@productbrain/cli 0.1.0-beta.55 → 0.1.0-beta.5504

package/dist/lib/sessionBinding.js

@@ -0,0 +1,125 @@
+/**
+ * Session binding identity — "is this session still pointed at the same Chain?"
+ *
+ * Lives outside commands/session.ts, which is grandfathered shrink-only (STD-2 / DEC-1504),
+ * and outside config.ts for the same reason. Pure and offline by construction: `process.env` and
+ * the stored marker, never a file and never the network — so the deliberately offline
+ * already-active session path (WP-696) can call it.
+ *
+ * It fingerprints the CREDENTIAL, always. An earlier version keyed a preview binding on its
+ * workspace NAME so a reseed would not read as a switch — that was unsound twice over (Codex r6
+ * P1, r8 P1): an exported key outranks the preview binding, and `seed-preview.mjs` hardcodes the
+ * name `Preview Workspace` while deliberately orphaning a stale workspace in the SAME deployment,
+ * so two genuinely different workspaces shared one fingerprint. The reseed nuisance it was buying
+ * — one extra session restart — is not worth trading a safety property for. Fail safe.
+ */
+import { createHash } from 'crypto';
+import { CLIError, ErrorCode } from './errors.js';
+import { DEFAULT_SITE_URL } from './constants.js';
+/**
+ * One-way digest of the credential + gateway currently bound, or undefined when nothing is.
+ *
+ * By the time this runs, `getConfigOrGuide()` has already called `loadEnv()`, so `process.env`
+ * holds the credential that actually WON — whatever supplied it (export, pin, profile, preview).
+ * That is exactly the property wanted here: the fingerprint moves whenever the effective binding
+ * moves, without this module having to know which source produced it.
+ *
+ * Head-truncated to 16 hex chars: this value is only ever COMPARED, so keeping more would store
+ * more of a secret than the job needs. Never the key itself, never sent anywhere.
+ */
+export function fingerprintBinding() {
+    const key = process.env.PRODUCTBRAIN_API_KEY;
+    return key ? fingerprintOf(key, process.env.CONVEX_SITE_URL) : undefined;
+}
+/**
+ * The digest itself, taken as arguments rather than read from the environment.
+ *
+ * Split out so the hashing rules can be tested WITHOUT mutating `process.env`: vitest runs test
+ * files in parallel inside shared workers, so a test that deletes `PRODUCTBRAIN_API_KEY` to set up
+ * a case yanks it out from under whatever unrelated file is running beside it (observed live —
+ * it broke the handshake suite while passing on its own).
+ */
+export function fingerprintOf(key, gateway) {
+    // Strip the trailing slash exactly as getConfigOrGuide()/loadEnv() do before using the URL.
+    // Without this, `https://x/` and `https://x` — the SAME effective endpoint — hash differently,
+    // and a session started under one form is spuriously discarded under the other (Codex P2 r2).
+    // Resolve the SAME way getConfigOrGuide() does — absent means DEFAULT_SITE_URL, not "no
+    // gateway". Hashing '' for the absent case made an explicit export of that exact default look
+    // like a different endpoint, discarding a valid session for no reason (Codex P2 r3).
+    const normalized = (gateway ?? DEFAULT_SITE_URL).replace(/\/$/, '');
+    return createHash('sha256').update(`${key} ${normalized}`).digest('hex').slice(0, 16);
+}
+/**
+ * Has the workspace this session was started against changed underneath it?
+ *
+ * TWO signals, because neither alone is sufficient:
+ *
+ *  - **Profile name** (TEN-2163, the original backstop) — catches `pb profile use`, a preview
+ *    flip, a pin edit. Blind to a raw exported `PRODUCTBRAIN_API_KEY`, which carries no profile
+ *    name at all: repoint that key at another workspace and the name never moves, so the session
+ *    stayed "already active" while every write went to a foreign Chain (TEN-3240).
+ *  - **Binding fingerprint** (TEN-3240) — catches exactly that, because it tracks the credential
+ *    rather than a name for it.
+ *
+ * Either firing is enough. Both comparisons are skipped when one side is absent, which is what
+ * keeps a session marker written BEFORE `bindingFingerprint` existed on the original name-only
+ * behaviour instead of being discarded on every start.
+ */
+export function bindingChanged(existing, current) {
+    const profileSwitched = Boolean(existing.profile && current.profile && existing.profile !== current.profile);
+    const credentialSwitched = Boolean(existing.bindingFingerprint && current.fingerprint && existing.bindingFingerprint !== current.fingerprint);
+    // MIGRATION BACKSTOP. A marker written before `bindingFingerprint` existed cannot be compared on
+    // the credential at all, so there is no evidence its workspace is unchanged — and a
+    // cross-workspace session survived the upgrade (Codex P1 r7, r8).
+    //
+    // A matching profile NAME is not that evidence, tempting as it looks: `pb connect` can overwrite
+    // an existing profile's credentials in place (connect.ts), so one name can point at two
+    // workspaces over time (Codex P1 r13). Treating it as proof was an escape hatch that could be
+    // wrong; without it the rule is both simpler and stricter.
+    //
+    // So it fails CLOSED, always: an unnecessary re-start costs one kernel call, once, while a
+    // missed switch costs a wrong-Chain write. It cannot fire on a marker this version wrote —
+    // those always carry a fingerprint — so it retires itself as old markers roll over.
+    const unprovable = !existing.bindingFingerprint && Boolean(current.fingerprint);
+    return profileSwitched || credentialSwitched || unprovable;
+}
+/**
+ * Refuse a session-attributed write whose credential has MOVED since the session opened.
+ *
+ * `pb session start`'s switch-backstop is not the only door (Codex P1 r9): an operator can
+ * repoint an exported PRODUCTBRAIN_API_KEY and then run `pb capture` / `relate` / `update`
+ * directly, never re-running start. The marker still names the old workspace while the gateway
+ * derives the new one from the key (BR-18) — a cross-workspace write with a stale session id.
+ *
+ * Compares the fingerprint only: `getConfig()` above has already resolved the credential into
+ * `process.env`, so this is arithmetic on values already in hand — no file, no network, on the
+ * hot path of every write. Markers written before the field existed carry no fingerprint and are
+ * skipped, exactly as the session-start backstop skips them.
+ */
+export function assertSessionStillBound(session, 
+// Injectable for the same reason `fingerprintOf` takes arguments: a test must not mutate the
+// shared process env to set this up (see that function's note).
+current = fingerprintBinding(), 
+// WP-711/712: names the tenant CURRENTLY in play, for the refusal message only. A thunk, not
+// a plain value — resolving it (e.g. via config.ts's resolveEffectiveProfile) can mean a local
+// file read, and this function stays pure/offline on every PASSING call by invoking it only
+// once it has already decided to refuse. Never called when nothing is bound or the two agree.
+describeCurrent) {
+    // Nothing bound, or a match: nothing to object to.
+    if (!session || !current || current === session.bindingFingerprint)
+        return;
+    // Falling through means either the fingerprints DISAGREE, or the marker carries none at all.
+    // A marker without one predates the field, so nothing can prove it still targets the workspace
+    // this credential belongs to — the same reasoning `bindingChanged` uses, and now the same answer
+    // (Codex P1 r15). Letting that through was the bigger hole of the two: `pb relate` sends no
+    // session id, so nothing downstream re-checks. `pb session start` restarts it once and stamps a
+    // fingerprint, after which this never fires again.
+    const expected = session.workspaceName || session.profile || "the session's workspace";
+    const found = describeCurrent?.() || 'a different, unrecorded workspace';
+    throw new CLIError(`The workspace credential changed after this session started — expected "${expected}", found "${found}" — so this call would land in a different workspace than the session belongs to.`, {
+        code: ErrorCode.SESSION_REQUIRED,
+        category: 'session',
+        guidance: 'Run `pb session start` to open a session against the current workspace.',
+    });
+}
+//# sourceMappingURL=sessionBinding.js.map

package/dist/lib/sessionBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionBinding.js","sourceRoot":"","sources":["../../src/lib/sessionBinding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7C,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAA2B;IACpE,4FAA4F;IAC5F,+FAA+F;IAC/F,8FAA8F;IAC9F,wFAAwF;IACxF,8FAA8F;IAC9F,qFAAqF;IACrF,MAAM,UAAU,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA8D,EAC9D,OAAoE;IAEpE,MAAM,eAAe,GAAG,OAAO,CAC7B,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAC5E,CAAC;IACF,MAAM,kBAAkB,GAAG,OAAO,CAChC,QAAQ,CAAC,kBAAkB,IAAI,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,kBAAkB,KAAK,OAAO,CAAC,WAAW,CAC1G,CAAC;IACF,iGAAiG;IACjG,oFAAoF;IACpF,kEAAkE;IAClE,EAAE;IACF,iGAAiG;IACjG,wFAAwF;IACxF,8FAA8F;IAC9F,2DAA2D;IAC3D,EAAE;IACF,2FAA2F;IAC3F,2FAA2F;IAC3F,oFAAoF;IACpF,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChF,OAAO,eAAe,IAAI,kBAAkB,IAAI,UAAU,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAyF;AACzF,6FAA6F;AAC7F,gEAAgE;AAChE,UAA8B,kBAAkB,EAAE;AAClD,6FAA6F;AAC7F,+FAA+F;AAC/F,4FAA4F;AAC5F,8FAA8F;AAC9F,eAA0C;IAE1C,mDAAmD;IACnD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,OAAO,CAAC,kBAAkB;QAAE,OAAO;IAC3E,6FAA6F;IAC7F,+FAA+F;IAC/F,iGAAiG;IACjG,4FAA4F;IAC5F,gGAAgG;IAChG,mDAAmD;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,IAAI,yBAAyB,CAAC;IACvF,MAAM,KAAK,GAAG,eAAe,EAAE,EAAE,IAAI,mCAAmC,CAAC;IACzE,MAAM,IAAI,QAAQ,CAChB,2EAA2E,QAAQ,aAAa,KAAK,mFAAmF,EACxL;QACE,IAAI,EAAE,SAAS,CAAC,gBAAgB;QAChC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,yEAAyE;KACpF,CACF,CAAC;AACJ,CAAC"}

package/dist/lib/sessionNotices.d.ts

@@ -0,0 +1,57 @@
+export interface SessionNoticeAction {
+    verb: string;
+    args: Record<string, string | number | boolean | null>;
+    /** Optional, additive — the original §3.9a verb label, when the route alone is ambiguous
+     *  (convex/lib/notices/types.ts's NoticeAction.label doc comment). */
+    label?: string;
+}
+/** WP-638 S4 (§7.5 of the routed-questions design spec) — one bounded onboarding brief inside a
+ *  question notice's `payload.questions` array. Mirrors convex/lib/notices/types.ts's
+ *  `NoticeQuestionBrief` (the CLI-side twin every notice-payload type carries, HARD CONSTRAINT 2). */
+export interface SessionNoticeQuestionBrief {
+    name: string;
+    question: string;
+    asker: string;
+    sourcePointer: string;
+    domain: string;
+    whyYou: string;
+    ageDays: number;
+    dependents: {
+        count: number;
+        truncated?: boolean;
+        named: {
+            name: string;
+            id: string;
+        }[];
+    };
+    declineContext?: string;
+    answerContext?: string;
+    actions: SessionNoticeAction[];
+}
+export interface SessionNotice {
+    source: string;
+    type: string;
+    severity: 'none' | 'advisory' | 'warning' | 'emergency';
+    subject: string;
+    change: string;
+    occurredAt: number;
+    action: SessionNoticeAction;
+    /** WP-638 S4 (§7.5, R23) — the Notice-contract extension, additive/optional. */
+    payload?: {
+        questions: SessionNoticeQuestionBrief[];
+        truncated?: boolean;
+    };
+    requiresDisposition?: boolean;
+    actions?: SessionNoticeAction[];
+}
+export declare function noticeCommand(action: SessionNoticeAction): string;
+/** WP-638 S4 (§10.3) — the bounded adopt-discovery advisory line. `display` is the server's own
+ *  pre-formatted count ("3" or, at the scan cap, "20+") — silence when absent (the server omits
+ *  the field entirely at zero, never sends "0"). */
+export declare function formatAdoptDiscoveryLine(display: string | undefined): string[];
+/** One line per notice, oldest first (server already sorts producers' output this way) — except
+ *  the question-ack-gate notice, which renders §7.5's full multi-line block instead of the
+ *  generic one-liner (R23: the Notice-contract extension is additive, so every OTHER producer's
+ *  one-liner is untouched). */
+export declare function formatSessionNoticeLines(notices: readonly SessionNotice[] | undefined): string[];
+//# sourceMappingURL=sessionNotices.d.ts.map

package/dist/lib/sessionNotices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionNotices.d.ts","sourceRoot":"","sources":["../../src/lib/sessionNotices.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IACvD;0EACsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;sGAEsG;AACtG,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,gFAAgF;IAChF,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3E,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACjC;AA4BD,wBAAgB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAMjE;AAkED;;oDAEoD;AACpD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAG9E;AAED;;;+BAG+B;AAC/B,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAWhG"}

package/dist/lib/sessionNotices.js

@@ -0,0 +1,128 @@
+/**
+ * FEAT-1409 spine core — CLI rendering of the channel-agnostic session-start notice contract
+ * (convex/lib/notices/types.ts's `Notice`). Convex never renders a notice; this file owns the
+ * ONLY CLI-side mapping from a notice's neutral `action.verb` to a runnable `pb` command
+ * string (HARD CONSTRAINT 2 — no surface syntax in Convex).
+ *
+ * Distinct from `./notice-marker.ts`, which throttles the unrelated CLI version-update banner —
+ * do not conflate the two "notice" concepts.
+ */
+import { stripControlChars } from './strip.js';
+/**
+ * verb -> the exact `pb` command a person can copy-paste to act on the notice. `feedback.list`
+ * (S1, feedback-status) and `feedback.queue` (S4/TEN-2971, feedback-queue — the vendor triage
+ * standing notice replacing the legacy plain-text hint) both point at already-shipped commands
+ * — HARD CONSTRAINT 10, no new gateway route. Unrecognized verbs fall back to the raw verb
+ * string rather than throwing — a forward-compat seam for a producer landing before its CLI
+ * mapping does.
+ *
+ * WP-638 S4 (R24 — moved here from S5 so the mapping ships in the slice whose doneWhen quotes
+ * it, §16.2 S4(j)): the eight routed-question verbs. `question.list` also gets an entry for
+ * completeness even though the ack-gate block below renders its own paste-ready `answer` command
+ * per row rather than this generic mapping.
+ */
+const VERB_COMMANDS = {
+    'feedback.list': 'pb feedback list',
+    'feedback.queue': 'pb feedback queue',
+    'question.create': 'pb question create "<text>"',
+    'question.adopt': 'pb question adopt <id>',
+    'question.assign': 'pb question assign <id>',
+    'question.snooze': 'pb question snooze <id>',
+    'question.decline': 'pb question decline <id> --reason "<why>"',
+    'question.answer': 'pb question answer <id> "<your answer>"',
+    'question.forceClose': 'pb question force-close <id> --reason "<why>"',
+    'question.list': 'pb question list',
+};
+export function noticeCommand(action) {
+    const template = VERB_COMMANDS[action.verb] ?? action.verb;
+    // Review finding: the outcomes producer's asker-arm action carries `{ mine: true }` (§7.3(a))
+    // so the reader lands on their OWN history, not the ack-gate obligation view (which excludes
+    // exactly the processed question the notice is about) — the generic template must reflect it.
+    return action.verb === 'question.list' && action.args?.mine === true ? `${template} --mine` : template;
+}
+const QUESTION_ACK_GATE_SOURCE_ID = 'question-ack-gate';
+/**
+ * §7.5's verbatim block — the ack-gate producer's own render. Fixed elements, in order: the
+ * count, the phrase "need you before you continue", one line per question (id/text/reason/age),
+ * the matrix-derived verb list (already resolved server-side onto each brief's `actions`), one
+ * ready-to-paste `answer` command, and the canonical closing sentence — quoted identically
+ * everywhere it appears (§7.5/§10/§16.2 S4(f)).
+ */
+/** verb (as it appears in a §3.9a display list, e.g. "take it") from the neutral gateway route
+ *  name a brief's own `actions` carry — the inverse direction of `questionVerbToRoute`
+ *  (convex/lib/questionDisplayStrings.ts), kept here since only the RENDERER needs the display
+ *  label back from the route. */
+function displayVerbFromRoute(route) {
+    switch (route) {
+        case 'question.assign': return 'take it / reassign';
+        case 'question.decline': return 'pass / decline';
+        case 'question.forceClose': return 'force-close';
+        default: return route.replace(/^question\./, '');
+    }
+}
+/** Sanitizes every workspace-controlled string a question brief carries before it reaches the
+ *  terminal — matches `formatters/questions.ts`'s own `singleLine` control-char stripping. */
+function safe(text) {
+    return text ? stripControlChars(text).replace(/\s+/g, ' ').trim() : '';
+}
+function formatQuestionBrief(q) {
+    const lines = [];
+    lines.push(`  • [${safe(q.sourcePointer)}] ${safe(q.name)}  — ${safe(q.whyYou)}, ${q.ageDays}d`);
+    lines.push(`      "${safe(q.question)}" — asked by ${safe(q.asker)}${q.domain ? `, ${safe(q.domain)} domain` : ''}`);
+    if (q.dependents.count > 0) {
+        const names = q.dependents.named.map((d) => `${safe(d.name)} (${safe(d.id)})`).join(', ');
+        const countLabel = q.dependents.truncated ? `${q.dependents.count}+` : String(q.dependents.count);
+        lines.push(`      blocks ${countLabel} item(s)${names ? `: ${names}` : ''}`);
+    }
+    if (q.declineContext)
+        lines.push(`      declined: ${safe(q.declineContext)}`);
+    if (q.answerContext)
+        lines.push(`      ${safe(q.answerContext)}`);
+    // Review finding: reconstructing the display verb from the route alone is lossy — 'take it'
+    // and 'reassign' share `question.assign`, 'pass' and 'decline' share `question.decline` — so
+    // prefer the server's own `label` (the actual §3.9a verb legal for THIS row) and fall back to
+    // the route-derived guess only for an older/unlabeled action.
+    const verbList = [...new Set(q.actions.map((a) => safe(a.label) || displayVerbFromRoute(a.verb)))].join(' · ') || 'answer';
+    lines.push(`      ${verbList}  →  pb question answer ${safe(q.sourcePointer)} "<your answer>"`);
+    return lines;
+}
+function formatQuestionAckGateBlock(notice) {
+    const questions = notice.payload?.questions ?? [];
+    const lines = [];
+    const icon = notice.severity === 'emergency' ? '⚠' : notice.severity === 'warning' ? '⚠' : 'ℹ';
+    lines.push(`${icon} ${questions.length} open question${questions.length === 1 ? '' : 's'} need you before you continue.`);
+    for (const q of questions)
+        lines.push(...formatQuestionBrief(q));
+    lines.push('  Deal with each question above before proceeding.');
+    // Review finding: the scan behind this block is honestly capped — disclose it as an ADDITIONAL
+    // line rather than silently presenting a capped set as the complete obligation (§7.5's fixed
+    // elements, including the canonical closing sentence above, stay untouched).
+    if (notice.payload?.truncated) {
+        lines.push('  (This list may be incomplete — you may have more open questions than shown.)');
+    }
+    return lines;
+}
+/** WP-638 S4 (§10.3) — the bounded adopt-discovery advisory line. `display` is the server's own
+ *  pre-formatted count ("3" or, at the scan cap, "20+") — silence when absent (the server omits
+ *  the field entirely at zero, never sends "0"). */
+export function formatAdoptDiscoveryLine(display) {
+    if (!display)
+        return [];
+    return [`ℹ ${display} open question${display === '1' ? '' : 's'} you raised have no owner yet — \`pb question adopt <id>\` routes one.`];
+}
+/** One line per notice, oldest first (server already sorts producers' output this way) — except
+ *  the question-ack-gate notice, which renders §7.5's full multi-line block instead of the
+ *  generic one-liner (R23: the Notice-contract extension is additive, so every OTHER producer's
+ *  one-liner is untouched). */
+export function formatSessionNoticeLines(notices) {
+    if (!notices || notices.length === 0)
+        return [];
+    return notices.flatMap((n) => n.source === QUESTION_ACK_GATE_SOURCE_ID && n.payload
+        ? formatQuestionAckGateBlock(n)
+        // Review finding: the generic one-liner interpolated `subject`/`change` raw — the
+        // outcomes producer (questionOutcomesProducer.ts) builds these from workspace-controlled
+        // text (decline/force-close reasons, person and dependent-entry names) with no upstream
+        // sanitization, so this was the one remaining un-sanitized terminal-write path.
+        : [`  • ${safe(n.subject)} (${safe(n.change)}) — ${noticeCommand(n.action)}`]);
+}
+//# sourceMappingURL=sessionNotices.js.map

package/dist/lib/sessionNotices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionNotices.js","sourceRoot":"","sources":["../../src/lib/sessionNotices.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAyC/C;;;;;;;;;;;;GAYG;AACH,MAAM,aAAa,GAA2B;IAC5C,eAAe,EAAE,kBAAkB;IACnC,gBAAgB,EAAE,mBAAmB;IACrC,iBAAiB,EAAE,6BAA6B;IAChD,gBAAgB,EAAE,wBAAwB;IAC1C,iBAAiB,EAAE,yBAAyB;IAC5C,iBAAiB,EAAE,yBAAyB;IAC5C,kBAAkB,EAAE,2CAA2C;IAC/D,iBAAiB,EAAE,yCAAyC;IAC5D,qBAAqB,EAAE,+CAA+C;IACtE,eAAe,EAAE,kBAAkB;CACpC,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,MAA2B;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;IAC3D,8FAA8F;IAC9F,6FAA6F;IAC7F,8FAA8F;IAC9F,OAAO,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACzG,CAAC;AAED,MAAM,2BAA2B,GAAG,mBAAmB,CAAC;AAExD;;;;;;GAMG;AACH;;;iCAGiC;AACjC,SAAS,oBAAoB,CAAC,KAAa;IACzC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,iBAAiB,CAAC,CAAC,OAAO,oBAAoB,CAAC;QACpD,KAAK,kBAAkB,CAAC,CAAC,OAAO,gBAAgB,CAAC;QACjD,KAAK,qBAAqB,CAAC,CAAC,OAAO,aAAa,CAAC;QACjD,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED;8FAC8F;AAC9F,SAAS,IAAI,CAAC,IAAwB;IACpC,OAAO,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,mBAAmB,CAAC,CAA6B;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrH,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClG,KAAK,CAAC,IAAI,CAAC,gBAAgB,UAAU,WAAW,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAClE,4FAA4F;IAC5F,6FAA6F;IAC7F,8FAA8F;IAC9F,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC;IAC3H,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,2BAA2B,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAqB;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/F,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC,MAAM,iBAAiB,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,gCAAgC,CAAC,CAAC;IAC1H,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACjE,+FAA+F;IAC/F,6FAA6F;IAC7F,6EAA6E;IAC7E,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;oDAEoD;AACpD,MAAM,UAAU,wBAAwB,CAAC,OAA2B;IAClE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,CAAC,KAAK,OAAO,iBAAiB,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,wEAAwE,CAAC,CAAC;AAC3I,CAAC;AAED;;;+BAG+B;AAC/B,MAAM,UAAU,wBAAwB,CAAC,OAA6C;IACpF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3B,CAAC,CAAC,MAAM,KAAK,2BAA2B,IAAI,CAAC,CAAC,OAAO;QACnD,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC/B,kFAAkF;QAClF,yFAAyF;QACzF,wFAAwF;QACxF,gFAAgF;QAChF,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAChF,CAAC;AACJ,CAAC"}

package/dist/lib/sessionNotices.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sessionNotices.test.d.ts.map

package/dist/lib/sessionNotices.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionNotices.test.d.ts","sourceRoot":"","sources":["../../src/lib/sessionNotices.test.ts"],"names":[],"mappings":""}

package/dist/lib/sessionNotices.test.js

@@ -0,0 +1,48 @@
+import { describe, expect, it } from 'vitest';
+import { noticeCommand, formatSessionNoticeLines } from './sessionNotices.js';
+function notice(overrides = {}) {
+    return {
+        source: 'feedback-status',
+        type: 'feedback.status.resolved',
+        severity: 'advisory',
+        subject: 'Your feedback was resolved',
+        change: 'status -> resolved',
+        occurredAt: 1_000,
+        action: { verb: 'feedback.list', args: {} },
+        ...overrides,
+    };
+}
+describe('noticeCommand — verb -> pb command mapping', () => {
+    it('maps the shipped feedback.list verb to the exact pb feedback list command', () => {
+        expect(noticeCommand({ verb: 'feedback.list', args: {} })).toBe('pb feedback list');
+    });
+    it('maps the S4/TEN-2971 feedback.queue verb to the exact pb feedback queue command', () => {
+        expect(noticeCommand({ verb: 'feedback.queue', args: {} })).toBe('pb feedback queue');
+    });
+    it('falls back to the raw verb for an unmapped verb (forward-compat seam)', () => {
+        expect(noticeCommand({ verb: 'future.verb', args: {} })).toBe('future.verb');
+    });
+});
+describe('formatSessionNoticeLines', () => {
+    it('returns [] for undefined/empty notices', () => {
+        expect(formatSessionNoticeLines(undefined)).toEqual([]);
+        expect(formatSessionNoticeLines([])).toEqual([]);
+    });
+    it('renders one line per notice with subject, change, and the mapped command', () => {
+        const lines = formatSessionNoticeLines([notice()]);
+        expect(lines).toHaveLength(1);
+        expect(lines[0]).toContain('Your feedback was resolved');
+        expect(lines[0]).toContain('status -> resolved');
+        expect(lines[0]).toContain('pb feedback list');
+    });
+    it('renders multiple notices in the order given', () => {
+        const lines = formatSessionNoticeLines([
+            notice({ subject: 'First' }),
+            notice({ subject: 'Second' }),
+        ]);
+        expect(lines).toHaveLength(2);
+        expect(lines[0]).toContain('First');
+        expect(lines[1]).toContain('Second');
+    });
+});
+//# sourceMappingURL=sessionNotices.test.js.map

package/dist/lib/sessionNotices.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionNotices.test.js","sourceRoot":"","sources":["../../src/lib/sessionNotices.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAsB,MAAM,qBAAqB,CAAC;AAElG,SAAS,MAAM,CAAC,YAAoC,EAAE;IACpD,OAAO;QACL,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,oBAAoB;QAC5B,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE;QAC3C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,KAAK,GAAG,wBAAwB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,KAAK,GAAG,wBAAwB,CAAC;YACrC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/spinner.js

@@ -9,14 +9,14 @@
  *
  * Uses raw ANSI escape codes to stay consistent with style.ts (no @clack dependency).
  */
-import { isQuietMode, isJsonMode } from './runner.js';
+import { isQuietMode, isJsonMode, areSpinnersSilenced } from './runner.js';
 import { green, red, icons } from './style.js';
 const SPINNER_FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];
 const FRAME_INTERVAL_MS = 80;
 const DELAYED_START_MS = 200;
 /** Returns true if spinner output should be suppressed. */
 function isSilent() {
-    return !process.stdout.isTTY || isQuietMode() || isJsonMode();
+    return !process.stdout.isTTY || isQuietMode() || isJsonMode() || areSpinnersSilenced();
 }
 /**
  * Run an async function with a contextual spinner.

package/dist/lib/spinner.js.map

@@ -1 +1 @@
-{"version":3,"file":"spinner.js","sourceRoot":"","sources":["../../src/lib/spinner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1E,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,2DAA2D;AAC3D,SAAS,QAAQ;IACf,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,WAAW,EAAE,IAAI,UAAU,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,EAAoB,EACpB,OAAqC;IAErC,yCAAyC;IACzC,IAAI,QAAQ,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,eAA2D,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,uBAAuB;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,OAAO,GAAG,IAAI,CAAC;QACf,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACjE,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YAC3B,UAAU,EAAE,CAAC;QACf,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,2DAA2D;IAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,eAAe;YAAE,aAAa,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC;YAC7C,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,eAAe;YAAE,aAAa,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"spinner.js","sourceRoot":"","sources":["../../src/lib/spinner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1E,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,2DAA2D;AAC3D,SAAS,QAAQ;IACf,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,WAAW,EAAE,IAAI,UAAU,EAAE,IAAI,mBAAmB,EAAE,CAAC;AACzF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,EAAoB,EACpB,OAAqC;IAErC,yCAAyC;IACzC,IAAI,QAAQ,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,eAA2D,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,uBAAuB;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,OAAO,GAAG,IAAI,CAAC;QACf,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACjE,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YAC3B,UAAU,EAAE,CAAC;QACf,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,2DAA2D;IAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,eAAe;YAAE,aAAa,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC;YAC7C,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,eAAe;YAAE,aAAa,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/lib/startup-resolution-signals.d.ts

@@ -0,0 +1,34 @@
+export { STARTUP_RESOLUTION_SIGNAL_SOURCE_SURFACES, type StartupResolutionSourceSurface, } from '../generated/sourceSurfaces.generated.js';
+import { type StartupResolutionSourceSurface } from '../generated/sourceSurfaces.generated.js';
+export declare const STARTUP_RESOLUTION_SIGNAL_FIELDS: readonly ["taskText", "explicitScope", "changedPaths", "reviewedArtifactRefs", "branchName", "worktreeName", "sourceSurface", "resolverVersion", "changeId", "commitSha"];
+export declare const STARTUP_RESOLUTION_SIGNAL_LIMITS: {
+    readonly arrayCaps: {
+        readonly changedPaths: 25;
+        readonly reviewedArtifactRefs: 25;
+    };
+    readonly stringCaps: {
+        readonly taskText: 500;
+        readonly explicitScope: 120;
+        readonly path: 240;
+        readonly artifactRef: 120;
+        readonly branchName: 120;
+        readonly worktreeName: 120;
+        readonly resolverVersion: 80;
+        readonly changeId: 120;
+        readonly commitSha: 80;
+    };
+};
+export type StartupResolutionSignals = {
+    taskText?: string | null;
+    explicitScope?: string | null;
+    changedPaths?: string[];
+    reviewedArtifactRefs?: string[];
+    branchName?: string | null;
+    worktreeName?: string | null;
+    sourceSurface?: StartupResolutionSourceSurface | string;
+    resolverVersion?: string;
+    changeId?: string | null;
+    commitSha?: string | null;
+};
+export declare function sanitizeStartupResolutionSignals(input: Partial<StartupResolutionSignals>): StartupResolutionSignals;
+//# sourceMappingURL=startup-resolution-signals.d.ts.map

package/dist/lib/startup-resolution-signals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-resolution-signals.d.ts","sourceRoot":"","sources":["../../src/lib/startup-resolution-signals.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,yCAAyC,EACzC,KAAK,8BAA8B,GACpC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,0CAA0C,CAAC;AAElD,eAAO,MAAM,gCAAgC,2KAWnC,CAAC;AAEX,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;CAgBnC,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,8BAA8B,GAAG,MAAM,CAAC;IACxD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAgDF,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,wBAAwB,CAgCnH"}

package/dist/lib/startup-resolution-signals.js

@@ -0,0 +1,116 @@
+// GENERATED (packages/cli/src/generated/sourceSurfaces.generated.ts, from the kernel SSOT
+// kernel/telemetry/contextServed.ts) — this symbol is a RUNTIME const read by
+// sanitizeSourceSurface below, so it cannot be type-erased; see the generator header for why
+// this is a machine-generated copy rather than an import.
+export { STARTUP_RESOLUTION_SIGNAL_SOURCE_SURFACES, } from '../generated/sourceSurfaces.generated.js';
+import { STARTUP_RESOLUTION_SIGNAL_SOURCE_SURFACES, } from '../generated/sourceSurfaces.generated.js';
+export const STARTUP_RESOLUTION_SIGNAL_FIELDS = [
+    'taskText',
+    'explicitScope',
+    'changedPaths',
+    'reviewedArtifactRefs',
+    'branchName',
+    'worktreeName',
+    'sourceSurface',
+    'resolverVersion',
+    'changeId',
+    'commitSha',
+];
+export const STARTUP_RESOLUTION_SIGNAL_LIMITS = {
+    arrayCaps: {
+        changedPaths: 25,
+        reviewedArtifactRefs: 25,
+    },
+    stringCaps: {
+        taskText: 500,
+        explicitScope: 120,
+        path: 240,
+        artifactRef: 120,
+        branchName: 120,
+        worktreeName: 120,
+        resolverVersion: 80,
+        changeId: 120,
+        commitSha: 80,
+    },
+};
+function sanitizeString(value, max) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    return trimmed.slice(0, max);
+}
+function sanitizePath(value) {
+    const trimmed = sanitizeString(value, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.path);
+    if (!trimmed)
+        return undefined;
+    const normalized = trimmed.replace(/\\/g, '/').replace(/\/+/g, '/');
+    if (normalized.startsWith('/') || normalized === '~' || normalized.startsWith('~/'))
+        return undefined;
+    const parts = normalized.split('/').filter((part) => part && part !== '.');
+    if (parts.length === 0 || parts.includes('..'))
+        return undefined;
+    const lowerParts = parts.map((part) => part.toLowerCase());
+    if (lowerParts.some((part) => part === '.env' || part.startsWith('.env.') || part.includes('secret') || part.includes('token'))) {
+        return undefined;
+    }
+    return parts.join('/');
+}
+function sanitizeStringArray(values, cap, max, sanitizer = sanitizeString) {
+    if (!Array.isArray(values))
+        return undefined;
+    const out = [];
+    for (const value of values) {
+        const sanitized = sanitizer(value, max);
+        if (!sanitized)
+            continue;
+        out.push(sanitized);
+        if (out.length >= cap)
+            break;
+    }
+    return out.length > 0 ? out : undefined;
+}
+function sanitizeSourceSurface(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const normalized = value.trim().toLowerCase();
+    return STARTUP_RESOLUTION_SIGNAL_SOURCE_SURFACES.includes(normalized)
+        ? normalized
+        : undefined;
+}
+export function sanitizeStartupResolutionSignals(input) {
+    const out = {};
+    const taskText = sanitizeString(input.taskText, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.taskText);
+    if (taskText)
+        out.taskText = taskText;
+    const explicitScope = sanitizeString(input.explicitScope, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.explicitScope);
+    if (explicitScope)
+        out.explicitScope = explicitScope;
+    const changedPaths = sanitizeStringArray(input.changedPaths, STARTUP_RESOLUTION_SIGNAL_LIMITS.arrayCaps.changedPaths, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.path, (value) => sanitizePath(value));
+    if (changedPaths)
+        out.changedPaths = changedPaths;
+    const reviewedArtifactRefs = sanitizeStringArray(input.reviewedArtifactRefs, STARTUP_RESOLUTION_SIGNAL_LIMITS.arrayCaps.reviewedArtifactRefs, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.artifactRef);
+    if (reviewedArtifactRefs)
+        out.reviewedArtifactRefs = reviewedArtifactRefs;
+    const branchName = sanitizeString(input.branchName, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.branchName);
+    if (branchName)
+        out.branchName = branchName;
+    const worktreeName = sanitizeString(input.worktreeName, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.worktreeName);
+    if (worktreeName)
+        out.worktreeName = worktreeName;
+    const sourceSurface = sanitizeSourceSurface(input.sourceSurface);
+    if (sourceSurface)
+        out.sourceSurface = sourceSurface;
+    const resolverVersion = sanitizeString(input.resolverVersion, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.resolverVersion);
+    if (resolverVersion)
+        out.resolverVersion = resolverVersion;
+    const changeId = sanitizeString(input.changeId, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.changeId);
+    if (changeId)
+        out.changeId = changeId;
+    const commitSha = sanitizeString(input.commitSha, STARTUP_RESOLUTION_SIGNAL_LIMITS.stringCaps.commitSha);
+    if (commitSha)
+        out.commitSha = commitSha;
+    return out;
+}
+//# sourceMappingURL=startup-resolution-signals.js.map

package/dist/lib/startup-resolution-signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-resolution-signals.js","sourceRoot":"","sources":["../../src/lib/startup-resolution-signals.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,8EAA8E;AAC9E,6FAA6F;AAC7F,0DAA0D;AAC1D,OAAO,EACL,yCAAyC,GAE1C,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,yCAAyC,GAE1C,MAAM,0CAA0C,CAAC;AAElD,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,UAAU;IACV,eAAe;IACf,cAAc;IACd,sBAAsB;IACtB,YAAY;IACZ,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,UAAU;IACV,WAAW;CACH,CAAC;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,SAAS,EAAE;QACT,YAAY,EAAE,EAAE;QAChB,oBAAoB,EAAE,EAAE;KACzB;IACD,UAAU,EAAE;QACV,QAAQ,EAAE,GAAG;QACb,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,GAAG;QAChB,UAAU,EAAE,GAAG;QACf,YAAY,EAAE,GAAG;QACjB,eAAe,EAAE,EAAE;QACnB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,EAAE;KACd;CACO,CAAC;AAeX,SAAS,cAAc,CAAC,KAAc,EAAE,GAAW;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,gCAAgC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtG,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAChI,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAe,EACf,GAAW,EACX,GAAW,EACX,YAAiE,cAAc;IAE/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,yCAAyC,CAAC,QAAQ,CAAC,UAA4C,CAAC;QACrG,CAAC,CAAE,UAA6C;QAChD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAwC;IACvF,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,gCAAgC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtG,IAAI,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtC,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,gCAAgC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACrH,IAAI,aAAa;QAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;IACrD,MAAM,YAAY,GAAG,mBAAmB,CACtC,KAAK,CAAC,YAAY,EAClB,gCAAgC,CAAC,SAAS,CAAC,YAAY,EACvD,gCAAgC,CAAC,UAAU,CAAC,IAAI,EAChD,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAC/B,CAAC;IACF,IAAI,YAAY;QAAE,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC;IAClD,MAAM,oBAAoB,GAAG,mBAAmB,CAC9C,KAAK,CAAC,oBAAoB,EAC1B,gCAAgC,CAAC,SAAS,CAAC,oBAAoB,EAC/D,gCAAgC,CAAC,UAAU,CAAC,WAAW,CACxD,CAAC;IACF,IAAI,oBAAoB;QAAE,GAAG,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;IAC1E,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,gCAAgC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5G,IAAI,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;IAC5C,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,gCAAgC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAClH,IAAI,YAAY;QAAE,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC;IAClD,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjE,IAAI,aAAa;QAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;IACrD,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,gCAAgC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAC3H,IAAI,eAAe;QAAE,GAAG,CAAC,eAAe,GAAG,eAAe,CAAC;IAC3D,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,gCAAgC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtG,IAAI,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtC,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,gCAAgC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACzG,IAAI,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/startup-resolution-signals.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=startup-resolution-signals.test.d.ts.map

package/dist/lib/startup-resolution-signals.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-resolution-signals.test.d.ts","sourceRoot":"","sources":["../../src/lib/startup-resolution-signals.test.ts"],"names":[],"mappings":""}