chainlesschain 0.162.189 → 0.162.197

package/README.md

@@ -9,7 +9,7 @@ npm install -g chainlesschain
 chainlesschain setup
 ```
 
-After installation, three equivalent commands are available:
+After installation, four equivalent commands are available:
 
 | Command          | Description                                                       |
 | ---------------- | ----------------------------------------------------------------- |
@@ -21,6 +21,12 @@ After installation, three equivalent commands are available:
 ```bash
 cc setup       # equivalent to: chainlesschain setup
 clchain start  # equivalent to: chainlesschain start
+
+# In a terminal, no subcommand starts the coding agent
+cc
+
+# Piped input runs one non-interactive agent turn
+git diff | cc
 ```
 
 ## Requirements
@@ -28,9 +34,70 @@ clchain start  # equivalent to: chainlesschain start
 - **Node.js** >= 22.12.0
 - **Docker** (optional, for backend services)
 
+## Shell completion
+
+Completion files are generated from the same command manifest as `cc --help`
+and ship in the npm package under `completions/`:
+
+```bash
+# Bash
+source "$(npm root -g)/chainlesschain/completions/cc.bash"
+
+# Zsh
+fpath=("$(npm root -g)/chainlesschain/completions" $fpath)
+autoload -Uz compinit && compinit
+
+# Fish
+source (npm root -g)/chainlesschain/completions/cc.fish
+```
+
+```powershell
+# PowerShell
+. (Join-Path (npm root -g) "chainlesschain/completions/cc.ps1")
+```
+
 ## Commands
 
-> **175 top-level commands** are registered (as of CLI v0.162.160). The sections below document the most-used ones with full options. For the complete, always-current list, run `chainlesschain --help` (or `cc --help`) — that output is the canonical source of truth.
+> **175 top-level compatibility commands** are registered. `cc --help` shows the curated coding-agent surface; run `cc help --all` for the complete manifest-generated list and `cc help <command>` for generated command-specific help.
+
+<!-- BEGIN GENERATED COMMAND LIFECYCLE -->
+<!-- Generated by scripts/gen-command-manifest.mjs; do not edit. -->
+
+### Compatibility namespace and command lifecycle
+
+The registered Commander graph contains **175** top-level commands (net growth **0** against the 175-command baseline). After excluding 25 deprecated compatibility entries and adding `lab` as their recommended namespace, the recommended top-level surface contains **151** commands. `lab` is phase-0 only, not another eagerly registered command.
+
+| Legacy entry | Replacement      | Deprecated since | Removal not before | Minimum window |
+| ------------ | ---------------- | ---------------- | ------------------ | -------------- |
+| `bm25`       | `lab bm25`       | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `ccron`      | `lab ccron`      | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `compt`      | `lab compt`      | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `consol`     | `lab consol`     | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `dao`        | `lab dao`        | `0.162.189`      | `0.164.0`          | 2 minor cycles |
+| `evomap`     | `lab evomap`     | `0.162.189`      | `0.164.0`          | 2 minor cycles |
+| `execbe`     | `lab execbe`     | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `fflag`      | `lab fflag`      | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `itbudget`   | `lab itbudget`   | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `mcpscaf`    | `lab mcpscaf`    | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `meminj`     | `lab meminj`     | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `orchgov`    | `lab orchgov`    | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `pdfp`       | `lab pdfp`       | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `promcomp`   | `lab promcomp`   | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `seshhook`   | `lab seshhook`   | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `seshsearch` | `lab seshsearch` | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `seshtail`   | `lab seshtail`   | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `seshu`      | `lab seshu`      | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `sganal`     | `lab sganal`     | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `slotfill`   | `lab slotfill`   | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `svccont`    | `lab svccont`    | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `tms`        | `lab tms`        | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `topiccls`   | `lab topiccls`   | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `uprof`      | `lab uprof`      | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+| `vcheck`     | `lab vcheck`     | `0.162.194`      | `0.164.0`          | 2 minor cycles |
+
+Both forms route to the same lazy command registrar during the compatibility window. Legacy invocations emit their migration notice on stderr only.
+
+<!-- END GENERATED COMMAND LIFECYCLE -->
 
 ### `chainlesschain setup`
 
@@ -68,6 +135,8 @@ Show status of the desktop app, Docker services, and port availability.
 
 ```bash
 chainlesschain status
+chainlesschain status --json            # Fast machine-readable snapshot
+chainlesschain status --deep            # Also inspect Docker Compose services
 ```
 
 ### `chainlesschain services <action>`
@@ -91,7 +160,9 @@ Manage configuration.
 chainlesschain config list              # Show all config values
 chainlesschain config get llm.provider  # Get a specific value
 chainlesschain config set llm.provider openai
-chainlesschain config set llm.apiKey sk-...
+chainlesschain config set-secret llm.apiKey  # Hidden prompt; secret never enters argv
+chainlesschain config validate          # Validate schema + private permissions
+chainlesschain config explain llm.model # Show effective source / policy lock
 chainlesschain config edit              # Open in $EDITOR
 chainlesschain config reset             # Reset to defaults
 ```
@@ -160,7 +231,7 @@ Start an interactive AI chat session with streaming output.
 ```bash
 chainlesschain chat                     # Default: Ollama qwen2.5:7b
 chainlesschain chat --model llama3      # Use different model
-chainlesschain chat --provider openai --api-key sk-...
+chainlesschain chat --provider openai  # Reads the stored credential
 chainlesschain chat --agent             # Agentic mode (can read/write files)
 ```
 
@@ -184,7 +255,7 @@ LLM provider management.
 chainlesschain llm models               # List installed Ollama models
 chainlesschain llm models --json        # JSON output
 chainlesschain llm test                 # Test Ollama connectivity
-chainlesschain llm test --provider openai --api-key sk-...
+chainlesschain llm test --provider openai  # Reads the stored credential
 chainlesschain llm providers            # List 10 built-in LLM providers
 chainlesschain llm add-provider <name>  # Add custom provider
 chainlesschain llm switch <name>        # Switch active provider
@@ -195,9 +266,10 @@ chainlesschain llm switch <name>        # Switch active provider
 Start an agentic AI session — the AI can read/write files, run shell commands, search the codebase, execute code (Python/Node.js/Bash with auto pip-install), and invoke 141 built-in skills.
 
 ```bash
-chainlesschain agent                    # Default: Ollama qwen2.5:7b
+chainlesschain agent                    # Explicit form; plain `cc` is equivalent in a TTY
 chainlesschain a --model llama3         # Short alias
-chainlesschain agent --provider openai --api-key sk-...
+chainlesschain config set-secret llm.apiKey
+chainlesschain agent --provider openai  # Reads the stored credential
 ```
 
 Built-in tools (19): `read_file`, `write_file`, `edit_file`, `edit_file_hashed`, `notebook_edit`, `run_shell`, `check_shell`, `git`, `search_files`, `list_dir`, `run_skill`, `list_skills`, `run_code`, `spawn_sub_agent`, `web_fetch`, `web_search`, `todo_write`, `ask_user_question`, `search_sessions`
@@ -1267,9 +1339,10 @@ Every surface follows this shape — replace `aud-gov-` with the prefix from the
 
 ```bash
 chainlesschain --version   # Show version
-chainlesschain --help      # Show help
-chainlesschain --verbose   # Enable verbose output
-chainlesschain --quiet     # Suppress non-essential output
+chainlesschain --help      # Show the curated command surface
+chainlesschain help --all  # Show all compatibility commands
+chainlesschain --verbose status # Add diagnostics on stderr
+chainlesschain --quiet status   # Suppress non-error human output
 ```
 
 ## Configuration
@@ -1566,7 +1639,7 @@ Stream a single prompt through the session-core StreamRouter, emitting NDJSON ev
 ```bash
 chainlesschain stream "Summarize this repo"                # NDJSON events
 chainlesschain stream "Hello" --text                       # Concatenated final text only
-chainlesschain stream "Hi" --provider openai --model gpt-4o --api-key sk-...
+chainlesschain stream "Hi" --provider openai --model gpt-4o  # Reads the stored credential
 ```
 
 Options: `--model`, `--provider` (default `ollama`), `--base-url`, `--api-key`, `--text`.

package/bin/chainlesschain.js

@@ -1,58 +1,13 @@
 #!/usr/bin/env node
 
-// FIRST: Patch child_process globally to route ALL spawn/exec through ProcessExecutionBroker (M1)
-// This must come BEFORE any other imports to ensure every subprocess is audited
-import "../src/lib/process-execution-broker/patch-child-process.js";
-
-// Ensure UTF-8 encoding on Windows to prevent Chinese character garbling (乱码)
-import { ensureUtf8 } from "../src/lib/ensure-utf8.js";
-ensureUtf8();
-
-// Initialize observability before command modules load so every completed span
-// can reach a standard OTel Collector. Export stays off unless the global flag
-// or an OTEL_EXPORTER_OTLP_* endpoint is present.
-import {
-  initObservability,
-  resolveOtlpEndpointFromArgv,
-} from "../src/lib/observability/index.js";
-const observability = initObservability({
-  endpoint: resolveOtlpEndpointFromArgv(process.argv),
-});
-
-// Force blocking stdio when piped, so process.exit() flushes the full output
-// before the process tears down. Without this, macOS (and occasionally Linux)
-// can drop tail bytes from large outputs like `chainlesschain --help` (~13KB
-// across 155 commands) when consumed via execSync/spawnSync `stdio: pipe`.
-// No-op on TTY — terminals are already line-buffered. Idiomatic for Node
-// CLIs (npm, yarn, eslint all do the equivalent).
-if (!process.stdout.isTTY && process.stdout._handle?.setBlocking) {
-  process.stdout._handle.setBlocking(true);
-}
-if (!process.stderr.isTTY && process.stderr._handle?.setBlocking) {
-  process.stderr._handle.setBlocking(true);
-}
-
-// Lazy dispatch: import only the ONE command's module instead of eagerly
-// loading all ~154 command modules (the ~2.7s cold-start cost). runCli falls
-// back to the full eager program for --help / no-args / unknown commands.
+// Keep the executable's static graph phase-0 only. runCli loads the process
+// broker, telemetry, Event Runtime and one selected command after it has ruled
+// out lightweight --version/help requests.
 import { runCli } from "../src/lazy-dispatch.js";
-import {
-  reportFatal,
-  installGlobalErrorHandlers,
-} from "../src/lib/fatal-handler.js";
+import { reportPendingNativeUpdateResult } from "../src/lib/packer/native-update-state.js";
 
-// Funnel rejections/exceptions that escape a command action (async event
-// handlers, detached tasks, third-party libs) through the same friendly
-// boundary as the top-level parse, instead of Node's default ugly-stack crash.
-installGlobalErrorHandlers(process, async (error) => {
-  await observability.shutdown().catch(() => {});
+reportPendingNativeUpdateResult();
+runCli(process.argv).catch(async (error) => {
+  const { reportFatal } = await import("../src/lib/fatal-handler.js");
   reportFatal(error);
 });
-
-runCli(process.argv).then(
-  () => observability.shutdown().catch(() => {}),
-  async (error) => {
-    await observability.shutdown().catch(() => {});
-    reportFatal(error);
-  },
-);

package/completions/_cc

@@ -0,0 +1,209 @@
+# Generated from src/command-manifest.json; do not edit.
+# manifest-sha256: a342dc48c6d65ef81a96c7df387418e739a51c2a82b9a626d39882387bd2e999
+#compdef cc chainlesschain clc clchain
+
+_chainlesschain() {
+  if (( CURRENT == 2 )); then
+    compadd -- \
+      'a' \
+      'a2a' \
+      'activitypub' \
+      'agenda' \
+      'agent' \
+      'agent-network' \
+      'agents' \
+      'android' \
+      'anet' \
+      'ap' \
+      'artifact' \
+      'artifacts' \
+      'ask' \
+      'attach' \
+      'audit' \
+      'auth' \
+      'auto' \
+      'auto-mode' \
+      'autoagent' \
+      'automation' \
+      'automode' \
+      'batch' \
+      'bi' \
+      'bm25' \
+      'browse' \
+      'ccron' \
+      'changelog' \
+      'chat' \
+      'checkpoint' \
+      'checkup' \
+      'ci' \
+      'cli-anything' \
+      'cloud' \
+      'cmd' \
+      'code-intel' \
+      'codegen' \
+      'collab' \
+      'command' \
+      'compact' \
+      'complete' \
+      'compliance' \
+      'compt' \
+      'config' \
+      'consol' \
+      'context' \
+      'cost' \
+      'cowork' \
+      'crosschain' \
+      'daemon' \
+      'dao' \
+      'db' \
+      'dbevo' \
+      'decrypt' \
+      'dev' \
+      'did' \
+      'did-v2' \
+      'didv2' \
+      'dlp' \
+      'doctor' \
+      'eco' \
+      'economy' \
+      'ecosystem' \
+      'encrypt' \
+      'eval' \
+      'evolution' \
+      'evomap' \
+      'execbe' \
+      'export' \
+      'federation' \
+      'fflag' \
+      'fusion' \
+      'git' \
+      'goal' \
+      'governance' \
+      'hardening' \
+      'hmemory' \
+      'hook' \
+      'hub' \
+      'ide' \
+      'import' \
+      'incentive' \
+      'inference' \
+      'infra' \
+      'init' \
+      'insights' \
+      'instinct' \
+      'ipfs' \
+      'itbudget' \
+      'kg' \
+      'lab' \
+      'learning' \
+      'llm' \
+      'logs' \
+      'loop' \
+      'lowcode' \
+      'marketplace' \
+      'matrix' \
+      'mcp' \
+      'mcpscaf' \
+      'meminj' \
+      'memory' \
+      'mm' \
+      'mtc' \
+      'multimodal' \
+      'multisig' \
+      'nlprog' \
+      'nostr' \
+      'note' \
+      'notif' \
+      'notification' \
+      'ops' \
+      'orchestrate' \
+      'orchgov' \
+      'org' \
+      'output-style' \
+      'output-styles' \
+      'p2p' \
+      'pack' \
+      'pair' \
+      'pdfp' \
+      'pdh' \
+      'perception' \
+      'perf' \
+      'perm' \
+      'permissions' \
+      'permmem' \
+      'perms' \
+      'persona' \
+      'pipe' \
+      'pipeline' \
+      'planmode' \
+      'plugin' \
+      'pqc' \
+      'privacy' \
+      'project' \
+      'promcomp' \
+      'quantize' \
+      'rc' \
+      'rcache' \
+      'recommend' \
+      'remote-control' \
+      'rep' \
+      'reputation' \
+      'review' \
+      'router' \
+      'routine' \
+      'runtime' \
+      'sandbox' \
+      'scim' \
+      'search' \
+      'serve' \
+      'services' \
+      'seshhook' \
+      'seshsearch' \
+      'seshtail' \
+      'seshu' \
+      'session' \
+      'setup' \
+      'sganal' \
+      'siem' \
+      'skill' \
+      'sla' \
+      'slotfill' \
+      'social' \
+      'sso' \
+      'start' \
+      'status' \
+      'status-line' \
+      'statusline' \
+      'stop' \
+      'stream' \
+      'stress' \
+      'subagent' \
+      'svccont' \
+      'sync' \
+      'team' \
+      'tech' \
+      'tenant' \
+      'terminal-setup' \
+      'terraform' \
+      'tms' \
+      'todo' \
+      'tokens' \
+      'topiccls' \
+      'trust' \
+      'ui' \
+      'update' \
+      'uprof' \
+      'vcheck' \
+      'video' \
+      'wallet' \
+      'webfetch' \
+      'whatsnew' \
+      'workflow' \
+      'zkp'
+  elif (( CURRENT == 3 )); then
+    case "$words[2]" in
+      'lab') compadd -- 'bm25' 'ccron' 'compt' 'consol' 'dao' 'evomap' 'execbe' 'fflag' 'itbudget' 'mcpscaf' 'meminj' 'orchgov' 'pdfp' 'promcomp' 'seshhook' 'seshsearch' 'seshtail' 'seshu' 'sganal' 'slotfill' 'svccont' 'tms' 'topiccls' 'uprof' 'vcheck' ;;
+    esac
+  fi
+}
+compdef _chainlesschain cc chainlesschain clc clchain

package/completions/cc.bash

@@ -0,0 +1,18 @@
+# Generated from src/command-manifest.json; do not edit.
+# manifest-sha256: a342dc48c6d65ef81a96c7df387418e739a51c2a82b9a626d39882387bd2e999
+
+_chainlesschain_complete() {
+  local current
+  current="${COMP_WORDS[COMP_CWORD]}"
+  if (( COMP_CWORD == 1 )); then
+    COMPREPLY=( $(compgen -W 'a a2a activitypub agenda agent agent-network agents android anet ap artifact artifacts ask attach audit auth auto auto-mode autoagent automation automode batch bi bm25 browse ccron changelog chat checkpoint checkup ci cli-anything cloud cmd code-intel codegen collab command compact complete compliance compt config consol context cost cowork crosschain daemon dao db dbevo decrypt dev did did-v2 didv2 dlp doctor eco economy ecosystem encrypt eval evolution evomap execbe export federation fflag fusion git goal governance hardening hmemory hook hub ide import incentive inference infra init insights instinct ipfs itbudget kg lab learning llm logs loop lowcode marketplace matrix mcp mcpscaf meminj memory mm mtc multimodal multisig nlprog nostr note notif notification ops orchestrate orchgov org output-style output-styles p2p pack pair pdfp pdh perception perf perm permissions permmem perms persona pipe pipeline planmode plugin pqc privacy project promcomp quantize rc rcache recommend remote-control rep reputation review router routine runtime sandbox scim search serve services seshhook seshsearch seshtail seshu session setup sganal siem skill sla slotfill social sso start status status-line statusline stop stream stress subagent svccont sync team tech tenant terminal-setup terraform tms todo tokens topiccls trust ui update uprof vcheck video wallet webfetch whatsnew workflow zkp' -- "$current") )
+  elif (( COMP_CWORD == 2 )); then
+    case "${COMP_WORDS[1]}" in
+      'lab') COMPREPLY=( $(compgen -W 'bm25 ccron compt consol dao evomap execbe fflag itbudget mcpscaf meminj orchgov pdfp promcomp seshhook seshsearch seshtail seshu sganal slotfill svccont tms topiccls uprof vcheck' -- "$current") ) ;;
+      *) COMPREPLY=() ;;
+    esac
+  else
+    COMPREPLY=()
+  fi
+}
+complete -F _chainlesschain_complete cc chainlesschain clc clchain

package/completions/cc.fish

@@ -0,0 +1,13 @@
+# Generated from src/command-manifest.json; do not edit.
+# manifest-sha256: a342dc48c6d65ef81a96c7df387418e739a51c2a82b9a626d39882387bd2e999
+set -l chainlesschain_commands 'a' 'a2a' 'activitypub' 'agenda' 'agent' 'agent-network' 'agents' 'android' 'anet' 'ap' 'artifact' 'artifacts' 'ask' 'attach' 'audit' 'auth' 'auto' 'auto-mode' 'autoagent' 'automation' 'automode' 'batch' 'bi' 'bm25' 'browse' 'ccron' 'changelog' 'chat' 'checkpoint' 'checkup' 'ci' 'cli-anything' 'cloud' 'cmd' 'code-intel' 'codegen' 'collab' 'command' 'compact' 'complete' 'compliance' 'compt' 'config' 'consol' 'context' 'cost' 'cowork' 'crosschain' 'daemon' 'dao' 'db' 'dbevo' 'decrypt' 'dev' 'did' 'did-v2' 'didv2' 'dlp' 'doctor' 'eco' 'economy' 'ecosystem' 'encrypt' 'eval' 'evolution' 'evomap' 'execbe' 'export' 'federation' 'fflag' 'fusion' 'git' 'goal' 'governance' 'hardening' 'hmemory' 'hook' 'hub' 'ide' 'import' 'incentive' 'inference' 'infra' 'init' 'insights' 'instinct' 'ipfs' 'itbudget' 'kg' 'lab' 'learning' 'llm' 'logs' 'loop' 'lowcode' 'marketplace' 'matrix' 'mcp' 'mcpscaf' 'meminj' 'memory' 'mm' 'mtc' 'multimodal' 'multisig' 'nlprog' 'nostr' 'note' 'notif' 'notification' 'ops' 'orchestrate' 'orchgov' 'org' 'output-style' 'output-styles' 'p2p' 'pack' 'pair' 'pdfp' 'pdh' 'perception' 'perf' 'perm' 'permissions' 'permmem' 'perms' 'persona' 'pipe' 'pipeline' 'planmode' 'plugin' 'pqc' 'privacy' 'project' 'promcomp' 'quantize' 'rc' 'rcache' 'recommend' 'remote-control' 'rep' 'reputation' 'review' 'router' 'routine' 'runtime' 'sandbox' 'scim' 'search' 'serve' 'services' 'seshhook' 'seshsearch' 'seshtail' 'seshu' 'session' 'setup' 'sganal' 'siem' 'skill' 'sla' 'slotfill' 'social' 'sso' 'start' 'status' 'status-line' 'statusline' 'stop' 'stream' 'stress' 'subagent' 'svccont' 'sync' 'team' 'tech' 'tenant' 'terminal-setup' 'terraform' 'tms' 'todo' 'tokens' 'topiccls' 'trust' 'ui' 'update' 'uprof' 'vcheck' 'video' 'wallet' 'webfetch' 'whatsnew' 'workflow' 'zkp'
+
+function __chainlesschain_needs_lab_command
+  set -l tokens (commandline -opc)
+  test (count $tokens) -eq 2; and test "$tokens[2]" = 'lab'
+end
+
+for executable in cc chainlesschain clc clchain
+  complete -c $executable -f -n '__fish_use_subcommand' -a "$chainlesschain_commands"
+  complete -c $executable -f -n '__chainlesschain_needs_lab_command' -a 'bm25 ccron compt consol dao evomap execbe fflag itbudget mcpscaf meminj orchgov pdfp promcomp seshhook seshsearch seshtail seshu sganal slotfill svccont tms topiccls uprof vcheck'
+end