@productbrain/cli 0.1.0-beta.55 → 0.1.0-beta.5504

package/dist/lib/legalRelationTypes.js

@@ -0,0 +1,94 @@
+/**
+ * WP-688 S4 review round 5 (bdB5K, cQFZ_): `pb capture`'s --link-type refusal door
+ * (commands/capture.ts) lists an entry's declared legal relation verbs as a `pb relate`
+ * recovery hint. "Declared" (the workspace's own semantic-type row, `valid_relation_types`)
+ * is NOT the same set as "creatable via pb relate's generic door" — guardRelation
+ * (convex/lib/guards.ts) hard-refuses some declared verbs outright:
+ *   - replaces / do_not_confuse_with: always refused, routed to a different command
+ *     (guards.ts:309-322).
+ *   - Any verb outside the kernel ALLOWED_RELATION_TYPES set: refused regardless of what a
+ *     workspace's own type row declares (guards.ts:302-307) — registry reconciliation
+ *     deliberately preserves a customized `valid_relation_types` value even when it contains
+ *     a verb the kernel allowlist doesn't recognize (registryReconcile.test.ts:131-147), so
+ *     this is a supported persisted state, not malformed data.
+ *   - belongs_to / authority_domain TOWARD a domain-tagged target (target canonicalKey ===
+ *     'domain'): requires ratification metadata (stagingEntryId + source) `pb relate` cannot
+ *     supply (guards.ts:349-363).
+ *   - anchored_to FROM a non-strategy source: its entire meaning is strategy-scope-anchor
+ *     (WP-641 S2a) — predictStrategyAnchorViolation unconditionally rejects it whenever the
+ *     source canonicalKey isn't 'strategy' (singletonCardinality.ts:339-341), regardless of
+ *     target (round-5 finding bcRgRI).
+ * Centralized here so the filter isn't duplicated (or drifts) if another connector ever needs
+ * the same "legal AND creatable" list.
+ *
+ * WP-688 S4 review round 5 (bcQWqA): ALLOWED_RELATION_TYPES is read at RUNTIME (a filter, not a
+ * type check), so it cannot come from a bare `kernel/entries/relationTypes` value import —
+ * `kernel` is a devDependency-only, unpublished workspace package (present locally via monorepo
+ * linking, absent from the published `@productbrain/cli` npm package), so that import resolves
+ * here in dev/test but throws ERR_MODULE_NOT_FOUND for every real npm-installed `pb` command
+ * (index.ts statically imports capture.ts, which statically imports this file). Import the
+ * generated, CLI-owned copy instead — same pattern as sourceSurfaces.generated.ts (see
+ * scripts/generate-kernel-value-sets.mjs's header for the full rationale + retirement rule).
+ */
+import { ALLOWED_RELATION_TYPES as ALLOWED_RELATION_TYPES_LIST } from '../generated/relationTypes.generated.js';
+const ALLOWED_RELATION_TYPES = new Set(ALLOWED_RELATION_TYPES_LIST);
+/** Verbs guardRelation refuses outright regardless of ALLOWED_RELATION_TYPES membership — each
+ *  routes to a different, specialized command instead of the generic relation door. */
+const DIRECT_DOOR_BLOCKED = new Set(['replaces', 'do_not_confuse_with']);
+/** Domain-tag verbs guardRelation only accepts via ratification metadata (guards.ts:349-363) —
+ *  `pb relate` cannot supply it, so never recommend these toward a domain-tagged target. */
+const DOMAIN_TAG_VERBS = new Set(['belongs_to', 'authority_domain']);
+/** anchored_to only exists as a strategy-scope-anchor verb (WP-641 S2a) — never legal from a
+ *  non-strategy source, regardless of target (bcRgRI). */
+const STRATEGY_ONLY_VERBS = new Set(['anchored_to']);
+/** Filters a workspace-declared `valid_relation_types` array down to verbs `pb relate`'s
+ *  generic door can actually create toward the given target. `targetIsDomain` should be
+ *  `true` when the link target entry's canonicalKey is 'domain'; `sourceIsStrategy` should be
+ *  `true` when the entry being captured has canonicalKey 'strategy'. */
+export function filterCreatableRelationTypes(declared, targetIsDomain, sourceIsStrategy) {
+    if (!Array.isArray(declared))
+        return [];
+    return declared.filter((t) => typeof t === 'string'
+        && !DIRECT_DOOR_BLOCKED.has(t)
+        && ALLOWED_RELATION_TYPES.has(t)
+        && !(targetIsDomain && DOMAIN_TAG_VERBS.has(t))
+        && !(!sourceIsStrategy && STRATEGY_ONLY_VERBS.has(t)));
+}
+/** Trust-accepted statuses (statusStateMachine.ts:67-69's isTrustAccepted, inlined rather than
+ *  imported — same devDependency-only/unpublished-kernel constraint as ALLOWED_RELATION_TYPES). */
+function isTrustAcceptedStatus(status) {
+    return status === 'accepted' || status === 'active';
+}
+/** Mirrors parseSemanticTypeDefData's validity rule (kernel/entries/semanticTypes.ts:65-77) —
+ *  loadTypeMap skips a malformed row (missing/non-string description, or a cardinality_rule
+ *  outside the 3-value enum) rather than letting it win, even when it's the LAST trust-accepted
+ *  duplicate (round-5 finding bcRICo). Inlined rather than imported: same devDependency-only/
+ *  unpublished-kernel constraint as ALLOWED_RELATION_TYPES above. */
+function isParsableSemanticTypeRow(data) {
+    return typeof data?.description === 'string'
+        && (data.cardinality_rule === 'singleton_per_workspace'
+            || data.cardinality_rule === 'singleton_per_scope'
+            || data.cardinality_rule === 'multiple');
+}
+/** Resolves the declared `valid_relation_types` for `canonicalKey` out of a semantic-types
+ *  listEntries result the SAME way loadTypeMap does (convex/chain/semanticTypes.ts:81-99):
+ *  trust-accepted AND parsable rows only, and when duplicate canonical_key rows exist (a
+ *  supported state — backfillTypeRegistryReconcile.test.ts:175-199 exercises an active
+ *  duplicate) the LAST such match in listEntries' query order wins, mirroring loadTypeMap's
+ *  Map.set()-overwrite-per-match loop over the same by_collection-indexed query — a malformed
+ *  duplicate is skipped entirely rather than overwriting an earlier valid row (bcRICo). Then
+ *  filters to what `pb relate` can create. */
+export function resolveCreatableRelationTypes(typeRows, canonicalKey, targetIsDomain) {
+    let declared;
+    for (const row of typeRows ?? []) {
+        if (row.data?.canonical_key !== canonicalKey)
+            continue;
+        if (!isTrustAcceptedStatus(row.status))
+            continue;
+        if (!isParsableSemanticTypeRow(row.data))
+            continue;
+        declared = row.data?.valid_relation_types;
+    }
+    return filterCreatableRelationTypes(declared, targetIsDomain, canonicalKey === 'strategy');
+}
+//# sourceMappingURL=legalRelationTypes.js.map

package/dist/lib/legalRelationTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legalRelationTypes.js","sourceRoot":"","sources":["../../src/lib/legalRelationTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,sBAAsB,IAAI,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAEhH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAEzF;uFACuF;AACvF,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAE9F;4FAC4F;AAC5F,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAE1F;0DAC0D;AAC1D,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AAE1E;;;wEAGwE;AACxE,MAAM,UAAU,4BAA4B,CAAC,QAAiB,EAAE,cAAuB,EAAE,gBAAyB;IAChH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CACxC,OAAO,CAAC,KAAK,QAAQ;WAClB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;WAC3B,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC;WAC7B,CAAC,CAAC,cAAc,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;WAC5C,CAAC,CAAC,CAAC,gBAAgB,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;mGACmG;AACnG,SAAS,qBAAqB,CAAC,MAA0B;IACvD,OAAO,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,QAAQ,CAAC;AACtD,CAAC;AAOD;;;;qEAIqE;AACrE,SAAS,yBAAyB,CAAC,IAAqB;IACtD,OAAO,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ;WACvC,CAAC,IAAI,CAAC,gBAAgB,KAAK,yBAAyB;eAClD,IAAI,CAAC,gBAAgB,KAAK,qBAAqB;eAC/C,IAAI,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;8CAO8C;AAC9C,MAAM,UAAU,6BAA6B,CAC3C,QAA+C,EAC/C,YAAoB,EACpB,cAAuB;IAEvB,IAAI,QAAiB,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,YAAY;YAAE,SAAS;QACvD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QACjD,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnD,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAC5C,CAAC;IACD,OAAO,4BAA4B,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,KAAK,UAAU,CAAC,CAAC;AAC7F,CAAC"}

package/dist/lib/localBinding.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Repo-local binding resolution — turns what `.productbrain/config.local.json` declares into a
+ * credential, or refuses outright.
+ *
+ * Ordinary commands (`resolveConfig()` / `loadEnv()`) and `resolveAdminConfig()` share
+ * `resolvePinnedProfile()` so the pin validity bar cannot drift (STA-3 / TEN-3239). Admin still
+ * owns its own cascade around that helper: it never reads config.json siteUrl, CWD .env files, or
+ * preview / local-binding keys. Fail loud, fail closed, fail fast (PRI-24); default closed,
+ * explicitly opened (PRI-22).
+ */
+import { type LocalProjectConfig } from './projectConfig.js';
+/**
+ * Resolve the repo-local profile pin to a credential, or refuse outright.
+ *
+ * FAILS CLOSED on a DANGLING pin: a pin naming a profile that has since been deleted, or whose
+ * file carries no key, must NEVER fall through to the global active profile. The repo has
+ * explicitly declared its tenant; substituting a different one silently retargets every read AND
+ * write at a foreign workspace, and the gateway derives the workspace from the credential (BR-18)
+ * — so nothing downstream catches it.
+ *
+ * INS-2455 is the admin-path instance of exactly this fall-through. Admin now calls this helper
+ * too; a present-but-malformed key is a broken pin, not a credential.
+ */
+export declare function resolvePinnedProfile(profileName: string): {
+    apiKey: string;
+    siteUrl?: string;
+};
+/**
+ * Does `config.local.json` CLAIM a direct credential binding of its own?
+ *
+ * The claim is the `preview` marker OR a credential — see `resolveLocalBinding()` below for why
+ * the marker alone is not the test. A claim is only a question, never an answer: it says the file
+ * MEANT to bind, not that it can. Use `bindsCompletely()` to decide whether a tenant is actually
+ * named.
+ */
+export declare function declaresLocalBinding(localConfig: LocalProjectConfig | null): localConfig is LocalProjectConfig;
+/**
+ * Does `config.local.json` declare a COMPLETE PREVIEW binding — independent of the environment?
+ *
+ * The env-independence is the whole point (Codex P2 r4). `config.ts`'s `getPreviewBinding()` asks
+ * a different question — "is a preview binding what pb is EFFECTIVELY using right now" — so it
+ * bails whenever `PRODUCTBRAIN_API_KEY` is set. But `loadEnv()` COPIES the preview key into that
+ * very variable, so after any command has resolved config, that question answers "no" on a
+ * genuinely preview-bound worktree. Reporting surfaces need the file's own declaration, and
+ * handle the env-override case separately and earlier (reportedProfile.ts's startup snapshot).
+ *
+ * Shared rather than copied so the completeness bar cannot drift (STA-3) — it is the same
+ * `bindsCompletely` (SF-3 atomic apiKey+siteUrl) both callers already depend on.
+ */
+export declare function declaresCompletePreviewBinding(localConfig: LocalProjectConfig | null): {
+    workspaceName: string | null;
+} | null;
+/**
+ * Refuse when a project has declared itself (committed config.json) but named no tenant.
+ *
+ * A dangling pin is a different refusal (`resolvePinnedProfile`). This is the no-tenant case:
+ * config.json says "I am a Product Brain project" and nothing in config.local.json — neither a
+ * pin nor a direct/preview binding — says which workspace. Falling through to the global profile
+ * is the incident. A directory with no config.json is not a project — personal capture and
+ * `pb login` stay open.
+ *
+ * Call after the pin / preview-binding steps, before any global fallback. Those earlier steps
+ * already returned or threw when a tenant was claimed; this still re-checks the binding claim
+ * because `resolveAdminConfig()` has no binding step of its own and must not mistake a
+ * preview-bound worktree for an unpinned one.
+ */
+export declare function refuseWhenProjectHasNoTenant(): void;
+/**
+ * Resolve the direct credential binding in config.local.json, or null when the file does not
+ * claim one (the profile pin then owns resolution).
+ *
+ * The claim is the `preview` marker OR a credential of its own — deliberately NOT the marker
+ * alone. A file carrying an apiKey is asserting which workspace this repo talks to whether or not
+ * `pb:preview` stamped the marker, so gating on the marker would let a hand-written or
+ * partially-scrubbed binding be skipped and a sibling profile pin silently supply a different
+ * tenant's credential instead (the failure class TEN-3237/TEN-3238 closed for the pin path).
+ *
+ * Once claimed, only the atomic apiKey+siteUrl pair (SF-3) may bind — never a preview key paired
+ * with config.json's real-dev gateway (STD-261). Anything else refuses here, ahead of the pin, so
+ * a broken binding is named rather than routed around.
+ */
+export declare function resolveLocalBinding(localConfig: LocalProjectConfig | null): {
+    apiKey: string;
+    siteUrl: string;
+} | null;
+//# sourceMappingURL=localBinding.d.ts.map

package/dist/lib/localBinding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localBinding.d.ts","sourceRoot":"","sources":["../../src/lib/localBinding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAA+C,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG1G;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAqB9F;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,kBAAkB,GAAG,IAAI,GACrC,WAAW,IAAI,kBAAkB,CAKnC;AAmBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,kBAAkB,GAAG,IAAI,GACrC;IAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAGzC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAiCnD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,kBAAkB,GAAG,IAAI,GACrC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAwB5C"}

package/dist/lib/localBinding.js

@@ -0,0 +1,173 @@
+/**
+ * Repo-local binding resolution — turns what `.productbrain/config.local.json` declares into a
+ * credential, or refuses outright.
+ *
+ * Ordinary commands (`resolveConfig()` / `loadEnv()`) and `resolveAdminConfig()` share
+ * `resolvePinnedProfile()` so the pin validity bar cannot drift (STA-3 / TEN-3239). Admin still
+ * owns its own cascade around that helper: it never reads config.json siteUrl, CWD .env files, or
+ * preview / local-binding keys. Fail loud, fail closed, fail fast (PRI-24); default closed,
+ * explicitly opened (PRI-22).
+ */
+import { ConfigResolutionError } from './configResult.js';
+import { ErrorCode } from './errors.js';
+import { resolveNamedProfileConfig } from './profiles.js';
+import { readLocalProjectConfig, projectConfigExists } from './projectConfig.js';
+import { API_KEY_PREFIX } from './tokenConstants.js';
+/**
+ * Resolve the repo-local profile pin to a credential, or refuse outright.
+ *
+ * FAILS CLOSED on a DANGLING pin: a pin naming a profile that has since been deleted, or whose
+ * file carries no key, must NEVER fall through to the global active profile. The repo has
+ * explicitly declared its tenant; substituting a different one silently retargets every read AND
+ * write at a foreign workspace, and the gateway derives the workspace from the credential (BR-18)
+ * — so nothing downstream catches it.
+ *
+ * INS-2455 is the admin-path instance of exactly this fall-through. Admin now calls this helper
+ * too; a present-but-malformed key is a broken pin, not a credential.
+ */
+export function resolvePinnedProfile(profileName) {
+    const namedConfig = resolveNamedProfileConfig(profileName);
+    // A present-but-malformed key is a broken pin, not a credential. Accepting it here would
+    // surface as a generic "no API key, run pb login" far downstream, pointing the operator
+    // away from the pin that actually broke.
+    if (!namedConfig?.apiKey?.startsWith(API_KEY_PREFIX)) {
+        throw new ConfigResolutionError(`This repo is pinned to profile "${profileName}" (.productbrain/config.local.json), ` +
+            `but that profile has no valid API key — it may have been deleted or never fully set up. ` +
+            `Refusing to silently fall back to a different workspace. ` +
+            `Run \`pb profile use --local <profile>\` to fix the pin, or \`pb profile create ${profileName}\` to restore it.`, {
+            code: ErrorCode.AUTH_MISSING,
+            category: 'auth',
+            kind: 'profile-pin',
+            nextCommand: 'pb profile use --local <profile>',
+            guidance: 'Run `pb profile use --local <profile>` to fix the repo pin.',
+        });
+    }
+    return { apiKey: namedConfig.apiKey, siteUrl: namedConfig.siteUrl };
+}
+/**
+ * Does `config.local.json` CLAIM a direct credential binding of its own?
+ *
+ * The claim is the `preview` marker OR a credential — see `resolveLocalBinding()` below for why
+ * the marker alone is not the test. A claim is only a question, never an answer: it says the file
+ * MEANT to bind, not that it can. Use `bindsCompletely()` to decide whether a tenant is actually
+ * named.
+ */
+export function declaresLocalBinding(localConfig) {
+    if (!localConfig)
+        return false;
+    return (localConfig.preview === true || Boolean(localConfig.apiKey) || localConfig.apiKeyMalformed === true);
+}
+/**
+ * Does `config.local.json` carry a COMPLETE binding — the atomic apiKey+siteUrl pair (SF-3)?
+ *
+ * This, not the claim above, is what "the repo names a tenant" means. `resolveLocalBinding()`
+ * rejects a claimed-but-incomplete binding, but `resolveAdminConfig()` has no binding step to do
+ * that rejecting — so if `refuseWhenProjectHasNoTenant()` accepted a mere claim, a broken binding
+ * (`{ preview: true }` alone, a key with no siteUrl, a malformed key) would wave admin straight
+ * past the refusal into the global profile, which defaults to production (WP-681/INS-2455 is that
+ * exact incident). Shared by both so the bar cannot drift (STA-3), and it is the spec's own word:
+ * a *complete* preview binding is what stays unchanged.
+ */
+function bindsCompletely(localConfig) {
+    return Boolean(localConfig?.apiKey && localConfig.siteUrl);
+}
+/**
+ * Does `config.local.json` declare a COMPLETE PREVIEW binding — independent of the environment?
+ *
+ * The env-independence is the whole point (Codex P2 r4). `config.ts`'s `getPreviewBinding()` asks
+ * a different question — "is a preview binding what pb is EFFECTIVELY using right now" — so it
+ * bails whenever `PRODUCTBRAIN_API_KEY` is set. But `loadEnv()` COPIES the preview key into that
+ * very variable, so after any command has resolved config, that question answers "no" on a
+ * genuinely preview-bound worktree. Reporting surfaces need the file's own declaration, and
+ * handle the env-override case separately and earlier (reportedProfile.ts's startup snapshot).
+ *
+ * Shared rather than copied so the completeness bar cannot drift (STA-3) — it is the same
+ * `bindsCompletely` (SF-3 atomic apiKey+siteUrl) both callers already depend on.
+ */
+export function declaresCompletePreviewBinding(localConfig) {
+    if (localConfig?.preview !== true || !bindsCompletely(localConfig))
+        return null;
+    return { workspaceName: localConfig.workspaceName ?? null };
+}
+/**
+ * Refuse when a project has declared itself (committed config.json) but named no tenant.
+ *
+ * A dangling pin is a different refusal (`resolvePinnedProfile`). This is the no-tenant case:
+ * config.json says "I am a Product Brain project" and nothing in config.local.json — neither a
+ * pin nor a direct/preview binding — says which workspace. Falling through to the global profile
+ * is the incident. A directory with no config.json is not a project — personal capture and
+ * `pb login` stay open.
+ *
+ * Call after the pin / preview-binding steps, before any global fallback. Those earlier steps
+ * already returned or threw when a tenant was claimed; this still re-checks the binding claim
+ * because `resolveAdminConfig()` has no binding step of its own and must not mistake a
+ * preview-bound worktree for an unpinned one.
+ */
+export function refuseWhenProjectHasNoTenant() {
+    // The declaration is the FILE, not its contents — a corrupt config.json must not read as
+    // "not a project" and reopen the fall-through exactly when the committed file is damaged.
+    if (!projectConfigExists())
+        return;
+    const localConfig = readLocalProjectConfig();
+    if (localConfig?.profile)
+        return;
+    // A COMPLETE direct/preview binding names a tenant too: `npm run pb:preview` writes apiKey +
+    // siteUrl and no `profile` field. resolveConfig()/loadEnv() already returned at their own
+    // binding step, so this only reaches the admin cascade — which by design does not consume
+    // preview keys, and without this would call a legitimately preview-bound worktree untenanted.
+    // COMPLETE, not merely claimed: an incomplete binding names nothing usable, and admin has no
+    // binding step to reject it, so accepting a claim here would route admin to the global profile
+    // (Codex review round 2 — a regression this line introduced and this word closes).
+    if (bindsCompletely(localConfig))
+        return;
+    // Deliberately NOT excepted: `PB_PROFILE`. It looks like an explicit tenant, but exported from
+    // a shell rc it is exactly as ambient as the global active profile whose silent substitution is
+    // the incident — so WP-694 names only an exported PRODUCTBRAIN_API_KEY as the escape hatch, and
+    // this refusal outranks the profile system that reads PB_PROFILE (Codex review, declined).
+    throw new ConfigResolutionError(`This repo is a Product Brain project (.productbrain/config.json) but has no tenant pin ` +
+        `in .productbrain/config.local.json. Refusing to silently use a different workspace. ` +
+        `Run \`pb profile use --local <profile>\` to pin this repo, or \`pb profile list\` to see your profiles.`, {
+        code: ErrorCode.AUTH_MISSING,
+        category: 'auth',
+        kind: 'missing-pin',
+        nextCommand: 'pb profile use --local <profile>',
+        guidance: 'Run `pb profile use --local <profile>` to pin this repo to a workspace.',
+    });
+}
+/**
+ * Resolve the direct credential binding in config.local.json, or null when the file does not
+ * claim one (the profile pin then owns resolution).
+ *
+ * The claim is the `preview` marker OR a credential of its own — deliberately NOT the marker
+ * alone. A file carrying an apiKey is asserting which workspace this repo talks to whether or not
+ * `pb:preview` stamped the marker, so gating on the marker would let a hand-written or
+ * partially-scrubbed binding be skipped and a sibling profile pin silently supply a different
+ * tenant's credential instead (the failure class TEN-3237/TEN-3238 closed for the pin path).
+ *
+ * Once claimed, only the atomic apiKey+siteUrl pair (SF-3) may bind — never a preview key paired
+ * with config.json's real-dev gateway (STD-261). Anything else refuses here, ahead of the pin, so
+ * a broken binding is named rather than routed around.
+ */
+export function resolveLocalBinding(localConfig) {
+    if (!declaresLocalBinding(localConfig))
+        return null;
+    if (bindsCompletely(localConfig)) {
+        return { apiKey: localConfig.apiKey, siteUrl: localConfig.siteUrl.replace(/\/$/, '') };
+    }
+    // A malformed key is present-but-unusable, not absent — readLocalProjectConfig() withholds it
+    // from `apiKey` so it can never bind, and flags it so this refusal can name the real fault.
+    const fault = localConfig.apiKeyMalformed
+        ? `its API key is not a valid ${API_KEY_PREFIX} key`
+        : !localConfig.apiKey
+            ? 'missing API key'
+            : 'missing deployment URL';
+    throw new ConfigResolutionError(`This repo has an incomplete preview binding (.productbrain/config.local.json): ` +
+        `${fault}. Refusing to use its profile pin or another workspace instead.`, {
+        code: ErrorCode.CONFIG_INVALID,
+        category: 'config',
+        kind: 'preview-binding',
+        nextCommand: 'npm run pb:preview',
+        guidance: 'Run `npm run pb:preview` to repair the preview binding, or `npm run pb:real` to return to the repo pin.',
+    });
+}
+//# sourceMappingURL=localBinding.js.map

package/dist/lib/localBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localBinding.js","sourceRoot":"","sources":["../../src/lib/localBinding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAA2B,MAAM,oBAAoB,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,WAAW,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC3D,yFAAyF;IACzF,wFAAwF;IACxF,yCAAyC;IACzC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,qBAAqB,CAC7B,mCAAmC,WAAW,uCAAuC;YACnF,0FAA0F;YAC1F,2DAA2D;YAC3D,mFAAmF,WAAW,mBAAmB,EACnH;YACE,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,kCAAkC;YAC/C,QAAQ,EAAE,6DAA6D;SACxE,CACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAsC;IAEtC,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,CACL,WAAW,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,eAAe,KAAK,IAAI,CACpG,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CACtB,WAAsC;IAEtC,OAAO,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B,CAC5C,WAAsC;IAEtC,IAAI,WAAW,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B;IAC1C,yFAAyF;IACzF,0FAA0F;IAC1F,IAAI,CAAC,mBAAmB,EAAE;QAAE,OAAO;IAEnC,MAAM,WAAW,GAAG,sBAAsB,EAAE,CAAC;IAC7C,IAAI,WAAW,EAAE,OAAO;QAAE,OAAO;IAEjC,6FAA6F;IAC7F,0FAA0F;IAC1F,0FAA0F;IAC1F,8FAA8F;IAC9F,6FAA6F;IAC7F,+FAA+F;IAC/F,mFAAmF;IACnF,IAAI,eAAe,CAAC,WAAW,CAAC;QAAE,OAAO;IAEzC,+FAA+F;IAC/F,gGAAgG;IAChG,gGAAgG;IAChG,2FAA2F;IAC3F,MAAM,IAAI,qBAAqB,CAC7B,yFAAyF;QACvF,sFAAsF;QACtF,yGAAyG,EAC3G;QACE,IAAI,EAAE,SAAS,CAAC,YAAY;QAC5B,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE,yEAAyE;KACpF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAsC;IAEtC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,8FAA8F;IAC9F,4FAA4F;IAC5F,MAAM,KAAK,GAAG,WAAW,CAAC,eAAe;QACvC,CAAC,CAAC,8BAA8B,cAAc,MAAM;QACpD,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM;YACnB,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,wBAAwB,CAAC;IAC/B,MAAM,IAAI,qBAAqB,CAC7B,iFAAiF;QAC/E,GAAG,KAAK,iEAAiE,EAC3E;QACE,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,yGAAyG;KACpH,CACF,CAAC;AACJ,CAAC"}

package/dist/lib/method-registry.d.ts

@@ -0,0 +1,37 @@
+/**
+ * method-registry.ts — load pb method registry (WP-310 E4).
+ *
+ * Loads the BUNDLED registry JSON. Used during handshake when a manifest is present.
+ *
+ * History (TEN-2783): this used to be "Chain-first with bundled fallback", attempting a
+ * `chain.getMethodRegistry` gateway call before falling back. That route was never registered in
+ * the gateway (absent from `packages/kernel-client/src/generated/routes.generated.ts`), so the
+ * call threw on every handshake since introduction and the bundled path was ALWAYS the real one.
+ * The dead attempt was removed so the bundled registry is the honest, single primary — no
+ * misleading `source: 'chain'` that could never occur, no orphan `chain.getMethodRegistry` call
+ * for the called-route gate to carve out.
+ */
+export interface RegistryMethod {
+    name: string;
+    usage: string;
+    description: string;
+}
+export interface MethodRegistry {
+    version: string;
+    generatedAt: string;
+    methods: RegistryMethod[];
+}
+export interface RegistryLoadResult {
+    registry: MethodRegistry;
+    /** Always 'bundled' — the Chain path (TEN-2783) was removed; kept as a field for report output. */
+    source: 'bundled';
+    /** true when the bundled registry's generatedAt is older than FRESHNESS_DAYS */
+    stale: boolean;
+}
+/**
+ * Load the pb method registry from the bundled JSON.
+ *
+ * Async to preserve the caller's `.catch(() => null)` on a read failure (missing/corrupt bundle).
+ */
+export declare function loadMethodRegistry(): Promise<RegistryLoadResult>;
+//# sourceMappingURL=method-registry.d.ts.map

package/dist/lib/method-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-registry.d.ts","sourceRoot":"","sources":["../../src/lib/method-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,mGAAmG;IACnG,MAAM,EAAE,SAAS,CAAC;IAClB,gFAAgF;IAChF,KAAK,EAAE,OAAO,CAAC;CAChB;AAoBD;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAGtE"}

package/dist/lib/method-registry.js

@@ -0,0 +1,41 @@
+/**
+ * method-registry.ts — load pb method registry (WP-310 E4).
+ *
+ * Loads the BUNDLED registry JSON. Used during handshake when a manifest is present.
+ *
+ * History (TEN-2783): this used to be "Chain-first with bundled fallback", attempting a
+ * `chain.getMethodRegistry` gateway call before falling back. That route was never registered in
+ * the gateway (absent from `packages/kernel-client/src/generated/routes.generated.ts`), so the
+ * call threw on every handshake since introduction and the bundled path was ALWAYS the real one.
+ * The dead attempt was removed so the bundled registry is the honest, single primary — no
+ * misleading `source: 'chain'` that could never occur, no orphan `chain.getMethodRegistry` call
+ * for the called-route gate to carve out.
+ */
+import { readFileSync } from 'fs';
+import { join } from 'path';
+import { fileURLToPath } from 'url';
+// From dist/lib/method-registry.js → ../../templates/ (two levels up: lib → dist → package root)
+// The templates/ directory lives at the package root alongside dist/, not inside dist/.
+// This mirrors the pattern in commands/handshake.ts which also uses __dirname, '..', '..', 'templates'.
+const __dirname = fileURLToPath(new URL('.', import.meta.url));
+const BUNDLED_REGISTRY_PATH = join(__dirname, '..', '..', 'templates', 'method-registry.json');
+const FRESHNESS_DAYS = 7;
+function loadBundled() {
+    const raw = readFileSync(BUNDLED_REGISTRY_PATH, 'utf8');
+    return JSON.parse(raw);
+}
+function isStaleFn(generatedAt) {
+    const generated = new Date(generatedAt).getTime();
+    const now = Date.now();
+    return now - generated > FRESHNESS_DAYS * 24 * 60 * 60 * 1000;
+}
+/**
+ * Load the pb method registry from the bundled JSON.
+ *
+ * Async to preserve the caller's `.catch(() => null)` on a read failure (missing/corrupt bundle).
+ */
+export async function loadMethodRegistry() {
+    const registry = loadBundled();
+    return { registry, source: 'bundled', stale: isStaleFn(registry.generatedAt) };
+}
+//# sourceMappingURL=method-registry.js.map

package/dist/lib/method-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-registry.js","sourceRoot":"","sources":["../../src/lib/method-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAsBpC,iGAAiG;AACjG,wFAAwF;AACxF,wGAAwG;AACxG,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;AAC/F,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,GAAG,GAAG,SAAS,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/lib/normalizeMaterializedFilename.d.ts

@@ -0,0 +1,28 @@
+/**
+ * normalizeMaterializedFilename — WP-379 S5b
+ *
+ * Produces a lowercase, slug-friendly filename from an asset name.
+ * Used by resolveProjectionCollision to compare on-disk filenames (which may
+ * have been projected with a non-normalized case) against the canonical
+ * lowercase form that handshake now writes.
+ *
+ * Contract:
+ *   - Output is lowercase.
+ *   - Non-alphanumeric, non-dot characters are replaced with hyphens.
+ *   - Leading dots (hidden-file convention) are stripped.
+ *   - Multiple consecutive hyphens are collapsed to a single hyphen.
+ *   - Leading and trailing hyphens are trimmed.
+ *   - Unicode characters that don't map to ASCII letters/digits are dropped.
+ *   - Idempotent: applying the function twice yields the same result.
+ *   - Empty input → empty output.
+ *
+ * Chain: WP-379 S5b.
+ */
+/**
+ * Normalize a materializedFilename to its canonical lowercase slug form.
+ *
+ * @param name  The raw filename (e.g. "Setup-ProductBrain.mdc").
+ * @returns     The normalized filename (e.g. "setup-productbrain.mdc").
+ */
+export declare function normalizeMaterializedFilename(name: string): string;
+//# sourceMappingURL=normalizeMaterializedFilename.d.ts.map

package/dist/lib/normalizeMaterializedFilename.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.d.ts","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkClE"}

package/dist/lib/normalizeMaterializedFilename.js

@@ -0,0 +1,56 @@
+/**
+ * normalizeMaterializedFilename — WP-379 S5b
+ *
+ * Produces a lowercase, slug-friendly filename from an asset name.
+ * Used by resolveProjectionCollision to compare on-disk filenames (which may
+ * have been projected with a non-normalized case) against the canonical
+ * lowercase form that handshake now writes.
+ *
+ * Contract:
+ *   - Output is lowercase.
+ *   - Non-alphanumeric, non-dot characters are replaced with hyphens.
+ *   - Leading dots (hidden-file convention) are stripped.
+ *   - Multiple consecutive hyphens are collapsed to a single hyphen.
+ *   - Leading and trailing hyphens are trimmed.
+ *   - Unicode characters that don't map to ASCII letters/digits are dropped.
+ *   - Idempotent: applying the function twice yields the same result.
+ *   - Empty input → empty output.
+ *
+ * Chain: WP-379 S5b.
+ */
+/**
+ * Normalize a materializedFilename to its canonical lowercase slug form.
+ *
+ * @param name  The raw filename (e.g. "Setup-ProductBrain.mdc").
+ * @returns     The normalized filename (e.g. "setup-productbrain.mdc").
+ */
+export function normalizeMaterializedFilename(name) {
+    if (!name)
+        return '';
+    // 1. Strip leading dots (hidden-file prefix, e.g. ".cursor/rules/.hidden.mdc").
+    //    We only strip a single leading dot cluster at the start of the basename,
+    //    not dots that are part of extensions or internal names.
+    const stripped = name.startsWith('.') ? name.replace(/^\.+/, '') : name;
+    if (!stripped)
+        return '';
+    // 2. Lowercase the entire name (covers ASCII + Unicode basic-latin).
+    const lowered = stripped.toLowerCase();
+    // 3. Normalize Unicode: decompose then remove non-ASCII code points that
+    //    didn't map cleanly (e.g. accented chars become their base form via NFD
+    //    decomposition, then the combining diacritics are removed).
+    //    NFKD decomposes ligatures and compatibility forms as well.
+    const ascii = lowered
+        .normalize('NFKD')
+        .replace(/[̀-ͯ]/g, '') // strip combining diacritics
+        .replace(/[^\x00-\x7F]/g, ''); // drop remaining non-ASCII
+    // 4. Replace any sequence of non-alphanumeric + non-dot characters with a
+    //    single hyphen.  We preserve dots so that ".mdc" and ".md" extensions
+    //    are maintained in the output.
+    const slugged = ascii.replace(/[^a-z0-9.]+/g, '-');
+    // 5. Collapse consecutive hyphens → single hyphen.
+    const collapsed = slugged.replace(/-{2,}/g, '-');
+    // 6. Trim leading and trailing hyphens.
+    const trimmed = collapsed.replace(/^-+|-+$/g, '');
+    return trimmed;
+}
+//# sourceMappingURL=normalizeMaterializedFilename.js.map

package/dist/lib/normalizeMaterializedFilename.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.js","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,gFAAgF;IAChF,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,qEAAqE;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAEvC,yEAAyE;IACzE,4EAA4E;IAC5E,gEAAgE;IAChE,gEAAgE;IAChE,MAAM,KAAK,GAAG,OAAO;SAClB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,6BAA6B;SACnD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAG,2BAA2B;IAE9D,0EAA0E;IAC1E,0EAA0E;IAC1E,mCAAmC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAEnD,mDAAmD;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEjD,wCAAwC;IACxC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAElD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/normalizeMaterializedFilename.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * normalizeMaterializedFilename unit tests — WP-379 S5b.
+ *
+ * Contract assertions:
+ *   - Setup-ProductBrain.mdc → setup-productbrain.mdc
+ *   - Already-normalized input is idempotent
+ *   - Unicode chars that map to ASCII (via NFKD) retain base form; others dropped
+ *   - Leading dot stripped; file is otherwise preserved
+ *   - Empty input returns empty string
+ *   - Extension dots are preserved
+ *   - Non-alphanumeric sequences → single hyphen
+ *
+ * Chain: WP-379 S5b.
+ */
+export {};
+//# sourceMappingURL=normalizeMaterializedFilename.test.d.ts.map

package/dist/lib/normalizeMaterializedFilename.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMaterializedFilename.test.d.ts","sourceRoot":"","sources":["../../src/lib/normalizeMaterializedFilename.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}