@productbrain/cli 0.1.0-beta.6 → 0.1.0-beta.6046

package/dist/lib/conversation-phases.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Conversation types — state and signal types for coach-pattern conversations.
+ * WP-304: LLM owns content, CLI owns flow.
+ *
+ * Pattern: Deterministic Shell, Stochastic Core.
+ * - CLI defines topics with goal/behaviour/criteria (deterministic)
+ * - LLM generates conversation content and judges criteria (stochastic)
+ * - CLI evaluates with heuristic backup and decides when to advance
+ */
+/** A completed topic's question-answer pair, accumulated as context for later topics. */
+export interface TopicQA {
+    topicId: string;
+    question: string;
+    answer: string;
+}
+/** Conversation state — the CLI's accumulated view of the conversation. */
+export interface ConversationState {
+    /** All messages so far. */
+    messages: Array<{
+        role: 'user' | 'assistant';
+        content: string;
+    }>;
+    /** Number of user messages total. */
+    userMessageCount: number;
+    /** Total user words total. */
+    totalUserWords: number;
+    /** Exchange count per topic (coach pattern) or phase (legacy). */
+    topicExchanges: Record<string, number>;
+    /** @deprecated Alias for topicExchanges — used by legacy phase engine until Slice 3. */
+    phaseExchanges: Record<string, number>;
+    /** Which topics have been completed. */
+    completedTopics: Set<string>;
+    /** @deprecated Alias for completedTopics — used by legacy phase engine until Slice 3. */
+    completedPhases: Set<string>;
+    /** Current topic ID. */
+    currentTopicId: string;
+    /** @deprecated Alias for currentTopicId — used by legacy phase engine until Slice 3. */
+    currentPhaseId: string;
+    /** Completed topic Q&A pairs — accumulated context for later topics. */
+    completedQA: TopicQA[];
+    /** Heuristic signals detected from user messages. */
+    signals: ConversationSignals;
+    /** Count of consecutive refusals/non-answers. */
+    refusalStreak: number;
+}
+/** Signals detected from user messages — heuristic + LLM-reported. */
+export interface ConversationSignals {
+    /** User described what they're building. */
+    mentionedProduct: boolean;
+    /** User described a problem, pain point, or challenge. */
+    mentionedChallenge: boolean;
+    /** User mentioned why they're trying Product Brain. */
+    mentionedWhyPB: boolean;
+    /** User gave at least one substantive answer (>= 15 words). */
+    hasSubstantiveAnswer: boolean;
+    /** Number of user messages with >= 8 words. */
+    substantiveMessageCount: number;
+}
+//# sourceMappingURL=conversation-phases.d.ts.map

package/dist/lib/conversation-phases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-phases.d.ts","sourceRoot":"","sources":["../../src/lib/conversation-phases.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yFAAyF;AACzF,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEjE,qCAAqC;IACrC,gBAAgB,EAAE,MAAM,CAAC;IAEzB,8BAA8B;IAC9B,cAAc,EAAE,MAAM,CAAC;IAEvB,kEAAkE;IAClE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvC,wCAAwC;IACxC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,yFAAyF;IACzF,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAE7B,wBAAwB;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAC;IAEvB,wEAAwE;IACxE,WAAW,EAAE,OAAO,EAAE,CAAC;IAEvB,qDAAqD;IACrD,OAAO,EAAE,mBAAmB,CAAC;IAE7B,iDAAiD;IACjD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,4CAA4C;IAC5C,gBAAgB,EAAE,OAAO,CAAC;IAE1B,0DAA0D;IAC1D,kBAAkB,EAAE,OAAO,CAAC;IAE5B,uDAAuD;IACvD,cAAc,EAAE,OAAO,CAAC;IAExB,+DAA+D;IAC/D,oBAAoB,EAAE,OAAO,CAAC;IAE9B,+CAA+C;IAC/C,uBAAuB,EAAE,MAAM,CAAC;CACjC"}

package/dist/lib/conversation-phases.js

@@ -0,0 +1,11 @@
+/**
+ * Conversation types — state and signal types for coach-pattern conversations.
+ * WP-304: LLM owns content, CLI owns flow.
+ *
+ * Pattern: Deterministic Shell, Stochastic Core.
+ * - CLI defines topics with goal/behaviour/criteria (deterministic)
+ * - LLM generates conversation content and judges criteria (stochastic)
+ * - CLI evaluates with heuristic backup and decides when to advance
+ */
+export {};
+//# sourceMappingURL=conversation-phases.js.map

package/dist/lib/conversation-phases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-phases.js","sourceRoot":"","sources":["../../src/lib/conversation-phases.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/lib/conversation-signals.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Conversation signal detection — heuristic pattern matching on user text.
+ * WP-304: CLI-side signal detection as backup/validation for LLM-reported signals.
+ *
+ * These are intentionally loose. False positives advance the conversation
+ * (fine — user gave a relevant answer). False negatives mean one more turn
+ * in the phase (also fine — maxExchanges caps prevent loops).
+ */
+import type { ConversationSignals } from './conversation-phases.js';
+/**
+ * Detect signals from user messages using regex heuristics.
+ * Returns accumulated signals across all user messages.
+ *
+ * Thresholds are intentionally strict — we'd rather ask one more question
+ * than advance on a vague answer. maxExchanges is the safety valve.
+ */
+export declare function detectSignals(messages: Array<{
+    role: string;
+    content: string;
+}>): ConversationSignals;
+/**
+ * Merge LLM-reported signals into heuristic signals.
+ * LLM signals are additive — once true, always true.
+ */
+export declare function mergeSignals(heuristic: ConversationSignals, llmSignals: {
+    describedProduct?: boolean;
+    describedProblem?: boolean;
+    answeredWhyPB?: boolean;
+}): ConversationSignals;
+//# sourceMappingURL=conversation-signals.d.ts.map

package/dist/lib/conversation-signals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-signals.d.ts","sourceRoot":"","sources":["../../src/lib/conversation-signals.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AA4BpE;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,mBAAmB,CAgBrG;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,mBAAmB,EAC9B,UAAU,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9F,mBAAmB,CAOrB"}

package/dist/lib/conversation-signals.js

@@ -0,0 +1,64 @@
+/**
+ * Conversation signal detection — heuristic pattern matching on user text.
+ * WP-304: CLI-side signal detection as backup/validation for LLM-reported signals.
+ *
+ * These are intentionally loose. False positives advance the conversation
+ * (fine — user gave a relevant answer). False negatives mean one more turn
+ * in the phase (also fine — maxExchanges caps prevent loops).
+ */
+const PRODUCT_PATTERNS = [
+    /\b(?:building|making|creating|working on|developing)\b/i,
+    /\b(?:app|platform|tool|product|service|saas|api|system|software)\b/i,
+];
+const CHALLENGE_PATTERNS = [
+    /\b(?:hard|hardest|difficult|challeng|struggling?|pain|problem|frustrat|broken|mess)\b/i,
+    /\b(?:don'?t know|can'?t figure|losing track|forget|lost context|outdated|rot)\b/i,
+    /\b(?:hate|annoying|waste|slow|manual|tedious)\b/i,
+];
+const WHY_PB_PATTERNS = [
+    /\b(?:product brain|brain)\b/i,
+    /\b(?:context|memory|decisions?|knowledge|source of truth|ssot)\b/i,
+    /\b(?:ai|llm|claude|cursor|copilot|agent)\b.*\b(?:context|remember|forget|know)\b/i,
+    /\b(?:remember|forget|consistent|prompt)\b.*\b(?:ai|llm|agent|tool)\b/i,
+    // Broader: user describes the problem PB solves without naming PB
+    /\b(?:re-?explain|repeat myself|start from (?:zero|scratch)|re-?tell)\b/i,
+    /\b(?:docs?|documentation|md files?)\b.*\b(?:outdated|stale|rot|drift|wrong|maintain)\b/i,
+    /\b(?:cost|waste|spend)\b.*\b(?:tokens?|context|time)\b.*\b(?:re-?explain|repeat|maintain)\b/i,
+];
+function countWords(text) {
+    return text.trim().split(/\s+/).filter(Boolean).length;
+}
+/**
+ * Detect signals from user messages using regex heuristics.
+ * Returns accumulated signals across all user messages.
+ *
+ * Thresholds are intentionally strict — we'd rather ask one more question
+ * than advance on a vague answer. maxExchanges is the safety valve.
+ */
+export function detectSignals(messages) {
+    const userMessages = messages.filter((m) => m.role === 'user');
+    return {
+        // Product mention requires BOTH a pattern match AND enough words to be meaningful.
+        // "a cool app" matches the pattern but isn't substantive — need at least 10 words.
+        mentionedProduct: userMessages.some((m) => PRODUCT_PATTERNS.some((p) => p.test(m.content)) && countWords(m.content) >= 10),
+        mentionedChallenge: userMessages.some((m) => CHALLENGE_PATTERNS.some((p) => p.test(m.content))),
+        mentionedWhyPB: userMessages.some((m) => WHY_PB_PATTERNS.some((p) => p.test(m.content))),
+        // Substantive = enough detail to extract something meaningful from
+        hasSubstantiveAnswer: userMessages.some((m) => countWords(m.content) >= 15),
+        // Count messages with real content (not just "me" or "yes")
+        substantiveMessageCount: userMessages.filter((m) => countWords(m.content) >= 8).length,
+    };
+}
+/**
+ * Merge LLM-reported signals into heuristic signals.
+ * LLM signals are additive — once true, always true.
+ */
+export function mergeSignals(heuristic, llmSignals) {
+    return {
+        ...heuristic,
+        mentionedProduct: heuristic.mentionedProduct || (llmSignals.describedProduct ?? false),
+        mentionedChallenge: heuristic.mentionedChallenge || (llmSignals.describedProblem ?? false),
+        mentionedWhyPB: heuristic.mentionedWhyPB || (llmSignals.answeredWhyPB ?? false),
+    };
+}
+//# sourceMappingURL=conversation-signals.js.map

package/dist/lib/conversation-signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-signals.js","sourceRoot":"","sources":["../../src/lib/conversation-signals.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,gBAAgB,GAAG;IACvB,yDAAyD;IACzD,qEAAqE;CACtE,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,wFAAwF;IACxF,kFAAkF;IAClF,kDAAkD;CACnD,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,8BAA8B;IAC9B,mEAAmE;IACnE,mFAAmF;IACnF,uEAAuE;IACvE,kEAAkE;IAClE,yEAAyE;IACzE,yFAAyF;IACzF,8FAA8F;CAC/F,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAkD;IAC9E,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAE/D,OAAO;QACL,mFAAmF;QACnF,mFAAmF;QACnF,gBAAgB,EAAE,YAAY,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CACtF;QACD,kBAAkB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/F,cAAc,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACxF,mEAAmE;QACnE,oBAAoB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3E,4DAA4D;QAC5D,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;KACvF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,SAA8B,EAC9B,UAA+F;IAE/F,OAAO;QACL,GAAG,SAAS;QACZ,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,KAAK,CAAC;QACtF,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,KAAK,CAAC;QAC1F,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,KAAK,CAAC;KAChF,CAAC;AACJ,CAAC"}

package/dist/lib/conversation.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Conversation identity resolution — WP-479 E2 (client half).
+ *
+ * Feature-detects a stable per-conversation identifier so multiple concurrent harness
+ * conversations (Claude Code, Cursor, Codex, …) sharing one worktree don't collide on the single
+ * legacy `.productbrain/session.json` marker. All channels are optional and degrade gracefully —
+ * absent any signal, resolution returns `null` and every caller falls back to the pre-WP-479
+ * single-marker behavior (zero-config invariant).
+ *
+ * Priority order (harness findings: INS-2122, founder-run tests 2026-07-10):
+ *   1. explicit override (CLI `--conversation` flag on `pb session start`) — the manual seam.
+ *   2. `PB_CONVERSATION_ID` — the universal seam any harness adapter can set.
+ *   3. `CLAUDE_CODE_SESSION_ID` — present in Claude Code 2.1.206+ Bash shells (version-dependent,
+ *      treat as detected, never asserted).
+ *   4. `CURSOR_CONVERSATION_ID` — confirmed live in cursor-agent 2026.07.01 shell env.
+ *   5. `CODEX_TUI_SESSION_LOG_PATH` — Codex has no native conversation id; this Superset-injected
+ *      log path is unique per session run and stands in as the discriminator. It always contains
+ *      `/`, so normalization (below) always hashes it — no special-casing needed here.
+ *   6. none of the above → `null` (legacy shared-marker path).
+ */
+/**
+ * Normalize a raw candidate conversation id into a value that is always safe to use as (a) a
+ * Convex join key and (b) a filesystem path segment. Never truncates (a `slice()` would collide
+ * two distinct long ids into one lineage) — oversized or unsafe-charset ids are replaced whole
+ * with their sha256 hex digest (fixed-width, charset-safe by construction).
+ */
+export declare function normalizeConversationId(raw: string): string;
+/**
+ * Resolve the effective conversation id for the current process. `explicitOverride` — normally
+ * only threaded through from the CLI's `--conversation` flag on `pb session start` — takes
+ * priority over every env channel. Every other call site (the vast majority) calls this with no
+ * argument, which is pure env-based feature detection: with none of the channel env vars set,
+ * this returns `null` and callers must fall back to legacy behavior.
+ */
+export declare function resolveConversationId(explicitOverride?: string | null): string | null;
+//# sourceMappingURL=conversation.d.ts.map

package/dist/lib/conversation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../src/lib/conversation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAK3D;AAiBD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAIrF"}

package/dist/lib/conversation.js

@@ -0,0 +1,66 @@
+/**
+ * Conversation identity resolution — WP-479 E2 (client half).
+ *
+ * Feature-detects a stable per-conversation identifier so multiple concurrent harness
+ * conversations (Claude Code, Cursor, Codex, …) sharing one worktree don't collide on the single
+ * legacy `.productbrain/session.json` marker. All channels are optional and degrade gracefully —
+ * absent any signal, resolution returns `null` and every caller falls back to the pre-WP-479
+ * single-marker behavior (zero-config invariant).
+ *
+ * Priority order (harness findings: INS-2122, founder-run tests 2026-07-10):
+ *   1. explicit override (CLI `--conversation` flag on `pb session start`) — the manual seam.
+ *   2. `PB_CONVERSATION_ID` — the universal seam any harness adapter can set.
+ *   3. `CLAUDE_CODE_SESSION_ID` — present in Claude Code 2.1.206+ Bash shells (version-dependent,
+ *      treat as detected, never asserted).
+ *   4. `CURSOR_CONVERSATION_ID` — confirmed live in cursor-agent 2026.07.01 shell env.
+ *   5. `CODEX_TUI_SESSION_LOG_PATH` — Codex has no native conversation id; this Superset-injected
+ *      log path is unique per session run and stands in as the discriminator. It always contains
+ *      `/`, so normalization (below) always hashes it — no special-casing needed here.
+ *   6. none of the above → `null` (legacy shared-marker path).
+ */
+import { createHash } from 'crypto';
+/** Above this raw length, or containing any char outside the join-key-safe set, hash instead. */
+const MAX_RAW_LEN = 128;
+/** Join-key-safe charset — also what's safe to use as a marker filename with no traversal risk. */
+const SAFE_CHARS_RE = /^[A-Za-z0-9._-]+$/;
+/**
+ * Normalize a raw candidate conversation id into a value that is always safe to use as (a) a
+ * Convex join key and (b) a filesystem path segment. Never truncates (a `slice()` would collide
+ * two distinct long ids into one lineage) — oversized or unsafe-charset ids are replaced whole
+ * with their sha256 hex digest (fixed-width, charset-safe by construction).
+ */
+export function normalizeConversationId(raw) {
+    if (raw.length > MAX_RAW_LEN || !SAFE_CHARS_RE.test(raw)) {
+        return createHash('sha256').update(raw).digest('hex');
+    }
+    return raw;
+}
+/** Picks the first non-empty candidate in priority order. No normalization here. */
+function pickRawConversationId(explicitOverride) {
+    const candidates = [
+        explicitOverride,
+        process.env.PB_CONVERSATION_ID,
+        process.env.CLAUDE_CODE_SESSION_ID,
+        process.env.CURSOR_CONVERSATION_ID,
+        process.env.CODEX_TUI_SESSION_LOG_PATH,
+    ];
+    for (const candidate of candidates) {
+        if (candidate && candidate.trim().length > 0)
+            return candidate.trim();
+    }
+    return null;
+}
+/**
+ * Resolve the effective conversation id for the current process. `explicitOverride` — normally
+ * only threaded through from the CLI's `--conversation` flag on `pb session start` — takes
+ * priority over every env channel. Every other call site (the vast majority) calls this with no
+ * argument, which is pure env-based feature detection: with none of the channel env vars set,
+ * this returns `null` and callers must fall back to legacy behavior.
+ */
+export function resolveConversationId(explicitOverride) {
+    const raw = pickRawConversationId(explicitOverride);
+    if (!raw)
+        return null;
+    return normalizeConversationId(raw);
+}
+//# sourceMappingURL=conversation.js.map

package/dist/lib/conversation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.js","sourceRoot":"","sources":["../../src/lib/conversation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,iGAAiG;AACjG,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,mGAAmG;AACnG,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,SAAS,qBAAqB,CAAC,gBAAgC;IAC7D,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,0BAA0B;KACvC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,gBAAgC;IACpE,MAAM,GAAG,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC"}

package/dist/lib/createEntryResult.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Narrowing helpers for the `chain.createEntry` gateway route's return type.
+ *
+ * WP-577 / TEN-2918: the route's declared return type is now an honest union that
+ * includes the preview branch (convex/agentKnowledge/entries.ts +
+ * createEntryPreview.ts). Callers that read real-create fields must narrow first.
+ *
+ * Why a local predicate rather than the server's own `isCreateEntryPreview`
+ * (convex/agentKnowledge/createEntryPreview.ts): `packages/cli` is a published npm
+ * package (bin `pb`) built with `rootDir: "src"` — a `convex/` import lives outside
+ * that root and would fail TypeScript's rootDir check (TS6059), and `convex/` is not
+ * part of the published tarball anyway. Keeping the CLI's own copy avoids that
+ * build-graph coupling. It is deliberately tiny and behaviour-free so the duplication
+ * cannot drift meaningfully — the discriminant is the presence of the `preview` key,
+ * which is part of the route's public response contract.
+ *
+ * Verified against the deployed preview: a real-create response carries no `preview`
+ * key at all, so this predicate is false on the normal capture path.
+ */
+import type { GatewayRouteReturnByName } from '@productbrain/kernel-client';
+export type CreateEntryRouteResult = GatewayRouteReturnByName<'chain.createEntry'>;
+export type CreateEntryPreviewRouteResult = Extract<CreateEntryRouteResult, {
+    preview: true;
+}>;
+/**
+ * True when the route returned its preview branch.
+ *
+ * A plain inline `'preview' in result` check does not reliably narrow the ELSE branch
+ * for this generated union shape — an explicit predicate function does. The same
+ * limitation is documented in convex/agentKnowledge/createEntryPreview.ts and was
+ * re-derived independently in packages/mcp-server/src/tools/smart-capture.ts.
+ */
+export declare function isPreviewCreateEntryResult(result: CreateEntryRouteResult): result is CreateEntryPreviewRouteResult;
+//# sourceMappingURL=createEntryResult.d.ts.map

package/dist/lib/createEntryResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEntryResult.d.ts","sourceRoot":"","sources":["../../src/lib/createEntryResult.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE5E,MAAM,MAAM,sBAAsB,GAAG,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;AAEnF,MAAM,MAAM,6BAA6B,GAAG,OAAO,CAAC,sBAAsB,EAAE;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAE/F;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,6BAA6B,CAEzC"}

package/dist/lib/createEntryResult.js

@@ -0,0 +1,12 @@
+/**
+ * True when the route returned its preview branch.
+ *
+ * A plain inline `'preview' in result` check does not reliably narrow the ELSE branch
+ * for this generated union shape — an explicit predicate function does. The same
+ * limitation is documented in convex/agentKnowledge/createEntryPreview.ts and was
+ * re-derived independently in packages/mcp-server/src/tools/smart-capture.ts.
+ */
+export function isPreviewCreateEntryResult(result) {
+    return 'preview' in result;
+}
+//# sourceMappingURL=createEntryResult.js.map

package/dist/lib/createEntryResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEntryResult.js","sourceRoot":"","sources":["../../src/lib/createEntryResult.ts"],"names":[],"mappings":"AAyBA;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA8B;IAE9B,OAAO,SAAS,IAAI,MAAM,CAAC;AAC7B,CAAC"}

package/dist/lib/deployment.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Convex / gateway deployment classification for CLI banners and admin seed gates.
+ *
+ * Convex uses "Development (Cloud)" vs "Production" for deployments; the CLI must not
+ * treat every non-localhost URL as "production" (WP-312 follow-up).
+ *
+ * Extend PRODUCTION_HOSTS / DEV_CLOUD_HOSTS when new team deployments are provisioned.
+ */
+/** Loopback — local Convex dev UI / tunnel only. */
+export type DeploymentTier = 'local' | 'prod' | 'dev-cloud' | 'cloud';
+export declare function parseHostname(siteUrl: string): string;
+export declare function classifyDeployment(siteUrl: string): DeploymentTier;
+/**
+ * Whether admin seed destructive paths should show confirmation + `--confirm` in CI.
+ * False for loopback and known dev-cloud Convex deployments only.
+ */
+export declare function requiresAdminDestructiveConfirmation(siteUrl: string): boolean;
+/** Title for clack `note()` before confirm (prod vs unknown remote). */
+export declare function confirmRiskNoteTitle(siteUrl: string): string;
+export declare function seedRunConfirmMessage(siteUrl: string, manifestName: string): string;
+export declare function seedAllConfirmMessage(siteUrl: string): string;
+export declare function seedMultiselectConfirmMessage(siteUrl: string, count: number): string;
+//# sourceMappingURL=deployment.d.ts.map

package/dist/lib/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/lib/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,oDAAoD;AACpD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AAwBtE,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMrD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAMlE;AAED;;;GAGG;AACH,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG7E;AAED,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK5D;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAInF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIpF"}

package/dist/lib/deployment.js

@@ -0,0 +1,78 @@
+/**
+ * Convex / gateway deployment classification for CLI banners and admin seed gates.
+ *
+ * Convex uses "Development (Cloud)" vs "Production" for deployments; the CLI must not
+ * treat every non-localhost URL as "production" (WP-312 follow-up).
+ *
+ * Extend PRODUCTION_HOSTS / DEV_CLOUD_HOSTS when new team deployments are provisioned.
+ */
+const LOCAL_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]']);
+/**
+ * Customer / team production hosts (gateway, prod Convex deployment, public API).
+ * Destructive admin seeds use production-style confirmation + red [PROD] banner.
+ */
+const PRODUCTION_HOSTS = new Set([
+    'gateway.productbrain.io',
+    'data.productbrain.io',
+    'api.productbrain.io',
+    /** Convex Production deployment (dashboard label). */
+    'terrific-penguin-60.convex.site',
+]);
+/**
+ * Convex **Development (Cloud)** deployments — real cloud DB, not customer prod.
+ * No prod-style gate; banner shows [DEV·CLOUD].
+ */
+const DEV_CLOUD_HOSTS = new Set([
+    'trustworthy-kangaroo-277.convex.site',
+]);
+export function parseHostname(siteUrl) {
+    try {
+        return new URL(siteUrl).hostname;
+    }
+    catch {
+        return siteUrl;
+    }
+}
+export function classifyDeployment(siteUrl) {
+    const host = parseHostname(siteUrl);
+    if (LOCAL_HOSTS.has(host))
+        return 'local';
+    if (PRODUCTION_HOSTS.has(host))
+        return 'prod';
+    if (DEV_CLOUD_HOSTS.has(host))
+        return 'dev-cloud';
+    return 'cloud';
+}
+/**
+ * Whether admin seed destructive paths should show confirmation + `--confirm` in CI.
+ * False for loopback and known dev-cloud Convex deployments only.
+ */
+export function requiresAdminDestructiveConfirmation(siteUrl) {
+    const t = classifyDeployment(siteUrl);
+    return t !== 'local' && t !== 'dev-cloud';
+}
+/** Title for clack `note()` before confirm (prod vs unknown remote). */
+export function confirmRiskNoteTitle(siteUrl) {
+    const t = classifyDeployment(siteUrl);
+    if (t === 'prod')
+        return '⚠  Production';
+    if (t === 'cloud')
+        return '⚠  Remote deployment';
+    return '⚠  Confirm';
+}
+export function seedRunConfirmMessage(siteUrl, manifestName) {
+    return classifyDeployment(siteUrl) === 'prod'
+        ? `Run ${manifestName} on production?`
+        : `Run ${manifestName} on this remote deployment?`;
+}
+export function seedAllConfirmMessage(siteUrl) {
+    return classifyDeployment(siteUrl) === 'prod'
+        ? 'Run ALL seed operations on production?'
+        : 'Run ALL seed operations on this remote deployment?';
+}
+export function seedMultiselectConfirmMessage(siteUrl, count) {
+    return classifyDeployment(siteUrl) === 'prod'
+        ? `Run ${count} operation(s) on PRODUCTION?`
+        : `Run ${count} operation(s) on this remote deployment?`;
+}
+//# sourceMappingURL=deployment.js.map

package/dist/lib/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../src/lib/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,sDAAsD;IACtD,iCAAiC;CAClC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACtC,sCAAsC;CACvC,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAClD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC,CAAC,OAAe;IAClE,MAAM,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,CAAC;AAC5C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC;IACzC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,sBAAsB,CAAC;IACjD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,YAAoB;IACzE,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,OAAO,YAAY,iBAAiB;QACtC,CAAC,CAAC,OAAO,YAAY,6BAA6B,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,oDAAoD,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAe,EAAE,KAAa;IAC1E,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,MAAM;QAC3C,CAAC,CAAC,OAAO,KAAK,8BAA8B;QAC5C,CAAC,CAAC,OAAO,KAAK,0CAA0C,CAAC;AAC7D,CAAC"}

package/dist/lib/deployment.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Deployment classification — banners and admin seed gates.
+ */
+export {};
+//# sourceMappingURL=deployment.test.d.ts.map

package/dist/lib/deployment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.test.d.ts","sourceRoot":"","sources":["../../src/lib/deployment.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/lib/deployment.test.js

@@ -0,0 +1,73 @@
+/**
+ * Deployment classification — banners and admin seed gates.
+ */
+import { describe, it, expect } from 'vitest';
+import { classifyDeployment, confirmRiskNoteTitle, parseHostname, requiresAdminDestructiveConfirmation, seedAllConfirmMessage, seedRunConfirmMessage, } from './deployment.js';
+import { deploymentBadge } from './style.js';
+describe('parseHostname', () => {
+    it('parses hostname from https URL', () => {
+        expect(parseHostname('https://trustworthy-kangaroo-277.convex.site')).toBe('trustworthy-kangaroo-277.convex.site');
+    });
+});
+describe('classifyDeployment', () => {
+    it('classifies loopback as local', () => {
+        expect(classifyDeployment('http://localhost:5176')).toBe('local');
+        expect(classifyDeployment('http://127.0.0.1:3000')).toBe('local');
+        expect(classifyDeployment('http://[::1]:3000')).toBe('local');
+    });
+    it('classifies known dev-cloud Convex deployment', () => {
+        expect(classifyDeployment('https://trustworthy-kangaroo-277.convex.site')).toBe('dev-cloud');
+    });
+    it('classifies gateway and prod Convex as prod', () => {
+        expect(classifyDeployment('https://gateway.productbrain.io')).toBe('prod');
+        expect(classifyDeployment('https://terrific-penguin-60.convex.site')).toBe('prod');
+        expect(classifyDeployment('https://api.productbrain.io')).toBe('prod');
+    });
+    it('classifies unknown remote as cloud', () => {
+        expect(classifyDeployment('https://other-team-xyz.convex.site')).toBe('cloud');
+    });
+});
+// WP-744 / 1e-B: `pb profile create`'s receipt (§4 "which file won" assertion) needs the badge
+// to actually render the resolved tier — one test per tier deploymentBadge classifies.
+describe('deploymentBadge', () => {
+    it('badges local as [DEV]', () => {
+        expect(deploymentBadge(classifyDeployment('http://localhost:3000'))).toContain('[DEV]');
+    });
+    it('badges known production hosts as [PROD]', () => {
+        expect(deploymentBadge(classifyDeployment('https://gateway.productbrain.io'))).toContain('[PROD]');
+    });
+    it('badges the known dev-cloud Convex deployment as [DEV·CLOUD]', () => {
+        expect(deploymentBadge(classifyDeployment('https://trustworthy-kangaroo-277.convex.site'))).toContain('[DEV·CLOUD]');
+    });
+    it('badges an unknown remote as [CLOUD], never [PROD]', () => {
+        const badge = deploymentBadge(classifyDeployment('https://other-team-xyz.convex.site'));
+        expect(badge).toContain('[CLOUD]');
+        expect(badge).not.toContain('[PROD]');
+    });
+});
+describe('requiresAdminDestructiveConfirmation', () => {
+    it('is false for local and dev-cloud only', () => {
+        expect(requiresAdminDestructiveConfirmation('http://localhost:3000')).toBe(false);
+        expect(requiresAdminDestructiveConfirmation('https://trustworthy-kangaroo-277.convex.site')).toBe(false);
+        expect(requiresAdminDestructiveConfirmation('https://gateway.productbrain.io')).toBe(true);
+        expect(requiresAdminDestructiveConfirmation('https://unknown.convex.site')).toBe(true);
+    });
+});
+describe('confirmRiskNoteTitle', () => {
+    it('matches tier', () => {
+        expect(confirmRiskNoteTitle('https://gateway.productbrain.io')).toContain('Production');
+        expect(confirmRiskNoteTitle('https://other.convex.site')).toContain('Remote');
+    });
+});
+describe('seed confirm copy', () => {
+    it('uses production wording only for prod tier', () => {
+        expect(seedRunConfirmMessage('https://gateway.productbrain.io', 'seed:knowledge')).toContain('production');
+        expect(seedRunConfirmMessage('https://trustworthy-kangaroo-277.convex.site', 'seed:knowledge')).toContain('remote deployment');
+        expect(seedRunConfirmMessage('https://unknown.convex.site', 'seed:knowledge')).toContain('remote deployment');
+    });
+    it('seed all message follows tier', () => {
+        expect(seedAllConfirmMessage('https://gateway.productbrain.io')).toContain('production');
+        expect(seedAllConfirmMessage('https://unknown.convex.site')).toContain('remote deployment');
+    });
+});
+//# sourceMappingURL=deployment.test.js.map

package/dist/lib/deployment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.test.js","sourceRoot":"","sources":["../../src/lib/deployment.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,oCAAoC,EACpC,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,aAAa,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CACxE,sCAAsC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,kBAAkB,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+FAA+F;AAC/F,uFAAuF;AACvF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC,SAAS,CACnG,aAAa,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACxF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,oCAAoC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,CAAC,oCAAoC,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAC/F,KAAK,CACN,CAAC;QACF,MAAM,CAAC,oCAAoC,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,MAAM,CAAC,oCAAoC,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,oBAAoB,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACxF,MAAM,CAAC,oBAAoB,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAC1F,YAAY,CACb,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,8CAA8C,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CACvG,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CACtF,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzF,MAAM,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/envKeySnapshot.d.ts

@@ -0,0 +1,10 @@
+/** True when the operator's own export is the credential in play. */
+export declare function isEnvKeyBinding(): boolean;
+/**
+ * Re-take the snapshot. Mirrors `resetConfigCache()` — tests set the env var after this module is
+ * first imported. The CLI's own command paths do not need it: `pb profile use` deliberately does
+ * NOT re-snapshot after deleting the key, because that delete affects only the child process
+ * while the parent shell keeps exporting it.
+ */
+export declare function resetReportedProfileSnapshot(): void;
+//# sourceMappingURL=envKeySnapshot.d.ts.map

package/dist/lib/envKeySnapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envKeySnapshot.d.ts","sourceRoot":"","sources":["../../src/lib/envKeySnapshot.ts"],"names":[],"mappings":"AAiBA,qEAAqE;AACrE,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/dist/lib/envKeySnapshot.js

@@ -0,0 +1,30 @@
+/**
+ * Did the OPERATOR export `PRODUCTBRAIN_API_KEY` into this process?
+ *
+ * A primitive fact about the process, not about reporting — which is why it lives here rather than
+ * in reportedProfile.ts: config.ts needs it too, and config.ts cannot import that module without a
+ * cycle. Depends on nothing.
+ *
+ * It cannot be a live `process.env` read. `loadEnv()` (config.ts) COPIES whichever credential won
+ * into `process.env.PRODUCTBRAIN_API_KEY`, so after any command has resolved config a live read
+ * cannot separate an operator's export from loadEnv's own copy (INS-2479). So snapshot at MODULE
+ * LOAD, which is strictly before `loadEnv()` can run: config.ts loads env lazily (`envLoaded`
+ * starts false and only a getConfig()/getConfigOrGuide() call flips it), and this module is
+ * imported at CLI startup. Eager, not lazy-on-first-call: `capture` reaches the kernel BEFORE it
+ * emits its write-target notice, so a first-call snapshot would already be polluted.
+ */
+let exportedApiKey = process.env.PRODUCTBRAIN_API_KEY;
+/** True when the operator's own export is the credential in play. */
+export function isEnvKeyBinding() {
+    return Boolean(exportedApiKey);
+}
+/**
+ * Re-take the snapshot. Mirrors `resetConfigCache()` — tests set the env var after this module is
+ * first imported. The CLI's own command paths do not need it: `pb profile use` deliberately does
+ * NOT re-snapshot after deleting the key, because that delete affects only the child process
+ * while the parent shell keeps exporting it.
+ */
+export function resetReportedProfileSnapshot() {
+    exportedApiKey = process.env.PRODUCTBRAIN_API_KEY;
+}
+//# sourceMappingURL=envKeySnapshot.js.map

package/dist/lib/envKeySnapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envKeySnapshot.js","sourceRoot":"","sources":["../../src/lib/envKeySnapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,IAAI,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAEtD,qEAAqE;AACrE,MAAM,UAAU,eAAe;IAC7B,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B;IAC1C,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AACpD,CAAC"}