@kylewadegrove/cutline-mcp-cli 0.6.0 → 0.6.1

package/dist/servers/cutline-server.js

@@ -5,12 +5,6 @@ import {
   computeMetricsFromGraph,
   detectConstraintConflicts
 } from "./chunk-UBBAYTW3.js";
-import {
-  recordScoreSnapshot
-} from "./chunk-TGSEURMN.js";
-import {
-  firestoreRetry
-} from "./chunk-PU7TL6S3.js";
 import {
   isWriteTool
 } from "./chunk-KMUSQOTJ.js";
@@ -29,21 +23,60 @@ import {
   listPersonas,
   saveWikiMarkdown,
   uploadAndSign
-} from "./chunk-IVWF7VYZ.js";
+} from "./chunk-M37M2UA4.js";
+import "./chunk-JBJYSV4P.js";
 import {
-  getStoredToken,
   guardBoundary,
   guardOutput,
-  initFirebase,
-  mapErrorToMcp,
   perfTracker,
+  withPerfTracking
+} from "./chunk-OP4EO6FV.js";
+import {
+  addEdges,
+  addEntity,
+  addNodes,
+  addTestCases,
+  createPremortem,
+  createTemplate,
+  generateReadinessReportViaProxy,
+  getAllBindings,
+  getAllEdges,
+  getAllEntities,
+  getAllNodes,
+  getAllNodesLight,
+  getEntitiesWithEmbeddings,
+  getGraphMetadata,
+  getIdeaReport,
+  getNodesByCategories,
+  getNodesMissingEmbeddings,
+  getNodesWithEmbeddings,
+  getPremortem,
+  getScanRateLimit,
+  getTemplate,
+  getTestCasesForEntity,
+  hasConstraints,
+  listPremortems,
+  listTemplates,
+  recordScoreSnapshot,
+  saveScanReport,
+  updateEntityEmbedding,
+  updateGraphMetadata,
+  updateNodeEmbeddings,
+  updatePremortem,
+  updateScanRateLimit,
+  updateTemplate,
+  upsertBindings,
+  upsertEdges,
+  upsertEntities,
+  upsertNodes
+} from "./chunk-PQUAX5YW.js";
+import {
+  mapErrorToMcp,
+  requirePremiumWithAutoAuth,
   resolveAuthContext,
   resolveAuthContextFree,
-  validateAuth,
-  validateRequestSize,
-  validateSubscription,
-  withPerfTracking
-} from "./chunk-PD2HN2R5.js";
+  validateRequestSize
+} from "./chunk-NUBIEJTU.js";
 import {
   PMJsonSchema,
   RunInputSchema,
@@ -52,170 +85,11 @@ import {
   runRolesAndSummarize,
   runRolesAndSummarizeIncremental
 } from "./chunk-7FHM2GD3.js";
-import "./chunk-JBJYSV4P.js";
 
 // ../mcp/dist/mcp/src/cutline-server.js
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { CallToolRequestSchema, ErrorCode, ListToolsRequestSchema, McpError } from "@modelcontextprotocol/sdk/types.js";
-import admin from "firebase-admin";
-import { getApps as getApps4, getApp as getApp4 } from "firebase-admin/app";
-import { getFirestore as getFirestore4 } from "firebase-admin/firestore";
-
-// ../mcp/dist/mcp/src/context-graph/graph-store.js
-import { getApps, getApp } from "firebase-admin/app";
-import { getFirestore, Timestamp } from "firebase-admin/firestore";
-function getNodesCollection(productId) {
-  const app = getApps().length > 0 ? getApp() : void 0;
-  if (!app)
-    throw new Error("Firebase not initialized");
-  const db2 = getFirestore(app);
-  return db2.collection("context_graph").doc(productId).collection("nodes");
-}
-var NODE_CACHE_TTL = 10 * 60 * 1e3;
-var nodeCache = /* @__PURE__ */ new Map();
-var lightNodeCache = /* @__PURE__ */ new Map();
-function invalidateNodeCache(productId) {
-  nodeCache.delete(productId);
-  lightNodeCache.delete(productId);
-}
-var LIGHT_FIELDS = [
-  "category",
-  "summary",
-  "keywords",
-  "severity",
-  "action",
-  "source_type",
-  "source_id",
-  "ingested_at",
-  "confidence",
-  "threshold",
-  "conditions",
-  "scope",
-  "phase"
-];
-async function upsertNodes(productId, sourceType, sourceId, nodes) {
-  const collection = getNodesCollection(productId);
-  const db2 = getFirestore(getApp());
-  const batch = db2.batch();
-  const existingQuery = await collection.where("source_type", "==", sourceType).where("source_id", "==", sourceId).get();
-  existingQuery.docs.forEach((doc) => {
-    batch.delete(doc.ref);
-  });
-  for (const node of nodes) {
-    const docRef = collection.doc(node.id);
-    const nodeDoc = {
-      ...node,
-      ingested_at: Timestamp.fromDate(node.ingested_at)
-    };
-    const cleaned = Object.fromEntries(Object.entries(nodeDoc).filter(([, v]) => v !== void 0));
-    batch.set(docRef, cleaned);
-  }
-  await firestoreRetry(() => batch.commit(), { operationName: "upsert_nodes" });
-  invalidateNodeCache(productId);
-}
-async function getAllNodes(productId) {
-  const cached = nodeCache.get(productId);
-  if (cached && Date.now() - cached.fetchedAt < NODE_CACHE_TTL) {
-    return cached.nodes;
-  }
-  const collection = getNodesCollection(productId);
-  const snapshot = await collection.get();
-  const nodes = snapshot.docs.map((doc) => {
-    const data = doc.data();
-    return {
-      ...data,
-      id: doc.id,
-      ingested_at: data.ingested_at.toDate()
-    };
-  });
-  nodeCache.set(productId, { nodes, fetchedAt: Date.now() });
-  return nodes;
-}
-async function getAllNodesLight(productId) {
-  const cached = lightNodeCache.get(productId);
-  if (cached && Date.now() - cached.fetchedAt < NODE_CACHE_TTL) {
-    return cached.nodes;
-  }
-  const collection = getNodesCollection(productId);
-  const snapshot = await collection.select(...LIGHT_FIELDS).get();
-  const nodes = snapshot.docs.map((doc) => {
-    const data = doc.data();
-    return {
-      ...data,
-      id: doc.id,
-      ingested_at: data.ingested_at?.toDate() ?? /* @__PURE__ */ new Date()
-    };
-  });
-  lightNodeCache.set(productId, { nodes, fetchedAt: Date.now() });
-  return nodes;
-}
-async function getNodesByCategories(productId, categories) {
-  const collection = getNodesCollection(productId);
-  const snapshot = await collection.where("category", "in", categories.slice(0, 10)).get();
-  return snapshot.docs.map((doc) => {
-    const data = doc.data();
-    return {
-      ...data,
-      id: doc.id,
-      ingested_at: data.ingested_at.toDate()
-    };
-  });
-}
-async function hasConstraints(productId) {
-  const collection = getNodesCollection(productId);
-  const snapshot = await collection.limit(1).get();
-  return !snapshot.empty;
-}
-async function addNodes(productId, nodes) {
-  if (nodes.length === 0)
-    return;
-  const collection = getNodesCollection(productId);
-  const db2 = collection.firestore;
-  const MAX_BATCH = 490;
-  for (let i = 0; i < nodes.length; i += MAX_BATCH) {
-    const batch = db2.batch();
-    for (const node of nodes.slice(i, i + MAX_BATCH)) {
-      const ref = collection.doc(node.id);
-      const nodeDoc = { ...node };
-      if (node.ingested_at instanceof Date) {
-        nodeDoc.ingested_at = Timestamp.fromDate(node.ingested_at);
-      }
-      Object.keys(nodeDoc).forEach((k) => {
-        if (nodeDoc[k] === void 0)
-          delete nodeDoc[k];
-      });
-      batch.set(ref, nodeDoc, { merge: true });
-    }
-    await firestoreRetry(() => batch.commit(), { operationName: "add_nodes" });
-  }
-  invalidateNodeCache(productId);
-}
-async function getNodesWithEmbeddings(productId) {
-  const allNodes = await getAllNodes(productId);
-  return allNodes.filter((node) => node.embedding && node.embedding.length > 0);
-}
-async function updateNodeEmbeddings(productId, embeddingUpdates) {
-  if (embeddingUpdates.length === 0)
-    return;
-  const collection = getNodesCollection(productId);
-  const db2 = getFirestore(getApp());
-  const batchSize = 10;
-  for (let i = 0; i < embeddingUpdates.length; i += batchSize) {
-    const batch = db2.batch();
-    const updates = embeddingUpdates.slice(i, i + batchSize);
-    for (const { id, embedding } of updates) {
-      const docRef = collection.doc(id);
-      batch.update(docRef, { embedding });
-    }
-    await firestoreRetry(() => batch.commit(), { operationName: "update_node_embeddings" });
-  }
-  invalidateNodeCache(productId);
-}
-async function getNodesMissingEmbeddings(productId) {
-  const allNodes = await getAllNodes(productId);
-  return allNodes.filter((node) => !node.embedding || node.embedding.length === 0);
-}
 
 // ../mcp/dist/mcp/src/context-graph/embeddings.js
 import { GoogleAuth } from "google-auth-library";
@@ -1993,147 +1867,6 @@ async function extractConstraintsFromDoc(docId, text, generateFn, options = {})
   return convertExtractedToNodes(docId, extracted, options);
 }
 
-// ../mcp/dist/mcp/src/context-graph/graph-store-v2.js
-import { getApps as getApps2, getApp as getApp2 } from "firebase-admin/app";
-import { getFirestore as getFirestore2, Timestamp as Timestamp2 } from "firebase-admin/firestore";
-function db() {
-  const app = getApps2().length > 0 ? getApp2() : void 0;
-  if (!app)
-    throw new Error("Firebase not initialized");
-  return getFirestore2(app);
-}
-function productRoot(productId) {
-  return db().collection("context_graph").doc(productId);
-}
-function entitiesCol(productId) {
-  return productRoot(productId).collection("entities");
-}
-function edgesCol(productId) {
-  return productRoot(productId).collection("edges");
-}
-function bindingsCol(productId) {
-  return productRoot(productId).collection("bindings");
-}
-function testCasesCol(productId) {
-  return productRoot(productId).collection("test_cases");
-}
-function metaDoc(productId) {
-  return productRoot(productId).collection("_meta").doc("graph");
-}
-function toEntityDoc(e) {
-  return { ...e, ingested_at: Timestamp2.fromDate(e.ingested_at) };
-}
-function fromEntityDoc(id, data) {
-  return { ...data, id, ingested_at: data.ingested_at.toDate() };
-}
-var BATCH_LIMIT = 500;
-async function commitInBatches(ops) {
-  for (let i = 0; i < ops.length; i += BATCH_LIMIT) {
-    await firestoreRetry(() => {
-      const batch = db().batch();
-      ops.slice(i, i + BATCH_LIMIT).forEach((op) => op(batch));
-      return batch.commit();
-    }, { operationName: "batch_commit" });
-  }
-}
-async function upsertEntities(productId, sourceType, sourceId, entities) {
-  const col = entitiesCol(productId);
-  const existing = await col.where("source_type", "==", sourceType).where("source_id", "==", sourceId).get();
-  const ops = [];
-  existing.docs.forEach((doc) => {
-    ops.push((b) => b.delete(doc.ref));
-  });
-  for (const entity of entities) {
-    const ref = col.doc(entity.id);
-    const doc = toEntityDoc(entity);
-    ops.push((b) => b.set(ref, doc));
-  }
-  await commitInBatches(ops);
-}
-async function getAllEntities(productId) {
-  const snap = await entitiesCol(productId).get();
-  return snap.docs.map((d) => fromEntityDoc(d.id, d.data()));
-}
-async function addEntity(productId, entity) {
-  const ref = entitiesCol(productId).doc(entity.id);
-  await firestoreRetry(() => ref.set(toEntityDoc(entity), { merge: true }), { operationName: "entity_set" });
-}
-async function updateEntityEmbedding(productId, entityId, embedding) {
-  await firestoreRetry(() => entitiesCol(productId).doc(entityId).update({ embedding }), { operationName: "entity_update_embedding" });
-}
-async function getEntitiesWithEmbeddings(productId) {
-  const all = await getAllEntities(productId);
-  return all.filter((e) => e.embedding && e.embedding.length > 0);
-}
-async function upsertEdges(productId, sourceId, edges) {
-  const col = edgesCol(productId);
-  const existing = await col.get();
-  const ops = [];
-  existing.docs.forEach((doc) => {
-    if (doc.id.startsWith(sourceId)) {
-      ops.push((b) => b.delete(doc.ref));
-    }
-  });
-  for (const edge of edges) {
-    const ref = col.doc(edge.id);
-    ops.push((b) => b.set(ref, edge));
-  }
-  await commitInBatches(ops);
-}
-async function getAllEdges(productId) {
-  const snap = await edgesCol(productId).get();
-  return snap.docs.map((d) => ({ ...d.data(), id: d.id }));
-}
-async function addEdges(productId, edges) {
-  const col = edgesCol(productId);
-  const ops = [];
-  for (const edge of edges) {
-    const ref = col.doc(edge.id);
-    ops.push((b) => b.set(ref, edge, { merge: true }));
-  }
-  await commitInBatches(ops);
-}
-async function upsertBindings(productId, bindings) {
-  const col = bindingsCol(productId);
-  const ops = [];
-  for (const binding of bindings) {
-    const ref = col.doc(binding.id);
-    ops.push((b) => b.set(ref, binding, { merge: true }));
-  }
-  await commitInBatches(ops);
-}
-async function getAllBindings(productId) {
-  const snap = await bindingsCol(productId).get();
-  return snap.docs.map((d) => ({ ...d.data(), id: d.id }));
-}
-async function addTestCases(productId, cases) {
-  const col = testCasesCol(productId);
-  const ops = [];
-  for (const tc of cases) {
-    const ref = col.doc(tc.id);
-    ops.push((b) => b.set(ref, tc, { merge: true }));
-  }
-  await commitInBatches(ops);
-}
-async function getTestCasesForEntity(productId, entityId) {
-  const snap = await testCasesCol(productId).where("entity_id", "==", entityId).get();
-  return snap.docs.map((d) => ({ ...d.data(), id: d.id }));
-}
-async function updateGraphMetadata(productId, meta) {
-  const payload = { ...meta };
-  if (meta.last_build) {
-    payload.last_build = Timestamp2.fromDate(meta.last_build);
-  }
-  await firestoreRetry(() => metaDoc(productId).set(payload, { merge: true }), { operationName: "graph_metadata_set" });
-}
-async function getGraphMetadata(productId) {
-  const doc = await metaDoc(productId).get();
-  if (!doc.exists)
-    return null;
-  const data = doc.data();
-  return { ...data, last_build: data.last_build?.toDate?.() ?? /* @__PURE__ */ new Date() };
-}
-
 // ../mcp/dist/mcp/src/adapters/requirements-adapter.js
 var EXTRACTION_SYSTEM_PROMPT2 = `You are a requirements graph extractor. Given product requirements (PRD, user stories, specs), extract a structured graph of entities, relationships, and non-functional requirements.
 
@@ -2918,8 +2651,6 @@ function pct(value) {
 }
 
 // ../mcp/dist/mcp/src/context-graph/readiness-report.js
-import { getApp as getApp3, getApps as getApps3 } from "firebase-admin/app";
-import { getFirestore as getFirestore3 } from "firebase-admin/firestore";
 function computeGrade(pct2) {
   if (pct2 >= 90)
     return "A+";
@@ -2931,76 +2662,6 @@ function computeGrade(pct2) {
     return "C";
   return "D";
 }
-function reportIdFromProductId(productId) {
-  return productId;
-}
-async function generateReadinessReport(input) {
-  const app = getApps3().length > 0 ? getApp3() : void 0;
-  if (!app)
-    throw new Error("Firebase not initialized");
-  const db2 = getFirestore3(app);
-  const { productId, ownerUid } = input;
-  const [entities, edges, constraintNodes, bindings] = await Promise.all([
-    getAllEntities(productId),
-    getAllEdges(productId),
-    getAllNodes(productId),
-    getAllBindings(productId)
-  ]);
-  if (entities.length === 0 && constraintNodes.length === 0) {
-    throw new Error(`No graph data for product "${productId}". Run graph_ingest_requirements or constraints_ingest first.`);
-  }
-  const metrics = computeMetricsFromGraph(entities, edges, constraintNodes, bindings);
-  const readinessPct = metrics.engineering_readiness_pct ?? 0;
-  const jobSnap = await db2.collection("premortem_jobs").doc(productId).get();
-  const jobData = jobSnap.exists ? jobSnap.data() : void 0;
-  const result = jobData?.result;
-  const productName = result?.project?.name || jobData?.payload?.project?.name || "Untitled Product";
-  const verdict = result?.decision?.recommendation;
-  const techStack = entities.filter((e) => e.type === "component").map((e) => e.name).slice(0, 15);
-  const reportId = reportIdFromProductId(productId);
-  const now = /* @__PURE__ */ new Date();
-  const report = {
-    productId,
-    productName,
-    ownerUid,
-    grade: computeGrade(readinessPct),
-    readinessPct: Math.round(readinessPct),
-    securityReadinessPct: Math.round(metrics.security_readiness_pct ?? 0),
-    reliabilityReadinessPct: Math.round(metrics.reliability_readiness_pct ?? 0),
-    scalabilityReadinessPct: Math.round(metrics.scalability_readiness_pct ?? 0),
-    nfrCoverage: metrics.nfr_coverage,
-    timeEstimate: {
-      unassisted_hours: metrics.time_estimate.unassisted_hours,
-      assisted_hours: metrics.time_estimate.assisted_hours,
-      speedup_factor: metrics.time_estimate.speedup_factor
-    },
-    complexityFactors: {
-      entity_count: metrics.complexity_factors.entity_count,
-      nfr_count: metrics.complexity_factors.nfr_count,
-      critical_nfr_count: metrics.complexity_factors.critical_nfr_count,
-      pii_data_types: metrics.complexity_factors.pii_data_types,
-      conflict_count: metrics.complexity_factors.conflict_count
-    },
-    rgrCompletedPhases: metrics.rgr_completed_phases ?? [],
-    complianceFrameworks: metrics.compliance_frameworks ?? [],
-    verdict,
-    techStack,
-    public: true,
-    createdAt: now,
-    updatedAt: now
-  };
-  const docRef = db2.collection("readiness_reports").doc(reportId);
-  const existingSnap = await docRef.get();
-  if (existingSnap.exists) {
-    report.createdAt = existingSnap.data()?.createdAt?.toDate?.() ?? now;
-  }
-  await docRef.set({
-    ...report,
-    createdAt: report.createdAt,
-    updatedAt: now
-  });
-  return { report, reportId };
-}
 var SITE_URL = "https://thecutline.ai";
 function buildReportMarkdown(report, reportId) {
   const cov = report.nfrCoverage;
@@ -8918,7 +8579,6 @@ What's your connection to this space? Are you an insider who knows the pain, or
           throw new McpError(ErrorCode.InvalidRequest, `Session not found: ${session_id}`);
         }
         session.conversationHistory.push({ role: "user", content: message });
-        initFirebase();
         const context = {
           currentAct: session.currentAct,
           initialInput: session.initialInput,
@@ -9050,14 +8710,8 @@ What's your connection to this space? Are you an insider who knows the pain, or
         const valueScore = Math.round(idea.painIntensity * idea.aiLeverage * idea.marketAccessibility / 10);
         let isPremium = false;
         try {
-          const storedToken = await getStoredToken();
-          if (storedToken) {
-            initFirebase(storedToken.environment);
-            const decoded2 = await validateAuth(storedToken.refreshToken ? void 0 : storedToken.refreshToken);
-            if (decoded2?.uid) {
-              isPremium = await validateSubscription(decoded2.uid);
-            }
-          }
+          await requirePremiumWithAutoAuth();
+          isPremium = true;
         } catch (e) {
         }
         if (!isPremium) {
@@ -9135,7 +8789,6 @@ Why AI: ${idea.whyAI}`
       }
       if (name2 === "trial_generate") {
         const { prompt } = args;
-        initFirebase();
         const text = await generateTrialRun(prompt);
         return { content: [{ type: "text", text: JSON.stringify({ text }) }] };
       }
@@ -9146,27 +8799,20 @@ Why AI: ${idea.whyAI}`
         }
         const freeAuth = await resolveAuthContextFree(scanArgs.auth_token);
         const uid = freeAuth.effectiveUid;
-        initFirebase();
-        const rateLimitApp = getApps4().length > 0 ? getApp4() : void 0;
-        if (rateLimitApp) {
-          const rateLimitDb = getFirestore4(rateLimitApp);
-          const profileRef = rateLimitDb.collection("users").doc(uid);
-          const profileSnap = await profileRef.get();
-          const profile = profileSnap.data() ?? {};
-          const scanCounter = profile.free_scan_counter ?? { count: 0, reset_at: null };
+        {
+          const rateInfo = await getScanRateLimit();
           const now = /* @__PURE__ */ new Date();
-          const resetAt = scanCounter.reset_at?.toDate?.() ?? /* @__PURE__ */ new Date(0);
+          const resetAt = rateInfo.periodStart ? new Date(rateInfo.periodStart) : /* @__PURE__ */ new Date(0);
           const monthStart = new Date(now.getFullYear(), now.getMonth(), 1);
           if (resetAt < monthStart) {
-            await firestoreRetry(() => profileRef.set({ free_scan_counter: { count: 0, reset_at: now } }, { merge: true }), { operationName: "reset_scan_counter" });
-            scanCounter.count = 0;
-          } else if (scanCounter.count >= 3) {
-            const hasPremium = await validateSubscription(uid);
-            if (!hasPremium) {
+            await updateScanRateLimit({ free_scan_counter: { count: 1, reset_at: now.toISOString() } });
+          } else if (rateInfo.scanCount >= 3) {
+            if (rateInfo.subscription !== "active" && rateInfo.subscription !== "trialing") {
               throw new McpError(ErrorCode.InvalidRequest, "Free scan limit reached (3/month). Run `cutline-mcp upgrade` in your terminal, or visit https://thecutline.ai/upgrade");
             }
+          } else {
+            await updateScanRateLimit({ free_scan_counter: { count: rateInfo.scanCount + 1, reset_at: rateInfo.periodStart ?? now.toISOString() } });
           }
-          await firestoreRetry(() => profileRef.set({ free_scan_counter: { count: admin.firestore.FieldValue.increment(1), reset_at: scanCounter.reset_at ?? now } }, { merge: true }), { operationName: "increment_scan_counter" });
         }
         const genericGraphId = buildGenericGraphId(uid, scanArgs.project_root);
         const result = await handleSecurityScan(genericGraphId, uid, scanArgs, {
@@ -9182,44 +8828,36 @@ Why AI: ${idea.whyAI}`
           updateGraphMetadata: (pid, patch) => updateGraphMetadata(pid, patch)
         });
         try {
-          const { recordScoreSnapshot: recordScoreSnapshot2 } = await import("./score-history-HO5KRVGC.js");
-          await recordScoreSnapshot2(genericGraphId, result.metrics, "engineering_audit");
+          await recordScoreSnapshot(genericGraphId, result.metrics, "engineering_audit");
         } catch (e) {
           console.error("[engineering_audit] Score snapshot failed (non-fatal):", e);
         }
         let reportId;
         try {
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (app) {
-            const db2 = getFirestore4(app);
-            const reportRef = db2.collection("scan_reports").doc();
-            reportId = reportRef.id;
-            await firestoreRetry(() => reportRef.set({
-              uid,
-              created_at: admin.firestore.FieldValue.serverTimestamp(),
-              metrics: {
-                engineering_readiness_pct: result.metrics.engineering_readiness_pct ?? 0,
-                security_readiness_pct: result.metrics.security_readiness_pct ?? 0,
-                reliability_readiness_pct: result.metrics.reliability_readiness_pct ?? 0,
-                scalability_readiness_pct: result.metrics.scalability_readiness_pct ?? 0
-              },
-              ecosystem: result.ecosystem,
-              binding_coverage_pct: result.bindingHealth.coverage_pct,
-              frameworks_loaded: result.frameworksLoaded,
-              sensitive_data_count: result.sensitiveDataCount,
-              findings: result.gatedGapDetails.map((f) => ({
-                title: f.title,
-                severity: f.severity,
-                category: f.category,
-                description: f.description
-              })),
-              sca_summary: result.scaFindings ? {
-                total: result.scaFindings.total,
-                critical: result.scaFindings.critical,
-                high: result.scaFindings.high
-              } : null
-            }), { operationName: "persist_scan_report" });
-          }
+          const saved = await saveScanReport({
+            metrics: {
+              engineering_readiness_pct: result.metrics.engineering_readiness_pct ?? 0,
+              security_readiness_pct: result.metrics.security_readiness_pct ?? 0,
+              reliability_readiness_pct: result.metrics.reliability_readiness_pct ?? 0,
+              scalability_readiness_pct: result.metrics.scalability_readiness_pct ?? 0
+            },
+            ecosystem: result.ecosystem,
+            binding_coverage_pct: result.bindingHealth.coverage_pct,
+            frameworks_loaded: result.frameworksLoaded,
+            sensitive_data_count: result.sensitiveDataCount,
+            findings: result.gatedGapDetails.map((f) => ({
+              title: f.title,
+              severity: f.severity,
+              category: f.category,
+              description: f.description
+            })),
+            sca_summary: result.scaFindings ? {
+              total: result.scaFindings.total,
+              critical: result.scaFindings.critical,
+              high: result.scaFindings.high
+            } : null
+          });
+          reportId = saved.id;
         } catch (e) {
           console.error("[engineering_audit] Report persistence failed (non-fatal):", e);
         }
@@ -9237,42 +8875,25 @@ Why AI: ${idea.whyAI}`
         case "premortem_run": {
           const { input } = args;
           const parsedInput = RunInputSchema.parse(input);
-          initFirebase();
-          const runApp = getApps4().length > 0 ? getApp4() : void 0;
-          if (!runApp)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const runDb = getFirestore4(runApp);
-          const runDocRef = runDb.collection("premortem_jobs").doc();
-          if (!parsedInput.productId) {
-            parsedInput.productId = runDocRef.id;
-          }
-          await firestoreRetry(() => runDocRef.set({
-            status: "running",
-            payload: parsedInput,
-            createdAt: admin.firestore.FieldValue.serverTimestamp(),
-            uid: effectiveUid || null
-          }), { operationName: "premortem_run_set" });
+          const jobId = parsedInput.productId || `pm_${Date.now()}_${Math.random().toString(36).slice(2, 9)}`;
+          if (!parsedInput.productId)
+            parsedInput.productId = jobId;
+          const { id: runDocId } = await createPremortem({ status: "running", payload: parsedInput }, jobId);
           const timeoutMs = 10 * 60 * 1e3;
           const result = await Promise.race([
             runRolesAndSummarize(parsedInput, { includeDiagnostics: true }),
             new Promise((_, reject) => setTimeout(() => reject(new Error("Timeout")), timeoutMs))
           ]);
-          await firestoreRetry(() => runDocRef.update({ status: "completed", result, finishedAt: admin.firestore.FieldValue.serverTimestamp() }), { operationName: "premortem_run_complete" });
-          return { content: [{ type: "text", text: JSON.stringify({ ...result, _jobId: runDocRef.id, _graphProductId: parsedInput.productId }) }] };
+          await updatePremortem(runDocId, { status: "completed", result });
+          return { content: [{ type: "text", text: JSON.stringify({ ...result, _jobId: runDocId, _graphProductId: parsedInput.productId }) }] };
         }
         case "premortem_from_idea": {
           const { idea_report_id } = args;
           if (!idea_report_id)
             throw new McpError(ErrorCode.InvalidParams, "idea_report_id is required");
-          initFirebase();
-          const ftApp = getApps4().length > 0 ? getApp4() : void 0;
-          if (!ftApp)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const ftDb = getFirestore4(ftApp);
-          const ideaSnap = await firestoreRetry(() => ftDb.collection("idea_reports").doc(idea_report_id).get(), { operationName: "premortem_from_idea_read" });
-          if (!ideaSnap.exists)
+          const ideaData = await getIdeaReport(idea_report_id);
+          if (!ideaData)
             throw new McpError(ErrorCode.InvalidRequest, `Idea report not found: ${idea_report_id}`);
-          const ideaData = ideaSnap.data();
           const risks = (ideaData.risks ?? []).map((r) => r.title).join(", ");
           const assumptions = (ideaData.assumptions ?? []).map((a) => a.title).join(", ");
           const competitors = (ideaData.competitive_threats ?? []).map((t) => t.threat).join(", ");
@@ -9301,32 +8922,25 @@ Competitive threats: ${competitors}` : ""
               competitors: (ideaData.competitive_threats ?? []).map((t) => t.threat)
             }
           });
-          const ftDocRef = ftDb.collection("premortem_jobs").doc();
-          ftInput.productId = ftDocRef.id;
-          await firestoreRetry(() => ftDocRef.set({
+          const { id: ftDocId } = await createPremortem({
             status: "running",
             payload: ftInput,
             source: "fast_track_idea",
-            idea_report_id,
-            createdAt: admin.firestore.FieldValue.serverTimestamp(),
-            uid: effectiveUid || null
-          }), { operationName: "premortem_from_idea_set" });
+            idea_report_id
+          });
+          ftInput.productId = ftDocId;
           const ftTimeoutMs = 10 * 60 * 1e3;
           const ftResult = await Promise.race([
             runRolesAndSummarize(ftInput, { includeDiagnostics: true }),
             new Promise((_, reject) => setTimeout(() => reject(new Error("Timeout")), ftTimeoutMs))
           ]);
-          await firestoreRetry(() => ftDocRef.update({
-            status: "completed",
-            result: ftResult,
-            finishedAt: admin.firestore.FieldValue.serverTimestamp()
-          }), { operationName: "premortem_from_idea_complete" });
+          await updatePremortem(ftDocId, { status: "completed", result: ftResult });
           return {
             content: [{
               type: "text",
               text: JSON.stringify({
                 ...ftResult,
-                _jobId: ftDocRef.id,
+                _jobId: ftDocId,
                 _graphProductId: ftInput.productId,
                 _source: "fast_track_idea",
                 _idea_report_id: idea_report_id,
@@ -9338,32 +8952,16 @@ Competitive threats: ${competitors}` : ""
         case "premortem_queue": {
           const { input } = args;
           const parsedInput = RunInputSchema.parse(input);
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const docRef = db2.collection("premortem_jobs").doc();
-          if (!parsedInput.productId) {
-            parsedInput.productId = docRef.id;
-          }
-          await firestoreRetry(() => docRef.set({
-            status: "queued",
-            payload: parsedInput,
-            createdAt: admin.firestore.FieldValue.serverTimestamp(),
-            uid: effectiveUid || null
-          }), { operationName: "premortem_queue_set" });
-          return { content: [{ type: "text", text: JSON.stringify({ jobId: docRef.id, productId: parsedInput.productId }) }] };
+          const { id: queuedId } = await createPremortem({ status: "queued", payload: parsedInput });
+          if (!parsedInput.productId)
+            parsedInput.productId = queuedId;
+          return { content: [{ type: "text", text: JSON.stringify({ jobId: queuedId, productId: parsedInput.productId }) }] };
         }
         case "premortem_status": {
           const { jobId } = args;
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const snap = await db2.collection("premortem_jobs").doc(jobId).get();
-          if (!snap.exists)
+          const data = await getPremortem(jobId);
+          if (!data)
             throw new McpError(ErrorCode.InvalidRequest, "Job not found");
-          const data = snap.data() || {};
           return {
             content: [{
               type: "text",
@@ -9379,47 +8977,36 @@ Competitive threats: ${competitors}` : ""
         }
         case "premortem_kick": {
           const { jobId } = args;
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const ref = db2.collection("premortem_jobs").doc(jobId);
-          const snap = await ref.get();
-          if (!snap.exists)
+          const data = await getPremortem(jobId);
+          if (!data)
             throw new McpError(ErrorCode.InvalidRequest, "Job not found");
-          const data = snap.data() || {};
           if (data.status === "completed") {
             return { content: [{ type: "text", text: JSON.stringify({ kicked: false, status: "completed" }) }] };
           }
           const kickInput = data.payload;
-          if (!kickInput.productId) {
-            kickInput.productId = ref.id;
-          }
-          await firestoreRetry(() => ref.update({ status: "running", payload: kickInput, startedAt: admin.firestore.FieldValue.serverTimestamp() }), { operationName: "premortem_kick_start" });
+          if (!kickInput.productId)
+            kickInput.productId = jobId;
+          await updatePremortem(jobId, { status: "running", payload: kickInput });
           const update = async (patch) => {
-            await firestoreRetry(() => ref.update({ ...patch, updatedAt: admin.firestore.FieldValue.serverTimestamp() }), { operationName: "premortem_kick_progress" });
+            await updatePremortem(jobId, patch);
           };
           const result = await Promise.race([
             runRolesAndSummarizeIncremental(kickInput, update),
             new Promise((_, reject) => setTimeout(() => reject(new Error("Timeout")), 10 * 60 * 1e3))
           ]);
           const doc = PMJsonSchema.parse(result);
-          await firestoreRetry(() => ref.update({ status: "completed", result: doc, progress: 1, finishedAt: admin.firestore.FieldValue.serverTimestamp() }), { operationName: "premortem_kick_complete" });
+          await updatePremortem(jobId, { status: "completed", result: doc, progress: 1 });
           return { content: [{ type: "text", text: JSON.stringify({ kicked: true, status: "completed", productId: kickInput.productId }) }] };
         }
         case "premortem_list": {
           const { limit = 10 } = args;
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const snapshot = await db2.collection("premortem_jobs").where("uid", "==", effectiveUid).orderBy("createdAt", "desc").limit(limit).get();
-          const premortems = snapshot.docs.map((doc) => ({
-            id: doc.id,
-            product_id: doc.data().payload?.productId || doc.id,
-            status: doc.data().status,
-            productName: doc.data().payload?.project?.name || doc.data().result?.project?.name || "Untitled",
-            createdAt: doc.data().createdAt?.toDate()?.toISOString()
+          const docs = await listPremortems({ limit });
+          const premortems = docs.map((d) => ({
+            id: d.id,
+            product_id: d.payload?.productId || d.id,
+            status: d.status,
+            productName: d.payload?.project?.name || d.result?.project?.name || "Untitled",
+            createdAt: d.createdAt?._seconds ? new Date(d.createdAt._seconds * 1e3).toISOString() : d.createdAt
           }));
           return { content: [{ type: "text", text: JSON.stringify(premortems, null, 2) }] };
         }
@@ -9545,15 +9132,10 @@ Meta: ${JSON.stringify(output.meta)}` }
           if (!premortem_id || !product_id) {
             throw new McpError(ErrorCode.InvalidParams, "premortem_id and product_id are required");
           }
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const snap = await db2.collection("premortem_jobs").doc(premortem_id).get();
-          if (!snap.exists) {
+          const data = await getPremortem(premortem_id);
+          if (!data) {
             throw new McpError(ErrorCode.InvalidRequest, "Premortem not found");
           }
-          const data = snap.data();
           if (data?.status !== "completed" || !data?.result) {
             throw new McpError(ErrorCode.InvalidRequest, "Premortem not completed yet");
           }
@@ -10035,7 +9617,6 @@ Meta: ${JSON.stringify(output.meta)}` }
           if (!product_id || !entityName || !entity_type || !entityDesc) {
             throw new McpError(ErrorCode.InvalidParams, "product_id, name, entity_type, and description are required");
           }
-          initFirebase();
           const slug = entityName.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_|_$/g, "").slice(0, 40);
           const entityId = `${entity_type}:${slug}`;
           const now = /* @__PURE__ */ new Date();
@@ -10185,24 +9766,15 @@ Meta: ${JSON.stringify(output.meta)}` }
         // ─────────────────────────────────────────────────────────────────
         case "template_list": {
           const { type, deep_dive_id } = args;
-          initFirebase();
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const snapshot = await db2.collection("templates").where("uid", "==", effectiveUid).limit(100).get();
-          let templates = snapshot.docs.map((doc) => ({
-            id: doc.id,
-            type: doc.data().type,
-            status: doc.data().status,
-            sourceDeepDiveId: doc.data().sourceDeepDiveId,
-            currentAct: doc.data().discoverySession?.currentAct || 1,
-            createdAt: doc.data().createdAt?.toDate?.()?.toISOString() || null,
-            updatedAt: doc.data().updatedAt?.toDate?.()?.toISOString() || null
+          let templates = (await listTemplates({ type })).map((d) => ({
+            id: d.id,
+            type: d.type,
+            status: d.status,
+            sourceDeepDiveId: d.sourceDeepDiveId,
+            currentAct: d.discoverySession?.currentAct || 1,
+            createdAt: d.createdAt?._seconds ? new Date(d.createdAt._seconds * 1e3).toISOString() : d.createdAt || null,
+            updatedAt: d.updatedAt?._seconds ? new Date(d.updatedAt._seconds * 1e3).toISOString() : d.updatedAt || null
           }));
-          if (type) {
-            templates = templates.filter((t) => t.type === type);
-          }
           if (deep_dive_id) {
             templates = templates.filter((t) => t.sourceDeepDiveId === deep_dive_id);
           }
@@ -10217,31 +9789,21 @@ Meta: ${JSON.stringify(output.meta)}` }
           const { template_id } = args;
           if (!template_id)
             throw new McpError(ErrorCode.InvalidParams, "template_id is required");
-          initFirebase();
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const doc = await db2.collection("templates").doc(template_id).get();
-          if (!doc.exists) {
+          const data = await getTemplate(template_id);
+          if (!data)
             throw new McpError(ErrorCode.InvalidRequest, "Template not found");
-          }
-          const data = doc.data();
-          if (data?.uid !== effectiveUid) {
-            throw new McpError(ErrorCode.InvalidRequest, "Not authorized to access this template");
-          }
           return {
             content: [{
               type: "text",
               text: JSON.stringify({
-                id: doc.id,
+                id: data.id,
                 type: data.type,
                 status: data.status,
                 sourceDeepDiveId: data.sourceDeepDiveId,
                 discoverySession: data.discoverySession,
                 output: data.output,
-                createdAt: data.createdAt?.toDate?.()?.toISOString() || null,
-                updatedAt: data.updatedAt?.toDate?.()?.toISOString() || null
+                createdAt: data.createdAt?._seconds ? new Date(data.createdAt._seconds * 1e3).toISOString() : data.createdAt || null,
+                updatedAt: data.updatedAt?._seconds ? new Date(data.updatedAt._seconds * 1e3).toISOString() : data.updatedAt || null
               })
             }]
           };
@@ -10252,18 +9814,10 @@ Meta: ${JSON.stringify(output.meta)}` }
             throw new McpError(ErrorCode.InvalidParams, "type is required");
           if (!deep_dive_id)
             throw new McpError(ErrorCode.InvalidParams, "deep_dive_id is required");
-          initFirebase();
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const deepDiveDoc = await db2.collection("premortem_jobs").doc(deep_dive_id).get();
-          if (!deepDiveDoc.exists) {
+          const deepDiveData = await getPremortem(deep_dive_id);
+          if (!deepDiveData) {
             throw new McpError(ErrorCode.InvalidRequest, "Deep Dive not found");
           }
-          if (deepDiveDoc.data()?.uid !== effectiveUid) {
-            throw new McpError(ErrorCode.InvalidRequest, "Not authorized to access this Deep Dive");
-          }
           const templateId = `tpl_${Date.now().toString(36)}_${Math.random().toString(36).substring(2, 8)}`;
           const now = /* @__PURE__ */ new Date();
           let constraintThresholds = [];
@@ -10278,8 +9832,7 @@ Meta: ${JSON.stringify(output.meta)}` }
               category: c.category
             }));
           }
-          await firestoreRetry(() => db2.collection("templates").doc(templateId).set({
-            uid: effectiveUid,
+          await createTemplate({
             type,
             status: "discovery_active",
             sourceDeepDiveId: deep_dive_id,
@@ -10290,10 +9843,8 @@ Meta: ${JSON.stringify(output.meta)}` }
                 ...rgr_mode ? { rgr_mode: true } : {},
                 ...constraintThresholds.length > 0 ? { constraintThresholds } : {}
               }
-            },
-            createdAt: now,
-            updatedAt: now
-          }), { operationName: "template_create" });
+            }
+          }, templateId);
           return {
             content: [{
               type: "text",
@@ -10311,19 +9862,10 @@ Meta: ${JSON.stringify(output.meta)}` }
             throw new McpError(ErrorCode.InvalidParams, "template_id is required");
           if (!message)
             throw new McpError(ErrorCode.InvalidParams, "message is required");
-          initFirebase();
-          const app = getApps4().length > 0 ? getApp4() : void 0;
-          if (!app)
-            throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-          const db2 = getFirestore4(app);
-          const templateDoc = await db2.collection("templates").doc(template_id).get();
-          if (!templateDoc.exists) {
+          const templateData = await getTemplate(template_id);
+          if (!templateData) {
             throw new McpError(ErrorCode.InvalidRequest, "Template not found");
           }
-          const templateData = templateDoc.data();
-          if (templateData?.uid !== effectiveUid) {
-            throw new McpError(ErrorCode.InvalidRequest, "Not authorized to access this template");
-          }
           if (templateData.status === "completed") {
             return {
               content: [{
@@ -10338,9 +9880,9 @@ Meta: ${JSON.stringify(output.meta)}` }
           }
           let deepDiveData = null;
           if (templateData.sourceDeepDiveId) {
-            const ddDoc = await db2.collection("premortem_jobs").doc(templateData.sourceDeepDiveId).get();
-            if (ddDoc.exists && ddDoc.data()?.result) {
-              deepDiveData = ddDoc.data()?.result;
+            const ddData = await getPremortem(templateData.sourceDeepDiveId);
+            if (ddData?.result) {
+              deepDiveData = ddData.result;
             }
           }
           const response = await generateTemplateResponse(message, {
@@ -10382,16 +9924,15 @@ Meta: ${JSON.stringify(output.meta)}` }
               }
             });
           }
-          await firestoreRetry(() => db2.collection("templates").doc(template_id).update({
+          await updateTemplate(template_id, {
             status: response.completed ? "completed" : "discovery_active",
             discoverySession: {
               currentAct: response.suggestedAct || templateData.discoverySession?.currentAct || 1,
               messages: [...templateData.discoverySession?.messages || [], userMsg, assistantMsg],
               extractedContext: updatedContext
             },
-            output: response.output || null,
-            updatedAt: /* @__PURE__ */ new Date()
-          }), { operationName: "template_update" });
+            output: response.output || null
+          });
           if (response.completed && templateData.type === "testing" && response.output?.testCases?.length > 0) {
             const graphProductId = updatedContext.product_id || templateData.sourceDeepDiveId;
             if (graphProductId) {
@@ -10834,7 +10375,6 @@ Raw counts: ${JSON.stringify({
           if (!product_id) {
             throw new McpError(ErrorCode.InvalidParams, "product_id is required");
           }
-          initFirebase();
           const [entities, edges, constraintNodes, bindings, existingMeta] = await Promise.all([
             getAllEntities(product_id),
             getAllEdges(product_id),
@@ -10865,11 +10405,7 @@ Raw counts: ${JSON.stringify({
           });
           await recordScoreSnapshot(product_id, metrics, "metrics_refresh");
           try {
-            const metricsApp = getApps4().length > 0 ? getApp4() : void 0;
-            if (metricsApp) {
-              const metricsDb = getFirestore4(metricsApp);
-              await firestoreRetry(() => metricsDb.collection("premortem_jobs").doc(product_id).update({ metrics }), { operationName: "graph_metrics_sync" });
-            }
+            await updatePremortem(product_id, { metrics });
           } catch (e) {
             console.error("Metrics sync to premortem_jobs failed (non-fatal):", e);
           }
@@ -10890,7 +10426,6 @@ ${JSON.stringify(metrics, null, 2)}` }
           if (!product_id || !file_path) {
             throw new McpError(ErrorCode.InvalidParams, "product_id and file_path are required");
           }
-          initFirebase();
           const [rgrEntities, rgrEdges, rgrConstraints, rgrBindings] = await Promise.all([
             getAllEntities(product_id),
             getAllEdges(product_id),
@@ -10959,7 +10494,6 @@ ${JSON.stringify(metrics, null, 2)}` }
           if (!validPhases.includes(phase)) {
             throw new McpError(ErrorCode.InvalidParams, `Invalid phase "${phase}". Must be one of: ${validPhases.join(", ")}`);
           }
-          initFirebase();
           const meta = await getGraphMetadata(product_id);
           const existing = meta?.rgr_completed_phases ?? [];
           if (existing.includes(phase)) {
@@ -11021,7 +10555,6 @@ ${JSON.stringify(metrics, null, 2)}` }
           if (!product_id) {
             throw new McpError(ErrorCode.InvalidParams, "product_id is required");
           }
-          initFirebase();
           const [genEntities, genEdges, genConstraints, genBindings] = await Promise.all([
             getAllEntities(product_id),
             getAllEdges(product_id),
@@ -11215,9 +10748,11 @@ Meta: ${JSON.stringify({
           if (!product_id) {
             throw new McpError(ErrorCode.InvalidParams, "product_id is required");
           }
-          const { report, reportId } = await generateReadinessReport({
+          const { report, reportId } = await generateReadinessReportViaProxy({
             productId: product_id,
-            ownerUid: effectiveUid
+            ownerUid: effectiveUid,
+            computeMetricsFromGraph,
+            computeGrade
           });
           const reportMd = buildReportMarkdown(report, reportId);
           const snippets = buildBadgeSnippets(report, reportId);
@@ -11286,15 +10821,8 @@ Meta: ${JSON.stringify({
             addEdges: (pid, edges) => addEdges(pid, edges),
             upsertBindings: (pid, bindings) => upsertBindings(pid, bindings),
             createDeepDiveJob: async (payload) => {
-              initFirebase();
-              const jobApp = getApps4().length > 0 ? getApp4() : void 0;
-              if (!jobApp)
-                throw new McpError(ErrorCode.InternalError, "Firebase not initialized");
-              const jobDb = getFirestore4(jobApp);
-              const docRef = jobDb.collection("premortem_jobs").doc();
               const runInput = {
                 mode: "product",
-                productId: docRef.id,
                 project: {
                   name: payload.extracted.productName,
                   brief: payload.extracted.productBrief,
@@ -11317,16 +10845,16 @@ Meta: ${JSON.stringify({
                 artifacts.target_users = payload.extracted.targetUsers;
               if (Object.keys(artifacts).length > 0)
                 runInput.conversational_artifacts = artifacts;
-              await firestoreRetry(() => docRef.set({
+              const { id: newJobId } = await createPremortem({
                 status: "queued",
-                payload: runInput,
-                createdAt: admin.firestore.FieldValue.serverTimestamp(),
-                uid: effectiveUid || null,
+                payload: { ...runInput, productId: void 0 },
                 source: "code_audit",
                 mode: "product",
                 codeContext: payload.codeContext || null
-              }), { operationName: "code_audit_create_job" });
-              return { jobId: docRef.id };
+              });
+              runInput.productId = newJobId;
+              await updatePremortem(newJobId, { payload: runInput });
+              return { jobId: newJobId };
             }
           });
           const sections = [
@@ -11450,11 +10978,7 @@ These constraints will now fire via \`constraints_auto\` when you edit matched f
               metrics: auditMetrics
             });
             await recordScoreSnapshot(auditArgs.product_id, auditMetrics, "code_audit");
-            const auditApp = getApps4().length > 0 ? getApp4() : void 0;
-            if (auditApp) {
-              const auditDb = getFirestore4(auditApp);
-              await firestoreRetry(() => auditDb.collection("premortem_jobs").doc(auditArgs.product_id).update({ metrics: auditMetrics }), { operationName: "code_audit_sync_metrics" });
-            }
+            await updatePremortem(auditArgs.product_id, { metrics: auditMetrics });
           } catch (e) {
             console.error("Metrics recompute after code audit failed (non-fatal):", e);
           }