@productbrain/cli 0.1.0-beta.1428 → 0.1.0-beta.14295

package/dist/lib/prompts.js

@@ -63,6 +63,8 @@ export async function confirm(opts) {
         message: opts.message,
         initialValue: opts.initialValue,
     });
+    if (opts.cancelValue !== undefined && isCancelled(result))
+        return opts.cancelValue;
     handleCancel(result);
     return result;
 }

package/dist/lib/prompts.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/lib/prompts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA0BtD,iBAAiB;AAEjB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEpC,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAAC,uCAAuC,EAAE;YAC1D,IAAI,EAAE,SAAS,CAAC,eAAe;YAC/B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,4CAA4C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE;YACjD,IAAI,EAAE,SAAS,CAAC,eAAe;YAC/B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,2EAA2E;SACtF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAAC,+BAA+B,EAAE;YAClD,IAAI,EAAE,SAAS,CAAC,eAAe;YAC/B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,4CAA4C;SACvD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,kBAAkB;AAElB,8EAA8E;AAC9E,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AAClE,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAmB;IAC3C,iBAAiB,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAgB,CAAC;AAC1B,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAoB;IAChD,iBAAiB,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAiB,CAAC;AAC3B,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAI,IAAsB;IACpD,iBAAiB,EAAE,CAAC;IACpB,qFAAqF;IACrF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAwD;KACvE,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,iBAAiB,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAgB,CAAC;AAC1B,CAAC;AASD,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAI,IAA2B;IAC9D,iBAAiB,EAAE,CAAC;IACpB,4DAA4D;IAC5D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAA6D;QAC3E,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAyE;KAC9F,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAa,CAAC;AACvB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,KAAK,CAAC,KAAc;IAClC,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,KAAK,CAAC,OAAgB;IACpC,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,KAAc;IAClD,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,IAAI,EAAK,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAI,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IAC5G,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9G,IAAI,EAAK,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAI,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9G,KAAK,EAAI,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAG,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9G,IAAI,EAAK,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAI,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IAC5G,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,aAAa,EAAE;QACxC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QACxB,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;CAC5E,CAAC"}
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/lib/prompts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA4BtD,iBAAiB;AAEjB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEpC,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAAC,uCAAuC,EAAE;YAC1D,IAAI,EAAE,SAAS,CAAC,eAAe;YAC/B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,4CAA4C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE;YACjD,IAAI,EAAE,SAAS,CAAC,eAAe;YAC/B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,2EAA2E;SACtF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAAC,+BAA+B,EAAE;YAClD,IAAI,EAAE,SAAS,CAAC,eAAe;YAC/B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,4CAA4C;SACvD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,kBAAkB;AAElB,8EAA8E;AAC9E,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AAClE,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAmB;IAC3C,iBAAiB,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAgB,CAAC;AAC1B,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAoB;IAChD,iBAAiB,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC;IACnF,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAiB,CAAC;AAC3B,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAI,IAAsB;IACpD,iBAAiB,EAAE,CAAC;IACpB,qFAAqF;IACrF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAwD;KACvE,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,iBAAiB,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAgB,CAAC;AAC1B,CAAC;AASD,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAI,IAA2B;IAC9D,iBAAiB,EAAE,CAAC;IACpB,4DAA4D;IAC5D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAA6D;QAC3E,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAyE;KAC9F,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAa,CAAC;AACvB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,KAAK,CAAC,KAAc;IAClC,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,KAAK,CAAC,OAAgB;IACpC,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,KAAc;IAClD,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,IAAI,EAAK,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAI,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IAC5G,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9G,IAAI,EAAK,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAI,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9G,KAAK,EAAI,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAG,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9G,IAAI,EAAK,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAI,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IAC5G,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,aAAa,EAAE;QACxC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QACxB,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;CAC5E,CAAC"}

package/dist/lib/proseBody.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The body, else the given legacy key — the ONE pure prose-resolution rule every backend, CLI
+ * and MCP reader uses (WP-770 B2a/B2b). A blank body counts as absent; a legacy value is
+ * returned as soon as it's a string, blank or not — chain calls with `??` to try several legacy
+ * keys in priority order (`readEntryBody(data, 'a') ?? readEntryBody(data, 'b')`), the same
+ * pattern every existing caller already uses for its own multi-key fallback chain.
+ *
+ * Dependency-free: copied verbatim into both connector packages by
+ * scripts/generate-mcp-embedded-copies.mjs. the connectors build alone (MCP on Railway,
+ * packages/mcp-server/Dockerfile; CLI as a published package), so neither can import the kernel at runtime (DEC-1481); this file has no imports.
+ * convex/lib/proseField.ts's `readEntryBody` re-exports this — one implementation, not two.
+ */
+export declare function readEntryBody(data: Record<string, unknown> | null | undefined, proseKey: string | undefined): string | undefined;
+//# sourceMappingURL=proseBody.d.ts.map

package/dist/lib/proseBody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proseBody.d.ts","sourceRoot":"","sources":["../../src/lib/proseBody.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,GAAG,SAAS,CAMpB"}

package/dist/lib/proseBody.js

@@ -0,0 +1,25 @@
+// GENERATED by scripts/generate-mcp-embedded-copies.mjs from kernel/entries/proseBody.ts.
+// DO NOT EDIT. Run `npm run mcp:embedded-copies` to regenerate.
+// Local runtime copy for the isolated connector build.
+/**
+ * The body, else the given legacy key — the ONE pure prose-resolution rule every backend, CLI
+ * and MCP reader uses (WP-770 B2a/B2b). A blank body counts as absent; a legacy value is
+ * returned as soon as it's a string, blank or not — chain calls with `??` to try several legacy
+ * keys in priority order (`readEntryBody(data, 'a') ?? readEntryBody(data, 'b')`), the same
+ * pattern every existing caller already uses for its own multi-key fallback chain.
+ *
+ * Dependency-free: copied verbatim into both connector packages by
+ * scripts/generate-mcp-embedded-copies.mjs. the connectors build alone (MCP on Railway,
+ * packages/mcp-server/Dockerfile; CLI as a published package), so neither can import the kernel at runtime (DEC-1481); this file has no imports.
+ * convex/lib/proseField.ts's `readEntryBody` re-exports this — one implementation, not two.
+ */
+export function readEntryBody(data, proseKey) {
+    const body = data?.body;
+    if (typeof body === 'string' && body.trim().length > 0)
+        return body;
+    if (!data || !proseKey)
+        return undefined;
+    const legacy = data[proseKey];
+    return typeof legacy === 'string' ? legacy : undefined;
+}
+//# sourceMappingURL=proseBody.js.map

package/dist/lib/proseBody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proseBody.js","sourceRoot":"","sources":["../../src/lib/proseBody.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,gEAAgE;AAChE,uDAAuD;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC5B,IAAgD,EAChD,QAA4B;IAE5B,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC"}

package/dist/lib/rate-limit.d.ts

@@ -0,0 +1,40 @@
+/**
+ * WP-579 — client-side rate-limit resilience for the gateway helpers in client.ts
+ * (TEN-2923 touch amplification, TEN-2924 no-backoff-on-429; DEC-2108 one back-off per command).
+ *
+ * Split out of client.ts rather than grown inside it: these are two self-contained
+ * policies (when to retry a throttled call, when a session touch is worth sending) with
+ * their own constants and module-level state, and client.ts is at its STD-2 budget.
+ *
+ * Depends only on the error taxonomy — NOT on client.ts's `McpError` — so the two modules
+ * don't form an import cycle. The retry keys off the error's `code`, which is exactly what
+ * the guard tested before the split (`McpError` is the only thing that sets
+ * `code === 'rate-limited'` alongside a `retryAfterSeconds`).
+ */
+/** Test-only: a fresh command may back off again. Mirrors resetTouchThrottle below. */
+export declare function resetRateLimitBackoff(): void;
+/**
+ * Per-call knobs for the gateway helpers.
+ *
+ * `retryOnRateLimit: false` is the opt-out a BACKGROUND (unawaited) call must pass. A
+ * pending retry timer keeps the Node event loop alive, so retrying a fire-and-forget call
+ * holds the CLI process open long after its foreground work finished — breaking the very
+ * "never block" contract those call sites are written against. A background call that
+ * loses to a 429 is simply dropped; it is observability, not the user's work.
+ *
+ * `recall: true` (TASK-911) marks a read-back: the call always names the ambient session and
+ * tells the gateway it was read, past the touch throttle. Only the get commands pass it.
+ * `actingSessionId` (TASK-1363) names the session a call serves before its marker is written (session start's own reads).
+ */
+export type KernelCallOptions = {
+    retryOnRateLimit?: boolean;
+    skipSessionTouch?: boolean;
+    recall?: boolean;
+    actingSessionId?: string;
+};
+/** Applies the one rate-limit back-off unless the caller opted out (background calls). */
+export declare function maybeRetry<T>(attempt: () => Promise<T>, options?: KernelCallOptions): Promise<T>;
+export declare function shouldTouchSession(sessionId: string): boolean;
+/** Test-only escape hatch — mirrors packages/mcp-server/src/client.ts's resetTouchThrottle. */
+export declare function resetTouchThrottle(sessionId?: string | null): void;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/lib/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/lib/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA8CH,uFAAuF;AACvF,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvI,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,CAAC,CAEhG;AAYD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAMlE"}

package/dist/lib/rate-limit.js

@@ -0,0 +1,89 @@
+/**
+ * WP-579 — client-side rate-limit resilience for the gateway helpers in client.ts
+ * (TEN-2923 touch amplification, TEN-2924 no-backoff-on-429; DEC-2108 one back-off per command).
+ *
+ * Split out of client.ts rather than grown inside it: these are two self-contained
+ * policies (when to retry a throttled call, when a session touch is worth sending) with
+ * their own constants and module-level state, and client.ts is at its STD-2 budget.
+ *
+ * Depends only on the error taxonomy — NOT on client.ts's `McpError` — so the two modules
+ * don't form an import cycle. The retry keys off the error's `code`, which is exactly what
+ * the guard tested before the split (`McpError` is the only thing that sets
+ * `code === 'rate-limited'` alongside a `retryAfterSeconds`).
+ */
+import { ErrorCode } from './errors.js';
+const RATE_LIMIT_RETRY_JITTER_MS = 250;
+/**
+ * Ceiling on the one honoured Retry-After. The kernel answers at most the minute window
+ * (convex/rateLimiter.ts `retryAfterSeconds`); anything longer is not something to wait
+ * out in-process, so it surfaces at once.
+ */
+const MAX_RATE_LIMIT_RETRY_WAIT_SECONDS = 60;
+/**
+ * DEC-2108 (TASK-883, TEN-5073): one back-off per COMMAND, not three per sub-call. A CLI
+ * process runs one command, and a command like capture makes 6 to 9 gateway calls in
+ * sequence (INS-2797); retrying each of them three times honouring Retry-After turned one
+ * refused capture into minutes of silence. The first refusal in this process waits once;
+ * every later refusal in the same process fails at once with the kernel's message.
+ */
+let backedOffThisCommand = false;
+/** Seconds to wait, if this error is a rate-limit refusal that carries a Retry-After. */
+function rateLimitWaitOf(err) {
+    const candidate = err;
+    if (!candidate || candidate.code !== ErrorCode.RATE_LIMITED)
+        return undefined;
+    return typeof candidate.retryAfterSeconds === 'number' ? candidate.retryAfterSeconds : undefined;
+}
+/**
+ * Retries a rate-limited call once, after the server's Retry-After, if this command has not
+ * already backed off. Only a rate-limit refusal is retried, never a validation, auth or
+ * internal failure, which retrying unchanged would just repeat.
+ */
+async function withRateLimitRetry(attempt) {
+    try {
+        return await attempt();
+    }
+    catch (err) {
+        const waitSeconds = rateLimitWaitOf(err);
+        if (waitSeconds === undefined || backedOffThisCommand || waitSeconds > MAX_RATE_LIMIT_RETRY_WAIT_SECONDS)
+            throw err;
+        backedOffThisCommand = true;
+        process.stderr.write(`Rate limited: waiting ${waitSeconds}s once, then retrying.\n`);
+        await new Promise((resolve) => setTimeout(resolve, waitSeconds * 1000 + Math.random() * RATE_LIMIT_RETRY_JITTER_MS));
+        return attempt();
+    }
+}
+/** Test-only: a fresh command may back off again. Mirrors resetTouchThrottle below. */
+export function resetRateLimitBackoff() {
+    backedOffThisCommand = false;
+}
+/** Applies the one rate-limit back-off unless the caller opted out (background calls). */
+export function maybeRetry(attempt, options) {
+    return options?.retryOnRateLimit === false ? attempt() : withRateLimitRetry(attempt);
+}
+/**
+ * TEN-2923: client-side throttle mirroring packages/mcp-server/src/client.ts's
+ * sessionTouchHeader — the server already no-ops a touch made <5s after the last one
+ * for this session (TOUCH_SESSION_THROTTLE_MS, DEC-75), so a touch inside that window is
+ * pure wasted quota. Matching the server's own window here removes the waste without
+ * changing renewal semantics at all (a throttled call was already a server-side no-op).
+ */
+const _lastTouchAtBySession = new Map();
+const TOUCH_THROTTLE_MS = 5_000;
+export function shouldTouchSession(sessionId) {
+    const now = Date.now();
+    const lastTouchAt = _lastTouchAtBySession.get(sessionId) ?? 0;
+    if (now - lastTouchAt < TOUCH_THROTTLE_MS)
+        return false;
+    _lastTouchAtBySession.set(sessionId, now);
+    return true;
+}
+/** Test-only escape hatch — mirrors packages/mcp-server/src/client.ts's resetTouchThrottle. */
+export function resetTouchThrottle(sessionId) {
+    if (sessionId) {
+        _lastTouchAtBySession.delete(sessionId);
+        return;
+    }
+    _lastTouchAtBySession.clear();
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/lib/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/lib/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC;;;;GAIG;AACH,MAAM,iCAAiC,GAAG,EAAE,CAAC;AAE7C;;;;;;GAMG;AACH,IAAI,oBAAoB,GAAG,KAAK,CAAC;AAEjC,yFAAyF;AACzF,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,SAAS,GAAG,GAAwE,CAAC;IAC3F,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAC9E,OAAO,OAAO,SAAS,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;AACnG,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAI,OAAyB;IAC5D,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,WAAW,KAAK,SAAS,IAAI,oBAAoB,IAAI,WAAW,GAAG,iCAAiC;YAAE,MAAM,GAAG,CAAC;QACpH,oBAAoB,GAAG,IAAI,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,WAAW,0BAA0B,CAAC,CAAC;QACrF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,0BAA0B,CAAC,CAAC,CAAC;QACrH,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,qBAAqB;IACnC,oBAAoB,GAAG,KAAK,CAAC;AAC/B,CAAC;AAiBD,0FAA0F;AAC1F,MAAM,UAAU,UAAU,CAAI,OAAyB,EAAE,OAA2B;IAClF,OAAO,OAAO,EAAE,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxD,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,GAAG,GAAG,WAAW,GAAG,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACxD,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,SAAyB;IAC1D,IAAI,SAAS,EAAE,CAAC;QACd,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,qBAAqB,CAAC,KAAK,EAAE,CAAC;AAChC,CAAC"}

package/dist/lib/readinessNotices.d.ts

@@ -0,0 +1,2 @@
+export declare const READINESS_PROVISIONAL_LINE: string;
+//# sourceMappingURL=readinessNotices.d.ts.map

package/dist/lib/readinessNotices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readinessNotices.d.ts","sourceRoot":"","sources":["../../src/lib/readinessNotices.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,0BAA0B,QACsH,CAAC"}

package/dist/lib/readinessNotices.js

@@ -0,0 +1,12 @@
+// GENERATED by scripts/generate-mcp-embedded-copies.mjs from kernel/entries/readinessNotices.ts.
+// DO NOT EDIT. Run `npm run mcp:embedded-copies` to regenerate.
+// Local runtime copy for the isolated connector build.
+/**
+ * The ONE served wording for a capped readiness scan — `chain.workspaceReadiness`'s
+ * accepted-entry sample hit its cap, so entry counts are floors and an apparent gap may already
+ * be covered. Both connectors print it from a generated copy (scripts/generate-mcp-embedded-copies.mjs,
+ * TASK-1158), so the CLI and MCP words cannot drift.
+ */
+import { TRUST_STATUS_LABELS } from './statusCategories.js'; // the kernel's state word
+export const READINESS_PROVISIONAL_LINE = `The sample is incomplete: it left out ${TRUST_STATUS_LABELS.current.toLowerCase()} entries. Counts are lower bounds, apparent gaps may already be covered.`;
+//# sourceMappingURL=readinessNotices.js.map

package/dist/lib/readinessNotices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readinessNotices.js","sourceRoot":"","sources":["../../src/lib/readinessNotices.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,gEAAgE;AAChE,uDAAuD;AAEvD;;;;;GAKG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC,CAAC,0BAA0B;AAEvF,MAAM,CAAC,MAAM,0BAA0B,GACtC,yCAAyC,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,0EAA0E,CAAC"}

package/dist/lib/reportedProfile.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Reported profile — the label status surfaces print.
+ *
+ * Credential resolution already refuses a declared project with no tenant
+ * (`getConfigSafe().kind === 'missing-pin'`). Labels must read that result
+ * rather than re-guess a cascade that names a workspace the CLI will not use.
+ *
+ * Lives outside config.ts (STD-2 / DEC-1504 shrink-only). Do not re-export
+ * from config.ts — this module imports FROM config.ts.
+ */
+import { type EffectiveProfileSource } from './config.js';
+export type ReportedProfileSource = EffectiveProfileSource | 'missing-pin' | 'env-key' | 'preview' | 'cwd-key' | 'local-key' | 'conversation';
+export { isEnvKeyBinding, resetReportedProfileSnapshot } from './envKeySnapshot.js';
+export declare function resolveReportedProfile(): {
+    profile: string | null;
+    source: ReportedProfileSource;
+};
+//# sourceMappingURL=reportedProfile.d.ts.map

package/dist/lib/reportedProfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reportedProfile.d.ts","sourceRoot":"","sources":["../../src/lib/reportedProfile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAkE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAO1H,MAAM,MAAM,qBAAqB,GAC7B,sBAAsB,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,CAAC;AAI9G,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEpF,wBAAgB,sBAAsB,IAAI;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAoEA"}

package/dist/lib/reportedProfile.js

@@ -0,0 +1,148 @@
+/**
+ * Reported profile — the label status surfaces print.
+ *
+ * Credential resolution already refuses a declared project with no tenant
+ * (`getConfigSafe().kind === 'missing-pin'`). Labels must read that result
+ * rather than re-guess a cascade that names a workspace the CLI will not use.
+ *
+ * Lives outside config.ts (STD-2 / DEC-1504 shrink-only). Do not re-export
+ * from config.ts — this module imports FROM config.ts.
+ */
+import { conversationKeyProfile, resolveConfig, resolveEffectiveProfile } from './config.js';
+import { resolveConfigResult } from './configResult.js';
+import { declaresCompletePreviewBinding, declaresLocalBinding } from './localBinding.js';
+import { readLocalProjectConfig } from './projectConfig.js';
+import { getGlobalActiveProfile } from './profiles.js';
+import { isEnvKeyBinding } from './envKeySnapshot.js';
+// The snapshot itself lives in its own leaf so config.ts can use it too without a cycle.
+// Re-exported here because every label surface already imports it from this module.
+export { isEnvKeyBinding, resetReportedProfileSnapshot } from './envKeySnapshot.js';
+export function resolveReportedProfile() {
+    // Precedence mirrors the CREDENTIAL cascade (DEC-1607), so the label can never name a source
+    // that lost. An exported key wins resolveConfig() step 1 outright — ahead of the pin, ahead of
+    // the no-tenant refusal — so it is reported first, and `missing-pin` can never co-occur.
+    // A subagent's own role key (TASK-1177) outranks even that export: the profile its conversation names.
+    const keyProfile = conversationKeyProfile();
+    if (keyProfile)
+        return { profile: keyProfile, source: 'conversation' };
+    if (isEnvKeyBinding())
+        return { profile: null, source: 'env-key' };
+    // From here the answer comes from ONE place: the credential cascade re-run against the FILES.
+    //
+    // `ignoreEnvKey` is what makes that possible (TEN-3311). loadEnv() copies whichever credential
+    // won into PRODUCTBRAIN_API_KEY, so a plain getConfigSafe() after any kernel call reports every
+    // binding as `env` — which is why five review rounds each surfaced one more branch whose label
+    // was wrong. We have already established above that no OPERATOR export exists, so skipping
+    // step 1 recovers the branch that actually supplied the key, with the name it recorded.
+    const cfg = resolveConfigResult(() => resolveConfig(true));
+    if (!cfg.ok) {
+        // ONE RULE, and every refusal obeys it: a refusal is still an answer about WHICH binding is in
+        // play, so it must never be attributed to a source that binding already beat. Four review
+        // rounds found four refusals violating it, so they are handled by what the refusal KNOWS
+        // rather than case by case (Codex P2 r8, r16, r18, r20):
+        //   the no-tenant refusal   → say so; nothing is bound (r8).
+        //   it names the winner     → name it, even though the cascade then rejected what it held.
+        //                             Re-deriving returns a DIFFERENT profile when PB_PROFILE points
+        //                             at a missing one (r18).
+        //   it names only a source  → a dotenv file supplied it and then failed validation (r20).
+        //   config.local.json's own → an incomplete claim, or a complete one with a bad URL (r16).
+        // Only a DANGLING PIN falls through to the configured name, because naming the pin IS the
+        // diagnosis the operator needs there (TEN-2163).
+        if (cfg.kind === 'missing-pin')
+            return { profile: null, source: 'missing-pin' };
+        if (cfg.profileName)
+            return { profile: cfg.profileName, source: classifyProfileName(cfg.profileName) };
+        if (cfg.source === 'cwd')
+            return { profile: null, source: 'cwd-key' };
+        return classifyLocalBinding() ?? safeDerive();
+    }
+    const source = cfg.source;
+    switch (source) {
+        case 'project': {
+            // config.local.json won. `profileName` present = the repo PIN; absent = a direct
+            // apiKey/siteUrl binding, which resolveLocalBinding() puts AHEAD of any sibling pin
+            // (Codex P2 r7) — so naming that pin would name a workspace pb is not using.
+            if (cfg.profileName)
+                return { profile: cfg.profileName, source: 'local' };
+            return classifyLocalBinding() ?? { profile: null, source: 'local-key' };
+        }
+        // resolveProfileConfig() falls PB_PROFILE → active-profile file → "default" → legacy and
+        // RECORDS the winner, so a PB_PROFILE naming a DELETED profile no longer reports that dead
+        // name. Absent only for the nameless legacy home file, which no profile describes.
+        case 'profile':
+            // No name only for the nameless legacy home file, which is auto-migrated on first use;
+            // leave that rare path on the configured-name behaviour rather than inventing a label.
+            return cfg.profileName
+                ? { profile: cfg.profileName, source: classifyProfileName(cfg.profileName) }
+                : safeDerive();
+        // A dotenv file here supplied the key. No profile involved — same lie as env-key, other file.
+        case 'cwd':
+            return { profile: null, source: 'cwd-key' };
+        // 'env' cannot reach here — an operator export returned above. 'default' means no credential
+        // at all, so the configured name is the right thing to show.
+        case 'env':
+        case 'default':
+            return safeDerive();
+    }
+    // No `default:` on purpose. doneWhen asks for a CENSUS of every label path rather than sampling,
+    // and TEN-3311 is the record of what sampling cost: each review round turned up one more
+    // unmapped branch. A catch-all would let a NEW ConfigSource member join the union and silently
+    // fall through to the configured name — the same failure, one more time. This makes the compiler
+    // refuse to build until the new member is mapped, so the census cannot rot.
+    const unmapped = source;
+    return unmapped;
+}
+/**
+ * Name config.local.json's own direct binding, or null when it declares none. Shared by the
+ * success and refusal paths so a binding is described the same way whether it resolved or blew up.
+ */
+function classifyLocalBinding() {
+    try {
+        const local = readLocalProjectConfig();
+        // localBinding's OWN claim predicate, not a copy of it. Mine missed `apiKeyMalformed` — a
+        // wrong-prefix or non-string key, which resolveLocalBinding() still treats as a direct-binding
+        // claim that outranks the pin, so the label fell back to naming that pin (Codex P2 r17).
+        // Duplicating this test is what caused it; sharing it is what stops the next one.
+        if (!declaresLocalBinding(local))
+            return null;
+        const preview = declaresCompletePreviewBinding(local);
+        return preview
+            ? { profile: preview.workspaceName, source: 'preview' }
+            : { profile: null, source: 'local-key' };
+    }
+    catch {
+        return null;
+    }
+}
+/** The configured-name path, guarded: whoami must degrade on an unreadable/racing file, not throw. */
+function safeDerive() {
+    try {
+        return resolveEffectiveProfile();
+    }
+    catch {
+        return { profile: null, source: 'none' };
+    }
+}
+/**
+ * Where a profile NAME that actually supplied the credential came from.
+ *
+ * Same precedence as `resolveEffectiveProfile()`: repo pin > PB_PROFILE > global > default. The
+ * pin came last-minute (Codex P2 r19) — without it, a pinned profile whose URL is then rejected
+ * was reported `global`, pointing the operator at the wrong file to repair.
+ */
+function classifyProfileName(name) {
+    try {
+        if (name === readLocalProjectConfig()?.profile)
+            return 'local';
+    }
+    catch { /* fall through */ }
+    if (name === process.env.PB_PROFILE?.trim())
+        return 'env';
+    try {
+        if (name === getGlobalActiveProfile())
+            return 'global';
+    }
+    catch { /* fall through */ }
+    return name === 'default' ? 'default' : 'global';
+}
+//# sourceMappingURL=reportedProfile.js.map

package/dist/lib/reportedProfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reportedProfile.js","sourceRoot":"","sources":["../../src/lib/reportedProfile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,uBAAuB,EAA+B,MAAM,aAAa,CAAC;AAC1H,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAKtD,yFAAyF;AACzF,oFAAoF;AACpF,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEpF,MAAM,UAAU,sBAAsB;IAIpC,6FAA6F;IAC7F,+FAA+F;IAC/F,yFAAyF;IACzF,uGAAuG;IACvG,MAAM,UAAU,GAAG,sBAAsB,EAAE,CAAC;IAC5C,IAAI,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACvE,IAAI,eAAe,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,8FAA8F;IAC9F,EAAE;IACF,+FAA+F;IAC/F,gGAAgG;IAChG,+FAA+F;IAC/F,2FAA2F;IAC3F,wFAAwF;IACxF,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,+FAA+F;QAC/F,0FAA0F;QAC1F,yFAAyF;QACzF,yDAAyD;QACzD,6DAA6D;QAC7D,2FAA2F;QAC3F,6FAA6F;QAC7F,sDAAsD;QACtD,0FAA0F;QAC1F,2FAA2F;QAC3F,0FAA0F;QAC1F,iDAAiD;QACjD,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAChF,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACvG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACtE,OAAO,oBAAoB,EAAE,IAAI,UAAU,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,iFAAiF;YACjF,oFAAoF;YACpF,6EAA6E;YAC7E,IAAI,GAAG,CAAC,WAAW;gBAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1E,OAAO,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC1E,CAAC;QACD,yFAAyF;QACzF,2FAA2F;QAC3F,mFAAmF;QACnF,KAAK,SAAS;YACZ,uFAAuF;YACvF,uFAAuF;YACvF,OAAO,GAAG,CAAC,WAAW;gBACpB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;gBAC5E,CAAC,CAAC,UAAU,EAAE,CAAC;QACnB,8FAA8F;QAC9F,KAAK,KAAK;YACR,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9C,6FAA6F;QAC7F,6DAA6D;QAC7D,KAAK,KAAK,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,UAAU,EAAE,CAAC;IACxB,CAAC;IACD,iGAAiG;IACjG,yFAAyF;IACzF,+FAA+F;IAC/F,iGAAiG;IACjG,4EAA4E;IAC5E,MAAM,QAAQ,GAAU,MAAM,CAAC;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACvC,0FAA0F;QAC1F,+FAA+F;QAC/F,yFAAyF;QACzF,kFAAkF;QAClF,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,OAAO;YACZ,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE;YACvD,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,OAAO,uBAAuB,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,sBAAsB,EAAE,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,sBAAsB,EAAE;YAAE,OAAO,QAAQ,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnD,CAAC"}

package/dist/lib/restsOn.d.ts

@@ -0,0 +1,33 @@
+/**
+ * TASK-934 (DEC-2139, RULE-664): the words pb get and the MCP get print when an entry rests on one that changed, and
+ * (TASK-935) the count a promise change or an archive answers on the CLI and MCP update receipts.
+ * One file, no imports: the CLI and the MCP server carry generated copies (scripts/generate-mcp-embedded-copies.mjs).
+ * The kernel decides the items (convex/lib/writeEntryHistory.ts readRestsOnChanged); a door only prints them.
+ */
+/** 'promise': the entry it rests on changed a promise field; 'past': that entry moved to a Past status (resolved, done,
+ *  retired, archived...), named by `label`, the target's own status word from its collection's statusList. */
+export declare const RESTS_ON_CHANGE_KINDS: readonly ["promise", "past"];
+export type RestsOnChangeKind = (typeof RESTS_ON_CHANGE_KINDS)[number];
+/** One entry this entry rests on that changed after this entry was last changed, confirmed or linked. */
+export type RestsOnChangedItem = {
+    entryId: string;
+    name: string;
+    changedAt: number;
+    kind: 'promise';
+} | {
+    entryId: string;
+    name: string;
+    changedAt: number;
+    kind: 'past';
+    label: string;
+};
+export declare const RESTS_ON_SENTENCES: Record<RestsOnChangeKind, string>;
+/** TASK-935: each rests-on verb's read stops at this many links (convex/lib/writeEntryHistory.ts countRestsOnDependents). */
+export declare const RESTS_ON_COUNT_BOUND = 200;
+/** TASK-935: the line a promise change or an archive of an accepted entry answers; an exact zero has no line (the field is
+ *  absent). `bounded`: the kernel's read stopped at its bound, so the count is a lower bound and the line says so; a
+ *  bounded zero names the bound instead of a count (Operator covering Voice, DEC-1973; RULE-17). */
+export declare function restsOnCountLine(count: number, bounded?: boolean): string;
+/** The one line for an item; the date reads as the history lines do (YYYY-MM-DD, UTC). */
+export declare function restsOnLine(item: RestsOnChangedItem): string;
+//# sourceMappingURL=restsOn.d.ts.map

package/dist/lib/restsOn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restsOn.d.ts","sourceRoot":"","sources":["../../src/lib/restsOn.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AAEH;8GAC8G;AAC9G,eAAO,MAAM,qBAAqB,8BAA+B,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,yGAAyG;AACzG,MAAM,MAAM,kBAAkB,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GACrE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAGhE,CAAC;AAEF,6HAA6H;AAC7H,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;oGAEoG;AACpG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,MAAM,CAIvE;AAED,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAI5D"}

package/dist/lib/restsOn.js

@@ -0,0 +1,34 @@
+// GENERATED by scripts/generate-mcp-embedded-copies.mjs from kernel/entries/restsOn.ts.
+// DO NOT EDIT. Run `npm run mcp:embedded-copies` to regenerate.
+// Local runtime copy for the isolated connector build.
+/**
+ * TASK-934 (DEC-2139, RULE-664): the words pb get and the MCP get print when an entry rests on one that changed, and
+ * (TASK-935) the count a promise change or an archive answers on the CLI and MCP update receipts.
+ * One file, no imports: the CLI and the MCP server carry generated copies (scripts/generate-mcp-embedded-copies.mjs).
+ * The kernel decides the items (convex/lib/writeEntryHistory.ts readRestsOnChanged); a door only prints them.
+ */
+/** 'promise': the entry it rests on changed a promise field; 'past': that entry moved to a Past status (resolved, done,
+ *  retired, archived...), named by `label`, the target's own status word from its collection's statusList. */
+export const RESTS_ON_CHANGE_KINDS = ['promise', 'past'];
+export const RESTS_ON_SENTENCES = {
+    promise: 'Rests on {id}, which changed its promise on {date}.',
+    past: 'Rests on {id}, {label} on {date}.',
+};
+/** TASK-935: each rests-on verb's read stops at this many links (convex/lib/writeEntryHistory.ts countRestsOnDependents). */
+export const RESTS_ON_COUNT_BOUND = 200;
+/** TASK-935: the line a promise change or an archive of an accepted entry answers; an exact zero has no line (the field is
+ *  absent). `bounded`: the kernel's read stopped at its bound, so the count is a lower bound and the line says so; a
+ *  bounded zero names the bound instead of a count (Operator covering Voice, DEC-1973; RULE-17). */
+export function restsOnCountLine(count, bounded = false) {
+    if (bounded && count === 0)
+        return `Entries may rest on this; the count stopped at ${RESTS_ON_COUNT_BOUND} links.`;
+    const exact = count === 1 ? '1 entry rests on this.' : `${count} entries rest on this.`;
+    return bounded ? `At least ${exact}` : exact;
+}
+/** The one line for an item; the date reads as the history lines do (YYYY-MM-DD, UTC). */
+export function restsOnLine(item) {
+    const date = new Date(item.changedAt).toISOString().split('T')[0];
+    const label = item.kind === 'past' ? item.label : '';
+    return RESTS_ON_SENTENCES[item.kind].replace('{id}', item.entryId).replace('{label}', label).replace('{date}', date);
+}
+//# sourceMappingURL=restsOn.js.map

package/dist/lib/restsOn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restsOn.js","sourceRoot":"","sources":["../../src/lib/restsOn.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,gEAAgE;AAChE,uDAAuD;AAEvD;;;;;GAKG;AAEH;8GAC8G;AAC9G,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,MAAM,CAAU,CAAC;AAQlE,MAAM,CAAC,MAAM,kBAAkB,GAAsC;IACpE,OAAO,EAAE,qDAAqD;IAC9D,IAAI,EAAE,mCAAmC;CACzC,CAAC;AAEF,6HAA6H;AAC7H,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC;;oGAEoG;AACpG,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAAO,GAAG,KAAK;IAC9D,IAAI,OAAO,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,kDAAkD,oBAAoB,SAAS,CAAC;IACnH,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,KAAK,wBAAwB,CAAC;IACxF,OAAO,OAAO,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9C,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,IAAwB;IACnD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACtH,CAAC"}

package/dist/lib/routeCommandWords.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The CLI command a person typed for a gateway route (TASK-1352, DEC-2441): the session close line names its slowest
+ * call by this word and the CLI spinner reads the same map (RULE-664). Dependency-free: copied verbatim into the CLI by
+ * scripts/generate-mcp-embedded-copies.mjs; Convex imports it directly.
+ */
+export declare const ROUTE_COMMAND_WORDS: Readonly<Record<string, string>>;
+/** The routes a session close itself calls (CLI and MCP): the close line counts the calls before the close, never these. */
+export declare const SESSION_CLOSE_ROUTES: ReadonlySet<string>;
+/** True when a route has a CLI command word in the map above. */
+export declare function hasRouteCommandWord(route: string): boolean;
+/** The word a person reads for a route: its CLI command, else the route name itself. */
+export declare function routeCommandWord(route: string): string;
+//# sourceMappingURL=routeCommandWords.d.ts.map

package/dist/lib/routeCommandWords.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routeCommandWords.d.ts","sourceRoot":"","sources":["../../src/lib/routeCommandWords.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOhE,CAAC;AAEF,4HAA4H;AAC5H,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAmF,CAAC;AAEzI,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/lib/routeCommandWords.js

@@ -0,0 +1,27 @@
+// GENERATED by scripts/generate-mcp-embedded-copies.mjs from kernel/telemetry/routeCommandWords.ts.
+// DO NOT EDIT. Run `npm run mcp:embedded-copies` to regenerate.
+// Local runtime copy for the isolated connector build.
+/**
+ * The CLI command a person typed for a gateway route (TASK-1352, DEC-2441): the session close line names its slowest
+ * call by this word and the CLI spinner reads the same map (RULE-664). Dependency-free: copied verbatim into the CLI by
+ * scripts/generate-mcp-embedded-copies.mjs; Convex imports it directly.
+ */
+export const ROUTE_COMMAND_WORDS = {
+    'chain.getEntry': 'pb get', 'chain.batchGetEntries': 'pb get', 'chain.search': 'pb search', 'chain.getOrientView': 'pb orient',
+    'chain.createEntry': 'pb capture', 'chain.commitEntry': 'pb entry accept',
+    'chain.updateEntry': 'pb update', 'chain.createEntryRelation': 'pb relate', 'chain.removeEntryRelation': 'pb relate',
+    'agent.startSession': 'pb session start', 'agent.resumeSession': 'pb session start',
+    'agent.sessionStartNotes': 'pb session start', 'agent.sessionStartStamp': 'pb session start', // TASK-1405: the start notes after the seat
+    'agent.getSessionWrapup': 'pb session close', 'agent.recordWrapup': 'pb session close', 'agent.closeSession': 'pb session close',
+};
+/** The routes a session close itself calls (CLI and MCP): the close line counts the calls before the close, never these. */
+export const SESSION_CLOSE_ROUTES = new Set(['agent.getSessionWrapup', 'agent.recordWrapup', 'agent.closeSession']);
+/** True when a route has a CLI command word in the map above. */
+export function hasRouteCommandWord(route) {
+    return Object.prototype.hasOwnProperty.call(ROUTE_COMMAND_WORDS, route);
+}
+/** The word a person reads for a route: its CLI command, else the route name itself. */
+export function routeCommandWord(route) {
+    return hasRouteCommandWord(route) ? ROUTE_COMMAND_WORDS[route] : route;
+}
+//# sourceMappingURL=routeCommandWords.js.map

package/dist/lib/routeCommandWords.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routeCommandWords.js","sourceRoot":"","sources":["../../src/lib/routeCommandWords.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,gEAAgE;AAChE,uDAAuD;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACpE,gBAAgB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,WAAW;IAC9H,mBAAmB,EAAE,YAAY,EAAE,mBAAmB,EAAE,iBAAiB;IACzE,mBAAmB,EAAE,WAAW,EAAE,2BAA2B,EAAE,WAAW,EAAE,2BAA2B,EAAE,WAAW;IACpH,oBAAoB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,kBAAkB;IACnF,yBAAyB,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,4CAA4C;IAC1I,wBAAwB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB;CAChI,CAAC;AAEF,4HAA4H;AAC5H,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,wBAAwB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAEzI,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAChD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC7C,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACxE,CAAC"}