@productbrain/cli 0.1.0-beta.55 → 0.1.0-beta.5504

package/dist/lib/collectionRegistry.js

@@ -0,0 +1,170 @@
+/**
+ * Runtime collection registry — fetches from chain.listCollections via kernelCall
+ * and memoizes per process invocation (module-scope singleton).
+ *
+ * Fails open to a build-time SEED snapshot (mirrors PREFIX_TO_COLLECTION in
+ * capture.ts) so CLI commands continue to work even when the backend is
+ * unreachable or chain.listCollections is unavailable.
+ *
+ * FEAT-885 / TEN-1406: Replaces hardcoded PREFIX_TO_COLLECTION + datedCollections
+ * constants with runtime-derived data.  BR-108: CLI cannot import from convex/,
+ * so registry uses kernelCall (HTTP gateway).
+ */
+import { kernelCall } from './client.js';
+/**
+ * SEED — the OFFLINE FAIL-OPEN FALLBACK only (WP-480 S2, TEN-2219).
+ * The online path derives from `chain.listCollections` (getCollections below);
+ * this snapshot exists solely so CLI commands keep working when the backend is
+ * unreachable. It therefore only needs day-zero accuracy, and is content-pinned
+ * against the canonical day-zero seed truth —
+ * `convex/lib/seedClassificationRegistry.ts` on the {slug, idPrefix} projection
+ * (see src/__tests__/collection-registry-seed-drift.test.ts). Two carve-outs
+ * have no canonical counterpart and are excluded from the pin:
+ *   - `work-packages → BET` (BET-230 rename backward compat; canonical maps only WP).
+ *   - `objectives → KEY` (P1 review PRRT_kwDORS4ils6cUz6M, WP-686 S6; rationale corrected PR
+ *     #824, 2026-09-04): the canonical registry flipped `objectives`'s idPrefix from KEY to OBJ
+ *     in place (S5, TASK-91) rather than adding a parallel row, so there is no canonical KEY
+ *     entry to pin against — but a version-skewed CLI running OFFLINE (this SEED's only use
+ *     case) against a STALE local cache or export predating the fleet-wide id-rewrite (now
+ *     `applied` everywhere — live-scope-subset, live:8 dead:0, per artifact generatedAt
+ *     2026-09-04T19:43:27.412Z; wp686_key_to_obj_prefix_rewrite.md no longer exists) can still
+ *     see `KEY`, so `pb capture "KEY: ..."` still needs to route to `objectives`, same reasoning
+ *     as the BET alias above.
+ */
+// WP-690 S7 (TASK-120, twice-corrected): pinned to
+// convex/lib/seedClassificationRegistry.ts's corrected 30 -> 27 list (see that file's header for
+// the full correction history). features/milestones/workstreams/initiatives/audiences/
+// opportunities are pack-owned (MODULE_ONTOLOGY_PACKS); principles/standards/business-rules/
+// patterns/architecture/questions are FOLD_KEYS/architecture_note/question canonicalKeys still
+// required as live registry rows by findGovernance.ts/evolveDecision.ts/conflictProducer.ts.
+// 'policies' kept for the same reason as that file: no corresponding SEED_TYPE_REGISTRY row, so
+// it was never part of this retirement.
+export const SEED = [
+    { slug: 'principles', idPrefix: 'PRI' },
+    { slug: 'standards', idPrefix: 'STD' },
+    { slug: 'business-rules', idPrefix: 'BR' },
+    { slug: 'policies', idPrefix: 'POL' },
+    { slug: 'patterns', idPrefix: 'PAT' },
+    { slug: 'features', idPrefix: 'FEAT' },
+    { slug: 'glossary', idPrefix: 'GLO' },
+    { slug: 'architecture', idPrefix: 'ARCH' },
+    { slug: 'decisions', idPrefix: 'DEC' },
+    { slug: 'strategy', idPrefix: 'STR', defaultCanonicalKey: 'strategy' }, // WP-707 S1 (DEC-1622): strategy is a normal 1:1 collection now — round 3 ruling #13's generalized --entry-type derivation exercises this kind (never a hand-picked branch).
+    { slug: 'semantic-types', idPrefix: 'ST' },
+    { slug: 'maps', idPrefix: 'MAP' },
+    { slug: 'tensions', idPrefix: 'TEN' },
+    { slug: 'teams', idPrefix: 'TEAM' },
+    { slug: 'roles', idPrefix: 'ROL' },
+    { slug: 'insights', idPrefix: 'INS' },
+    { slug: 'tasks', idPrefix: 'TASK' },
+    { slug: 'questions', idPrefix: 'QUE', defaultCanonicalKey: 'question' },
+    // WP-707 S1 round 3.1 (Codex post-round-3 P2): vision/purpose are NEW 1:1 drawers this same PR
+    // adds (DEC-1622) — no canonical seedClassificationRegistry.ts row exists yet (see the
+    // matching carve-outs in collection-registry-seed-drift.test.ts), but the offline
+    // --entry-type derivation (getCanonicalKeyToCollection, ruling #13) and "VIS:"/"PUR:"
+    // capture-prefix routing both need them present even during a chain.listCollections outage.
+    { slug: 'vision', idPrefix: 'VIS', defaultCanonicalKey: 'vision' },
+    { slug: 'purpose', idPrefix: 'PUR', defaultCanonicalKey: 'purpose' },
+    { slug: 'milestones', idPrefix: 'MIL' },
+    { slug: 'workstreams', idPrefix: 'WS' },
+    { slug: 'initiatives', idPrefix: 'INI' },
+    { slug: 'work-packages', idPrefix: 'WP' },
+    { slug: 'work-packages', idPrefix: 'BET' }, // legacy alias — BET-230 rename backward compat
+    { slug: 'objectives', idPrefix: 'OBJ', defaultCanonicalKey: 'objective' }, // WP-686 S3 (TASK-89) slug rename + S5 (TASK-91) idPrefix flip in place; old KEY-<n> ENTRY ids resolve via entryIdAliases regardless
+    { slug: 'objectives', idPrefix: 'KEY' }, // legacy alias — P1 review PRRT_kwDORS4ils6cUz6M (WP-686 S6): keeps "KEY: ..." capture-prefix routing working for a version-skewed offline CLI against a not-yet-migrated (e.g. prod, pre-SW-3) workspace
+    { slug: 'key-results', idPrefix: 'KR', defaultCanonicalKey: 'key_result' }, // WP-707 S1 round 2 (DEC-1622): key_result now files into its OWN 1:1 drawer, split out of the objectives drawer it used to share — keeps "KR: ..." capture-prefix routing (and the --entry-type derivation, round 3 ruling #13) working offline too.
+    { slug: 'products', idPrefix: 'PROD' },
+    { slug: 'audiences', idPrefix: 'AUD' },
+    { slug: 'opportunities', idPrefix: 'OPP' },
+    { slug: 'flows', idPrefix: 'FLO' },
+    { slug: 'rules', idPrefix: 'RULE' }, // PR #778 review round 2 (P2, PRRT_kwDORS4ils6c4_9J): legacy-alias-shaped carve-out — 'rules' is launch-14-v1's fold target (SEED_TYPE_REGISTRY, not SEED_CLASSIFICATION_REGISTRY, so it has no canonical {slug,idPrefix} row to pin against), but a launch-only workspace needs "RULE: ..." to take the prefix fast path even during a transient chain.listCollections failure. Additive only — the pre-existing STD/BR/PRI/PAT/ARCH rows stay too, since a legacy-bridge workspace (PR #778 round 1) can still legitimately resolve those.
+];
+/**
+ * Collections that have a date field and accept a sourceDate during capture.
+ * Used as SEED fallback when the backend doesn't return field metadata.
+ */
+const DATED_COLLECTIONS_SEED = new Set([
+    'tensions',
+    'decisions',
+    'insights',
+    'standards',
+    'business-rules',
+]);
+let _cache = null;
+/**
+ * Fetch all collections for the current workspace.
+ * Module-scope memoized — calls kernelCall once per process, then returns
+ * the cached result.  Fails open to SEED on any error.
+ */
+export async function getCollections() {
+    if (_cache !== null)
+        return _cache;
+    try {
+        const result = await kernelCall('chain.listCollections');
+        _cache = Array.isArray(result) && result.length > 0 ? result : SEED;
+    }
+    catch {
+        _cache = SEED;
+    }
+    return _cache;
+}
+/**
+ * Build a prefix → collection slug map from the runtime registry.
+ * Falls back to SEED-derived map on failure.
+ */
+export async function getPrefixToCollection() {
+    const cols = await getCollections();
+    const map = {};
+    for (const col of cols) {
+        if (col.idPrefix)
+            map[col.idPrefix] = col.slug;
+    }
+    return map;
+}
+/**
+ * WP-707 S1 round 3 (operator ruling #13): build a canonicalKey → collection slug map from the
+ * runtime registry — the CLI-side mirror of `getRequiredCollectionSlugForKind`
+ * (convex/lib/seedTypeRegistry.ts). Used by capture.ts's `--entry-type` fast path so ANY kind
+ * with its own 1:1 drawer resolves automatically, instead of a hand-picked pair of literal
+ * branches that needs a new one hand-added for every future drawer. Only a kind with EXACTLY ONE
+ * collection declaring it as `defaultCanonicalKey` resolves — consistent with the
+ * one-type-one-collection invariant this PR establishes server-side; a kind with zero or more
+ * than one owner slug resolves to undefined so the caller falls through to server-side
+ * classification instead of guessing.
+ */
+export async function getCanonicalKeyToCollection() {
+    const cols = await getCollections();
+    const slugsByKey = new Map();
+    for (const col of cols) {
+        if (!col.defaultCanonicalKey)
+            continue;
+        const slugs = slugsByKey.get(col.defaultCanonicalKey) ?? [];
+        slugs.push(col.slug);
+        slugsByKey.set(col.defaultCanonicalKey, slugs);
+    }
+    const map = {};
+    for (const [key, slugs] of slugsByKey) {
+        if (slugs.length === 1)
+            map[key] = slugs[0];
+    }
+    return map;
+}
+/**
+ * Returns slugs of collections that accept a date field during capture.
+ * Derived from classificationCheck presence when available (a non-empty
+ * classificationCheck indicates the collection is content-dated).
+ * Falls back to a hardcoded seed set when field metadata is absent.
+ */
+export async function getDatedCollections() {
+    const cols = await getCollections();
+    // If any collection in the result has classificationCheck populated, use that
+    // to derive dated collections (classificationCheck is present on collections
+    // that have date-sensitive content requiring classification).
+    const hasFieldMeta = cols.some((c) => c.classificationCheck !== undefined);
+    if (hasFieldMeta) {
+        return new Set(cols.filter((c) => !!c.classificationCheck).map((c) => c.slug));
+    }
+    // No field metadata available — fall back to seed list
+    return DATED_COLLECTIONS_SEED;
+}
+//# sourceMappingURL=collectionRegistry.js.map

package/dist/lib/collectionRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collectionRegistry.js","sourceRoot":"","sources":["../../src/lib/collectionRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,mDAAmD;AACnD,iGAAiG;AACjG,uFAAuF;AACvF,6FAA6F;AAC7F,+FAA+F;AAC/F,6FAA6F;AAC7F,gGAAgG;AAChG,wCAAwC;AACxC,MAAM,CAAC,MAAM,IAAI,GAAqB;IACpC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1C,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,6KAA6K;IACrP,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC1C,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;IACnC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;IACnC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE;IACvE,+FAA+F;IAC/F,uFAAuF;IACvF,kFAAkF;IAClF,sFAAsF;IACtF,4FAA4F;IAC5F,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE;IAClE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;IACxC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,gDAAgD;IAC5F,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,EAAE,qIAAqI;IAChN,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,0MAA0M;IACnP,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE,YAAY,EAAE,EAAE,sPAAsP;IAClU,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,6gBAA6gB;CACnjB,CAAC;AAEF;;;GAGG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,UAAU;IACV,WAAW;IACX,UAAU;IACV,WAAW;IACX,gBAAgB;CACjB,CAAC,CAAC;AAEH,IAAI,MAAM,GAA4B,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAS1B,uBAAuB,CAAC,CAAC;QAC9B,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;IACpC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,mBAAmB;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;IACpC,8EAA8E;IAC9E,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC;IAC3E,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,uDAAuD;IACvD,OAAO,sBAAsB,CAAC;AAChC,CAAC"}

package/dist/lib/commanderOptions.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Small commander.js `.option()` callback helpers. Extracted out of index.ts (not inline) —
+ * STD-2/DEC-1504: index.ts is a grandfathered, shrink-only file; this extraction is the WP-582 B1
+ * offset for that PR's `pb direction` command registration (import + addCommand, two lines).
+ */
+/** Accumulate a repeatable `--flag <value>` option into an array (commander's variadic-flag idiom). */
+export declare function collectRepeatableOption(value: string, previous: string[] | undefined): string[];
+//# sourceMappingURL=commanderOptions.d.ts.map

package/dist/lib/commanderOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commanderOptions.d.ts","sourceRoot":"","sources":["../../src/lib/commanderOptions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,uGAAuG;AACvG,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAE/F"}

package/dist/lib/commanderOptions.js

@@ -0,0 +1,10 @@
+/**
+ * Small commander.js `.option()` callback helpers. Extracted out of index.ts (not inline) —
+ * STD-2/DEC-1504: index.ts is a grandfathered, shrink-only file; this extraction is the WP-582 B1
+ * offset for that PR's `pb direction` command registration (import + addCommand, two lines).
+ */
+/** Accumulate a repeatable `--flag <value>` option into an array (commander's variadic-flag idiom). */
+export function collectRepeatableOption(value, previous) {
+    return [...(previous ?? []), value];
+}
+//# sourceMappingURL=commanderOptions.js.map

package/dist/lib/commanderOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commanderOptions.js","sourceRoot":"","sources":["../../src/lib/commanderOptions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,uGAAuG;AACvG,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,QAA8B;IACnF,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC"}

package/dist/lib/compose-wrapup-view.d.ts

@@ -0,0 +1,48 @@
+/**
+ * composeWrapupView — the single place TEN-2402 is fixed on the CLI surface.
+ *
+ * Twin of the MCP package's helper (packages/mcp-server/src/lib/compose-wrapup-view.ts).
+ * CLI and MCP publish separately and cannot share a module, so each package keeps its own
+ * copy and a repo-level parity test (gateway-parity precedent) feeds ONE synthetic raw
+ * result to both and asserts set-equal committed/draft IDs + equal canClose.
+ *
+ * The MERGE (capped ∪ overflow) MUST live here, not at the call site — that is the only
+ * place the parity test can pin TEN-2402:
+ *   committed = committed ∪ overflowCommitted
+ *   drafts    = drafts ∪ overflowDrafts
+ *
+ * `canClose` is the REVIEW predicate (the loop is empty). Every overflow read coalesces
+ * `?? []` / `?? 0` so a result lacking the fields can never throw.
+ */
+export interface ComposedEntry {
+    entryId: string;
+    name: string;
+}
+interface OverflowEntry {
+    entryId: string;
+    name: string;
+}
+/** Raw kernel wrapup result this helper consumes (only the fields it reads are required). */
+export interface RawWrapupView {
+    committed?: Array<{
+        entryId: string;
+        name: string;
+    }>;
+    drafts?: Array<{
+        entryId: string;
+        name: string;
+    }>;
+    overflowCommitted?: OverflowEntry[];
+    overflowDrafts?: OverflowEntry[];
+    overflowUnscanned?: number;
+}
+export interface ComposedWrapupView {
+    committed: ComposedEntry[];
+    drafts: ComposedEntry[];
+    overflowUnscanned: number;
+    /** REVIEW predicate: the loop is empty (no remaining draft, nothing unread). */
+    canClose: boolean;
+}
+export declare function composeWrapupView(raw: RawWrapupView): ComposedWrapupView;
+export {};
+//# sourceMappingURL=compose-wrapup-view.d.ts.map

package/dist/lib/compose-wrapup-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-wrapup-view.d.ts","sourceRoot":"","sources":["../../src/lib/compose-wrapup-view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,aAAa;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6FAA6F;AAC7F,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC;IACpC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAMD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAgBxE"}

package/dist/lib/compose-wrapup-view.js

@@ -0,0 +1,37 @@
+/**
+ * composeWrapupView — the single place TEN-2402 is fixed on the CLI surface.
+ *
+ * Twin of the MCP package's helper (packages/mcp-server/src/lib/compose-wrapup-view.ts).
+ * CLI and MCP publish separately and cannot share a module, so each package keeps its own
+ * copy and a repo-level parity test (gateway-parity precedent) feeds ONE synthetic raw
+ * result to both and asserts set-equal committed/draft IDs + equal canClose.
+ *
+ * The MERGE (capped ∪ overflow) MUST live here, not at the call site — that is the only
+ * place the parity test can pin TEN-2402:
+ *   committed = committed ∪ overflowCommitted
+ *   drafts    = drafts ∪ overflowDrafts
+ *
+ * `canClose` is the REVIEW predicate (the loop is empty). Every overflow read coalesces
+ * `?? []` / `?? 0` so a result lacking the fields can never throw.
+ */
+function toComposed(e) {
+    return { entryId: e.entryId, name: e.name };
+}
+export function composeWrapupView(raw) {
+    const committed = [
+        ...(raw.committed ?? []).map(toComposed),
+        ...(raw.overflowCommitted ?? []).map(toComposed),
+    ];
+    const drafts = [
+        ...(raw.drafts ?? []).map(toComposed),
+        ...(raw.overflowDrafts ?? []).map(toComposed),
+    ];
+    const overflowUnscanned = raw.overflowUnscanned ?? 0;
+    return {
+        committed,
+        drafts,
+        overflowUnscanned,
+        canClose: drafts.length === 0 && overflowUnscanned === 0,
+    };
+}
+//# sourceMappingURL=compose-wrapup-view.js.map

package/dist/lib/compose-wrapup-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-wrapup-view.js","sourceRoot":"","sources":["../../src/lib/compose-wrapup-view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA6BH,SAAS,UAAU,CAAC,CAAoC;IACtD,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAkB;IAClD,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;KACjD,CAAC;IACF,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACrC,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;KAC9C,CAAC;IACF,MAAM,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC;IACrD,OAAO;QACL,SAAS;QACT,MAAM;QACN,iBAAiB;QACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC"}

package/dist/lib/config.d.ts

@@ -1,49 +1,121 @@
 /**
  * CLI config — reads PRODUCTBRAIN_API_KEY + CONVEX_SITE_URL from:
  * 1. Environment variables (always highest priority)
- * 2. Project config: .productbrain/config.json in CWD (WP-303 S0)
- * 3. Profile system (~/.config/productbrain/profiles/{name}.env)
- * 4. Legacy ~/.config/productbrain/.env (auto-migrated to profiles on first use)
- * 5. CWD .env.mcp / packages/mcp-server/.env.mcp / .env
+ * 2. Project local config: .productbrain/config.local.json (walked up from CWD, machine-local)
+ * 3. Project config: .productbrain/config.json (walked up from CWD, siteUrl only — committed)
+ * 4. Profile system (~/.config/productbrain/profiles/{name}.env)
+ * 5. Legacy ~/.config/productbrain/.env (auto-migrated to profiles on first use)
+ * 6. CWD .env.mcp / packages/mcp-server/.env.mcp / .env
  *
  * Config loading is lazy — loadEnv() runs on first getConfig()/getConfigOrGuide() call.
  * This enables profile switching without import-time side effects (TEN-1276).
  *
  * When key is missing and retry is provided (TTY), runs guided flow per docs/cli-unauthenticated-user-journey.md.
+ *
+ * The repo's own config files (.productbrain/config.json, config.local.json) are located and
+ * read by projectConfig.ts — this module turns what they declare into a credential.
  */
+import { readProjectConfig } from './projectConfig.js';
+import { type ConfigResult, type ResolvedConfig } from './configResult.js';
 declare const HOME_CONFIG_DIR: string;
 declare const HOME_ENV_PATH: string;
-/** Project config shape — .productbrain/config.json */
-interface ProjectConfig {
-    apiKey?: string;
-    siteUrl?: string;
-    profile?: string;
-}
+export { findProjectRoot, readLocalProjectConfig, type LocalProjectConfig } from './projectConfig.js';
+export type { ConfigFailureKind, ConfigResult, ConfigSource, ResolvedConfig, SiteUrlSource } from './configResult.js';
+/**
+ * Returns the preview binding metadata when pb is currently bound to a throwaway preview,
+ * or null when bound to the real Chain (the default).
+ *
+ * Effective-binding mirror: this only reports a preview binding when
+ * `resolveConfig()`/`loadEnv()` would actually honor it — `preview === true` AND
+ * an atomic apiKey+siteUrl pair (SF-3) AND no `PRODUCTBRAIN_API_KEY` env override
+ * (env always wins in resolveConfig step 1). Without these guards the PREVIEW
+ * banner could fire while writes still hit the real Chain, defeating the safety
+ * warning. Used by the PREVIEW banner (index.ts preAction hook) and the
+ * capture/update advisory.
+ *
+ * Security classification: reads only the gitignored machine-local config.local.json.
+ * The preview key in that file is a throwaway preview-scoped key, set by explicit
+ * `npm run pb:preview` opt-in and reversed by `npm run pb:real`. Never throws — returns
+ * null on any error so the banner/advisory path is never the source of a CLI crash.
+ */
+export declare function getPreviewBinding(): {
+    workspaceName: string | null;
+} | null;
 /**
- * Read .productbrain/config.json from CWD.
- * Returns null if file missing. Warns to stderr on invalid JSON but does not throw.
+ * Write/merge the profile pin into <projectRoot>/.productbrain/config.local.json,
+ * preserving any sibling keys. Single source of truth for the local pin write —
+ * used by `pb profile use --local`, the default reconcile path, and `pb connect`.
+ *
+ * Co-writer note (SF-2): scripts/pb-binding.mjs is the OTHER writer of config.local.json — it
+ * merges/strips the preview-binding keys (apiKey, siteUrl, preview, workspaceName) for
+ * `npm run pb:preview` / `npm run pb:real`. Both writers preserve the `profile` pin. If you add
+ * a preview-scoped key here or in readLocalProjectConfig(), update pb-binding.mjs's PREVIEW_KEYS.
  */
-declare function readProjectConfig(): ProjectConfig | null;
-/** Config source in resolution priority order. */
-export type ConfigSource = 'env' | 'project' | 'profile' | 'cwd' | 'default';
-/** Result of the full config resolution cascade. */
-export interface ResolvedConfig {
-    apiKey?: string;
-    siteUrl: string;
-    source: ConfigSource;
-}
+export declare function setLocalProfilePin(projectRoot: string, profile: string): void;
+/**
+ * Outcome of a preview apiKey refresh attempt (WP-458 E2). The discriminated result lets the
+ * caller (session.ts) react precisely instead of conflating "couldn't recover" with "the failure
+ * wasn't a stale key at all":
+ *  - 'refreshed'   — a DIFFERENT valid key was loaded; a retry is worthwhile.
+ *  - 'unchanged'   — preview.json's key already matches the bound key, so the auth/INTERNAL failure
+ *                    is NOT a stale-key problem. The caller must surface the ORIGINAL error rather
+ *                    than relabel it (the reviewer's no-masking concern; R2 honesty).
+ *  - 'unavailable' — preview-bound but preview.json is missing/malformed/lacks a valid key, so the
+ *                    stale binding cannot be recovered. The caller surfaces a clean, actionable
+ *                    error (doneWhen #1: no opaque INTERNAL).
+ *  - 'not-bound'   — not a preview binding, or a genuine env override is in play; leave the error
+ *                    untouched.
+ */
+export type PreviewKeyRefresh = 'refreshed' | 'unchanged' | 'unavailable' | 'not-bound';
+/**
+ * WP-458 E2 — one-shot preview apiKey refresh from disk.
+ *
+ * After a worktree preview is reseeded, seed-preview.mjs Step 6 mints a NEW apiKey into
+ * `.productbrain/preview.json`, but `config.local.json` (and the live `process.env` binding it
+ * seeded via loadEnv) still carry the PRE-reseed key — so the next `pb session start` fails auth
+ * with an opaque INTERNAL. This re-reads the fresh key from preview.json so the caller can retry
+ * ONCE (session.ts). It is deliberately disk-to-disk: it compares preview.json's key against
+ * config.local.json's bound key, NOT against process.env (which loadEnv already populated from the
+ * stale binding), so it can't be confused by its own prior population. Never throws — any error
+ * degrades to 'unavailable'/'not-bound' so it can sit on the session-start path.
+ *
+ * Co-writer note (SF-2): mirrors pb-binding.mjs / setLocalProfilePin — preserves every sibling key
+ * in config.local.json (profile, preview, workspaceName) and only rewrites apiKey + siteUrl.
+ */
+export declare function refreshPreviewApiKeyFromDisk(): PreviewKeyRefresh;
+/** Source of the effective profile, in resolution-precedence order. */
+export type EffectiveProfileSource = 'local' | 'env' | 'global' | 'default' | 'none';
+/**
+ * Resolve the effective profile NAME + where it came from. PRECEDENCE — local pin > env >
+ * global > default: the pin outranks `PB_PROFILE` because resolveConfig() 2b / loadEnv() 1b
+ * bind the pinned key before the profile system (the only step reading `PB_PROFILE`), so
+ * under both the env name never supplies the credential and must not be reported. Unlike
+ * resolveConfig() this names the *configured* pin even when unresolvable (deleted / missing
+ * key): a dangling pin must be surfaced by `pb whoami`, never masked by the global profile
+ * — the TEN-2163 silent-drift bug. Used by `pb whoami`, session labels, "now using" prints.
+ */
+export declare function resolveEffectiveProfile(): {
+    profile: string | null;
+    source: EffectiveProfileSource;
+};
 /**
  * Run the full config resolution cascade and return a typed result.
  * Resolution order:
  * 1. Environment variables (highest priority)
- * 2. Project config (.productbrain/config.json in CWD)
+ * 2. config.local.json profile → resolveNamedProfileConfig(profile) for apiKey + siteUrl
+ * 2c. Declared project naming no tenant — refuses (config.json siteUrl is a gateway override, never a tenant)
  * 3. Profile system (~/.config/productbrain/profiles/{name}.env)
  * 4. Legacy home config (~/.config/productbrain/.env)
  * 5. CWD .env files (.env.mcp, packages/mcp-server/.env.mcp, .env)
  *
- * siteUrl always has a value (falls back to DEFAULT_SITE_URL).
+ * siteUrl always has a value (falls back to DEFAULT_SITE_URL) and reports its OWN origin in
+ * `siteUrlSource` — not `source`, because most branches prefer config.json's URL over their own.
+ *
+ * THROWS at step 2 rather than substituting a different workspace: CONFIG_INVALID at 2a
+ * (incomplete binding), AUTH_MISSING at 2b (dangling pin), missing-pin at 2c. getConfigSafe()
+ * reports each as `ok: false` with the kind preserved, for callers that must not crash.
  */
-export declare function resolveConfig(): ResolvedConfig;
+export declare function resolveConfig(ignoreEnvKey?: boolean): ResolvedConfig;
 /** Reset env loaded state — used for profile switching. */
 export declare function resetConfigCache(): void;
 export declare function getConfig(): {
@@ -54,16 +126,6 @@ export type Config = {
     apiKey: string;
     siteUrl: string;
 };
-/** Discriminated union result for non-throwing config access. */
-export type ConfigResult = {
-    ok: true;
-    apiKey: string;
-    siteUrl: string;
-    source: ConfigSource;
-} | {
-    ok: false;
-    reason: string;
-};
 /**
  * Non-throwing alternative to getConfig().
  *
@@ -74,6 +136,12 @@ export type ConfigResult = {
  * coexist by design — see WP-303 review (DW#5).
  *
  * Uses resolveConfig() directly (no loadEnv) to avoid env var pollution affecting source attribution.
+ *
+ * A refusal from resolveConfig() (dangling repo pin) is reported as `ok: false` with the
+ * refusal as the reason — NOT rethrown. This surface is what `pb doctor` and the bare-`pb`
+ * dashboard use to *diagnose*, and a diagnostic that dies on the condition it exists to
+ * explain is useless. The refusal keeps its teeth either way: `ok: false` hands out no
+ * credential, so nothing can proceed against the wrong workspace.
  */
 export declare function getConfigSafe(): ConfigResult;
 /**
@@ -82,25 +150,5 @@ export declare function getConfigSafe(): ConfigResult;
  * @returns Config, or null if we ran retry (caller should return without running again).
  */
 export declare function getConfigOrGuide(retry: () => Promise<void>): Promise<Config | null>;
-/**
- * Resolve config for admin operations — profile-only resolution.
- *
- * Admin commands (pb admin ...) must NOT read .productbrain/config.json or CWD env files.
- * The project config intentionally pins the repo to a dev Convex site; admin operations
- * target PROD workspaces via the operator's active profile. Reading project config here
- * would silently route admin calls to the wrong gateway (TEN-1334).
- *
- * Resolution order:
- * 1. Shell env vars (PRODUCTBRAIN_API_KEY / CONVEX_SITE_URL) — always win
- * 2. Active named profile (~/.config/productbrain/profiles/{name}.env)
- * 3. Legacy home config (~/.config/productbrain/.env)
- * 4. DEFAULT_SITE_URL as fallback for siteUrl
- *
- * Throws CLIError with AUTH_MISSING if no API key is found.
- */
-export declare function resolveAdminConfig(): {
-    apiKey: string;
-    siteUrl: string;
-};
 export { HOME_CONFIG_DIR, HOME_ENV_PATH, readProjectConfig };
 //# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,QAAA,MAAM,eAAe,QAAgD,CAAC;AACtE,QAAA,MAAM,aAAa,QAAmC,CAAC;AAUvD,uDAAuD;AACvD,UAAU,aAAa;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,iBAAS,iBAAiB,IAAI,aAAa,GAAG,IAAI,CA0BjD;AAED,kDAAkD;AAClD,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAE7E,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,IAAI,cAAc,CA8E9C;AA2ED,2DAA2D;AAC3D,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AA6DD,wBAAgB,SAAS,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0B/D;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,iEAAiE;AACjE,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACnE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,IAAI,YAAY,CAiB5C;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoBzF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAmDxE;AAED,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,OAAO,EAAmB,iBAAiB,EAA0B,MAAM,oBAAoB,CAAC;AAIhG,OAAO,EAKL,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAE3B,QAAA,MAAM,eAAe,QAAgD,CAAC;AACtE,QAAA,MAAM,aAAa,QAAmC,CAAC;AAYvD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEtH;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAO3E;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAY7E;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,WAAW,GAAG,aAAa,GAAG,WAAW,CAAC;AAExF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,IAAI,iBAAiB,CAyDhE;AAED,uEAAuE;AACvE,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAErF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,IAAI;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,CAapG;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,YAAY,UAAQ,GAAG,cAAc,CAwFlE;AA8FD,2DAA2D;AAC3D,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AA6DD,wBAAgB,SAAS,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0B/D;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,IAAI,YAAY,CAE5C;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBzF;AAMD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC"}