@productbrain/cli 0.1.0-beta.1398 → 0.1.0-beta.13991

package/dist/lib/connectProfileName.test.js

@@ -0,0 +1,100 @@
+/**
+ * The pb connect profile-name rule (TASK-638 doneWhen 1, DEC-1961).
+ */
+import { afterAll, beforeAll, describe, expect, it } from 'vitest';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, mkdirSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { composeProfileName, connectFolderName, pickConnectProfileName } from './connectProfileName.js';
+const PROFILE_NAME_RE = /^[a-z0-9][a-z0-9-]{0,31}$/;
+// TEN-3088: a git hook's GIT_* env would point git at the real repo — stripped for the fixture
+// spawns here and, in beforeAll, for connectFolderName's own git call.
+const GIT_FIXTURE_ENV = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith('GIT_')));
+describe('composeProfileName', () => {
+    it('joins workspace and folder: product-brain + Product-OS -> product-brain-product-os', () => {
+        expect(composeProfileName('Product Brain', 'Product-OS')).toBe('product-brain-product-os');
+    });
+    it('a folder already named after the workspace stands alone: product-brain-positioning', () => {
+        expect(composeProfileName('Product Brain', 'product-brain-positioning')).toBe('product-brain-positioning');
+        expect(composeProfileName('Product Brain', 'Product Brain')).toBe('product-brain');
+    });
+    it('a mere prefix is not a match: product-brainy -> product-brain-product-brainy', () => {
+        expect(composeProfileName('Product Brain', 'product-brainy')).toBe('product-brain-product-brainy');
+    });
+    it('a 40-char workspace and a 40-char folder give a valid 32-char name', () => {
+        const name = composeProfileName('w'.repeat(40), 'f'.repeat(40));
+        expect(name).toHaveLength(32);
+        expect(name).toMatch(PROFILE_NAME_RE);
+        expect(name).toBe(`${'w'.repeat(19)}-${'f'.repeat(12)}`);
+    });
+    it('a clash suffix always fits the 32-char cap', () => {
+        const name = composeProfileName('w'.repeat(40), 'f'.repeat(40), 17);
+        expect(name).toMatch(PROFILE_NAME_RE);
+        expect(name.endsWith('-17')).toBe(true);
+    });
+    it('never ends a cut part on a hyphen', () => {
+        const name = composeProfileName('a'.repeat(18) + ' b', 'c'.repeat(11) + ' ' + 'd'.repeat(30));
+        expect(name).not.toMatch(/--|-$/);
+    });
+});
+describe('pickConnectProfileName', () => {
+    const base = { workspaceName: 'Product Brain', folderName: 'Product-OS' };
+    it('a free name is created', () => {
+        expect(pickConnectProfileName({ ...base, ownPin: null, isTaken: () => false }))
+            .toEqual({ profileName: 'product-brain-product-os', replace: false });
+    });
+    it("another folder's profile holds the name -> the next free -2", () => {
+        const taken = new Set(['product-brain-product-os']);
+        expect(pickConnectProfileName({ ...base, ownPin: null, isTaken: (n) => taken.has(n) }))
+            .toEqual({ profileName: 'product-brain-product-os-2', replace: false });
+    });
+    it("this clone's own pin names the profile -> replaced in place", () => {
+        expect(pickConnectProfileName({ ...base, ownPin: 'product-brain-product-os', isTaken: () => true }))
+            .toEqual({ profileName: 'product-brain-product-os', replace: true });
+    });
+    it("this clone's own pin on a -2 is replaced even when the base name is free again", () => {
+        const taken = new Set(['product-brain-product-os-2']);
+        expect(pickConnectProfileName({ ...base, ownPin: 'product-brain-product-os-2', isTaken: (n) => taken.has(n) }))
+            .toEqual({ profileName: 'product-brain-product-os-2', replace: true });
+    });
+    it('a pin naming some other profile is never renamed or reused: the folder still gets its own name', () => {
+        expect(pickConnectProfileName({ ...base, ownPin: 'product-brain', isTaken: (n) => n === 'product-brain' }))
+            .toEqual({ profileName: 'product-brain-product-os', replace: false });
+    });
+    it('the clash search is bounded', () => {
+        expect(pickConnectProfileName({ ...base, ownPin: null, isTaken: () => true })).toBeNull();
+    });
+});
+describe('connectFolderName', () => {
+    let root = '';
+    beforeAll(() => {
+        for (const key of Object.keys(process.env))
+            if (key.startsWith('GIT_'))
+                delete process.env[key];
+        root = realpathSync(mkdtempSync(join(tmpdir(), 'pb-connect-name-')));
+    });
+    afterAll(() => rmSync(root, { recursive: true, force: true }));
+    function git(cwd, ...args) {
+        execFileSync('git', ['-c', 'user.email=t@example.com', '-c', 'user.name=t', ...args], { cwd, stdio: 'ignore', env: GIT_FIXTURE_ENV });
+    }
+    it('from a worktree -> the main clone folder name', () => {
+        const main = join(root, 'Main-Clone');
+        mkdirSync(main);
+        git(main, 'init', '-q');
+        writeFileSync(join(main, 'README'), 'x');
+        git(main, 'add', 'README');
+        git(main, 'commit', '-q', '-m', 'init');
+        git(main, 'worktree', 'add', '-q', '-b', 'side', join(root, 'some-worktree'));
+        expect(connectFolderName(main)).toBe('Main-Clone');
+        expect(connectFolderName(join(root, 'some-worktree'))).toBe('Main-Clone');
+        mkdirSync(join(main, 'sub'));
+        expect(connectFolderName(join(main, 'sub'))).toBe('Main-Clone');
+    });
+    it('outside git -> the current folder name', () => {
+        const plain = join(root, 'plain-folder');
+        mkdirSync(plain);
+        expect(connectFolderName(plain)).toBe('plain-folder');
+    });
+});
+//# sourceMappingURL=connectProfileName.test.js.map

package/dist/lib/connectProfileName.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectProfileName.test.js","sourceRoot":"","sources":["../../src/lib/connectProfileName.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAExG,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAEpD,+FAA+F;AAC/F,uEAAuE;AACvE,MAAM,eAAe,GAAsB,MAAM,CAAC,WAAW,CAC3D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CACvE,CAAC;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,CAAC,kBAAkB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,CAAC,kBAAkB,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3G,MAAM,CAAC,kBAAkB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,kBAAkB,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,IAAI,GAAG,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;IAE1E,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;aAC5E,OAAO,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACpF,OAAO,CAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;aACjG,OAAO,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC5G,OAAO,CAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,CAAC,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;aACxG,OAAO,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChG,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE/D,SAAS,GAAG,CAAC,GAAW,EAAE,GAAG,IAAc;QACzC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;IACxI,CAAC;IAED,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACtC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxB,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1E,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACzC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/constants.d.ts

@@ -4,8 +4,9 @@
  */
 /** Production Convex HTTP Actions endpoint. */
 export declare const DEFAULT_SITE_URL = "https://gateway.productbrain.io";
-/** Canonical self-upgrade command. WP-425 fixes the stale @latest dist-tag trap. */
-export declare const UPGRADE_COMMAND = "npm install -g @productbrain/cli@beta";
+/** Where every published pb release is listed, printed once after an upgrade (TEN-4860). No
+ *  changelog exists yet and the repository is private, so this is the public npm versions page. */
+export declare const CLI_RELEASES_URL = "https://www.npmjs.com/package/@productbrain/cli?activeTab=versions";
 /**
  * Resolve the Convex site URL based on PB_ENV.
  * - PB_ENV=dev → DEV_SITE_URL (localhost — see caveat on DEV_SITE_URL)
@@ -41,6 +42,10 @@ export declare function resolveConnectRedeemUrl(cliGateway?: string): string;
  * - PB_ENV=production or unset → work.productbrain.io
  */
 export declare function resolveAppUrl(): string;
+/** TASK-562 (TEN-1923): every no-key first step names connect in the project folder, never a key paste. */
+export declare const CONNECT_FIRST_STEP = "pb connect <token>";
+/** Where a person without a key gets a connect command: the app page that mints one (RULE-662). */
+export declare function connectPointer(): string;
 /** Whether the CLI is running in dev mode. */
 export declare function isDevMode(): boolean;
 //# sourceMappingURL=constants.d.ts.map

package/dist/lib/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,oCAAoC,CAAC;AAElE,oFAAoF;AACpF,eAAO,MAAM,eAAe,0CAA0C,CAAC;AAiBvE;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAIvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAQnE;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAMtC;AAED,8CAA8C;AAC9C,wBAAgB,SAAS,IAAI,OAAO,CAEnC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,oCAAoC,CAAC;AAElE;mGACmG;AACnG,eAAO,MAAM,gBAAgB,uEAAuE,CAAC;AAiBrG;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAIvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAQnE;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAMtC;AAED,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,mGAAmG;AACnG,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,8CAA8C;AAC9C,wBAAgB,SAAS,IAAI,OAAO,CAEnC"}

package/dist/lib/constants.js

@@ -4,8 +4,9 @@
  */
 /** Production Convex HTTP Actions endpoint. */
 export const DEFAULT_SITE_URL = 'https://gateway.productbrain.io';
-/** Canonical self-upgrade command. WP-425 fixes the stale @latest dist-tag trap. */
-export const UPGRADE_COMMAND = 'npm install -g @productbrain/cli@beta';
+/** Where every published pb release is listed, printed once after an upgrade (TEN-4860). No
+ *  changelog exists yet and the repository is private, so this is the public npm versions page. */
+export const CLI_RELEASES_URL = 'https://www.npmjs.com/package/@productbrain/cli?activeTab=versions';
 /** Hostname lists for banners + admin seed gates live in `deployment.ts` (PRODUCTION_HOSTS, DEV_CLOUD_HOSTS). */
 /** Production web app URL. */
 const PROD_APP_URL = 'https://work.productbrain.io';
@@ -76,6 +77,12 @@ export function resolveAppUrl() {
         return DEV_APP_URL;
     return PROD_APP_URL;
 }
+/** TASK-562 (TEN-1923): every no-key first step names connect in the project folder, never a key paste. */
+export const CONNECT_FIRST_STEP = 'pb connect <token>';
+/** Where a person without a key gets a connect command: the app page that mints one (RULE-662). */
+export function connectPointer() {
+    return `Get your connect command at ${resolveAppUrl()}/settings/api-keys.`;
+}
 /** Whether the CLI is running in dev mode. */
 export function isDevMode() {
     return process.env.PB_ENV?.toLowerCase() === 'dev';

package/dist/lib/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,iCAAiC,CAAC;AAElE,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAEvE,iHAAiH;AAEjH,8BAA8B;AAC9B,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD;;;;GAIG;AACH,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAE7C,yBAAyB;AACzB,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9C,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IACvC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAmB;IACzD,MAAM,OAAO,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9C,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IACtC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC;AACrD,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,iCAAiC,CAAC;AAElE;mGACmG;AACnG,MAAM,CAAC,MAAM,gBAAgB,GAAG,oEAAoE,CAAC;AAErG,iHAAiH;AAEjH,8BAA8B;AAC9B,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD;;;;GAIG;AACH,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAE7C,yBAAyB;AACzB,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9C,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IACvC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAmB;IACzD,MAAM,OAAO,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9C,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IACtC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,mGAAmG;AACnG,MAAM,UAAU,cAAc;IAC5B,OAAO,+BAA+B,aAAa,EAAE,qBAAqB,CAAC;AAC7E,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC;AACrD,CAAC"}

package/dist/lib/conversation.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Conversation identity resolution — WP-479 E2 (client half).
+ *
+ * Feature-detects a stable per-conversation identifier so multiple concurrent harness
+ * conversations (Claude Code, Cursor, Codex, …) sharing one worktree don't collide on the single
+ * legacy `.productbrain/session.json` marker. All channels are optional and degrade gracefully —
+ * absent any signal, resolution returns `null` and every caller falls back to the pre-WP-479
+ * single-marker behavior (zero-config invariant).
+ *
+ * Priority order (harness findings: INS-2122, founder-run tests 2026-07-10):
+ *   1. explicit override (CLI `--conversation` flag on `pb session start`) — the manual seam.
+ *   2. `PB_CONVERSATION_ID` — the universal seam any harness adapter can set.
+ *   2b. the hook input's session_id, read by `--hook` (TASK-562, readHookConversationId below).
+ *   3. `CLAUDE_CODE_SESSION_ID` — present in Claude Code 2.1.206+ Bash shells (version-dependent,
+ *      treat as detected, never asserted).
+ *   4. `CURSOR_CONVERSATION_ID` — confirmed live in cursor-agent 2026.07.01 shell env.
+ *   5. `CODEX_TUI_SESSION_LOG_PATH` — Codex has no native conversation id; this Superset-injected
+ *      log path is unique per session run and stands in as the discriminator. It always contains
+ *      `/`, so normalization (below) always hashes it — no special-casing needed here.
+ *   6. none of the above → `null` (legacy shared-marker path).
+ */
+/**
+ * Reads fd 0 to EOF. fd 0 can already be non-blocking: any earlier touch of `process.stdin` makes it
+ * so, and then input that arrives late reads EAGAIN (Reviewer F2 on #1937). EAGAIN waits 20 ms and
+ * reads again, up to `deadlineMs`, so a late hook input is read whole and a hook never hangs on it.
+ */
+export declare function readStdinFully(readSyncFn?: (fd: number, buf: Buffer) => number, deadlineMs?: number): string;
+export declare function readHookConversationId(read?: () => string, stdinIsTty?: () => boolean): string | null;
+/** What the env channels alone resolve, ignoring the hook input: whether a later bare pb call finds the same id. */
+export declare function resolveEnvConversationId(): string | null;
+/**
+ * Normalize a raw candidate conversation id into a value that is always safe to use as (a) a
+ * Convex join key and (b) a filesystem path segment. Never truncates (a `slice()` would collide
+ * two distinct long ids into one lineage) — oversized or unsafe-charset ids are replaced whole
+ * with their sha256 hex digest (fixed-width, charset-safe by construction).
+ */
+export declare function normalizeConversationId(raw: string): string;
+/**
+ * Resolve the effective conversation id for the current process. `explicitOverride` — normally
+ * only threaded through from the CLI's `--conversation` flag on `pb session start` — takes
+ * priority over every env channel. Every other call site (the vast majority) calls this with no
+ * argument, which is pure env-based feature detection: with none of the channel env vars set,
+ * this returns `null` and callers must fall back to legacy behavior.
+ */
+export declare function resolveConversationId(explicitOverride?: string | null): string | null;
+/** TASK-1211 (TEN-5831): the harness this CLI runs under, from the conversation's env channels, so the engine knows a first session on a tool. */
+export declare function resolveHarnessName(env?: NodeJS.ProcessEnv): string;
+//# sourceMappingURL=conversation.d.ts.map

package/dist/lib/conversation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../src/lib/conversation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAeH;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,UAAU,GAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAA4D,EACrG,UAAU,SAAQ,GACjB,MAAM,CAkBR;AAED,wBAAgB,sBAAsB,CACpC,IAAI,GAAE,MAAM,MAA+B,EAE3C,UAAU,GAAE,MAAM,OAAyB,GAC1C,MAAM,GAAG,IAAI,CAWf;AAED,oHAAoH;AACpH,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAIxD;AAQD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAK3D;AAkBD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAIrF;AAED,kJAAkJ;AAClJ,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE/E"}

package/dist/lib/conversation.js

@@ -0,0 +1,136 @@
+/**
+ * Conversation identity resolution — WP-479 E2 (client half).
+ *
+ * Feature-detects a stable per-conversation identifier so multiple concurrent harness
+ * conversations (Claude Code, Cursor, Codex, …) sharing one worktree don't collide on the single
+ * legacy `.productbrain/session.json` marker. All channels are optional and degrade gracefully —
+ * absent any signal, resolution returns `null` and every caller falls back to the pre-WP-479
+ * single-marker behavior (zero-config invariant).
+ *
+ * Priority order (harness findings: INS-2122, founder-run tests 2026-07-10):
+ *   1. explicit override (CLI `--conversation` flag on `pb session start`) — the manual seam.
+ *   2. `PB_CONVERSATION_ID` — the universal seam any harness adapter can set.
+ *   2b. the hook input's session_id, read by `--hook` (TASK-562, readHookConversationId below).
+ *   3. `CLAUDE_CODE_SESSION_ID` — present in Claude Code 2.1.206+ Bash shells (version-dependent,
+ *      treat as detected, never asserted).
+ *   4. `CURSOR_CONVERSATION_ID` — confirmed live in cursor-agent 2026.07.01 shell env.
+ *   5. `CODEX_TUI_SESSION_LOG_PATH` — Codex has no native conversation id; this Superset-injected
+ *      log path is unique per session run and stands in as the discriminator. It always contains
+ *      `/`, so normalization (below) always hashes it — no special-casing needed here.
+ *   6. none of the above → `null` (legacy shared-marker path).
+ */
+import { createHash } from 'crypto';
+import { readSync } from 'fs';
+import { isatty } from 'tty';
+/**
+ * TASK-562: a hook runner (Claude Code, Codex, Cursor) writes one JSON object on stdin that names the
+ * conversation (`session_id`, or `conversation_id`). `pb session start|close --hook` reads it once,
+ * here; it ranks right after PB_CONVERSATION_ID, so two concurrent conversations of one tool never
+ * share a marker and one SessionEnd cannot close the other's session. Only behind `--hook`: a bare
+ * read of stdin would block any command whose stdin is an open pipe.
+ */
+let hookConversationId = null;
+/**
+ * Reads fd 0 to EOF. fd 0 can already be non-blocking: any earlier touch of `process.stdin` makes it
+ * so, and then input that arrives late reads EAGAIN (Reviewer F2 on #1937). EAGAIN waits 20 ms and
+ * reads again, up to `deadlineMs`, so a late hook input is read whole and a hook never hangs on it.
+ */
+export function readStdinFully(readSyncFn = (fd, buf) => readSync(fd, buf, 0, buf.length, null), deadlineMs = 5_000) {
+    const chunks = [];
+    const buf = Buffer.alloc(64 * 1024);
+    const nap = new Int32Array(new SharedArrayBuffer(4));
+    const until = Date.now() + deadlineMs;
+    for (;;) {
+        let n;
+        try {
+            n = readSyncFn(0, buf);
+        }
+        catch (e) {
+            if (e.code !== 'EAGAIN' || Date.now() >= until)
+                break;
+            Atomics.wait(nap, 0, 0, 20);
+            continue;
+        }
+        if (n === 0)
+            break;
+        chunks.push(Buffer.from(buf.subarray(0, n)));
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+export function readHookConversationId(read = () => readStdinFully(), 
+// isatty(0), never `process.stdin.isTTY`: that getter opens fd 0 non-blocking (Reviewer F2).
+stdinIsTty = () => isatty(0)) {
+    hookConversationId = null;
+    if (stdinIsTty())
+        return null;
+    try {
+        const input = JSON.parse(read());
+        const id = [input?.session_id, input?.conversation_id].find((v) => typeof v === 'string' && v.trim().length > 0);
+        hookConversationId = typeof id === 'string' ? id.trim() : null;
+    }
+    catch {
+        // No hook input, or not JSON: the env channels decide, as without --hook.
+    }
+    return hookConversationId;
+}
+/** What the env channels alone resolve, ignoring the hook input: whether a later bare pb call finds the same id. */
+export function resolveEnvConversationId() {
+    const saved = hookConversationId;
+    hookConversationId = null;
+    try {
+        return resolveConversationId();
+    }
+    finally {
+        hookConversationId = saved;
+    }
+}
+/** Above this raw length, or containing any char outside the join-key-safe set, hash instead. */
+const MAX_RAW_LEN = 128;
+/** Join-key-safe charset — also what's safe to use as a marker filename with no traversal risk. */
+const SAFE_CHARS_RE = /^[A-Za-z0-9._-]+$/;
+/**
+ * Normalize a raw candidate conversation id into a value that is always safe to use as (a) a
+ * Convex join key and (b) a filesystem path segment. Never truncates (a `slice()` would collide
+ * two distinct long ids into one lineage) — oversized or unsafe-charset ids are replaced whole
+ * with their sha256 hex digest (fixed-width, charset-safe by construction).
+ */
+export function normalizeConversationId(raw) {
+    if (raw.length > MAX_RAW_LEN || !SAFE_CHARS_RE.test(raw)) {
+        return createHash('sha256').update(raw).digest('hex');
+    }
+    return raw;
+}
+/** Picks the first non-empty candidate in priority order. No normalization here. */
+function pickRawConversationId(explicitOverride) {
+    const candidates = [
+        explicitOverride,
+        process.env.PB_CONVERSATION_ID,
+        hookConversationId,
+        process.env.CLAUDE_CODE_SESSION_ID,
+        process.env.CURSOR_CONVERSATION_ID,
+        process.env.CODEX_TUI_SESSION_LOG_PATH,
+    ];
+    for (const candidate of candidates) {
+        if (candidate && candidate.trim().length > 0)
+            return candidate.trim();
+    }
+    return null;
+}
+/**
+ * Resolve the effective conversation id for the current process. `explicitOverride` — normally
+ * only threaded through from the CLI's `--conversation` flag on `pb session start` — takes
+ * priority over every env channel. Every other call site (the vast majority) calls this with no
+ * argument, which is pure env-based feature detection: with none of the channel env vars set,
+ * this returns `null` and callers must fall back to legacy behavior.
+ */
+export function resolveConversationId(explicitOverride) {
+    const raw = pickRawConversationId(explicitOverride);
+    if (!raw)
+        return null;
+    return normalizeConversationId(raw);
+}
+/** TASK-1211 (TEN-5831): the harness this CLI runs under, from the conversation's env channels, so the engine knows a first session on a tool. */
+export function resolveHarnessName(env = process.env) {
+    return env.CLAUDE_CODE_SESSION_ID || env.CLAUDECODE ? 'claude-code' : env.CURSOR_CONVERSATION_ID ? 'cursor-agent' : env.CODEX_TUI_SESSION_LOG_PATH ? 'codex' : 'terminal';
+}
+//# sourceMappingURL=conversation.js.map

package/dist/lib/conversation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.js","sourceRoot":"","sources":["../../src/lib/conversation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAE7B;;;;;;GAMG;AACH,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,aAAkD,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EACrG,UAAU,GAAG,KAAK;IAElB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IACtC,SAAS,CAAC;QACR,IAAI,CAAS,CAAC;QACd,IAAI,CAAC;YACH,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK;gBAAE,MAAM;YACjF,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM;QACnB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAqB,GAAG,EAAE,CAAC,cAAc,EAAE;AAC3C,6FAA6F;AAC7F,aAA4B,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3C,kBAAkB,GAAG,IAAI,CAAC;IAC1B,IAAI,UAAU,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAwD,CAAC;QACxF,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjH,kBAAkB,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,wBAAwB;IACtC,MAAM,KAAK,GAAG,kBAAkB,CAAC;IACjC,kBAAkB,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC;QAAC,OAAO,qBAAqB,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,kBAAkB,GAAG,KAAK,CAAC;IAAC,CAAC;AACjF,CAAC;AAED,iGAAiG;AACjG,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,mGAAmG;AACnG,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,SAAS,qBAAqB,CAAC,gBAAgC;IAC7D,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,kBAAkB;QAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,0BAA0B;KACvC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,gBAAgC;IACpE,MAAM,GAAG,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,kJAAkJ;AAClJ,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,OAAO,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AAC5K,CAAC"}

package/dist/lib/createEntryResult.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Narrowing helpers for the `chain.createEntry` gateway route's return type.
+ *
+ * WP-577 / TEN-2918: the route's declared return type is now an honest union that
+ * includes the preview branch (convex/agentKnowledge/entries.ts +
+ * createEntryPreview.ts). Callers that read real-create fields must narrow first.
+ *
+ * Why a local predicate rather than the server's own `isCreateEntryPreview`
+ * (convex/agentKnowledge/createEntryPreview.ts): `packages/cli` is a published npm
+ * package (bin `pb`) built with `rootDir: "src"` — a `convex/` import lives outside
+ * that root and would fail TypeScript's rootDir check (TS6059), and `convex/` is not
+ * part of the published tarball anyway. Keeping the CLI's own copy avoids that
+ * build-graph coupling. It is deliberately tiny and behaviour-free so the duplication
+ * cannot drift meaningfully — the discriminant is the presence of the `preview` key,
+ * which is part of the route's public response contract.
+ *
+ * Verified against the deployed preview: a real-create response carries no `preview`
+ * key at all, so this predicate is false on the normal capture path.
+ */
+import type { GatewayRouteReturnByName } from '@productbrain/kernel-client';
+export type CreateEntryRouteResult = GatewayRouteReturnByName<'chain.createEntry'>;
+export type CreateEntryPreviewRouteResult = Extract<CreateEntryRouteResult, {
+    preview: true;
+}>;
+/**
+ * True when the route returned its preview branch.
+ *
+ * A plain inline `'preview' in result` check does not reliably narrow the ELSE branch
+ * for this generated union shape — an explicit predicate function does. The same
+ * limitation is documented in convex/agentKnowledge/createEntryPreview.ts and was
+ * re-derived independently in packages/mcp-server/src/tools/smart-capture.ts.
+ */
+export declare function isPreviewCreateEntryResult(result: CreateEntryRouteResult): result is CreateEntryPreviewRouteResult;
+//# sourceMappingURL=createEntryResult.d.ts.map

package/dist/lib/createEntryResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEntryResult.d.ts","sourceRoot":"","sources":["../../src/lib/createEntryResult.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE5E,MAAM,MAAM,sBAAsB,GAAG,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;AAEnF,MAAM,MAAM,6BAA6B,GAAG,OAAO,CAAC,sBAAsB,EAAE;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAE/F;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,6BAA6B,CAEzC"}

package/dist/lib/createEntryResult.js

@@ -0,0 +1,12 @@
+/**
+ * True when the route returned its preview branch.
+ *
+ * A plain inline `'preview' in result` check does not reliably narrow the ELSE branch
+ * for this generated union shape — an explicit predicate function does. The same
+ * limitation is documented in convex/agentKnowledge/createEntryPreview.ts and was
+ * re-derived independently in packages/mcp-server/src/tools/smart-capture.ts.
+ */
+export function isPreviewCreateEntryResult(result) {
+    return 'preview' in result;
+}
+//# sourceMappingURL=createEntryResult.js.map

package/dist/lib/createEntryResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEntryResult.js","sourceRoot":"","sources":["../../src/lib/createEntryResult.ts"],"names":[],"mappings":"AAyBA;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA8B;IAE9B,OAAO,SAAS,IAAI,MAAM,CAAC;AAC7B,CAAC"}

package/dist/lib/deployment.js

@@ -15,8 +15,8 @@ const PRODUCTION_HOSTS = new Set([
     'gateway.productbrain.io',
     'data.productbrain.io',
     'api.productbrain.io',
-    /** Convex Production deployment (dashboard label). */
-    'terrific-penguin-60.convex.site',
+    /** Convex Production deployment (dashboard label; EU, project product-brain-eu, since the 2026-10-02 reset). */
+    'good-rooster-807.eu-west-1.convex.site',
 ]);
 /**
  * Convex **Development (Cloud)** deployments — real cloud DB, not customer prod.

package/dist/lib/deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../src/lib/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,sDAAsD;IACtD,iCAAiC;CAClC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACtC,sCAAsC;CACvC,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAClD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC,CAAC,OAAe;IAClE,MAAM,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,CAAC;AAC5C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC;IACzC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,sBAAsB,CAAC;IACjD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,YAAoB;IACzE,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,OAAO,YAAY,iBAAiB;QACtC,CAAC,CAAC,OAAO,YAAY,6BAA6B,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,oDAAoD,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAe,EAAE,KAAa;IAC1E,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,OAAO,KAAK,8BAA8B;QAC5C,CAAC,CAAC,OAAO,KAAK,0CAA0C,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../src/lib/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,gHAAgH;IAChH,wCAAwC;CACzC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACtC,sCAAsC;CACvC,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAClD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC,CAAC,OAAe;IAClE,MAAM,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,CAAC;AAC5C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC;IACzC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,sBAAsB,CAAC;IACjD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,YAAoB;IACzE,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,OAAO,YAAY,iBAAiB;QACtC,CAAC,CAAC,OAAO,YAAY,6BAA6B,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,oDAAoD,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAe,EAAE,KAAa;IAC1E,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,OAAO,KAAK,8BAA8B;QAC5C,CAAC,CAAC,OAAO,KAAK,0CAA0C,CAAC;AAC7D,CAAC"}

package/dist/lib/deployment.test.js

@@ -3,6 +3,7 @@
  */
 import { describe, it, expect } from 'vitest';
 import { classifyDeployment, confirmRiskNoteTitle, parseHostname, requiresAdminDestructiveConfirmation, seedAllConfirmMessage, seedRunConfirmMessage, } from './deployment.js';
+import { deploymentBadge } from './style.js';
 describe('parseHostname', () => {
     it('parses hostname from https URL', () => {
         expect(parseHostname('https://trustworthy-kangaroo-277.convex.site')).toBe('trustworthy-kangaroo-277.convex.site');
@@ -19,13 +20,31 @@ describe('classifyDeployment', () => {
     });
     it('classifies gateway and prod Convex as prod', () => {
         expect(classifyDeployment('https://gateway.productbrain.io')).toBe('prod');
-        expect(classifyDeployment('https://terrific-penguin-60.convex.site')).toBe('prod');
+        expect(classifyDeployment('https://good-rooster-807.eu-west-1.convex.site')).toBe('prod');
         expect(classifyDeployment('https://api.productbrain.io')).toBe('prod');
     });
     it('classifies unknown remote as cloud', () => {
         expect(classifyDeployment('https://other-team-xyz.convex.site')).toBe('cloud');
     });
 });
+// WP-744 / 1e-B: `pb profile create`'s receipt (§4 "which file won" assertion) needs the badge
+// to actually render the resolved tier — one test per tier deploymentBadge classifies.
+describe('deploymentBadge', () => {
+    it('badges local as [DEV]', () => {
+        expect(deploymentBadge(classifyDeployment('http://localhost:3000'))).toContain('[DEV]');
+    });
+    it('badges known production hosts as [PROD]', () => {
+        expect(deploymentBadge(classifyDeployment('https://gateway.productbrain.io'))).toContain('[PROD]');
+    });
+    it('badges the known dev-cloud Convex deployment as [DEV·CLOUD]', () => {
+        expect(deploymentBadge(classifyDeployment('https://trustworthy-kangaroo-277.convex.site'))).toContain('[DEV·CLOUD]');
+    });
+    it('badges an unknown remote as [CLOUD], never [PROD]', () => {
+        const badge = deploymentBadge(classifyDeployment('https://other-team-xyz.convex.site'));
+        expect(badge).toContain('[CLOUD]');
+        expect(badge).not.toContain('[PROD]');
+    });
+});
 describe('requiresAdminDestructiveConfirmation', () => {
     it('is false for local and dev-cloud only', () => {
         expect(requiresAdminDestructiveConfirmation('http://localhost:3000')).toBe(false);

package/dist/lib/deployment.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.test.js","sourceRoot":"","sources":["../../src/lib/deployment.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,oCAAoC,EACpC,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,aAAa,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CACxE,sCAAsC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,kBAAkB,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,oCAAoC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,CAAC,oCAAoC,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAC/F,KAAK,CACN,CAAC;QACF,MAAM,CAAC,oCAAoC,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,MAAM,CAAC,oCAAoC,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,oBAAoB,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACxF,MAAM,CAAC,oBAAoB,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAC1F,YAAY,CACb,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,8CAA8C,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CACvG,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CACtF,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"deployment.test.js","sourceRoot":"","sources":["../../src/lib/deployment.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,oCAAoC,EACpC,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,aAAa,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CACxE,sCAAsC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,kBAAkB,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,kBAAkB,CAAC,gDAAgD,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1F,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+FAA+F;AAC/F,uFAAuF;AACvF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC,SAAS,CACnG,aAAa,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACxF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,oCAAoC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,CAAC,oCAAoC,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAC/F,KAAK,CACN,CAAC;QACF,MAAM,CAAC,oCAAoC,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,MAAM,CAAC,oCAAoC,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,oBAAoB,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACxF,MAAM,CAAC,oBAAoB,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAC1F,YAAY,CACb,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,8CAA8C,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CACvG,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CACtF,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/envKeySnapshot.d.ts

@@ -0,0 +1,10 @@
+/** True when the operator's own export is the credential in play. */
+export declare function isEnvKeyBinding(): boolean;
+/**
+ * Re-take the snapshot. Mirrors `resetConfigCache()` — tests set the env var after this module is
+ * first imported. The CLI's own command paths do not need it: `pb profile use` deliberately does
+ * NOT re-snapshot after deleting the key, because that delete affects only the child process
+ * while the parent shell keeps exporting it.
+ */
+export declare function resetReportedProfileSnapshot(): void;
+//# sourceMappingURL=envKeySnapshot.d.ts.map

package/dist/lib/envKeySnapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envKeySnapshot.d.ts","sourceRoot":"","sources":["../../src/lib/envKeySnapshot.ts"],"names":[],"mappings":"AAiBA,qEAAqE;AACrE,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/dist/lib/envKeySnapshot.js

@@ -0,0 +1,30 @@
+/**
+ * Did the OPERATOR export `PRODUCTBRAIN_API_KEY` into this process?
+ *
+ * A primitive fact about the process, not about reporting — which is why it lives here rather than
+ * in reportedProfile.ts: config.ts needs it too, and config.ts cannot import that module without a
+ * cycle. Depends on nothing.
+ *
+ * It cannot be a live `process.env` read. `loadEnv()` (config.ts) COPIES whichever credential won
+ * into `process.env.PRODUCTBRAIN_API_KEY`, so after any command has resolved config a live read
+ * cannot separate an operator's export from loadEnv's own copy (INS-2479). So snapshot at MODULE
+ * LOAD, which is strictly before `loadEnv()` can run: config.ts loads env lazily (`envLoaded`
+ * starts false and only a getConfig()/getConfigOrGuide() call flips it), and this module is
+ * imported at CLI startup. Eager, not lazy-on-first-call: `capture` reaches the kernel BEFORE it
+ * emits its write-target notice, so a first-call snapshot would already be polluted.
+ */
+let exportedApiKey = process.env.PRODUCTBRAIN_API_KEY;
+/** True when the operator's own export is the credential in play. */
+export function isEnvKeyBinding() {
+    return Boolean(exportedApiKey);
+}
+/**
+ * Re-take the snapshot. Mirrors `resetConfigCache()` — tests set the env var after this module is
+ * first imported. The CLI's own command paths do not need it: `pb profile use` deliberately does
+ * NOT re-snapshot after deleting the key, because that delete affects only the child process
+ * while the parent shell keeps exporting it.
+ */
+export function resetReportedProfileSnapshot() {
+    exportedApiKey = process.env.PRODUCTBRAIN_API_KEY;
+}
+//# sourceMappingURL=envKeySnapshot.js.map

package/dist/lib/envKeySnapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envKeySnapshot.js","sourceRoot":"","sources":["../../src/lib/envKeySnapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,IAAI,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAEtD,qEAAqE;AACrE,MAAM,UAAU,eAAe;IAC7B,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B;IAC1C,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AACpD,CAAC"}