@productbrain/cli 0.1.0-beta.1770 → 0.1.0-beta.1777

package/dist/commands/files.d.ts

@@ -0,0 +1,26 @@
+import { type ClassifiedFile, type Exposure } from '../lib/productbrain-files.js';
+export interface FilesResult {
+    workspace: string | null;
+    root: string | null;
+    git: boolean;
+    files: ClassifiedFile[];
+    exposures: Exposure[];
+    fix?: {
+        added: string[];
+        skipped: string[];
+        refused?: string;
+        dryRun?: boolean;
+        trackedExposed?: string[];
+        stillExposed?: string[];
+    };
+}
+export declare function resolveFiles(opts: {
+    fix: boolean;
+    dryRun: boolean;
+}): Promise<FilesResult>;
+export declare function formatFilesPretty(d: FilesResult): string;
+export declare function runFiles(opts: {
+    fix?: boolean;
+    dryRun?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=files.d.ts.map

package/dist/commands/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/commands/files.ts"],"names":[],"mappings":"AAOA,OAAO,EAGL,KAAK,cAAc,EAAE,KAAK,QAAQ,EACnC,MAAM,8BAA8B,CAAC;AAGtC,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACtI;AAUD,wBAAsB,YAAY,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAmEhG;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAsDxD;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvF"}

package/dist/commands/files.js

@@ -0,0 +1,160 @@
+/**
+ * pb files — the .productbrain file-contract legend (WP-471 / WP-3).
+ * Read-only by default; opt-in --fix seals the gitignore boundary. No session
+ * required; never throws (mirrors whoami's internal-guard pattern — runCliCommand
+ * re-throws, so each read is guarded here).
+ */
+import { runCliCommand } from '../lib/runner.js';
+import { resolvePbRoot, listProductbrainEntries, makeGitIgnoreChecker, makeGitTrackedChecker, classifyTree, detectExposures, planGitignoreLines, applyGitignoreFix, } from '../lib/productbrain-files.js';
+import { readLocalProjectConfig, getPreviewBinding } from '../lib/config.js';
+function localWorkspaceName() {
+    try {
+        const local = readLocalProjectConfig();
+        if (local?.workspaceName)
+            return local.workspaceName;
+    }
+    catch { /* ignore */ }
+    try {
+        return getPreviewBinding()?.workspaceName ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function resolveFiles(opts) {
+    let root = null;
+    let git = false;
+    let isToplevel = false;
+    try {
+        ({ root, git, isToplevel } = resolvePbRoot());
+    }
+    catch { /* degrade: treat as not-a-pb-project */ }
+    let files = [];
+    let exposures = [];
+    if (root) {
+        try {
+            const isIgnored = makeGitIgnoreChecker(root);
+            files = classifyTree({ presentEntries: listProductbrainEntries(root), isIgnored });
+            exposures = detectExposures(files);
+        }
+        catch { /* degrade to empty — never throw */ }
+    }
+    const result = { workspace: localWorkspaceName(), root, git, files, exposures };
+    if (opts.fix) {
+        if (!root) {
+            result.fix = { added: [], skipped: [], refused: 'Not in a Product Brain project (no .productbrain found) — nothing to fix.' };
+        }
+        else if (!isToplevel) {
+            const lines = planGitignoreLines(files);
+            const hint = lines.length
+                ? ` to ${root}/.gitignore (patterns are relative to that file):\n  ${lines.join('\n  ')}`
+                : ' (none needed).';
+            result.fix = { added: [], skipped: [], refused: `pb files --fix only writes the git-toplevel .gitignore, and this .productbrain isn't at the git toplevel — add these manually${hint}` };
+        }
+        else {
+            try {
+                const isTracked = makeGitTrackedChecker(root);
+                const PREFIX = '.productbrain/';
+                // planGitignoreLines covers every must/should path git doesn't yet ignore — present OR
+                // absent (a preemptive rule for a path a future write would expose). Write each rule once.
+                const planned = planGitignoreLines(files);
+                const applied = applyGitignoreFix(root, planned, { dryRun: opts.dryRun });
+                // A tracked+present path needs `git rm --cached` too: the rule blocks FUTURE commits but
+                // can't un-index the copy already committed. Only a PRESENT file can be tracked, so tracking
+                // is probed for those alone (keeps git spawns down).
+                const presentPaths = new Set(files.filter((f) => f.present).map((f) => PREFIX + f.path));
+                const trackedExposed = planned
+                    .filter((line) => presentPaths.has(line) && isTracked(line) === true)
+                    .map((line) => line.slice(PREFIX.length));
+                let stillExposed;
+                if (!opts.dryRun) {
+                    // Re-read git AFTER the write: refresh files/exposures to post-fix truth, and surface any
+                    // must/should path git STILL doesn't ignore — a negation (root-anchored, or a lower-level
+                    // .productbrain/.gitignore git gives precedence to) is overriding the rule. Tracked paths
+                    // always read "not ignored", so they're reported via trackedExposed, not double-counted here.
+                    const recheck = makeGitIgnoreChecker(root);
+                    files = classifyTree({ presentEntries: listProductbrainEntries(root), isIgnored: recheck });
+                    exposures = detectExposures(files);
+                    result.files = files;
+                    result.exposures = exposures;
+                    const trackedSet = new Set(trackedExposed.map((p) => PREFIX + p));
+                    const notSealed = planned.filter((line) => !trackedSet.has(line) && recheck(line) !== true);
+                    if (notSealed.length)
+                        stillExposed = notSealed;
+                }
+                result.fix = {
+                    ...applied,
+                    dryRun: opts.dryRun,
+                    ...(trackedExposed.length ? { trackedExposed } : {}),
+                    ...(stillExposed?.length ? { stillExposed } : {}),
+                };
+            }
+            catch (err) {
+                result.fix = { added: [], skipped: [], refused: `couldn't write .gitignore: ${err.message}` };
+            }
+        }
+    }
+    return result;
+}
+export function formatFilesPretty(d) {
+    if (!d.root)
+        return 'Not in a Product Brain project (no .productbrain/ found). Run `pb connect <token>`.';
+    const ws = d.workspace ? `workspace: ${d.workspace}   ` : '';
+    const lines = [`.productbrain/ file contract — ${ws}(${d.root})`, ''];
+    const owned = d.files.filter((f) => f.kind !== 'committed');
+    const committed = d.files.filter((f) => f.kind === 'committed' && f.present);
+    lines.push('  pb-owned & machine-local · gitignored — pb regenerates its own; .local/ is yours');
+    for (const f of owned) {
+        const mark = !f.present ? '–' : f.exposed ? '⚠ EXPOSED' : d.git ? 'present' : 'present (git?)';
+        lines.push(`    ${f.path.padEnd(22)} ${mark.padEnd(11)} ← ${f.writer}`);
+    }
+    if (committed.length) {
+        lines.push('', '  committed · you & your team own these, tracked in git');
+        lines.push('    ' + committed.map((f) => f.path).join('  '));
+    }
+    lines.push('');
+    if (d.exposures.length) {
+        const secret = d.exposures.find((e) => e.severity === 'high');
+        lines.push(secret
+            ? `⚠ ${secret.path} is pb-owned and NOT gitignored — a commit could leak it.`
+            : `⚠ ${d.exposures.length} pb-owned file(s) are not gitignored.`);
+        lines.push('   Fix automatically:  pb files --fix');
+    }
+    else if (d.git) {
+        lines.push('✓ all present pb-owned files are gitignored.');
+    }
+    else {
+        lines.push('(git unavailable — cannot check gitignore status.)');
+    }
+    if (d.fix) {
+        lines.push('');
+        if (d.fix.refused)
+            lines.push(d.fix.refused);
+        else {
+            if (d.fix.added.length)
+                lines.push(d.fix.dryRun
+                    ? `Would add to .gitignore (dry-run, nothing written): ${d.fix.added.join(', ')}`
+                    : `Added to .gitignore: ${d.fix.added.join(', ')}`);
+            else if (!d.fix.trackedExposed?.length && !d.fix.stillExposed?.length) {
+                lines.push('Nothing to fix — all pb-owned paths already gitignored.');
+            }
+            if (d.fix.trackedExposed?.length) {
+                const flag = d.fix.trackedExposed.some((p) => p.endsWith('/')) ? '-r --cached' : '--cached';
+                lines.push(`⚠ already tracked in git — the rule blocks future commits but won't remove the indexed copy: ${d.fix.trackedExposed.join(', ')}`);
+                lines.push(`   Untrack then commit:  git rm ${flag} ${d.fix.trackedExposed.map((p) => '.productbrain/' + p).join(' ')}`);
+            }
+            if (d.fix.stillExposed?.length) {
+                lines.push(`⚠ still exposed — a negation rule (in .gitignore or a lower-level .productbrain/.gitignore) is overriding the pattern: ${d.fix.stillExposed.join(', ')}`);
+                lines.push(`   Remove the negation for these paths so the rule takes effect.`);
+            }
+        }
+    }
+    return lines.join('\n');
+}
+export async function runFiles(opts) {
+    await runCliCommand({
+        fn: () => resolveFiles({ fix: !!opts.fix, dryRun: !!opts.dryRun }),
+        formatPretty: formatFilesPretty,
+    });
+}
+//# sourceMappingURL=files.js.map

package/dist/commands/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/commands/files.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,aAAa,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,YAAY,EACjG,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,GAEvD,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAW7E,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACvC,IAAI,KAAK,EAAE,aAAa;YAAE,OAAO,KAAK,CAAC,aAAa,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxB,IAAI,CAAC;QAAC,OAAO,iBAAiB,EAAE,EAAE,aAAa,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAuC;IACxE,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;IACzG,IAAI,KAAK,GAAqB,EAAE,CAAC;IACjC,IAAI,SAAS,GAAe,EAAE,CAAC;IAC/B,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC7C,KAAK,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,uBAAuB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YACnF,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAE7F,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,2EAA2E,EAAE,CAAC;QAChI,CAAC;aAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM;gBACvB,CAAC,CAAC,OAAO,IAAI,wDAAwD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBACzF,CAAC,CAAC,iBAAiB,CAAC;YACtB,MAAM,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,gIAAgI,IAAI,EAAE,EAAE,CAAC;QAC3L,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAChC,uFAAuF;gBACvF,2FAA2F;gBAC3F,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1E,yFAAyF;gBACzF,6FAA6F;gBAC7F,qDAAqD;gBACrD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzF,MAAM,cAAc,GAAG,OAAO;qBAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;qBACpE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5C,IAAI,YAAkC,CAAC;gBACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjB,0FAA0F;oBAC1F,0FAA0F;oBAC1F,0FAA0F;oBAC1F,8FAA8F;oBAC9F,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;oBAC3C,KAAK,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,uBAAuB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC5F,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;oBACnC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;oBACrB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;oBAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;oBAClE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;oBAC5F,IAAI,SAAS,CAAC,MAAM;wBAAE,YAAY,GAAG,SAAS,CAAC;gBACjD,CAAC;gBACD,MAAM,CAAC,GAAG,GAAG;oBACX,GAAG,OAAO;oBACV,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClD,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,8BAA+B,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3G,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAc;IAC9C,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,qFAAqF,CAAC;IAC1G,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAa,CAAC,kCAAkC,EAAE,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAEhF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IAE7E,KAAK,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACjG,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC/F,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,yDAAyD,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,2DAA2D;YAC7E,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,uCAAuC,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aACxC,CAAC;YACJ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAChC,CAAC,CAAC,GAAG,CAAC,MAAM;oBACV,CAAC,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACjF,CAAC,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrD,CAAC;iBACG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBACtE,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC5F,KAAK,CAAC,IAAI,CAAC,gGAAgG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9I,KAAK,CAAC,IAAI,CAAC,mCAAmC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3H,CAAC;YACD,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,0HAA0H,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtK,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAyC;IACtE,MAAM,aAAa,CAAc;QAC/B,EAAE,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAClE,YAAY,EAAE,iBAAiB;KAChC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/files.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=files.test.d.ts.map

package/dist/commands/files.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.test.d.ts","sourceRoot":"","sources":["../../src/commands/files.test.ts"],"names":[],"mappings":""}

package/dist/commands/files.test.js

@@ -0,0 +1,243 @@
+// packages/cli/src/commands/files.test.ts
+import { describe, it, expect } from 'vitest';
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync, readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { execSync } from 'node:child_process';
+import { resolveFiles, formatFilesPretty } from './files.js';
+function tmpRepoWith(files, gitignore) {
+    const dir = mkdtempSync(join(tmpdir(), 'pbcmd-'));
+    execSync('git init -q', { cwd: dir });
+    mkdirSync(join(dir, '.productbrain'), { recursive: true });
+    for (const [p, c] of Object.entries(files))
+        writeFileSync(join(dir, '.productbrain', p), c);
+    if (gitignore !== undefined)
+        writeFileSync(join(dir, '.gitignore'), gitignore);
+    return dir;
+}
+describe('resolveFiles', () => {
+    it('classifies present files and finds an exposed secret', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}', 'soul.md': '#' }, '');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: false, dryRun: false });
+            expect(res.git).toBe(true);
+            expect(res.files.find((f) => f.path === 'config.local.json').exposed).toBe(true);
+            expect(res.exposures.some((e) => e.path === 'config.local.json')).toBe(true);
+            // pretty output is legible: names the secret + the fix command
+            const pretty = formatFilesPretty(res);
+            expect(pretty).toMatch(/config\.local\.json/);
+            expect(pretty).toMatch(/pb files --fix/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('all-clear when the secret is gitignored', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '.productbrain/config.local.json\n');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: false, dryRun: false });
+            expect(res.exposures).toHaveLength(0);
+            expect(formatFilesPretty(res)).toMatch(/all present pb-owned files are gitignored/i);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+});
+describe('resolveFiles --json shape + --fix', () => {
+    it('returns the documented --json schema', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: false, dryRun: false });
+            expect(res).toHaveProperty('workspace');
+            expect(res).toHaveProperty('root');
+            expect(res).toHaveProperty('git');
+            expect(Array.isArray(res.files)).toBe(true);
+            expect(Array.isArray(res.exposures)).toBe(true);
+            const row = res.files[0];
+            expect(row).toMatchObject({
+                path: expect.any(String), kind: expect.any(String), writer: expect.any(String),
+                when: expect.any(String), present: expect.any(Boolean),
+            });
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('--fix --dry-run computes lines but writes nothing', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: true });
+            expect(res.fix.added).toContain('.productbrain/config.local.json');
+            // dry-run: .gitignore unchanged (still empty)
+            expect(readFileSync(join(dir, '.gitignore'), 'utf8')).not.toMatch(/config\.local\.json/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('--fix actually seals the boundary (idempotent on re-run)', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const first = await resolveFiles({ fix: true, dryRun: false });
+            expect(first.fix.added).toContain('.productbrain/config.local.json');
+            expect(first.exposures).toHaveLength(0); // recomputed post-write: no stale exposure in the same call
+            const second = await resolveFiles({ fix: true, dryRun: false });
+            expect(second.fix.added).not.toContain('.productbrain/config.local.json');
+            expect(second.exposures).toHaveLength(0); // now sealed
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('nested root — fix refused message names <root>/.gitignore, not toplevel', async () => {
+        const dir = mkdtempSync(join(tmpdir(), 'pbcmd-nested-'));
+        const cwd = process.cwd();
+        try {
+            execSync('git init -q', { cwd: dir });
+            const sub = join(dir, 'sub');
+            mkdirSync(join(sub, '.productbrain'), { recursive: true });
+            writeFileSync(join(sub, '.productbrain', 'config.json'), '{}');
+            process.chdir(sub);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            expect(res.fix.refused).toContain(sub + '/.gitignore');
+            expect(res.fix.refused).toContain('patterns are relative to that file');
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('--fix reports a tracked+exposed secret as needing git rm --cached, not sealed', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '.productbrain/config.local.json\n');
+        const cwd = process.cwd();
+        try {
+            // commit the secret so it is TRACKED despite the gitignore line
+            execSync('git add -f .productbrain/config.local.json', { cwd: dir });
+            execSync('git -c user.email=t@t -c user.name=t commit -qm seed', { cwd: dir });
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            expect(res.fix.trackedExposed).toContain('config.local.json');
+            expect(res.fix.added).not.toContain('.productbrain/config.local.json');
+            expect(formatFilesPretty(res)).toMatch(/git rm --cached/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('--fix reports stillExposed when a nested .productbrain/.gitignore negation overrides the root', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, ''); // empty root .gitignore
+        const cwd = process.cwd();
+        try {
+            // nested negation un-ignores the secret; a root pattern cannot override it (git precedence)
+            writeFileSync(join(dir, '.productbrain', '.gitignore'), '!config.local.json\n');
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            expect(res.fix.stillExposed).toContain('.productbrain/config.local.json');
+            expect(formatFilesPretty(res)).toMatch(/still exposed/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 20000);
+    it('--fix writes the rule for a tracked+exposed secret AND flags git rm --cached (coherent output)', async () => {
+        // realistic bootstrap: the secret is committed BEFORE any .gitignore rule exists
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, ''); // empty root .gitignore
+        const cwd = process.cwd();
+        try {
+            execSync('git add -f .productbrain/config.local.json', { cwd: dir });
+            execSync('git -c user.email=t@t -c user.name=t commit -qm seed', { cwd: dir });
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            // the rule IS written — after `git rm --cached` it keeps the secret ignored (Codex: add the rule)
+            expect(res.fix.added).toContain('.productbrain/config.local.json');
+            expect(readFileSync(join(dir, '.gitignore'), 'utf8')).toMatch(/^\.productbrain\/config\.local\.json$/m);
+            // and the untrack step is surfaced — coherently, WITHOUT the old contradictory "will NOT remove"
+            expect(res.fix.trackedExposed).toContain('config.local.json');
+            const pretty = formatFilesPretty(res);
+            expect(pretty).toMatch(/Added to \.gitignore/);
+            expect(pretty).toMatch(/git rm --cached [^\n]*config\.local\.json/);
+            expect(pretty).not.toMatch(/will NOT remove/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 20000);
+    it('--fix does not duplicate a root line on repeat runs, and never prints a false all-clear', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '');
+        const cwd = process.cwd();
+        try {
+            writeFileSync(join(dir, '.productbrain', '.gitignore'), '!config.local.json\n');
+            process.chdir(dir);
+            await resolveFiles({ fix: true, dryRun: false });
+            const second = await resolveFiles({ fix: true, dryRun: false });
+            // still exposed (nested negation wins), but the root line is appended at most once
+            expect(second.fix.added).not.toContain('.productbrain/config.local.json');
+            expect(second.fix.stillExposed).toContain('.productbrain/config.local.json');
+            const gi = readFileSync(join(dir, '.gitignore'), 'utf8');
+            expect(gi.match(/^\.productbrain\/config\.local\.json$/gm) ?? []).toHaveLength(1);
+            // Codex: no "Nothing to fix — all gitignored" while a path remains exposed
+            const pretty = formatFilesPretty(second);
+            expect(pretty).not.toMatch(/Nothing to fix/);
+            expect(pretty).toMatch(/still exposed/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 20000);
+    it('--fix REPORTS (does not silently pass) an absent path a same-file negation keeps exposed', async () => {
+        // self-contradictory pair: the next preview.json write would be committable → must be surfaced
+        const dir = tmpRepoWith({}, '.productbrain/preview.json\n!.productbrain/preview.json\n');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            // the descriptor line is already present, so it isn't re-added; the residual exposure is reported
+            expect(res.fix.added).not.toContain('.productbrain/preview.json');
+            expect(res.fix.stillExposed).toContain('.productbrain/preview.json');
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 20000);
+    it('--fix uses -r --cached when a tracked exposed entry is a directory', async () => {
+        const dir = mkdtempSync(join(tmpdir(), 'pbcmd-dir-'));
+        const cwd = process.cwd();
+        try {
+            execSync('git init -q', { cwd: dir });
+            mkdirSync(join(dir, '.productbrain', 'drafts'), { recursive: true });
+            writeFileSync(join(dir, '.productbrain', 'drafts', 'foo.md'), 'x');
+            execSync('git add -f .productbrain/drafts/foo.md', { cwd: dir });
+            execSync('git -c user.email=t@t -c user.name=t commit -qm seed', { cwd: dir });
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            expect(res.fix.trackedExposed).toContain('drafts/');
+            expect(formatFilesPretty(res)).toMatch(/git rm -r --cached/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=files.test.js.map

package/dist/commands/files.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.test.js","sourceRoot":"","sources":["../../src/commands/files.test.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE7D,SAAS,WAAW,CAAC,KAA6B,EAAE,SAAkB;IACpE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,IAAI,SAAS,KAAK,SAAS;QAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,+DAA+D;YAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;QACvF,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;gBACxB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC9E,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;aACvD,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACpE,8CAA8C;YAC9C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC3F,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACtE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,4DAA4D;YACrG,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACzD,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,gEAAgE;YAChE,QAAQ,CAAC,4CAA4C,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACrE,QAAQ,CAAC,sDAAsD,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/E,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACxE,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC5D,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;QACpF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,4FAA4F;YAC5F,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAChF,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC3E,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1D,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,iFAAiF;QACjF,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;QACpF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,CAAC,4CAA4C,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACrE,QAAQ,CAAC,sDAAsD,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/E,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,kGAAkG;YAClG,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACpE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;YACxG,iGAAiG;YACjG,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAChF,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,mFAAmF;YACnF,MAAM,CAAC,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,CAAC,GAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,yCAAyC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAClF,2EAA2E;YAC3E,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,+FAA+F;QAC/F,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,2DAA2D,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,kGAAkG;YAClG,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACxE,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACtC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,QAAQ,CAAC,wCAAwC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACjE,QAAQ,CAAC,sDAAsD,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/E,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.js

@@ -48,6 +48,7 @@ import { runWorkspaceVerify, runWorkspaceRepair, runDefinitionsDiff } from './co
 import { runAuthorityDomainsActivateCutover, runAuthorityDomainsAdd, runAuthorityDomainsDeactivateCutover, runAuthorityDomainsBenchmark, runAuthorityDomainsDiscardPending, runAuthorityDomainsPropose, runAuthorityDomainsQueueTag, runAuthorityDomainsRatify, runAuthorityDomainsReadiness, runAuthorityDomainsRecordSample, runAuthorityDomainsReject, runAuthorityDomainsReview, runAuthorityDomainsPrincipleDistribution, } from './commands/authority-domains.js';
 import { runDoctor } from './commands/doctor.js';
 import { runWhoami } from './commands/whoami.js';
+import { runFiles } from './commands/files.js';
 import { runUpgrade } from './commands/upgrade.js';
 import { runProfileList, runProfileCreate, runProfileUse, runProfileDelete } from './commands/profile.js';
 import { runInit } from './commands/init.js';
@@ -494,6 +495,14 @@ program
     .action(async () => {
     await runWhoami();
 });
+program
+    .command('files')
+    .description('Show which .productbrain files are pb-owned vs committed, and what writes each.')
+    .option('--fix', 'Add any exposed pb-owned files to .gitignore (idempotent)')
+    .option('--dry-run', 'With --fix: preview the .gitignore lines without writing')
+    .action(async (opts) => {
+    await runFiles({ fix: opts.fix, dryRun: opts.dryRun });
+});
 program
     .command('setup')
     .description('Canonical pb-setup entry (DEC-995): detect surfaces, read state, emit JSON for the skill body.')