@productbrain/cli 0.1.0-beta.49 → 0.1.0-beta.4900

package/dist/lib/localBinding.js

@@ -0,0 +1,90 @@
+/**
+ * Repo-local binding resolution — turns what `.productbrain/config.local.json` declares into a
+ * credential, or refuses outright.
+ *
+ * Both cascades that serve ordinary commands (`resolveConfig()`'s return path and `loadEnv()`'s
+ * process.env path) call these two helpers, so the refusal rules cannot drift apart between them
+ * (STD-3). The shared rule is the same in both: when the repo has declared a tenant, resolution
+ * either honors that declaration or fails loudly — it never substitutes a different workspace and
+ * carries on. Fail loud, fail closed, fail fast (PRI-24); default closed, explicitly opened
+ * (PRI-22).
+ *
+ * `adminConfig.ts` keeps its own inline copy on purpose: it excludes config.json's siteUrl and the
+ * CWD .env files, so it is a narrower cascade, not this one. Folding it in is the remaining step
+ * toward a single code path (STA-3).
+ */
+import { ConfigResolutionError } from './configResult.js';
+import { ErrorCode } from './errors.js';
+import { resolveNamedProfileConfig } from './profiles.js';
+import { API_KEY_PREFIX } from './tokenConstants.js';
+/**
+ * Resolve the repo-local profile pin to a credential, or refuse outright.
+ *
+ * FAILS CLOSED on a DANGLING pin: a pin naming a profile that has since been deleted, or whose
+ * file carries no key, must NEVER fall through to the global active profile. The repo has
+ * explicitly declared its tenant; substituting a different one silently retargets every read AND
+ * write at a foreign workspace, and the gateway derives the workspace from the credential (BR-18)
+ * — so nothing downstream catches it.
+ *
+ * INS-2455 is the admin-path instance of exactly this fall-through: `resolveAdminConfig()` was
+ * hardened on its own, which left the two cascades every other command uses still fail-open.
+ */
+export function resolvePinnedProfile(profileName) {
+    const namedConfig = resolveNamedProfileConfig(profileName);
+    // Same validity bar as adminConfig.ts: a present-but-malformed key is a broken pin, not a
+    // credential. Accepting it here would surface as a generic "no API key, run pb login" far
+    // downstream, pointing the operator away from the pin that actually broke.
+    if (!namedConfig?.apiKey?.startsWith(API_KEY_PREFIX)) {
+        throw new ConfigResolutionError(`This repo is pinned to profile "${profileName}" (.productbrain/config.local.json), ` +
+            `but that profile has no valid API key — it may have been deleted or never fully set up. ` +
+            `Refusing to silently fall back to a different workspace. ` +
+            `Run \`pb profile use --local <profile>\` to fix the pin, or \`pb profile create ${profileName}\` to restore it.`, {
+            code: ErrorCode.AUTH_MISSING,
+            category: 'auth',
+            kind: 'profile-pin',
+            nextCommand: 'pb profile use --local <profile>',
+            guidance: 'Run `pb profile use --local <profile>` to fix the repo pin.',
+        });
+    }
+    return { apiKey: namedConfig.apiKey, siteUrl: namedConfig.siteUrl };
+}
+/**
+ * Resolve the direct credential binding in config.local.json, or null when the file does not
+ * claim one (the profile pin then owns resolution).
+ *
+ * The claim is the `preview` marker OR a credential of its own — deliberately NOT the marker
+ * alone. A file carrying an apiKey is asserting which workspace this repo talks to whether or not
+ * `pb:preview` stamped the marker, so gating on the marker would let a hand-written or
+ * partially-scrubbed binding be skipped and a sibling profile pin silently supply a different
+ * tenant's credential instead (the failure class TEN-3237/TEN-3238 closed for the pin path).
+ *
+ * Once claimed, only the atomic apiKey+siteUrl pair (SF-3) may bind — never a preview key paired
+ * with config.json's real-dev gateway (STD-261). Anything else refuses here, ahead of the pin, so
+ * a broken binding is named rather than routed around.
+ */
+export function resolveLocalBinding(localConfig) {
+    if (!localConfig)
+        return null;
+    const claimsBinding = localConfig.preview === true || Boolean(localConfig.apiKey) || localConfig.apiKeyMalformed === true;
+    if (!claimsBinding)
+        return null;
+    if (localConfig.apiKey && localConfig.siteUrl) {
+        return { apiKey: localConfig.apiKey, siteUrl: localConfig.siteUrl.replace(/\/$/, '') };
+    }
+    // A malformed key is present-but-unusable, not absent — readLocalProjectConfig() withholds it
+    // from `apiKey` so it can never bind, and flags it so this refusal can name the real fault.
+    const fault = localConfig.apiKeyMalformed
+        ? `its API key is not a valid ${API_KEY_PREFIX} key`
+        : !localConfig.apiKey
+            ? 'missing API key'
+            : 'missing deployment URL';
+    throw new ConfigResolutionError(`This repo has an incomplete preview binding (.productbrain/config.local.json): ` +
+        `${fault}. Refusing to use its profile pin or another workspace instead.`, {
+        code: ErrorCode.CONFIG_INVALID,
+        category: 'config',
+        kind: 'preview-binding',
+        nextCommand: 'npm run pb:preview',
+        guidance: 'Run `npm run pb:preview` to repair the preview binding, or `npm run pb:real` to return to the repo pin.',
+    });
+}
+//# sourceMappingURL=localBinding.js.map

package/dist/lib/localBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localBinding.js","sourceRoot":"","sources":["../../src/lib/localBinding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,WAAW,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC3D,0FAA0F;IAC1F,0FAA0F;IAC1F,2EAA2E;IAC3E,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,qBAAqB,CAC7B,mCAAmC,WAAW,uCAAuC;YACnF,0FAA0F;YAC1F,2DAA2D;YAC3D,mFAAmF,WAAW,mBAAmB,EACnH;YACE,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,kCAAkC;YAC/C,QAAQ,EAAE,6DAA6D;SACxE,CACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAsC;IAEtC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,aAAa,GACjB,WAAW,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,eAAe,KAAK,IAAI,CAAC;IACtG,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,8FAA8F;IAC9F,4FAA4F;IAC5F,MAAM,KAAK,GAAG,WAAW,CAAC,eAAe;QACvC,CAAC,CAAC,8BAA8B,cAAc,MAAM;QACpD,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM;YACnB,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,wBAAwB,CAAC;IAC/B,MAAM,IAAI,qBAAqB,CAC7B,iFAAiF;QAC/E,GAAG,KAAK,iEAAiE,EAC3E;QACE,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,yGAAyG;KACpH,CACF,CAAC;AACJ,CAAC"}

package/dist/lib/method-registry.d.ts

@@ -0,0 +1,37 @@
+/**
+ * method-registry.ts — load pb method registry (WP-310 E4).
+ *
+ * Loads the BUNDLED registry JSON. Used during handshake when a manifest is present.
+ *
+ * History (TEN-2783): this used to be "Chain-first with bundled fallback", attempting a
+ * `chain.getMethodRegistry` gateway call before falling back. That route was never registered in
+ * the gateway (absent from `packages/kernel-client/src/generated/routes.generated.ts`), so the
+ * call threw on every handshake since introduction and the bundled path was ALWAYS the real one.
+ * The dead attempt was removed so the bundled registry is the honest, single primary — no
+ * misleading `source: 'chain'` that could never occur, no orphan `chain.getMethodRegistry` call
+ * for the called-route gate to carve out.
+ */
+export interface RegistryMethod {
+    name: string;
+    usage: string;
+    description: string;
+}
+export interface MethodRegistry {
+    version: string;
+    generatedAt: string;
+    methods: RegistryMethod[];
+}
+export interface RegistryLoadResult {
+    registry: MethodRegistry;
+    /** Always 'bundled' — the Chain path (TEN-2783) was removed; kept as a field for report output. */
+    source: 'bundled';
+    /** true when the bundled registry's generatedAt is older than FRESHNESS_DAYS */
+    stale: boolean;
+}
+/**
+ * Load the pb method registry from the bundled JSON.
+ *
+ * Async to preserve the caller's `.catch(() => null)` on a read failure (missing/corrupt bundle).
+ */
+export declare function loadMethodRegistry(): Promise<RegistryLoadResult>;
+//# sourceMappingURL=method-registry.d.ts.map

package/dist/lib/method-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-registry.d.ts","sourceRoot":"","sources":["../../src/lib/method-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,mGAAmG;IACnG,MAAM,EAAE,SAAS,CAAC;IAClB,gFAAgF;IAChF,KAAK,EAAE,OAAO,CAAC;CAChB;AAoBD;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAGtE"}

package/dist/lib/method-registry.js

@@ -0,0 +1,41 @@
+/**
+ * method-registry.ts — load pb method registry (WP-310 E4).
+ *
+ * Loads the BUNDLED registry JSON. Used during handshake when a manifest is present.
+ *
+ * History (TEN-2783): this used to be "Chain-first with bundled fallback", attempting a
+ * `chain.getMethodRegistry` gateway call before falling back. That route was never registered in
+ * the gateway (absent from `packages/kernel-client/src/generated/routes.generated.ts`), so the
+ * call threw on every handshake since introduction and the bundled path was ALWAYS the real one.
+ * The dead attempt was removed so the bundled registry is the honest, single primary — no
+ * misleading `source: 'chain'` that could never occur, no orphan `chain.getMethodRegistry` call
+ * for the called-route gate to carve out.
+ */
+import { readFileSync } from 'fs';
+import { join } from 'path';
+import { fileURLToPath } from 'url';
+// From dist/lib/method-registry.js → ../../templates/ (two levels up: lib → dist → package root)
+// The templates/ directory lives at the package root alongside dist/, not inside dist/.
+// This mirrors the pattern in commands/handshake.ts which also uses __dirname, '..', '..', 'templates'.
+const __dirname = fileURLToPath(new URL('.', import.meta.url));
+const BUNDLED_REGISTRY_PATH = join(__dirname, '..', '..', 'templates', 'method-registry.json');
+const FRESHNESS_DAYS = 7;
+function loadBundled() {
+    const raw = readFileSync(BUNDLED_REGISTRY_PATH, 'utf8');
+    return JSON.parse(raw);
+}
+function isStaleFn(generatedAt) {
+    const generated = new Date(generatedAt).getTime();
+    const now = Date.now();
+    return now - generated > FRESHNESS_DAYS * 24 * 60 * 60 * 1000;
+}
+/**
+ * Load the pb method registry from the bundled JSON.
+ *
+ * Async to preserve the caller's `.catch(() => null)` on a read failure (missing/corrupt bundle).
+ */
+export async function loadMethodRegistry() {
+    const registry = loadBundled();
+    return { registry, source: 'bundled', stale: isStaleFn(registry.generatedAt) };
+}
+//# sourceMappingURL=method-registry.js.map

package/dist/lib/method-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-registry.js","sourceRoot":"","sources":["../../src/lib/method-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAsBpC,iGAAiG;AACjG,wFAAwF;AACxF,wGAAwG;AACxG,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;AAC/F,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,GAAG,GAAG,SAAS,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/lib/normalizeMaterializedFilename.d.ts

@@ -0,0 +1,28 @@
+/**
+ * normalizeMaterializedFilename — WP-379 S5b
+ *
+ * Produces a lowercase, slug-friendly filename from an asset name.
+ * Used by resolveProjectionCollision to compare on-disk filenames (which may
+ * have been projected with a non-normalized case) against the canonical
+ * lowercase form that handshake now writes.
+ *
+ * Contract:
+ *   - Output is lowercase.
+ *   - Non-alphanumeric, non-dot characters are replaced with hyphens.
+ *   - Leading dots (hidden-file convention) are stripped.
+ *   - Multiple consecutive hyphens are collapsed to a single hyphen.
+ *   - Leading and trailing hyphens are trimmed.
+ *   - Unicode characters that don't map to ASCII letters/digits are dropped.
+ *   - Idempotent: applying the function twice yields the same result.
+ *   - Empty input → empty output.
+ *
+ * Chain: WP-379 S5b.
+ */
+/**
+ * Normalize a materializedFilename to its canonical lowercase slug form.
+ *
+ * @param name  The raw filename (e.g. "Setup-ProductBrain.mdc").
+ * @returns     The normalized filename (e.g. "setup-productbrain.mdc").
+ */
+export declare function normalizeMaterializedFilename(name: string): string;
+//# sourceMappingURL=normalizeMaterializedFilename.d.ts.map

package/dist/lib/normalizeMaterializedFilename.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.d.ts","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkClE"}

package/dist/lib/normalizeMaterializedFilename.js

@@ -0,0 +1,56 @@
+/**
+ * normalizeMaterializedFilename — WP-379 S5b
+ *
+ * Produces a lowercase, slug-friendly filename from an asset name.
+ * Used by resolveProjectionCollision to compare on-disk filenames (which may
+ * have been projected with a non-normalized case) against the canonical
+ * lowercase form that handshake now writes.
+ *
+ * Contract:
+ *   - Output is lowercase.
+ *   - Non-alphanumeric, non-dot characters are replaced with hyphens.
+ *   - Leading dots (hidden-file convention) are stripped.
+ *   - Multiple consecutive hyphens are collapsed to a single hyphen.
+ *   - Leading and trailing hyphens are trimmed.
+ *   - Unicode characters that don't map to ASCII letters/digits are dropped.
+ *   - Idempotent: applying the function twice yields the same result.
+ *   - Empty input → empty output.
+ *
+ * Chain: WP-379 S5b.
+ */
+/**
+ * Normalize a materializedFilename to its canonical lowercase slug form.
+ *
+ * @param name  The raw filename (e.g. "Setup-ProductBrain.mdc").
+ * @returns     The normalized filename (e.g. "setup-productbrain.mdc").
+ */
+export function normalizeMaterializedFilename(name) {
+    if (!name)
+        return '';
+    // 1. Strip leading dots (hidden-file prefix, e.g. ".cursor/rules/.hidden.mdc").
+    //    We only strip a single leading dot cluster at the start of the basename,
+    //    not dots that are part of extensions or internal names.
+    const stripped = name.startsWith('.') ? name.replace(/^\.+/, '') : name;
+    if (!stripped)
+        return '';
+    // 2. Lowercase the entire name (covers ASCII + Unicode basic-latin).
+    const lowered = stripped.toLowerCase();
+    // 3. Normalize Unicode: decompose then remove non-ASCII code points that
+    //    didn't map cleanly (e.g. accented chars become their base form via NFD
+    //    decomposition, then the combining diacritics are removed).
+    //    NFKD decomposes ligatures and compatibility forms as well.
+    const ascii = lowered
+        .normalize('NFKD')
+        .replace(/[̀-ͯ]/g, '') // strip combining diacritics
+        .replace(/[^\x00-\x7F]/g, ''); // drop remaining non-ASCII
+    // 4. Replace any sequence of non-alphanumeric + non-dot characters with a
+    //    single hyphen.  We preserve dots so that ".mdc" and ".md" extensions
+    //    are maintained in the output.
+    const slugged = ascii.replace(/[^a-z0-9.]+/g, '-');
+    // 5. Collapse consecutive hyphens → single hyphen.
+    const collapsed = slugged.replace(/-{2,}/g, '-');
+    // 6. Trim leading and trailing hyphens.
+    const trimmed = collapsed.replace(/^-+|-+$/g, '');
+    return trimmed;
+}
+//# sourceMappingURL=normalizeMaterializedFilename.js.map

package/dist/lib/normalizeMaterializedFilename.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.js","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,gFAAgF;IAChF,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,qEAAqE;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAEvC,yEAAyE;IACzE,4EAA4E;IAC5E,gEAAgE;IAChE,gEAAgE;IAChE,MAAM,KAAK,GAAG,OAAO;SAClB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,6BAA6B;SACnD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAG,2BAA2B;IAE9D,0EAA0E;IAC1E,0EAA0E;IAC1E,mCAAmC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAEnD,mDAAmD;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEjD,wCAAwC;IACxC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAElD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/normalizeMaterializedFilename.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * normalizeMaterializedFilename unit tests — WP-379 S5b.
+ *
+ * Contract assertions:
+ *   - Setup-ProductBrain.mdc → setup-productbrain.mdc
+ *   - Already-normalized input is idempotent
+ *   - Unicode chars that map to ASCII (via NFKD) retain base form; others dropped
+ *   - Leading dot stripped; file is otherwise preserved
+ *   - Empty input returns empty string
+ *   - Extension dots are preserved
+ *   - Non-alphanumeric sequences → single hyphen
+ *
+ * Chain: WP-379 S5b.
+ */
+export {};
+//# sourceMappingURL=normalizeMaterializedFilename.test.d.ts.map

package/dist/lib/normalizeMaterializedFilename.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.test.d.ts","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/lib/normalizeMaterializedFilename.test.js

@@ -0,0 +1,90 @@
+/**
+ * normalizeMaterializedFilename unit tests — WP-379 S5b.
+ *
+ * Contract assertions:
+ *   - Setup-ProductBrain.mdc → setup-productbrain.mdc
+ *   - Already-normalized input is idempotent
+ *   - Unicode chars that map to ASCII (via NFKD) retain base form; others dropped
+ *   - Leading dot stripped; file is otherwise preserved
+ *   - Empty input returns empty string
+ *   - Extension dots are preserved
+ *   - Non-alphanumeric sequences → single hyphen
+ *
+ * Chain: WP-379 S5b.
+ */
+import { describe, expect, it } from 'vitest';
+import { normalizeMaterializedFilename } from './normalizeMaterializedFilename.js';
+describe('normalizeMaterializedFilename', () => {
+    // ── Primary contract test (from bet spec) ───────────────────────────────────
+    it('Setup-ProductBrain.mdc → setup-productbrain.mdc', () => {
+        expect(normalizeMaterializedFilename('Setup-ProductBrain.mdc')).toBe('setup-productbrain.mdc');
+    });
+    // ── Idempotency ──────────────────────────────────────────────────────────────
+    it('already-normalized input is idempotent', () => {
+        const normalized = 'setup-productbrain.mdc';
+        expect(normalizeMaterializedFilename(normalized)).toBe(normalized);
+    });
+    it('applying twice produces the same result', () => {
+        const input = 'My Rule File.md';
+        const once = normalizeMaterializedFilename(input);
+        const twice = normalizeMaterializedFilename(once);
+        expect(once).toBe(twice);
+    });
+    // ── Uppercase handling ────────────────────────────────────────────────────────
+    it('lowercases all ASCII letters', () => {
+        expect(normalizeMaterializedFilename('CHAIN-RULES.mdc')).toBe('chain-rules.mdc');
+    });
+    it('mixed case with spaces → lowercase with hyphens', () => {
+        expect(normalizeMaterializedFilename('My Custom Rule.md')).toBe('my-custom-rule.md');
+    });
+    // ── Unicode normalization ─────────────────────────────────────────────────────
+    it('accented chars via NFKD → base ASCII (é → e)', () => {
+        expect(normalizeMaterializedFilename('Régle.md')).toBe('regle.md');
+    });
+    it('non-ASCII chars that cannot normalize → dropped', () => {
+        // Chinese chars don't map to ASCII — they're dropped, hyphens collapsed.
+        const result = normalizeMaterializedFilename('设置规则.md');
+        // No Chinese remains; just the extension part
+        expect(result).toBe('.md');
+    });
+    it('ligature "fi" decomposes to "fi"', () => {
+        // NFKD decomposes fi (fi ligature, U+FB01) to 'f' + 'i'
+        expect(normalizeMaterializedFilename('file.md')).toBe('file.md');
+    });
+    // ── Leading dots ──────────────────────────────────────────────────────────────
+    it('single leading dot is stripped', () => {
+        expect(normalizeMaterializedFilename('.hidden-rule.md')).toBe('hidden-rule.md');
+    });
+    it('multiple leading dots are stripped', () => {
+        expect(normalizeMaterializedFilename('..doubly-hidden.md')).toBe('doubly-hidden.md');
+    });
+    it('dot-only input returns empty string', () => {
+        expect(normalizeMaterializedFilename('.')).toBe('');
+    });
+    it('extension dot mid-name is preserved', () => {
+        // "foo.bar.mdc" → "foo.bar.mdc"
+        expect(normalizeMaterializedFilename('foo.bar.mdc')).toBe('foo.bar.mdc');
+    });
+    // ── Empty input ──────────────────────────────────────────────────────────────
+    it('empty string returns empty string', () => {
+        expect(normalizeMaterializedFilename('')).toBe('');
+    });
+    // ── Special character sequences ───────────────────────────────────────────────
+    it('multiple consecutive spaces → single hyphen', () => {
+        expect(normalizeMaterializedFilename('a   b.md')).toBe('a-b.md');
+    });
+    it('underscores replaced with hyphens', () => {
+        expect(normalizeMaterializedFilename('my_rule_file.mdc')).toBe('my-rule-file.mdc');
+    });
+    it('leading and trailing hyphens are trimmed', () => {
+        expect(normalizeMaterializedFilename('-foo-')).toBe('foo');
+    });
+    it('mixed special chars collapse to single hyphen', () => {
+        expect(normalizeMaterializedFilename('foo!@#bar.mdc')).toBe('foo-bar.mdc');
+    });
+    // ── No extension ────────────────────────────────────────────────────────────
+    it('name without extension is normalized', () => {
+        expect(normalizeMaterializedFilename('MyRule')).toBe('myrule');
+    });
+});
+//# sourceMappingURL=normalizeMaterializedFilename.test.js.map

package/dist/lib/normalizeMaterializedFilename.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.test.js","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,+EAA+E;IAC/E,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,UAAU,GAAG,wBAAwB,CAAC;QAC5C,MAAM,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC;QAChC,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,6BAA6B,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,yEAAyE;QACzE,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;QACxD,8CAA8C;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,uDAAuD;QACvD,MAAM,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,6BAA6B,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,gCAAgC;QAChC,MAAM,CAAC,6BAA6B,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/notice-marker.d.ts

@@ -0,0 +1,3 @@
+/** Returns true exactly once per (channel, session/day). Never throws. */
+export declare function claimNotice(channel: 'agent' | 'human'): boolean;
+//# sourceMappingURL=notice-marker.d.ts.map

package/dist/lib/notice-marker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice-marker.d.ts","sourceRoot":"","sources":["../../src/lib/notice-marker.ts"],"names":[],"mappings":"AAwCA,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAU/D"}

package/dist/lib/notice-marker.js

@@ -0,0 +1,53 @@
+/**
+ * Once-per-session (agent) / once-per-day (human) notice claim via O_EXCL.
+ * First process to create the marker wins (returns true => may print). All others,
+ * and any error, fail OPEN to no-print (return false). Markers self-expire by key
+ * (session id rotates per session; daily key rolls per UTC day). DEC-2.
+ */
+import { openSync, closeSync, mkdirSync, statSync, readdirSync, unlinkSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { readSession } from './session.js';
+const CONFIG_DIR = join(homedir(), '.config', 'productbrain');
+const DAILY_STALE_MS = 7 * 24 * 60 * 60 * 1000;
+function utcDateStamp() {
+    const d = new Date();
+    const p = (n) => String(n).padStart(2, '0');
+    return `${d.getUTCFullYear()}${p(d.getUTCMonth() + 1)}${p(d.getUTCDate())}`;
+}
+/** Channel keys are independent so the human throttle never dedups the agent one. */
+function markerKey(channel) {
+    if (channel === 'human')
+        return `notice-human-${utcDateStamp()}`;
+    const session = readSession();
+    // If no active session, fall back to a daily key so the per-day throttle still holds.
+    return session?.sessionId ? `notice-session-${session.sessionId}` : `notice-agent-daily-${utcDateStamp()}`;
+}
+function cleanupOldNoticeMarkers() {
+    try {
+        for (const name of readdirSync(CONFIG_DIR)) {
+            if (!name.startsWith('notice-human-') &&
+                !name.startsWith('notice-agent-daily-') &&
+                !name.startsWith('notice-session-'))
+                continue;
+            const p = join(CONFIG_DIR, name);
+            if (Date.now() - statSync(p).mtimeMs > DAILY_STALE_MS)
+                unlinkSync(p);
+        }
+    }
+    catch { /* best-effort */ }
+}
+/** Returns true exactly once per (channel, session/day). Never throws. */
+export function claimNotice(channel) {
+    const path = join(CONFIG_DIR, markerKey(channel));
+    try {
+        mkdirSync(CONFIG_DIR, { recursive: true });
+        closeSync(openSync(path, 'wx')); // 'wx' = O_EXCL: throws EEXIST if present
+        cleanupOldNoticeMarkers();
+        return true;
+    }
+    catch {
+        return false; // already claimed, or fs error => fail open to no-print
+    }
+}
+//# sourceMappingURL=notice-marker.js.map

package/dist/lib/notice-marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice-marker.js","sourceRoot":"","sources":["../../src/lib/notice-marker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AAC9D,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,SAAS,YAAY;IACnB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAAC,OAA0B;IAC3C,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,gBAAgB,YAAY,EAAE,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,sFAAsF;IACtF,OAAO,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,sBAAsB,YAAY,EAAE,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,uBAAuB;IAC9B,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;gBACjC,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC;gBACvC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAAE,SAAS;YAClD,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc;gBAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,OAA0B;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,0CAA0C;QAC3E,uBAAuB,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,wDAAwD;IACxE,CAAC;AACH,CAAC"}

package/dist/lib/onboarding-path-b.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding-path-b.d.ts","sourceRoot":"","sources":["../../src/lib/onboarding-path-b.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAIL,KAAK,oBAAoB,EAG1B,MAAM,wBAAwB,CAAC;AAEhC,wBAAsB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyK7E;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,GAAG,IAAI,EAClC,MAAM,EAAE,oBAAoB,GAC3B,oBAAoB,CAUtB;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAI9C"}
+{"version":3,"file":"onboarding-path-b.d.ts","sourceRoot":"","sources":["../../src/lib/onboarding-path-b.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAIL,KAAK,oBAAoB,EAG1B,MAAM,wBAAwB,CAAC;AAehC,wBAAsB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyK7E;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,GAAG,IAAI,EAClC,MAAM,EAAE,oBAAoB,GAC3B,oBAAoB,CAStB;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAI9C"}

package/dist/lib/onboarding-path-b.js

@@ -2,11 +2,23 @@
  * Path B — Facilitator-pattern onboarding (2 exchanges max).
  * WP-304: Shorter flow, silent extraction, auto-capture, governance proof.
  */
-import { mcpCall } from './client.js';
+import { kernelCall } from './client.js';
 import { ask } from './prompts.js';
 import { bold, dim, green, icons } from './style.js';
 import { trackEvent } from './telemetry.js';
 import { extractionToEntries, batchCaptureEntries, countWords, } from './onboarding-shared.js';
+/**
+ * `onboarding.chat`'s server handler (convex/intelligence/onboardingChat.ts) deliberately
+ * types `extraction` as `Record<string, unknown>` — a dynamically-built "backward-compat"
+ * bridge object (its own comment: "Path B reads .extraction.vision, .extraction.tensions,
+ * etc."), not a mistake. `vision` is unconditionally seeded (`{ vision: '' }`, line ~350)
+ * before any conditional field is added, so it's always present as a string — matching
+ * `OnboardingExtraction.vision: string` (required). Cast at the boundary rather than loosen
+ * the shared client-side type (PR #398, Lane C S3c annotation pass).
+ */
+function asOnboardingExtraction(extraction) {
+    return extraction;
+}
 export async function runOnboardingPathB(workspaceName) {
     trackEvent('setup_started', { mode: 'llm', path: 'B' });
     const messages = [];
@@ -15,7 +27,7 @@ export async function runOnboardingPathB(workspaceName) {
     // Exchange 1: Opening question
     let greeting;
     try {
-        const result = await mcpCall('onboarding.chat', {
+        const result = await kernelCall('onboarding.chat', {
             messages: [],
             workspaceName,
             style: 'facilitator',
@@ -54,14 +66,14 @@ export async function runOnboardingPathB(workspaceName) {
     totalUserWords += countWords(userInput);
     // Silent extraction after first answer (parallel with follow-up)
     const [followUpResult, extractResult] = await Promise.allSettled([
-        mcpCall('onboarding.chat', {
+        kernelCall('onboarding.chat', {
             messages,
             workspaceName,
             style: 'facilitator',
             turnNumber: 2,
             totalUserWords,
         }),
-        mcpCall('onboarding.chat', {
+        kernelCall('onboarding.chat', {
             messages,
             workspaceName,
             mode: 'extract',
@@ -69,7 +81,7 @@ export async function runOnboardingPathB(workspaceName) {
     ]);
     // Store first extraction if available
     if (extractResult.status === 'fulfilled' && extractResult.value?.extraction) {
-        lastExtraction = extractResult.value.extraction;
+        lastExtraction = asOnboardingExtraction(extractResult.value.extraction) ?? null;
     }
     // Show follow-up question
     if (followUpResult.status === 'fulfilled' && followUpResult.value?.content) {
@@ -84,13 +96,13 @@ export async function runOnboardingPathB(workspaceName) {
                 totalUserWords += countWords(secondInput);
                 // Second extraction — merge with first
                 try {
-                    const result2 = await mcpCall('onboarding.chat', {
+                    const result2 = await kernelCall('onboarding.chat', {
                         messages,
                         workspaceName,
                         mode: 'extract',
                     });
                     if (result2?.extraction) {
-                        lastExtraction = mergeExtractions(lastExtraction, result2.extraction);
+                        lastExtraction = mergeExtractions(lastExtraction, asOnboardingExtraction(result2.extraction) ?? { vision: '' });
                     }
                 }
                 catch {
@@ -107,13 +119,13 @@ export async function runOnboardingPathB(workspaceName) {
         // Try one final extraction if we don't have one
         if (!lastExtraction?.vision && messages.filter((m) => m.role === 'user').length > 0) {
             try {
-                const finalExtract = await mcpCall('onboarding.chat', {
+                const finalExtract = await kernelCall('onboarding.chat', {
                     messages,
                     workspaceName,
                     mode: 'extract',
                 });
                 if (finalExtract?.extraction) {
-                    lastExtraction = finalExtract.extraction;
+                    lastExtraction = asOnboardingExtraction(finalExtract.extraction) ?? null;
                 }
             }
             catch {
@@ -156,7 +168,6 @@ export function mergeExtractions(first, second) {
     return {
         vision: second.vision || first.vision,
         audience: second.audience || first.audience,
-        techStack: dedupe([...(first.techStack ?? []), ...(second.techStack ?? [])]),
         keyTerms: dedupe([...(first.keyTerms ?? []), ...(second.keyTerms ?? [])]),
         keyDecisions: dedupe([...(first.keyDecisions ?? []), ...(second.keyDecisions ?? [])]),
         tensions: dedupe([...(first.tensions ?? []), ...(second.tensions ?? [])]),
@@ -168,7 +179,7 @@ export function dedupe(arr) {
 /** Governance proof — show binding governance from captured knowledge via resolveTaskStartup. */
 async function showGovernanceProof(vision) {
     try {
-        const result = await mcpCall('chain.resolveTaskStartup', { task: vision });
+        const result = await kernelCall('chain.resolveTaskStartup', { task: vision });
         const governance = result?.bindingGovernance;
         const steering = result?.steeringContext ?? [];
         const allItems = [
@@ -191,8 +202,26 @@ async function showGovernanceProof(vision) {
     catch {
         // Governance proof is best-effort — fall back to orient-based proof
         try {
-            const orient = await mcpCall('orient', { brief: true });
-            const items = orient?.sections?.flatMap((s) => s.items ?? []).filter((i) => i.name) ?? [];
+            // `'orient'` is not a real gateway route (never existed in the registry — this call
+            // has been throwing on every invocation, silently caught by the enclosing catch below,
+            // PR #397-class bug found via S3c annotation). Fixed to the real route,
+            // `chain.getOrientView`, whose return shape has no `.sections` — the closest real
+            // analog for "a few named items to display" is `taskContext.context` (entries with a
+            // `.name` field, same shape `chain.resolveTaskStartup`'s steeringContext/bindingGovernance
+            // items above use).
+            // `renderMode` is the telemetry-attribution axis, not a formatting hint (convex/
+            // agentKnowledge/orientView.ts / convex/http.ts): 'json' means "agent-surface machine
+            // payload" and feeds the KEY-51 scoreboard denominator via governanceRenderedJson.
+            // This onboarding fallback is a genuinely interactive, human-facing CLI flow (styled
+            // stdout text, `ask()` prompts) — 'json' here would mislabel it as agent traffic and
+            // contaminate that metric. 'pretty' is documented as exactly "interactive human TTY"
+            // and carries no governanceRenderedJson, staying correctly uninstrumented (Codex P2,
+            // PR #398 review).
+            const orient = await kernelCall('chain.getOrientView', {
+                task: vision,
+                renderMode: 'pretty',
+            });
+            const items = (orient?.taskContext?.context ?? []).filter((i) => i.name);
             if (items.length > 0) {
                 process.stdout.write(`\n  ${bold("Here's how your product brain will use this:")}\n\n`);
                 for (const item of items.slice(0, 5)) {