arcane-cli 0.15.9 → 0.16.2

package/dist/index.js

@@ -6,7 +6,7 @@ const require = __createRequire(import.meta.url);
 import { Command } from "commander";
 import { createRequire as createRequire2 } from "module";
 import { fileURLToPath } from "url";
-import { dirname as dirname3, join as join10 } from "path";
+import { dirname as dirname3, join as join11 } from "path";
 
 // src/commands/init.ts
 import { select as select2, confirm } from "@inquirer/prompts";
@@ -305,13 +305,13 @@ var COMPONENTS = [
   // Spell prompts — installed to .github/prompts/ (VS Code Copilot convention)
   {
     name: "spell-prompts",
-    description: "Full Arcane spell prompt library (33 spells)",
+    description: "Full Arcane spell prompt library (34 spells)",
     files: [
       ".github/prompts/spell-arcane-version.prompt.md",
       ".github/prompts/spell-architect.prompt.md",
       ".github/prompts/spell-brainstorm.prompt.md",
       ".github/prompts/spell-scope.prompt.md",
-      ".github/prompts/spell-bootstrap-business.prompt.md",
+      ".github/prompts/spell-summon-venture.prompt.md",
       ".github/prompts/spell-bug.prompt.md",
       ".github/prompts/spell-bump.prompt.md",
       ".github/prompts/spell-check-drift.prompt.md",
@@ -338,6 +338,7 @@ var COMPONENTS = [
       ".github/prompts/spell-create-pull-request.prompt.md",
       ".github/prompts/spell-document.prompt.md",
       ".github/prompts/spell-feedback.prompt.md",
+      ".github/prompts/spell-manifest.prompt.md",
       ".github/prompts/spell-save-idea.prompt.md",
       ".github/prompts/spell-status.prompt.md",
       ".github/prompts/spell-review-batch.prompt.md"
@@ -346,8 +347,12 @@ var COMPONENTS = [
   // Templates
   {
     name: "venture-template",
-    description: "Starter template for a new business venture folder",
-    files: [".arcane/templates/venture-template/overview.md"]
+    description: "Starter template for a new business venture folder \u2014 overview plus idea/todo books",
+    files: [
+      ".arcane/templates/venture-template/overview.md",
+      ".arcane/templates/venture-template/IDEAS.md",
+      ".arcane/templates/venture-template/TODO.md"
+    ]
   },
   // Session continuity — files required for spell-close-session / spell-open-session
   {
@@ -378,13 +383,13 @@ var COMPONENTS = [
   // Claude commands
   {
     name: "claude-commands",
-    description: "Claude Code slash command wrappers for all 33 Arcane spells",
+    description: "Claude Code slash command wrappers for all 34 Arcane spells",
     files: [
       ".claude/commands/spell-arcane-version.md",
       ".claude/commands/spell-architect.md",
       ".claude/commands/spell-brainstorm.md",
       ".claude/commands/spell-scope.md",
-      ".claude/commands/spell-bootstrap-business.md",
+      ".claude/commands/spell-summon-venture.md",
       ".claude/commands/spell-bug.md",
       ".claude/commands/spell-bump.md",
       ".claude/commands/spell-check-drift.md",
@@ -411,6 +416,7 @@ var COMPONENTS = [
       ".claude/commands/spell-create-pull-request.md",
       ".claude/commands/spell-document.md",
       ".claude/commands/spell-feedback.md",
+      ".claude/commands/spell-manifest.md",
       ".claude/commands/spell-save-idea.md",
       ".claude/commands/spell-status.md",
       ".claude/commands/spell-review-batch.md"
@@ -1593,15 +1599,140 @@ async function runAgentsList(targetDir) {
 
 // src/modules/git.ts
 import { execFile } from "child_process";
-import { promisify } from "util";
-var execFileAsync = promisify(execFile);
-async function inspectGitRepository(cwd) {
-  try {
-    const { stdout: stdout2 } = await execFileAsync(
+var GitTimeoutError = class extends Error {
+  constructor(message, options) {
+    super(message, options);
+    this.name = "GitTimeoutError";
+  }
+};
+var NETWORK_SUBCOMMANDS = /* @__PURE__ */ new Set(["fetch", "pull", "push", "clone", "ls-remote", "send-email"]);
+var WRITE_SUBCOMMANDS = /* @__PURE__ */ new Set([
+  "init",
+  "commit",
+  "add",
+  "checkout",
+  "switch",
+  "merge",
+  "rebase",
+  "reset",
+  "tag",
+  "mv",
+  "rm",
+  "cherry-pick",
+  "revert",
+  "stash",
+  "apply",
+  "am",
+  "restore",
+  "submodule",
+  "sparse-checkout",
+  "maintenance",
+  "notes"
+]);
+var AMBIGUOUS_AS_WRITE = /* @__PURE__ */ new Set(["branch", "config", "remote", "worktree"]);
+var READ_SUBCOMMANDS = /* @__PURE__ */ new Set([
+  "status",
+  "rev-parse",
+  "log",
+  "diff",
+  "show",
+  "describe",
+  "cat-file",
+  "ls-files",
+  "ls-tree",
+  "symbolic-ref",
+  "merge-base",
+  "blame",
+  "shortlog",
+  "grep",
+  "reflog",
+  "diff-tree",
+  "rev-list",
+  "name-rev",
+  "count-objects",
+  "verify-commit",
+  "verify-tag",
+  "help",
+  "version"
+]);
+var GLOBAL_FLAGS_WITH_SEPARATE_VALUE = /* @__PURE__ */ new Set(["-c", "-C"]);
+var DEFAULT_TIMEOUTS_MS = {
+  read: 15e3,
+  write: 3e4,
+  network: 12e4
+};
+function classifyGitCommand(args) {
+  let subcommand;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (GLOBAL_FLAGS_WITH_SEPARATE_VALUE.has(arg)) {
+      i++;
+      continue;
+    }
+    if (arg.startsWith("-")) continue;
+    subcommand = arg;
+    break;
+  }
+  if (!subcommand) return "read";
+  if (NETWORK_SUBCOMMANDS.has(subcommand)) return "network";
+  if (WRITE_SUBCOMMANDS.has(subcommand) || AMBIGUOUS_AS_WRITE.has(subcommand)) return "write";
+  if (READ_SUBCOMMANDS.has(subcommand)) return "read";
+  return "write";
+}
+function buildGitEnv() {
+  return {
+    ...process.env,
+    GIT_TERMINAL_PROMPT: "0",
+    GCM_INTERACTIVE: "Never",
+    GIT_OPTIONAL_LOCKS: "0"
+  };
+}
+function runGit(cwd, args, options = {}) {
+  const commandClass = options.commandClass ?? classifyGitCommand(args);
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUTS_MS[commandClass] ?? DEFAULT_TIMEOUTS_MS.write;
+  return new Promise((resolve, reject) => {
+    const child = execFile(
       "git",
-      ["rev-parse", "--is-inside-work-tree"],
-      { cwd }
+      args,
+      {
+        cwd,
+        env: buildGitEnv(),
+        timeout: timeoutMs,
+        // SIGTERM (Node's default) rather than SIGKILL: gives git a chance
+        // to run its own cleanup on POSIX, relevant to EF-20's own concern
+        // about a killed operation leaving refs/locks in an uncertain state.
+        // Moot on Windows -- Node docs: both map to an abrupt TerminateProcess
+        // there -- but this module isn't Windows-gated.
+        killSignal: "SIGTERM",
+        windowsHide: true,
+        encoding: "utf8"
+      },
+      (error, stdout, stderr) => {
+        if (error) {
+          if (error.killed) {
+            reject(
+              new GitTimeoutError(
+                // NOTE: embeds the raw args, including any secrets a future
+                // network-class caller might pass (e.g. a credentialed
+                // clone URL). No current caller does; redact before one does.
+                `git ${args.join(" ")} timed out after ${timeoutMs}ms (class: ${commandClass})`,
+                { cause: error }
+              )
+            );
+            return;
+          }
+          reject(error);
+          return;
+        }
+        resolve({ stdout, stderr });
+      }
     );
+    child.stdin?.end();
+  });
+}
+async function inspectGitRepository(cwd) {
+  try {
+    const { stdout: stdout2 } = await runGit(cwd, ["rev-parse", "--is-inside-work-tree"]);
     if (stdout2.trim() !== "true") {
       return { status: "not-repository" };
     }
@@ -1609,15 +1740,11 @@ async function inspectGitRepository(cwd) {
     return { status: "not-repository" };
   }
   try {
-    await execFileAsync("git", ["rev-parse", "--verify", "HEAD"], { cwd });
+    await runGit(cwd, ["rev-parse", "--verify", "HEAD"]);
   } catch {
     return { status: "no-commits" };
   }
-  const { stdout } = await execFileAsync(
-    "git",
-    ["status", "--porcelain", "-uall"],
-    { cwd }
-  );
+  const { stdout } = await runGit(cwd, ["status", "--porcelain", "-uall"]);
   const lines = stdout.trim();
   return {
     status: "ready",
@@ -1626,7 +1753,7 @@ async function inspectGitRepository(cwd) {
 }
 async function countUncommittedChanges(cwd) {
   try {
-    const { stdout } = await execFileAsync("git", ["status", "--porcelain", "-uall"], { cwd });
+    const { stdout } = await runGit(cwd, ["status", "--porcelain", "-uall"]);
     const lines = stdout.trim();
     return lines.length === 0 ? 0 : lines.split("\n").length;
   } catch {
@@ -1824,11 +1951,21 @@ async function runInit(options, targetDir, assetsDir, packageVersion) {
     printDryRun(`Would initialize with profile "${profile}" \u2014 ${fileCount} files`);
     return;
   }
+  let role;
+  if (!options.profile) {
+    console.log();
+    const isHub = await confirm({
+      message: "Will this repo manage other ventures as a hub? (idea books, spell-manifest promotion, venture registry)",
+      default: false
+    });
+    role = isHub ? "hub" : "consumer";
+  }
   const manifest = {
     version: packageVersion,
     profile,
     installedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    components: installedComponents
+    components: installedComponents,
+    ...role ? { role } : {}
   };
   await writeManifest(targetDir, manifest);
   printSuccess(`Initialized with profile "${profile}" \u2014 ${fileCount} files installed`);
@@ -1946,7 +2083,87 @@ async function runAdd(name, options, targetDir, assetsDir, packageVersion) {
 }
 
 // src/commands/update.ts
+import { join as join7 } from "path";
+
+// src/modules/hub.ts
+import { confirm as confirm2 } from "@inquirer/prompts";
+import { readdir as readdir3, writeFile as writeFile5 } from "fs/promises";
 import { join as join6 } from "path";
+var MANIFEST_RETROFITS = [
+  {
+    field: "role",
+    needsRetrofit: (m) => m.role === void 0,
+    ask: async () => {
+      const isHub = await confirm2({
+        message: "Will this repo manage other ventures as a hub? (idea books, spell-manifest promotion, venture registry)",
+        default: false
+      });
+      return { role: isHub ? "hub" : "consumer" };
+    }
+  }
+];
+async function runManifestRetrofits(manifest) {
+  const applicable = MANIFEST_RETROFITS.filter((r) => r.needsRetrofit(manifest));
+  if (applicable.length === 0) return {};
+  console.log();
+  console.log(
+    `This install predates ${applicable.length} manifest field${applicable.length === 1 ? "" : "s"} -- a couple of quick questions:`
+  );
+  let patch = {};
+  for (const retrofit of applicable) {
+    const answer = await retrofit.ask();
+    patch = { ...patch, ...answer };
+  }
+  return patch;
+}
+async function offerRegistryScaffold(targetDir, businessRoot) {
+  const registryPath = join6(targetDir, businessRoot, "registry.json");
+  if (await fileExists(registryPath)) return;
+  const businessRootPath = join6(targetDir, businessRoot);
+  let ventureDirs;
+  try {
+    const entries = await readdir3(businessRootPath, { withFileTypes: true });
+    ventureDirs = entries.filter((e) => e.isDirectory() && e.name !== "_template").map((e) => e.name);
+  } catch {
+    return;
+  }
+  if (ventureDirs.length === 0) return;
+  console.log();
+  const scaffold = await confirm2({
+    message: `Found ${ventureDirs.length} folder${ventureDirs.length === 1 ? "" : "s"} under ${businessRoot}/ -- scaffold ${businessRoot}/registry.json from them?`,
+    default: true
+  });
+  if (!scaffold) return;
+  const ventures = {};
+  for (const slug of ventureDirs) {
+    const include = await confirm2({ message: `  Include "${slug}"?`, default: true });
+    if (!include) continue;
+    ventures[slug] = {
+      name: slug,
+      aliases: [],
+      status: "active",
+      visibility: "private",
+      ownership: "llc",
+      tracking: "none",
+      repos: []
+    };
+  }
+  if (Object.keys(ventures).length === 0) {
+    console.log("  No ventures selected -- registry not created.");
+    return;
+  }
+  const registry = {
+    _comment: "Hub-owned venture registry. Private. Never installed or modified by spell update. Seeded by the retrofit wizard -- review and enrich (aliases, ownership, tracking, clones) before relying on it.",
+    updated: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
+    ventures
+  };
+  await writeFile5(registryPath, JSON.stringify(registry, null, 2) + "\n", "utf-8");
+  console.log(
+    `  \u2713 Scaffolded ${businessRoot}/registry.json with ${Object.keys(ventures).length} venture(s).`
+  );
+}
+
+// src/commands/update.ts
 async function runUpdate(options, targetDir, assetsDir, packageVersion) {
   let manifest;
   try {
@@ -2013,8 +2230,8 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
     }
     const updatedFiles = [];
     for (const file of component.files) {
-      const srcPath = join6(assetsDir, file);
-      const preserveExisting = component.skipExisting && await fileExists(join6(targetDir, file));
+      const srcPath = join7(assetsDir, file);
+      const preserveExisting = component.skipExisting && await fileExists(join7(targetDir, file));
       if (preserveExisting) {
         console.log(`  ${options.dryRun ? "[dry-run] Would preserve" : "Preserved"}: ${file}`);
       } else if (options.dryRun) {
@@ -2027,7 +2244,7 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
       updatedFiles.push(file);
     }
     for (const dir of component.directories ?? []) {
-      const srcDirPath = join6(assetsDir, dir);
+      const srcDirPath = join7(assetsDir, dir);
       if (options.dryRun) {
         console.log(`  [dry-run] Would update directory: ${dir}/`);
       } else {
@@ -2047,19 +2264,34 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
       `
 [dry-run] Would update ${fileCount} files.`
     );
+    const applicableRetrofits = MANIFEST_RETROFITS.filter((r) => r.needsRetrofit(manifest));
+    if (applicableRetrofits.length > 0) {
+      console.log(
+        `[dry-run] Would ask ${applicableRetrofits.length} manifest retrofit question${applicableRetrofits.length === 1 ? "" : "s"}: ${applicableRetrofits.map((r) => r.field).join(", ")}.`
+      );
+    }
     return;
   }
-  const updated = { ...manifest, version: packageVersion, components: updatedComponents };
+  const retrofitPatch = await runManifestRetrofits(manifest);
+  const updated = {
+    ...manifest,
+    version: packageVersion,
+    components: updatedComponents,
+    ...retrofitPatch
+  };
   await writeManifest(targetDir, updated);
   console.log(
     `
 \u2713 Updated ${fileCount} files.`
   );
+  if (manifest.role !== "hub" && updated.role === "hub") {
+    await offerRegistryScaffold(targetDir, updated.business_root ?? "ventures");
+  }
 }
 
 // src/modules/version-check.ts
-import { readFile as readFile4, writeFile as writeFile5, mkdir as mkdir4 } from "fs/promises";
-import { dirname, join as join7 } from "path";
+import { readFile as readFile4, writeFile as writeFile6, mkdir as mkdir4 } from "fs/promises";
+import { dirname, join as join8 } from "path";
 import { homedir as homedir2 } from "os";
 import { createRequire } from "module";
 var require2 = createRequire(import.meta.url);
@@ -2073,7 +2305,7 @@ function getFeedUrl() {
   }
   return url;
 }
-var DEFAULT_CACHE_PATH = join7(homedir2(), ".arcane", "version-cache.json");
+var DEFAULT_CACHE_PATH = join8(homedir2(), ".arcane", "version-cache.json");
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 async function readCache(cachePath) {
   try {
@@ -2090,7 +2322,7 @@ async function readCache(cachePath) {
 async function writeCache(cachePath, latest) {
   await mkdir4(dirname(cachePath), { recursive: true });
   const entry = { latest, checkedAt: (/* @__PURE__ */ new Date()).toISOString() };
-  await writeFile5(cachePath, JSON.stringify(entry, null, 2), "utf-8");
+  await writeFile6(cachePath, JSON.stringify(entry, null, 2), "utf-8");
 }
 async function getLatestVersion(feedUrl) {
   const normalizedBase = feedUrl.endsWith("/") ? feedUrl : feedUrl + "/";
@@ -2203,8 +2435,8 @@ async function runStatus(targetDir, packageVersion) {
 
 // src/commands/uninstall.ts
 import { rm as rm2 } from "fs/promises";
-import { join as join8 } from "path";
-import { confirm as confirm2 } from "@inquirer/prompts";
+import { join as join9 } from "path";
+import { confirm as confirm3 } from "@inquirer/prompts";
 async function runUninstall(options, targetDir) {
   let manifest;
   try {
@@ -2234,7 +2466,7 @@ async function runUninstall(options, targetDir) {
     return;
   }
   if (!options.yes) {
-    const confirmed = await confirm2({
+    const confirmed = await confirm3({
       message: `This will remove ${totalFiles} files and .arcane.json. Continue?`,
       default: false
     });
@@ -2246,7 +2478,7 @@ async function runUninstall(options, targetDir) {
   let removed = 0;
   for (const component of manifest.components) {
     for (const file of component.files) {
-      const filePath = join8(targetDir, file);
+      const filePath = join9(targetDir, file);
       try {
         await rm2(filePath, { force: true });
         removed++;
@@ -2254,16 +2486,16 @@ async function runUninstall(options, targetDir) {
       }
     }
   }
-  await rm2(join8(targetDir, ".arcane.json"), { force: true });
+  await rm2(join9(targetDir, ".arcane.json"), { force: true });
   const agentDirs = [
     ".github/agents",
     ".arcane/agents",
     ".arcane/generated"
   ];
   for (const dir of agentDirs) {
-    await rm2(join8(targetDir, dir), { recursive: true, force: true });
+    await rm2(join9(targetDir, dir), { recursive: true, force: true });
   }
-  await rm2(join8(targetDir, ".arcane/agents.yaml"), { force: true });
+  await rm2(join9(targetDir, ".arcane/agents.yaml"), { force: true });
   const markerFiles = [
     "CLAUDE.md",
     "AGENTS.md",
@@ -2278,9 +2510,9 @@ async function runUninstall(options, targetDir) {
 
 // src/commands/doctor.ts
 import { access as access3, readFile as readFile5, mkdir as mkdir5, copyFile as fsCopyFile2 } from "fs/promises";
-import { join as join9, dirname as dirname2 } from "path";
+import { join as join10, dirname as dirname2 } from "path";
 import { execFile as execFile2 } from "child_process";
-import { promisify as promisify2 } from "util";
+import { promisify } from "util";
 
 // src/config/incidents.ts
 var INCIDENT_QUEUE = [
@@ -2348,7 +2580,7 @@ function evaluateIncidentGate(records) {
 }
 
 // src/commands/doctor.ts
-var execFileAsync2 = promisify2(execFile2);
+var execFileAsync = promisify(execFile2);
 async function checkNodeVersion() {
   const name = "Node.js version";
   const raw = process.version;
@@ -2366,13 +2598,13 @@ async function checkVSCodeExtension(id, label) {
   const name = `VS Code extension: ${label}`;
   const home = process.env["HOME"] ?? "";
   const extDirs = [
-    join9(home, ".vscode", "extensions"),
-    join9(home, ".vscode-insiders", "extensions")
+    join10(home, ".vscode", "extensions"),
+    join10(home, ".vscode-insiders", "extensions")
   ];
   for (const dir of extDirs) {
     try {
-      const { readdir: readdir3 } = await import("fs/promises");
-      const entries = await readdir3(dir);
+      const { readdir: readdir4 } = await import("fs/promises");
+      const entries = await readdir4(dir);
       const prefix = id.toLowerCase() + "-";
       const found = entries.some(
         (e) => e.toLowerCase() === id.toLowerCase() || e.toLowerCase().startsWith(prefix)
@@ -2386,7 +2618,7 @@ async function checkVSCodeExtension(id, label) {
   let installBin = "code";
   for (const bin of ["code", "code-insiders"]) {
     try {
-      await execFileAsync2(bin, ["--version"]);
+      await execFileAsync(bin, ["--version"]);
       installBin = bin;
       break;
     } catch {
@@ -2401,11 +2633,11 @@ async function checkVSCodeExtension(id, label) {
 }
 async function checkArcaneManifest(targetDir) {
   const name = "Arcane manifest (.arcane.json)";
-  const manifestPath2 = join9(targetDir, ".arcane.json");
+  const manifestPath2 = join10(targetDir, ".arcane.json");
   try {
     await access3(manifestPath2);
   } catch {
-    const selfHostedManifestPath = join9(targetDir, "src", "assets", ".arcane.json");
+    const selfHostedManifestPath = join10(targetDir, "src", "assets", ".arcane.json");
     try {
       const raw = await readFile5(selfHostedManifestPath, "utf8");
       const manifest = JSON.parse(raw);
@@ -2474,7 +2706,7 @@ async function checkSessionContinuity(targetDir) {
   const results = [];
   for (const file of SESSION_CONTINUITY_FILES) {
     const name = `Session file: ${file}`;
-    const filePath = join9(targetDir, file);
+    const filePath = join10(targetDir, file);
     try {
       await access3(filePath);
       results.push({ name, passed: true, message: "present" });
@@ -2492,11 +2724,11 @@ async function checkSessionContinuity(targetDir) {
 async function fixSessionContinuity(targetDir, assetsDir) {
   const created = [];
   for (const file of SESSION_CONTINUITY_FILES) {
-    const destPath = join9(targetDir, file);
+    const destPath = join10(targetDir, file);
     try {
       await access3(destPath);
     } catch {
-      const srcPath = join9(assetsDir, file);
+      const srcPath = join10(assetsDir, file);
       await mkdir5(dirname2(destPath), { recursive: true });
       await fsCopyFile2(srcPath, destPath);
       created.push(file);
@@ -2558,7 +2790,7 @@ async function runDoctor(targetDir, options = {}, assetsDir) {
 import { realpathSync } from "fs";
 var require3 = createRequire2(import.meta.url);
 var pkg = require3("../package.json");
-var ASSETS_DIR = process.env["ARCANE_ASSETS_DIR"] ?? join10(dirname3(fileURLToPath(import.meta.url)), "assets");
+var ASSETS_DIR = process.env["ARCANE_ASSETS_DIR"] ?? join11(dirname3(fileURLToPath(import.meta.url)), "assets");
 var program = new Command();
 program.name("spell").description("Arcane framework CLI \u2014 scaffold and manage governance files").version(pkg.version).action(async () => {
   await printWelcome(pkg.version, process.cwd());