math.round(ms / 3_600_000)}h`;
-    return `${Math.round(ms / 86_400_000)}d`;
-}
-//# sourceMappingURL=session.js.map