@productbrain/cli 0.1.0-beta.36 → 0.1.0-beta.3603

package/dist/lib/conversation.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Conversation identity resolution — WP-479 E2 (client half).
+ *
+ * Feature-detects a stable per-conversation identifier so multiple concurrent harness
+ * conversations (Claude Code, Cursor, Codex, …) sharing one worktree don't collide on the single
+ * legacy `.productbrain/session.json` marker. All channels are optional and degrade gracefully —
+ * absent any signal, resolution returns `null` and every caller falls back to the pre-WP-479
+ * single-marker behavior (zero-config invariant).
+ *
+ * Priority order (harness findings: INS-2122, founder-run tests 2026-07-10):
+ *   1. explicit override (CLI `--conversation` flag on `pb session start`) — the manual seam.
+ *   2. `PB_CONVERSATION_ID` — the universal seam any harness adapter can set.
+ *   3. `CLAUDE_CODE_SESSION_ID` — present in Claude Code 2.1.206+ Bash shells (version-dependent,
+ *      treat as detected, never asserted).
+ *   4. `CURSOR_CONVERSATION_ID` — confirmed live in cursor-agent 2026.07.01 shell env.
+ *   5. `CODEX_TUI_SESSION_LOG_PATH` — Codex has no native conversation id; this Superset-injected
+ *      log path is unique per session run and stands in as the discriminator. It always contains
+ *      `/`, so normalization (below) always hashes it — no special-casing needed here.
+ *   6. none of the above → `null` (legacy shared-marker path).
+ */
+/**
+ * Normalize a raw candidate conversation id into a value that is always safe to use as (a) a
+ * Convex join key and (b) a filesystem path segment. Never truncates (a `slice()` would collide
+ * two distinct long ids into one lineage) — oversized or unsafe-charset ids are replaced whole
+ * with their sha256 hex digest (fixed-width, charset-safe by construction).
+ */
+export declare function normalizeConversationId(raw: string): string;
+/**
+ * Resolve the effective conversation id for the current process. `explicitOverride` — normally
+ * only threaded through from the CLI's `--conversation` flag on `pb session start` — takes
+ * priority over every env channel. Every other call site (the vast majority) calls this with no
+ * argument, which is pure env-based feature detection: with none of the channel env vars set,
+ * this returns `null` and callers must fall back to legacy behavior.
+ */
+export declare function resolveConversationId(explicitOverride?: string | null): string | null;
+//# sourceMappingURL=conversation.d.ts.map

package/dist/lib/conversation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../src/lib/conversation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAK3D;AAiBD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAIrF"}

package/dist/lib/conversation.js

@@ -0,0 +1,66 @@
+/**
+ * Conversation identity resolution — WP-479 E2 (client half).
+ *
+ * Feature-detects a stable per-conversation identifier so multiple concurrent harness
+ * conversations (Claude Code, Cursor, Codex, …) sharing one worktree don't collide on the single
+ * legacy `.productbrain/session.json` marker. All channels are optional and degrade gracefully —
+ * absent any signal, resolution returns `null` and every caller falls back to the pre-WP-479
+ * single-marker behavior (zero-config invariant).
+ *
+ * Priority order (harness findings: INS-2122, founder-run tests 2026-07-10):
+ *   1. explicit override (CLI `--conversation` flag on `pb session start`) — the manual seam.
+ *   2. `PB_CONVERSATION_ID` — the universal seam any harness adapter can set.
+ *   3. `CLAUDE_CODE_SESSION_ID` — present in Claude Code 2.1.206+ Bash shells (version-dependent,
+ *      treat as detected, never asserted).
+ *   4. `CURSOR_CONVERSATION_ID` — confirmed live in cursor-agent 2026.07.01 shell env.
+ *   5. `CODEX_TUI_SESSION_LOG_PATH` — Codex has no native conversation id; this Superset-injected
+ *      log path is unique per session run and stands in as the discriminator. It always contains
+ *      `/`, so normalization (below) always hashes it — no special-casing needed here.
+ *   6. none of the above → `null` (legacy shared-marker path).
+ */
+import { createHash } from 'crypto';
+/** Above this raw length, or containing any char outside the join-key-safe set, hash instead. */
+const MAX_RAW_LEN = 128;
+/** Join-key-safe charset — also what's safe to use as a marker filename with no traversal risk. */
+const SAFE_CHARS_RE = /^[A-Za-z0-9._-]+$/;
+/**
+ * Normalize a raw candidate conversation id into a value that is always safe to use as (a) a
+ * Convex join key and (b) a filesystem path segment. Never truncates (a `slice()` would collide
+ * two distinct long ids into one lineage) — oversized or unsafe-charset ids are replaced whole
+ * with their sha256 hex digest (fixed-width, charset-safe by construction).
+ */
+export function normalizeConversationId(raw) {
+    if (raw.length > MAX_RAW_LEN || !SAFE_CHARS_RE.test(raw)) {
+        return createHash('sha256').update(raw).digest('hex');
+    }
+    return raw;
+}
+/** Picks the first non-empty candidate in priority order. No normalization here. */
+function pickRawConversationId(explicitOverride) {
+    const candidates = [
+        explicitOverride,
+        process.env.PB_CONVERSATION_ID,
+        process.env.CLAUDE_CODE_SESSION_ID,
+        process.env.CURSOR_CONVERSATION_ID,
+        process.env.CODEX_TUI_SESSION_LOG_PATH,
+    ];
+    for (const candidate of candidates) {
+        if (candidate && candidate.trim().length > 0)
+            return candidate.trim();
+    }
+    return null;
+}
+/**
+ * Resolve the effective conversation id for the current process. `explicitOverride` — normally
+ * only threaded through from the CLI's `--conversation` flag on `pb session start` — takes
+ * priority over every env channel. Every other call site (the vast majority) calls this with no
+ * argument, which is pure env-based feature detection: with none of the channel env vars set,
+ * this returns `null` and callers must fall back to legacy behavior.
+ */
+export function resolveConversationId(explicitOverride) {
+    const raw = pickRawConversationId(explicitOverride);
+    if (!raw)
+        return null;
+    return normalizeConversationId(raw);
+}
+//# sourceMappingURL=conversation.js.map

package/dist/lib/conversation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.js","sourceRoot":"","sources":["../../src/lib/conversation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,iGAAiG;AACjG,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,mGAAmG;AACnG,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,SAAS,qBAAqB,CAAC,gBAAgC;IAC7D,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,0BAA0B;KACvC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,gBAAgC;IACpE,MAAM,GAAG,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC"}

package/dist/lib/createEntryResult.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Narrowing helpers for the `chain.createEntry` gateway route's return type.
+ *
+ * WP-577 / TEN-2918: the route's declared return type is now an honest union that
+ * includes the preview branch (convex/agentKnowledge/entries.ts +
+ * createEntryPreview.ts). Callers that read real-create fields must narrow first.
+ *
+ * Why a local predicate rather than the server's own `isCreateEntryPreview`
+ * (convex/agentKnowledge/createEntryPreview.ts): `packages/cli` is a published npm
+ * package (bin `pb`) built with `rootDir: "src"` — a `convex/` import lives outside
+ * that root and would fail TypeScript's rootDir check (TS6059), and `convex/` is not
+ * part of the published tarball anyway. Keeping the CLI's own copy avoids that
+ * build-graph coupling. It is deliberately tiny and behaviour-free so the duplication
+ * cannot drift meaningfully — the discriminant is the presence of the `preview` key,
+ * which is part of the route's public response contract.
+ *
+ * Verified against the deployed preview: a real-create response carries no `preview`
+ * key at all, so this predicate is false on the normal capture path.
+ */
+import type { GatewayRouteReturnByName } from '@productbrain/kernel-client';
+export type CreateEntryRouteResult = GatewayRouteReturnByName<'chain.createEntry'>;
+export type CreateEntryPreviewRouteResult = Extract<CreateEntryRouteResult, {
+    preview: true;
+}>;
+/**
+ * True when the route returned its preview branch.
+ *
+ * A plain inline `'preview' in result` check does not reliably narrow the ELSE branch
+ * for this generated union shape — an explicit predicate function does. The same
+ * limitation is documented in convex/agentKnowledge/createEntryPreview.ts and was
+ * re-derived independently in packages/mcp-server/src/tools/smart-capture.ts.
+ */
+export declare function isPreviewCreateEntryResult(result: CreateEntryRouteResult): result is CreateEntryPreviewRouteResult;
+//# sourceMappingURL=createEntryResult.d.ts.map

package/dist/lib/createEntryResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEntryResult.d.ts","sourceRoot":"","sources":["../../src/lib/createEntryResult.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE5E,MAAM,MAAM,sBAAsB,GAAG,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;AAEnF,MAAM,MAAM,6BAA6B,GAAG,OAAO,CAAC,sBAAsB,EAAE;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAE/F;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,6BAA6B,CAEzC"}

package/dist/lib/createEntryResult.js

@@ -0,0 +1,12 @@
+/**
+ * True when the route returned its preview branch.
+ *
+ * A plain inline `'preview' in result` check does not reliably narrow the ELSE branch
+ * for this generated union shape — an explicit predicate function does. The same
+ * limitation is documented in convex/agentKnowledge/createEntryPreview.ts and was
+ * re-derived independently in packages/mcp-server/src/tools/smart-capture.ts.
+ */
+export function isPreviewCreateEntryResult(result) {
+    return 'preview' in result;
+}
+//# sourceMappingURL=createEntryResult.js.map

package/dist/lib/createEntryResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEntryResult.js","sourceRoot":"","sources":["../../src/lib/createEntryResult.ts"],"names":[],"mappings":"AAyBA;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA8B;IAE9B,OAAO,SAAS,IAAI,MAAM,CAAC;AAC7B,CAAC"}

package/dist/lib/deployment.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Convex / gateway deployment classification for CLI banners and admin seed gates.
+ *
+ * Convex uses "Development (Cloud)" vs "Production" for deployments; the CLI must not
+ * treat every non-localhost URL as "production" (WP-312 follow-up).
+ *
+ * Extend PRODUCTION_HOSTS / DEV_CLOUD_HOSTS when new team deployments are provisioned.
+ */
+/** Loopback — local Convex dev UI / tunnel only. */
+export type DeploymentTier = 'local' | 'prod' | 'dev-cloud' | 'cloud';
+export declare function parseHostname(siteUrl: string): string;
+export declare function classifyDeployment(siteUrl: string): DeploymentTier;
+/**
+ * Whether admin seed destructive paths should show confirmation + `--confirm` in CI.
+ * False for loopback and known dev-cloud Convex deployments only.
+ */
+export declare function requiresAdminDestructiveConfirmation(siteUrl: string): boolean;
+/** Title for clack `note()` before confirm (prod vs unknown remote). */
+export declare function confirmRiskNoteTitle(siteUrl: string): string;
+export declare function seedRunConfirmMessage(siteUrl: string, manifestName: string): string;
+export declare function seedAllConfirmMessage(siteUrl: string): string;
+export declare function seedMultiselectConfirmMessage(siteUrl: string, count: number): string;
+//# sourceMappingURL=deployment.d.ts.map

package/dist/lib/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/lib/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,oDAAoD;AACpD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AAwBtE,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMrD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAMlE;AAED;;;GAGG;AACH,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG7E;AAED,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK5D;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAInF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIpF"}

package/dist/lib/deployment.js

@@ -0,0 +1,78 @@
+/**
+ * Convex / gateway deployment classification for CLI banners and admin seed gates.
+ *
+ * Convex uses "Development (Cloud)" vs "Production" for deployments; the CLI must not
+ * treat every non-localhost URL as "production" (WP-312 follow-up).
+ *
+ * Extend PRODUCTION_HOSTS / DEV_CLOUD_HOSTS when new team deployments are provisioned.
+ */
+const LOCAL_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]']);
+/**
+ * Customer / team production hosts (gateway, prod Convex deployment, public API).
+ * Destructive admin seeds use production-style confirmation + red [PROD] banner.
+ */
+const PRODUCTION_HOSTS = new Set([
+    'gateway.productbrain.io',
+    'data.productbrain.io',
+    'api.productbrain.io',
+    /** Convex Production deployment (dashboard label). */
+    'terrific-penguin-60.convex.site',
+]);
+/**
+ * Convex **Development (Cloud)** deployments — real cloud DB, not customer prod.
+ * No prod-style gate; banner shows [DEV·CLOUD].
+ */
+const DEV_CLOUD_HOSTS = new Set([
+    'trustworthy-kangaroo-277.convex.site',
+]);
+export function parseHostname(siteUrl) {
+    try {
+        return new URL(siteUrl).hostname;
+    }
+    catch {
+        return siteUrl;
+    }
+}
+export function classifyDeployment(siteUrl) {
+    const host = parseHostname(siteUrl);
+    if (LOCAL_HOSTS.has(host))
+        return 'local';
+    if (PRODUCTION_HOSTS.has(host))
+        return 'prod';
+    if (DEV_CLOUD_HOSTS.has(host))
+        return 'dev-cloud';
+    return 'cloud';
+}
+/**
+ * Whether admin seed destructive paths should show confirmation + `--confirm` in CI.
+ * False for loopback and known dev-cloud Convex deployments only.
+ */
+export function requiresAdminDestructiveConfirmation(siteUrl) {
+    const t = classifyDeployment(siteUrl);
+    return t !== 'local' && t !== 'dev-cloud';
+}
+/** Title for clack `note()` before confirm (prod vs unknown remote). */
+export function confirmRiskNoteTitle(siteUrl) {
+    const t = classifyDeployment(siteUrl);
+    if (t === 'prod')
+        return '⚠  Production';
+    if (t === 'cloud')
+        return '⚠  Remote deployment';
+    return '⚠  Confirm';
+}
+export function seedRunConfirmMessage(siteUrl, manifestName) {
+    return classifyDeployment(siteUrl) === 'prod'
+        ? `Run ${manifestName} on production?`
+        : `Run ${manifestName} on this remote deployment?`;
+}
+export function seedAllConfirmMessage(siteUrl) {
+    return classifyDeployment(siteUrl) === 'prod'
+        ? 'Run ALL seed operations on production?'
+        : 'Run ALL seed operations on this remote deployment?';
+}
+export function seedMultiselectConfirmMessage(siteUrl, count) {
+    return classifyDeployment(siteUrl) === 'prod'
+        ? `Run ${count} operation(s) on PRODUCTION?`
+        : `Run ${count} operation(s) on this remote deployment?`;
+}
+//# sourceMappingURL=deployment.js.map

package/dist/lib/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../src/lib/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,sDAAsD;IACtD,iCAAiC;CAClC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACtC,sCAAsC;CACvC,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAClD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC,CAAC,OAAe;IAClE,MAAM,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,CAAC;AAC5C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC;IACzC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,sBAAsB,CAAC;IACjD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,YAAoB;IACzE,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,OAAO,YAAY,iBAAiB;QACtC,CAAC,CAAC,OAAO,YAAY,6BAA6B,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,oDAAoD,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAe,EAAE,KAAa;IAC1E,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,OAAO,KAAK,8BAA8B;QAC5C,CAAC,CAAC,OAAO,KAAK,0CAA0C,CAAC;AAC7D,CAAC"}

package/dist/lib/deployment.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Deployment classification — banners and admin seed gates.
+ */
+export {};
+//# sourceMappingURL=deployment.test.d.ts.map

package/dist/lib/deployment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.test.d.ts","sourceRoot":"","sources":["../../src/lib/deployment.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/lib/deployment.test.js

@@ -0,0 +1,54 @@
+/**
+ * Deployment classification — banners and admin seed gates.
+ */
+import { describe, it, expect } from 'vitest';
+import { classifyDeployment, confirmRiskNoteTitle, parseHostname, requiresAdminDestructiveConfirmation, seedAllConfirmMessage, seedRunConfirmMessage, } from './deployment.js';
+describe('parseHostname', () => {
+    it('parses hostname from https URL', () => {
+        expect(parseHostname('https://trustworthy-kangaroo-277.convex.site')).toBe('trustworthy-kangaroo-277.convex.site');
+    });
+});
+describe('classifyDeployment', () => {
+    it('classifies loopback as local', () => {
+        expect(classifyDeployment('http://localhost:5176')).toBe('local');
+        expect(classifyDeployment('http://127.0.0.1:3000')).toBe('local');
+        expect(classifyDeployment('http://[::1]:3000')).toBe('local');
+    });
+    it('classifies known dev-cloud Convex deployment', () => {
+        expect(classifyDeployment('https://trustworthy-kangaroo-277.convex.site')).toBe('dev-cloud');
+    });
+    it('classifies gateway and prod Convex as prod', () => {
+        expect(classifyDeployment('https://gateway.productbrain.io')).toBe('prod');
+        expect(classifyDeployment('https://terrific-penguin-60.convex.site')).toBe('prod');
+        expect(classifyDeployment('https://api.productbrain.io')).toBe('prod');
+    });
+    it('classifies unknown remote as cloud', () => {
+        expect(classifyDeployment('https://other-team-xyz.convex.site')).toBe('cloud');
+    });
+});
+describe('requiresAdminDestructiveConfirmation', () => {
+    it('is false for local and dev-cloud only', () => {
+        expect(requiresAdminDestructiveConfirmation('http://localhost:3000')).toBe(false);
+        expect(requiresAdminDestructiveConfirmation('https://trustworthy-kangaroo-277.convex.site')).toBe(false);
+        expect(requiresAdminDestructiveConfirmation('https://gateway.productbrain.io')).toBe(true);
+        expect(requiresAdminDestructiveConfirmation('https://unknown.convex.site')).toBe(true);
+    });
+});
+describe('confirmRiskNoteTitle', () => {
+    it('matches tier', () => {
+        expect(confirmRiskNoteTitle('https://gateway.productbrain.io')).toContain('Production');
+        expect(confirmRiskNoteTitle('https://other.convex.site')).toContain('Remote');
+    });
+});
+describe('seed confirm copy', () => {
+    it('uses production wording only for prod tier', () => {
+        expect(seedRunConfirmMessage('https://gateway.productbrain.io', 'seed:knowledge')).toContain('production');
+        expect(seedRunConfirmMessage('https://trustworthy-kangaroo-277.convex.site', 'seed:knowledge')).toContain('remote deployment');
+        expect(seedRunConfirmMessage('https://unknown.convex.site', 'seed:knowledge')).toContain('remote deployment');
+    });
+    it('seed all message follows tier', () => {
+        expect(seedAllConfirmMessage('https://gateway.productbrain.io')).toContain('production');
+        expect(seedAllConfirmMessage('https://unknown.convex.site')).toContain('remote deployment');
+    });
+});
+//# sourceMappingURL=deployment.test.js.map

package/dist/lib/deployment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.test.js","sourceRoot":"","sources":["../../src/lib/deployment.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,oCAAoC,EACpC,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,aAAa,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CACxE,sCAAsC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,kBAAkB,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,oCAAoC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,CAAC,oCAAoC,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAC/F,KAAK,CACN,CAAC;QACF,MAAM,CAAC,oCAAoC,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,MAAM,CAAC,oCAAoC,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,oBAAoB,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACxF,MAAM,CAAC,oBAAoB,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAC1F,YAAY,CACb,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,8CAA8C,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CACvG,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CACtF,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/errors.d.ts

@@ -18,13 +18,73 @@ export declare const ErrorCode: {
     readonly CONFIG_MISSING: "CONFIG_MISSING";
     readonly CONFIG_INVALID: "CONFIG_INVALID";
     readonly SESSION_REQUIRED: "SESSION_REQUIRED";
+    /** Session close blocked: uncommitted drafts remain (TEN-2370). Non-zero exit unless --force. */
+    readonly LOOP_UNFINISHED: "LOOP_UNFINISHED";
     readonly VALIDATION_FAILED: "VALIDATION_FAILED";
+    /** Kernel / MCP quality gate (e.g. verify-before-commit). */
+    readonly QUALITY_GATE_BLOCKED: "QUALITY_GATE_BLOCKED";
+    /**
+     * Grounding gate refused a draft→active promotion (WP-455 E3 / WP-475 E2):
+     * verify grounding or accept via the audited acceptEntry override.
+     */
+    readonly GROUNDING_GATE_BLOCKED: "GROUNDING_GATE_BLOCKED";
+    /**
+     * Semantic quality gate refused a draft→active promotion on a gated
+     * collection (WP-475 E4 / DEC-1345): fix the draft per the returned coaching
+     * (weakest criterion + question) — or, when the verdict was missing/stale,
+     * retry once the scheduled fresh judgment lands. No override route.
+     */
+    readonly SEMANTIC_QUALITY_GATE_BLOCKED: "SEMANTIC_QUALITY_GATE_BLOCKED";
+    /**
+     * `paginationOpts.cursor` handed to `chain.listAutoLinkSuggestions` was not issued by that
+     * exact (workspaceId, status) query — undecodable, or minted for a different status
+     * (WP-477 / FEAT-1350). Pass the previous page's `continueCursor` back verbatim, or `null`
+     * to restart. Never silently reset: a reset re-walks rows the drain already handled.
+     */
+    readonly CURSOR_QUERY_MISMATCH: "CURSOR_QUERY_MISMATCH";
+    /**
+     * Convex could not return a complete page of `autoLinkSuggestions` even after the server's
+     * bounded halve-and-retry (WP-477 / FEAT-1350). Retry with a smaller
+     * `paginationOpts.numItems`. Never downgraded to a silent short page — resuming from an
+     * incomplete page's cursor would SKIP rows.
+     */
+    readonly PAGE_SPLIT_REQUIRED: "PAGE_SPLIT_REQUIRED";
+    /**
+     * Convex's OWN argument validator rejected the call shape — a required arg missing,
+     * an unknown extra arg, or a wrong-typed arg (TEN-2647). Fix the offending argument
+     * named in the message; never retry an unchanged call. A 400, not an internal fault.
+     * Mirror of convex/lib/errors.ts ErrorCodes.ARGUMENT_VALIDATION_FAILED.
+     */
+    readonly ARGUMENT_VALIDATION_FAILED: "ARGUMENT_VALIDATION_FAILED";
+    /**
+     * commitEntry's server-side contradiction gate (WP-485 Slice 2a, entries.ts) blocked the
+     * commit. DEAD-BUT-TYPED while DEC-1321 keeps `graduated: false` — disposition can only be
+     * allow/advisory, never block (evaluate.ts:533) — so this never fires today. Typed now so a
+     * future policy graduation needs no CLI retrofit. Mirror of the server's thrown
+     * `ConvexError({ code: 'CONTRADICTION_BLOCKED' })` (entries.ts, batchCommitConstellation too).
+     */
+    readonly CONTRADICTION_BLOCKED: "CONTRADICTION_BLOCKED";
+    /**
+     * Agent-submitted product feedback is switched off for this workspace
+     * (WP-494 / TEN-2742): `pb feedback submit` hits this when
+     * `productFeedbackPolicy.agentSubmissions` is off. Not a bug — an admin or
+     * owner disabled it; the message names the setting and the re-enable path.
+     * Mirror of convex/lib/errors.ts ErrorCodes.AGENT_FEEDBACK_DISABLED.
+     */
+    readonly AGENT_FEEDBACK_DISABLED: "AGENT_FEEDBACK_DISABLED";
+    /**
+     * Per-key API quota exceeded (TEN-656). Mirror of convex/lib/errors.ts
+     * ErrorCodes.RATE_LIMITED. Retryable — the caller waits `retryAfterSeconds`
+     * (on McpError) then retries the same call unchanged.
+     */
+    readonly RATE_LIMITED: "rate-limited";
     readonly PROFILE_NOT_FOUND: "PROFILE_NOT_FOUND";
     readonly PROFILE_ALREADY_EXISTS: "PROFILE_ALREADY_EXISTS";
     readonly PROFILE_IS_ACTIVE: "PROFILE_IS_ACTIVE";
     readonly PROFILE_IS_LAST: "PROFILE_IS_LAST";
     readonly PROFILE_NAME_INVALID: "PROFILE_NAME_INVALID";
     readonly NON_INTERACTIVE: "NON_INTERACTIVE";
+    readonly UPGRADE_FAILED: "UPGRADE_FAILED";
     readonly INTERNAL: "INTERNAL";
 };
 export type ErrorCodeValue = (typeof ErrorCode)[keyof typeof ErrorCode];

package/dist/lib/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0DAA0D;AAC1D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE9G,sEAAsE;AACtE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;CAyBZ,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAExE;;;;;;;;;GASG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAGzB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,cAAc,CAAC;QACtB,QAAQ,CAAC,EAAE,aAAa,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB;IASH,uCAAuC;IACvC,MAAM,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;CAQ/E"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0DAA0D;AAC1D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE9G,sEAAsE;AACtE,eAAO,MAAM,SAAS;;;;;;;;;IAapB,iGAAiG;;;IAIjG,6DAA6D;;IAE7D;;;OAGG;;IAEH;;;;;OAKG;;IAEH;;;;;OAKG;;IAEH;;;;;OAKG;;IAEH;;;;;OAKG;;IAEH;;;;;;OAMG;;IAEH;;;;;;OAMG;;IAEH;;;;OAIG;;;;;;;;;;CAaK,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAExE;;;;;;;;;GASG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAGzB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,cAAc,CAAC;QACtB,QAAQ,CAAC,EAAE,aAAa,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB;IASH,uCAAuC;IACvC,MAAM,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;CAQ/E"}

package/dist/lib/errors.js

@@ -20,8 +20,67 @@ export const ErrorCode = {
     CONFIG_INVALID: 'CONFIG_INVALID',
     // Session
     SESSION_REQUIRED: 'SESSION_REQUIRED',
+    /** Session close blocked: uncommitted drafts remain (TEN-2370). Non-zero exit unless --force. */
+    LOOP_UNFINISHED: 'LOOP_UNFINISHED',
     // Validation
     VALIDATION_FAILED: 'VALIDATION_FAILED',
+    /** Kernel / MCP quality gate (e.g. verify-before-commit). */
+    QUALITY_GATE_BLOCKED: 'QUALITY_GATE_BLOCKED',
+    /**
+     * Grounding gate refused a draft→active promotion (WP-455 E3 / WP-475 E2):
+     * verify grounding or accept via the audited acceptEntry override.
+     */
+    GROUNDING_GATE_BLOCKED: 'GROUNDING_GATE_BLOCKED',
+    /**
+     * Semantic quality gate refused a draft→active promotion on a gated
+     * collection (WP-475 E4 / DEC-1345): fix the draft per the returned coaching
+     * (weakest criterion + question) — or, when the verdict was missing/stale,
+     * retry once the scheduled fresh judgment lands. No override route.
+     */
+    SEMANTIC_QUALITY_GATE_BLOCKED: 'SEMANTIC_QUALITY_GATE_BLOCKED',
+    /**
+     * `paginationOpts.cursor` handed to `chain.listAutoLinkSuggestions` was not issued by that
+     * exact (workspaceId, status) query — undecodable, or minted for a different status
+     * (WP-477 / FEAT-1350). Pass the previous page's `continueCursor` back verbatim, or `null`
+     * to restart. Never silently reset: a reset re-walks rows the drain already handled.
+     */
+    CURSOR_QUERY_MISMATCH: 'CURSOR_QUERY_MISMATCH',
+    /**
+     * Convex could not return a complete page of `autoLinkSuggestions` even after the server's
+     * bounded halve-and-retry (WP-477 / FEAT-1350). Retry with a smaller
+     * `paginationOpts.numItems`. Never downgraded to a silent short page — resuming from an
+     * incomplete page's cursor would SKIP rows.
+     */
+    PAGE_SPLIT_REQUIRED: 'PAGE_SPLIT_REQUIRED',
+    /**
+     * Convex's OWN argument validator rejected the call shape — a required arg missing,
+     * an unknown extra arg, or a wrong-typed arg (TEN-2647). Fix the offending argument
+     * named in the message; never retry an unchanged call. A 400, not an internal fault.
+     * Mirror of convex/lib/errors.ts ErrorCodes.ARGUMENT_VALIDATION_FAILED.
+     */
+    ARGUMENT_VALIDATION_FAILED: 'ARGUMENT_VALIDATION_FAILED',
+    /**
+     * commitEntry's server-side contradiction gate (WP-485 Slice 2a, entries.ts) blocked the
+     * commit. DEAD-BUT-TYPED while DEC-1321 keeps `graduated: false` — disposition can only be
+     * allow/advisory, never block (evaluate.ts:533) — so this never fires today. Typed now so a
+     * future policy graduation needs no CLI retrofit. Mirror of the server's thrown
+     * `ConvexError({ code: 'CONTRADICTION_BLOCKED' })` (entries.ts, batchCommitConstellation too).
+     */
+    CONTRADICTION_BLOCKED: 'CONTRADICTION_BLOCKED',
+    /**
+     * Agent-submitted product feedback is switched off for this workspace
+     * (WP-494 / TEN-2742): `pb feedback submit` hits this when
+     * `productFeedbackPolicy.agentSubmissions` is off. Not a bug — an admin or
+     * owner disabled it; the message names the setting and the re-enable path.
+     * Mirror of convex/lib/errors.ts ErrorCodes.AGENT_FEEDBACK_DISABLED.
+     */
+    AGENT_FEEDBACK_DISABLED: 'AGENT_FEEDBACK_DISABLED',
+    /**
+     * Per-key API quota exceeded (TEN-656). Mirror of convex/lib/errors.ts
+     * ErrorCodes.RATE_LIMITED. Retryable — the caller waits `retryAfterSeconds`
+     * (on McpError) then retries the same call unchanged.
+     */
+    RATE_LIMITED: 'rate-limited',
     // Profile (WP-302 S2)
     PROFILE_NOT_FOUND: 'PROFILE_NOT_FOUND',
     PROFILE_ALREADY_EXISTS: 'PROFILE_ALREADY_EXISTS',
@@ -31,6 +90,7 @@ export const ErrorCode = {
     // Interactive
     NON_INTERACTIVE: 'NON_INTERACTIVE',
     // Internal
+    UPGRADE_FAILED: 'UPGRADE_FAILED',
     INTERNAL: 'INTERNAL',
 };
 /**

package/dist/lib/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,WAAW,EAAE,aAAa;IAC1B,UAAU;IACV,mBAAmB,EAAE,qBAAqB;IAC1C,eAAe,EAAE,iBAAiB;IAClC,SAAS;IACT,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,UAAU;IACV,gBAAgB,EAAE,kBAAkB;IACpC,aAAa;IACb,iBAAiB,EAAE,mBAAmB;IACtC,sBAAsB;IACtB,iBAAiB,EAAE,mBAAmB;IACtC,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IACtC,eAAe,EAAE,iBAAiB;IAClC,oBAAoB,EAAE,sBAAsB;IAC5C,cAAc;IACd,eAAe,EAAE,iBAAiB;IAClC,WAAW;IACX,QAAQ,EAAE,UAAU;CACZ,CAAC;AAIX;;;;;;;;;GASG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAiB;IACrB,QAAQ,CAAgB;IACxB,QAAQ,CAAU;IAE3B,YACE,OAAe,EACf,OAIC;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,UAAU,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;IACpC,CAAC;IAED,uCAAuC;IACvC,MAAM;QACJ,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,WAAW,EAAE,aAAa;IAC1B,UAAU;IACV,mBAAmB,EAAE,qBAAqB;IAC1C,eAAe,EAAE,iBAAiB;IAClC,SAAS;IACT,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,UAAU;IACV,gBAAgB,EAAE,kBAAkB;IACpC,iGAAiG;IACjG,eAAe,EAAE,iBAAiB;IAClC,aAAa;IACb,iBAAiB,EAAE,mBAAmB;IACtC,6DAA6D;IAC7D,oBAAoB,EAAE,sBAAsB;IAC5C;;;OAGG;IACH,sBAAsB,EAAE,wBAAwB;IAChD;;;;;OAKG;IACH,6BAA6B,EAAE,+BAA+B;IAC9D;;;;;OAKG;IACH,qBAAqB,EAAE,uBAAuB;IAC9C;;;;;OAKG;IACH,mBAAmB,EAAE,qBAAqB;IAC1C;;;;;OAKG;IACH,0BAA0B,EAAE,4BAA4B;IACxD;;;;;;OAMG;IACH,qBAAqB,EAAE,uBAAuB;IAC9C;;;;;;OAMG;IACH,uBAAuB,EAAE,yBAAyB;IAClD;;;;OAIG;IACH,YAAY,EAAE,cAAc;IAC5B,sBAAsB;IACtB,iBAAiB,EAAE,mBAAmB;IACtC,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IACtC,eAAe,EAAE,iBAAiB;IAClC,oBAAoB,EAAE,sBAAsB;IAC5C,cAAc;IACd,eAAe,EAAE,iBAAiB;IAClC,WAAW;IACX,cAAc,EAAE,gBAAgB;IAChC,QAAQ,EAAE,UAAU;CACZ,CAAC;AAIX;;;;;;;;;GASG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAiB;IACrB,QAAQ,CAAgB;IACxB,QAAQ,CAAU;IAE3B,YACE,OAAe,EACf,OAIC;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,UAAU,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;IACpC,CAAC;IAED,uCAAuC;IACvC,MAAM;QACJ,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;CACF"}

package/dist/lib/experiment.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Experiment assignment — deterministic path selection for A/B experiments.
+ * WP-304: Dormant until PB_EXPERIMENT_304=1. When active, overrides PB_ONBOARDING_PATH.
+ */
+export type ExperimentPath = 'A' | 'B';
+/**
+ * Deterministic assignment based on workspace ID.
+ * FNV-1a hash mod 2 — same workspace always gets the same path.
+ */
+export declare function assignOnboardingPath(workspaceId: string): ExperimentPath;
+/** Check if the WP-304 experiment is active. */
+export declare function isExperimentActive(): boolean;
+/**
+ * FNV-1a hash — fast, deterministic, good distribution for short strings.
+ * Returns a positive 32-bit integer.
+ */
+export declare function fnv1aHash(str: string): number;
+//# sourceMappingURL=experiment.d.ts.map

package/dist/lib/experiment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"experiment.d.ts","sourceRoot":"","sources":["../../src/lib/experiment.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GAAG,GAAG,GAAG,GAAG,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAExE;AAED,gDAAgD;AAChD,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO7C"}

package/dist/lib/experiment.js

@@ -0,0 +1,28 @@
+/**
+ * Experiment assignment — deterministic path selection for A/B experiments.
+ * WP-304: Dormant until PB_EXPERIMENT_304=1. When active, overrides PB_ONBOARDING_PATH.
+ */
+/**
+ * Deterministic assignment based on workspace ID.
+ * FNV-1a hash mod 2 — same workspace always gets the same path.
+ */
+export function assignOnboardingPath(workspaceId) {
+    return fnv1aHash(workspaceId) % 2 === 0 ? 'A' : 'B';
+}
+/** Check if the WP-304 experiment is active. */
+export function isExperimentActive() {
+    return process.env.PB_EXPERIMENT_304 === '1';
+}
+/**
+ * FNV-1a hash — fast, deterministic, good distribution for short strings.
+ * Returns a positive 32-bit integer.
+ */
+export function fnv1aHash(str) {
+    let hash = 0x811c9dc5; // FNV offset basis
+    for (let i = 0; i < str.length; i++) {
+        hash ^= str.charCodeAt(i);
+        hash = (hash * 0x01000193) >>> 0; // FNV prime, keep as unsigned 32-bit
+    }
+    return hash >>> 0;
+}
+//# sourceMappingURL=experiment.js.map

package/dist/lib/experiment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"experiment.js","sourceRoot":"","sources":["../../src/lib/experiment.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AACtD,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,GAAG,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,IAAI,GAAG,UAAU,CAAC,CAAC,mBAAmB;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,qCAAqC;IACzE,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/lib/frontmatter.d.ts

@@ -0,0 +1,55 @@
+/**
+ * parseSetupFrontmatter — the single shared YAML-frontmatter parser for setup
+ * authoring assets (skills / rules / hooks).
+ *
+ * Unifies three previously-divergent copies that lived inline in:
+ *   - commands/handshake.ts    (parseSetupAuthoringFrontmatter)
+ *   - commands/migrate-setup.ts (parseFrontmatter)
+ *   - commands/setup-ingest.ts  (parseFrontmatter)
+ *
+ * The three were identical on scalar fields but DIVERGED on array items:
+ * handshake stripped surrounding quotes from each `- item`, the other two did
+ * not. That meant a trigger written as `- "triage: [anything]"` survived as
+ * `triage: [anything]` through handshake but as `"triage: [anything]"` through
+ * migrate/ingest — the same file produced different DB rows depending on path.
+ * This parser adopts handshake's quote-stripping as canonical for BOTH scalars
+ * and array items, closing the divergence.
+ *
+ * NOTE — intentionally out of scope: commands/method.ts and
+ * generators/portable-knowledge.ts each keep their own `parseFrontmatter`.
+ * They have different parsing semantics / return shapes and are NOT folded in.
+ *
+ * Supported shape (deliberately minimal, matching the originals):
+ *   - YAML-style `---` fences (CRLF or LF). No fence → name from H1, rest empty.
+ *   - Scalar fields: `key: value` (surrounding quotes stripped).
+ *   - Array fields: `key:` followed by indented `  - item` lines (quotes stripped).
+ *   - Multi-line `>-` block scalars are NOT expanded — the literal `>-` token is
+ *     stored as the value and continuation lines are ignored. This matches the
+ *     behavior of all three original parsers (e.g. triage.md's `description: >-`).
+ *
+ * Chain: TEN-1459 (handshake reads FS), WP-345.
+ */
+export interface ParsedSetupFrontmatter {
+    /** The frontmatter `id:` field, if present (handshake/setup-ingest use it). */
+    frontmatterId?: string;
+    /** `name:` field, falling back to the body's first H1, else ''. */
+    name: string;
+    /** `description:` field, else ''. */
+    description: string;
+    /** Everything after the closing `---` fence (the raw markdown body). */
+    body: string;
+    /** `triggers:` array (quotes stripped per item). */
+    triggers: string[];
+    /** `semanticRefs:` array (quotes stripped per item). */
+    semanticRefs: string[];
+    /** `assetKind:` field, if present (setup-ingest uses it). */
+    assetKind?: string;
+}
+/**
+ * Parse minimal YAML frontmatter from a .md file's raw contents.
+ *
+ * Returns the union of fields every setup-authoring caller needs. Callers that
+ * don't use a given field simply ignore it.
+ */
+export declare function parseSetupFrontmatter(raw: string): ParsedSetupFrontmatter;
+//# sourceMappingURL=frontmatter.d.ts.map