@productbrain/cli 0.1.0-beta.47 → 0.1.0-beta.4721

package/dist/lib/update-check.js

@@ -0,0 +1,296 @@
+/**
+ * Ambient update notification for the Product Brain CLI (WP-322 S1 / FEAT-1012).
+ *
+ * Checks npm registry for the latest version of @productbrain/cli and prints
+ * a one-line notification when a newer version is available.
+ *
+ * Rules:
+ *   - Synchronous: reads cache only, never awaits network, never delays the command
+ *   - Multi-source cache at ~/.config/productbrain/update-check.json:
+ *     server header is authoritative within 48h; npm is an isNewer-gated fallback
+ *   - Silent on any error (network down, registry unreachable, etc.)
+ *   - JSON/agent mode: notice goes to stderr (stdout stays bare JSON), throttled once per session
+ *   - Does NOT use undici/fetch directly; uses Node.js built-in https
+ */
+import { readFileSync, writeFileSync, mkdirSync, existsSync, unlinkSync } from 'node:fs';
+import { request } from 'node:https';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { isJsonMode } from './runner.js';
+import { dim, yellow } from './style.js';
+import { claimNotice } from './notice-marker.js';
+import { trackEvent } from './telemetry.js';
+const PKG_NAME = '@productbrain/cli';
+const SERVER_FRESHNESS_MS = 48 * 60 * 60 * 1000;
+// npm fallback freshness — mirrors the single-source 24h cache TTL that existed before the
+// multi-source split, so a cached npm value is revalidated daily instead of served forever.
+const NPM_FRESHNESS_MS = 24 * 60 * 60 * 1000;
+const CONFIG_DIR = join(homedir(), '.config', 'productbrain');
+const CACHE_PATH = join(CONFIG_DIR, 'update-check.json');
+const UPGRADE_PENDING_PATH = join(CONFIG_DIR, 'upgrade-pending');
+const NPM_BETA_URL = `https://registry.npmjs.org/${PKG_NAME}/beta`;
+const CHANNEL_RANK = { alpha: -3, beta: -2, rc: -1 };
+let pendingUpgradeClearedThisProcess = false;
+let versionSkewReportedThisProcess = false;
+let cachedRunningCliVersion;
+/** Read the running CLI version from the package's package.json (cached after first read). */
+function readRunningCliVersion() {
+    if (cachedRunningCliVersion !== undefined)
+        return cachedRunningCliVersion;
+    try {
+        const here = dirname(fileURLToPath(import.meta.url));
+        const pkgPath = join(here, '..', '..', 'package.json');
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+        cachedRunningCliVersion = pkg.version ?? null;
+    }
+    catch {
+        cachedRunningCliVersion = null;
+    }
+    return cachedRunningCliVersion;
+}
+/**
+ * Emit `cli.version_skew.detected` at most once per process when a strictly newer
+ * version has been observed. Exported so callers (e.g. doctor's freshness check)
+ * can fire it from their own discovery path while sharing the dedup guard.
+ */
+export function reportVersionSkewIfNew(latest, current) {
+    if (versionSkewReportedThisProcess)
+        return;
+    if (!latest)
+        return;
+    const running = current ?? readRunningCliVersion();
+    if (!running)
+        return;
+    if (!isNewer(running, latest))
+        return;
+    versionSkewReportedThisProcess = true;
+    trackEvent('cli.version_skew.detected', { current: running, latest });
+}
+function readCacheFile() {
+    try {
+        if (!existsSync(CACHE_PATH))
+            return {};
+        return JSON.parse(readFileSync(CACHE_PATH, 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+function writeCacheFile(cache) {
+    try {
+        mkdirSync(CONFIG_DIR, { recursive: true });
+        writeFileSync(CACHE_PATH, JSON.stringify(cache), 'utf8');
+    }
+    catch { /* non-fatal */ }
+}
+/** Return the newest (highest by semver) of the supplied values, ignoring null/undefined. */
+function newestOf(...values) {
+    let best = null;
+    for (const v of values) {
+        if (!v)
+            continue;
+        if (best === null || isNewer(best, v))
+            best = v;
+    }
+    return best;
+}
+/**
+ * Hot-path resolution from cache only — NEVER fetches. The **newest** in-window source wins: the
+ * server header is preferred only when it is actually the highest version, so a server that lags
+ * npm (its committed `cliVersion.ts` value trails the run-numbered npm publish — see TEN-2199) can
+ * no longer mask a newer npm latest. Returns the best available value even when every source is
+ * stale ("better than nothing"), because the hot path (checkForUpdate) cannot block on a refresh.
+ */
+export function resolveCachedLatest() {
+    if (isVersionCheckDisabled())
+        return null;
+    const cache = readCacheFile();
+    const now = Date.now();
+    const serverFresh = cache.server && now - cache.server.recordedAt < SERVER_FRESHNESS_MS ? cache.server.value : null;
+    // Hot path: an npm value is usable even when stale ("better than nothing"); the live resolver
+    // (resolveLatestVersion) is the one that enforces the npm freshness window and re-fetches.
+    const best = newestOf(serverFresh, cache.npm?.value);
+    if (best !== null)
+        return best;
+    return cache.server?.value ?? null; // stale server (>48h) as last resort — better than nothing
+}
+/** The in-window value from each source (null when the source is absent or past its freshness window). */
+function readFreshSources() {
+    const cache = readCacheFile();
+    const now = Date.now();
+    return {
+        server: cache.server && now - cache.server.recordedAt < SERVER_FRESHNESS_MS ? cache.server.value : null,
+        npm: cache.npm && now - cache.npm.recordedAt < NPM_FRESHNESS_MS ? cache.npm.value : null,
+    };
+}
+/** @deprecated use resolveCachedLatest. Kept for callers migrating. */
+export function readCachedLatestVersion() {
+    return resolveCachedLatest();
+}
+function isVersionCheckDisabled() {
+    return process.env.PB_NO_VERSION_CHECK === '1';
+}
+/** Clear the post-upgrade sentinel and stale update cache on next CLI startup. */
+export function clearPendingUpgradeCache() {
+    if (pendingUpgradeClearedThisProcess)
+        return;
+    pendingUpgradeClearedThisProcess = true;
+    try {
+        if (!existsSync(UPGRADE_PENDING_PATH))
+            return;
+        try {
+            unlinkSync(UPGRADE_PENDING_PATH);
+        }
+        catch { /* non-fatal */ }
+        try {
+            if (existsSync(CACHE_PATH))
+                unlinkSync(CACHE_PATH);
+        }
+        catch { /* non-fatal */ }
+    }
+    catch {
+        // Sentinel cleanup must never block CLI startup.
+    }
+}
+/** Written after a successful self-upgrade so the next CLI process drops stale cache. */
+export function writeUpgradePendingSentinel(installedVersion) {
+    try {
+        mkdirSync(CONFIG_DIR, { recursive: true });
+        writeFileSync(UPGRADE_PENDING_PATH, JSON.stringify({ upgradedAt: Date.now(), version: installedVersion ?? null /* version: concrete installed version, recorded for post-upgrade diagnostics/future "upgraded to X" notice */ }), 'utf8');
+    }
+    catch { /* non-fatal — update checks recover via cache TTL */ }
+}
+/** Test-only: reset module-level per-process guards so each test starts clean. */
+export function _resetProcessGuardsForTest() {
+    pendingUpgradeClearedThisProcess = false;
+    versionSkewReportedThisProcess = false;
+    cachedRunningCliVersion = undefined;
+}
+/** Fetch latest version from npm registry. Returns null on any error. */
+function fetchLatestVersion() {
+    return new Promise((resolve) => {
+        const req = request(NPM_BETA_URL, { method: 'GET', headers: { 'Accept': 'application/json' } }, (res) => {
+            let body = '';
+            res.on('data', (chunk) => { body += chunk.toString(); });
+            res.on('end', () => {
+                try {
+                    const parsed = JSON.parse(body);
+                    resolve(parsed.version ?? null);
+                }
+                catch {
+                    resolve(null);
+                }
+            });
+            res.on('error', () => resolve(null));
+        });
+        req.on('error', () => resolve(null));
+        req.setTimeout(3000, () => {
+            req.destroy();
+            resolve(null);
+        });
+        req.end();
+    });
+}
+/**
+ * Compare two semver strings. Returns true if `b` is strictly newer than `a`.
+ * Handles standard x.y.z and x.y.z-beta.N formats (numeric comparison per part).
+ */
+export function isNewer(current, latest) {
+    if (current === latest)
+        return false;
+    const parseVersion = (v) => {
+        const clean = v.replace(/^v/, '');
+        const [release, pre] = clean.split('-');
+        const parts = (release ?? '').split('.').map((n) => parseInt(n, 10) || 0);
+        if (pre === undefined)
+            return [...parts, 0, 0];
+        const match = pre.match(/^([a-zA-Z]+)\.?(\d+)?/);
+        const channel = match?.[1]?.toLowerCase() ?? '';
+        const preNum = match?.[2] ? parseInt(match[2], 10) : 0;
+        return [...parts, CHANNEL_RANK[channel] ?? -4, Number.isFinite(preNum) ? preNum : 0];
+    };
+    const a = parseVersion(current);
+    const b = parseVersion(latest);
+    const len = Math.max(a.length, b.length);
+    for (let i = 0; i < len; i++) {
+        const av = a[i] ?? 0;
+        const bv = b[i] ?? 0;
+        if (bv > av)
+            return true;
+        if (bv < av)
+            return false;
+    }
+    return false;
+}
+/** Record the server-supplied latest version (authoritative source). */
+export function recordServerLatest(latestVersion) {
+    if (isVersionCheckDisabled() || !latestVersion)
+        return;
+    const cache = readCacheFile();
+    cache.server = { value: latestVersion, recordedAt: Date.now() };
+    writeCacheFile(cache);
+    reportVersionSkewIfNew(latestVersion);
+}
+/** Record an npm-resolved latest version — gated so it never stores <= installed. */
+export function recordNpmLatest(latestVersion, currentVersion) {
+    if (isVersionCheckDisabled() || !latestVersion)
+        return;
+    if (!isNewer(currentVersion, latestVersion))
+        return;
+    const cache = readCacheFile();
+    cache.npm = { value: latestVersion, recordedAt: Date.now() };
+    writeCacheFile(cache);
+}
+/** LIVE resolve — fetches npm and records it (gated). Call ONLY from doctor/upgrade, never the hot path. */
+export async function resolveLatestVersion(currentVersion) {
+    if (isVersionCheckDisabled())
+        return null;
+    const fresh = readFreshSources();
+    // Skip the network ONLY when npm itself is within its freshness window. A fresh server header
+    // alone cannot prove npm isn't newer (the hot path never populates npm, and the server's committed
+    // cliVersion.ts value structurally trails the run-numbered npm publish — TEN-2199), so a
+    // server-only cache MUST trigger a live npm fetch or the lagging server would mask the true latest.
+    if (fresh.npm !== null)
+        return newestOf(fresh.server, fresh.npm);
+    const fetched = await fetchLatestVersion();
+    if (fetched !== null) {
+        // The live registry is ground truth. Record only when strictly newer (the cache never stores a
+        // value <= installed), but compare against any fresh server header so a genuinely-newer server
+        // still wins. A successful fetch REPLACES a stale npm entry rather than falling back to it.
+        if (currentVersion)
+            recordNpmLatest(fetched, currentVersion);
+        return newestOf(fresh.server, fetched);
+    }
+    // Fetch failed (offline / registry unreachable): fall back to any cached value — better than
+    // nothing, and the documented `pb doctor` offline backstop.
+    return resolveCachedLatest();
+}
+/**
+ * Synchronously prints at most one update line. Reads cache only — never fetches.
+ * Reaches agents (JSON mode) on stderr; stdout stays bare JSON. Throttled once per
+ * session (agent) / once per UTC day (human TTY) via O_EXCL markers. Never throws.
+ * NOTE: a session with no authenticated server call writes no cache and fires no
+ * notice; `pb doctor` live-resolves as the backstop. DEC-2.
+ */
+export function checkForUpdate(currentVersion) {
+    clearPendingUpgradeCache();
+    if (isVersionCheckDisabled())
+        return;
+    try {
+        const latest = resolveCachedLatest();
+        if (!latest || !isNewer(currentVersion, latest))
+            return;
+        reportVersionSkewIfNew(latest, currentVersion);
+        const channel = isJsonMode() ? 'agent' : 'human';
+        if (!claimNotice(channel))
+            return;
+        const line = `${yellow('pb:')} update available — you're on ${dim(currentVersion)}, latest is ${latest}. ` +
+            `Recommended: tell your operator and run ${dim('pb upgrade')}.\n`;
+        process.stderr.write('\n' + line);
+    }
+    catch {
+        // Advisory notice — never block or crash a command.
+    }
+}
+//# sourceMappingURL=update-check.js.map

package/dist/lib/update-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.js","sourceRoot":"","sources":["../../src/lib/update-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AACrC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,2FAA2F;AAC3F,4FAA4F;AAC5F,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;AACzD,MAAM,oBAAoB,GAAG,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACjE,MAAM,YAAY,GAAG,8BAA8B,QAAQ,OAAO,CAAC;AACnE,MAAM,YAAY,GAA2B,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;AAE7E,IAAI,gCAAgC,GAAG,KAAK,CAAC;AAC7C,IAAI,8BAA8B,GAAG,KAAK,CAAC;AAC3C,IAAI,uBAAkD,CAAC;AAEvD,8FAA8F;AAC9F,SAAS,qBAAqB;IAC5B,IAAI,uBAAuB,KAAK,SAAS;QAAE,OAAO,uBAAuB,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,uBAAuB,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB,GAAG,IAAI,CAAC;IACjC,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqB,EAAE,OAAgB;IAC5E,IAAI,8BAA8B;QAAE,OAAO;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,OAAO,GAAG,OAAO,IAAI,qBAAqB,EAAE,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QAAE,OAAO;IACtC,8BAA8B,GAAG,IAAI,CAAC;IACtC,UAAU,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAKD,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAc,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;AAC7B,CAAC;AAED,6FAA6F;AAC7F,SAAS,QAAQ,CAAC,GAAG,MAAwC;IAC3D,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,IAAI,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,sBAAsB,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACpH,8FAA8F;IAC9F,2FAA2F;IAC3F,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,2DAA2D;AACjG,CAAC;AAED,0GAA0G;AAC1G,SAAS,gBAAgB;IACvB,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACvG,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KACzF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,uBAAuB;IACrC,OAAO,mBAAmB,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,GAAG,CAAC;AACjD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB;IACtC,IAAI,gCAAgC;QAAE,OAAO;IAC7C,gCAAgC,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;YAAE,OAAO;QAC9C,IAAI,CAAC;YAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QACnE,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,UAAU,CAAC;gBAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,2BAA2B,CAAC,gBAAyB;IACnE,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,aAAa,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,gBAAgB,IAAI,IAAI,CAAC,8GAA8G,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5O,CAAC;IAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;AACnE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,0BAA0B;IACxC,gCAAgC,GAAG,KAAK,CAAC;IACzC,8BAA8B,GAAG,KAAK,CAAC;IACvC,uBAAuB,GAAG,SAAS,CAAC;AACtC,CAAC;AAED,yEAAyE;AACzE,SAAS,kBAAkB;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YACtG,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;oBACxD,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE;YACxB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe,EAAE,MAAc;IACrD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAY,EAAE;QAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,aAA4B;IAC7D,IAAI,sBAAsB,EAAE,IAAI,CAAC,aAAa;QAAE,OAAO;IACvD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAChE,cAAc,CAAC,KAAK,CAAC,CAAC;IACtB,sBAAsB,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,aAA4B,EAAE,cAAsB;IAClF,IAAI,sBAAsB,EAAE,IAAI,CAAC,aAAa;QAAE,OAAO;IACvD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,KAAK,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7D,cAAc,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,cAAuB;IAChE,IAAI,sBAAsB,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,8FAA8F;IAC9F,mGAAmG;IACnG,yFAAyF;IACzF,oGAAoG;IACpG,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC3C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,+FAA+F;QAC/F,+FAA+F;QAC/F,4FAA4F;QAC5F,IAAI,cAAc;YAAE,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,6FAA6F;IAC7F,4DAA4D;IAC5D,OAAO,mBAAmB,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,cAAsB;IACnD,wBAAwB,EAAE,CAAC;IAC3B,IAAI,sBAAsB,EAAE;QAAE,OAAO;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;YAAE,OAAO;QACxD,sBAAsB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAsB,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACpE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YAAE,OAAO;QAElC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,cAAc,CAAC,eAAe,MAAM,IAAI;YACxG,2CAA2C,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;AACH,CAAC"}

package/dist/lib/upgrade-runner.d.ts

@@ -0,0 +1,22 @@
+export type InstallChannel = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'brew' | 'unknown';
+export type UpgradeCommand = {
+    channel: InstallChannel;
+    command: string;
+    args: string[];
+    display: string;
+};
+export type UpgradeResult = {
+    channel: InstallChannel;
+    command: string;
+    exitCode: number;
+    output: string[];
+};
+export type SpawnUpgradeOptions = {
+    onOutput?: (line: string) => void;
+    env?: NodeJS.ProcessEnv;
+    version?: string;
+};
+export declare function detectInstallChannel(execPath?: string, env?: NodeJS.ProcessEnv): InstallChannel;
+export declare function buildUpgradeCommand(channel: InstallChannel, version?: string): UpgradeCommand;
+export declare function spawnUpgrade(channel?: InstallChannel, options?: SpawnUpgradeOptions): Promise<UpgradeResult>;
+//# sourceMappingURL=upgrade-runner.d.ts.map

package/dist/lib/upgrade-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-runner.d.ts","sourceRoot":"","sources":["../../src/lib/upgrade-runner.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAElF,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAYF,wBAAgB,oBAAoB,CAAC,QAAQ,SAAmB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,CActH;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc,CAe7F;AAaD,wBAAgB,YAAY,CAC1B,OAAO,GAAE,cAAuC,EAChD,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,aAAa,CAAC,CAiDxB"}

package/dist/lib/upgrade-runner.js

@@ -0,0 +1,110 @@
+import { spawn } from 'node:child_process';
+import { basename, dirname } from 'node:path';
+import { CLIError, ErrorCode } from './errors.js';
+import { UPGRADE_COMMAND } from './constants.js';
+import { trackEvent } from './telemetry.js';
+import { writeUpgradePendingSentinel } from './update-check.js';
+function pathSegments(path) {
+    const segments = [];
+    let current = path;
+    while (current && current !== dirname(current)) {
+        segments.push(basename(current).toLowerCase());
+        current = dirname(current);
+    }
+    return segments;
+}
+export function detectInstallChannel(execPath = process.execPath, env = process.env) {
+    const ua = env.npm_config_user_agent?.toLowerCase() ?? '';
+    if (ua.startsWith('pnpm'))
+        return 'pnpm';
+    if (ua.startsWith('yarn'))
+        return 'yarn';
+    if (ua.startsWith('bun'))
+        return 'bun';
+    if (ua.startsWith('npm'))
+        return 'npm';
+    const segments = pathSegments(execPath);
+    if (segments.some((s) => s.includes('pnpm')))
+        return 'pnpm';
+    if (segments.some((s) => s.includes('yarn')))
+        return 'yarn';
+    if (segments.some((s) => s.includes('bun')))
+        return 'bun';
+    if (segments.some((s) => s.includes('homebrew') || s === 'brew' || s === 'cellar'))
+        return 'brew';
+    if (segments.some((s) => s.includes('npm') || s === 'node_modules'))
+        return 'npm';
+    return 'unknown';
+}
+export function buildUpgradeCommand(channel, version) {
+    const spec = version ? `@productbrain/cli@${version}` : '@productbrain/cli@beta';
+    switch (channel) {
+        case 'pnpm':
+            return { channel, command: 'pnpm', args: ['add', '-g', spec], display: `pnpm add -g ${spec}` };
+        case 'yarn':
+            return { channel, command: 'yarn', args: ['global', 'add', spec], display: `yarn global add ${spec}` };
+        case 'bun':
+            return { channel, command: 'bun', args: ['add', '-g', spec], display: `bun add -g ${spec}` };
+        case 'brew':
+            return { channel, command: 'brew', args: ['upgrade', 'productbrain'], display: 'brew upgrade productbrain' };
+        case 'npm':
+        case 'unknown':
+            return { channel, command: 'npm', args: ['install', '-g', spec], display: version ? `npm install -g ${spec}` : UPGRADE_COMMAND };
+    }
+}
+function failureGuidance(message) {
+    const lower = message.toLowerCase();
+    if (lower.includes('eacces') || lower.includes('permission denied')) {
+        return 'Permission denied during global install. Use a Node version manager, fix the global npm prefix, or rerun the install command with the permissions your system requires.';
+    }
+    if (process.platform === 'win32' && (lower.includes('eperm') || lower.includes('busy') || lower.includes('locked'))) {
+        return 'Windows could not replace the active pb executable. Close terminals running pb, then rerun the upgrade command.';
+    }
+    return 'Run the displayed upgrade command manually, then retry pb doctor.';
+}
+export function spawnUpgrade(channel = detectInstallChannel(), options = {}) {
+    const spec = buildUpgradeCommand(channel, options.version);
+    const output = [];
+    trackEvent('cli.upgrade.initiated', { channel: spec.channel });
+    return new Promise((resolve, reject) => {
+        const child = spawn(spec.command, spec.args, {
+            env: options.env ?? process.env,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        const emit = (chunk) => {
+            const text = chunk.toString();
+            for (const line of text.split(/\r?\n/).filter(Boolean)) {
+                output.push(line);
+                options.onOutput?.(line);
+            }
+        };
+        child.stdout?.on('data', emit);
+        child.stderr?.on('data', emit);
+        child.on('error', (err) => {
+            const message = err.message || `Failed to spawn ${spec.display}`;
+            trackEvent('cli.upgrade.failed', { channel: spec.channel, reason: err.code ?? 'spawn_error' });
+            reject(new CLIError(`Upgrade failed: ${message}`, {
+                code: ErrorCode.UPGRADE_FAILED,
+                category: 'internal',
+                guidance: failureGuidance(message),
+            }));
+        });
+        child.on('close', (code) => {
+            const exitCode = code ?? 1;
+            if (exitCode !== 0) {
+                const message = output.slice(-4).join('\n') || `${spec.display} exited with code ${exitCode}`;
+                trackEvent('cli.upgrade.failed', { channel: spec.channel, exitCode });
+                reject(new CLIError(`Upgrade failed: ${message}`, {
+                    code: ErrorCode.UPGRADE_FAILED,
+                    category: 'internal',
+                    guidance: failureGuidance(message),
+                }));
+                return;
+            }
+            writeUpgradePendingSentinel(options.version);
+            trackEvent('cli.upgrade.succeeded', { channel: spec.channel });
+            resolve({ channel: spec.channel, command: spec.display, exitCode, output });
+        });
+    });
+}
+//# sourceMappingURL=upgrade-runner.js.map

package/dist/lib/upgrade-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-runner.js","sourceRoot":"","sources":["../../src/lib/upgrade-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAwBhE,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,IAAI,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpG,MAAM,EAAE,GAAG,GAAG,CAAC,qBAAqB,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IAClG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAuB,EAAE,OAAgB;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC;IACjF,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,eAAe,IAAI,EAAE,EAAE,CAAC;QACjG,KAAK,MAAM;YACT,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,IAAI,EAAE,EAAE,CAAC;QACzG,KAAK,KAAK;YACR,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,IAAI,EAAE,EAAE,CAAC;QAC/F,KAAK,MAAM;YACT,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;QAC/G,KAAK,KAAK,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IACrI,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpE,OAAO,yKAAyK,CAAC;IACnL,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACpH,OAAO,iHAAiH,CAAC;IAC3H,CAAC;IACD,OAAO,mEAAmE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,UAA0B,oBAAoB,EAAE,EAChD,UAA+B,EAAE;IAEjC,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,UAAU,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAE/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClB,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE/B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,mBAAmB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjE,UAAU,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC,CAAC;YAC/F,MAAM,CAAC,IAAI,QAAQ,CAAC,mBAAmB,OAAO,EAAE,EAAE;gBAChD,IAAI,EAAE,SAAS,CAAC,cAAc;gBAC9B,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;aACnC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAC3B,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,qBAAqB,QAAQ,EAAE,CAAC;gBAC9F,UAAU,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtE,MAAM,CAAC,IAAI,QAAQ,CAAC,mBAAmB,OAAO,EAAE,EAAE;oBAChD,IAAI,EAAE,SAAS,CAAC,cAAc;oBAC9B,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;iBACnC,CAAC,CAAC,CAAC;gBACJ,OAAO;YACT,CAAC;YACD,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,UAAU,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/workspace-probe.d.ts

@@ -8,6 +8,9 @@
 /**
  * Attempt to detect workspace connectivity via a lightweight API call.
  * Returns workspace info on success, null on any failure.
+ *
+ * Uses resolveWorkspace (registered in http.ts) rather than orient, which is
+ * not exposed on the HTTP gateway — orient is MCP-server-only.
  */
 export declare function probeWorkspace(): Promise<{
     name: string;

package/dist/lib/workspace-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-probe.d.ts","sourceRoot":"","sources":["../../src/lib/workspace-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAuB5F"}
+{"version":3,"file":"workspace-probe.d.ts","sourceRoot":"","sources":["../../src/lib/workspace-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;;;GAMG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAQ5F"}

package/dist/lib/workspace-probe.js

@@ -5,26 +5,20 @@
  * Design: lightweight orient call to detect workspace reachability. Returns structured
  * workspace info on success, null on any failure (network, auth, offline).
  */
-import { mcpCall } from './client.js';
+import { kernelCall } from './client.js';
 /**
  * Attempt to detect workspace connectivity via a lightweight API call.
  * Returns workspace info on success, null on any failure.
+ *
+ * Uses resolveWorkspace (registered in http.ts) rather than orient, which is
+ * not exposed on the HTTP gateway — orient is MCP-server-only.
  */
 export async function probeWorkspace() {
     try {
-        const result = await mcpCall('orient', { brief: true });
-        const name = result?.workspace?.name || 'unknown';
-        // Sum entry counts from orient sections if available
-        let entryCount;
-        if (result?.sections) {
-            entryCount = result.sections.reduce((sum, s) => {
-                if (s.counts) {
-                    return sum + Object.values(s.counts).reduce((a, b) => a + (b || 0), 0);
-                }
-                return sum;
-            }, 0);
-        }
-        return { name, entryCount };
+        const result = await kernelCall('resolveWorkspace', {});
+        if (!result)
+            return null;
+        return { name: result.name || 'unknown' };
     }
     catch {
         return null;

package/dist/lib/workspace-probe.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-probe.js","sourceRoot":"","sources":["../../src/lib/workspace-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAIzB,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,SAAS,CAAC;QAClD,qDAAqD;QACrD,IAAI,UAA8B,CAAC;QACnC,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrB,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;gBAC7C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;oBACb,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"workspace-probe.js","sourceRoot":"","sources":["../../src/lib/workspace-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAA0C,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/workspaceNotice.d.ts

@@ -0,0 +1,59 @@
+/**
+ * WP-1 — Loud workspace identity on every Chain write.
+ *
+ * Running `pb` from a directory with no repo pin (e.g. `~/`) silently resolves the
+ * GLOBAL profile and writes to whichever Chain that points at — proven live: captures
+ * meant for one workspace landed on another. This module makes every Chain write NAME
+ * its target workspace on stderr, and qualifies the line LOUDLY when the binding is an
+ * unpinned fallback (`global`/`default` — no repo pin) so a wrong-Chain write is never
+ * silent. An explicit binding (`local`/`env`) gets a plain, non-alarming line.
+ *
+ * Label source — the PROFILE SLUG only, via `resolveEffectiveProfile()`.
+ * Deliberately NOT a workspace-name probe: `resolveEffectiveProfile()` reports the
+ * *configured* pin even when it dangles (TEN-2163), while a probe resolves what
+ * `resolveConfig()` actually binds. On a dangling local pin the two DISAGREE — the
+ * profile says `source='local'` (a plain, reassuring line) while the probe returns the
+ * GLOBAL workspace the write really drifts to. That would print a non-alarming line over
+ * the exact silent-drift this notice exists to expose. One resolution path means the
+ * label and its qualifier can never contradict — and there is no per-write network
+ * round-trip in front of the write.
+ *
+ * Output contract — identical to capture.ts's grounding banner (the JSON-safety pattern):
+ *  - The notice is HUMAN-ONLY: written to STDERR, gated by the combined `json` flag.
+ *  - In `--json` mode it is suppressed entirely, so strict-JSON stdout stays
+ *    byte-for-byte unchanged (machine consumers never see it). The gate is the `json`
+ *    flag alone — not `--quiet`: a quiet human run still names its target Chain.
+ *
+ * SSOT: one pure formatter + one thin emitter, called from all four write commands —
+ * no per-command copy-paste.
+ */
+import { type EffectiveProfileSource } from './config.js';
+/** Inputs to the pure notice formatter. */
+export interface WriteTargetNoticeInput {
+    /** Effective profile name (the configured pin / identity), or null when unconfigured. */
+    profile: string | null;
+    /** Where that profile came from — see resolveEffectiveProfile(). */
+    source: EffectiveProfileSource;
+}
+/**
+ * Build the one-line target-workspace notice — or null when there is nothing to say.
+ *
+ *  - `none`               → null (not configured: nothing to name, stay silent).
+ *  - `global` / `default` → qualified + hint (no repo pin → an unpinned fallback binding).
+ *  - `local` / `env`      → plain (an explicit, intentional binding).
+ *
+ * Pure: no IO. The display label is the profile slug — a single resolution path, so the
+ * label and the qualifier can never contradict each other.
+ */
+export declare function formatWriteTargetNotice({ profile, source }: WriteTargetNoticeInput): string | null;
+/**
+ * Resolve identity and write the target notice to STDERR — gated by the combined `json`
+ * flag. Pass the SAME value the command computed (e.g. `isJsonMode() || options.json ===
+ * true`) so `--json` stdout stays byte-for-byte unchanged.
+ *
+ * Never throws and does no network IO: a wrong/unreadable config degrades to silence, and
+ * the label comes from `resolveEffectiveProfile()` alone — only fast local config reads
+ * (no probe) in front of the write. It is safe to call immediately before any Chain write.
+ */
+export declare function emitWriteTargetNotice(json: boolean): Promise<void>;
+//# sourceMappingURL=workspaceNotice.d.ts.map

package/dist/lib/workspaceNotice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceNotice.d.ts","sourceRoot":"","sources":["../../src/lib/workspaceNotice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAEnF,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,yFAAyF;IACzF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oEAAoE;IACpE,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CAQlG;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxE"}