create-principles-disciple 1.146.4 → 1.146.7

package/release-manager/dist/index.js

@@ -1,656 +0,0 @@
-#!/usr/bin/env node
-import { Command } from 'commander';
-import * as path from 'path';
-import * as url from 'url';
-import { createRequire } from 'module';
-import { realpathSync } from 'node:fs';
-import { banner, logger, setQuietMode } from './utils/logger.js';
-import { runPrompts } from './prompts.js';
-import { install, resolveConsoleWorkspaceDir } from './installer.js';
-import { uninstall, checkInstallStatus } from './uninstaller.js';
-import { checkEnvironment, detectWorkspace } from './utils/env.js';
-import { MVP_CHANNELS, buildFailureOutput, getHomeDir, isValidHttpBaseUrl, } from './mvp-config.js';
-import { setLanguage, t, getLanguage, isLanguage } from './i18n.js';
-import { isHostTarget, HOST_TARGETS } from './installers/index.js';
-export { isLanguage } from './i18n.js';
-const __filename = url.fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const PLUGIN_DIR = path.resolve(__dirname, '..');
-// Fix-1 (P0-BUG-1): Read version from package.json instead of hardcoding.
-// EP-06 (Source of Truth): package.json is the canonical version source.
-// rc-2-no-as-bypass: validate the parsed JSON at runtime instead of `as` cast.
-const requireFromMeta = createRequire(import.meta.url);
-const pkgJson = requireFromMeta('../package.json');
-if (typeof pkgJson !== 'object' || pkgJson === null) {
-    throw new Error('Invalid package.json: expected an object');
-}
-const pkgVersionValue = Object.hasOwn(pkgJson, 'version') ? Reflect.get(pkgJson, 'version') : undefined;
-if (typeof pkgVersionValue !== 'string' || pkgVersionValue.length === 0) {
-    throw new Error('Invalid package.json: "version" must be a non-empty string');
-}
-const pkgVersion = pkgVersionValue;
-export function toInstallJsonOutput(result) {
-    return {
-        success: result.success,
-        workspace: result.workspaceDir,
-        components: result.components,
-        enabledChannels: result.enabledChannels,
-        verification: result.verification,
-        nextAction: result.nextAction,
-        ...(result.success ? {} : {
-            reason: result.reason,
-            component: result.component,
-            dependency: result.dependency,
-        }),
-    };
-}
-async function runInstall(options) {
-    const jsonMode = options.json === true;
-    if (!isLanguage(options.lang)) {
-        if (jsonMode) {
-            console.log(JSON.stringify(buildFailureOutput('invalid_language', `--lang must be 'zh' or 'en', got: ${JSON.stringify(options.lang)}. Next: re-run with --lang zh or --lang en`), null, 2));
-        }
-        else {
-            logger.error(`--lang must be 'zh' or 'en', got: ${JSON.stringify(options.lang)}`);
-            logger.info(`${t('next_action')}: re-run with --lang zh or --lang en`);
-        }
-        process.exit(1);
-        return;
-    }
-    setLanguage(options.lang);
-    // ADR-0020 §2.3: Validate --host value. Default is 'openclaw' for backward compat.
-    const rawHost = typeof options.host === 'string' ? options.host : 'openclaw';
-    if (!isHostTarget(rawHost)) {
-        if (jsonMode) {
-            console.log(JSON.stringify(buildFailureOutput('invalid_host', `--host must be one of: ${HOST_TARGETS.join(', ')}. Got: ${JSON.stringify(rawHost)}. Next: re-run with --host openclaw (or --host codex / --host all)`), null, 2));
-        }
-        else {
-            logger.error(`--host must be one of: ${HOST_TARGETS.join(', ')}. Got: ${JSON.stringify(rawHost)}`);
-            logger.info(`Next: re-run with --host openclaw (or --host codex / --host all)`);
-        }
-        process.exit(1);
-        return;
-    }
-    const host = rawHost;
-    if (jsonMode) {
-        setQuietMode(true);
-    }
-    if (!jsonMode) {
-        console.log(banner);
-        console.log();
-    }
-    const env = checkEnvironment();
-    if (!env.hasNode) {
-        if (jsonMode) {
-            console.log(JSON.stringify(buildFailureOutput('node_not_found', 'Install Node.js >= 22 and retry'), null, 2));
-        }
-        else {
-            logger.error(t('node_required'));
-        }
-        process.exit(1);
-        return;
-    }
-    if (!env.isNodeSupported) {
-        const nextAction = `Install Node.js >= 22 and retry. Detected: ${env.nodeVersion ?? 'unknown'}`;
-        if (jsonMode) {
-            console.log(JSON.stringify({
-                ...buildFailureOutput('node_version_unsupported', nextAction),
-                detectedVersion: env.nodeVersion,
-            }, null, 2));
-        }
-        else {
-            logger.error(t('node_version_unsupported'));
-            logger.info(`${t('next_action')}: ${nextAction}`);
-        }
-        process.exit(1);
-        return;
-    }
-    if (!jsonMode) {
-        logger.success(`Node.js ${env.nodeVersion}`);
-    }
-    // ADR-0020: OpenClaw check is only required when host includes 'openclaw'.
-    // For --host codex, the operator may not have OpenClaw installed at all.
-    const needsOpenClaw = host === 'openclaw' || host === 'all';
-    if (needsOpenClaw && !env.hasOpenClaw) {
-        if (jsonMode) {
-            console.log(JSON.stringify(buildFailureOutput('openclaw_not_found', `${t('openclaw_required')} ${t('openclaw_install_hint')} | ${t('next_action')}: ${t('openclaw_rerun_hint')} or use --host codex to skip OpenClaw`), null, 2));
-        }
-        else {
-            logger.error(`\u274C ${t('openclaw_required')}`);
-            logger.info(`   ${t('openclaw_install_hint')}`);
-            logger.info(`   ${t('next_action')}: ${t('openclaw_rerun_hint')} or use --host codex to skip OpenClaw`);
-        }
-        process.exit(1);
-        return;
-    }
-    if (!jsonMode && needsOpenClaw) {
-        logger.success(`OpenClaw ${env.openclawVersion}`);
-    }
-    if (!jsonMode && host === 'codex') {
-        logger.info(`Host: Codex CLI (OpenClaw not required)`);
-    }
-    if (jsonMode && !options.yes && !options.nonInteractive) {
-        options.yes = true;
-    }
-    const workspaceInfo = detectWorkspace();
-    const cliOptions = {
-        language: options.lang,
-        workspaceDir: typeof options.workspace === 'string' ? options.workspace : undefined,
-        host,
-        stopGateway: options.stopGateway === true,
-    };
-    if (options.force) {
-        cliOptions.mode = 'force';
-    }
-    else if (options.smart) {
-        cliOptions.mode = 'smart';
-    }
-    else {
-        cliOptions.mode = workspaceInfo.isFirstInstall ? 'force' : 'smart';
-    }
-    if (!jsonMode && !options.nonInteractive && !options.yes) {
-        if (workspaceInfo.isFirstInstall) {
-            logger.info(t('first_install_detected'));
-        }
-        else {
-            logger.info(t('existing_install_detected'));
-            if (workspaceInfo.coreFiles.length > 0) {
-                logger.info(`  ${t('existing_core_files')} ${workspaceInfo.coreFiles.join(', ')}`);
-            }
-        }
-        console.log();
-    }
-    const nonInteractive = options.nonInteractive || options.yes || jsonMode;
-    // Fix-4 (P0-BUG-4): In non-interactive mode, collect runtime profile from
-    // CLI flags (--provider/--api-key-env/--model) or env vars
-    // (PD_PROVIDER/PD_API_KEY_ENV/PD_MODEL). rc-9: when provider is given
-    // without apiKeyEnv, fail loud instead of silently writing an unusable
-    // profile. rc-3: validate provider allowlist and apiKeyEnv format before
-    // writing, reusing the same patterns as prompts.ts.
-    if (nonInteractive) {
-        const provider = typeof options.provider === 'string' ? options.provider : process.env.PD_PROVIDER;
-        const apiKeyEnv = typeof options.apiKeyEnv === 'string' ? options.apiKeyEnv : process.env.PD_API_KEY_ENV;
-        const model = typeof options.model === 'string' ? options.model : process.env.PD_MODEL;
-        if (provider) {
-            const allowedProviders = ['openai', 'anthropic', 'deepseek'];
-            if (!allowedProviders.includes(provider)) {
-                const msg = `--provider "${provider}" is not supported. Valid: openai, anthropic, deepseek.`;
-                if (jsonMode) {
-                    console.log(JSON.stringify(buildFailureOutput('runtime_profile_invalid', msg), null, 2));
-                }
-                else {
-                    logger.error(msg);
-                }
-                process.exit(1);
-                return;
-            }
-            if (!apiKeyEnv) {
-                const msg = `--provider "${provider}" given but --api-key-env is missing. Pass --api-key-env OPENAI_API_KEY (or set PD_API_KEY_ENV).`;
-                if (jsonMode) {
-                    console.log(JSON.stringify(buildFailureOutput('runtime_profile_incomplete', msg), null, 2));
-                }
-                else {
-                    logger.error(msg);
-                }
-                process.exit(1);
-                return;
-            }
-            if (!/^[A-Z_][A-Z0-9_]*$/.test(apiKeyEnv)) {
-                const msg = `--api-key-env "${apiKeyEnv}" is not a valid environment variable name (uppercase letters, digits, underscore; cannot start with a digit).`;
-                if (jsonMode) {
-                    console.log(JSON.stringify(buildFailureOutput('runtime_profile_invalid', msg), null, 2));
-                }
-                else {
-                    logger.error(msg);
-                }
-                process.exit(1);
-                return;
-            }
-            // Round-4 S2: a blank --model / PD_MODEL is an EXPLICIT invalid value —
-            // fail loud instead of silently treating it as omitted (the governance
-            // write boundary enforces the same rule).
-            if (typeof model === 'string' && model.trim().length === 0) {
-                const msg = `--model was given but blank. Pass a non-empty model id, or omit --model to keep the existing configured model (or apply the per-provider default).`;
-                if (jsonMode) {
-                    console.log(JSON.stringify(buildFailureOutput('runtime_profile_invalid', msg), null, 2));
-                }
-                else {
-                    logger.error(msg);
-                }
-                process.exit(1);
-                return;
-            }
-            cliOptions.runtimeProfile = { provider, apiKeyEnv, model: model || undefined };
-            // Round-4 R3 / round-5 S3: --base-url / PD_BASE_URL — an OpenAI-compatible
-            // custom endpoint. Present → pi-ai calls it directly and skips the
-            // provider model catalog. rc-3: an EXPLICIT blank value fails loud (same
-            // rule as blank --model); a value that does not parse as a real http(s)
-            // URL fails loud (a prefix regex let `https://` through).
-            const baseUrlRaw = typeof options.baseUrl === 'string' ? options.baseUrl : process.env.PD_BASE_URL;
-            if (baseUrlRaw !== undefined) {
-                const trimmed = baseUrlRaw.trim();
-                if (trimmed.length === 0) {
-                    const msg = `--base-url was given but blank. Pass a valid http(s) endpoint URL, or omit --base-url to use the provider default.`;
-                    if (jsonMode) {
-                        console.log(JSON.stringify(buildFailureOutput('runtime_profile_invalid', msg), null, 2));
-                    }
-                    else {
-                        logger.error(msg);
-                    }
-                    process.exit(1);
-                    return;
-                }
-                if (!isValidHttpBaseUrl(trimmed)) {
-                    const msg = `--base-url "${trimmed}" is not a valid http(s) URL with a hostname.`;
-                    if (jsonMode) {
-                        console.log(JSON.stringify(buildFailureOutput('runtime_profile_invalid', msg), null, 2));
-                    }
-                    else {
-                        logger.error(msg);
-                    }
-                    process.exit(1);
-                    return;
-                }
-                cliOptions.runtimeProfile.baseUrl = trimmed;
-            }
-        }
-        else if (apiKeyEnv) {
-            // rc-3: fail loud — apiKeyEnv without provider is unusable.
-            const msg = `--api-key-env given without --provider. Pass --provider openai (or set PD_PROVIDER).`;
-            if (jsonMode) {
-                console.log(JSON.stringify(buildFailureOutput('runtime_profile_incomplete', msg), null, 2));
-            }
-            else {
-                logger.error(msg);
-            }
-            process.exit(1);
-            return;
-        }
-        else if (options.baseUrl !== undefined || process.env.PD_BASE_URL !== undefined) {
-            // Round-5 S3 (rc-9/cli-6): an endpoint without a provider cannot attach
-            // to any profile — fail loud instead of silently dropping it (explicit
-            // blank included; blanks fail loud in the provider branch too).
-            const msg = `--base-url given without --provider. Pass --provider openai (or set PD_PROVIDER).`;
-            if (jsonMode) {
-                console.log(JSON.stringify(buildFailureOutput('runtime_profile_incomplete', msg), null, 2));
-            }
-            else {
-                logger.error(msg);
-            }
-            process.exit(1);
-            return;
-        }
-    }
-    const installOptions = nonInteractive
-        ? {
-            language: cliOptions.language || getLanguage(),
-            mode: cliOptions.mode || (workspaceInfo.isFirstInstall ? 'force' : 'smart'),
-            workspaceDir: cliOptions.workspaceDir || workspaceInfo.detectedPath,
-            channels: [...MVP_CHANNELS],
-            overwriteConfig: false,
-            // ADR-0020 §2.3: propagate validated host target into install options.
-            host,
-            runtimeProfile: cliOptions.runtimeProfile,
-            stopGateway: cliOptions.stopGateway === true,
-        }
-        : await runPrompts(cliOptions, workspaceInfo);
-    if (!installOptions) {
-        if (jsonMode) {
-            console.log(JSON.stringify(buildFailureOutput('cancelled', 'Re-run the installer'), null, 2));
-        }
-        else {
-            logger.info(t('cancel_install'));
-        }
-        process.exit(0);
-        return;
-    }
-    // Test/hermetic-build override: when set, it must point at a COMPLETE
-    // self-contained release asset directory (component trees + _release
-    // manifest). Production never sets it. The env value is a PATH reaching
-    // install()'s file operations, so it is validated (absolute, no parent
-    // traversal) before use — an unvalidated env path here would be a
-    // path-traversal trust boundary hole even for a test-only override.
-    const pluginDirOverride = process.env.PD_INSTALL_PLUGIN_DIR;
-    if (pluginDirOverride !== undefined
-        && (!path.isAbsolute(pluginDirOverride) || pluginDirOverride.includes('..'))) {
-        console.log(JSON.stringify(buildFailureOutput('invalid_environment', `PD_INSTALL_PLUGIN_DIR must be an absolute directory path without '..': ${JSON.stringify(pluginDirOverride)}`), null, 2));
-        process.exit(1);
-        return;
-    }
-    const pluginDir = pluginDirOverride ?? PLUGIN_DIR;
-    const result = await install(installOptions, pluginDir, { quiet: jsonMode, nonInteractive: Boolean(nonInteractive) });
-    // WorkBuddy remediation (review round-2 #2): the operator-facing hints
-    // below must name the directory the console/canary actually manage — the
-    // governance workspace for the workbuddy host, the project dir otherwise
-    // (same resolution the installer's own nextActions use).
-    const operatorWorkspaceDir = resolveConsoleWorkspaceDir(host, result.workspaceDir, getHomeDir());
-    if (jsonMode) {
-        const output = toInstallJsonOutput(result);
-        console.log(JSON.stringify(output, null, 2));
-        if (!result.success) {
-            process.exit(1);
-            return;
-        }
-    }
-    else {
-        if (result.success) {
-            console.log();
-            logger.success(t('install_complete'));
-            console.log();
-            console.log(t('principles_disciple_setup'));
-            console.log();
-            console.log(t('detecting_environment'));
-            console.log(`  OpenClaw integration target .... ${env.hasOpenClaw ? t('openclaw_target_found') : t('openclaw_target_not_found')}`);
-            console.log(`  Node.js ........................ ${t('node_found')} (${env.nodeVersion})`);
-            console.log();
-            console.log(t('installing_mvp_components'));
-            console.log(`  Runtime integration ............ ${result.components.plugin}`);
-            console.log(`  Operator CLI ................... ${result.components.cli}`);
-            console.log(`  Review console ................. ${result.components.console}${result.components.consoleEntrypoint ? ` (${result.components.consoleEntrypoint})` : ''}`);
-            console.log();
-            console.log(t('enabled_capabilities'));
-            for (const ch of result.enabledChannels) {
-                console.log(`  ${ch}`);
-            }
-            console.log();
-            console.log(t('verification'));
-            console.log(`  Configuration .................. ${result.verification.features}`);
-            console.log(`  Demo verification .............. ${result.verification.storyA}${result.verification.storyASkipReason ? ` (${result.verification.storyASkipReason})` : ''}`);
-            // Fix-4: surface runtime profile status so the user knows whether LLM
-            // features (diagnose, candidate intake, internalization) will work.
-            // Round-3 remediation P1: the WorkBuddy host writes the profile into
-            // the GOVERNANCE workspace config (and fails the install loudly if the
-            // write fails), so this success line can truthfully name that file —
-            // reaching it at all means the write was round-trip verified. Other
-            // hosts keep the project-dir profile (operatorWorkspaceDir === project
-            // workspace there); the line stays path-free for them (an existing
-            // valid config is preserved verbatim, so a path claim could be false).
-            if (installOptions.runtimeProfile) {
-                const profileLocation = host === 'workbuddy'
-                    ? ` [written to ${path.join(operatorWorkspaceDir, '.pd', 'config.yaml')}]`
-                    : '';
-                console.log(`  LLM runtime profile ............ ${installOptions.runtimeProfile.provider} / ${installOptions.runtimeProfile.model ?? '(default)'} (key: $${installOptions.runtimeProfile.apiKeyEnv})${profileLocation}`);
-            }
-            else {
-                console.log(`  LLM runtime profile ............ NOT CONFIGURED — internal agents stay in needs_setup`);
-                console.log(`             evidence is still captured, but nothing is diagnosed and no principle is proposed`);
-                console.log(`             fix: set provider / model / apiKeyEnv on 'pd.default' in .pd/config.yaml, or`);
-                console.log(`                  re-run with --provider <name> --api-key-env <ENV_VAR_NAME>, or`);
-                console.log(`                  use the console: pd console open --workspace "${operatorWorkspaceDir}"`);
-            }
-            // PRI-1064: governance switch state is a first-class summary line —
-            // "Install complete!" while every hook silently skips is exactly the
-            // P1 defect this replaces. An explicit Owner opt-out stays OFF and is
-            // stated as such; everything else is ON by default.
-            for (const hr of result.hostResults ?? []) {
-                if (!hr.governance)
-                    continue;
-                const keywordPart = hr.governance.keywordPainEnabled === undefined ? '' : `, keyword Pain: ${hr.governance.keywordPainEnabled ? 'ON' : 'OFF'}`;
-                const stateLine = hr.governance.enabled
-                    ? `ON${hr.governance.explicitOptOut ? '' : ' (default)'}`
-                    : 'OFF (your explicit opt-out was preserved)';
-                console.log(`  ${hr.hostId} governance ............. ${stateLine}${keywordPart}`);
-                const disabledFlags = [];
-                if (!hr.governance.enabled)
-                    disabledFlags.push('host.workbuddy');
-                if (hr.governance.keywordPainEnabled === false)
-                    disabledFlags.push('workbuddy_live_keyword_pain');
-                if (disabledFlags.length > 0) {
-                    // PRI-1063/1064 review: name the exact flag ids and the exact edit.
-                    // A `features.<flag>.enabled=true` placeholder left the operator to
-                    // guess both the id and whether the dotted form is nested. It is NOT
-                    // nested: the dotted id is one flat key inside the existing
-                    // `features:` block, and the flow mapping below keeps the line
-                    // copy-pasteable (no new `features:` key that would duplicate one).
-                    const target = hr.governance.configPath ?? 'the governance workspace .pd/config.yaml';
-                    const edits = disabledFlags.map((flag) => `${flag}: {enabled: true}`).join(' or ');
-                    console.log(`             to enable: in ${target}, inside the existing "features:" block set ${edits}`);
-                }
-            }
-            console.log();
-            console.log(t('ready'));
-            console.log(`${t('diagnostics')}: pd runtime canary --workspace "${operatorWorkspaceDir}" --json`);
-        }
-        else if (result.components.plugin === 'verified' && (result.components.cli === 'verified' || result.components.cli === 'verified_local_only')) {
-            const cliLabel = result.components.cli === 'verified_local_only' ? 'verified (local only)' : result.components.cli;
-            const diagCmd = result.components.cli === 'verified_local_only' && result.components.cliLocalPath
-                ? `"${result.components.cliLocalPath}" runtime canary --workspace "${operatorWorkspaceDir}" --json`
-                : `pd runtime canary --workspace "${operatorWorkspaceDir}" --json`;
-            console.log();
-            logger.warn(t('install_partial_complete'));
-            console.log();
-            console.log(t('principles_disciple_setup'));
-            console.log();
-            console.log(t('installing_mvp_components'));
-            console.log(`  Runtime integration ............ ${result.components.plugin}`);
-            console.log(`  Operator CLI ................... ${cliLabel}`);
-            console.log(`  Review console ................. ${result.components.console}`);
-            console.log();
-            console.log(t('enabled_capabilities'));
-            for (const ch of result.enabledChannels) {
-                console.log(`  ${ch}`);
-            }
-            console.log();
-            console.log(t('verification'));
-            console.log(`  Configuration .................. ${result.verification.features}`);
-            console.log(`  Demo verification .............. ${result.verification.storyA}${result.verification.storyASkipReason ? ` (${result.verification.storyASkipReason})` : ''}`);
-            console.log();
-            console.log(t('not_ready_for_release'));
-            console.log(`${t('diagnostics')}: ${diagCmd}`);
-            process.exit(1);
-            return;
-        }
-        else {
-            logger.error(`${t('install_failed')}: ${result.reason || result.error}`);
-            if (result.nextAction) {
-                logger.info(`${t('next_action')}: ${result.nextAction}`);
-            }
-            process.exit(1);
-            return;
-        }
-    }
-}
-async function runUninstall(options) {
-    // rc-3-fail-loud: validate --lang the same way runInstall does, instead of
-    // silently defaulting any non-'en' value to 'zh'.
-    if (!isLanguage(options.lang)) {
-        logger.error(`--lang must be 'zh' or 'en', got: ${JSON.stringify(options.lang)}`);
-        logger.info(`Next: re-run with --lang zh or --lang en`);
-        process.exit(1);
-        return;
-    }
-    setLanguage(options.lang);
-    // ADR-0020 §2.3: validate --host (default 'all' for uninstall).
-    const rawHost = typeof options.host === 'string' ? options.host : 'all';
-    if (!isHostTarget(rawHost)) {
-        logger.error(`--host must be one of: ${HOST_TARGETS.join(', ')}. Got: ${JSON.stringify(rawHost)}`);
-        logger.info(`Next: re-run with --host openclaw (or --host codex / --host all)`);
-        process.exit(1);
-        return;
-    }
-    const host = rawHost;
-    console.log(banner);
-    console.log();
-    logger.info(`Preparing to uninstall Principles Disciple (host: ${host})...\n`);
-    const result = await uninstall({
-        force: options.force === true,
-        lang: options.lang,
-        host,
-    });
-    if (!result.success) {
-        logger.error(`${t('uninstall_failed')}: ${result.error}`);
-        process.exit(1);
-        return;
-    }
-}
-async function showStatus(options) {
-    // rc-3-fail-loud: validate --lang the same way runInstall does.
-    if (!isLanguage(options.lang)) {
-        logger.error(`--lang must be 'zh' or 'en', got: ${JSON.stringify(options.lang)}`);
-        logger.info(`Next: re-run with --lang zh or --lang en`);
-        process.exit(1);
-        return;
-    }
-    setLanguage(options.lang);
-    console.log(banner);
-    console.log();
-    const status = checkInstallStatus();
-    console.log(`${t('install_status')}\n`);
-    for (const p of status.paths) {
-        const icon = p.type === 'dir' ? '[dir]' : '[file]';
-        const statusIcon = p.exists ? t('install_status_ok') : t('install_status_missing');
-        console.log(`  ${statusIcon} ${icon} ${p.name}`);
-        console.log(`     ${p.path}`);
-    }
-    console.log();
-    if (status.isInstalled) {
-        logger.success(t('pd_installed'));
-        console.log('\n  User data (MD files, memory, state) is preserved on uninstall');
-    }
-    else {
-        logger.warn(t('pd_not_installed'));
-        console.log(`\n  ${t('install_hint')}:`);
-        console.log('  npx create-principles-disciple');
-    }
-}
-// cli-7: exported so parser tests can inspect the REAL option registration
-// (catches removal/rename/default-change of flags). Not .parse()'d on import —
-// see the main-module guard at the bottom of this file.
-export const program = new Command();
-program
-    .name('create-principles-disciple')
-    .description('Principles Disciple - MVP-First Integration Wizard')
-    .version(pkgVersion);
-program
-    .command('install', { isDefault: true, hidden: true })
-    .description('Install Principles Disciple (MVP-First)')
-    .option('-l, --lang <lang>', 'Language (zh/en)', 'zh')
-    .option('-f, --force', 'Force overwrite mode', false)
-    .option('-s, --smart', 'Smart merge mode', false)
-    .option('-w, --workspace <path>', 'Workspace directory')
-    .option('-y, --yes', 'Non-interactive mode with defaults', false)
-    .option('--non-interactive', 'Skip interactive prompts', false)
-    .option('--json', 'Output result as JSON (implies non-interactive)', false)
-    // Fix-4 (P0-BUG-4): allow non-interactive LLM runtime profile configuration.
-    // When --provider is given, the installer pre-fills pd.default profile
-    // instead of leaving it empty (which would cause silent LLM failures).
-    .option('--provider <provider>', 'LLM provider for pd.default profile (openai/anthropic/deepseek). Enables non-interactive runtime profile config.')
-    .option('--api-key-env <name>', 'Environment variable name holding the LLM API key (e.g. OPENAI_API_KEY). Requires --provider.')
-    .option('--model <model>', 'LLM model id (optional; keeps the existing configured model, else applies the per-provider default)')
-    .option('--base-url <url>', 'OpenAI-compatible custom endpoint for pd.default (optional; present = call it directly, skip the provider model catalog). Env: PD_BASE_URL.')
-    // ADR-0020 §2.3: host target selector. Default 'openclaw' for backward compat.
-    .option('--host <host>', `Host platform (${HOST_TARGETS.join('/')})`, 'openclaw')
-    // Gateway lock prevention: auto-stop a running OpenClaw gateway before
-    // install (avoids EPERM on the backup rename) and restart it afterwards.
-    .option('--stop-gateway', 'Stop the OpenClaw gateway before install if running, restart after', false)
-    .action(async (options) => {
-    await runInstall(options);
-});
-program
-    .command('uninstall')
-    .alias('remove')
-    .alias('rm')
-    .description('Uninstall Principles Disciple (preserves user data)')
-    .option('-f, --force', 'Force uninstall without confirmation', false)
-    .option('-l, --lang <lang>', 'Language (zh/en)', 'zh')
-    // ADR-0020 §2.3: host-scoped uninstall. Default 'all' cleans every host
-    // PD ever registered with. Operators can scope to one host via --host codex.
-    .option('--host <host>', `Host platform (${HOST_TARGETS.join('/')})`, 'all')
-    .action(async (options) => {
-    await runUninstall(options);
-});
-program
-    .command('status')
-    .description('Check install status')
-    .option('-l, --lang <lang>', 'Language (zh/en)', 'zh')
-    .action(async (options) => {
-    await showStatus(options);
-});
-// PRI-850 (SPEC v0.3 §6.1, ADR-0024 §6): the official repair path for
-// installations whose update chain is broken or pre-bootstrap. Deploys the
-// bootstrap update executor and registers the release metadata source; NEVER
-// deploys a product release or changes the installed product version.
-program
-    .command('repair-update-chain')
-    .description('Repair the self-update capability (bootstrap executor + update source) without touching the installed product')
-    .option('--json', 'Output result as JSON', false)
-    .action(async (options) => {
-    // PRI-850 review fix (cli-1): --json stdout must be EXACTLY one parseable
-    // JSON document — the logger (and its ℹ/warn banners) is silenced first,
-    // so delivery progress can never precede the JSON on stdout.
-    if (options.json)
-        setQuietMode(true);
-    const { repairUpdateChain } = await import('./installer.js');
-    const result = await repairUpdateChain({
-        sourcePackageDir: path.resolve(url.fileURLToPath(import.meta.url), '../..'),
-    });
-    if (options.json) {
-        console.log(JSON.stringify(result, null, 2));
-    }
-    else {
-        for (const note of result.notes)
-            console.log(`- ${note}`);
-        if (result.success) {
-            console.log(`Repair complete: bootstrap ${result.bootstrap?.bootstrapVersion ?? 'n/a'} deployed.`);
-            if (result.needsFullInstall)
-                console.log('This installation still needs one full official install to deploy a product release.');
-        }
-        else {
-            console.error(`Repair failed: ${result.error ?? 'unknown error'}`);
-        }
-    }
-    if (!result.success)
-        process.exitCode = 1;
-});
-// cli-7: only wire the process handler and parse argv when this module is the
-// CLI entry point — NOT when imported by tests (which inspect `program` opts
-// directly). Without this guard, importing index.js would run the installer.
-//
-// PRI-892: Node resolves the main module through symlinks/junctions, so
-// `import.meta.url` is the realpath while `process.argv[1]` is the unresolved
-// link path that npm/npx `.bin` shims hand to node on Windows. The old raw
-// `pathToFileURL(argv[1])` comparison never matched through the shim, so the
-// CLI silently exited 0 doing nothing. Canonicalize argv[1] with realpathSync
-// before comparing, and keep the import-time (argv[1] is a test runner) path
-// returning false so cli-7 stays intact.
-function isMainModuleEntry() {
-    const [, entry] = process.argv;
-    if (!entry)
-        return false;
-    try {
-        return url.pathToFileURL(realpathSync(entry)).href === import.meta.url;
-    }
-    catch {
-        return false;
-    }
-}
-// rc-9: realpath canonicalization should close the gap, but if some future
-// link topology still slips past it while argv[1] unambiguously names *this*
-// package's `dist/index.js`, fail loud and run rather than repeat the silent
-// no-op. Import-time callers never satisfy this (argv[1] is the test runner).
-// path.relative absorbs mixed / and \ separators (win32); deliberately no
-// link resolution here — this check exists exactly for when it diverges.
-function looksLikeOwnDistEntry() {
-    const [, entry] = process.argv;
-    if (!entry)
-        return false;
-    const relative = path.relative(path.dirname(PLUGIN_DIR), path.resolve(entry));
-    return relative === path.join(path.basename(PLUGIN_DIR), 'dist', 'index.js');
-}
-const mainModuleEntry = isMainModuleEntry();
-if (mainModuleEntry || looksLikeOwnDistEntry()) {
-    if (!mainModuleEntry) {
-        process.stderr.write('warning: CLI entry started via fallback detection: reason=entry_identity_mismatch nextAction=report-this-line-with-your-invocation-command\n');
-    }
-    process.on('uncaughtException', (error) => {
-        if (error instanceof Error && error.name === 'ExitPromptError') {
-            logger.info('Goodbye!');
-        }
-        else {
-            logger.error(`Uncaught error: ${error.message}`);
-            process.exit(1);
-        }
-    });
-    program.parse(process.argv);
-}
-//# sourceMappingURL=index.js.map