@productbrain/cli 0.1.0-beta.1414 → 0.1.0-beta.14155

package/dist/commands/connect-legacy-migration.test.js

@@ -0,0 +1,108 @@
+/**
+ * pb connect — legacy-install migration + malformed-profile regression tests (WP-628,
+ * Codex review P1/P2). Unlike connect.test.ts / connect-integration.test.ts, this file does
+ * NOT mock 'fs' or '../lib/profiles.js' — it drives the REAL profiles.ts against a throwaway
+ * HOME so the actual on-disk migration/occupancy behavior is exercised, not a mocked double.
+ * Only the network (fetch) and interactive/UI layers are stubbed.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, rmSync } from 'fs';
+import { resolve } from 'path';
+const { TEST_HOME, TEST_CONFIG_DIR, TEST_LEGACY_PATH, TEST_PROFILES_DIR } = vi.hoisted(() => {
+    const os = require('os');
+    const path = require('path');
+    const home = path.resolve(os.tmpdir(), `pb-test-connect-legacy-${process.pid}`);
+    return {
+        TEST_HOME: home,
+        TEST_CONFIG_DIR: path.resolve(home, '.config', 'productbrain'),
+        TEST_LEGACY_PATH: path.resolve(home, '.config', 'productbrain', '.env'),
+        TEST_PROFILES_DIR: path.resolve(home, '.config', 'productbrain', 'profiles'),
+    };
+});
+vi.mock('os', async (importOriginal) => {
+    const actual = await importOriginal();
+    return { ...actual, homedir: () => TEST_HOME };
+});
+const mockFetch = vi.fn();
+global.fetch = mockFetch;
+vi.mock('../lib/spinner.js', () => ({
+    withSpinner: async (_msg, fn) => fn(),
+}));
+vi.mock('@clack/prompts', () => ({
+    select: vi.fn(async () => 'start'),
+    isCancel: vi.fn(() => false),
+    text: vi.fn(async () => ''),
+}));
+vi.mock('./connect-screens.js', () => ({
+    runConnectScreens: vi.fn(async () => { }),
+    runConnectHeadless: vi.fn(async () => { }),
+}));
+import { runConnect } from './connect.js';
+vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+function mockRedeemOnce(apiKey, workspaceName) {
+    mockFetch.mockResolvedValueOnce({
+        ok: true,
+        json: async () => ({ apiKey, workspaceId: 'ws1', workspaceName }),
+    });
+}
+describe('pb connect — legacy migration + malformed profile (WP-628 P1/P2)', () => {
+    const prevCwd = process.cwd();
+    let repoDir;
+    beforeEach(() => {
+        if (existsSync(TEST_CONFIG_DIR))
+            rmSync(TEST_CONFIG_DIR, { recursive: true, force: true });
+        mkdirSync(TEST_CONFIG_DIR, { recursive: true });
+        repoDir = resolve(TEST_HOME, 'repo');
+        mkdirSync(repoDir, { recursive: true });
+        process.chdir(repoDir);
+        mockFetch.mockClear();
+        delete process.env.PB_PROFILE;
+        process.env.PRODUCTBRAIN_API_KEY = undefined;
+        process.env.CONVEX_SITE_URL = undefined;
+    });
+    afterEach(() => {
+        process.chdir(prevCwd);
+        if (existsSync(TEST_HOME))
+            rmSync(TEST_HOME, { recursive: true, force: true });
+    });
+    it('an invalid PB_PROFILE is refused before migration: legacy file and profiles dir untouched', async () => {
+        writeFileSync(TEST_LEGACY_PATH, 'PRODUCTBRAIN_API_KEY=pb_sk_legacy_key\n');
+        process.env.PB_PROFILE = '../x';
+        await expect(runConnect('pb_ct_' + 'a'.repeat(40), { assumeYes: true })).rejects.toThrow(/Invalid profile name/);
+        expect(readFileSync(TEST_LEGACY_PATH, 'utf8')).toContain('pb_sk_legacy_key');
+        expect(existsSync(TEST_PROFILES_DIR)).toBe(false);
+        expect(mockFetch).not.toHaveBeenCalled();
+    });
+    it('P1: a legacy-only install migrates BEFORE connect creates the target profile — legacy key survives as "default", not deleted', async () => {
+        // Precondition: ONLY the legacy .env exists — no profiles dir yet.
+        writeFileSync(TEST_LEGACY_PATH, 'PRODUCTBRAIN_API_KEY=pb_sk_legacy_key\nCONVEX_SITE_URL=https://legacy.convex.site\n');
+        expect(existsSync(TEST_PROFILES_DIR)).toBe(false);
+        mockRedeemOnce('pb_sk_new_connect_key', 'New Workspace');
+        await runConnect('pb_ct_' + 'a'.repeat(40), { assumeYes: true });
+        // Before the fix: createProfile() created the profiles dir FIRST (for the new
+        // "new-workspace-repo" profile), so the legacy .env was never migrated — and the next
+        // autoMigrate() call anywhere would silently DELETE it. Now: migrated into "default".
+        expect(existsSync(TEST_LEGACY_PATH)).toBe(false);
+        const defaultProfile = readFileSync(resolve(TEST_PROFILES_DIR, 'default.env'), 'utf8');
+        expect(defaultProfile).toContain('pb_sk_legacy_key');
+        // The newly connected profile (<workspace>-<folder>, TASK-638) exists alongside the migrated
+        // legacy one.
+        const newProfile = readFileSync(resolve(TEST_PROFILES_DIR, 'new-workspace-repo.env'), 'utf8');
+        expect(newProfile).toContain('pb_sk_new_connect_key');
+    });
+    it('P2: a malformed profile (exists, no PRODUCTBRAIN_API_KEY) holding the derived name counts as taken — the connect takes -2 and leaves the file untouched (TASK-638)', async () => {
+        mkdirSync(TEST_PROFILES_DIR, { recursive: true });
+        // Malformed: exists on disk but has no parseable API key (e.g. partial write / manual edit).
+        writeFileSync(resolve(TEST_PROFILES_DIR, 'malformed-ws-repo.env'), '# corrupt\nSOME_OTHER_VAR=x\n');
+        mockRedeemOnce('pb_sk_fresh_connect', 'Malformed WS');
+        await runConnect('pb_ct_' + 'a'.repeat(40), { assumeYes: true });
+        // Occupancy is FILE existence (profileFileExists), not a parsed key, so the malformed file
+        // is never read as absent and never replaced.
+        const content = readFileSync(resolve(TEST_PROFILES_DIR, 'malformed-ws-repo.env'), 'utf8');
+        expect(content).not.toContain('pb_sk_fresh_connect');
+        expect(content).toContain('SOME_OTHER_VAR=x');
+        expect(readFileSync(resolve(TEST_PROFILES_DIR, 'malformed-ws-repo-2.env'), 'utf8')).toContain('pb_sk_fresh_connect');
+    });
+});
+//# sourceMappingURL=connect-legacy-migration.test.js.map

package/dist/commands/connect-legacy-migration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-legacy-migration.test.js","sourceRoot":"","sources":["../../src/commands/connect-legacy-migration.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;IAC1F,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChF,OAAO;QACL,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC;QAC9D,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC;QACvE,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC;KAC7E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC3D,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;AAEzB,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,WAAW,EAAE,KAAK,EAAE,IAAY,EAAE,EAA0B,EAAE,EAAE,CAAC,EAAE,EAAE;CACtE,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC;IAClC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IAC5B,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;CAC5B,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;IACxC,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;CAC1C,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACjE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAEjE,SAAS,cAAc,CAAC,MAAc,EAAE,aAAqB;IAC3D,SAAS,CAAC,qBAAqB,CAAC;QAC9B,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;KACtD,CAAC,CAAC;AACjB,CAAC;AAED,QAAQ,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAChF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9B,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,UAAU,CAAC,eAAe,CAAC;YAAE,MAAM,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,aAAa,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;QAChC,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACjH,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC7E,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8HAA8H,EAAE,KAAK,IAAI,EAAE;QAC5I,mEAAmE;QACnE,aAAa,CAAC,gBAAgB,EAAE,qFAAqF,CAAC,CAAC;QACvH,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAElD,cAAc,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC;QACzD,MAAM,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjE,8EAA8E;QAC9E,sFAAsF;QACtF,sFAAsF;QACtF,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAErD,6FAA6F;QAC7F,cAAc;QACd,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9F,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oKAAoK,EAAE,KAAK,IAAI,EAAE;QAClL,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,6FAA6F;QAC7F,aAAa,CAAC,OAAO,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAEpG,cAAc,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjE,2FAA2F;QAC3F,8CAA8C;QAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1F,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/connect-redeem-failure.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=connect-redeem-failure.test.d.ts.map

package/dist/commands/connect-redeem-failure.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-redeem-failure.test.d.ts","sourceRoot":"","sources":["../../src/commands/connect-redeem-failure.test.ts"],"names":[],"mappings":""}

package/dist/commands/connect-redeem-failure.test.js

@@ -0,0 +1,133 @@
+/**
+ * pb never leaves a live key behind, and never kills a key the person owns (WP-810, TASK-648,
+ * DEC-1961, TEN-4516):
+ * - a git-tracked folder pin is refused BEFORE the redeem, so the one-time token stays unspent;
+ * - on a throw after the redeem the profile file is read back: a key no profile holds is revoked,
+ *   and pb says whether the revoke worked;
+ * - a key a profile holds is kept (the person owns it) and the profile is named, so a rotated
+ *   profile, or a profile whose activation marker failed, never ends up holding a dead key.
+ * The decline path's revoke lives in connect-decline.test.ts.
+ */
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+vi.mock('fs', () => ({ mkdirSync: vi.fn(), writeFileSync: vi.fn(), existsSync: vi.fn(() => false), readFileSync: vi.fn() }));
+vi.mock('../lib/spinner.js', () => ({ withSpinner: vi.fn(async (_m, fn) => fn()) }));
+vi.mock('../lib/prompts.js', () => ({ confirm: vi.fn(async () => true), isInteractive: vi.fn(() => true) }));
+vi.mock('@clack/prompts', () => ({ isCancel: vi.fn(() => false), text: vi.fn(async () => '') }));
+vi.mock('../lib/profiles.js', () => ({
+    createProfile: vi.fn(),
+    autoMigrate: vi.fn(),
+    profileFileExists: vi.fn(() => false),
+    profilePath: vi.fn((name) => `/home/u/.config/productbrain/profiles/${name}.env`),
+    resolveNamedProfileConfig: vi.fn(),
+    validateProfileName: vi.fn(),
+}));
+vi.mock('../lib/connectProfileName.js', async (importOriginal) => ({ ...(await importOriginal()), connectFolderName: vi.fn(() => 'my-repo') }));
+vi.mock('../lib/config.js', () => ({ setLocalProfilePin: vi.fn(), readLocalProjectConfig: vi.fn(() => null) }));
+vi.mock('../lib/projectConfig.js', async (importOriginal) => ({ ...(await importOriginal()), refuseTrackedPin: vi.fn() }));
+vi.mock('../lib/session.js', () => ({ discardAllSessions: vi.fn() }));
+vi.mock('../lib/productbrain-files.js', () => ({ sealConnectWrites: vi.fn(() => ({ added: [], stillExposed: [] })) }));
+vi.mock('./connect-screens.js', () => ({ runConnectScreens: vi.fn(async () => { }), runConnectHeadless: vi.fn(async () => { }) }));
+import { runConnect } from './connect.js';
+import { readLocalProjectConfig, setLocalProfilePin } from '../lib/config.js';
+import { createProfile, profileFileExists, resolveNamedProfileConfig } from '../lib/profiles.js';
+import { composeProfileName } from '../lib/connectProfileName.js';
+import { refuseTrackedPin } from '../lib/projectConfig.js';
+const TOKEN = 'pb_ct_' + 'a'.repeat(40);
+const KEY = 'pb_sk_' + 'f'.repeat(48);
+const GATEWAY = 'https://example.convex.site';
+const mockFetch = vi.fn();
+global.fetch = mockFetch;
+function redeemOk() {
+    mockFetch.mockResolvedValueOnce({
+        ok: true,
+        json: async () => ({ apiKey: KEY, workspaceId: 'ws1', workspaceName: 'Acme', workspaceSlug: 'acme' }),
+    });
+}
+const trackedPin = () => new CLIError('/repo/.productbrain/config.local.json is tracked by git, so it is committed and every clone shares it. Refusing to use it.', {
+    code: ErrorCode.CONFIG_INVALID,
+    category: 'config',
+    guidance: 'Untrack it with `git rm --cached .productbrain/config.local.json`, then run `pb files --fix` so git ignores it.',
+});
+describe('pb connect never leaves a live key behind (TASK-648)', () => {
+    let stderr;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        mockFetch.mockReset();
+        vi.mocked(readLocalProjectConfig).mockReset().mockReturnValue(null);
+        vi.mocked(setLocalProfilePin).mockReset();
+        // A fake profiles dir: createProfile stores the key, and the read-back sees what is stored.
+        const disk = new Map();
+        vi.mocked(createProfile).mockReset().mockImplementation((name, apiKey) => { disk.set(name, apiKey); });
+        vi.mocked(resolveNamedProfileConfig).mockReset().mockImplementation((name) => (disk.has(name) ? { apiKey: disk.get(name) } : null));
+        vi.mocked(profileFileExists).mockReset().mockReturnValue(false);
+        vi.mocked(refuseTrackedPin).mockReset();
+        stderr = '';
+        vi.spyOn(process.stderr, 'write').mockImplementation((chunk) => { stderr += String(chunk); return true; });
+    });
+    it('refuses a git-tracked pin before the redeem: no network call, so the token is unspent', async () => {
+        vi.mocked(readLocalProjectConfig).mockImplementation(() => { throw trackedPin(); });
+        await expect(runConnect(TOKEN, { gateway: GATEWAY })).rejects.toThrow(/tracked by git/);
+        expect(mockFetch).not.toHaveBeenCalled();
+        expect(createProfile).not.toHaveBeenCalled();
+    });
+    it('refuses a tracked pin in the folder the connect writes, before the redeem, and pins exactly that folder', async () => {
+        vi.mocked(refuseTrackedPin).mockImplementationOnce(() => { throw trackedPin(); });
+        await expect(runConnect(TOKEN, { gateway: GATEWAY })).rejects.toThrow(/tracked by git/);
+        expect(mockFetch).not.toHaveBeenCalled();
+        // One decider: the folder checked before the redeem is the folder the pin is written to.
+        redeemOk();
+        await runConnect(TOKEN, { gateway: GATEWAY });
+        const checked = vi.mocked(refuseTrackedPin).mock.calls.at(-1)?.[0];
+        expect(checked).toBe(process.cwd());
+        expect(vi.mocked(setLocalProfilePin).mock.calls[0][0]).toBe(checked);
+    });
+    it('revokes the redeemed key when the profile save throws, before the key is stored anywhere, and rethrows', async () => {
+        redeemOk();
+        mockFetch.mockResolvedValueOnce({ ok: true, json: async () => ({ ok: true, data: { revoked: true } }) });
+        vi.mocked(createProfile).mockImplementation(() => { throw new Error('EACCES: permission denied'); });
+        await expect(runConnect(TOKEN, { gateway: GATEWAY })).rejects.toThrow('EACCES');
+        expect(mockFetch).toHaveBeenCalledTimes(2);
+        const [url, init] = mockFetch.mock.calls[1];
+        expect(url).toBe(`${GATEWAY}/api/aki`);
+        expect(init.headers.Authorization).toBe(`Bearer ${KEY}`);
+        expect(JSON.parse(String(init.body))).toEqual({ fn: 'apiKeys.revokeCallingKey', args: {} });
+        expect(stderr).toContain('The key this token created was revoked.');
+    });
+    it('names the key and its Settings page when that revoke fails, and never prints the key', async () => {
+        redeemOk();
+        mockFetch.mockRejectedValueOnce(new Error('fetch failed'));
+        vi.mocked(createProfile).mockImplementation(() => { throw new Error('disk full'); });
+        await expect(runConnect(TOKEN, { gateway: GATEWAY, name: 'Laptop CLI' })).rejects.toThrow('disk full');
+        expect(stderr).toContain('could not be revoked. Revoke "Laptop CLI" in Settings → API keys:');
+        expect(stderr).toContain('/w/acme/settings/api-keys');
+        expect(stderr).not.toContain(KEY);
+    });
+    it('keeps the key when the profile file was written before createProfile threw (activation marker failed)', async () => {
+        redeemOk();
+        vi.mocked(createProfile).mockImplementation((name, apiKey) => {
+            vi.mocked(resolveNamedProfileConfig).mockImplementation((n) => (n === name ? { apiKey } : null));
+            throw new Error('ENOSPC: no space left on device, open active-profile');
+        });
+        await expect(runConnect(TOKEN, { gateway: GATEWAY })).rejects.toThrow('ENOSPC');
+        expect(mockFetch).toHaveBeenCalledTimes(1); // the redeem only: no revoke
+        expect(stderr).toContain('pb connect stopped after saving the key.');
+        expect(stderr).not.toContain('revoked');
+    });
+    it('keeps the key once the profile holds it: a rotated profile whose pin write fails still holds a live key', async () => {
+        // The folder is already pinned to its own profile, so this connect rotates that profile's key.
+        const own = composeProfileName('Acme', 'my-repo', 1);
+        vi.mocked(readLocalProjectConfig).mockReturnValue({ profile: own });
+        vi.mocked(profileFileExists).mockImplementation((name) => name === own);
+        redeemOk();
+        vi.mocked(setLocalProfilePin).mockImplementation(() => { throw new Error('EACCES: permission denied'); });
+        await expect(runConnect(TOKEN, { gateway: GATEWAY })).rejects.toThrow('EACCES');
+        expect(createProfile).toHaveBeenCalledWith(own, KEY, GATEWAY, { overwrite: true });
+        expect(mockFetch).toHaveBeenCalledTimes(1); // the redeem only: no revoke
+        expect(stderr).toContain(`is in profile "${own}" (/home/u/.config/productbrain/profiles/${own}.env)`);
+        expect(stderr).toContain(`pb profile use --local ${own}`);
+        expect(stderr).not.toContain('revoked');
+        expect(stderr).not.toContain(KEY);
+    });
+});
+//# sourceMappingURL=connect-redeem-failure.test.js.map

package/dist/commands/connect-redeem-failure.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-redeem-failure.test.js","sourceRoot":"","sources":["../../src/commands/connect-redeem-failure.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEvD,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7H,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,EAA0B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACrH,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACjG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IACrC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,yCAAyC,IAAI,MAAM,CAAC;IACzF,yBAAyB,EAAE,EAAE,CAAC,EAAE,EAAE;IAClC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC7B,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,cAAc,EAAU,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AACxJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAChH,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,cAAc,EAAU,CAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACnI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACtE,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvH,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjI,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACtC,MAAM,OAAO,GAAG,6BAA6B,CAAC;AAC9C,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;AAEzB,SAAS,QAAQ;IACf,SAAS,CAAC,qBAAqB,CAAC;QAC9B,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;KAC1F,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,GAAG,GAAG,EAAE,CACtB,IAAI,QAAQ,CAAC,4HAA4H,EAAE;IACzI,IAAI,EAAE,SAAS,CAAC,cAAc;IAC9B,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,iHAAiH;CAC5H,CAAC,CAAC;AAEL,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,IAAI,MAAc,CAAC;IACnB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACpE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,SAAS,EAAE,CAAC;QAC1C,4FAA4F;QAC5F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvH,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7I,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,GAAG,EAAE,CAAC;QACZ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAA0B,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpF,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAExF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yGAAyG,EAAE,KAAK,IAAI,EAAE;QACvH,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,MAAM,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAEzC,yFAAyF;QACzF,QAAQ,EAAE,CAAC;QACX,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACtH,QAAQ,EAAE,CAAC;QACX,SAAS,CAAC,qBAAqB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAc,CAAC,CAAC;QACrH,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAErG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEhF,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA0B,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC;QACvC,MAAM,CAAE,IAAI,CAAC,OAAkC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,QAAQ,EAAE,CAAC;QACX,SAAS,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC3D,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAErF,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAEvG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mEAAmE,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uGAAuG,EAAE,KAAK,IAAI,EAAE;QACrH,QAAQ,EAAE,CAAC;QACX,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;YAC3E,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACzG,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEhF,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B;QACzE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yGAAyG,EAAE,KAAK,IAAI,EAAE;QACvH,+FAA+F;QAC/F,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACrD,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAChF,QAAQ,EAAE,CAAC;QACX,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1G,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEhF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B;QACzE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kBAAkB,GAAG,4CAA4C,GAAG,OAAO,CAAC,CAAC;QACtG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/connect-screens.d.ts

@@ -1,23 +1,17 @@
 /**
- * Ink screens for `pb connect` post-redemption wizard.
+ * What `pb connect` prints once the folder is connected: the workspace, the profile and one next
+ * step, pb init (TASK-562, WP-861). The hooks pb init writes open the session in the agent, so
+ * connect prints no chat sentence; the handoff that printed one is deleted.
  *
- * Screen 1 — ConnectedScreen: shows workspace name + synced context file list.
- * Screen 2 — ProfileScreen: shows profile name + multi-workspace hint.
- *
- * Each screen waits for "any key" via useInput before resolving.
- * After both screens complete, the caller prints the tailored handoff message (WP-433 FEAT-1291).
- *
- * Chain: WP-325 S3, FEAT-1031, WP-379 S3b (seed polling)
+ * TASK-959 (DEC-1926, DEC-1921): pb connect writes no context files; pb init installs the hooks.
  */
+/** RULE-662: the one next step, two short sentences, true for what pb init writes (Claude Code, Codex, Cursor). */
+export declare const CONNECT_NEXT_STEP = "Next: run pb init here. It adds session hooks for Claude Code, Codex and Cursor.";
+/** Interactive terminal: the same three lines, coloured. `workspaceName` is pre-sanitized (stripControlChars). */
+export declare function runConnectScreens(workspaceName: string, profileName: string): Promise<void>;
 /**
- * Runs the post-connect Ink wizard:
- * 1. Prepares workspace context — waits for starter-setup seeds to be ready,
- *    then runs a lenient handshake (see prepareConnectContext). Seeds must be
- *    ready before the handshake fetches their bodies (WP-379 S3b, WP-439 S4).
- * 2. Renders ConnectedScreen, waits for keypress.
- * 3. Renders ProfileScreen, waits for keypress.
- *
- * After this resolves, the caller prints the tailored handoff message (WP-433 FEAT-1291).
+ * Headless summary for `pb connect --yes` without a TTY (e.g. CI, TEN-2561 / WP-2): plain text, no
+ * colour codes. `workspaceName` is pre-sanitized by the caller (stripControlChars).
  */
-export declare function runConnectScreens(workspaceName: string, profileName: string): Promise<void>;
+export declare function runConnectHeadless(workspaceName: string, profileName: string): Promise<void>;
 //# sourceMappingURL=connect-screens.d.ts.map

package/dist/commands/connect-screens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect-screens.d.ts","sourceRoot":"","sources":["../../src/commands/connect-screens.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAkLH;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCjG"}
+{"version":3,"file":"connect-screens.d.ts","sourceRoot":"","sources":["../../src/commands/connect-screens.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,mHAAmH;AACnH,eAAO,MAAM,iBAAiB,qFAAiG,CAAC;AAQhI,kHAAkH;AAClH,wBAAsB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjG;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAElG"}

package/dist/commands/connect-screens.js

@@ -1,90 +1,28 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
- * Ink screens for `pb connect` post-redemption wizard.
+ * What `pb connect` prints once the folder is connected: the workspace, the profile and one next
+ * step, pb init (TASK-562, WP-861). The hooks pb init writes open the session in the agent, so
+ * connect prints no chat sentence; the handoff that printed one is deleted.
  *
- * Screen 1 — ConnectedScreen: shows workspace name + synced context file list.
- * Screen 2 — ProfileScreen: shows profile name + multi-workspace hint.
- *
- * Each screen waits for "any key" via useInput before resolving.
- * After both screens complete, the caller prints the tailored handoff message (WP-433 FEAT-1291).
- *
- * Chain: WP-325 S3, FEAT-1031, WP-379 S3b (seed polling)
+ * TASK-959 (DEC-1926, DEC-1921): pb connect writes no context files; pb init installs the hooks.
  */
-import React from 'react';
-import { render, Box, Text, useInput, useApp } from 'ink';
-import { prepareConnectContext } from './connect-context.js';
-// Surfaces pb projects context files to. Rendered as the "synced" list, minus
-// any surface whose file the handshake left untouched (TEN-2107) — so a file is
-// never shown as both synced and left-untouched.
-const PROJECTED_SURFACES = [
-    { file: '.cursor/rules/', arrow: '    → ', tool: 'Cursor' },
-    { file: 'CLAUDE.md', arrow: '          → ', tool: 'Claude Code' },
-    { file: '.github/', arrow: '           → ', tool: 'GitHub Copilot' },
-    { file: 'AGENTS.md', arrow: '          → ', tool: 'Codex / CI' },
-];
-function ConnectedScreen({ workspaceName, handshakeFailed, handshakeError, seedGaps, skippedFiles, onExit }) {
-    const { exit } = useApp();
-    useInput(() => {
-        onExit();
-        exit();
-    });
-    // A surface is "left untouched" when a skipped file equals it (CLAUDE.md,
-    // AGENTS.md) or sits under it (.cursor/rules/*, .github/*).
-    const isLeftUntouched = (surfaceFile) => (skippedFiles ?? []).some((f) => f === surfaceFile || f.startsWith(surfaceFile));
-    const syncedSurfaces = PROJECTED_SURFACES.filter((s) => !isLeftUntouched(s.file));
-    return (_jsxs(Box, { flexDirection: "column", paddingTop: 1, paddingBottom: 1, children: [_jsxs(Box, { marginBottom: 1, children: [_jsx(Text, { color: "green", bold: true, children: '✓ ' }), _jsx(Text, { bold: true, children: 'Connected to ' }), _jsx(Text, { bold: true, color: "green", children: workspaceName })] }), !handshakeFailed && syncedSurfaces.length > 0 && (_jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { children: 'Context files synced to your AI tools:' }) }), _jsx(Box, { flexDirection: "column", marginLeft: 2, children: syncedSurfaces.map((s) => (_jsxs(Box, { children: [_jsx(Text, { dimColor: true, children: s.file }), _jsx(Text, { dimColor: true, children: s.arrow }), _jsx(Text, { children: s.tool })] }, s.file))) }), _jsxs(Box, { marginTop: 1, marginLeft: 2, children: [_jsx(Text, { dimColor: true, children: 'These update when you run ' }), _jsx(Text, { dimColor: true, bold: true, children: '`pb session start`' })] })] })), handshakeFailed && (_jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsxs(Box, { children: [_jsx(Text, { dimColor: true, children: '⚠ Context sync skipped' }), handshakeError && (_jsx(Text, { dimColor: true, children: ` — ${handshakeError}` }))] }), _jsx(Box, { marginLeft: 2, children: _jsx(Text, { dimColor: true, children: 'Run `pb handshake` manually to set up context files.' }) })] })), seedGaps && seedGaps.length > 0 && (_jsx(Box, { flexDirection: "column", marginBottom: 1, marginTop: 1, children: seedGaps.map((gap, i) => (_jsxs(Box, { children: [_jsx(Text, { color: "yellow", children: '⚠ ' }), _jsx(Text, { dimColor: true, children: `${gap.message} (kind: ${gap.kind}). Wait a few seconds and re-run ` }), _jsx(Text, { dimColor: true, bold: true, children: 'pb connect' }), _jsx(Text, { dimColor: true, children: '.' })] }, i))) })), skippedFiles && skippedFiles.length > 0 && (_jsx(Box, { flexDirection: "column", marginBottom: 1, children: _jsxs(Box, { children: [_jsx(Text, { dimColor: true, children: 'Left untouched (your own files): ' }), _jsx(Text, { children: skippedFiles.join(', ') })] }) })), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: 'Press any key to continue' }) })] }));
+import { CLI_INIT_COMMAND } from '../lib/cliFirstRun.js';
+import { bold, green } from '../lib/style.js';
+/** RULE-662: the one next step, two short sentences, true for what pb init writes (Claude Code, Codex, Cursor). */
+export const CONNECT_NEXT_STEP = `Next: run ${CLI_INIT_COMMAND} here. It adds session hooks for Claude Code, Codex and Cursor.`;
+function connectedLines(workspaceName, profileName, styled) {
+    const name = styled ? bold(green(workspaceName)) : workspaceName;
+    const profile = styled ? bold(profileName) : profileName;
+    return `${styled ? green('✓') : '✓'} Connected to ${name}\nYour API key is saved as profile ${profile}.\n${CONNECT_NEXT_STEP}\n`;
 }
-function ProfileScreen({ profileName, onExit }) {
-    const { exit } = useApp();
-    useInput(() => {
-        onExit();
-        exit();
-    });
-    return (_jsxs(Box, { flexDirection: "column", paddingTop: 1, paddingBottom: 1, children: [_jsxs(Box, { marginBottom: 1, children: [_jsx(Text, { children: 'Your API key is saved as profile ' }), _jsx(Text, { bold: true, color: "cyan", children: profileName })] }), _jsxs(Box, { flexDirection: "column", marginBottom: 1, marginLeft: 2, children: [_jsx(Box, { children: _jsx(Text, { dimColor: true, children: 'To connect another workspace:' }) }), _jsx(Box, { marginLeft: 2, children: _jsx(Text, { children: 'pb connect <token>' }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: 'To switch between workspaces:' }) }), _jsx(Box, { marginLeft: 2, children: _jsx(Text, { children: 'pb use <profile>' }) })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: 'Press any key to continue' }) })] }));
+/** Interactive terminal: the same three lines, coloured. `workspaceName` is pre-sanitized (stripControlChars). */
+export async function runConnectScreens(workspaceName, profileName) {
+    process.stdout.write(`\n${connectedLines(workspaceName, profileName, true)}\n`);
 }
-// ---------------------------------------------------------------------------
-// Runner — handshake + sequential screen rendering
-// ---------------------------------------------------------------------------
 /**
- * Runs the post-connect Ink wizard:
- * 1. Prepares workspace context — waits for starter-setup seeds to be ready,
- *    then runs a lenient handshake (see prepareConnectContext). Seeds must be
- *    ready before the handshake fetches their bodies (WP-379 S3b, WP-439 S4).
- * 2. Renders ConnectedScreen, waits for keypress.
- * 3. Renders ProfileScreen, waits for keypress.
- *
- * After this resolves, the caller prints the tailored handoff message (WP-433 FEAT-1291).
+ * Headless summary for `pb connect --yes` without a TTY (e.g. CI, TEN-2561 / WP-2): plain text, no
+ * colour codes. `workspaceName` is pre-sanitized by the caller (stripControlChars).
  */
-export async function runConnectScreens(workspaceName, profileName) {
-    // Prepare workspace context for the screens: wait for starter-setup seeds to
-    // be ready, then run a lenient handshake. Ordering + lenience matter on fresh
-    // workspaces — see prepareConnectContext (connect-context.ts).
-    const { handshakeFailed, handshakeError, seedGaps, skippedFiles } = await prepareConnectContext();
-    // Screen 1 — ConnectedScreen
-    await new Promise((resolve) => {
-        const { unmount, waitUntilExit } = render(React.createElement(ConnectedScreen, {
-            workspaceName,
-            handshakeFailed,
-            handshakeError,
-            seedGaps,
-            skippedFiles,
-            onExit: () => {
-                unmount();
-                resolve();
-            },
-        }));
-        void waitUntilExit().catch(() => resolve());
-    });
-    // Screen 2 — ProfileScreen
-    await new Promise((resolve) => {
-        const { unmount, waitUntilExit } = render(React.createElement(ProfileScreen, {
-            profileName,
-            onExit: () => {
-                unmount();
-                resolve();
-            },
-        }));
-        void waitUntilExit().catch(() => resolve());
-    });
+export async function runConnectHeadless(workspaceName, profileName) {
+    process.stdout.write(connectedLines(workspaceName, profileName, false));
 }
 //# sourceMappingURL=connect-screens.js.map

package/dist/commands/connect-screens.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect-screens.js","sourceRoot":"","sources":["../../src/commands/connect-screens.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAE1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAiB7D,8EAA8E;AAC9E,gFAAgF;AAChF,iDAAiD;AACjD,MAAM,kBAAkB,GAAiE;IACvF,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3D,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE;IACjE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE;IACpE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE;CACjE,CAAC;AAEF,SAAS,eAAe,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAwB;IAC/H,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAE1B,QAAQ,CAAC,GAAG,EAAE;QACZ,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,eAAe,GAAG,CAAC,WAAmB,EAAE,EAAE,CAC9C,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IACnF,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAElF,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,aAEzD,MAAC,GAAG,IAAC,YAAY,EAAE,CAAC,aAClB,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,EAAC,IAAI,kBAAE,IAAI,GAAQ,EACtC,KAAC,IAAI,IAAC,IAAI,kBAAE,eAAe,GAAQ,EACnC,KAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAC,OAAO,YAAE,aAAa,GAAQ,IAC3C,EAIL,CAAC,eAAe,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAChD,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,aACzC,KAAC,GAAG,IAAC,YAAY,EAAE,CAAC,YAClB,KAAC,IAAI,cAAE,wCAAwC,GAAQ,GACnD,EACN,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,UAAU,EAAE,CAAC,YACtC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACzB,MAAC,GAAG,eACF,KAAC,IAAI,IAAC,QAAQ,kBAAE,CAAC,CAAC,IAAI,GAAQ,EAC9B,KAAC,IAAI,IAAC,QAAQ,kBAAE,CAAC,CAAC,KAAK,GAAQ,EAC/B,KAAC,IAAI,cAAE,CAAC,CAAC,IAAI,GAAQ,KAHb,CAAC,CAAC,IAAI,CAIV,CACP,CAAC,GACE,EACN,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,aAC9B,KAAC,IAAI,IAAC,QAAQ,kBAAE,4BAA4B,GAAQ,EACpD,KAAC,IAAI,IAAC,QAAQ,QAAC,IAAI,kBAAE,oBAAoB,GAAQ,IAC7C,IACF,CACP,EACA,eAAe,IAAI,CAClB,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,aACzC,MAAC,GAAG,eACF,KAAC,IAAI,IAAC,QAAQ,kBAAE,wBAAwB,GAAQ,EAC/C,cAAc,IAAI,CACjB,KAAC,IAAI,IAAC,QAAQ,kBAAE,MAAM,cAAc,EAAE,GAAQ,CAC/C,IACG,EACN,KAAC,GAAG,IAAC,UAAU,EAAE,CAAC,YAChB,KAAC,IAAI,IAAC,QAAQ,kBAAE,sDAAsD,GAAQ,GAC1E,IACF,CACP,EAGA,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAClC,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,YACtD,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CACxB,MAAC,GAAG,eACF,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,YAAE,IAAI,GAAQ,EAClC,KAAC,IAAI,IAAC,QAAQ,kBAAE,GAAG,GAAG,CAAC,OAAO,WAAW,GAAG,CAAC,IAAI,mCAAmC,GAAQ,EAC5F,KAAC,IAAI,IAAC,QAAQ,QAAC,IAAI,kBAAE,YAAY,GAAQ,EACzC,KAAC,IAAI,IAAC,QAAQ,kBAAE,GAAG,GAAQ,KAJnB,CAAC,CAKL,CACP,CAAC,GACE,CACP,EAKA,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAC1C,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,YACzC,MAAC,GAAG,eACF,KAAC,IAAI,IAAC,QAAQ,kBAAE,mCAAmC,GAAQ,EAC3D,KAAC,IAAI,cAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAQ,IAClC,GACF,CACP,EAGD,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YACf,KAAC,IAAI,IAAC,QAAQ,kBAAE,2BAA2B,GAAQ,GAC/C,IACF,CACP,CAAC;AACJ,CAAC;AAWD,SAAS,aAAa,CAAC,EAAE,WAAW,EAAE,MAAM,EAAsB;IAChE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAE1B,QAAQ,CAAC,GAAG,EAAE;QACZ,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,aAEzD,MAAC,GAAG,IAAC,YAAY,EAAE,CAAC,aAClB,KAAC,IAAI,cAAE,mCAAmC,GAAQ,EAClD,KAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAC,MAAM,YAAE,WAAW,GAAQ,IACxC,EAGN,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,aACxD,KAAC,GAAG,cACF,KAAC,IAAI,IAAC,QAAQ,kBAAE,+BAA+B,GAAQ,GACnD,EACN,KAAC,GAAG,IAAC,UAAU,EAAE,CAAC,YAChB,KAAC,IAAI,cAAE,oBAAoB,GAAQ,GAC/B,EACN,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YACf,KAAC,IAAI,IAAC,QAAQ,kBAAE,+BAA+B,GAAQ,GACnD,EACN,KAAC,GAAG,IAAC,UAAU,EAAE,CAAC,YAChB,KAAC,IAAI,cAAE,kBAAkB,GAAQ,GAC7B,IACF,EAGN,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YACf,KAAC,IAAI,IAAC,QAAQ,kBAAE,2BAA2B,GAAQ,GAC/C,IACF,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,aAAqB,EAAE,WAAmB;IAChF,6EAA6E;IAC7E,8EAA8E;IAC9E,+DAA+D;IAC/D,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAElG,6BAA6B;IAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CACvC,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE;YACnC,aAAa;YACb,eAAe;YACf,cAAc;YACd,QAAQ;YACR,YAAY;YACZ,MAAM,EAAE,GAAG,EAAE;gBACX,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;YACZ,CAAC;SACF,CAAC,CACH,CAAC;QACF,KAAK,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CACvC,KAAK,CAAC,aAAa,CAAC,aAAa,EAAE;YACjC,WAAW;YACX,MAAM,EAAE,GAAG,EAAE;gBACX,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;YACZ,CAAC;SACF,CAAC,CACH,CAAC;QACF,KAAK,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"connect-screens.js","sourceRoot":"","sources":["../../src/commands/connect-screens.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE9C,mHAAmH;AACnH,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,gBAAgB,iEAAiE,CAAC;AAEhI,SAAS,cAAc,CAAC,aAAqB,EAAE,WAAmB,EAAE,MAAe;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACzD,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,sCAAsC,OAAO,MAAM,iBAAiB,IAAI,CAAC;AACnI,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,aAAqB,EAAE,WAAmB;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,cAAc,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,aAAqB,EAAE,WAAmB;IACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1E,CAAC"}

package/dist/commands/connect-screens.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=connect-screens.test.d.ts.map

package/dist/commands/connect-screens.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-screens.test.d.ts","sourceRoot":"","sources":["../../src/commands/connect-screens.test.ts"],"names":[],"mappings":""}

package/dist/commands/connect-screens.test.js

@@ -0,0 +1,19 @@
+/**
+ * TASK-562 (DEC-1926): pb connect names one next step, pb init, and prints no chat sentence,
+ * no handshake and no second set of hints.
+ */
+import { describe, it, expect, vi, afterEach } from 'vitest';
+import { runConnectHeadless, CONNECT_NEXT_STEP } from './connect-screens.js';
+describe('runConnectHeadless', () => {
+    afterEach(() => vi.restoreAllMocks());
+    it('prints the workspace, the profile and the one pb init next step', async () => {
+        let out = '';
+        vi.spyOn(process.stdout, 'write').mockImplementation((chunk) => { out += String(chunk); return true; });
+        await runConnectHeadless('Acme', 'acme-my-repo');
+        expect(out).toBe(`✓ Connected to Acme\nYour API key is saved as profile acme-my-repo.\n${CONNECT_NEXT_STEP}\n`);
+        // S2 PR 2: pb init writes the Codex and Cursor hooks too, so the next step names all three.
+        expect(CONNECT_NEXT_STEP).toBe('Next: run pb init here. It adds session hooks for Claude Code, Codex and Cursor.');
+        expect(out).not.toMatch(/handshake|context files|Start Product Brain|pb connect <token>|pb use/i);
+    });
+});
+//# sourceMappingURL=connect-screens.test.js.map

package/dist/commands/connect-screens.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-screens.test.js","sourceRoot":"","sources":["../../src/commands/connect-screens.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;IAEtC,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAExG,MAAM,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAEjD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,wEAAwE,iBAAiB,IAAI,CAAC,CAAC;QAChH,4FAA4F;QAC5F,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QACnH,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,wEAAwE,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/connect-seal.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=connect-seal.test.d.ts.map

package/dist/commands/connect-seal.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-seal.test.d.ts","sourceRoot":"","sources":["../../src/commands/connect-seal.test.ts"],"names":[],"mappings":""}

package/dist/commands/connect-seal.test.js

@@ -0,0 +1,54 @@
+/**
+ * pb connect seals the folder's pin AFTER it is written and after stale sessions are dropped, and
+ * a .gitignore problem only warns: the connect still completes (TASK-641, TEN-2598, PR #1530 review).
+ * The real-git behaviour of sealConnectWrites lives in lib/productbrain-files.test.ts.
+ */
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+vi.mock('fs', () => ({ mkdirSync: vi.fn(), writeFileSync: vi.fn(), existsSync: vi.fn(() => false), readFileSync: vi.fn() }));
+vi.mock('../lib/spinner.js', () => ({ withSpinner: vi.fn(async (_m, fn) => fn()) }));
+vi.mock('../lib/prompts.js', () => ({ confirm: vi.fn(async () => true), isInteractive: vi.fn(() => true) }));
+vi.mock('@clack/prompts', () => ({ isCancel: vi.fn(() => false), text: vi.fn(async () => '') }));
+vi.mock('../lib/profiles.js', () => ({ createProfile: vi.fn(), autoMigrate: vi.fn(), profileFileExists: vi.fn(() => false), validateProfileName: vi.fn() }));
+vi.mock('../lib/connectProfileName.js', async (importOriginal) => ({ ...(await importOriginal()), connectFolderName: vi.fn(() => 'my-repo') }));
+// A prior pin for another workspace: the redirect path drops every session marker.
+vi.mock('../lib/config.js', () => ({ setLocalProfilePin: vi.fn(), readLocalProjectConfig: vi.fn(() => ({ profile: 'other-ws-my-repo' })) }));
+vi.mock('../lib/session.js', () => ({ discardAllSessions: vi.fn() }));
+vi.mock('../lib/productbrain-files.js', () => ({ sealConnectWrites: vi.fn() }));
+vi.mock('./connect-screens.js', () => ({ runConnectScreens: vi.fn(async () => { }), runConnectHeadless: vi.fn(async () => { }) }));
+import { runConnect } from './connect.js';
+import { sealConnectWrites } from '../lib/productbrain-files.js';
+import { setLocalProfilePin } from '../lib/config.js';
+import { discardAllSessions } from '../lib/session.js';
+import { runConnectScreens } from './connect-screens.js';
+const TOKEN = 'pb_ct_' + 'a'.repeat(40);
+const mockFetch = vi.fn();
+global.fetch = mockFetch;
+describe('pb connect — sealing the pin (TASK-641)', () => {
+    let stderr;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        stderr = '';
+        vi.spyOn(process.stderr, 'write').mockImplementation((chunk) => { stderr += String(chunk); return true; });
+        mockFetch.mockResolvedValueOnce({ ok: true, json: async () => ({ apiKey: 'pb_sk_x', workspaceId: 'ws1', workspaceName: 'Acme' }) });
+    });
+    it('seals once, with the cwd, after the pin is written and after the session discard', async () => {
+        vi.mocked(sealConnectWrites).mockReturnValue({ git: true, added: ['.productbrain/config.local.json'], stillExposed: [] });
+        await runConnect(TOKEN, { gateway: 'https://example.convex.site' });
+        expect(sealConnectWrites).toHaveBeenCalledTimes(1);
+        expect(sealConnectWrites).toHaveBeenCalledWith(process.cwd());
+        const sealAt = vi.mocked(sealConnectWrites).mock.invocationCallOrder[0];
+        expect(vi.mocked(setLocalProfilePin).mock.invocationCallOrder[0]).toBeLessThan(sealAt);
+        expect(vi.mocked(discardAllSessions).mock.invocationCallOrder[0]).toBeLessThan(sealAt);
+        expect(stderr).toContain('Added to .gitignore: .productbrain/config.local.json');
+    });
+    it('a .gitignore that cannot be written only warns: sessions are discarded and the connect completes', async () => {
+        vi.mocked(sealConnectWrites).mockReturnValue({
+            git: true, added: [], stillExposed: ['.productbrain/config.local.json'], writeError: 'could not write /repo/.gitignore: EACCES',
+        });
+        await expect(runConnect(TOKEN, { gateway: 'https://example.convex.site' })).resolves.toBeUndefined();
+        expect(discardAllSessions).toHaveBeenCalled();
+        expect(runConnectScreens).toHaveBeenCalledWith('Acme', 'acme-my-repo');
+        expect(stderr).toContain('Not git-ignored (could not write /repo/.gitignore: EACCES): .productbrain/config.local.json — run `pb files`');
+    });
+});
+//# sourceMappingURL=connect-seal.test.js.map

package/dist/commands/connect-seal.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-seal.test.js","sourceRoot":"","sources":["../../src/commands/connect-seal.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7H,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,EAA0B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACrH,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACjG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7J,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,cAAc,EAAU,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AACxJ,mFAAmF;AACnF,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7I,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACtE,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAChF,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjI,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;AAEzB,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,IAAI,MAAc,CAAC;IACnB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,GAAG,EAAE,CAAC;QACZ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAA0B,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChI,SAAS,CAAC,qBAAqB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAc,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,iCAAiC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAE1H,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAEpE,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sDAAsD,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;QAChH,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,eAAe,CAAC;YAC3C,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,iCAAiC,CAAC,EAAE,UAAU,EAAE,0CAA0C;SAChI,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAErG,MAAM,CAAC,kBAAkB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,8GAA8G,CAAC,CAAC;IAC3I,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}