@productbrain/cli 0.1.0-beta.1131 → 0.1.0-beta.11313

package/dist/generated/routeLatencyBudget.generated.js

@@ -0,0 +1,264 @@
+// GENERATED by scripts/generate-route-latency-budget.mjs from packages/kernel-client/src/routeLatencyBudget.ts
+// and packages/kernel-client/src/generated/routes.generated.ts.
+// DO NOT EDIT. Run `npm run route-budget:codegen` to regenerate.
+//
+// WP-575 (TEN-2917, TEN-1126), commits_to DEC-64. This file is emitted IDENTICALLY into
+// packages/mcp-server and packages/cli so the two connectors cannot disagree about how
+// long a gateway route may take — the defect this work package removes was exactly that
+// disagreement (MCP hardcoded a blanket 10s, the CLI set none at all).
+//
+// The rationale — why route TYPE is the structural predictor of LLM exposure, and how
+// each value is grounded in DEC-64 rather than invented — lives with the declaration in
+// packages/kernel-client/src/routeLatencyBudget.ts. Read that file before changing a
+// number here; changing it HERE does nothing, the next codegen run overwrites it.
+//
+// Why a copy and not an import: both connectors consume @productbrain/kernel-client
+// TYPE-ONLY (mcp-server via a tsconfig paths alias for Railway's isolated Docker build,
+// DEC-701; cli as a devDependency it must not emit into its published dist/). A budget
+// sets an AbortSignal, so it is runtime code and cannot be type-erased. See the
+// generator header for the full constraint.
+/** The budget table, copied verbatim from the SSOT. Milliseconds. */
+export const ROUTE_LATENCY_BUDGET_MS = {
+    query: 10_000,
+    mutation: 10_000,
+    action: 30_000,
+};
+/**
+ * PER-ROUTE OVERRIDES — routes whose OWN server-side deadline exceeds their type's budget
+ * (PR #533 review, Codex P1). Route type predicts LLM EXPOSURE, not LLM COUNT: a flat
+ * action budget assumed every action is one inline LLM call, and shipped actions declare
+ * far longer deadlines. Bounding those at the type budget aborts a call the server is
+ * still legitimately working on. Each value is derived from a deadline the SERVER
+ * declares — see the SSOT for the citation behind every number.
+ */
+export const ROUTE_LATENCY_BUDGET_OVERRIDE_MS = {
+    // convex/intelligence/spineCheck.ts:210 sets SPINE_CHECK_WALL_CLOCK_BUDGET_MS = 4 * 60_000
+    // for its SEQUENTIAL strategy probes (:225-239, deliberately not Promise.all), and :215
+    // reserves a tail of one 25s probe + an optional 25s story pass + 10s. The server's own
+    // design ceiling is scheduleSpineCheck's 5-min MAX_RUN_IN_FLIGHT_MS lease (:206-209).
+    // 5.5 min sits above that ceiling and far under Convex's 10-min action cap.
+    'quality.spineCheck': 330_000,
+};
+/**
+ * The widest declared budget — the fail-safe default for a route name this map does not
+ * know. Derived from the tables rather than restated, so it cannot drift if a value moves.
+ * Spans the overrides too, so the unknown-route default is never TIGHTER than a budget
+ * already granted to a known route.
+ */
+export const WIDEST_ROUTE_LATENCY_BUDGET_MS = Math.max(...Object.values(ROUTE_LATENCY_BUDGET_MS), ...Object.values(ROUTE_LATENCY_BUDGET_OVERRIDE_MS));
+/** Every gateway route's Convex function type, from convex/http.ts's registry. */
+const ROUTE_TYPE_ENTRIES = {
+    "resolveWorkspace": "query",
+    "feedback.submit": "mutation",
+    "feedback.listOwn": "query",
+    "feedback.list": "query",
+    "feedback.note": "mutation",
+    "feedback.group": "action",
+    "feedback.status": "mutation",
+    "organisation.status": "query",
+    "organisation.removeMembership": "mutation",
+    "organisation.setOwnership": "mutation",
+    "organisation.hierarchy.show": "query",
+    "organisation.hierarchy.setParent": "mutation",
+    "organisation.hierarchy.clearParent": "mutation",
+    "acceptPolicy.approve": "mutation",
+    "acceptPolicy.retire": "mutation",
+    "acceptPolicy.list": "query",
+    "chain.seed": "mutation",
+    "chain.listCollections": "query",
+    "chain.getCollection": "query",
+    "chain.getCollectionFields": "query",
+    "chain.auditCollections": "query",
+    "chain.exportDefinitions": "query",
+    "chain.updateCollection": "mutation",
+    "chain.listEntries": "query",
+    "chain.listEntriesPaged": "query",
+    "chain.getEntry": "query",
+    "chain.preflightEntry": "query",
+    "chain.listByRole": "query",
+    "chain.getQualityVerdict": "query",
+    "chain.batchGetEntries": "query",
+    "chain.createEntry": "action",
+    "chain.updateEntry": "mutation",
+    "chain.restoreArchivedEntry": "mutation",
+    "chain.moveToCollection": "mutation",
+    "outcomes.recordReading": "mutation",
+    "outcomes.listReadings": "query",
+    "outcomes.showOutcome": "query",
+    "conflicts.list": "query",
+    "conflicts.resolve": "mutation",
+    "conflicts.summary": "query",
+    "conflicts.snooze": "mutation",
+    "conflicts.reverdict": "mutation",
+    "direction.list": "query",
+    "direction.refresh": "action",
+    "direction.defer": "mutation",
+    "question.create": "mutation",
+    "question.assign": "mutation",
+    "question.answer": "mutation",
+    "question.forceClose": "mutation",
+    "question.list": "query",
+    "chain.classifyCollection": "action",
+    "chain.classifyStrategyCategory": "query",
+    "chain.batchClassifyHeuristic": "query",
+    "chain.resolveCollection": "action",
+    "chain.searchEntries": "query",
+    "chain.searchByCanonicalName": "query",
+    "chain.commitEntry": "mutation",
+    "chain.verifyEntry": "mutation",
+    "chain.confirmEntry": "mutation",
+    "chain.tickChecklistItem": "mutation",
+    "chain.batchCommitConstellation": "mutation",
+    "chain.listEntryHistory": "query",
+    "chain.listEntryVersions": "query",
+    "chain.createEntryRelation": "mutation",
+    "chain.createEntryRelations": "mutation",
+    "chain.removeEntryRelation": "mutation",
+    "chain.decomposeContent": "action",
+    "chain.normalizeEntryDataPreview": "action",
+    "chain.listEntryRelations": "query",
+    "chain.evaluateCoherence": "query",
+    "chain.validateCommitConstellation": "query",
+    "chain.getCaptureContract": "query",
+    "chain.gatherContext": "query",
+    "chain.getConstellation": "query",
+    "agentKnowledge.facilitateEnvelope": "action",
+    "agentKnowledge.wrapupEnvelope": "action",
+    "agentKnowledge.captureEnvelope": "action",
+    "chain.graphGatherContext": "query",
+    "chain.assembleBuildContext": "query",
+    "chain.qualityCheck": "query",
+    "chain.changeDetection": "query",
+    "chain.structuralAggregation": "query",
+    "chain.detectSemanticConflicts": "action",
+    "chain.taskAwareGatherContext": "query",
+    "chain.journeyAwareGatherContext": "query",
+    "chain.resolveTaskStartup": "query",
+    "chain.resolveTaskStartupHybrid": "action",
+    "chain.taskAwareHybridGatherContext": "action",
+    "chain.gatherFromSeeds": "query",
+    "chain.getEntryNeighborhood": "query",
+    "chain.deepChainWalk": "action",
+    "chain.recordBriefRun": "mutation",
+    "chain.getLastBriefRun": "query",
+    "chain.incrementalChanges": "query",
+    "chain.compoundQuery": "action",
+    "chain.recordSessionSignal": "mutation",
+    "chain.workspaceReadiness": "query",
+    "chain.getCaptureHealth": "query",
+    "chain.getGroundingHealth": "query",
+    "chain.recordGroundingOutcome": "mutation",
+    "chain.capture": "query",
+    "chain.checkCardinalityWarning": "query",
+    "chain.ingestDocument": "action",
+    "chain.getOrientEntries": "query",
+    "chain.getOrientView": "action",
+    "chain.getRitualsSurface": "query",
+    "chain.getGovernanceWithRelations": "action",
+    "chain.classifyGovernance": "query",
+    "chain.getVocabulary": "query",
+    "scoreboard.get": "action",
+    "rework.report": "mutation",
+    "chain.listLabels": "query",
+    "chain.createLabel": "mutation",
+    "chain.updateLabel": "mutation",
+    "chain.deleteLabel": "mutation",
+    "chain.applyLabel": "mutation",
+    "chain.removeLabel": "mutation",
+    "chain.listEntriesByLabel": "query",
+    "gaps.record": "mutation",
+    "gaps.resolve": "mutation",
+    "gaps.top": "query",
+    "gaps.stats": "query",
+    "agent.startSession": "mutation",
+    "agent.resumeSession": "mutation",
+    "agent.closeSession": "mutation",
+    "agent.markOriented": "mutation",
+    "agent.touchSession": "mutation",
+    "agent.recordActivity": "mutation",
+    "agent.getSession": "query",
+    "agent.getActiveSession": "query",
+    "agent.activityStats": "query",
+    "agent.getActivityByDay": "query",
+    "agent.validateSession": "query",
+    "agent.getSessionWrapup": "query",
+    "agent.recordWrapup": "mutation",
+    "agent.reportOrientMetric": "mutation",
+    "agent.listSessions": "query",
+    "agent.showConversation": "query",
+    "usage.getWorkspaceSummary": "query",
+    "quality.evaluateHeuristicAndSchedule": "mutation",
+    "quality.reEvaluateEntry": "mutation",
+    "quality.getCachedVerdict": "query",
+    "quality.getLatestVerdictForEntry": "query",
+    "quality.spineCheck": "action",
+    "quality.scheduleSpineCheck": "mutation",
+    "quality.getLatestSpineVerdict": "query",
+    "quality.checks": "query",
+    "quality.roleSuggestions": "query",
+    "quality.policyRows": "query",
+    "workspace.health": "query",
+    "workspace.healthAll": "query",
+    "performance.getVitalsSummary": "query",
+    "performance.getApiOverview": "query",
+    "performance.getRouteBreakdown": "query",
+    "performance.getSlowSamples": "query",
+    "performance.getSampleCount": "query",
+    "chainwork.getWorkflowRun": "query",
+    "chainwork.getLatestWorkflowRun": "query",
+    "chainwork.recordWorkflowCheckpoint": "mutation",
+    "chainwork.finalizeWorkflowRun": "action",
+    "chainwork.getLastVerifiedBrief": "query",
+    "staging.getCommittedSourceRefs": "query",
+    "staging.commitStagingEntryWithClassification": "action",
+    "organisation.seatInRole": "mutation",
+    "organisation.unseatFromRole": "mutation",
+    "apiKeys.revokeCallingKey": "mutation",
+    "people.invite": "mutation",
+    "people.list": "query",
+    "llm.dailyBudget": "query",
+    "chain.search": "query",
+    "organisation.hierarchy.release": "mutation",
+    "organisation.hierarchy.accept": "mutation",
+    "organisation.hierarchy.refuse": "mutation",
+};
+/**
+ * NULL-PROTOTYPE, deliberately (PR #533 review, Codex P2).
+ *
+ * A plain object literal inherits Object.prototype, so an unknown route name that
+ * collides with an inherited member — `toString`, `constructor`, `valueOf` — resolves to a
+ * TRUTHY function instead of falling through to the widest-budget default below. That
+ * yielded `AbortSignal.timeout(undefined)`, which THROWS before the call ever reaches the
+ * gateway — turning the fail-safe default into a hard failure.
+ *
+ * The SSOT scans an array (`GATEWAY_ROUTES.find`) and has no such hole, so a plain-object
+ * copy DISAGREED with the source it is generated from — precisely the connector drift this
+ * file exists to end. A null prototype restores parity for every consumer of the map at
+ * once (`latencyBudgetMsForRoute` here, `routeMayMutate` in both connectors' seams) rather
+ * than guarding each lookup and leaving the next one to rediscover it.
+ */
+export const ROUTE_TYPE_BY_NAME = Object.assign(Object.create(null), ROUTE_TYPE_ENTRIES);
+/** Budget for a route TYPE. Total over the three kinds the registry can produce. */
+export function latencyBudgetMsForRouteType(type) {
+    return ROUTE_LATENCY_BUDGET_MS[type];
+}
+/**
+ * Budget for a route by NAME.
+ *
+ * FAILS SAFE, DELIBERATELY: an unknown name gets the WIDEST budget, not the tightest and
+ * not a throw. Guessing low on a route we cannot classify would abort a call still
+ * legitimately in flight and re-create the exact false-failure this work package removes.
+ * Guessing high only delays surfacing a genuinely stuck call — and an unknown name is
+ * almost always a caller bug the gateway rejects in milliseconds anyway.
+ */
+export function latencyBudgetMsForRoute(routeName) {
+    // `Object.hasOwn`, not truthiness: the override table is a plain literal, so a bare
+    // lookup would resolve INHERITED members to a truthy value. Same hole the null
+    // prototype closes above, guarded here because this table stays a plain literal.
+    if (Object.hasOwn(ROUTE_LATENCY_BUDGET_OVERRIDE_MS, routeName)) {
+        return ROUTE_LATENCY_BUDGET_OVERRIDE_MS[routeName];
+    }
+    const type = ROUTE_TYPE_BY_NAME[routeName];
+    return type ? latencyBudgetMsForRouteType(type) : WIDEST_ROUTE_LATENCY_BUDGET_MS;
+}
+//# sourceMappingURL=routeLatencyBudget.generated.js.map

package/dist/generated/routeLatencyBudget.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routeLatencyBudget.generated.js","sourceRoot":"","sources":["../../src/generated/routeLatencyBudget.generated.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,gEAAgE;AAChE,iEAAiE;AACjE,EAAE;AACF,wFAAwF;AACxF,uFAAuF;AACvF,wFAAwF;AACxF,uEAAuE;AACvE,EAAE;AACF,sFAAsF;AACtF,wFAAwF;AACxF,qFAAqF;AACrF,kFAAkF;AAClF,EAAE;AACF,oFAAoF;AACpF,wFAAwF;AACxF,uFAAuF;AACvF,gFAAgF;AAChF,4CAA4C;AAI5C,qEAAqE;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,MAAM;CACL,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC/C,2FAA2F;IAC3F,wFAAwF;IACxF,wFAAwF;IACxF,sFAAsF;IACtF,4EAA4E;IAC5E,oBAAoB,EAAE,OAAO;CACpB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAW,IAAI,CAAC,GAAG,CAC7D,GAAG,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,EACzC,GAAG,MAAM,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAClD,CAAC;AAEF,kFAAkF;AAClF,MAAM,kBAAkB,GAA+C;IACtE,kBAAkB,EAAE,OAAO;IAC3B,iBAAiB,EAAE,UAAU;IAC7B,kBAAkB,EAAE,OAAO;IAC3B,eAAe,EAAE,OAAO;IACxB,eAAe,EAAE,UAAU;IAC3B,gBAAgB,EAAE,QAAQ;IAC1B,iBAAiB,EAAE,UAAU;IAC7B,qBAAqB,EAAE,OAAO;IAC9B,+BAA+B,EAAE,UAAU;IAC3C,2BAA2B,EAAE,UAAU;IACvC,6BAA6B,EAAE,OAAO;IACtC,kCAAkC,EAAE,UAAU;IAC9C,oCAAoC,EAAE,UAAU;IAChD,sBAAsB,EAAE,UAAU;IAClC,qBAAqB,EAAE,UAAU;IACjC,mBAAmB,EAAE,OAAO;IAC5B,YAAY,EAAE,UAAU;IACxB,uBAAuB,EAAE,OAAO;IAChC,qBAAqB,EAAE,OAAO;IAC9B,2BAA2B,EAAE,OAAO;IACpC,wBAAwB,EAAE,OAAO;IACjC,yBAAyB,EAAE,OAAO;IAClC,wBAAwB,EAAE,UAAU;IACpC,mBAAmB,EAAE,OAAO;IAC5B,wBAAwB,EAAE,OAAO;IACjC,gBAAgB,EAAE,OAAO;IACzB,sBAAsB,EAAE,OAAO;IAC/B,kBAAkB,EAAE,OAAO;IAC3B,yBAAyB,EAAE,OAAO;IAClC,uBAAuB,EAAE,OAAO;IAChC,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,UAAU;IAC/B,4BAA4B,EAAE,UAAU;IACxC,wBAAwB,EAAE,UAAU;IACpC,wBAAwB,EAAE,UAAU;IACpC,uBAAuB,EAAE,OAAO;IAChC,sBAAsB,EAAE,OAAO;IAC/B,gBAAgB,EAAE,OAAO;IACzB,mBAAmB,EAAE,UAAU;IAC/B,mBAAmB,EAAE,OAAO;IAC5B,kBAAkB,EAAE,UAAU;IAC9B,qBAAqB,EAAE,UAAU;IACjC,gBAAgB,EAAE,OAAO;IACzB,mBAAmB,EAAE,QAAQ;IAC7B,iBAAiB,EAAE,UAAU;IAC7B,iBAAiB,EAAE,UAAU;IAC7B,iBAAiB,EAAE,UAAU;IAC7B,iBAAiB,EAAE,UAAU;IAC7B,qBAAqB,EAAE,UAAU;IACjC,eAAe,EAAE,OAAO;IACxB,0BAA0B,EAAE,QAAQ;IACpC,gCAAgC,EAAE,OAAO;IACzC,8BAA8B,EAAE,OAAO;IACvC,yBAAyB,EAAE,QAAQ;IACnC,qBAAqB,EAAE,OAAO;IAC9B,6BAA6B,EAAE,OAAO;IACtC,mBAAmB,EAAE,UAAU;IAC/B,mBAAmB,EAAE,UAAU;IAC/B,oBAAoB,EAAE,UAAU;IAChC,yBAAyB,EAAE,UAAU;IACrC,gCAAgC,EAAE,UAAU;IAC5C,wBAAwB,EAAE,OAAO;IACjC,yBAAyB,EAAE,OAAO;IAClC,2BAA2B,EAAE,UAAU;IACvC,4BAA4B,EAAE,UAAU;IACxC,2BAA2B,EAAE,UAAU;IACvC,wBAAwB,EAAE,QAAQ;IAClC,iCAAiC,EAAE,QAAQ;IAC3C,0BAA0B,EAAE,OAAO;IACnC,yBAAyB,EAAE,OAAO;IAClC,mCAAmC,EAAE,OAAO;IAC5C,0BAA0B,EAAE,OAAO;IACnC,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,mCAAmC,EAAE,QAAQ;IAC7C,+BAA+B,EAAE,QAAQ;IACzC,gCAAgC,EAAE,QAAQ;IAC1C,0BAA0B,EAAE,OAAO;IACnC,4BAA4B,EAAE,OAAO;IACrC,oBAAoB,EAAE,OAAO;IAC7B,uBAAuB,EAAE,OAAO;IAChC,6BAA6B,EAAE,OAAO;IACtC,+BAA+B,EAAE,QAAQ;IACzC,8BAA8B,EAAE,OAAO;IACvC,iCAAiC,EAAE,OAAO;IAC1C,0BAA0B,EAAE,OAAO;IACnC,gCAAgC,EAAE,QAAQ;IAC1C,oCAAoC,EAAE,QAAQ;IAC9C,uBAAuB,EAAE,OAAO;IAChC,4BAA4B,EAAE,OAAO;IACrC,qBAAqB,EAAE,QAAQ;IAC/B,sBAAsB,EAAE,UAAU;IAClC,uBAAuB,EAAE,OAAO;IAChC,0BAA0B,EAAE,OAAO;IACnC,qBAAqB,EAAE,QAAQ;IAC/B,2BAA2B,EAAE,UAAU;IACvC,0BAA0B,EAAE,OAAO;IACnC,wBAAwB,EAAE,OAAO;IACjC,0BAA0B,EAAE,OAAO;IACnC,8BAA8B,EAAE,UAAU;IAC1C,eAAe,EAAE,OAAO;IACxB,+BAA+B,EAAE,OAAO;IACxC,sBAAsB,EAAE,QAAQ;IAChC,wBAAwB,EAAE,OAAO;IACjC,qBAAqB,EAAE,QAAQ;IAC/B,yBAAyB,EAAE,OAAO;IAClC,kCAAkC,EAAE,QAAQ;IAC5C,0BAA0B,EAAE,OAAO;IACnC,qBAAqB,EAAE,OAAO;IAC9B,gBAAgB,EAAE,QAAQ;IAC1B,eAAe,EAAE,UAAU;IAC3B,kBAAkB,EAAE,OAAO;IAC3B,mBAAmB,EAAE,UAAU;IAC/B,mBAAmB,EAAE,UAAU;IAC/B,mBAAmB,EAAE,UAAU;IAC/B,kBAAkB,EAAE,UAAU;IAC9B,mBAAmB,EAAE,UAAU;IAC/B,0BAA0B,EAAE,OAAO;IACnC,aAAa,EAAE,UAAU;IACzB,cAAc,EAAE,UAAU;IAC1B,UAAU,EAAE,OAAO;IACnB,YAAY,EAAE,OAAO;IACrB,oBAAoB,EAAE,UAAU;IAChC,qBAAqB,EAAE,UAAU;IACjC,oBAAoB,EAAE,UAAU;IAChC,oBAAoB,EAAE,UAAU;IAChC,oBAAoB,EAAE,UAAU;IAChC,sBAAsB,EAAE,UAAU;IAClC,kBAAkB,EAAE,OAAO;IAC3B,wBAAwB,EAAE,OAAO;IACjC,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,uBAAuB,EAAE,OAAO;IAChC,wBAAwB,EAAE,OAAO;IACjC,oBAAoB,EAAE,UAAU;IAChC,0BAA0B,EAAE,UAAU;IACtC,oBAAoB,EAAE,OAAO;IAC7B,wBAAwB,EAAE,OAAO;IACjC,2BAA2B,EAAE,OAAO;IACpC,sCAAsC,EAAE,UAAU;IAClD,yBAAyB,EAAE,UAAU;IACrC,0BAA0B,EAAE,OAAO;IACnC,kCAAkC,EAAE,OAAO;IAC3C,oBAAoB,EAAE,QAAQ;IAC9B,4BAA4B,EAAE,UAAU;IACxC,+BAA+B,EAAE,OAAO;IACxC,gBAAgB,EAAE,OAAO;IACzB,yBAAyB,EAAE,OAAO;IAClC,oBAAoB,EAAE,OAAO;IAC7B,kBAAkB,EAAE,OAAO;IAC3B,qBAAqB,EAAE,OAAO;IAC9B,8BAA8B,EAAE,OAAO;IACvC,4BAA4B,EAAE,OAAO;IACrC,+BAA+B,EAAE,OAAO;IACxC,4BAA4B,EAAE,OAAO;IACrC,4BAA4B,EAAE,OAAO;IACrC,0BAA0B,EAAE,OAAO;IACnC,gCAAgC,EAAE,OAAO;IACzC,oCAAoC,EAAE,UAAU;IAChD,+BAA+B,EAAE,QAAQ;IACzC,gCAAgC,EAAE,OAAO;IACzC,gCAAgC,EAAE,OAAO;IACzC,8CAA8C,EAAE,QAAQ;IACxD,yBAAyB,EAAE,UAAU;IACrC,6BAA6B,EAAE,UAAU;IACzC,0BAA0B,EAAE,UAAU;IACtC,eAAe,EAAE,UAAU;IAC3B,aAAa,EAAE,OAAO;IACtB,iBAAiB,EAAE,OAAO;IAC1B,cAAc,EAAE,OAAO;IACvB,gCAAgC,EAAE,UAAU;IAC5C,+BAA+B,EAAE,UAAU;IAC3C,+BAA+B,EAAE,UAAU;CAC3C,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+C,MAAM,CAAC,MAAM,CAC1F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAqC,EACvD,kBAAkB,CAClB,CAAC;AAEF,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,IAAsB;IACjE,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACxD,oFAAoF;IACpF,+EAA+E;IAC/E,iFAAiF;IACjF,IAAI,MAAM,CAAC,MAAM,CAAC,gCAAgC,EAAE,SAAS,CAAC,EAAE,CAAC;QAChE,OAAQ,gCAA2D,CAAC,SAAS,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;AAClF,CAAC"}

package/dist/generated/sourceSurfaces.generated.d.ts

@@ -0,0 +1,12 @@
+/**
+ * GENERATED — DO NOT EDIT BY HAND.
+ *
+ * Source of truth: `kernel/telemetry/contextServed.ts` (CONTEXT_SERVED_SOURCES).
+ * Regenerate via: `npm run codegen` from `packages/cli`.
+ *
+ * Drift guard: src/__tests__/kernel-value-sets-drift.test.ts re-extracts the
+ * members from the source and fails CI when this file is stale.
+ */
+export declare const STARTUP_RESOLUTION_SIGNAL_SOURCE_SURFACES: readonly ["cli", "mcp", "app", "rest", "internal", "api"];
+export type StartupResolutionSourceSurface = (typeof STARTUP_RESOLUTION_SIGNAL_SOURCE_SURFACES)[number];
+//# sourceMappingURL=sourceSurfaces.generated.d.ts.map

package/dist/generated/sourceSurfaces.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceSurfaces.generated.d.ts","sourceRoot":"","sources":["../../src/generated/sourceSurfaces.generated.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,yCAAyC,2DAA4D,CAAC;AACnH,MAAM,MAAM,8BAA8B,GAAG,CAAC,OAAO,yCAAyC,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/generated/sourceSurfaces.generated.js

@@ -0,0 +1,11 @@
+/**
+ * GENERATED — DO NOT EDIT BY HAND.
+ *
+ * Source of truth: `kernel/telemetry/contextServed.ts` (CONTEXT_SERVED_SOURCES).
+ * Regenerate via: `npm run codegen` from `packages/cli`.
+ *
+ * Drift guard: src/__tests__/kernel-value-sets-drift.test.ts re-extracts the
+ * members from the source and fails CI when this file is stale.
+ */
+export const STARTUP_RESOLUTION_SIGNAL_SOURCE_SURFACES = ['cli', 'mcp', 'app', 'rest', 'internal', 'api'];
+//# sourceMappingURL=sourceSurfaces.generated.js.map

package/dist/generated/sourceSurfaces.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceSurfaces.generated.js","sourceRoot":"","sources":["../../src/generated/sourceSurfaces.generated.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,CAAU,CAAC"}

package/dist/generators/adapters.d.ts

@@ -5,12 +5,14 @@
 import type { SurfaceProfile } from './surface-profiles.js';
 declare const MARKER = "auto-generated by pb handshake";
 export { MARKER };
+/** TASK-554 (WP-777, DEC-1888): CLAUDE.md only points at the served briefing. Rules are never
+ *  written into CLAUDE.md (a WP-777 exclusion); the generated projections carry them. Shared by
+ *  the whole-file CLAUDE.md below and the CLAUDE.md region (region-projections.ts). */
+export declare const CLAUDE_BRIEFING_POINTER = "Your full briefing, including the team and role rules that bind you, is served live by `pb session start` and `pb orient --task \"<what you are doing>\"`; run that orient before substantive work. `.productbrain/context.md` is a snapshot of the spine and the everyone rules only. Rules are never copied into this file.";
 export interface AgentsMdOptions {
     profile?: SurfaceProfile;
     workspaceContext?: {
-        stage?: string;
         focus?: string;
-        governanceMode?: string;
         totalEntries?: number;
     };
     skills?: Array<{
@@ -20,14 +22,12 @@ export interface AgentsMdOptions {
     }>;
 }
 export declare function generateAgentsMd(timestamp: string, options?: AgentsMdOptions): string;
-export declare function generateClaudeMd(timestamp: string, profile?: SurfaceProfile): string;
-export declare function generateCursorMdc(timestamp: string, profile?: SurfaceProfile): string;
+export declare function generateClaudeMd(timestamp: string): string;
+export declare function generateCursorMdc(timestamp: string, briefingLines: string[] | null): string;
 export interface CopilotMdOptions {
     profile?: SurfaceProfile;
     workspaceContext?: {
-        stage?: string;
         focus?: string;
-        governanceMode?: string;
         totalEntries?: number;
     };
     skills?: Array<{
@@ -41,4 +41,37 @@ export interface CopilotMdOptions {
     }>;
 }
 export declare function generateCopilotMd(timestamp: string, options?: CopilotMdOptions): string;
+/** Minimal canonical-rule shape needed to project a path-scoped Copilot instruction file. */
+export interface CopilotInstructionRule {
+    name: string;
+    body: string;
+    /** Path-scope glob, e.g. "convex/**\/*.ts". Rules without it are repo-wide, not projected here. */
+    applyTo?: string;
+    /** Provenance (filesystem path or `db:<ENTRY-ID>`) — emitted as a breadcrumb comment only. */
+    sourcePath?: string;
+}
+export interface GeneratedInstructionFile {
+    /** Path relative to repo root, e.g. ".github/instructions/security-boundaries.instructions.md". */
+    relativePath: string;
+    content: string;
+}
+/**
+ * Project path-scoped GitHub Copilot instruction files from canonical rules.
+ *
+ * One `.github/instructions/<slug>.instructions.md` per rule that declares `applyTo`. Each file
+ * carries the `applyTo` frontmatter, the full rule body, and the pb-handshake MARKER.
+ *
+ * DECISION (DEC-1343, as refined): the committed `.github/instructions/*.instructions.md` are
+ * hand-maintained SSOT and carry NO MARKER, so handshake classifies them as user-owned and leaves
+ * them untouched (`shouldWriteAdapter`). This generator therefore only MATERIALIZES a file — with
+ * the MARKER, marking it pb-managed — when a Chain rule declares `applyTo` AND no committed file
+ * already occupies that path. On this repo no Chain rule declares `applyTo`, so it emits nothing
+ * and never dirties the tree; the path-scoped review files are the hand-authored committed ones.
+ *
+ * A provenance breadcrumb records the source entry/path WITHOUT requiring the consumer to resolve
+ * it: Copilot code review is pb-blind, so the body is inlined and the id is reference-only
+ * (DEC-1343 / INS-1969). Basenames are de-duped deterministically so two rules never clobber one
+ * file.
+ */
+export declare function generateCopilotInstructionFiles(rules: CopilotInstructionRule[], timestamp: string): GeneratedInstructionFile[];
 //# sourceMappingURL=adapters.d.ts.map

package/dist/generators/adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/generators/adapters.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,QAAA,MAAM,MAAM,mCAAmC,CAAC;AAEhD,OAAO,EAAE,MAAM,EAAE,CAAC;AAElB,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,gBAAgB,CAAC,EAAE;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,CAgFrF;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,CAsCpF;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,CAkCrF;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,gBAAgB,CAAC,EAAE;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,MAAM,CA0IvF"}
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/generators/adapters.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,QAAA,MAAM,MAAM,mCAAmC,CAAC;AAEhD,OAAO,EAAE,MAAM,EAAE,CAAC;AAOlB;;uFAEuF;AACvF,eAAO,MAAM,uBAAuB,kUAC+G,CAAC;AAEpJ,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,gBAAgB,CAAC,EAAE;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,CA0DrF;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQ1D;AAYD,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,MAAM,CAsB3F;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,gBAAgB,CAAC,EAAE;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAiIvF;AAUD,6FAA6F;AAC7F,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,mGAAmG;IACnG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,mGAAmG;IACnG,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAYD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,sBAAsB,EAAE,EAC/B,SAAS,EAAE,MAAM,GAChB,wBAAwB,EAAE,CAiC5B"}

package/dist/generators/adapters.js

@@ -4,18 +4,23 @@
  */
 const MARKER = 'auto-generated by pb handshake';
 export { MARKER };
+/** TASK-670 (WP-820, DEC-1863): every generated adapter file points at the served briefing in place of
+ *  protocol paragraphs of its own, so session start is the one place an agent learns how to work here. */
+const BRIEFING_POINTER = 'Your full briefing, including the team and role rules that bind you, is served live by `pb session start` and `pb orient --task "<what you are doing>"`; run that orient before substantive work.';
+/** TASK-554 (WP-777, DEC-1888): CLAUDE.md only points at the served briefing. Rules are never
+ *  written into CLAUDE.md (a WP-777 exclusion); the generated projections carry them. Shared by
+ *  the whole-file CLAUDE.md below and the CLAUDE.md region (region-projections.ts). */
+export const CLAUDE_BRIEFING_POINTER = `${BRIEFING_POINTER} \`.productbrain/context.md\` is a snapshot of the spine and the everyone rules only. Rules are never copied into this file.`;
 export function generateAgentsMd(timestamp, options) {
     const { workspaceContext, skills } = options ?? {};
     // Workspace context section (only when data is available)
+    // TASK-435 (C4c): the readiness stage label ("| Stage | ... |") is deleted from every
+    // served surface, including this generated adapter file.
     let workspaceSection = '';
     if (workspaceContext && Object.values(workspaceContext).some((v) => v !== undefined)) {
         const rows = [];
-        if (workspaceContext.stage !== undefined)
-            rows.push(`| Stage | \`${workspaceContext.stage}\` |`);
         if (workspaceContext.focus !== undefined)
             rows.push(`| Current focus | ${workspaceContext.focus} |`);
-        if (workspaceContext.governanceMode !== undefined)
-            rows.push(`| Governance mode | \`${workspaceContext.governanceMode}\` |`);
         if (workspaceContext.totalEntries !== undefined)
             rows.push(`| Chain entries | ${workspaceContext.totalEntries} |`);
         workspaceSection = `
@@ -46,8 +51,6 @@ ${rows.join('\n')}
 
 # Product Brain Context
 
-Read \`.productbrain/context.md\` for full workspace briefing (stage, bets, governance, tensions).
-Read \`.productbrain/briefing.md\` for entries matched to this repo.
 Read \`.productbrain/soul.md\` when identity, working style, or collaboration preferences matter.
 ${workspaceSection}
 ## The Chain is the SSOT. Use \`pb\` before everything.
@@ -61,71 +64,30 @@ ${workspaceSection}
 | \`pb search <query>\` | Find entries across the Chain |
 | \`pb handshake\` | Refresh these context files |
 
-**Before implementing any feature, ticket, or fix:** run \`pb get <ID>\` to read the actual spec, exclusions, acceptance criteria, and governance relations. Never assume you know the spec from the conversation alone.
-**Before substantive implementation, review, diagnosis, or security-sensitive reasoning:** run \`pb orient --task "<what you're doing>"\` so task-relevant governance becomes active before you propose a solution. Treat \`pb orient -b\` as workspace orientation, not sufficient task grounding.
-
-## Session lifecycle — close the loop
-
-Start every write-heavy session with \`pb session start\`. This opens a tracked write session and refreshes context.
+${BRIEFING_POINTER}
 
 For reusable Product Brain workflows in Codex, read \`.codex/skills/README.md\` first, then open the matching skill file under \`.codex/skills/\`.
-
-When you make a decision, discover a tension, or learn something during work:
-\`\`\`
-pb capture "TEN: description of the tension"
-pb capture "DEC: decided X because Y"
-pb capture "INS: learned that X"
-\`\`\`
-
-Close with \`pb session close\` — reviews what was captured, refreshes context for the next session.
-
-All captures are drafts. The human reviews and accepts in Cortex.
-${skillsSection}
-## Governance Summary
-
-This workspace uses Product Brain governance. Decisions, standards, and tensions are tracked on the Chain. Use \`pb orient -b\` for current focus.
-`;
+${skillsSection}`;
 }
-export function generateClaudeMd(timestamp, profile) {
+export function generateClaudeMd(timestamp) {
     return `<!-- ${MARKER} — ${timestamp} -->
 <!-- Re-run \`pb handshake\` to refresh. Do not edit manually. -->
 
 # Product Brain Context
 
-Read \`.productbrain/context.md\` for full workspace briefing (stage, bets, governance, tensions).
-Read \`.productbrain/briefing.md\` for entries matched to this repo.
-
-## The Chain is the SSOT. Use \`pb\` before everything.
-
-| Command | Purpose |
-|---------|---------|
-| \`pb orient -b\` | Current workspace focus |
-| \`pb orient --task "<task>"\` | Task-shaped governance and context before implementation, review, or diagnosis |
-| \`pb get <ID>\` | Full entry (BET, DEC, STD, BR, TEN, ARCH) |
-| \`pb context <ID>\` | Constellation context for an entry |
-| \`pb search <query>\` | Find entries across the Chain |
-| \`pb handshake\` | Refresh these context files |
-
-**Before implementing any feature, ticket, or fix:** run \`pb get <ID>\` to read the actual spec, exclusions, acceptance criteria, and governance relations. Never assume you know the spec from the conversation alone.
-**Before substantive implementation, review, diagnosis, or security-sensitive reasoning:** run \`pb orient --task "<what you're doing>"\` so task-relevant governance becomes active before you propose a solution. Treat \`pb orient -b\` as workspace orientation, not sufficient task grounding.
-
-## Session lifecycle — close the loop
-
-Start every session with \`pb session start\`. This opens a tracked write session and refreshes context.
-
-When you make a decision, discover a tension, or learn something during work:
-\`\`\`
-pb capture "TEN: description of the tension"
-pb capture "DEC: decided X because Y"
-pb capture "INS: learned that X"
-\`\`\`
-
-Close with \`pb session close\` — reviews what was captured, refreshes context for the next session.
-
-All captures are drafts. The human reviews and accepts in Cortex.
+${CLAUDE_BRIEFING_POINTER}
 `;
 }
-export function generateCursorMdc(timestamp, profile) {
+// TASK-554 (WP-777, DEC-1888): the workspace briefing (spine and the Everyone rule list) — the SAME
+// lines context.md and everyone-rules.md carry, from formatWorkspaceBriefingLines. `null` means the
+// orient fetch failed this run; the file says so rather than dropping the section silently.
+function cursorBriefingSection(briefingLines) {
+    if (briefingLines === null) {
+        return '\n## Briefing\n\nThe workspace briefing could not be fetched on the last `pb handshake`; run `pb session start` to read it.\n';
+    }
+    return `\n## Briefing\n\n${briefingLines.join('\n')}\n`;
+}
+export function generateCursorMdc(timestamp, briefingLines) {
     return `---
 description: Product Brain Chain context — workspace knowledge for AI-assisted development
 globs:
@@ -134,9 +96,6 @@ alwaysApply: true
 
 # Product Brain Context
 
-Read \`.productbrain/context.md\` for full workspace briefing (stage, bets, governance, tensions).
-Read \`.productbrain/briefing.md\` for entries matched to this repo.
-
 ## The Chain is the SSOT. Use \`pb\` before everything.
 
 - \`pb orient -b\` — Current workspace focus
@@ -146,17 +105,8 @@ Read \`.productbrain/briefing.md\` for entries matched to this repo.
 - \`pb search <query>\` — Find entries across the Chain
 - \`pb handshake\` — Refresh these context files
 
-Before implementing any feature, ticket, or fix: run \`pb get <ID>\` to read the actual spec, exclusions, acceptance criteria, and governance relations. Never assume you know the spec from the conversation alone.
-Before substantive implementation, review, diagnosis, or security-sensitive reasoning: run \`pb orient --task "<what you're doing>"\` so task-relevant governance becomes active before you propose a solution. Treat \`pb orient -b\` as workspace orientation, not sufficient task grounding.
-
-## Session lifecycle — close the loop
-
-Start with \`pb session start\`. When you make a decision, discover a tension, or learn something:
-- \`pb capture "TEN: description"\` — capture a tension
-- \`pb capture "DEC: decided X because Y"\` — capture a decision
-- \`pb capture "INS: learned that X"\` — capture an insight
-Close with \`pb session close\`. All captures are drafts — human reviews and accepts.
-
+${BRIEFING_POINTER}
+${cursorBriefingSection(briefingLines)}
 <!-- ${MARKER} — ${timestamp} -->
 `;
 }
@@ -164,15 +114,13 @@ export function generateCopilotMd(timestamp, options) {
     const { profile, workspaceContext, skills, rules } = options ?? {};
     const budget = profile?.tokenBudget ?? 30000;
     // Workspace context section (only when data is available)
+    // TASK-435 (C4c): the readiness stage label ("| Stage | ... |") is deleted from every
+    // served surface, including this generated adapter file.
     let workspaceSection = '';
     if (workspaceContext && Object.values(workspaceContext).some((v) => v !== undefined)) {
         const rows = [];
-        if (workspaceContext.stage !== undefined)
-            rows.push(`| Stage | \`${workspaceContext.stage}\` |`);
         if (workspaceContext.focus !== undefined)
             rows.push(`| Current focus | ${workspaceContext.focus} |`);
-        if (workspaceContext.governanceMode !== undefined)
-            rows.push(`| Governance mode | \`${workspaceContext.governanceMode}\` |`);
         if (workspaceContext.totalEntries !== undefined)
             rows.push(`| Chain entries | ${workspaceContext.totalEntries} |`);
         workspaceSection = `
@@ -188,9 +136,6 @@ ${rows.join('\n')}
 <!-- Re-run \`pb handshake\` to refresh. Do not edit manually. -->
 
 # Product Brain Context
-
-Read \`.productbrain/context.md\` for full workspace briefing (stage, bets, governance, tensions).
-Read \`.productbrain/briefing.md\` for entries matched to this repo.
 ${workspaceSection}
 ## The Chain is the SSOT. Use \`pb\` before everything.
 
@@ -201,13 +146,7 @@ ${workspaceSection}
 - \`pb search <query>\` — Find entries across the Chain
 - \`pb handshake\` — Refresh these context files
 
-Before implementing any feature, ticket, or fix: run \`pb get <ID>\` to read the actual spec, exclusions, acceptance criteria, and governance relations. Never assume you know the spec from the conversation alone.
-Before substantive implementation, review, diagnosis, or security-sensitive reasoning: run \`pb orient --task "<what you're doing>"\` so task-relevant governance becomes active before you propose a solution. Treat \`pb orient -b\` as workspace orientation, not sufficient task grounding.
-
-## Session lifecycle — close the loop
-
-Start with \`pb session start\`. Capture knowledge during work with \`pb capture "text"\`.
-Close with \`pb session close\`. All captures are drafts — human reviews and accepts.
+${BRIEFING_POINTER}
 `;
     // When no enrichment options provided, return base for backward compat
     if (!skills?.length && !rules?.length) {
@@ -287,4 +226,64 @@ Close with \`pb session close\`. All captures are drafts — human reviews and a
     }
     return accumulated;
 }
+/** Slugify a rule name into a filesystem-safe instruction-file basename. */
+function instructionSlug(name) {
+    return (name
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '') || 'rule');
+}
+/**
+ * Project path-scoped GitHub Copilot instruction files from canonical rules.
+ *
+ * One `.github/instructions/<slug>.instructions.md` per rule that declares `applyTo`. Each file
+ * carries the `applyTo` frontmatter, the full rule body, and the pb-handshake MARKER.
+ *
+ * DECISION (DEC-1343, as refined): the committed `.github/instructions/*.instructions.md` are
+ * hand-maintained SSOT and carry NO MARKER, so handshake classifies them as user-owned and leaves
+ * them untouched (`shouldWriteAdapter`). This generator therefore only MATERIALIZES a file — with
+ * the MARKER, marking it pb-managed — when a Chain rule declares `applyTo` AND no committed file
+ * already occupies that path. On this repo no Chain rule declares `applyTo`, so it emits nothing
+ * and never dirties the tree; the path-scoped review files are the hand-authored committed ones.
+ *
+ * A provenance breadcrumb records the source entry/path WITHOUT requiring the consumer to resolve
+ * it: Copilot code review is pb-blind, so the body is inlined and the id is reference-only
+ * (DEC-1343 / INS-1969). Basenames are de-duped deterministically so two rules never clobber one
+ * file.
+ */
+export function generateCopilotInstructionFiles(rules, timestamp) {
+    const files = [];
+    const seen = new Set();
+    for (const rule of rules) {
+        if (!rule.applyTo || !rule.applyTo.trim())
+            continue;
+        const slug = instructionSlug(rule.name);
+        let unique = slug;
+        let n = 2;
+        while (seen.has(unique))
+            unique = `${slug}-${n++}`;
+        seen.add(unique);
+        // Portable provenance: keep a `db:<ID>` reference as-is; reduce a filesystem path to its
+        // basename so a committed file never leaks an absolute, machine-specific path. Split on BOTH
+        // separators — a Windows authoring host yields `C:\…\rules\foo.md`, and splitting on '/' alone
+        // would leak the whole backslash path into committed provenance.
+        const src = rule.sourcePath
+            ? rule.sourcePath.startsWith('db:')
+                ? rule.sourcePath
+                : rule.sourcePath.split(/[/\\]/).pop()
+            : undefined;
+        const provenance = src ? `\n<!-- source: ${src} -->` : '';
+        // The rule body conventionally carries its own H1, so no heading is prepended here.
+        const content = `---
+applyTo: ${JSON.stringify(rule.applyTo.trim())}
+---
+<!-- ${MARKER} — ${timestamp} -->
+<!-- Re-run \`pb handshake\` to refresh. Edit the rule in the Chain, not this file. -->${provenance}
+
+${rule.body.trim()}
+`;
+        files.push({ relativePath: `.github/instructions/${unique}.instructions.md`, content });
+    }
+    return files;
+}
 //# sourceMappingURL=adapters.js.map