@productbrain/cli 0.1.0-beta.47 → 0.1.0-beta.4721

package/dist/lib/inferSourceDate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inferSourceDate.js","sourceRoot":"","sources":["../../src/lib/inferSourceDate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;GAMG;AAEH,MAAM,UAAU,eAAe,CAAC,GAAG,MAAiC;IACnE,MAAM,QAAQ,GAAG,MAAM;SACrB,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACxF,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC7D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEjC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAChC,6IAA6I,CAC7I,CAAC;IACF,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,UAAU,GAAG;QAClB,SAAS;QACT,UAAU;QACV,OAAO;QACP,OAAO;QACP,KAAK;QACL,MAAM;QACN,MAAM;QACN,QAAQ;QACR,WAAW;QACX,SAAS;QACT,UAAU;QACV,UAAU;KACV,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAErC,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;IAClH,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,GAAG,YAAY,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;AAC1C,CAAC"}

package/dist/lib/kernelEnvelope.d.ts

@@ -0,0 +1,31 @@
+/** Structured field-level detail from a VALIDATION_FAILED response. */
+export interface ValidationErrorDetail {
+    fieldKey: string;
+    fieldLabel: string;
+    invalidValue: unknown;
+    validOptions?: string[];
+    errorType: 'type_mismatch' | 'invalid_option' | 'required';
+    message: string;
+}
+export type KernelEnvelope<T> = {
+    ok?: boolean;
+    data?: T;
+    summary?: string;
+    error?: string;
+    message?: string;
+    code?: string;
+    details?: ValidationErrorDetail[];
+    /** Present only when code === 'rate-limited' (TEN-656) — seconds until the caller may retry. */
+    retryAfterSeconds?: number;
+    _meta?: {
+        durationMs?: number;
+        truncated?: boolean;
+    };
+};
+export declare function recordLatestFromResponse(res: Response): void;
+export declare function parseKernelEnvelope<T>(res: Response, route?: {
+    fn: string;
+    budgetMs: number;
+    args?: unknown;
+}): Promise<KernelEnvelope<T>>;
+//# sourceMappingURL=kernelEnvelope.d.ts.map

package/dist/lib/kernelEnvelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernelEnvelope.d.ts","sourceRoot":"","sources":["../../src/lib/kernelEnvelope.ts"],"names":[],"mappings":"AAeA,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,eAAe,GAAG,gBAAgB,GAAG,UAAU,CAAC;IAC3D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI;IAC9B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAClC,gGAAgG;IAChG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAK3B,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACtD,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAE5D;AAED,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,GAAG,EAAE,QAAQ,EAIb,KAAK,CAAC,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACvD,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CA2B5B"}

package/dist/lib/kernelEnvelope.js

@@ -0,0 +1,52 @@
+/**
+ * The gateway envelope — its shape, and how to read one off a `Response`.
+ *
+ * Split out of client.ts in the WP-575 review round (STD-2 / DEC-1504: client.ts crossed the
+ * 500-LOC budget). The seam is a real one, not a line-count dodge: client.ts's job is to MAKE
+ * gateway calls — decide the budget, carry auth, retry a 429, drive the spinner. Deciding what
+ * the bytes coming back MEAN, and what a failure to read them means, is a different job. It is
+ * the same split the mcp-server connector already has between its `client.ts` and
+ * `gatewaySeam.ts`.
+ *
+ * The load-bearing part is `parseKernelEnvelope`'s body-phase abort branch — see its comment.
+ */
+import { recordServerLatest } from './update-check.js';
+import { gatewayTimeoutError, isTimeoutAbort } from './gatewayTimeout.js';
+export function recordLatestFromResponse(res) {
+    recordServerLatest(res.headers?.get?.('pb-latest-cli-version') ?? null);
+}
+export async function parseKernelEnvelope(res, 
+// WP-575 (PR #533 review, Codex P1): the route this body belongs to, so a BODY-phase budget
+// abort can be classified as the timeout it is. Optional — `validateKey` runs its own
+// AbortController and its own catch, and is deliberately left on the lenient path below.
+route) {
+    recordLatestFromResponse(res);
+    try {
+        return (await res.json());
+    }
+    catch (err) {
+        // `fetch` resolves at HEADERS while the budget signal is still live, so a stalled BODY
+        // aborts HERE, not at the fetch — outside the caller's timeout-classification try. The
+        // old blanket `.catch(() => ({}))` swallowed that into an empty envelope, which a 200
+        // status then read as SUCCESS with `undefined` data: a timed-out write reported as
+        // completed. That is the precise false-outcome this work package exists to remove, and
+        // the sibling of the MCP-side fix already landed as `throwClassifiedGatewayFailure`
+        // (mcp-server/src/gatewaySeam.ts) — the CLI had the same hole in all three call variants.
+        //
+        // Gated on `res.ok` (PR #533 review round 5): a NON-OK status means the server already
+        // reached a verdict and said so — only its error BODY stalled. Classifying that as a budget
+        // timeout would replace a real status and code (a 429's `retryAfterSeconds`, a 4xx's
+        // validation code) with "may have completed anyway, search before retrying", about a call
+        // the server explicitly failed. Falling through to the empty envelope hands it to the
+        // `!res.ok` check every caller already runs on the next line — the behaviour non-OK
+        // responses have always had. The timeout classification is for the case that is genuinely
+        // all we know: a 2xx whose body never arrived.
+        if (route && res.ok && isTimeoutAbort(err))
+            throw gatewayTimeoutError(route.fn, route.budgetMs, route.args);
+        // Any OTHER parse failure keeps the pre-existing lenient behavior on purpose: a non-JSON
+        // or empty body is already handled by the ok/status checks every caller runs against the
+        // empty envelope, and narrowing that here would change unrelated error paths.
+        return {};
+    }
+}
+//# sourceMappingURL=kernelEnvelope.js.map

package/dist/lib/kernelEnvelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernelEnvelope.js","sourceRoot":"","sources":["../../src/lib/kernelEnvelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA6B1E,MAAM,UAAU,wBAAwB,CAAC,GAAa;IACpD,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAa;AACb,4FAA4F;AAC5F,sFAAsF;AACtF,yFAAyF;AACzF,KAAwD;IAExD,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uFAAuF;QACvF,uFAAuF;QACvF,sFAAsF;QACtF,mFAAmF;QACnF,uFAAuF;QACvF,oFAAoF;QACpF,0FAA0F;QAC1F,EAAE;QACF,uFAAuF;QACvF,4FAA4F;QAC5F,qFAAqF;QACrF,0FAA0F;QAC1F,sFAAsF;QACtF,oFAAoF;QACpF,0FAA0F;QAC1F,+CAA+C;QAC/C,IAAI,KAAK,IAAI,GAAG,CAAC,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5G,yFAAyF;QACzF,yFAAyF;QACzF,8EAA8E;QAC9E,OAAO,EAAuB,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/lib/method-registry.d.ts

@@ -0,0 +1,37 @@
+/**
+ * method-registry.ts — load pb method registry (WP-310 E4).
+ *
+ * Loads the BUNDLED registry JSON. Used during handshake when a manifest is present.
+ *
+ * History (TEN-2783): this used to be "Chain-first with bundled fallback", attempting a
+ * `chain.getMethodRegistry` gateway call before falling back. That route was never registered in
+ * the gateway (absent from `packages/kernel-client/src/generated/routes.generated.ts`), so the
+ * call threw on every handshake since introduction and the bundled path was ALWAYS the real one.
+ * The dead attempt was removed so the bundled registry is the honest, single primary — no
+ * misleading `source: 'chain'` that could never occur, no orphan `chain.getMethodRegistry` call
+ * for the called-route gate to carve out.
+ */
+export interface RegistryMethod {
+    name: string;
+    usage: string;
+    description: string;
+}
+export interface MethodRegistry {
+    version: string;
+    generatedAt: string;
+    methods: RegistryMethod[];
+}
+export interface RegistryLoadResult {
+    registry: MethodRegistry;
+    /** Always 'bundled' — the Chain path (TEN-2783) was removed; kept as a field for report output. */
+    source: 'bundled';
+    /** true when the bundled registry's generatedAt is older than FRESHNESS_DAYS */
+    stale: boolean;
+}
+/**
+ * Load the pb method registry from the bundled JSON.
+ *
+ * Async to preserve the caller's `.catch(() => null)` on a read failure (missing/corrupt bundle).
+ */
+export declare function loadMethodRegistry(): Promise<RegistryLoadResult>;
+//# sourceMappingURL=method-registry.d.ts.map

package/dist/lib/method-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-registry.d.ts","sourceRoot":"","sources":["../../src/lib/method-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,mGAAmG;IACnG,MAAM,EAAE,SAAS,CAAC;IAClB,gFAAgF;IAChF,KAAK,EAAE,OAAO,CAAC;CAChB;AAoBD;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAGtE"}

package/dist/lib/method-registry.js

@@ -0,0 +1,41 @@
+/**
+ * method-registry.ts — load pb method registry (WP-310 E4).
+ *
+ * Loads the BUNDLED registry JSON. Used during handshake when a manifest is present.
+ *
+ * History (TEN-2783): this used to be "Chain-first with bundled fallback", attempting a
+ * `chain.getMethodRegistry` gateway call before falling back. That route was never registered in
+ * the gateway (absent from `packages/kernel-client/src/generated/routes.generated.ts`), so the
+ * call threw on every handshake since introduction and the bundled path was ALWAYS the real one.
+ * The dead attempt was removed so the bundled registry is the honest, single primary — no
+ * misleading `source: 'chain'` that could never occur, no orphan `chain.getMethodRegistry` call
+ * for the called-route gate to carve out.
+ */
+import { readFileSync } from 'fs';
+import { join } from 'path';
+import { fileURLToPath } from 'url';
+// From dist/lib/method-registry.js → ../../templates/ (two levels up: lib → dist → package root)
+// The templates/ directory lives at the package root alongside dist/, not inside dist/.
+// This mirrors the pattern in commands/handshake.ts which also uses __dirname, '..', '..', 'templates'.
+const __dirname = fileURLToPath(new URL('.', import.meta.url));
+const BUNDLED_REGISTRY_PATH = join(__dirname, '..', '..', 'templates', 'method-registry.json');
+const FRESHNESS_DAYS = 7;
+function loadBundled() {
+    const raw = readFileSync(BUNDLED_REGISTRY_PATH, 'utf8');
+    return JSON.parse(raw);
+}
+function isStaleFn(generatedAt) {
+    const generated = new Date(generatedAt).getTime();
+    const now = Date.now();
+    return now - generated > FRESHNESS_DAYS * 24 * 60 * 60 * 1000;
+}
+/**
+ * Load the pb method registry from the bundled JSON.
+ *
+ * Async to preserve the caller's `.catch(() => null)` on a read failure (missing/corrupt bundle).
+ */
+export async function loadMethodRegistry() {
+    const registry = loadBundled();
+    return { registry, source: 'bundled', stale: isStaleFn(registry.generatedAt) };
+}
+//# sourceMappingURL=method-registry.js.map

package/dist/lib/method-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-registry.js","sourceRoot":"","sources":["../../src/lib/method-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAsBpC,iGAAiG;AACjG,wFAAwF;AACxF,wGAAwG;AACxG,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;AAC/F,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,GAAG,GAAG,SAAS,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/lib/normalizeMaterializedFilename.d.ts

@@ -0,0 +1,28 @@
+/**
+ * normalizeMaterializedFilename — WP-379 S5b
+ *
+ * Produces a lowercase, slug-friendly filename from an asset name.
+ * Used by resolveProjectionCollision to compare on-disk filenames (which may
+ * have been projected with a non-normalized case) against the canonical
+ * lowercase form that handshake now writes.
+ *
+ * Contract:
+ *   - Output is lowercase.
+ *   - Non-alphanumeric, non-dot characters are replaced with hyphens.
+ *   - Leading dots (hidden-file convention) are stripped.
+ *   - Multiple consecutive hyphens are collapsed to a single hyphen.
+ *   - Leading and trailing hyphens are trimmed.
+ *   - Unicode characters that don't map to ASCII letters/digits are dropped.
+ *   - Idempotent: applying the function twice yields the same result.
+ *   - Empty input → empty output.
+ *
+ * Chain: WP-379 S5b.
+ */
+/**
+ * Normalize a materializedFilename to its canonical lowercase slug form.
+ *
+ * @param name  The raw filename (e.g. "Setup-ProductBrain.mdc").
+ * @returns     The normalized filename (e.g. "setup-productbrain.mdc").
+ */
+export declare function normalizeMaterializedFilename(name: string): string;
+//# sourceMappingURL=normalizeMaterializedFilename.d.ts.map

package/dist/lib/normalizeMaterializedFilename.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.d.ts","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkClE"}

package/dist/lib/normalizeMaterializedFilename.js

@@ -0,0 +1,56 @@
+/**
+ * normalizeMaterializedFilename — WP-379 S5b
+ *
+ * Produces a lowercase, slug-friendly filename from an asset name.
+ * Used by resolveProjectionCollision to compare on-disk filenames (which may
+ * have been projected with a non-normalized case) against the canonical
+ * lowercase form that handshake now writes.
+ *
+ * Contract:
+ *   - Output is lowercase.
+ *   - Non-alphanumeric, non-dot characters are replaced with hyphens.
+ *   - Leading dots (hidden-file convention) are stripped.
+ *   - Multiple consecutive hyphens are collapsed to a single hyphen.
+ *   - Leading and trailing hyphens are trimmed.
+ *   - Unicode characters that don't map to ASCII letters/digits are dropped.
+ *   - Idempotent: applying the function twice yields the same result.
+ *   - Empty input → empty output.
+ *
+ * Chain: WP-379 S5b.
+ */
+/**
+ * Normalize a materializedFilename to its canonical lowercase slug form.
+ *
+ * @param name  The raw filename (e.g. "Setup-ProductBrain.mdc").
+ * @returns     The normalized filename (e.g. "setup-productbrain.mdc").
+ */
+export function normalizeMaterializedFilename(name) {
+    if (!name)
+        return '';
+    // 1. Strip leading dots (hidden-file prefix, e.g. ".cursor/rules/.hidden.mdc").
+    //    We only strip a single leading dot cluster at the start of the basename,
+    //    not dots that are part of extensions or internal names.
+    const stripped = name.startsWith('.') ? name.replace(/^\.+/, '') : name;
+    if (!stripped)
+        return '';
+    // 2. Lowercase the entire name (covers ASCII + Unicode basic-latin).
+    const lowered = stripped.toLowerCase();
+    // 3. Normalize Unicode: decompose then remove non-ASCII code points that
+    //    didn't map cleanly (e.g. accented chars become their base form via NFD
+    //    decomposition, then the combining diacritics are removed).
+    //    NFKD decomposes ligatures and compatibility forms as well.
+    const ascii = lowered
+        .normalize('NFKD')
+        .replace(/[̀-ͯ]/g, '') // strip combining diacritics
+        .replace(/[^\x00-\x7F]/g, ''); // drop remaining non-ASCII
+    // 4. Replace any sequence of non-alphanumeric + non-dot characters with a
+    //    single hyphen.  We preserve dots so that ".mdc" and ".md" extensions
+    //    are maintained in the output.
+    const slugged = ascii.replace(/[^a-z0-9.]+/g, '-');
+    // 5. Collapse consecutive hyphens → single hyphen.
+    const collapsed = slugged.replace(/-{2,}/g, '-');
+    // 6. Trim leading and trailing hyphens.
+    const trimmed = collapsed.replace(/^-+|-+$/g, '');
+    return trimmed;
+}
+//# sourceMappingURL=normalizeMaterializedFilename.js.map

package/dist/lib/normalizeMaterializedFilename.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.js","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,gFAAgF;IAChF,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,qEAAqE;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAEvC,yEAAyE;IACzE,4EAA4E;IAC5E,gEAAgE;IAChE,gEAAgE;IAChE,MAAM,KAAK,GAAG,OAAO;SAClB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,6BAA6B;SACnD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAG,2BAA2B;IAE9D,0EAA0E;IAC1E,0EAA0E;IAC1E,mCAAmC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAEnD,mDAAmD;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEjD,wCAAwC;IACxC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAElD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/normalizeMaterializedFilename.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * normalizeMaterializedFilename unit tests — WP-379 S5b.
+ *
+ * Contract assertions:
+ *   - Setup-ProductBrain.mdc → setup-productbrain.mdc
+ *   - Already-normalized input is idempotent
+ *   - Unicode chars that map to ASCII (via NFKD) retain base form; others dropped
+ *   - Leading dot stripped; file is otherwise preserved
+ *   - Empty input returns empty string
+ *   - Extension dots are preserved
+ *   - Non-alphanumeric sequences → single hyphen
+ *
+ * Chain: WP-379 S5b.
+ */
+export {};
+//# sourceMappingURL=normalizeMaterializedFilename.test.d.ts.map

package/dist/lib/normalizeMaterializedFilename.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.test.d.ts","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/lib/normalizeMaterializedFilename.test.js

@@ -0,0 +1,90 @@
+/**
+ * normalizeMaterializedFilename unit tests — WP-379 S5b.
+ *
+ * Contract assertions:
+ *   - Setup-ProductBrain.mdc → setup-productbrain.mdc
+ *   - Already-normalized input is idempotent
+ *   - Unicode chars that map to ASCII (via NFKD) retain base form; others dropped
+ *   - Leading dot stripped; file is otherwise preserved
+ *   - Empty input returns empty string
+ *   - Extension dots are preserved
+ *   - Non-alphanumeric sequences → single hyphen
+ *
+ * Chain: WP-379 S5b.
+ */
+import { describe, expect, it } from 'vitest';
+import { normalizeMaterializedFilename } from './normalizeMaterializedFilename.js';
+describe('normalizeMaterializedFilename', () => {
+    // ── Primary contract test (from bet spec) ───────────────────────────────────
+    it('Setup-ProductBrain.mdc → setup-productbrain.mdc', () => {
+        expect(normalizeMaterializedFilename('Setup-ProductBrain.mdc')).toBe('setup-productbrain.mdc');
+    });
+    // ── Idempotency ──────────────────────────────────────────────────────────────
+    it('already-normalized input is idempotent', () => {
+        const normalized = 'setup-productbrain.mdc';
+        expect(normalizeMaterializedFilename(normalized)).toBe(normalized);
+    });
+    it('applying twice produces the same result', () => {
+        const input = 'My Rule File.md';
+        const once = normalizeMaterializedFilename(input);
+        const twice = normalizeMaterializedFilename(once);
+        expect(once).toBe(twice);
+    });
+    // ── Uppercase handling ────────────────────────────────────────────────────────
+    it('lowercases all ASCII letters', () => {
+        expect(normalizeMaterializedFilename('CHAIN-RULES.mdc')).toBe('chain-rules.mdc');
+    });
+    it('mixed case with spaces → lowercase with hyphens', () => {
+        expect(normalizeMaterializedFilename('My Custom Rule.md')).toBe('my-custom-rule.md');
+    });
+    // ── Unicode normalization ─────────────────────────────────────────────────────
+    it('accented chars via NFKD → base ASCII (é → e)', () => {
+        expect(normalizeMaterializedFilename('Régle.md')).toBe('regle.md');
+    });
+    it('non-ASCII chars that cannot normalize → dropped', () => {
+        // Chinese chars don't map to ASCII — they're dropped, hyphens collapsed.
+        const result = normalizeMaterializedFilename('设置规则.md');
+        // No Chinese remains; just the extension part
+        expect(result).toBe('.md');
+    });
+    it('ligature "fi" decomposes to "fi"', () => {
+        // NFKD decomposes fi (fi ligature, U+FB01) to 'f' + 'i'
+        expect(normalizeMaterializedFilename('file.md')).toBe('file.md');
+    });
+    // ── Leading dots ──────────────────────────────────────────────────────────────
+    it('single leading dot is stripped', () => {
+        expect(normalizeMaterializedFilename('.hidden-rule.md')).toBe('hidden-rule.md');
+    });
+    it('multiple leading dots are stripped', () => {
+        expect(normalizeMaterializedFilename('..doubly-hidden.md')).toBe('doubly-hidden.md');
+    });
+    it('dot-only input returns empty string', () => {
+        expect(normalizeMaterializedFilename('.')).toBe('');
+    });
+    it('extension dot mid-name is preserved', () => {
+        // "foo.bar.mdc" → "foo.bar.mdc"
+        expect(normalizeMaterializedFilename('foo.bar.mdc')).toBe('foo.bar.mdc');
+    });
+    // ── Empty input ──────────────────────────────────────────────────────────────
+    it('empty string returns empty string', () => {
+        expect(normalizeMaterializedFilename('')).toBe('');
+    });
+    // ── Special character sequences ───────────────────────────────────────────────
+    it('multiple consecutive spaces → single hyphen', () => {
+        expect(normalizeMaterializedFilename('a   b.md')).toBe('a-b.md');
+    });
+    it('underscores replaced with hyphens', () => {
+        expect(normalizeMaterializedFilename('my_rule_file.mdc')).toBe('my-rule-file.mdc');
+    });
+    it('leading and trailing hyphens are trimmed', () => {
+        expect(normalizeMaterializedFilename('-foo-')).toBe('foo');
+    });
+    it('mixed special chars collapse to single hyphen', () => {
+        expect(normalizeMaterializedFilename('foo!@#bar.mdc')).toBe('foo-bar.mdc');
+    });
+    // ── No extension ────────────────────────────────────────────────────────────
+    it('name without extension is normalized', () => {
+        expect(normalizeMaterializedFilename('MyRule')).toBe('myrule');
+    });
+});
+//# sourceMappingURL=normalizeMaterializedFilename.test.js.map

package/dist/lib/normalizeMaterializedFilename.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.test.js","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,+EAA+E;IAC/E,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,UAAU,GAAG,wBAAwB,CAAC;QAC5C,MAAM,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC;QAChC,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,6BAA6B,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,yEAAyE;QACzE,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;QACxD,8CAA8C;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,uDAAuD;QACvD,MAAM,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,6BAA6B,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,gCAAgC;QAChC,MAAM,CAAC,6BAA6B,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/notice-marker.d.ts

@@ -0,0 +1,3 @@
+/** Returns true exactly once per (channel, session/day). Never throws. */
+export declare function claimNotice(channel: 'agent' | 'human'): boolean;
+//# sourceMappingURL=notice-marker.d.ts.map

package/dist/lib/notice-marker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice-marker.d.ts","sourceRoot":"","sources":["../../src/lib/notice-marker.ts"],"names":[],"mappings":"AAwCA,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAU/D"}

package/dist/lib/notice-marker.js

@@ -0,0 +1,53 @@
+/**
+ * Once-per-session (agent) / once-per-day (human) notice claim via O_EXCL.
+ * First process to create the marker wins (returns true => may print). All others,
+ * and any error, fail OPEN to no-print (return false). Markers self-expire by key
+ * (session id rotates per session; daily key rolls per UTC day). DEC-2.
+ */
+import { openSync, closeSync, mkdirSync, statSync, readdirSync, unlinkSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { readSession } from './session.js';
+const CONFIG_DIR = join(homedir(), '.config', 'productbrain');
+const DAILY_STALE_MS = 7 * 24 * 60 * 60 * 1000;
+function utcDateStamp() {
+    const d = new Date();
+    const p = (n) => String(n).padStart(2, '0');
+    return `${d.getUTCFullYear()}${p(d.getUTCMonth() + 1)}${p(d.getUTCDate())}`;
+}
+/** Channel keys are independent so the human throttle never dedups the agent one. */
+function markerKey(channel) {
+    if (channel === 'human')
+        return `notice-human-${utcDateStamp()}`;
+    const session = readSession();
+    // If no active session, fall back to a daily key so the per-day throttle still holds.
+    return session?.sessionId ? `notice-session-${session.sessionId}` : `notice-agent-daily-${utcDateStamp()}`;
+}
+function cleanupOldNoticeMarkers() {
+    try {
+        for (const name of readdirSync(CONFIG_DIR)) {
+            if (!name.startsWith('notice-human-') &&
+                !name.startsWith('notice-agent-daily-') &&
+                !name.startsWith('notice-session-'))
+                continue;
+            const p = join(CONFIG_DIR, name);
+            if (Date.now() - statSync(p).mtimeMs > DAILY_STALE_MS)
+                unlinkSync(p);
+        }
+    }
+    catch { /* best-effort */ }
+}
+/** Returns true exactly once per (channel, session/day). Never throws. */
+export function claimNotice(channel) {
+    const path = join(CONFIG_DIR, markerKey(channel));
+    try {
+        mkdirSync(CONFIG_DIR, { recursive: true });
+        closeSync(openSync(path, 'wx')); // 'wx' = O_EXCL: throws EEXIST if present
+        cleanupOldNoticeMarkers();
+        return true;
+    }
+    catch {
+        return false; // already claimed, or fs error => fail open to no-print
+    }
+}
+//# sourceMappingURL=notice-marker.js.map

package/dist/lib/notice-marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice-marker.js","sourceRoot":"","sources":["../../src/lib/notice-marker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AAC9D,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,SAAS,YAAY;IACnB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAAC,OAA0B;IAC3C,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,gBAAgB,YAAY,EAAE,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,sFAAsF;IACtF,OAAO,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,sBAAsB,YAAY,EAAE,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,uBAAuB;IAC9B,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;gBACjC,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC;gBACvC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAAE,SAAS;YAClD,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc;gBAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,OAA0B;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,0CAA0C;QAC3E,uBAAuB,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,wDAAwD;IACxE,CAAC;AACH,CAAC"}

package/dist/lib/onboarding-path-b.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding-path-b.d.ts","sourceRoot":"","sources":["../../src/lib/onboarding-path-b.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAIL,KAAK,oBAAoB,EAG1B,MAAM,wBAAwB,CAAC;AAEhC,wBAAsB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyK7E;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,GAAG,IAAI,EAClC,MAAM,EAAE,oBAAoB,GAC3B,oBAAoB,CAUtB;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAI9C"}
+{"version":3,"file":"onboarding-path-b.d.ts","sourceRoot":"","sources":["../../src/lib/onboarding-path-b.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAIL,KAAK,oBAAoB,EAG1B,MAAM,wBAAwB,CAAC;AAehC,wBAAsB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyK7E;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,GAAG,IAAI,EAClC,MAAM,EAAE,oBAAoB,GAC3B,oBAAoB,CAStB;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAI9C"}

package/dist/lib/onboarding-path-b.js

@@ -2,11 +2,23 @@
  * Path B — Facilitator-pattern onboarding (2 exchanges max).
  * WP-304: Shorter flow, silent extraction, auto-capture, governance proof.
  */
-import { mcpCall } from './client.js';
+import { kernelCall } from './client.js';
 import { ask } from './prompts.js';
 import { bold, dim, green, icons } from './style.js';
 import { trackEvent } from './telemetry.js';
 import { extractionToEntries, batchCaptureEntries, countWords, } from './onboarding-shared.js';
+/**
+ * `onboarding.chat`'s server handler (convex/intelligence/onboardingChat.ts) deliberately
+ * types `extraction` as `Record<string, unknown>` — a dynamically-built "backward-compat"
+ * bridge object (its own comment: "Path B reads .extraction.vision, .extraction.tensions,
+ * etc."), not a mistake. `vision` is unconditionally seeded (`{ vision: '' }`, line ~350)
+ * before any conditional field is added, so it's always present as a string — matching
+ * `OnboardingExtraction.vision: string` (required). Cast at the boundary rather than loosen
+ * the shared client-side type (PR #398, Lane C S3c annotation pass).
+ */
+function asOnboardingExtraction(extraction) {
+    return extraction;
+}
 export async function runOnboardingPathB(workspaceName) {
     trackEvent('setup_started', { mode: 'llm', path: 'B' });
     const messages = [];
@@ -15,7 +27,7 @@ export async function runOnboardingPathB(workspaceName) {
     // Exchange 1: Opening question
     let greeting;
     try {
-        const result = await mcpCall('onboarding.chat', {
+        const result = await kernelCall('onboarding.chat', {
             messages: [],
             workspaceName,
             style: 'facilitator',
@@ -54,14 +66,14 @@ export async function runOnboardingPathB(workspaceName) {
     totalUserWords += countWords(userInput);
     // Silent extraction after first answer (parallel with follow-up)
     const [followUpResult, extractResult] = await Promise.allSettled([
-        mcpCall('onboarding.chat', {
+        kernelCall('onboarding.chat', {
             messages,
             workspaceName,
             style: 'facilitator',
             turnNumber: 2,
             totalUserWords,
         }),
-        mcpCall('onboarding.chat', {
+        kernelCall('onboarding.chat', {
             messages,
             workspaceName,
             mode: 'extract',
@@ -69,7 +81,7 @@ export async function runOnboardingPathB(workspaceName) {
     ]);
     // Store first extraction if available
     if (extractResult.status === 'fulfilled' && extractResult.value?.extraction) {
-        lastExtraction = extractResult.value.extraction;
+        lastExtraction = asOnboardingExtraction(extractResult.value.extraction) ?? null;
     }
     // Show follow-up question
     if (followUpResult.status === 'fulfilled' && followUpResult.value?.content) {
@@ -84,13 +96,13 @@ export async function runOnboardingPathB(workspaceName) {
                 totalUserWords += countWords(secondInput);
                 // Second extraction — merge with first
                 try {
-                    const result2 = await mcpCall('onboarding.chat', {
+                    const result2 = await kernelCall('onboarding.chat', {
                         messages,
                         workspaceName,
                         mode: 'extract',
                     });
                     if (result2?.extraction) {
-                        lastExtraction = mergeExtractions(lastExtraction, result2.extraction);
+                        lastExtraction = mergeExtractions(lastExtraction, asOnboardingExtraction(result2.extraction) ?? { vision: '' });
                     }
                 }
                 catch {
@@ -107,13 +119,13 @@ export async function runOnboardingPathB(workspaceName) {
         // Try one final extraction if we don't have one
         if (!lastExtraction?.vision && messages.filter((m) => m.role === 'user').length > 0) {
             try {
-                const finalExtract = await mcpCall('onboarding.chat', {
+                const finalExtract = await kernelCall('onboarding.chat', {
                     messages,
                     workspaceName,
                     mode: 'extract',
                 });
                 if (finalExtract?.extraction) {
-                    lastExtraction = finalExtract.extraction;
+                    lastExtraction = asOnboardingExtraction(finalExtract.extraction) ?? null;
                 }
             }
             catch {
@@ -156,7 +168,6 @@ export function mergeExtractions(first, second) {
     return {
         vision: second.vision || first.vision,
         audience: second.audience || first.audience,
-        techStack: dedupe([...(first.techStack ?? []), ...(second.techStack ?? [])]),
         keyTerms: dedupe([...(first.keyTerms ?? []), ...(second.keyTerms ?? [])]),
         keyDecisions: dedupe([...(first.keyDecisions ?? []), ...(second.keyDecisions ?? [])]),
         tensions: dedupe([...(first.tensions ?? []), ...(second.tensions ?? [])]),
@@ -168,7 +179,7 @@ export function dedupe(arr) {
 /** Governance proof — show binding governance from captured knowledge via resolveTaskStartup. */
 async function showGovernanceProof(vision) {
     try {
-        const result = await mcpCall('chain.resolveTaskStartup', { task: vision });
+        const result = await kernelCall('chain.resolveTaskStartup', { task: vision });
         const governance = result?.bindingGovernance;
         const steering = result?.steeringContext ?? [];
         const allItems = [
@@ -191,8 +202,26 @@ async function showGovernanceProof(vision) {
     catch {
         // Governance proof is best-effort — fall back to orient-based proof
         try {
-            const orient = await mcpCall('orient', { brief: true });
-            const items = orient?.sections?.flatMap((s) => s.items ?? []).filter((i) => i.name) ?? [];
+            // `'orient'` is not a real gateway route (never existed in the registry — this call
+            // has been throwing on every invocation, silently caught by the enclosing catch below,
+            // PR #397-class bug found via S3c annotation). Fixed to the real route,
+            // `chain.getOrientView`, whose return shape has no `.sections` — the closest real
+            // analog for "a few named items to display" is `taskContext.context` (entries with a
+            // `.name` field, same shape `chain.resolveTaskStartup`'s steeringContext/bindingGovernance
+            // items above use).
+            // `renderMode` is the telemetry-attribution axis, not a formatting hint (convex/
+            // agentKnowledge/orientView.ts / convex/http.ts): 'json' means "agent-surface machine
+            // payload" and feeds the KEY-51 scoreboard denominator via governanceRenderedJson.
+            // This onboarding fallback is a genuinely interactive, human-facing CLI flow (styled
+            // stdout text, `ask()` prompts) — 'json' here would mislabel it as agent traffic and
+            // contaminate that metric. 'pretty' is documented as exactly "interactive human TTY"
+            // and carries no governanceRenderedJson, staying correctly uninstrumented (Codex P2,
+            // PR #398 review).
+            const orient = await kernelCall('chain.getOrientView', {
+                task: vision,
+                renderMode: 'pretty',
+            });
+            const items = (orient?.taskContext?.context ?? []).filter((i) => i.name);
             if (items.length > 0) {
                 process.stdout.write(`\n  ${bold("Here's how your product brain will use this:")}\n\n`);
                 for (const item of items.slice(0, 5)) {