@maind-dev/cli 0.1.0

package/README.md

@@ -0,0 +1,77 @@
+# @maind-dev/cli
+
+Headless [maind](https://maind.dev) CLI for CI runners. Pulls stack-relevant,
+vetted lessons and conventions into a build before an agent runs, and emits a
+**context manifest** that records exactly which lessons were served — the
+attribution backbone for maind's CI feedback loop.
+
+Unlike [`@maind-dev/mcp-bridge`](../mcp-bridge) (which proxies a live stdio MCP
+client through a device-bound session), this CLI is a one-shot request/response
+tool: authenticate from an environment variable, call a few read-only maind
+tools, write files.
+
+## Install
+
+```bash
+npm i -g @maind-dev/cli   # or: npx @maind-dev/cli context ...
+```
+
+## Auth
+
+Set `MAIND_API_KEY` to a **read-scoped CI key** from <https://maind.dev/keys>.
+CI keys are device-unbound, so they work in a runner with no browser and no
+stable device. On a developer machine that already paired the bridge, the CLI
+falls back to the on-disk bridge key automatically.
+
+```bash
+export MAIND_API_KEY=mnd_xxxxxxxx_...
+```
+
+## Usage
+
+```bash
+maind context --stack nextjs,supabase --languages typescript --tools claude-code
+```
+
+Writes two artifacts (defaults shown):
+
+| File | Purpose |
+|---|---|
+| `.maind/context.md` | Lesson bodies + convention checklist — load this into the agent's context |
+| `.maind/manifest.json` | `served` lesson IDs + versions + tiers — attribution record for the run |
+
+### Options
+
+| Flag | Default | Meaning |
+|---|---|---|
+| `--stack <a,b>` | — | Stack hint; seeds the platforms filter |
+| `--platforms <a,b>` | from `--stack` | Explicit platforms filter |
+| `--tools <a,b>` | — | Tool filter (e.g. `claude-code`) |
+| `--languages <a,b>` | — | Language filter |
+| `--query <text>` | stack terms | Search query |
+| `--budget <n>` | 15 | Max lessons (1–50; server caps search at 10) |
+| `--out <path>` | `.maind/context.md` | Context markdown output |
+| `--manifest <path>` | `.maind/manifest.json` | Manifest JSON output |
+| `--run-ref <id>` | `$GITHUB_RUN_ID` | Build identifier stored in the manifest |
+| `--mcp-url <url>` | `$MAIND_MCP_URL` or prod | MCP endpoint override |
+
+## Fail-open contract
+
+A context pull must never fail a build. On any error (missing key, network,
+auth) the CLI still writes explanatory artifacts (the manifest carries an
+`error` field) and exits `0`. The agent simply runs without extra context.
+
+## Example: GitHub Actions
+
+```yaml
+- name: Pull maind context
+  run: npx @maind-dev/cli context --stack nextjs,supabase --languages typescript
+  env:
+    MAIND_API_KEY: ${{ secrets.MAIND_API_KEY }}
+
+- name: Upload manifest (for outcome attribution)
+  uses: actions/upload-artifact@v4
+  with:
+    name: maind-manifest
+    path: .maind/manifest.json
+```

package/build/auth.js

@@ -0,0 +1,76 @@
+// API-key + device-id resolution for the headless CLI.
+//
+// CI-first: the key comes from the MAIND_API_KEY environment variable. For local
+// dev convenience we also fall back to the same on-disk key the mcp-bridge
+// persists (~/Library/Application Support/maind/api-key etc.), so a developer who
+// already paired the bridge can run `maind context` without re-exporting anything.
+//
+// We deliberately do NOT run a device-authorization flow here. A CI runner has no
+// browser and no stable device, so an interactive flow would just hang. The
+// intended key for CI is a device-unbound "ci"-kind key minted in the dashboard
+// (read-scoped). Until that key class ships, a free-tier / pre-cutoff key works
+// because those are not device-bound either.
+//
+// The device-id is sent ONLY when an existing device-id file is found on disk
+// (i.e. this machine already paired the bridge). In CI no such file exists, so the
+// header is omitted and the server treats the request as device-less.
+import { existsSync, readFileSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { join } from "node:path";
+/** XDG-style config directory for maind — must match apps/mcp-bridge/src/device-id.ts. */
+function configDir() {
+    const home = homedir();
+    const env = process.env;
+    if (platform() === "darwin") {
+        return join(home, "Library", "Application Support", "maind");
+    }
+    if (platform() === "win32") {
+        const appdata = env.APPDATA && env.APPDATA.length > 0 ? env.APPDATA : join(home, "AppData", "Roaming");
+        return join(appdata, "maind");
+    }
+    const xdg = env.XDG_CONFIG_HOME && env.XDG_CONFIG_HOME.length > 0
+        ? env.XDG_CONFIG_HOME
+        : join(home, ".config");
+    return join(xdg, "maind");
+}
+function readFileTrimmed(path) {
+    if (!existsSync(path))
+        return null;
+    try {
+        const raw = readFileSync(path, "utf8").trim();
+        return raw.length > 0 ? raw : null;
+    }
+    catch {
+        return null;
+    }
+}
+export class MissingApiKeyError extends Error {
+    constructor() {
+        super("No API key found. Set MAIND_API_KEY (a read-scoped CI key from https://maind.dev/keys) " +
+            "or pair the maind bridge on this machine first.");
+        this.name = "MissingApiKeyError";
+    }
+}
+/**
+ * Resolves the API key (env-first, then the bridge's on-disk key) and an optional
+ * device-id. Throws MissingApiKeyError when neither source yields a key.
+ */
+export function resolveAuth() {
+    const fromEnv = process.env.MAIND_API_KEY?.trim();
+    const apiKey = fromEnv && fromEnv.length > 0 ? fromEnv : readFileTrimmed(join(configDir(), "api-key"));
+    if (!apiKey)
+        throw new MissingApiKeyError();
+    const deviceId = readFileTrimmed(join(configDir(), "device-id"));
+    return { apiKey, deviceId, keyPrefix: keyPrefixOf(apiKey) };
+}
+/**
+ * Extracts the non-secret identifying prefix from a maind key (`mnd_<8hex>_<secret>`).
+ * Returns the `mnd_<8hex>` portion, or a coarse first-12-chars fallback for other shapes.
+ */
+export function keyPrefixOf(apiKey) {
+    const m = /^(mnd_[0-9a-f]{8})_/i.exec(apiKey);
+    if (m)
+        return m[1];
+    return apiKey.slice(0, 12);
+}
+//# sourceMappingURL=auth.js.map

package/build/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,kFAAkF;AAClF,mFAAmF;AACnF,EAAE;AACF,kFAAkF;AAClF,4EAA4E;AAC5E,gFAAgF;AAChF,gFAAgF;AAChF,6CAA6C;AAC7C,EAAE;AACF,8EAA8E;AAC9E,mFAAmF;AACnF,sEAAsE;AAEtE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,0FAA0F;AAC1F,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GACX,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,GAAG,GACP,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QACnD,CAAC,CAAC,GAAG,CAAC,eAAe;QACrB,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C;QACE,KAAK,CACH,yFAAyF;YACvF,iDAAiD,CACpD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;IAE5C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAEjE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/build/context.js

@@ -0,0 +1,157 @@
+// `maind context` — pull stack-relevant lessons + conventions into a CI runner.
+//
+// Fail-open by contract: a CI job must never fail because the context pull failed.
+// Any error is logged to stderr, an explanatory empty context.md + an error-tagged
+// manifest are still written, and the process exits 0. The caller decides whether
+// to proceed (it always can — the agent just runs without extra context).
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { MissingApiKeyError, resolveAuth } from "./auth.js";
+import { McpClient } from "./mcp-client.js";
+import { buildManifest, renderContextMarkdown, } from "./render.js";
+function csvSplit(s) {
+    return s
+        .split(",")
+        .map((x) => x.trim())
+        .filter((x) => x.length > 0);
+}
+/** Parses the `context` subcommand flags. Unknown flags are ignored (forward-compat). */
+export function parseContextArgs(argv) {
+    const get = (name) => {
+        const i = argv.indexOf(name);
+        if (i === -1 || i + 1 >= argv.length)
+            return undefined;
+        return argv[i + 1];
+    };
+    const stack = csvSplit(get("--stack") ?? "");
+    const platforms = csvSplit(get("--platforms") ?? "");
+    const tools = csvSplit(get("--tools") ?? "");
+    const languages = csvSplit(get("--languages") ?? "");
+    const budgetRaw = get("--budget");
+    const budgetParsed = budgetRaw ? Number.parseInt(budgetRaw, 10) : NaN;
+    const budget = Number.isFinite(budgetParsed) && budgetParsed > 0 ? Math.min(budgetParsed, 50) : 15;
+    return {
+        stack,
+        languages,
+        // --stack is a convenience that seeds the platforms filter; explicit --platforms wins/merges.
+        platforms: platforms.length > 0 ? platforms : stack,
+        tools,
+        query: get("--query") ?? null,
+        out: get("--out") ?? ".maind/context.md",
+        manifest: get("--manifest") ?? ".maind/manifest.json",
+        budget,
+        runRef: get("--run-ref") ?? process.env.GITHUB_RUN_ID ?? null,
+        mcpUrl: get("--mcp-url") ?? null,
+        clientVersion: "0.1.0",
+    };
+}
+function nowIso() {
+    // Real Node runtime — Date is available (the Date-ban only applies to Workflow scripts).
+    return new Date().toISOString();
+}
+function writeArtifact(path, content) {
+    const dir = dirname(path);
+    if (dir && dir !== ".")
+        mkdirSync(dir, { recursive: true });
+    writeFileSync(path, content, "utf8");
+}
+/**
+ * Runs the context pull. Returns the process exit code. Always 0 on the
+ * fail-open path (artifacts still written); non-zero is reserved for truly
+ * unwritable output paths where we can't even emit the empty artifacts.
+ */
+export async function runContext(opts) {
+    const query = opts.query ?? deriveQuery(opts);
+    const meta = {
+        stack: opts.stack,
+        languages: opts.languages,
+        platforms: opts.platforms,
+        tools: opts.tools,
+        query,
+        budget: opts.budget,
+        generatedAt: nowIso(),
+        keyPrefix: "unknown",
+        runRef: opts.runRef,
+        mcpUrl: opts.mcpUrl ?? process.env.MAIND_MCP_URL ?? "https://mcp.maind.dev/mcp",
+    };
+    try {
+        const auth = resolveAuth();
+        meta.keyPrefix = auth.keyPrefix;
+        const client = new McpClient({
+            apiKey: auth.apiKey,
+            deviceId: auth.deviceId,
+            clientVersion: opts.clientVersion,
+            mcpUrl: opts.mcpUrl ?? undefined,
+        });
+        // Two calls: search_lessons gives full lesson bodies; get_session_briefing
+        // gives the always-on convention awareness index. Conventions are best-effort —
+        // a failure there must not lose the lessons.
+        const search = await client.callTool("search_lessons", {
+            query,
+            platforms: opts.platforms,
+            languages: opts.languages,
+            tools: opts.tools,
+            limit: Math.min(opts.budget, 10), // search_lessons caps limit at 10 server-side
+        });
+        const lessons = Array.isArray(search.lessons) ? search.lessons : [];
+        let conventions = [];
+        try {
+            const briefing = await client.callTool("get_session_briefing", {
+                tools: opts.tools.length > 0 ? opts.tools : ["claude-code"],
+                languages: opts.languages,
+                platforms: opts.platforms,
+            });
+            if (Array.isArray(briefing.convention_index))
+                conventions = briefing.convention_index;
+        }
+        catch (err) {
+            warn(`conventions unavailable (continuing with lessons only): ${msg(err)}`);
+        }
+        writeArtifact(opts.out, renderContextMarkdown(lessons, conventions, meta));
+        writeArtifact(opts.manifest, JSON.stringify(buildManifest(lessons, conventions, meta), null, 2) + "\n");
+        process.stderr.write(`maind context: wrote ${lessons.length} lessons + ${conventions.length} conventions ` +
+            `→ ${opts.out} (manifest: ${opts.manifest})\n`);
+        return 0;
+    }
+    catch (err) {
+        // Fail-open: emit explanatory empty artifacts so the manifest path always exists,
+        // then exit 0 so CI proceeds without maind context.
+        const reason = err instanceof MissingApiKeyError ? err.message : msg(err);
+        warn(`context pull failed, continuing without maind context: ${reason}`);
+        const emptyManifest = buildManifest([], [], meta);
+        emptyManifest.error = reason;
+        try {
+            writeArtifact(opts.out, failOpenMarkdown(meta, reason));
+            writeArtifact(opts.manifest, JSON.stringify(emptyManifest, null, 2) + "\n");
+        }
+        catch (writeErr) {
+            warn(`could not write fail-open artifacts: ${msg(writeErr)}`);
+            return 1; // truly unwritable output path — signal it, but this is rare
+        }
+        return 0;
+    }
+}
+function deriveQuery(opts) {
+    const parts = [...opts.stack, ...opts.tools, ...opts.languages];
+    return parts.length > 0 ? parts.join(" ") : "common build and CI pitfalls";
+}
+function failOpenMarkdown(meta, reason) {
+    return [
+        "<!-- Generated by `maind context` (fail-open path). -->",
+        `<!-- generated_at: ${meta.generatedAt} -->`,
+        "",
+        "# maind context",
+        "",
+        `_maind context was unavailable for this run: ${reason}_`,
+        "",
+        "The build can proceed normally — this file is informational only.",
+        "",
+    ].join("\n");
+}
+function msg(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function warn(line) {
+    process.stderr.write(`maind context: ${line}\n`);
+}
+//# sourceMappingURL=context.js.map

package/build/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,mFAAmF;AACnF,mFAAmF;AACnF,kFAAkF;AAClF,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,aAAa,EACb,qBAAqB,GAMtB,MAAM,aAAa,CAAC;AAgBrB,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC;SACL,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAsB,EAAE;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACvD,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnG,OAAO;QACL,KAAK;QACL,SAAS;QACT,8FAA8F;QAC9F,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;QACnD,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;QAC7B,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,mBAAmB;QACxC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,sBAAsB;QACrD,MAAM;QACN,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI;QAC7D,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI;QAChC,aAAa,EAAE,OAAO;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,MAAM;IACb,yFAAyF;IACzF,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAgB;QACxB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,MAAM,EAAE;QACrB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,2BAA2B;KAChF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEhC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;SACjC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,gFAAgF;QAChF,6CAA6C;QAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAsB,gBAAgB,EAAE;YAC1E,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,8CAA8C;SACjF,CAAC,CAAC;QACH,MAAM,OAAO,GAAa,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,IAAI,WAAW,GAA2B,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAkB,sBAAsB,EAAE;gBAC9E,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC3D,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAAE,WAAW,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QACxF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,2DAA2D,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3E,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAExG,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,OAAO,CAAC,MAAM,cAAc,WAAW,CAAC,MAAM,eAAe;YACnF,KAAK,IAAI,CAAC,GAAG,eAAe,IAAI,CAAC,QAAQ,KAAK,CACjD,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kFAAkF;QAClF,oDAAoD;QACpD,MAAM,MAAM,GAAG,GAAG,YAAY,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC,0DAA0D,MAAM,EAAE,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAClD,aAAa,CAAC,KAAK,GAAG,MAAM,CAAC;QAC7B,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACxD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,wCAAwC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC,CAAC,6DAA6D;QACzE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAoB;IACvC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAiB,EAAE,MAAc;IACzD,OAAO;QACL,yDAAyD;QACzD,sBAAsB,IAAI,CAAC,WAAW,MAAM;QAC5C,EAAE;QACF,iBAAiB;QACjB,EAAE;QACF,gDAAgD,MAAM,GAAG;QACzD,EAAE;QACF,mEAAmE;QACnE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,GAAG,CAAC,GAAY;IACvB,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC;AACnD,CAAC"}

package/build/index.js

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+//
+// @maind-dev/cli — entry point.
+//
+// Headless companion to the maind MCP server, built for CI. Unlike the
+// mcp-bridge (which proxies a live stdio MCP client through a device-bound
+// session), this CLI is a one-shot request/response tool: it authenticates from
+// MAIND_API_KEY, calls a few read-only maind tools, and writes files.
+//
+// STDOUT is reserved for command results that are meant to be piped; all
+// diagnostics go to STDERR. Today only the `context` command exists.
+import { parseContextArgs, runContext } from "./context.js";
+const VERSION = "0.1.0";
+const HELP = `maind ${VERSION} — headless maind CLI for CI
+
+Usage:
+  maind context [options]      Pull stack-relevant lessons + conventions into the runner
+  maind --help                 Show this help
+  maind --version              Print version
+
+context options:
+  --stack <a,b>          Stack hint (seeds the platforms filter), e.g. nextjs,supabase
+  --platforms <a,b>      Explicit platforms filter (overrides --stack)
+  --tools <a,b>          Tool filter, e.g. claude-code
+  --languages <a,b>      Language filter, e.g. typescript
+  --query <text>         Search query (defaults to the stack/tool/language terms)
+  --budget <n>           Max lessons to pull (1-50, default 15; server caps search at 10)
+  --out <path>           Context markdown output (default .maind/context.md)
+  --manifest <path>      Manifest JSON output (default .maind/manifest.json)
+  --run-ref <id>         Build identifier for the manifest (default \$GITHUB_RUN_ID)
+  --mcp-url <url>        Override MCP endpoint (default \$MAIND_MCP_URL or production)
+
+Auth:
+  Reads MAIND_API_KEY (a read-scoped CI key from https://maind.dev/keys), or falls
+  back to a paired bridge key on this machine. The context pull is fail-open: on any
+  error it still writes explanatory artifacts and exits 0 so the build proceeds.
+`;
+async function main() {
+    const argv = process.argv.slice(2);
+    const cmd = argv[0];
+    if (!cmd || cmd === "--help" || cmd === "-h" || cmd === "help") {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    if (cmd === "--version" || cmd === "-v") {
+        process.stdout.write(VERSION + "\n");
+        return 0;
+    }
+    if (cmd === "context") {
+        return runContext(parseContextArgs(argv.slice(1)));
+    }
+    process.stderr.write(`maind: unknown command '${cmd}'. Run 'maind --help'.\n`);
+    return 2;
+}
+main()
+    .then((code) => process.exit(code))
+    .catch((err) => {
+    // Defensive backstop — runContext is already fail-open, so reaching here means
+    // an unexpected programming error. Surface it on stderr and exit non-zero.
+    process.stderr.write(`maind: fatal: ${err instanceof Error ? err.stack ?? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,EAAE;AACF,gCAAgC;AAChC,EAAE;AACF,uEAAuE;AACvE,2EAA2E;AAC3E,gFAAgF;AAChF,sEAAsE;AACtE,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AAErE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE5D,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,MAAM,IAAI,GAAG,SAAS,OAAO;;;;;;;;;;;;;;;;;;;;;;;CAuB5B,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEpB,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,0BAA0B,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,IAAI,EAAE;KACH,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACb,+EAA+E;IAC/E,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/build/mcp-client.js

@@ -0,0 +1,221 @@
+// Minimal Streamable-HTTP MCP client for the maind CLI.
+//
+// Intentionally thin — same philosophy as apps/mcp-bridge/src/forward.ts, but
+// instead of piping JSON-RPC frames to stdout it performs a request/response
+// round-trip and returns the parsed result. We don't pull in the full MCP SDK:
+// the CLI only needs initialize → notifications/initialized → tools/call.
+//
+// Streamable HTTP means each POST may answer with a one-shot JSON body OR a
+// text/event-stream. Both are unpacked to a single JSON-RPC message here.
+const DEFAULT_MCP_URL = "https://mcp.maind.dev/mcp";
+const CLIENT_FAMILY = "maind-cli";
+export class McpError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = "McpError";
+    }
+}
+export class McpClient {
+    mcpUrl;
+    apiKey;
+    deviceId;
+    clientVersion;
+    sessionId = null;
+    nextId = 1;
+    initialized = false;
+    constructor(cfg) {
+        this.apiKey = cfg.apiKey;
+        this.deviceId = cfg.deviceId;
+        this.clientVersion = cfg.clientVersion;
+        this.mcpUrl = cfg.mcpUrl ?? process.env.MAIND_MCP_URL ?? DEFAULT_MCP_URL;
+    }
+    headers() {
+        const h = {
+            "content-type": "application/json",
+            accept: "application/json, text/event-stream",
+            authorization: `Bearer ${this.apiKey}`,
+            "x-maind-client-family": CLIENT_FAMILY,
+            "x-maind-client-version": this.clientVersion,
+        };
+        if (this.deviceId)
+            h["x-maind-device-id"] = this.deviceId;
+        if (this.sessionId)
+            h["mcp-session-id"] = this.sessionId;
+        return h;
+    }
+    /** Performs the MCP handshake: initialize, capture session-id, send initialized. */
+    async connect() {
+        if (this.initialized)
+            return;
+        const res = await this.post({
+            jsonrpc: "2.0",
+            id: this.nextId++,
+            method: "initialize",
+            params: {
+                protocolVersion: "2025-06-18",
+                capabilities: {},
+                clientInfo: { name: CLIENT_FAMILY, version: this.clientVersion },
+            },
+        });
+        if (res.message.error) {
+            throw new McpError(`initialize failed: ${res.message.error.message}`, res.message.error.code);
+        }
+        if (res.sessionId)
+            this.sessionId = res.sessionId;
+        // Per MCP spec the client must acknowledge with an initialized notification
+        // before issuing tool calls. Notifications carry no id and return 202.
+        await this.post({ jsonrpc: "2.0", method: "notifications/initialized" });
+        this.initialized = true;
+    }
+    /**
+     * Calls a maind MCP tool and returns its decoded JSON payload. maind tools
+     * return their result as a JSON string inside content[0].text, so we parse it.
+     */
+    async callTool(name, args) {
+        if (!this.initialized)
+            await this.connect();
+        const res = await this.post({
+            jsonrpc: "2.0",
+            id: this.nextId++,
+            method: "tools/call",
+            params: { name, arguments: args },
+        });
+        if (res.message.error) {
+            throw new McpError(`tool ${name} failed: ${res.message.error.message}`, res.message.error.code);
+        }
+        const result = res.message.result;
+        const text = result?.content?.find((c) => c.type === "text" && typeof c.text === "string")?.text;
+        if (typeof text !== "string") {
+            throw new McpError(`tool ${name} returned no text content`);
+        }
+        const parsed = parseJsonLoose(text);
+        if (parsed === undefined) {
+            throw new McpError(`tool ${name} returned non-JSON text`);
+        }
+        return parsed;
+    }
+    /** POSTs a JSON-RPC frame and unpacks the JSON-or-SSE response. */
+    async post(frame) {
+        let response;
+        try {
+            response = await fetch(this.mcpUrl, {
+                method: "POST",
+                headers: this.headers(),
+                body: JSON.stringify(frame),
+            });
+        }
+        catch (err) {
+            throw new McpError(`network error contacting ${this.mcpUrl}: ${stringifyErr(err)}`);
+        }
+        const sid = response.headers.get("mcp-session-id");
+        if (response.status === 401) {
+            const body = await response.text().catch(() => "");
+            throw new McpError(`auth rejected (401): ${body.slice(0, 200)}`, 401);
+        }
+        // 202 Accepted: a notification with no body (e.g. notifications/initialized).
+        if (response.status === 202) {
+            return { message: { jsonrpc: "2.0", result: null }, sessionId: sid };
+        }
+        if (!response.ok) {
+            const body = await response.text().catch(() => "");
+            throw new McpError(`upstream HTTP ${response.status}: ${body.slice(0, 300)}`, response.status);
+        }
+        const contentType = response.headers.get("content-type") ?? "";
+        const raw = contentType.startsWith("text/event-stream")
+            ? await readSseMessage(response)
+            : await response.text();
+        if (raw.trim().length === 0) {
+            return { message: { jsonrpc: "2.0", result: null }, sessionId: sid };
+        }
+        let message;
+        try {
+            message = JSON.parse(raw);
+        }
+        catch {
+            throw new McpError(`could not parse JSON-RPC response: ${raw.slice(0, 200)}`);
+        }
+        return { message, sessionId: sid };
+    }
+}
+/**
+ * Reads an SSE body and returns the last complete `data:` payload — for a
+ * request/response round-trip that is the single JSON-RPC response frame.
+ */
+async function readSseMessage(response) {
+    if (!response.body)
+        return "";
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let dataLines = [];
+    let lastPayload = "";
+    const flush = () => {
+        if (dataLines.length === 0)
+            return;
+        const payload = dataLines.join("\n").trim();
+        dataLines = [];
+        if (payload.length > 0)
+            lastPayload = payload;
+    };
+    while (true) {
+        const { value, done } = await reader.read();
+        if (done)
+            break;
+        buffer += decoder.decode(value, { stream: true });
+        let nl;
+        while ((nl = buffer.indexOf("\n")) !== -1) {
+            const rawLine = buffer.slice(0, nl);
+            buffer = buffer.slice(nl + 1);
+            const line = rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine;
+            if (line === "") {
+                flush();
+                continue;
+            }
+            if (line.startsWith(":"))
+                continue; // keep-alive comment
+            if (line.startsWith("data:"))
+                dataLines.push(line.slice(5).replace(/^\s/, ""));
+        }
+    }
+    flush();
+    return lastPayload;
+}
+function stringifyErr(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/**
+ * Parses a tool's text payload as JSON, tolerating a leading human-readable
+ * prefix line. search_lessons returns pure JSON, but get_session_briefing
+ * prefixes its JSON with "SESSION BRIEFING ...:\n\n". We first try a strict
+ * parse, then fall back to the largest brace/bracket-delimited substring.
+ * Returns undefined when no JSON can be recovered.
+ */
+function parseJsonLoose(text) {
+    const trimmed = text.trim();
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch {
+        // fall through to substring extraction
+    }
+    const firstObj = trimmed.indexOf("{");
+    const firstArr = trimmed.indexOf("[");
+    const candidates = [firstObj, firstArr].filter((i) => i >= 0);
+    if (candidates.length === 0)
+        return undefined;
+    const start = Math.min(...candidates);
+    const open = trimmed[start];
+    const close = open === "{" ? "}" : "]";
+    const end = trimmed.lastIndexOf(close);
+    if (end <= start)
+        return undefined;
+    try {
+        return JSON.parse(trimmed.slice(start, end + 1));
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=mcp-client.js.map

package/build/mcp-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client.js","sourceRoot":"","sources":["../src/mcp-client.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAC1E,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAE1E,MAAM,eAAe,GAAG,2BAA2B,CAAC;AACpD,MAAM,aAAa,GAAG,WAAW,CAAC;AAuBlC,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IAFlB,YACE,OAAe,EACC,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IACH,MAAM,CAAS;IACf,MAAM,CAAS;IACf,QAAQ,CAAgB;IACxB,aAAa,CAAS;IAC/B,SAAS,GAAkB,IAAI,CAAC;IAChC,MAAM,GAAG,CAAC,CAAC;IACX,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,GAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,eAAe,CAAC;IAC3E,CAAC;IAEO,OAAO;QACb,MAAM,CAAC,GAA2B;YAChC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,qCAAqC;YAC7C,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;YACtC,uBAAuB,EAAE,aAAa;YACtC,wBAAwB,EAAE,IAAI,CAAC,aAAa;SAC7C,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ;YAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1D,IAAI,IAAI,CAAC,SAAS;YAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;YACjB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE;gBACN,eAAe,EAAE,YAAY;gBAC7B,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE;aACjE;SACF,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,QAAQ,CAAC,sBAAsB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,GAAG,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAClD,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAc,IAAY,EAAE,IAA6B;QACrE,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;YACjB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SAClC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,YAAY,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAoC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC;QACjG,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,2BAA2B,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,yBAAyB,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAW,CAAC;IACrB,CAAC;IAED,mEAAmE;IAC3D,KAAK,CAAC,IAAI,CAChB,KAA8B;QAE9B,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBAClC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;gBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,QAAQ,CAAC,4BAA4B,IAAI,CAAC,MAAM,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAEnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,QAAQ,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,8EAA8E;QAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,QAAQ,CAAC,iBAAiB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,mBAAmB,CAAC;YACrD,CAAC,CAAC,MAAM,cAAc,CAAC,QAAQ,CAAC;YAChC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE1B,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACvE,CAAC;QACD,IAAI,OAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,sCAAsC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACrC,CAAC;CACF;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,QAAkB;IAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,WAAW,GAAG,EAAE,CAAC;IAErB,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,SAAS,GAAG,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,WAAW,GAAG,OAAO,CAAC;IAChD,CAAC,CAAC;IAEF,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAChB,KAAK,EAAE,CAAC;gBACR,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,qBAAqB;YACzD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,GAAG,IAAI,KAAK;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/build/render.js

@@ -0,0 +1,81 @@
+// Rendering of the two CI artifacts:
+//   - context.md   — lesson bodies + a convention checklist for the agent in the runner
+//   - manifest.json — the served lesson/convention IDs+versions (attribution backbone)
+//
+// The manifest is the load-bearing piece for later phases: a build-outcome signal
+// is only attributable to a lesson if we recorded that the lesson was actually in
+// the agent's context for that run. context.md is human/agent-facing; manifest.json
+// is machine-facing.
+export function buildManifest(lessons, conventions, meta) {
+    return {
+        schema: "maind.context.manifest/v1",
+        generated_at: meta.generatedAt,
+        key_prefix: meta.keyPrefix,
+        run_ref: meta.runRef,
+        stack: meta.stack,
+        query: meta.query,
+        served: lessons.map((l) => ({
+            id: l.id,
+            version: typeof l.version === "number" ? l.version : null,
+            tier: l.tier ?? null,
+            last_validated_at: l.last_validated_at ?? null,
+        })),
+        conventions: conventions.map((c) => c.id),
+    };
+}
+export function renderContextMarkdown(lessons, conventions, meta) {
+    const lines = [];
+    lines.push("<!-- Generated by `maind context` — do not edit by hand. -->");
+    lines.push(`<!-- generated_at: ${meta.generatedAt} | key: ${meta.keyPrefix}${meta.runRef ? ` | run: ${meta.runRef}` : ""} -->`);
+    lines.push("");
+    lines.push("# maind context");
+    lines.push("");
+    lines.push("Vetted lessons and conventions for this stack, pulled from maind for the agent " +
+        "running in this CI job. Treat each lesson as reference material — weigh it against " +
+        "the actual diff, don't apply blindly.");
+    lines.push("");
+    const stackLabel = meta.stack.length > 0 ? meta.stack.join(", ") : "(none)";
+    lines.push(`**Stack:** ${stackLabel} · **Lessons:** ${lessons.length} · **Conventions:** ${conventions.length}`);
+    lines.push("");
+    if (conventions.length > 0) {
+        lines.push("## Always-on conventions");
+        lines.push("");
+        for (const c of conventions) {
+            lines.push(`- **${c.title}** \`${c.id}\``);
+        }
+        lines.push("");
+    }
+    if (lessons.length === 0) {
+        lines.push("## Lessons");
+        lines.push("");
+        lines.push("_No stack-relevant lessons were returned for this query._");
+        lines.push("");
+        return lines.join("\n");
+    }
+    lines.push("## Lessons");
+    lines.push("");
+    for (const l of lessons) {
+        lines.push(`### ${l.title}`);
+        const meta2 = [`\`${l.id}\``];
+        if (l.tier)
+            meta2.push(l.tier);
+        if (typeof l.version === "number")
+            meta2.push(`v${l.version}`);
+        if (l.last_validated_at)
+            meta2.push(`validated ${l.last_validated_at}`);
+        lines.push(meta2.join(" · "));
+        lines.push("");
+        if (l.summary) {
+            lines.push(`> ${l.summary}`);
+            lines.push("");
+        }
+        if (l.body && l.body.trim().length > 0) {
+            lines.push(l.body.trim());
+            lines.push("");
+        }
+        lines.push("---");
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=render.js.map

package/build/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,wFAAwF;AACxF,uFAAuF;AACvF,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,oFAAoF;AACpF,qBAAqB;AAoErB,MAAM,UAAU,aAAa,CAC3B,OAAiB,EACjB,WAAmC,EACnC,IAAiB;IAEjB,OAAO;QACL,MAAM,EAAE,2BAA2B;QACnC,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACzD,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;YACpB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;SAC/C,CAAC,CAAC;QACH,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAiB,EACjB,WAAmC,EACnC,IAAiB;IAEjB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,WAAW,WAAW,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,iFAAiF;QAC/E,qFAAqF;QACrF,uCAAuC,CAC1C,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,cAAc,UAAU,mBAAmB,OAAO,CAAC,MAAM,uBAAuB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACjH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,iBAAiB;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@maind-dev/cli",
+  "version": "0.1.0",
+  "description": "Headless maind CLI — pull stack-relevant lessons into CI runners and emit a context manifest for build-outcome attribution. No device flow; authenticates from MAIND_API_KEY.",
+  "type": "module",
+  "main": "./build/index.js",
+  "bin": {
+    "maind": "./build/index.js"
+  },
+  "files": [
+    "build",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc && chmod +x build/index.js",
+    "prepublishOnly": "pnpm build",
+    "start": "node build/index.js",
+    "dev": "node --import tsx src/index.ts",
+    "test": "node --import tsx --test test/**/*.test.ts",
+    "type-check": "tsc --noEmit",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "tsx": "^4.7.0",
+    "typescript": "^5.4.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "mcp",
+    "maind",
+    "ci",
+    "cli",
+    "context"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  }
+}