@productbrain/cli 0.1.0-beta.27 → 0.1.0-beta.2721

package/dist/lib/productbrain-files.test.js

@@ -0,0 +1,258 @@
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync, readFileSync, existsSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { execSync } from 'node:child_process';
+import { describe, it, expect } from 'vitest';
+import { classifyTree, DESCRIPTORS, resolvePbRoot, listProductbrainEntries, makeGitIgnoreChecker, detectExposures, planGitignoreLines, applyGitignoreFix } from './productbrain-files.js';
+const find = (rows, path) => rows.find((r) => r.path === path);
+describe('classifyTree (pure)', () => {
+    it('classifies a known pb-secret descriptor that is present and ignored', () => {
+        const rows = classifyTree({
+            presentEntries: ['config.local.json'],
+            isIgnored: () => true,
+        });
+        const row = find(rows, 'config.local.json');
+        expect(row.kind).toBe('pb-secret');
+        expect(row.present).toBe(true);
+        expect(row.gitignored).toBe(true);
+        expect(row.exposed).toBe(false);
+        expect(row.writer).toMatch(/connect/i);
+    });
+    it('marks a present pb-secret that is NOT ignored as exposed', () => {
+        const rows = classifyTree({
+            presentEntries: ['config.local.json'],
+            isIgnored: () => false,
+        });
+        expect(find(rows, 'config.local.json').exposed).toBe(true);
+    });
+    it('shows absent descriptors as contract rows (present=false, not exposed)', () => {
+        const rows = classifyTree({ presentEntries: [], isIgnored: () => false });
+        const row = find(rows, 'preview.json');
+        expect(row.present).toBe(false);
+        expect(row.exposed).toBe(false); // never exposed when absent
+    });
+    it('classifies an unknown tracked (not-ignored) entry as committed', () => {
+        const rows = classifyTree({
+            presentEntries: ['soul.md'],
+            isIgnored: () => false,
+        });
+        expect(find(rows, 'soul.md').kind).toBe('committed');
+    });
+    it('FAILS OPEN: an unknown but gitignored entry is pb-owned (writer unknown), never committed', () => {
+        const rows = classifyTree({
+            presentEntries: ['mystery.json'],
+            isIgnored: () => true,
+        });
+        const row = find(rows, 'mystery.json');
+        expect(row.kind).toBe('pb-owned');
+        expect(row.writer).toMatch(/unknown/i);
+    });
+    it('git-absent (isIgnored returns null) → gitignored null, not exposed', () => {
+        const rows = classifyTree({
+            presentEntries: ['config.local.json'],
+            isIgnored: () => null,
+        });
+        const row = find(rows, 'config.local.json');
+        expect(row.gitignored).toBeNull();
+        expect(row.exposed).toBe(false); // cannot assert exposure without git
+    });
+    it('registry has the 14 known pb descriptors, including every preview credential', () => {
+        // WP-479 E2 added 'sessions/' (per-conversation markers) alongside the legacy 'session.json'.
+        expect(DESCRIPTORS).toHaveLength(14);
+        expect(DESCRIPTORS.map((d) => d.pattern)).toContain('.local/');
+        expect(DESCRIPTORS.map((d) => d.pattern)).toContain('sessions/');
+        expect(DESCRIPTORS).toContainEqual(expect.objectContaining({
+            pattern: 'preview-readonly.json',
+            kind: 'pb-secret',
+            gitignore: 'must',
+        }));
+    });
+    it('flags an unignored preview read-only key as an exposed secret', () => {
+        const rows = classifyTree({
+            presentEntries: ['preview-readonly.json'],
+            isIgnored: () => false,
+        });
+        const row = find(rows, 'preview-readonly.json');
+        expect(row.kind).toBe('pb-secret');
+        expect(row.exposed).toBe(true);
+        expect(detectExposures(rows)).toContainEqual({
+            path: 'preview-readonly.json',
+            kind: 'pb-secret',
+            severity: 'high',
+        });
+    });
+    it('classifies .authoring-sync.json as pb-owned (present + not ignored → exposed)', () => {
+        const rows = classifyTree({ presentEntries: ['.authoring-sync.json'], isIgnored: () => false });
+        const row = rows.find((r) => r.path === '.authoring-sync.json');
+        expect(row.kind).toBe('pb-owned');
+        expect(row.exposed).toBe(true);
+    });
+    it('an ABSENT descriptor that git already ignores is not exposed and not planned', () => {
+        // git ignores everything here, including absent contracted paths (wildcard / nested gitignore)
+        const rows = classifyTree({ presentEntries: [], isIgnored: () => true });
+        const local = rows.find((r) => r.path === '.local/');
+        expect(local.present).toBe(false);
+        expect(local.gitignored).toBe(true); // asked git even though absent
+        expect(planGitignoreLines(rows)).not.toContain('.productbrain/.local/'); // no redundant --fix line
+    });
+});
+function tmpRepo() {
+    const dir = mkdtempSync(join(tmpdir(), 'pbfiles-'));
+    execSync('git init -q', { cwd: dir });
+    mkdirSync(join(dir, '.productbrain'));
+    return dir;
+}
+describe('resolvePbRoot + adapters', () => {
+    it('resolves the git toplevel as root even from a subdir', () => {
+        const dir = tmpRepo();
+        try {
+            mkdirSync(join(dir, 'packages', 'cli'), { recursive: true });
+            const { root, git } = resolvePbRoot(join(dir, 'packages', 'cli'));
+            expect(git).toBe(true);
+            expect(root).toBe(execSync('git rev-parse --show-toplevel', { cwd: dir, encoding: 'utf8' }).trim());
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('lists present .productbrain entries, dirs suffixed with /', () => {
+        const dir = tmpRepo();
+        try {
+            writeFileSync(join(dir, '.productbrain', 'soul.md'), '#');
+            mkdirSync(join(dir, '.productbrain', 'drafts'));
+            const entries = listProductbrainEntries(dir);
+            expect(entries).toContain('soul.md');
+            expect(entries).toContain('drafts/');
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('gitignore checker reports ignored vs not', () => {
+        const dir = tmpRepo();
+        try {
+            writeFileSync(join(dir, '.gitignore'), '.productbrain/config.local.json\n');
+            const isIgnored = makeGitIgnoreChecker(dir);
+            expect(isIgnored('.productbrain/config.local.json')).toBe(true);
+            expect(isIgnored('.productbrain/soul.md')).toBe(false);
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('returns root null when no .productbrain is found (not a pb project)', () => {
+        const dir = mkdtempSync(join(tmpdir(), 'pbnone-')); // no git init, no .productbrain
+        try {
+            expect(resolvePbRoot(dir).root).toBeNull();
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('makeGitIgnoreChecker does NOT shell-execute a malicious filename (RCE guard)', () => {
+        const dir = tmpRepo();
+        try {
+            const evil = '$(touch pwned).md';
+            writeFileSync(join(dir, '.productbrain', evil), 'x');
+            const isIgnored = makeGitIgnoreChecker(dir);
+            isIgnored('.productbrain/' + evil); // must not evaluate the substitution
+            expect(existsSync(join(dir, 'pwned'))).toBe(false);
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('resolvePbRoot reports isToplevel=true when git top carries .productbrain', () => {
+        const dir = tmpRepo(); // tmpRepo does git init + mkdir .productbrain
+        try {
+            expect(resolvePbRoot(dir).isToplevel).toBe(true);
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('resolvePbRoot reports isToplevel=false outside a git repo', () => {
+        const dir = mkdtempSync(join(tmpdir(), 'pbnotop-')); // no git init
+        try {
+            expect(resolvePbRoot(dir).isToplevel).toBe(false);
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+});
+describe('exposure + fix plan', () => {
+    const exposedSecret = { path: 'config.local.json', kind: 'pb-secret', writer: 'pb connect', when: '', present: true, gitignored: false, exposed: true };
+    const safeSecret = { ...exposedSecret, gitignored: true, exposed: false };
+    it('detectExposures flags exposed pb-secret as high severity', () => {
+        const ex = detectExposures([exposedSecret]);
+        expect(ex).toHaveLength(1);
+        expect(ex[0]).toMatchObject({ path: 'config.local.json', severity: 'high' });
+    });
+    it('detectExposures returns none when the secret is ignored', () => {
+        expect(detectExposures([safeSecret])).toHaveLength(0);
+    });
+    it('planGitignoreLines covers must/should not-yet-ignored descriptors, regardless of presence', () => {
+        // classify a tree where nothing is ignored and nothing present → all must/should should be planned.
+        const rows = classifyTree({ presentEntries: [], isIgnored: () => false });
+        const lines = planGitignoreLines(rows);
+        expect(lines).toContain('.productbrain/config.local.json');
+        expect(lines).toContain('.productbrain/session.json');
+        expect(lines).not.toContain('.productbrain/soul.md'); // committed, never planned
+    });
+    it('applyGitignoreFix is idempotent and appends only missing lines', () => {
+        const dir = tmpRepo();
+        try {
+            writeFileSync(join(dir, '.gitignore'), '.productbrain/config.local.json\n');
+            const res = applyGitignoreFix(dir, ['.productbrain/config.local.json', '.productbrain/session.json'], { dryRun: false });
+            expect(res.skipped).toContain('.productbrain/config.local.json');
+            expect(res.added).toContain('.productbrain/session.json');
+            const gi = readFileSync(join(dir, '.gitignore'), 'utf8');
+            expect(gi.match(/config\.local\.json/g)).toHaveLength(1); // not duplicated
+            expect(gi).toContain('.productbrain/session.json');
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('applyGitignoreFix --dry-run writes nothing', () => {
+        const dir = tmpRepo();
+        try {
+            const res = applyGitignoreFix(dir, ['.productbrain/session.json'], { dryRun: true });
+            expect(res.added).toContain('.productbrain/session.json');
+            expect(existsSync(join(dir, '.gitignore'))).toBe(false); // not created
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('applyGitignoreFix does not duplicate the header block across runs', () => {
+        const dir = tmpRepo();
+        try {
+            applyGitignoreFix(dir, ['.productbrain/config.local.json'], { dryRun: false });
+            applyGitignoreFix(dir, ['.productbrain/session.json'], { dryRun: false });
+            const gi = readFileSync(join(dir, '.gitignore'), 'utf8');
+            expect(gi.match(/# Product Brain pb-owned files/g) ?? []).toHaveLength(1);
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('applyGitignoreFix never duplicates a line already present (idempotent, no out-append)', () => {
+        const dir = tmpRepo();
+        try {
+            // even when a negation re-exposes the path, the line is NOT re-appended — the caller re-probes
+            // git and reports it instead (out-appending only grows the file and can't beat a nested file).
+            writeFileSync(join(dir, '.gitignore'), '.productbrain/config.local.json\n!.productbrain/config.local.json\n');
+            const res = applyGitignoreFix(dir, ['.productbrain/config.local.json'], { dryRun: false });
+            expect(res.skipped).toContain('.productbrain/config.local.json');
+            expect(res.added).not.toContain('.productbrain/config.local.json');
+            const gi = readFileSync(join(dir, '.gitignore'), 'utf8');
+            expect(gi.match(/^\.productbrain\/config\.local\.json$/gm) ?? []).toHaveLength(1); // not duplicated
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=productbrain-files.test.js.map

package/dist/lib/productbrain-files.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"productbrain-files.test.js","sourceRoot":"","sources":["../../src/lib/productbrain-files.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAuB,aAAa,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE/M,MAAM,IAAI,GAAG,CAAC,IAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAE,CAAC;AAE1F,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,cAAc,EAAE,CAAC,mBAAmB,CAAC;YACrC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,cAAc,EAAE,CAAC,mBAAmB,CAAC;YACrC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,4BAA4B;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,cAAc,EAAE,CAAC,SAAS,CAAC;YAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,cAAc,EAAE,CAAC,cAAc,CAAC;YAChC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,cAAc,EAAE,CAAC,mBAAmB,CAAC;YACrC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,qCAAqC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,8FAA8F;QAC9F,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACzD,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,cAAc,EAAE,CAAC,uBAAuB,CAAC;YACzC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK;SACvB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;YAC3C,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAChG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAE,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,+FAA+F;QAC/F,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAE,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAQ,+BAA+B;QAC3E,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,CAAC,0BAA0B;IACrG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,+BAA+B,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtG,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,mCAAmC,CAAC,CAAC;YAC5E,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,gCAAgC;QACpF,IAAI,CAAC;YACH,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,mBAAmB,CAAC;YACjC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC5C,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC,CAAC,qCAAqC;YACzE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,CAAC,8CAA8C;QACrE,IAAI,CAAC;YACH,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc;QACnE,IAAI,CAAC;YACH,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,aAAa,GAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxK,MAAM,UAAU,GAAmB,EAAE,GAAG,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE1F,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,eAAe,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,oGAAoG;QACpG,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,CAAC,2BAA2B;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,mCAAmC,CAAC,CAAC;YAC5E,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,CAAC,iCAAiC,EAAE,4BAA4B,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACzH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACjE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;YAC1D,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;YAC3E,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;YAC1D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc;QACzE,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,iBAAiB,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,iBAAiB,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,+FAA+F;YAC/F,+FAA+F;YAC/F,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,qEAAqE,CAAC,CAAC;YAC9G,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACjE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACnE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,yCAAyC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;QACtG,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/profiles.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Profile storage and resolution — multi-workspace support for the Product Brain CLI.
+ * WP-302 Slice 2: Workspace Profiles + Config Refactor.
+ *
+ * Profile directory: ~/.config/productbrain/profiles/
+ * Active profile tracked in: ~/.config/productbrain/active-profile
+ * Resolution order: PB_PROFILE env > active-profile file > "default" > legacy .env
+ */
+declare const HOME_CONFIG_DIR: string;
+declare const PROFILES_DIR: string;
+declare const ACTIVE_PROFILE_PATH: string;
+declare const LEGACY_ENV_PATH: string;
+export interface ProfileConfig {
+    apiKey: string;
+    siteUrl?: string;
+}
+/** List all profile names (sorted). */
+export declare function listProfiles(): string[];
+/** Read the global active-profile file only (ignores PB_PROFILE). */
+export declare function getGlobalActiveProfile(): string | null;
+/** Get the active profile name (PB_PROFILE env wins, then the global file). */
+export declare function getActiveProfile(): string | null;
+/** Create a new profile. */
+export declare function createProfile(name: string, apiKey: string, siteUrl?: string): void;
+/** Switch the active profile. */
+export declare function useProfile(name: string): void;
+/** Delete a profile. Cannot delete the last profile or the active profile. */
+export declare function deleteProfile(name: string): void;
+/**
+ * Resolve config from the active profile.
+ * Resolution order: PB_PROFILE env > active-profile file > "default" > legacy .env
+ * Returns null if no profile or config is available.
+ */
+export declare function resolveProfileConfig(): ProfileConfig | null;
+/**
+ * Resolve config for a specific named profile.
+ * Returns null if the profile doesn't exist.
+ */
+export declare function resolveNamedProfileConfig(name: string): ProfileConfig | null;
+export { PROFILES_DIR, ACTIVE_PROFILE_PATH, LEGACY_ENV_PATH, HOME_CONFIG_DIR };
+//# sourceMappingURL=profiles.d.ts.map

package/dist/lib/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/lib/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,QAAA,MAAM,eAAe,QAAgD,CAAC;AACtE,QAAA,MAAM,YAAY,QAAuC,CAAC;AAC1D,QAAA,MAAM,mBAAmB,QAA6C,CAAC;AACvE,QAAA,MAAM,eAAe,QAAmC,CAAC;AAKzD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyDD,uCAAuC;AACvC,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAOvC;AAED,qEAAqE;AACrE,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAMtD;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAIhD;AAED,4BAA4B;AAC5B,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAwBlF;AAED,iCAAiC;AACjC,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAS7C;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAmBhD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,aAAa,GAAG,IAAI,CAgC3D;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAE5E;AAGD,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC"}

package/dist/lib/profiles.js

@@ -0,0 +1,188 @@
+/**
+ * Profile storage and resolution — multi-workspace support for the Product Brain CLI.
+ * WP-302 Slice 2: Workspace Profiles + Config Refactor.
+ *
+ * Profile directory: ~/.config/productbrain/profiles/
+ * Active profile tracked in: ~/.config/productbrain/active-profile
+ * Resolution order: PB_PROFILE env > active-profile file > "default" > legacy .env
+ */
+import { existsSync, readFileSync, writeFileSync, unlinkSync, mkdirSync, readdirSync } from 'fs';
+import { resolve } from 'path';
+import { homedir } from 'os';
+import { CLIError, ErrorCode } from './errors.js';
+const HOME_CONFIG_DIR = resolve(homedir(), '.config', 'productbrain');
+const PROFILES_DIR = resolve(HOME_CONFIG_DIR, 'profiles');
+const ACTIVE_PROFILE_PATH = resolve(HOME_CONFIG_DIR, 'active-profile');
+const LEGACY_ENV_PATH = resolve(HOME_CONFIG_DIR, '.env');
+/** Profile name validation: lowercase alphanumeric + hyphens, 1-32 chars. */
+const PROFILE_NAME_RE = /^[a-z0-9][a-z0-9-]{0,31}$/;
+function validateProfileName(name) {
+    if (!PROFILE_NAME_RE.test(name)) {
+        throw new CLIError(`Invalid profile name "${name}". Must be 1-32 chars, lowercase alphanumeric + hyphens, starting with alphanumeric.`, { code: ErrorCode.PROFILE_NAME_INVALID, category: 'profile' });
+    }
+}
+function profilePath(name) {
+    return resolve(PROFILES_DIR, `${name}.env`);
+}
+function parseEnvFile(content) {
+    const vars = {};
+    for (const line of content.split('\n')) {
+        const m = line.match(/^([^#=]+)=(.*)$/);
+        if (m) {
+            vars[m[1].trim()] = m[2].trim().replace(/^["']|["']$/g, '');
+        }
+    }
+    return vars;
+}
+function readProfileFile(path) {
+    if (!existsSync(path))
+        return null;
+    const vars = parseEnvFile(readFileSync(path, 'utf8'));
+    const apiKey = vars['PRODUCTBRAIN_API_KEY'] || '';
+    if (!apiKey)
+        return null;
+    return {
+        apiKey,
+        siteUrl: vars['CONVEX_SITE_URL'] || undefined,
+    };
+}
+/**
+ * Auto-migrate legacy ~/.config/productbrain/.env to profiles/default.env.
+ * Only runs if legacy file exists AND no profiles directory exists.
+ * If profiles already exist, silently removes the legacy .env (TEN-1343).
+ */
+function autoMigrate() {
+    if (existsSync(PROFILES_DIR)) {
+        if (existsSync(LEGACY_ENV_PATH))
+            unlinkSync(LEGACY_ENV_PATH);
+        return false;
+    }
+    if (!existsSync(LEGACY_ENV_PATH))
+        return false;
+    mkdirSync(PROFILES_DIR, { recursive: true });
+    const content = readFileSync(LEGACY_ENV_PATH, 'utf8');
+    writeFileSync(profilePath('default'), content, { mode: 0o600 });
+    writeFileSync(ACTIVE_PROFILE_PATH, 'default', { mode: 0o600 });
+    unlinkSync(LEGACY_ENV_PATH);
+    return true;
+}
+/** List all profile names (sorted). */
+export function listProfiles() {
+    autoMigrate();
+    if (!existsSync(PROFILES_DIR))
+        return [];
+    return readdirSync(PROFILES_DIR)
+        .filter((f) => f.endsWith('.env'))
+        .map((f) => f.replace(/\.env$/, ''))
+        .sort();
+}
+/** Read the global active-profile file only (ignores PB_PROFILE). */
+export function getGlobalActiveProfile() {
+    if (existsSync(ACTIVE_PROFILE_PATH)) {
+        const name = readFileSync(ACTIVE_PROFILE_PATH, 'utf8').trim();
+        if (name)
+            return name;
+    }
+    return null;
+}
+/** Get the active profile name (PB_PROFILE env wins, then the global file). */
+export function getActiveProfile() {
+    const envProfile = process.env.PB_PROFILE?.trim();
+    if (envProfile)
+        return envProfile;
+    return getGlobalActiveProfile();
+}
+/** Create a new profile. */
+export function createProfile(name, apiKey, siteUrl) {
+    validateProfileName(name);
+    if (existsSync(profilePath(name))) {
+        throw new CLIError(`Profile "${name}" already exists.`, { code: ErrorCode.PROFILE_ALREADY_EXISTS, category: 'profile' });
+    }
+    mkdirSync(PROFILES_DIR, { recursive: true });
+    const lines = [
+        `# Product Brain CLI profile: ${name}`,
+        `PRODUCTBRAIN_API_KEY=${apiKey}`,
+    ];
+    if (siteUrl) {
+        lines.push(`CONVEX_SITE_URL=${siteUrl}`);
+    }
+    lines.push('');
+    writeFileSync(profilePath(name), lines.join('\n'), { mode: 0o600 });
+    // If this is the first profile, make it active
+    if (!existsSync(ACTIVE_PROFILE_PATH)) {
+        writeFileSync(ACTIVE_PROFILE_PATH, name, { mode: 0o600 });
+    }
+}
+/** Switch the active profile. */
+export function useProfile(name) {
+    validateProfileName(name);
+    if (!existsSync(profilePath(name))) {
+        throw new CLIError(`Profile "${name}" does not exist.`, { code: ErrorCode.PROFILE_NOT_FOUND, category: 'profile' });
+    }
+    mkdirSync(HOME_CONFIG_DIR, { recursive: true });
+    writeFileSync(ACTIVE_PROFILE_PATH, name, { mode: 0o600 });
+}
+/** Delete a profile. Cannot delete the last profile or the active profile. */
+export function deleteProfile(name) {
+    validateProfileName(name);
+    const path = profilePath(name);
+    if (!existsSync(path)) {
+        throw new CLIError(`Profile "${name}" does not exist.`, { code: ErrorCode.PROFILE_NOT_FOUND, category: 'profile' });
+    }
+    const profiles = listProfiles();
+    if (profiles.length <= 1) {
+        throw new CLIError(`Cannot delete the last profile "${name}".`, { code: ErrorCode.PROFILE_IS_LAST, category: 'profile' });
+    }
+    const active = getActiveProfile();
+    if (active === name) {
+        throw new CLIError(`Cannot delete the active profile "${name}". Switch to another profile first.`, { code: ErrorCode.PROFILE_IS_ACTIVE, category: 'profile', guidance: 'Run `pb profile use <other-profile>` first.' });
+    }
+    unlinkSync(path);
+}
+/**
+ * Resolve config from the active profile.
+ * Resolution order: PB_PROFILE env > active-profile file > "default" > legacy .env
+ * Returns null if no profile or config is available.
+ */
+export function resolveProfileConfig() {
+    autoMigrate();
+    // 1. Check PB_PROFILE env var
+    const envProfile = process.env.PB_PROFILE?.trim();
+    if (envProfile) {
+        const config = readProfileFile(profilePath(envProfile));
+        if (config)
+            return config;
+    }
+    // 2. Check active-profile file
+    if (existsSync(ACTIVE_PROFILE_PATH)) {
+        const name = readFileSync(ACTIVE_PROFILE_PATH, 'utf8').trim();
+        if (name) {
+            const config = readProfileFile(profilePath(name));
+            if (config)
+                return config;
+        }
+    }
+    // 3. Check "default" profile
+    {
+        const config = readProfileFile(profilePath('default'));
+        if (config)
+            return config;
+    }
+    // 4. Fall back to legacy .env
+    {
+        const config = readProfileFile(LEGACY_ENV_PATH);
+        if (config)
+            return config;
+    }
+    return null;
+}
+/**
+ * Resolve config for a specific named profile.
+ * Returns null if the profile doesn't exist.
+ */
+export function resolveNamedProfileConfig(name) {
+    return readProfileFile(profilePath(name));
+}
+// Exported for testing
+export { PROFILES_DIR, ACTIVE_PROFILE_PATH, LEGACY_ENV_PATH, HOME_CONFIG_DIR };
+//# sourceMappingURL=profiles.js.map

package/dist/lib/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/lib/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACjG,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AACtE,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;AAC1D,MAAM,mBAAmB,GAAG,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;AACvE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AAEzD,6EAA6E;AAC7E,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAOpD,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,QAAQ,CAChB,yBAAyB,IAAI,sFAAsF,EACnH,EAAE,IAAI,EAAE,SAAS,CAAC,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC;YACN,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACL,MAAM;QACN,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,SAAS;KAC9C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW;IAClB,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,eAAe,CAAC;YAAE,UAAU,CAAC,eAAe,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/C,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACtD,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,mBAAmB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,UAAU,CAAC,eAAe,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,YAAY;IAC1B,WAAW,EAAE,CAAC;IACd,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,WAAW,CAAC,YAAY,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SACnC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,sBAAsB;IACpC,IAAI,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,YAAY,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB;IAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,OAAO,sBAAsB,EAAE,CAAC;AAClC,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc,EAAE,OAAgB;IAC1E,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE1B,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,QAAQ,CAAC,YAAY,IAAI,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,sBAAsB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3H,CAAC;IAED,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG;QACZ,gCAAgC,IAAI,EAAE;QACtC,wBAAwB,MAAM,EAAE;KACjC,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpE,+CAA+C;IAC/C,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE1B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,QAAQ,CAAC,YAAY,IAAI,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,aAAa,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE1B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,QAAQ,CAAC,YAAY,IAAI,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAAC,mCAAmC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5H,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,QAAQ,CAAC,qCAAqC,IAAI,qCAAqC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,6CAA6C,EAAE,CAAC,CAAC;IAC1N,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,WAAW,EAAE,CAAC;IAEd,8BAA8B;IAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;QACxD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,+BAA+B;IAC/B,IAAI,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,YAAY,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAClD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,CAAC;QACC,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,8BAA8B;IAC9B,CAAC;QACC,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,uBAAuB;AACvB,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC"}

package/dist/lib/prompts.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Prompt gate — TTY-aware, cancel-safe, mode-aware.
+ * All interactive CLI prompts flow through this module.
+ * WP-303 Slice 1: replaces raw readline with @clack/prompts.
+ */
+export interface PromptOptions {
+    message: string;
+    placeholder?: string;
+    defaultValue?: string;
+    validate?: (value: string) => string | undefined;
+}
+export interface ConfirmOptions {
+    message: string;
+    initialValue?: boolean;
+}
+export interface SelectOptions<T> {
+    message: string;
+    options: {
+        value: T;
+        label: string;
+        hint?: string;
+    }[];
+}
+export interface PasswordOptions {
+    message: string;
+    validate?: (value: string) => string | undefined;
+}
+/** Returns true if the CLI is running in a context where prompts are safe. */
+export declare function isInteractive(): boolean;
+/** Text input — wraps clack.text(). */
+export declare function ask(opts: PromptOptions): Promise<string>;
+/** Yes/no confirmation — wraps clack.confirm(). */
+export declare function confirm(opts: ConfirmOptions): Promise<boolean>;
+/** Single-select menu — wraps clack.select(). */
+export declare function select<T>(opts: SelectOptions<T>): Promise<T>;
+/** Password input (masked) — wraps clack.password(). */
+export declare function password(opts: PasswordOptions): Promise<string>;
+export interface MultiSelectOptions<T> {
+    message: string;
+    options: {
+        value: T;
+        label: string;
+        hint?: string;
+    }[];
+    required?: boolean;
+    initialValues?: T[];
+}
+/** Multi-select menu — wraps clack.multiselect(). */
+export declare function multiselect<T>(opts: MultiSelectOptions<T>): Promise<T[]>;
+/** Open a titled session — wraps clack.intro(). No-op in non-interactive. */
+export declare function intro(title?: string): void;
+/** Close a session — wraps clack.outro(). No-op in non-interactive. */
+export declare function outro(message?: string): void;
+/** Styled information box — wraps clack.note(). No-op in non-interactive. */
+export declare function note(message: string, title?: string): void;
+/** Structured log helpers — degrade to plain stdout/stderr in non-interactive. */
+export declare const log: {
+    step: (msg: string) => void;
+    success: (msg: string) => void;
+    warn: (msg: string) => void;
+    error: (msg: string) => void;
+    info: (msg: string) => void;
+    message: (msg?: string) => void;
+};
+//# sourceMappingURL=prompts.d.ts.map

package/dist/lib/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/lib/prompts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QAAE,KAAK,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CAClD;AA0CD,8EAA8E;AAC9E,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED,uCAAuC;AACvC,wBAAsB,GAAG,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAU9D;AAED,mDAAmD;AACnD,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAQpE;AAED,iDAAiD;AACjD,wBAAsB,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CASlE;AAED,wDAAwD;AACxD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAQrE;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QAAE,KAAK,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;CACrB;AAED,qDAAqD;AACrD,wBAAsB,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAW9E;AAED,6EAA6E;AAC7E,wBAAgB,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAG1C;AAED,uEAAuE;AACvE,wBAAgB,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAG5C;AAED,6EAA6E;AAC7E,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAG1D;AAED,kFAAkF;AAClF,eAAO,MAAM,GAAG;gBACC,MAAM;mBACN,MAAM;gBACN,MAAM;iBACN,MAAM;gBACN,MAAM;oBACL,MAAM;CAGvB,CAAC"}