@pugi/cli 0.1.0-beta.99 → 1.0.0-alpha.10

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Pugi.io
+Copyright (c) 2025 opencode
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,205 +1,25 @@
-# Pugi CLI
+# @pugi/cli
 
-`pugi` — terminal-native software execution system. Run agents on your repo,
-hand jobs off to the cabinet or a remote runner, and keep every artifact local
-by default.
-
-- **Local-first.** Every plan, diff, and artifact lives under `.pugi/` in your
-  repo. Nothing leaves the machine unless you explicitly run `pugi handoff` or
-  `pugi sync`.
-- **Web continuation.** When a job needs collaboration, an approval, or a clean
-  Linux runner, hand it off to the cabinet at `app.pugi.io`.
-- **One CLI, three install paths.** npm, Homebrew tap, and a one-liner shell
-  script.
+Pugi CLI - terminal-native software execution system.
 
 ## Install
 
-### npm (works everywhere with Node 20+)
-
-```bash
-npm install -g pugi
-pugi --version
-```
-
-### Homebrew (macOS + Linux)
-
-```bash
-brew install pugi-io/tap/pugi
-pugi --version
-```
-
-The formula declares a Node 20+ runtime dependency and downloads the published
-npm tarball, so the result is identical to `npm install -g pugi`.
-
-### One-liner (curl)
-
-```bash
-curl -fsSL https://pugi.dev/install | sh
-```
-
-The script detects your OS (Darwin / Linux), bootstraps Node 20+ via Homebrew
-or `apt` if it is missing, and then runs `npm install -g pugi`. It prints the
-installed version on success and exits non-zero on any failure. The script
-itself is served from `pugi.dev`; review it at `https://pugi.dev/install` or
-in `apps/admin-api/public/install.sh` before piping into a shell.
-
-### Requirements
-
-- Node.js **20 or newer** (`node --version`)
-- A POSIX shell for the curl installer (macOS, Linux, WSL)
-- Git, for any command that touches a repo
-
-## Quickstart
-
-```bash
-mkdir my-project && cd my-project
-git init
-pugi init
-pugi idea "build a tiny TODO app"
-pugi plan
-pugi build
-pugi review
-```
-
-Every command writes to `.pugi/` (events log, artifacts, index). Re-run
-`pugi sessions --rebuild` if you ever delete the index — the append-only
-`.pugi/events.jsonl` is the source of truth.
-
-## Login
-
-Most commands run fully offline. The ones that talk to the Pugi runtime
-(`pugi review --triple --remote`, future `pugi handoff`) need an API key.
-
-```bash
-export PUGI_API_KEY=pugi_live_...        # from app.pugi.io > Settings > API
-export PUGI_API_URL=https://api.pugi.io  # optional, this is the default
-pugi review --triple --remote
-```
-
-The key is read from the environment, never persisted to disk, and never
-logged. To revoke it, rotate the key in the cabinet — the CLI will see a
-`401` on the next call and exit `5`.
-
-## Common commands
-
-```bash
-pugi init                  # bootstrap .pugi/ in the current repo
-pugi idea "..."            # capture an idea, opens a plan stub
-pugi plan                  # ask the persona team to expand the idea
-pugi build                 # execute the plan locally
-pugi review                # local diff review
-pugi review --triple       # local triple-review evidence bundle
-pugi review --triple --remote
-                           # call Anvil for 3-model consensus
-pugi handoff --web         # hand the session off to the cabinet
-pugi sessions              # list sessions from .pugi/index.json
-pugi sessions --rebuild    # rebuild the index from events.jsonl
-pugi deploy --target vercel my-vercel-project --project proj_42
-                           # trigger a Vercel deploy from the bound Git source
-pugi deploy --status dep_42   # vendor-agnostic status snapshot
-pugi deploy --logs dep_42 --tail
-                           # build-log tail; --tail polls until terminal
-pugi doctor --json         # environment diagnostic
-pugi version               # CLI version
-```
-
-Run `pugi --help` for the full list.
-
-### Deploy
-
-`pugi deploy` triggers a deployment for the project bound to your Vercel or
-Render integration. Source is resolved from the existing `ProjectGitBinding`
-row on the admin-api side — the CLI never reads local files.
-
-```bash
-# Vercel — production (default)
-pugi deploy --target vercel my-vercel-project --project proj_42
-
-# Vercel — preview from a feature branch
-pugi deploy --target vercel my-vercel-project --project proj_42 \
-  --target-env preview --ref feat/landing-tweaks
-
-# Render (Sprint 2 — endpoint returns 501 today)
-pugi deploy --target render my-render-svc --project proj_42
-
-# Query existing deploys
-pugi deploy --status dep_42
-pugi deploy --logs dep_42 --tail
-```
-
-Exit codes:
-
-- `0` success (queued, ready, building)
-- `1` failed (status=error, refused, not authenticated)
-- `2` transient (rate-limited, runtime down, retry-safe)
-
-## Privacy
-
-Pugi defaults to `local-only` — no upload happens without an explicit flag.
-`pugi sync --dry-run --privacy <mode>` lets you preview exactly what would
-leave the machine before you ever enable real upload (still gated; the alpha
-returns `status: blocked, reason: sync_upload_not_implemented`).
-
-## Updating
-
 ```bash
-npm install -g pugi@latest      # if you installed via npm
-brew upgrade pugi                # if you installed via Homebrew
-curl -fsSL https://pugi.dev/install | sh   # one-liner re-run is idempotent
+npm install -g @pugi/cli
 ```
 
-## Uninstall
+## Usage
 
 ```bash
-npm uninstall -g pugi
-# or
-brew uninstall pugi
+pugi --help
+pugi              # interactive TUI
+pugi run "..."    # one-shot prompt
 ```
 
-The CLI never installs anything outside the Node global prefix and the
-Homebrew cellar. `.pugi/` directories in your repos are left untouched on
-uninstall; remove them manually if you want a clean slate.
-
-## Hooks
-
-Pugi runs user-defined shell commands at lifecycle events (`SessionStart`,
-`PreToolUse`, `PermissionRequest`, `PostToolUse`, `PostToolUseFailure`,
-`Stop`, `SessionEnd`, `UserPromptSubmit`). Drop a `hooks.json` at one of:
-
-- `~/.pugi/hooks.json` — user hooks, always loaded.
-- `<workspace>/.pugi/hooks.json` — project hooks, loaded only when the
-  workspace is trusted (see Sprint α5.6 for the `pugi config trust .` UX).
-
-See [`docs/hooks-example.json`](./docs/hooks-example.json) for a working
-config. Example: log every bash invocation through `logger`:
-
-```json
-{ "event": "PreToolUse", "match": { "tool": "bash" }, "run": "logger -t pugi \"$PUGI_HOOK_PAYLOAD\"" }
-```
-
-Hooks cannot bypass permissions — a hook that re-invokes `pugi` re-enters
-the permission engine in its own process.
-
-## Distribution
-
-The three install paths are documented in detail at
-[`docs/features/pugi-cli-distribution.md`](../../docs/features/pugi-cli-distribution.md)
-and rationalised in [`docs/adr/0049-pugi-cli-distribution-strategy.md`](../../docs/adr/0049-pugi-cli-distribution-strategy.md).
-Release operators: see the "Release process" section in the feature doc for
-the tag → publish → tap-formula bump → smoke-test loop.
-
-## Testing the published tarball locally
-
-Before tagging a release, run the local smoke test:
-
-```bash
-pnpm --filter pugi pack:smoke
-```
+## License
 
-It runs `npm pack` against the CLI workspace, asserts the tarball contains
-`bin/run.js`, `dist/`, `README.md`, and `LICENSE`, and rejects the build if
-anything is missing.
+MIT - see LICENSE for upstream attribution.
 
-## License
+## Homepage
 
-MIT — see [LICENSE](./LICENSE).
+https://pugi.io

package/bin/pugi

@@ -0,0 +1,8 @@
+echo "Error: @pugi/cli postinstall did not run — binary is missing." >&2
+echo "" >&2
+echo "This happens when --ignore-scripts was passed during install, or" >&2
+echo "when using a package manager that skips postinstall by default." >&2
+echo "" >&2
+echo "Fix: cd node_modules/@pugi/cli && node postinstall.mjs" >&2
+echo "Or reinstall without --ignore-scripts." >&2
+exit 1

package/package.json

@@ -1,15 +1,12 @@
 {
   "name": "@pugi/cli",
-  "version": "0.1.0-beta.99",
+  "version": "1.0.0-alpha.10",
   "description": "Pugi CLI - terminal-native software execution system",
+  "license": "MIT",
   "homepage": "https://pugi.io",
   "repository": {
     "type": "git",
-    "url": "https://github.com/pugi-io/pugi.git",
-    "directory": "apps/pugi-cli"
-  },
-  "bugs": {
-    "url": "https://github.com/pugi-io/pugi/issues"
+    "url": "git+https://github.com/pugi-io/pugi.git"
   },
   "keywords": [
     "pugi",
@@ -19,75 +16,22 @@
     "engineering",
     "orchestrator"
   ],
-  "author": "Pugi <hello@pugi.io>",
-  "license": "MIT",
-  "type": "module",
   "bin": {
-    "pugi": "./bin/run.js"
+    "pugi": "./bin/pugi"
   },
-  "files": [
-    "bin/run.js",
-    "dist/**/*.js",
-    "assets/**/*.ansi",
-    "docs/examples/**/*.json",
-    "test/scenarios/**/*.scenario.txt",
-    "README.md",
-    "CHANGELOG.md",
-    "LICENSE",
-    "THIRD_PARTY_NOTICES.md"
+  "os": [
+    "darwin",
+    "linux",
+    "win32"
   ],
-  "engines": {
-    "node": ">=22.5.0"
-  },
-  "//publishConfig": "CEO sign-off 2026-05-23 alpha launch: @pugi/cli is the customer-facing CLI and ships PUBLIC so `npm i -g @pugi/cli` resolves anonymously. The HARD default-restricted memory rule (2026-05-25) applies to INTERNAL @pugi/* packages (db-client, telegram bot helpers, etc.) - those must ship access:restricted unless an additional CEO sign-off granted. @pugi/sdk + @pugi/personas were published public alongside the CLI under the same alpha-launch sign-off because the CLI's customer install pulls them as transitive deps; review before α7 GA.",
-  "publishConfig": {
-    "access": "public"
-  },
-  "dependencies": {
-    "@mozilla/readability": "^0.6.0",
-    "chokidar": "^3.6.0",
-    "graphology": "^0.26.0",
-    "graphology-metrics": "^2.4.0",
-    "ignore": "^5.3.2",
-    "ink": "^5.0.1",
-    "linkedom": "^0.18.12",
-    "lru-cache": "^11.5.1",
-    "node-cron": "^4.2.1",
-    "react": "^18.3.1",
-    "semver": "^7.8.1",
-    "tar": "^7.5.11",
-    "terminal-image": "^4.3.0",
-    "tinyglobby": "^0.2.16",
-    "turndown": "^7.2.4",
-    "undici": "^8.3.0",
-    "which": "^6.0.0",
-    "zod": "^3.23.0",
-    "@pugi/sdk": "0.1.0-beta.99",
-    "@pugi/personas": "0.1.2"
-  },
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "@types/node-cron": "^3.0.11",
-    "@types/react": "^18.3.3",
-    "@types/semver": "^7.7.1",
-    "@types/tar": "^6.1.13",
-    "@types/turndown": "^5.0.6",
-    "@types/which": "^3.0.4",
-    "ink-testing-library": "^4.0.0",
-    "tsx": "^4.19.0",
-    "typescript": "~5.6.0"
+  "cpu": [
+    "arm64",
+    "x64"
+  ],
+  "optionalDependencies": {
+    "@pugi/cli-darwin-arm64": "1.0.0-alpha.10"
   },
   "scripts": {
-    "build": "pnpm --filter @pugi/personas --filter @pugi/sdk build && tsc -p tsconfig.json && node scripts/make-bin-executable.mjs",
-    "dev": "tsx src/index.ts",
-    "typecheck": "pnpm --filter @pugi/personas --filter @pugi/sdk build && tsc -p tsconfig.json --noEmit",
-    "test": "pnpm run check:version-lockstep && pnpm run build && node --test --import tsx 'test/**/*.spec.ts' 'test/**/*.spec.tsx' 'src/**/*.spec.ts' 'src/**/*.spec.tsx'",
-    "test:integration": "INTEGRATION=1 pnpm run build && node --test --import tsx 'test/**/*.spec.ts' 'test/**/*.spec.tsx' 'src/**/*.spec.ts' 'src/**/*.spec.tsx'",
-    "version:cli": "tsx src/index.ts version",
-    "doctor": "tsx src/index.ts doctor --json",
-    "check:version-lockstep": "bash ../../scripts/check-version-lockstep.sh",
-    "pack:smoke": "pnpm run check:version-lockstep && node scripts/pack-smoke.mjs",
-    "release-gate": "node scripts/secret-scanner.mjs",
-    "scan:tarball": "STAGE=$(mktemp -d) && npm pack --pack-destination \"$STAGE\" >/dev/null && bash ../../tools/scrub/scan-tarball.sh \"$STAGE\"/*.tgz; RC=$?; rm -rf \"$STAGE\"; exit $RC"
+    "postinstall": "node ./postinstall.mjs"
   }
 }

package/postinstall.mjs

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+import fs from "fs"
+import os from "os"
+import path from "path"
+import { createRequire } from "module"
+import { fileURLToPath } from "url"
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const require = createRequire(import.meta.url)
+
+const platformMap = { darwin: "darwin", linux: "linux", win32: "windows" }
+const archMap = { x64: "x64", arm64: "arm64", arm: "arm" }
+const platform = platformMap[os.platform()] ?? os.platform()
+const arch = archMap[os.arch()] ?? os.arch()
+const sourceBinary = platform === "windows" ? "pugi.exe" : "pugi"
+const targetBinary = path.join(__dirname, "bin", "pugi")
+
+const pkgName = `@pugi/cli-${platform}-${arch}`
+
+try {
+  const pkgJsonPath = require.resolve(`${pkgName}/package.json`)
+  const binary = path.join(path.dirname(pkgJsonPath), "bin", sourceBinary)
+  if (!fs.existsSync(binary)) throw new Error(`Binary not found: ${binary}`)
+  if (fs.existsSync(targetBinary)) fs.unlinkSync(targetBinary)
+  try { fs.linkSync(binary, targetBinary) } catch { fs.copyFileSync(binary, targetBinary) }
+  fs.chmodSync(targetBinary, 0o755)
+} catch (err) {
+  console.error(`@pugi/cli: unable to install native binary for ${platform}-${arch}: ${err.message}`)
+  console.error(`Try installing manually: npm install -g ${pkgName}@${require("./package.json").version}`)
+  process.exit(1)
+}

package/CHANGELOG.md

@@ -1,132 +0,0 @@
-# Changelog
-
-All notable changes to `@pugi/cli` are documented here. The file follows the
-[Keep a Changelog](https://keepachangelog.com/en/1.1.0/) convention with newer
-releases listed first. Section format: `## [<version>] - <YYYY-MM-DD>`.
-
-The bundled `pugi release-notes` command parses this file and renders sections
-strictly newer than `~/.pugi/.last-seen-version` after every upgrade.
-
-## [0.1.0-beta.88] - 2026-06-02
-
-### Fixed
-- **Pugi identity intro no longer chants on later turns**. The output gate now
-  strips the canonical long-form intro ("I'm Pugi - your engineering copilot.
-  Tell me what you need...") and its Russian variant on mid-thread replies.
-  Operators were seeing the intro re-emit on turn 2+ after a session-resume
-  or autonomous tick.
-- **Ctrl+C double-press exit guard**. A single Ctrl+C in the REPL no longer
-  kills the CLI. First press prompts "Press Ctrl+C again to exit (within 2s)
-  or any key to continue". Second press within 2s exits cleanly; any other
-  key cancels. Headless mode emits a `session-end` envelope and exits 0.
-- **Persona no longer over-clarifies trivial creative tasks**. Asking for a
-  well-known game / demo / todo app now picks reasonable defaults and starts
-  building in one turn. Ambiguous tasks (auth, deploy targets) still ask
-  ≤ 3 short choices via the `ask_user_question` tool.
-
-### Added
-- **Short-format AskUserQuestion chip renderer**. Up to 3 questions render
-  side-by-side as Ink chips with ▸ default highlight, ↑↓ in-question nav,
-  ←→/Tab between questions, 1-9 jump, [s] skip-with-default, [Esc] cancel,
-  [Enter] commit. Labels truncate at 5 words / 22 chars. Caller can opt
-  into a non-TTY numbered fallback via `forceFallback`.
-
-### Security
-- **npm publish leak-gate hardening**. `prepublishOnly` now runs a
-  banned-string scan against the staged tarball (`tools/scrub/scan-tarball.sh`)
-  covering personal names, competitor refs, internal codenames, engineering
-  provenance, absolute paths, brand legacy, and secret-token shapes.
-  Per-line `[pugi-leak-ok]` allowlist marker for legitimate references;
-  path allowlist for LICENSE / THIRD_PARTY_NOTICES files where MIT requires
-  copyright-holder name. Synthetic injection regression test runs in CI.
-
-### Chore
-- MIT LICENSE copyright holder set to `Pugi.io` (was personal name).
-
-## [0.1.0-beta.26] - 2026-05-27
-
-### Added
-- RAG consumer middleware on admin-api () — XML `<rag-context>`
- block, persona allowlist (Pugi / Hiroshi / Vera), 2000-token cap,
- and the Pugi observability stack () shipped earlier today.
-
-### Notes
-- CLI surface unchanged in this bump — the version bump tracks lockstep with
- the admin-api redeploy so `--version` reflects the live server's
- feature set during the alpha-7 sprint.
-
-## [0.1.0-beta.23] - 2026-05-27
-
-### Added
-- L30 `pugi theme` + `/theme` — TUI color presets (default / dark / light / colorblind) ().
-- L24 `pugi release-notes` + `/release-notes` — changelog diff after upgrade
- with `~/.pugi/.last-seen-version` tracking and `--reset` flag ().
-
-### Fixed
-- vim-input — useRef for shadow cursor + pending, lift `onSubmit` out of `setState` ().
-
-## [0.1.0-beta.22] - 2026-05-27
-
-### Added
-- L24 `pugi release-notes` + `/release-notes` — changelog diff after upgrade
- with `~/.pugi/.last-seen-version` tracking and `--reset` flag.
-- L25 `/onboarding` first-run interactive setup wizard ().
-- L18 output-style presets — voice register dial ().
-- L33 `/stickers` brand-personality gimmick ().
-- L16 `TodoWriteTool` single-in-progress invariant ().
-- L22 `--bare` flag — skip project auto-discovery ().
-- L21 `/feedback` in-CLI collector.
-- L20 `/share` session transcript export.
-
-### Fixed
-- P1 stickers await + style buffered output + todo-write zod parse ().
-
-## [0.1.0-beta.21] - 2026-05-27
-
-### Added
-- L7 `/plan` quick mode-switch + one-shot dispatch ().
-- L31 tool retry budget per command ().
-- L19 `/cost` + `/usage` token + dollar accounting ().
-- L34 `pugi status` — session snapshot ().
-- L11 `DenialTrackingState` model-facing denial aggregate ().
-- L6 permission modes — canonical 4-mode gate ().
-- L8 `/compact` command + auto-trigger + boundary marker ().
-- L17 `pugi doctor` — environment health report ().
-- L13 `/mcp remove` + `doctor` + `logs` + `restart` subcommands ().
-- L3 internal underscore-prefix tool-arg convention ().
-- L2 `z.strictObject` all tool schemas + revert beta.17 aliases ().
-- L5 `AskUserQuestionTool` structured multi-choice — kills fake-dispatch ().
-- L1 stale-read gate — reject `FileEdit` if file changed since last read ().
-
-### Fixed
-- Pugi-review per-file chunking — unblock multi-file diffs (Anvil HTTP 400) ().
-- Privacy `PiiScrubberService` regex fallback + `@Inject` DI fix ().
-
-## [0.1.0-beta.20] - 2026-05-26
-
-### Added
-- Pugi codegen real dispatch — Pugi actually writes files instead of describing
- them ().
-- Live agent progress display — `pugi jobs --watch` (CC compact style) ().
-- PAVF-7 `pugi report --from-error` — field bug capture ().
-- Opensource template fetch + bundled starters — не reinventing ().
-
-### Fixed
-- Dialog quality — RU mirror + brevity + memory + force dispatch + render ().
-- Pugi anti-greenfield + anti-emoji discipline rules ().
-- Persona output gate — Pugi strip + fake-dispatch detector (P0) ().
-
-## [0.1.0-beta.19] - 2026-05-26
-
-### Added
-- Pugi-review batch review followups — silent PASS + safeGit split + quota
- migration + cleanup dead code ().
-
-### Fixed
-- Replace CJS `require()` в ESM bundle — bare REPL crash on beta.16 ().
-
-## [0.1.0-beta.18] - 2026-05-26
-
-### Added
-- Initial public beta of `@pugi/cli` with REPL, dispatch, sync, review, and
- doctor surfaces. Establishes the baseline for the leak-parity sprint.

package/THIRD_PARTY_NOTICES.md

@@ -1,40 +0,0 @@
-# Third-Party Notices
-
-`@pugi/cli` bundles default skill content from third parties on `pugi init`.
-Each entry below carries the full upstream MIT license text required for
-redistribution.
-
-## mattpocock/skills
-
-Pugi bundles the following skill bodies (ported, attribution preserved in
-each `SKILL.md` header) from https://github.com/mattpocock/skills:
-
-- `zoom-out` — `skills/engineering/zoom-out/SKILL.md`
-- `diagnose` — `skills/engineering/diagnose/SKILL.md`
-- `grill-me` — `skills/productivity/grill-me/SKILL.md`
-
-Upstream license follows verbatim.
-
----
-
-MIT License
-
-Copyright (c) 2026 Matt Pocock
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/assets/pugi-mascot.ansi

@@ -1,16 +0,0 @@
-[?25l                              
-                              
-                              
-        ▄▄▄▄▄▄▄▄▄▄▄▄▄▄        
-       ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄       
-       ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄       
-         ▄▄▄▄▄▄▄▄▄▄▄▄         
-         ▄▄▄▄▄▄▄▄▄▄▄▄         
-          ▄▄▄▄▄▄▄▄▄▄▄         
-            ▄▄▄▄▄▄            
-       ▄▄▄▄   ▄▄              
-       ▄     ▄ ▄▄▄            
-               ▄              
-                              
-                              
-[?25h

package/assets/pugi-prozr2-mascot.ansi

@@ -1,9 +0,0 @@
-[?25l                
-                
-    ▄▄▄▄▄▄▄▄    
-     ▄▄▄▄▄▄     
-     ▄▄▄▄▄▄     
-    ▄▄          
-        ▄       
-                
-[?25h

package/bin/run.js

@@ -1,34 +0,0 @@
-#!/usr/bin/env node
-// 2026-05-27 — silence the noisy `node:sqlite` ExperimentalWarning.
-// Node 22.x prints a multi-line warning the first time any consumer
-// imports `node:sqlite` (see core/repl/store/session-store.ts). CEO has
-// pinged this surface twice now ("(node:XXXXX) ExperimentalWarning:
-// SQLite is an experimental feature and might change at any time" +
-// trace-warnings hint). Hiding it cleanly requires a tap on
-// process.emitWarning BEFORE any module loads the sqlite binding —
-// hence wiring it here in the binary entry, not deep inside the CLI.
-//
-// We allowlist only the exact sqlite warning + leave every other
-// runtime warning (deprecation, security, custom code paths) intact.
-// Operator can still re-enable the noise by exporting
-// PUGI_SHOW_EXPERIMENTAL_WARNINGS=1 — useful when debugging a node
-// version bump that might surface a new experimental flag we should
-// notice.
-if (!process.env.PUGI_SHOW_EXPERIMENTAL_WARNINGS) {
-  const originalEmit = process.emit;
-  process.emit = function patchedEmit(name, ...args) {
-    if (name === 'warning') {
-      const w = args[0];
-      const isSqliteExperimental =
-        w &&
-        typeof w === 'object' &&
-        w.name === 'ExperimentalWarning' &&
-        typeof w.message === 'string' &&
-        /SQLite is an experimental feature/i.test(w.message);
-      if (isSqliteExperimental) return false;
-    }
-    return originalEmit.call(this, name, ...args);
-  };
-}
-
-import('../dist/index.js');