refactor: modularize CLI into lib/ command domains

单文件按职责拆分：lib/{args,output,errors,plan,git,brief,input,github,indexer}
+ lib/domains/ 九个 plan/execute 命令域（branch/sync/review/commit/publish/
release/reconcile/archive/issue）与四个特殊命令域（change/task/inspect/index）。
cli.mjs 仅保留入口路由与 plan/execute 公共管线（hash 重算对比、planHash 持久化）。

行为契约不变：命令、JSON 输出、错误码、planHash 机制逐表达式照搬；
scripts/pack.mjs 新增目录 tarball 打包；CI 矩阵 ubuntu/macos/windows × node 20/22/24。

Author: stack-wuh

.github/workflows/test.yml

@@ -0,0 +1,20 @@
+name: test
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        node: [20, 22, 24]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node }}
+      - run: npm test

cli.mjs

@@ -0,0 +1,10 @@
+export const HELP = 'repo inspect\nchange create|approve\nissue plan|execute\nbranch plan|execute\nsync plan|execute\nconflict inspect\ntask list|set\nreview plan|execute\ncommit plan|execute\npublish plan|execute\nrelease plan|execute\npr inspect\nreconcile plan|execute\narchive plan|execute\nindex rebuild plan|execute'
+
+export function args(a) {
+  const p = [], o = {}
+  for (let i = 0; i < a.length; i++) {
+    if (!a[i].startsWith('--')) p.push(a[i])
+    else { const k = a[i].slice(2); if (['confirm', 'json'].includes(k)) o[k] = true; else o[k] = a[++i] }
+  }
+  return { p, o }
+}

lib/args.mjs

@@ -0,0 +1,24 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+
+export const ap = (r, n) => join(r, 'shadow-docs', 'changes', n, 'brief.md')
+export const xp = (r, n) => join(r, 'shadow-docs', 'changes', 'archive', n, 'brief.md')
+
+export function brief(r, n, arch = false) {
+  const path = arch ? xp(r, n) : ap(r, n)
+  if (!existsSync(path)) throw Error('BRIEF_NOT_FOUND')
+  const t = readFileSync(path, 'utf8'), e = t.indexOf('\n---\n', 4)
+  if (e < 0) throw Error('BRIEF_FRONTMATTER_REQUIRED')
+  return { path, data: JSON.parse(t.slice(4, e)), body: t.slice(e + 5) }
+}
+
+export function write(b) {
+  mkdirSync(dirname(b.path), { recursive: true })
+  const t = b.path + `.tmp-${process.pid}`
+  writeFileSync(t, `---\n${JSON.stringify(b.data, null, 2)}\n---\n${b.body}`)
+  renameSync(t, b.path)
+}
+
+export function tasks(s) {
+  return [...s.matchAll(/^\s*- \[([ xX])\]\s+(.+)$/gm)].map((m, i) => ({ id: `task-${i + 1}`, done: m[1].toLowerCase() === 'x', text: m[2] }))
+}

lib/brief.mjs

@@ -0,0 +1,27 @@
+import { existsSync, mkdirSync, renameSync, writeFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { name } from '../input.mjs'
+import { pr } from '../github.mjs'
+import { buildIndex } from '../indexer.mjs'
+import { brief, write, xp } from '../brief.mjs'
+import { repo } from '../git.mjs'
+
+export async function planData(r, o) {
+  const n = name(o), b = brief(r, n), q = repo(r)
+  if (b.data.review?.conclusion !== 'passed' || b.data.review.verifiedCommit !== q.head) throw Error('REVIEW_NOT_PASSED')
+  const x = await pr(b, r)
+  if (!x.merged) throw Error('PR_NOT_MERGED')
+  return { name: n, pullRequest: x.number, head: q.head }
+}
+
+export function execute(r, o, x, b) {
+  const n = name(o)
+  b.data.status = 'archived'
+  b.data.workflow.checkpoint = `merged-pr:${x.pullRequest}`
+  write(b)
+  const dest = dirname(xp(r, n))
+  mkdirSync(dirname(dest), { recursive: true })
+  renameSync(dirname(b.path), dest)
+  writeFileSync(join(r, 'shadow-docs', 'INDEX.md'), buildIndex(r))
+  return { path: xp(r, n) }
+}

lib/domains/archive.mjs

@@ -0,0 +1,16 @@
+import { git, repo } from '../git.mjs'
+import { brief, write } from '../brief.mjs'
+import { name } from '../input.mjs'
+
+export async function planData(r, o) {
+  const n = name(o), b = brief(r, n), q = repo(r)
+  return { name: n, branch: `${b.data.type}/${n}`, baseBranch: b.data.baseBranch || 'main', brief: b.data, repo: q }
+}
+
+export function execute(r, o, x, b) {
+  if (x.repo.branch === x.baseBranch) git(r, ['switch', '-c', x.branch])
+  b.data.branch = x.branch
+  b.data.status = 'branched'
+  write(b)
+  return { branch: x.branch }
+}

lib/domains/branch.mjs

@@ -0,0 +1,36 @@
+import { existsSync } from 'node:fs'
+import { brief, write, ap } from '../brief.mjs'
+import { name, confirm, readBody } from '../input.mjs'
+
+export function create(r, o) {
+  confirm(o)
+  const n = name(o)
+  if (existsSync(ap(r, n))) throw Error('CHANGE_EXISTS')
+  const b = {
+    path: ap(r, n),
+    data: {
+      schema: 'shadow-dev/v1',
+      name: n,
+      type: o.type || 'feat',
+      scope: o.scope || null,
+      status: 'draft',
+      baseBranch: o['base-branch'] || 'main',
+      branch: null,
+      files: String(o.files || '').split(',').filter(Boolean).sort(),
+      github: { repository: o.repository || null, issue: null, issueUrl: null, pullRequest: null, pullRequestUrl: null },
+      review: { conclusion: 'pending', verifiedCommit: null, verifiedAt: null },
+      workflow: { operation: null, checkpoint: null, planHash: null, updatedAt: null, lastError: null },
+    },
+    body: readBody(o, n),
+  }
+  write(b)
+  return { name: n, path: b.path }
+}
+
+export function approve(r, o) {
+  confirm(o)
+  const b = brief(r, name(o))
+  b.data.status = 'proposed'
+  write(b)
+  return { name: o.name, status: 'proposed' }
+}

lib/domains/change.mjs

@@ -0,0 +1,19 @@
+import { git, repo } from '../git.mjs'
+import { brief, write } from '../brief.mjs'
+import { name } from '../input.mjs'
+
+export async function planData(r, o) {
+  const n = name(o), b = brief(r, n), q = repo(r)
+  return { name: n, files: String(o.files || '').split(',').filter(Boolean).sort(), message: o.message || null, brief: b.data, repo: q }
+}
+
+export function execute(r, o, x, b) {
+  if (!x.message || !x.files.length) throw Error('COMMIT_INPUT_REQUIRED')
+  if (x.files.some(f => ['.', '-A', '--all'].includes(f) || f.startsWith('../') || f.startsWith('/'))) throw Object.assign(Error('UNSUPPORTED_OPERATION'), { status: 4 })
+  git(r, ['add', '--', ...x.files])
+  git(r, ['commit', '-m', x.message])
+  b.data.status = 'committed'
+  b.data.workflow.checkpoint = git(r, ['rev-parse', 'HEAD'])
+  write(b)
+  return { commit: b.data.workflow.checkpoint }
+}

lib/domains/commit.mjs

@@ -0,0 +1,21 @@
+import { existsSync, readFileSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { plan } from '../plan.mjs'
+import { confirm } from '../input.mjs'
+import { buildIndex } from '../indexer.mjs'
+
+function rebuildData(r) {
+  return { content: buildIndex(r), current: existsSync(join(r, 'shadow-docs', 'INDEX.md')) ? readFileSync(join(r, 'shadow-docs', 'INDEX.md'), 'utf8') : '' }
+}
+
+export function rebuildPlan(r) {
+  return plan('index.rebuild', rebuildData(r))
+}
+
+export function rebuildExecute(r, o) {
+  confirm(o, true)
+  const e = plan('index.rebuild', rebuildData(r))
+  if (e.planHash !== o['plan-hash']) throw Error('PLAN_HASH_INVALID')
+  writeFileSync(join(r, 'shadow-docs', 'INDEX.md'), e.data.content)
+  return { path: 'shadow-docs/INDEX.md' }
+}

lib/domains/index.mjs

@@ -0,0 +1,25 @@
+import { readdirSync } from 'node:fs'
+import { join } from 'node:path'
+import { repo } from '../git.mjs'
+import { brief } from '../brief.mjs'
+import { name } from '../input.mjs'
+import { pr } from '../github.mjs'
+
+export function repoState(r) {
+  return repo(r)
+}
+
+export async function pullRequest(r, o) {
+  return pr(brief(r, name(o)), r)
+}
+
+export function conflict(r, o) {
+  const n = name(o), files = new Set(brief(r, n).data.files || []), base = join(r, 'shadow-docs', 'changes'), overlaps = []
+  for (const e of readdirSync(base, { withFileTypes: true }).filter(x => x.isDirectory() && x.name !== n && x.name !== 'archive')) {
+    try {
+      const fs = (brief(r, e.name).data.files || []).filter(x => files.has(x)).sort()
+      if (fs.length) overlaps.push({ change: e.name, files: fs })
+    } catch {}
+  }
+  return { overlaps }
+}