@productbrain/cli 0.1.0-beta.47 → 0.1.0-beta.4721

package/dist/lib/frontmatter.test.js

@@ -0,0 +1,98 @@
+/**
+ * parseSetupFrontmatter regression tests.
+ *
+ * The load-bearing assertion: the array-item quote-stripping divergence between
+ * handshake (stripped) and migrate-setup / setup-ingest (did not strip) is
+ * closed. All three now route through this one function, so a trigger written
+ * as `- "triage: [anything]"` resolves to `triage: [anything]` on every path.
+ *
+ * We parse the REAL fixture `.productbrain/skills/triage.md` rather than a
+ * synthetic string so the test fails if that file's shape drifts.
+ *
+ * Chain: TEN-1459, WP-345.
+ */
+import { describe, expect, it } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { parseSetupFrontmatter } from './frontmatter.js';
+// repo root: packages/cli/src/lib → up four levels
+const here = dirname(fileURLToPath(import.meta.url));
+const repoRoot = join(here, '..', '..', '..', '..');
+const triagePath = join(repoRoot, '.productbrain', 'skills', 'triage.md');
+describe('parseSetupFrontmatter — array-quote divergence is closed', () => {
+    it('strips surrounding quotes from the triage.md `triggers` list item', () => {
+        const raw = readFileSync(triagePath, 'utf8');
+        const parsed = parseSetupFrontmatter(raw);
+        // The fixture contains a YAML list item: - "triage: [anything]"
+        // Quotes MUST be stripped (handshake's behavior, now canonical).
+        expect(parsed.triggers).toContain('triage: [anything]');
+        // And the un-stripped form must NOT survive.
+        expect(parsed.triggers).not.toContain('"triage: [anything]"');
+    });
+    it('extracts the scalar fields the callers depend on', () => {
+        const raw = readFileSync(triagePath, 'utf8');
+        const parsed = parseSetupFrontmatter(raw);
+        expect(parsed.name).toBe('triage');
+        // body is everything after the closing fence — contains the H1.
+        expect(parsed.body).toContain('# Triage');
+        // The multi-line `>-` block scalar is preserved as the literal token
+        // (the originals never expanded it; we keep that behavior).
+        expect(parsed.description).toBe('>-');
+    });
+    it('resolves the full triggers list to its canonical (quote-stripped) form', () => {
+        // The divergence is structurally gone because all three callers now invoke
+        // this one function. What that function MUST produce is asserted literally
+        // here: the quoted item `- "triage: [anything]"` strips to `triage:
+        // [anything]` while every bare item is untouched. Under the old
+        // migrate-setup / setup-ingest path the third item would have retained its
+        // quotes — so this exact array is what closes the bug, not a self-comparison.
+        const raw = readFileSync(triagePath, 'utf8');
+        const parsed = parseSetupFrontmatter(raw);
+        expect(parsed.triggers).toEqual([
+            'triage',
+            'triage this',
+            'triage: [anything]',
+            'what should I focus on?',
+            'what should I work on?',
+            'where do I start?',
+            'help me think about this',
+            'diagnose',
+        ]);
+    });
+});
+describe('parseSetupFrontmatter — boundary cases', () => {
+    it('returns empty fields and the raw body when there is no `---` fence', () => {
+        const parsed = parseSetupFrontmatter('# Heading Only\n\nbody text');
+        expect(parsed.name).toBe('Heading Only');
+        expect(parsed.description).toBe('');
+        expect(parsed.triggers).toEqual([]);
+        expect(parsed.semanticRefs).toEqual([]);
+        expect(parsed.frontmatterId).toBeUndefined();
+        expect(parsed.assetKind).toBeUndefined();
+        expect(parsed.body).toBe('# Heading Only\n\nbody text');
+    });
+    it('handles an empty frontmatter block', () => {
+        const parsed = parseSetupFrontmatter('---\n\n---\n# Title\n');
+        expect(parsed.name).toBe('Title');
+        expect(parsed.triggers).toEqual([]);
+    });
+    it('extracts id and assetKind scalar fields when present', () => {
+        const raw = [
+            '---',
+            'id: SETUP-SKILL-EXAMPLE',
+            'name: example',
+            'assetKind: skill',
+            'triggers:',
+            "  - 'quoted trigger'",
+            '  - bare trigger',
+            '---',
+            '# Example',
+        ].join('\n');
+        const parsed = parseSetupFrontmatter(raw);
+        expect(parsed.frontmatterId).toBe('SETUP-SKILL-EXAMPLE');
+        expect(parsed.assetKind).toBe('skill');
+        expect(parsed.triggers).toEqual(['quoted trigger', 'bare trigger']);
+    });
+});
+//# sourceMappingURL=frontmatter.test.js.map

package/dist/lib/frontmatter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter.test.js","sourceRoot":"","sources":["../../src/lib/frontmatter.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,mDAAmD;AACnD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAE1E,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAE1C,gEAAgE;QAChE,iEAAiE;QACjE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACxD,6CAA6C;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAE1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,gEAAgE;QAChE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,2EAA2E;QAC3E,2EAA2E;QAC3E,oEAAoE;QACpE,gEAAgE;QAChE,2EAA2E;QAC3E,8EAA8E;QAC9E,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAE1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YAC9B,QAAQ;YACR,aAAa;YACb,oBAAoB;YACpB,yBAAyB;YACzB,wBAAwB;YACxB,mBAAmB;YACnB,0BAA0B;YAC1B,UAAU;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,qBAAqB,CAAC,6BAA6B,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAG;YACV,KAAK;YACL,yBAAyB;YACzB,eAAe;YACf,kBAAkB;YAClB,WAAW;YACX,sBAAsB;YACtB,kBAAkB;YAClB,KAAK;YACL,WAAW;SACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/gatewayTimeout.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Gateway latency-budget aborts on the CLI — WP-575 (TEN-2917, TEN-1126).
+ *
+ * Before this, `./client.ts` set NO timeout on any gateway call: the same missing-declaration
+ * defect as MCP's blanket 10s constant, in the opposite direction (hang forever instead of
+ * give up too early). Both now derive their budget from the route contract; this module owns
+ * what to SAY when one is hit.
+ *
+ * Split out of client.ts at the 500-LOC ratchet's insistence (STD-2 / DEC-1504), and the
+ * ratchet read it correctly: "how do we explain a timeout, and is it safe to retry" is a
+ * decision with its own reason to change, separate from how a request is sent.
+ *
+ * The budget itself is DECLARED once at the route contract
+ * (packages/kernel-client/src/routeLatencyBudget.ts) and reaches this connector as a
+ * drift-checked generated copy. A runtime value import from @productbrain/kernel-client is
+ * impossible here — it is a devDependency and this package is PUBLISHED, so the specifier
+ * would be unresolvable in dist/ for every installed user.
+ */
+import { CLIError } from './errors.js';
+/**
+ * Does this route mutate state?
+ *
+ * Read off the route contract's own Convex function type — `mutation` and `action` can write,
+ * `query` cannot — never inferred from the route's NAME. This decides whether the user is told
+ * a timed-out call may have landed, so an UNKNOWN route fails safe to `true`: telling someone
+ * "nothing was written" when something was is the worse error, and it is the one that invites
+ * a duplicating retry.
+ */
+export declare function routeMayMutate(fn: string): boolean;
+/**
+ * Was this call a DRY RUN? (PR #533 review, Codex P2)
+ *
+ * `preview: true` is a gateway-wide contract meaning "run every validation, write nothing" —
+ * every registered route accepting it returns before its first write (the routes are
+ * enumerated with line citations in the mcp-server twin of this function,
+ * packages/mcp-server/src/gatewaySeam.ts).
+ *
+ * MIRRORED, NOT SHARED, and deliberately so: a runtime value import from
+ * @productbrain/kernel-client is impossible in both connectors (see this module's header for
+ * the CLI's reason, DEC-701 for mcp-server's), and this derivation needs no route data, so
+ * routing it through the generated-copy pipeline would buy codegen machinery for two
+ * three-line functions. What must not drift is the ANSWER — pinned by a parity test asserting
+ * both connectors classify the same (fn, args) identically.
+ */
+export declare function isDryRunCall(args: unknown): boolean;
+/**
+ * Could a timed-out call have LANDED A WRITE?
+ *
+ * The route's type answers "can this route write at all"; the call's own arguments answer
+ * "was this particular call asking it to". `pb capture` never sends `preview: true` today and
+ * says so loudly (../commands/capture.ts:445-450), so the CLI has no live defect here — but
+ * the two connectors holding DIFFERENT answers to the same question is the exact failure mode
+ * WP-575 exists to remove, so the derivation is kept identical on both sides rather than added
+ * only where a bug was observed.
+ */
+export declare function mayHaveLandedOnTimeout(fn: string, args: unknown): boolean;
+/**
+ * Did this throw come from the budget signal firing?
+ *
+ * `AbortSignal.timeout` rejects with a DOMException named "TimeoutError", but an abort that
+ * lands while the response BODY is streaming can surface as "AbortError" instead, depending on
+ * where in undici the signal is observed. Matching only the first name left that case falling
+ * through `parseKernelEnvelope`'s lenient branch into an empty envelope — which a 200 status
+ * then reads as SUCCESS with `undefined` data, the exact false-completion this work package
+ * exists to remove, surviving in the one phase it was fixed for.
+ *
+ * Accepting both is also what the mcp-server twin already does
+ * (`throwClassifiedGatewayFailure`, packages/mcp-server/src/gatewaySeam.ts), and the two
+ * connectors disagreeing about what a budget abort IS is the same defect class as them
+ * disagreeing about how long a route may take.
+ *
+ * Safe to widen because of WHERE this is consulted: both call sites are guarded on a `route`
+ * being present (./client.ts and ./kernelEnvelope.ts), and `route` is supplied only for the
+ * gateway fetches that carry `AbortSignal.timeout(budgetMs)`. On those paths there is no other
+ * abort to confuse this with — the caller-driven `controller.abort()` surfaces
+ * (`/api/admin`, proof-run, connect) never pass a route and never reach here.
+ */
+export declare function isTimeoutAbort(err: unknown): boolean;
+/**
+ * The error a budget abort deserves.
+ *
+ * A budget abort is NOT an unreachable host. The connection succeeded; we stopped waiting.
+ * Reporting "could not reach" would be a false statement about the server AND would imply
+ * nothing ran — but for a write route the server may well have finished. Say what is actually
+ * known, and name the one action that resolves it.
+ */
+export declare function gatewayTimeoutError(fn: string, budgetMs: number, args?: unknown): CLIError;
+//# sourceMappingURL=gatewayTimeout.d.ts.map

package/dist/lib/gatewayTimeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatewayTimeout.d.ts","sourceRoot":"","sources":["../../src/lib/gatewayTimeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAGlD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAGlD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEnD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGpD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAmB1F"}

package/dist/lib/gatewayTimeout.js

@@ -0,0 +1,118 @@
+/**
+ * Gateway latency-budget aborts on the CLI — WP-575 (TEN-2917, TEN-1126).
+ *
+ * Before this, `./client.ts` set NO timeout on any gateway call: the same missing-declaration
+ * defect as MCP's blanket 10s constant, in the opposite direction (hang forever instead of
+ * give up too early). Both now derive their budget from the route contract; this module owns
+ * what to SAY when one is hit.
+ *
+ * Split out of client.ts at the 500-LOC ratchet's insistence (STD-2 / DEC-1504), and the
+ * ratchet read it correctly: "how do we explain a timeout, and is it safe to retry" is a
+ * decision with its own reason to change, separate from how a request is sent.
+ *
+ * The budget itself is DECLARED once at the route contract
+ * (packages/kernel-client/src/routeLatencyBudget.ts) and reaches this connector as a
+ * drift-checked generated copy. A runtime value import from @productbrain/kernel-client is
+ * impossible here — it is a devDependency and this package is PUBLISHED, so the specifier
+ * would be unresolvable in dist/ for every installed user.
+ */
+import { CLIError, ErrorCode } from './errors.js';
+import { ROUTE_TYPE_BY_NAME } from '../generated/routeLatencyBudget.generated.js';
+/**
+ * Does this route mutate state?
+ *
+ * Read off the route contract's own Convex function type — `mutation` and `action` can write,
+ * `query` cannot — never inferred from the route's NAME. This decides whether the user is told
+ * a timed-out call may have landed, so an UNKNOWN route fails safe to `true`: telling someone
+ * "nothing was written" when something was is the worse error, and it is the one that invites
+ * a duplicating retry.
+ */
+export function routeMayMutate(fn) {
+    const type = ROUTE_TYPE_BY_NAME[fn];
+    return type === undefined || type !== 'query';
+}
+/**
+ * Was this call a DRY RUN? (PR #533 review, Codex P2)
+ *
+ * `preview: true` is a gateway-wide contract meaning "run every validation, write nothing" —
+ * every registered route accepting it returns before its first write (the routes are
+ * enumerated with line citations in the mcp-server twin of this function,
+ * packages/mcp-server/src/gatewaySeam.ts).
+ *
+ * MIRRORED, NOT SHARED, and deliberately so: a runtime value import from
+ * @productbrain/kernel-client is impossible in both connectors (see this module's header for
+ * the CLI's reason, DEC-701 for mcp-server's), and this derivation needs no route data, so
+ * routing it through the generated-copy pipeline would buy codegen machinery for two
+ * three-line functions. What must not drift is the ANSWER — pinned by a parity test asserting
+ * both connectors classify the same (fn, args) identically.
+ */
+export function isDryRunCall(args) {
+    return args?.preview === true;
+}
+/**
+ * Could a timed-out call have LANDED A WRITE?
+ *
+ * The route's type answers "can this route write at all"; the call's own arguments answer
+ * "was this particular call asking it to". `pb capture` never sends `preview: true` today and
+ * says so loudly (../commands/capture.ts:445-450), so the CLI has no live defect here — but
+ * the two connectors holding DIFFERENT answers to the same question is the exact failure mode
+ * WP-575 exists to remove, so the derivation is kept identical on both sides rather than added
+ * only where a bug was observed.
+ */
+export function mayHaveLandedOnTimeout(fn, args) {
+    return routeMayMutate(fn) && !isDryRunCall(args);
+}
+/**
+ * Did this throw come from the budget signal firing?
+ *
+ * `AbortSignal.timeout` rejects with a DOMException named "TimeoutError", but an abort that
+ * lands while the response BODY is streaming can surface as "AbortError" instead, depending on
+ * where in undici the signal is observed. Matching only the first name left that case falling
+ * through `parseKernelEnvelope`'s lenient branch into an empty envelope — which a 200 status
+ * then reads as SUCCESS with `undefined` data, the exact false-completion this work package
+ * exists to remove, surviving in the one phase it was fixed for.
+ *
+ * Accepting both is also what the mcp-server twin already does
+ * (`throwClassifiedGatewayFailure`, packages/mcp-server/src/gatewaySeam.ts), and the two
+ * connectors disagreeing about what a budget abort IS is the same defect class as them
+ * disagreeing about how long a route may take.
+ *
+ * Safe to widen because of WHERE this is consulted: both call sites are guarded on a `route`
+ * being present (./client.ts and ./kernelEnvelope.ts), and `route` is supplied only for the
+ * gateway fetches that carry `AbortSignal.timeout(budgetMs)`. On those paths there is no other
+ * abort to confuse this with — the caller-driven `controller.abort()` surfaces
+ * (`/api/admin`, proof-run, connect) never pass a route and never reach here.
+ */
+export function isTimeoutAbort(err) {
+    const name = err?.name;
+    return name === 'TimeoutError' || name === 'AbortError';
+}
+/**
+ * The error a budget abort deserves.
+ *
+ * A budget abort is NOT an unreachable host. The connection succeeded; we stopped waiting.
+ * Reporting "could not reach" would be a false statement about the server AND would imply
+ * nothing ran — but for a write route the server may well have finished. Say what is actually
+ * known, and name the one action that resolves it.
+ */
+export function gatewayTimeoutError(fn, budgetMs, args) {
+    return new CLIError(`"${fn}" exceeded its ${budgetMs}ms latency budget.`, {
+        // PR #533 review (Copilot + Codex, same finding independently): this was
+        // NETWORK_UNREACHABLE, which contradicted the very distinction this module exists to
+        // make — the host WAS reachable. The taxonomy already had the right code and nothing
+        // used it. A caller branching on the code (retry policy, error reporting) would have
+        // been told "unreachable" about a server that answered the connection.
+        code: ErrorCode.NETWORK_TIMEOUT,
+        category: 'network',
+        guidance: mayHaveLandedOnTimeout(fn, args)
+            ? `The server was reachable — this client stopped waiting, so the operation may have\n` +
+                `COMPLETED anyway. Check before retrying (a blind retry can duplicate the write):\n` +
+                `  pb search "<what you were writing>"   # or: pb get <ID>`
+            : isDryRunCall(args)
+                ? `The server was reachable but did not respond in time. This was a preview, so\n` +
+                    `nothing was written — safe to retry.`
+                : `The server was reachable but did not respond in time. This is a read, so nothing\n` +
+                    `was written — safe to retry.`,
+    });
+}
+//# sourceMappingURL=gatewayTimeout.js.map

package/dist/lib/gatewayTimeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatewayTimeout.js","sourceRoot":"","sources":["../../src/lib/gatewayTimeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAQ,IAAiD,EAAE,OAAO,KAAK,IAAI,CAAC;AAC9E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,IAAa;IAC9D,OAAO,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,IAAI,GAAI,GAA4C,EAAE,IAAI,CAAC;IACjE,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,YAAY,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU,EAAE,QAAgB,EAAE,IAAc;IAC9E,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,kBAAkB,QAAQ,oBAAoB,EAAE;QACxE,yEAAyE;QACzE,qFAAqF;QACrF,qFAAqF;QACrF,qFAAqF;QACrF,uEAAuE;QACvE,IAAI,EAAE,SAAS,CAAC,eAAe;QAC/B,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,sBAAsB,CAAC,EAAE,EAAE,IAAI,CAAC;YACxC,CAAC,CAAC,qFAAqF;gBACrF,oFAAoF;gBACpF,2DAA2D;YAC7D,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;gBAClB,CAAC,CAAC,gFAAgF;oBAChF,sCAAsC;gBACxC,CAAC,CAAC,oFAAoF;oBACpF,8BAA8B;KACrC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/gitEnvLeakKeysParity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gitEnvLeakKeysParity.test.d.ts.map

package/dist/lib/gitEnvLeakKeysParity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitEnvLeakKeysParity.test.d.ts","sourceRoot":"","sources":["../../src/lib/gitEnvLeakKeysParity.test.ts"],"names":[],"mappings":""}

package/dist/lib/gitEnvLeakKeysParity.test.js

@@ -0,0 +1,73 @@
+// Parity test for the two hand-synced GIT_ENV_LEAK_KEYS copies in packages/cli (review round 4,
+// PR #632 follow-up, PRRT_kwDORS4ils6YoYoM).
+//
+// packages/cli/src/commands/files.test.ts and packages/cli/src/lib/productbrain-files.test.ts
+// each carry a LOCAL inline copy of scripts/lib/gitFixtureEnv.mjs's canonical GIT_ENV_LEAK_KEYS
+// array — kept local (rather than a cross-package import) per the note on each copy. A future
+// git version bump updates the canonical array (its own superset test,
+// scripts/lib/gitFixtureEnv.node-test.mjs, would fail and prompt the fix there) but nothing
+// previously asserted the two packages/cli copies got updated too — they could silently rot out
+// of sync, each one individually still "passing" its own file's tests while quietly missing a
+// newer git-named env var.
+//
+// Reads all three sources as TEXT and extracts each array by regex (no cross-package import —
+// packages/cli is a separately published package, and scripts/lib/gitFixtureEnv.mjs lives
+// outside its rootDir; importing another *.test.ts file directly would also risk vitest
+// double-collecting its describe/it blocks). This is exactly the "reading the canonical file
+// from repo root is fine in a test" approach.
+import { describe, it, expect } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const HERE = dirname(fileURLToPath(import.meta.url));
+// packages/cli/src/lib -> packages/cli/src -> packages/cli -> packages -> repo root
+const REPO_ROOT = resolve(HERE, '../../../..');
+// Review round 3 (PR #634, PRRT_kwDORS4ils6Yp28g): a commented-out quoted token inside the array
+// span (e.g. `// 'GIT_OLD_VAR', -- retired`) previously counted as a real list entry, since the
+// extraction regex below doesn't distinguish code from comments — making the parity check dishonest
+// (it could pass or fail based on comment text, not the actual arrays). Strips both comment forms
+// from the matched span before extracting; safe in this narrow context (a flat array of ALL-CAPS
+// env-var-name string literals — no regex literals or other content that a naive comment strip
+// could misparse, unlike the general-purpose scripts/lib/gitFixtureTextMask.mjs this repo uses
+// elsewhere for exactly that reason).
+function extractGitEnvLeakKeys(source) {
+    const match = /\bGIT_ENV_LEAK_KEYS[^=]*=\s*\[([\s\S]*?)\]/m.exec(source);
+    if (!match)
+        throw new Error('GIT_ENV_LEAK_KEYS array not found in source');
+    const withoutComments = match[1].replace(/\/\*[\s\S]*?\*\//g, '').replace(/\/\/.*$/gm, '');
+    return [...withoutComments.matchAll(/'([^']+)'/g)].map((m) => m[1]);
+}
+describe('GIT_ENV_LEAK_KEYS parity across the canonical source and both packages/cli inline copies', () => {
+    const canonicalPath = resolve(REPO_ROOT, 'scripts/lib/gitFixtureEnv.mjs');
+    const canonical = extractGitEnvLeakKeys(readFileSync(canonicalPath, 'utf8'));
+    it('the canonical list itself is non-empty (sanity check on the extraction regex, not just the comparisons below)', () => {
+        expect(canonical.length).toBeGreaterThan(0);
+    });
+    it('packages/cli/src/commands/files.test.ts stays in sync with the canonical scripts/lib/gitFixtureEnv.mjs list', () => {
+        const source = readFileSync(resolve(REPO_ROOT, 'packages/cli/src/commands/files.test.ts'), 'utf8');
+        const copy = extractGitEnvLeakKeys(source);
+        expect([...copy].sort()).toEqual([...canonical].sort());
+    });
+    it('packages/cli/src/lib/productbrain-files.test.ts stays in sync with the canonical scripts/lib/gitFixtureEnv.mjs list', () => {
+        const source = readFileSync(resolve(REPO_ROOT, 'packages/cli/src/lib/productbrain-files.test.ts'), 'utf8');
+        const copy = extractGitEnvLeakKeys(source);
+        expect([...copy].sort()).toEqual([...canonical].sort());
+    });
+});
+describe('extractGitEnvLeakKeys ignores commented-out entries (review round 3, PRRT_kwDORS4ils6Yp28g)', () => {
+    it('a line-commented-out quoted token inside the array span is NOT counted as a real entry', () => {
+        const source = [
+            'export const GIT_ENV_LEAK_KEYS = [',
+            "\t'GIT_DIR',",
+            "\t// 'GIT_RETIRED_VAR', -- no longer needed",
+            "\t'GIT_WORK_TREE',",
+            '];',
+        ].join('\n');
+        expect(extractGitEnvLeakKeys(source)).toEqual(['GIT_DIR', 'GIT_WORK_TREE']);
+    });
+    it('a block-commented-out quoted token inside the array span is NOT counted as a real entry', () => {
+        const source = ["export const GIT_ENV_LEAK_KEYS = [", "\t'GIT_DIR',", "\t/* 'GIT_RETIRED_VAR', */", "\t'GIT_WORK_TREE',", '];'].join('\n');
+        expect(extractGitEnvLeakKeys(source)).toEqual(['GIT_DIR', 'GIT_WORK_TREE']);
+    });
+});
+//# sourceMappingURL=gitEnvLeakKeysParity.test.js.map

package/dist/lib/gitEnvLeakKeysParity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitEnvLeakKeysParity.test.js","sourceRoot":"","sources":["../../src/lib/gitEnvLeakKeysParity.test.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,6CAA6C;AAC7C,EAAE;AACF,8FAA8F;AAC9F,gGAAgG;AAChG,8FAA8F;AAC9F,uEAAuE;AACvE,4FAA4F;AAC5F,gGAAgG;AAChG,8FAA8F;AAC9F,2BAA2B;AAC3B,EAAE;AACF,8FAA8F;AAC9F,0FAA0F;AAC1F,wFAAwF;AACxF,6FAA6F;AAC7F,8CAA8C;AAC9C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,oFAAoF;AACpF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AAE/C,iGAAiG;AACjG,gGAAgG;AAChG,oGAAoG;AACpG,kGAAkG;AAClG,iGAAiG;AACjG,+FAA+F;AAC/F,+FAA+F;AAC/F,sCAAsC;AACtC,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,QAAQ,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACxG,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAE7E,EAAE,CAAC,+GAA+G,EAAE,GAAG,EAAE;QACvH,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6GAA6G,EAAE,GAAG,EAAE;QACrH,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,yCAAyC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnG,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qHAAqH,EAAE,GAAG,EAAE;QAC7H,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,iDAAiD,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3G,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6FAA6F,EAAE,GAAG,EAAE;IAC3G,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,MAAM,GAAG;YACb,oCAAoC;YACpC,cAAc;YACd,6CAA6C;YAC7C,oBAAoB;YACpB,IAAI;SACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,MAAM,GAAG,CAAC,oCAAoC,EAAE,cAAc,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3I,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/glossary.js

@@ -14,7 +14,7 @@ export const GLOSSARY = [
     },
     {
         term: 'entry',
-        definition: 'A unit of product knowledge (bet, decision, tension, standard, etc.).',
+        definition: 'A unit of product knowledge (work package, decision, tension, standard, etc.).',
     },
     {
         term: 'collection',

package/dist/lib/glossary.js.map

@@ -1 +1 @@
-{"version":3,"file":"glossary.js","sourceRoot":"","sources":["../../src/lib/glossary.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAOvC,MAAM,CAAC,MAAM,QAAQ,GAAoB;IACvC;QACE,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4DAA4D;KACzE;IACD;QACE,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,uEAAuE;KACpF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,wEAAwE;KACrF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,sEAAsE;KACnF;IACD;QACE,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,wEAAwE;KACrF;IACD;QACE,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,iDAAiD;KAC9D;IACD;QACE,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,4DAA4D;KACzE;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"glossary.js","sourceRoot":"","sources":["../../src/lib/glossary.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAOvC,MAAM,CAAC,MAAM,QAAQ,GAAoB;IACvC;QACE,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4DAA4D;KACzE;IACD;QACE,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,gFAAgF;KAC7F;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,wEAAwE;KACrF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,sEAAsE;KACnF;IACD;QACE,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,wEAAwE;KACrF;IACD;QACE,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,iDAAiD;KAC9D;IACD;QACE,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,4DAA4D;KACzE;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/lib/hook-intents.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Hook intent model — WP-310 E3a.
+ * Defines the three pb hook intents and a composition function that returns
+ * only the hook entries not already present in existing settings.
+ *
+ * Also exposes getHookStatusForSurface (WP-310 E3b / S4) for multi-surface
+ * opt-in reporting in runHandshakeInit().
+ *
+ * Kept separate from handshake.ts so S4 (multi-surface opt-in) can import
+ * composeHooksFromIntents without pulling in the full handshake module.
+ */
+import type { SurfaceName } from '../surfaces/registry.js';
+export type HookIntent = 'session-start' | 'session-close' | 'pre-compact';
+export interface HookIntentConfig {
+    command: string;
+    statusMessage?: string;
+    hookEvent: 'SessionStart' | 'Stop' | 'PreCompact';
+}
+export declare const HOOK_INTENT_CONFIGS: Record<HookIntent, HookIntentConfig>;
+export interface HookAddition {
+    event: 'SessionStart' | 'Stop' | 'PreCompact';
+    entry: {
+        hooks: Array<{
+            type: string;
+            command: string;
+            statusMessage?: string;
+        }>;
+    };
+    label: string;
+}
+/**
+ * Returns the hook additions needed for the given intents.
+ * Only returns entries whose command is NOT already present in existingHooks.
+ *
+ * @param intents   - The hook intents to compose.
+ * @param existingHooks - The current hooks object from settings (e.g. settings.hooks ?? {}).
+ */
+export declare function composeHooksFromIntents(intents: HookIntent[], existingHooks: Record<string, unknown>): HookAddition[];
+export interface HookStatusResult {
+    writable: boolean;
+    reason: string;
+}
+/**
+ * Determines whether hook files can be written for a given surface.
+ *
+ * INS-740: Cursor and Copilot have empty hookEvents in SURFACE_REGISTRY,
+ * so no hook files are written for them. This function reports that status
+ * so runHandshakeInit() can surface an informational note to the user.
+ */
+export declare function getHookStatusForSurface(surface: SurfaceName): HookStatusResult;
+//# sourceMappingURL=hook-intents.d.ts.map

package/dist/lib/hook-intents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-intents.d.ts","sourceRoot":"","sources":["../../src/lib/hook-intents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,eAAe,GAAG,aAAa,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,cAAc,GAAG,MAAM,GAAG,YAAY,CAAC;CACnD;AAID,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAgBpE,CAAC;AASF,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,YAAY,CAAC;IAC9C,KAAK,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IACnF,KAAK,EAAE,MAAM,CAAC;CACf;AAQD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,UAAU,EAAE,EACrB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACrC,YAAY,EAAE,CAyBhB;AAID,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,GAAG,gBAAgB,CAS9E"}

package/dist/lib/hook-intents.js

@@ -0,0 +1,85 @@
+/**
+ * Hook intent model — WP-310 E3a.
+ * Defines the three pb hook intents and a composition function that returns
+ * only the hook entries not already present in existing settings.
+ *
+ * Also exposes getHookStatusForSurface (WP-310 E3b / S4) for multi-surface
+ * opt-in reporting in runHandshakeInit().
+ *
+ * Kept separate from handshake.ts so S4 (multi-surface opt-in) can import
+ * composeHooksFromIntents without pulling in the full handshake module.
+ */
+import { SURFACE_REGISTRY } from '../surfaces/registry.js';
+// Hook failure contract (TEN-712): all hook commands MUST end with '2>/dev/null || true'
+// so Claude Code always starts even if pb is unavailable. Never remove this suffix.
+export const HOOK_INTENT_CONFIGS = {
+    'session-start': {
+        command: 'pb session start 2>/dev/null || true',
+        statusMessage: 'Opening pb session...',
+        hookEvent: 'SessionStart',
+    },
+    'session-close': {
+        command: 'pb session close 2>/dev/null || true',
+        statusMessage: 'Closing pb session...',
+        hookEvent: 'Stop',
+    },
+    'pre-compact': {
+        command: 'pb session id > /dev/null 2>&1 && echo \'{"systemMessage": "pb session active — capture decisions/tensions before compacting: pb capture \\"DEC: ...\\""}\'  || true',
+        hookEvent: 'PreCompact',
+    },
+};
+function hasCommand(groups, cmd) {
+    return (groups ?? []).some((g) => g.hooks?.some((h) => h.command === cmd));
+}
+const INTENT_LABELS = {
+    'session-start': 'SessionStart → pb session start',
+    'session-close': 'Stop → pb session close',
+    'pre-compact': 'PreCompact → decision capture reminder',
+};
+/**
+ * Returns the hook additions needed for the given intents.
+ * Only returns entries whose command is NOT already present in existingHooks.
+ *
+ * @param intents   - The hook intents to compose.
+ * @param existingHooks - The current hooks object from settings (e.g. settings.hooks ?? {}).
+ */
+export function composeHooksFromIntents(intents, existingHooks) {
+    const additions = [];
+    for (const intent of intents) {
+        const cfg = HOOK_INTENT_CONFIGS[intent];
+        const existing = existingHooks[cfg.hookEvent];
+        if (hasCommand(existing, cfg.command))
+            continue;
+        const hookEntry = {
+            type: 'command',
+            command: cfg.command,
+        };
+        if (cfg.statusMessage !== undefined) {
+            hookEntry.statusMessage = cfg.statusMessage;
+        }
+        additions.push({
+            event: cfg.hookEvent,
+            entry: { hooks: [hookEntry] },
+            label: INTENT_LABELS[intent],
+        });
+    }
+    return additions;
+}
+/**
+ * Determines whether hook files can be written for a given surface.
+ *
+ * INS-740: Cursor and Copilot have empty hookEvents in SURFACE_REGISTRY,
+ * so no hook files are written for them. This function reports that status
+ * so runHandshakeInit() can surface an informational note to the user.
+ */
+export function getHookStatusForSurface(surface) {
+    const cap = SURFACE_REGISTRY[surface];
+    if (cap.hookEvents.length > 0) {
+        return { writable: true, reason: 'native hook events supported' };
+    }
+    return {
+        writable: false,
+        reason: `${surface} has no session hook events — run \`pb session start\` manually`,
+    };
+}
+//# sourceMappingURL=hook-intents.js.map

package/dist/lib/hook-intents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-intents.js","sourceRoot":"","sources":["../../src/lib/hook-intents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAW3D,yFAAyF;AACzF,oFAAoF;AACpF,MAAM,CAAC,MAAM,mBAAmB,GAAyC;IACvE,eAAe,EAAE;QACf,OAAO,EAAE,sCAAsC;QAC/C,aAAa,EAAE,uBAAuB;QACtC,SAAS,EAAE,cAAc;KAC1B;IACD,eAAe,EAAE;QACf,OAAO,EAAE,sCAAsC;QAC/C,aAAa,EAAE,uBAAuB;QACtC,SAAS,EAAE,MAAM;KAClB;IACD,aAAa,EAAE;QACb,OAAO,EACL,sKAAsK;QACxK,SAAS,EAAE,YAAY;KACxB;CACF,CAAC;AAKF,SAAS,UAAU,CAAC,MAAuC,EAAE,GAAW;IACtE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC;AAC7E,CAAC;AAQD,MAAM,aAAa,GAA+B;IAChD,eAAe,EAAE,iCAAiC;IAClD,eAAe,EAAE,yBAAyB;IAC1C,aAAa,EAAE,wCAAwC;CACxD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAqB,EACrB,aAAsC;IAEtC,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAoC,CAAC;QAEjF,IAAI,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAEhD,MAAM,SAAS,GAA8D;YAC3E,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;QACF,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACpC,SAAS,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QAC9C,CAAC;QAED,SAAS,CAAC,IAAI,CAAC;YACb,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE;YAC7B,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAoB;IAC1D,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACpE,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,GAAG,OAAO,iEAAiE;KACpF,CAAC;AACJ,CAAC"}

package/dist/lib/inferSourceDate.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Synced from convex/lib/inferSourceDate.ts (FEAT-885: shared date inference, BR-108: CLI import boundary).
+ */
+/**
+ * Infer an ISO date (YYYY-MM-DD) from free-text values.
+ *
+ * Canonical source for MCP (packages/mcp-server/src/lib/inferSourceDate.ts)
+ * and CLI (packages/cli/src/lib/inferSourceDate.ts) — both are synced copies
+ * maintained by scripts/sync-convex-lib-to-mcp.mjs (FEAT-885, BR-108).
+ */
+export declare function inferSourceDate(...values: Array<string | undefined>): string | undefined;
+//# sourceMappingURL=inferSourceDate.d.ts.map

package/dist/lib/inferSourceDate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inferSourceDate.d.ts","sourceRoot":"","sources":["../../src/lib/inferSourceDate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;GAMG;AAEH,wBAAgB,eAAe,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAmCxF"}

package/dist/lib/inferSourceDate.js

@@ -0,0 +1,44 @@
+/**
+ * Synced from convex/lib/inferSourceDate.ts (FEAT-885: shared date inference, BR-108: CLI import boundary).
+ */
+/**
+ * Infer an ISO date (YYYY-MM-DD) from free-text values.
+ *
+ * Canonical source for MCP (packages/mcp-server/src/lib/inferSourceDate.ts)
+ * and CLI (packages/cli/src/lib/inferSourceDate.ts) — both are synced copies
+ * maintained by scripts/sync-convex-lib-to-mcp.mjs (FEAT-885, BR-108).
+ */
+export function inferSourceDate(...values) {
+    const combined = values
+        .filter((value) => typeof value === 'string' && value.trim().length > 0)
+        .join('\n');
+    if (!combined)
+        return undefined;
+    const isoMatch = combined.match(/\b(20\d{2}-\d{2}-\d{2})\b/);
+    if (isoMatch)
+        return isoMatch[1];
+    const monthMatch = combined.match(/\b(january|february|march|april|may|june|july|august|september|october|november|december)\s+(\d{1,2})(?:st|nd|rd|th)?(?:,?\s+(20\d{2}))?\b/i);
+    if (!monthMatch)
+        return undefined;
+    const monthIndex = [
+        'january',
+        'february',
+        'march',
+        'april',
+        'may',
+        'june',
+        'july',
+        'august',
+        'september',
+        'october',
+        'november',
+        'december',
+    ].indexOf(monthMatch[1].toLowerCase());
+    if (monthIndex < 0)
+        return undefined;
+    const inferredYear = monthMatch[3] ?? combined.match(/\b(20\d{2})\b/)?.[1] ?? String(new Date().getUTCFullYear());
+    const month = String(monthIndex + 1).padStart(2, '0');
+    const day = monthMatch[2].padStart(2, '0');
+    return `${inferredYear}-${month}-${day}`;
+}
+//# sourceMappingURL=inferSourceDate.js.map