@productbrain/cli 0.1.0-beta.7 → 0.1.0-beta.7003

package/dist/commands/setup-resolver.d.ts

@@ -0,0 +1,58 @@
+/**
+ * WP-336 E2 (CLI side): Dual-mode setup asset resolver for `pb handshake`.
+ *
+ * SetupMode:
+ *   local — reads skills/rules from .productbrain/ (current builder behavior, default).
+ *   chain — calls the Convex API (setup.getActiveSurface) and returns Chain-backed assets.
+ *
+ * The env var PB_SETUP_MODE controls which path runs:
+ *   unset or 'local' → local mode (no network call, fully offline-safe)
+ *   'chain'          → chain mode (requires authenticated kernelCall, user workspace)
+ *
+ * Chain: WP-336 (Agent Surface Foundation), DEC-619 (setup_receipt infrastructure)
+ */
+export type SetupMode = 'local' | 'chain';
+/**
+ * Unified asset shape returned by resolveSetupAssets.
+ *
+ * Local mode:   assetKind derived from .productbrain/ directory (skills/ → 'skill', rules/ → 'rule').
+ * Chain mode:   assetKind comes from the entry's data.assetKind field (seeded by WP-336 E3 seed).
+ *
+ * The `body` field is the raw Markdown content that gets written to adapter files.
+ * The `source` field is informational — used for reporting/telemetry, not for write decisions.
+ */
+export interface SetupAsset {
+    assetKind: 'skill' | 'rule' | 'hook';
+    displayName: string;
+    body: string;
+    source: 'seeded' | 'authored' | 'imported';
+}
+/**
+ * Wire shape returned by the Convex getActiveSurface query.
+ * Must match the return type of convex/setup.ts:getActiveSurface.
+ */
+export interface GetActiveSurfaceResult {
+    assetId: string;
+    assetKind: string;
+    displayName: string;
+    shortDescription: string;
+    body: string;
+    version: number;
+    source: string;
+}
+/**
+ * Returns the active SetupMode.
+ * Reads PB_SETUP_MODE from process.env.
+ * Unknown values default to 'local' (fail-open for forward compat).
+ */
+export declare function getSetupMode(): SetupMode;
+/**
+ * Resolve setup assets for the current mode.
+ *
+ * @param mode      - 'local' | 'chain', from getSetupMode()
+ * @param kernelCall - authenticated kernelCall function (from packages/cli/src/lib/client.ts)
+ *                    Only called in chain mode.
+ * @param cwd       - current working directory (for .productbrain/ path resolution)
+ */
+export declare function resolveSetupAssets(mode: SetupMode, kernelCall: <T>(fn: string, args: Record<string, unknown>) => Promise<T>, cwd: string): Promise<SetupAsset[]>;
+//# sourceMappingURL=setup-resolver.d.ts.map

package/dist/commands/setup-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-resolver.d.ts","sourceRoot":"","sources":["../../src/commands/setup-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAID;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,SAAS,CAIxC;AA6HD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EACxE,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,UAAU,EAAE,CAAC,CAQvB"}

package/dist/commands/setup-resolver.js

@@ -0,0 +1,150 @@
+/**
+ * WP-336 E2 (CLI side): Dual-mode setup asset resolver for `pb handshake`.
+ *
+ * SetupMode:
+ *   local — reads skills/rules from .productbrain/ (current builder behavior, default).
+ *   chain — calls the Convex API (setup.getActiveSurface) and returns Chain-backed assets.
+ *
+ * The env var PB_SETUP_MODE controls which path runs:
+ *   unset or 'local' → local mode (no network call, fully offline-safe)
+ *   'chain'          → chain mode (requires authenticated kernelCall, user workspace)
+ *
+ * Chain: WP-336 (Agent Surface Foundation), DEC-619 (setup_receipt infrastructure)
+ */
+import { existsSync, readdirSync, readFileSync } from 'fs';
+import { join, basename } from 'path';
+// ── Mode resolution ───────────────────────────────────────────────────────────
+/**
+ * Returns the active SetupMode.
+ * Reads PB_SETUP_MODE from process.env.
+ * Unknown values default to 'local' (fail-open for forward compat).
+ */
+export function getSetupMode() {
+    const raw = process.env.PB_SETUP_MODE;
+    if (raw === 'chain')
+        return 'chain';
+    return 'local';
+}
+// ── Local mode ────────────────────────────────────────────────────────────────
+/**
+ * Read a single Markdown file from a .productbrain/ sub-directory.
+ * Returns the file body after stripping a minimal YAML frontmatter block
+ * (lines between opening and closing ---). If no frontmatter is found,
+ * returns the full file content unchanged.
+ *
+ * We intentionally keep this light — the local mode is a contract test pass-through
+ * that verifies parity with the existing handshake.ts lines 443–507 pipeline.
+ */
+function stripFrontmatter(raw) {
+    const lines = raw.split('\n');
+    if (lines[0]?.trim() !== '---')
+        return raw;
+    const closeIdx = lines.indexOf('---', 1);
+    if (closeIdx === -1)
+        return raw;
+    return lines.slice(closeIdx + 1).join('\n').trimStart();
+}
+/**
+ * Read skills from .productbrain/skills/ and map them to SetupAsset[].
+ * Mirrors the shape produced by readCanonicalSkills() in portable-knowledge.ts.
+ * Does NOT apply level/stage filtering — that remains in the handshake pipeline.
+ */
+function readLocalSkillAssets(pbDir) {
+    const skillsDir = join(pbDir, 'skills');
+    if (!existsSync(skillsDir))
+        return [];
+    const files = readdirSync(skillsDir).filter((f) => f.endsWith('.md'));
+    return files.map((file) => {
+        const raw = readFileSync(join(skillsDir, file), 'utf8');
+        const displayName = basename(file, '.md');
+        return {
+            assetKind: 'skill',
+            displayName,
+            body: stripFrontmatter(raw),
+            source: 'authored',
+        };
+    });
+}
+/**
+ * Read rules from .productbrain/rules/ and map them to SetupAsset[].
+ * Mirrors the shape produced by readCanonicalRules() in portable-knowledge.ts.
+ */
+function readLocalRuleAssets(pbDir) {
+    const rulesDir = join(pbDir, 'rules');
+    if (!existsSync(rulesDir))
+        return [];
+    const files = readdirSync(rulesDir).filter((f) => f.endsWith('.md'));
+    return files.map((file) => {
+        const raw = readFileSync(join(rulesDir, file), 'utf8');
+        const displayName = basename(file, '.md');
+        return {
+            assetKind: 'rule',
+            displayName,
+            body: stripFrontmatter(raw),
+            source: 'authored',
+        };
+    });
+}
+/**
+ * Local mode: return skills + rules from .productbrain/.
+ *
+ * This is the identity pass-through — the assets returned here are the same
+ * files that handshake.ts lines 443–507 already read via readCanonicalSkills()
+ * and readCanonicalRules(). The resolver does NOT replace those calls; it is a
+ * parallel view used for contract testing and mode-switching.
+ */
+function resolveLocalAssets(pbDir) {
+    return [
+        ...readLocalSkillAssets(pbDir),
+        ...readLocalRuleAssets(pbDir),
+    ];
+}
+// ── Chain mode ────────────────────────────────────────────────────────────────
+/**
+ * Map a raw GetActiveSurfaceResult to a typed SetupAsset.
+ * Falls back gracefully on unexpected assetKind values.
+ */
+function mapChainAsset(raw) {
+    const assetKind = raw.assetKind === 'rule' ? 'rule'
+        : raw.assetKind === 'hook' ? 'hook'
+            : 'skill'; // default — skill is the safe fallback
+    const source = raw.source === 'authored' ? 'authored'
+        : raw.source === 'imported' ? 'imported'
+            : 'seeded';
+    return {
+        assetKind,
+        displayName: raw.displayName,
+        body: raw.body,
+        source,
+    };
+}
+/**
+ * Chain mode: call setup.getActiveSurface via the AKI gateway and return assets.
+ *
+ * workspaceId is injected server-side by the gateway (BR-18).
+ * personId is injected server-side by injectSessionAuth — the CLI does not pass it.
+ *
+ * @param kernelCall - the authenticated kernelCall function from the handshake flow
+ */
+async function resolveChainAssets(kernelCall) {
+    const results = await kernelCall('setup.getActiveSurface', {});
+    return results.map(mapChainAsset);
+}
+// ── Public API ────────────────────────────────────────────────────────────────
+/**
+ * Resolve setup assets for the current mode.
+ *
+ * @param mode      - 'local' | 'chain', from getSetupMode()
+ * @param kernelCall - authenticated kernelCall function (from packages/cli/src/lib/client.ts)
+ *                    Only called in chain mode.
+ * @param cwd       - current working directory (for .productbrain/ path resolution)
+ */
+export async function resolveSetupAssets(mode, kernelCall, cwd) {
+    if (mode === 'chain') {
+        return resolveChainAssets(kernelCall);
+    }
+    // local mode — read from .productbrain/ (synchronous, no network)
+    const pbDir = join(cwd, '.productbrain');
+    return resolveLocalAssets(pbDir);
+}
+//# sourceMappingURL=setup-resolver.js.map

package/dist/commands/setup-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-resolver.js","sourceRoot":"","sources":["../../src/commands/setup-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAoCtC,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACtC,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IAChC,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO;YACL,SAAS,EAAE,OAAgB;YAC3B,WAAW;YACX,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC;YAC3B,MAAM,EAAE,UAAmB;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO;YACL,SAAS,EAAE,MAAe;YAC1B,WAAW;YACX,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC;YAC3B,MAAM,EAAE,UAAmB;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO;QACL,GAAG,oBAAoB,CAAC,KAAK,CAAC;QAC9B,GAAG,mBAAmB,CAAC,KAAK,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,aAAa,CAAC,GAA2B;IAChD,MAAM,SAAS,GACb,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM;QACjC,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM;YACnC,CAAC,CAAC,OAAO,CAAC,CAAC,uCAAuC;IAEpD,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU;QACtC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU;YACxC,CAAC,CAAC,QAAQ,CAAC;IAEb,OAAO;QACL,SAAS;QACT,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,UAAwE;IAExE,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,wBAAwB,EACxB,EAAE,CACH,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACpC,CAAC;AAED,iFAAiF;AAEjF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAe,EACf,UAAwE,EACxE,GAAW;IAEX,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,kEAAkE;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACzC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/dist/commands/setup-state.d.ts

@@ -0,0 +1,42 @@
+/**
+ * `pb setup-state` — WP-431 S3.
+ *
+ * Calls the Convex `getPbSetupState` query and emits the result as compact JSON
+ * on stdout. Machine-readable always — the skill body parses this.
+ *
+ * Auth & userId injection (STD-234 perimeter):
+ *   The HTTP gateway derives `workspaceId` and `userId` from the API key and
+ *   passes them server-side; the CLI does not need to know the user's id.
+ *   Defense-in-depth equality check happens inside the query handler.
+ *
+ * Exit codes (CLI convention):
+ *   0  success — JSON written to stdout
+ *   2  auth/permission — AUTH_* / AUTHZ_* error class
+ *   3  network — host unreachable / fetch failed
+ *   1  other (validation / internal)
+ */
+export interface RunSetupStateOptions {
+    /** Pre-fetched state — used by `pb setup` to avoid a duplicate gateway round-trip. */
+    preloaded?: SetupStateResult;
+}
+export interface SetupStateResult {
+    phase: number | 'settings';
+    role: 'creator' | 'joiner';
+    expectedAction: string;
+    reasonForPhase: string;
+    isComplete: boolean;
+    /**
+     * WP-431 S3 review fix #1: structural surfaceCapability passthrough.
+     * Mirrors the resolver output (PbSetupStateOutput.surfaceCapability).
+     */
+    surfaceCapability: 'cli' | 'chat-only';
+}
+export declare function fetchSetupState(): Promise<SetupStateResult>;
+export declare function runSetupState(opts?: RunSetupStateOptions): Promise<void>;
+/**
+ * Map a setup-state failure to the documented exit-code contract.
+ * Always re-throws (typed `never`) so the global handler in index.ts can format
+ * the message; we route through CLIError so JSON mode reports `code` cleanly.
+ */
+export declare function handleSetupError(err: unknown): never;
+//# sourceMappingURL=setup-state.d.ts.map

package/dist/commands/setup-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-state.d.ts","sourceRoot":"","sources":["../../src/commands/setup-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,MAAM,WAAW,oBAAoB;IACnC,sFAAsF;IACtF,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;IAC3B,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,iBAAiB,EAAE,KAAK,GAAG,WAAW,CAAC;CACxC;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAEjE;AAED,wBAAsB,aAAa,CAAC,IAAI,GAAE,oBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAiCpD"}

package/dist/commands/setup-state.js

@@ -0,0 +1,93 @@
+/**
+ * `pb setup-state` — WP-431 S3.
+ *
+ * Calls the Convex `getPbSetupState` query and emits the result as compact JSON
+ * on stdout. Machine-readable always — the skill body parses this.
+ *
+ * Auth & userId injection (STD-234 perimeter):
+ *   The HTTP gateway derives `workspaceId` and `userId` from the API key and
+ *   passes them server-side; the CLI does not need to know the user's id.
+ *   Defense-in-depth equality check happens inside the query handler.
+ *
+ * Exit codes (CLI convention):
+ *   0  success — JSON written to stdout
+ *   2  auth/permission — AUTH_* / AUTHZ_* error class
+ *   3  network — host unreachable / fetch failed
+ *   1  other (validation / internal)
+ */
+import { kernelCall, McpError } from '../lib/client.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+export async function fetchSetupState() {
+    return await kernelCall('setup.getPbSetupState', {});
+}
+export async function runSetupState(opts = {}) {
+    let result;
+    try {
+        result = opts.preloaded ?? (await fetchSetupState());
+    }
+    catch (err) {
+        handleSetupError(err);
+    }
+    process.stdout.write(JSON.stringify(result) + '\n');
+}
+/**
+ * Map a setup-state failure to the documented exit-code contract.
+ * Always re-throws (typed `never`) so the global handler in index.ts can format
+ * the message; we route through CLIError so JSON mode reports `code` cleanly.
+ */
+export function handleSetupError(err) {
+    if (err instanceof McpError) {
+        const code = err.code;
+        if (code && (code.startsWith('AUTH') || code.startsWith('AUTHZ'))) {
+            const wrapped = new CLIError(err.message, {
+                code: ErrorCode.AUTH_DENIED,
+                category: 'auth',
+                guidance: 'Run `pb login` to refresh your API key, or check workspace membership.',
+            });
+            writeJsonError(wrapped);
+            process.exit(2);
+        }
+        writeJsonError(err);
+        process.exit(1);
+    }
+    if (err instanceof CLIError && err.category === 'network') {
+        writeJsonError(err);
+        process.exit(3);
+    }
+    if (err instanceof CLIError && err.category === 'auth') {
+        writeJsonError(err);
+        process.exit(2);
+    }
+    if (err instanceof CLIError) {
+        writeJsonError(err);
+        process.exit(1);
+    }
+    const wrapped = new CLIError(err instanceof Error ? err.message : String(err), {
+        code: ErrorCode.INTERNAL,
+        category: 'internal',
+    });
+    writeJsonError(wrapped);
+    process.exit(1);
+}
+/**
+ * Write a structured JSON error to stderr. WP-431 S3 review (Boy Scout #2):
+ * route every shape through CLIError.toJSON() so the stderr envelope is
+ * identical to every other CLI command (no per-call ad-hoc shapes).
+ */
+function writeJsonError(err) {
+    const cliErr = toCLIError(err);
+    process.stderr.write(JSON.stringify(cliErr.toJSON()) + '\n');
+}
+function toCLIError(err) {
+    if (err instanceof CLIError)
+        return err;
+    if (err instanceof Error) {
+        const code = err.code;
+        const errorCode = code && Object.values(ErrorCode).includes(code)
+            ? code
+            : ErrorCode.INTERNAL;
+        return new CLIError(err.message, { code: errorCode, category: 'internal' });
+    }
+    return new CLIError(String(err), { code: ErrorCode.INTERNAL, category: 'internal' });
+}
+//# sourceMappingURL=setup-state.js.map

package/dist/commands/setup-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-state.js","sourceRoot":"","sources":["../../src/commands/setup-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAoBvD,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,OAAO,MAAM,UAAU,CAAoD,uBAAuB,EAAE,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B,EAAE;IACjE,IAAI,MAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,IAA0B,CAAC;QAC5C,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE;gBACxC,IAAI,EAAE,SAAS,CAAC,WAAW;gBAC3B,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,wEAAwE;aACnF,CAAC,CAAC;YACH,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1D,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACvD,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;QAC7E,IAAI,EAAE,SAAS,CAAC,QAAQ;QACxB,QAAQ,EAAE,UAAU;KACrB,CAAC,CAAC;IACH,cAAc,CAAC,OAAO,CAAC,CAAC;IACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,YAAY,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAI,GAAiC,CAAC,IAAI,CAAC;QACrD,MAAM,SAAS,GACb,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAkD,CAAC;YAC3F,CAAC,CAAE,IAAmD;YACtD,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;QACzB,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;AACvF,CAAC"}

package/dist/commands/setup.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `pb setup` — WP-431 S3 canonical entry point (DEC-995).
+ *
+ * Flow:
+ *   1. Auto-detect surface markers and union-merge into `manifest.surfaces` (S3 #1).
+ *      Phase-1 users land here with empty surfaces; this single auto-detect lifts
+ *      them to Phase 2 without requiring a separate `pb setup-detect-surfaces` run.
+ *   2. Read pb-setup state via the Convex query (`setup.getPbSetupState`).
+ *   3. Record invocation receipt — first-write-wins per DEC-996, idempotent.
+ *   4. Emit the resolved state JSON on stdout for the skill body to consume.
+ *
+ * `pb start` (session-start alias) is unchanged and keeps the same call path it
+ * had before this slice.
+ *
+ * Legacy `pb setup` (WP-301) — guided onboarding via @clack/prompts — is removed
+ * from the canonical entry per DEC-995. The login flow remains reachable via
+ * `pb login`.
+ */
+export interface RunSetupOptions {
+    cwd?: string;
+}
+export declare function runSetup(opts?: RunSetupOptions): Promise<void>;
+//# sourceMappingURL=setup.d.ts.map

package/dist/commands/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BxE"}

package/dist/commands/setup.js

@@ -0,0 +1,69 @@
+/**
+ * `pb setup` — WP-431 S3 canonical entry point (DEC-995).
+ *
+ * Flow:
+ *   1. Auto-detect surface markers and union-merge into `manifest.surfaces` (S3 #1).
+ *      Phase-1 users land here with empty surfaces; this single auto-detect lifts
+ *      them to Phase 2 without requiring a separate `pb setup-detect-surfaces` run.
+ *   2. Read pb-setup state via the Convex query (`setup.getPbSetupState`).
+ *   3. Record invocation receipt — first-write-wins per DEC-996, idempotent.
+ *   4. Emit the resolved state JSON on stdout for the skill body to consume.
+ *
+ * `pb start` (session-start alias) is unchanged and keeps the same call path it
+ * had before this slice.
+ *
+ * Legacy `pb setup` (WP-301) — guided onboarding via @clack/prompts — is removed
+ * from the canonical entry per DEC-995. The login flow remains reachable via
+ * `pb login`.
+ */
+import { runSetupDetectSurfaces, formatDetectSurfacesSummary } from './setup-detect-surfaces.js';
+import { fetchSetupState, handleSetupError } from './setup-state.js';
+import { kernelCall } from '../lib/client.js';
+export async function runSetup(opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    const isTty = Boolean(process.stdout.isTTY);
+    let initialState;
+    try {
+        initialState = await fetchSetupState();
+    }
+    catch (err) {
+        handleSetupError(err);
+    }
+    // Always record invocation — first-write-wins per DEC-996.
+    await recordInvocationBestEffort(initialState);
+    let finalState = initialState;
+    if (initialState.phase === 1) {
+        const detect = await runSetupDetectSurfaces({ cwd });
+        if (isTty) {
+            process.stderr.write(formatDetectSurfacesSummary(detect) + '\n');
+        }
+        if (detect.manifestUpdated) {
+            try {
+                finalState = await fetchSetupState();
+            }
+            catch (err) {
+                handleSetupError(err);
+            }
+        }
+    }
+    process.stdout.write(JSON.stringify(finalState) + '\n');
+}
+async function recordInvocationBestEffort(state) {
+    // WP-431 S3 review fix #1: surfaceCapability is now a structural field on the
+    // resolver output (PbSetupStateOutput.surfaceCapability) — read it directly
+    // rather than string-grepping reasonForPhase strings the producer never
+    // emits. The pre-fix `inferSurfaceCapability` always returned 'cli' for
+    // chat-only users, silently breaking OBJ-32 dual-threshold telemetry.
+    const surfaceCapability = state.surfaceCapability;
+    try {
+        await kernelCall('setup.recordSetupInvocation', { surfaceCapability });
+    }
+    catch (err) {
+        // Best-effort — invocation receipt is telemetry, never block the state
+        // read. WP-431 S3 review (Boy Scout #1): log to stderr so a silent failure
+        // doesn't strand OBJ-32 dual-threshold attribution.
+        const message = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`[pb setup] invocation attribution failed: ${message}\n`);
+    }
+}
+//# sourceMappingURL=setup.js.map

package/dist/commands/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAyB,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAM9C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB,EAAE;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE5C,IAAI,YAA8B,CAAC;IACnC,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,eAAe,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,2DAA2D;IAC3D,MAAM,0BAA0B,CAAC,YAAY,CAAC,CAAC;IAE/C,IAAI,UAAU,GAAG,YAAY,CAAC;IAC9B,IAAI,YAAY,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,eAAe,EAAE,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAAuB;IAC/D,8EAA8E;IAC9E,4EAA4E;IAC5E,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,UAAU,CAA0D,6BAA6B,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,2EAA2E;QAC3E,oDAAoD;QACpD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,OAAO,IAAI,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}

package/dist/commands/shape.d.ts

@@ -0,0 +1,16 @@
+import { Command } from 'commander';
+export interface ShapeListOptions {
+    disposition?: string;
+    outcome?: string;
+    limit?: string;
+}
+export declare function runShapeList(options: ShapeListOptions): Promise<void>;
+export declare function runShapeShow(rowId: string): Promise<void>;
+export declare function runShapeAgree(rowId: string, options: {
+    reason?: string;
+}): Promise<void>;
+export declare function runShapeDismiss(rowId: string, options: {
+    reason?: string;
+}): Promise<void>;
+export declare function createShapeCommand(): Command;
+//# sourceMappingURL=shape.d.ts.map

package/dist/commands/shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shape.d.ts","sourceRoot":"","sources":["../../src/commands/shape.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmCpC,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,wBAAsB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD3E;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB/D;AA4BD,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9F;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhG;AAED,wBAAgB,kBAAkB,IAAI,OAAO,CAyB5C"}

package/dist/commands/shape.js

@@ -0,0 +1,149 @@
+import { Command } from 'commander';
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCall, kernelCallEnvelope, kernelCallWithSession } from '../lib/client.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { runCliCommand } from '../lib/runner.js';
+import { readSession } from '../lib/session.js';
+import { formatShapeAdvisoriesList, formatShapeAdvisoryShow, formatShapeDispositionReceipt, } from '../formatters/shape.js';
+/**
+ * `pb shape` — the disposition ledger surface (WP-559, Slice 2 of WP-557, TEN-2532).
+ * Structurally mirrors packages/cli/src/commands/conflicts.ts: `list`/`show` are plain reads
+ * (kernelCall, no session), `agree`/`dismiss` are workspace writes that are session-attributed
+ * (kernelCallWithSession + a requireShapeSession-style gate) — same shape as conflicts'
+ * list/resolve split. Identity for the write itself is gateway-derived
+ * (workspaceId/personId/apiKeyId injection, `chain.dispositionShapeAdvisory`), never sessionId.
+ */
+function requireShapeSession() {
+    const session = readSession();
+    if (!session) {
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: 'Run `pb session start` before dispositioning a shape advisory.',
+        });
+    }
+    return session;
+}
+const LIST_DISPOSITIONS = ['pending', 'agreed', 'dismissed', 'expired'];
+const LIST_OUTCOMES = ['not_candidate', 'atomic', 'compound', 'unavailable'];
+export async function runShapeList(options) {
+    if (options.disposition && !LIST_DISPOSITIONS.includes(options.disposition)) {
+        throw new CLIError(`--disposition must be one of ${LIST_DISPOSITIONS.join(', ')} (got "${options.disposition}").`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb shape list [--disposition <disposition>] [--outcome <outcome>]',
+        });
+    }
+    if (options.outcome && !LIST_OUTCOMES.includes(options.outcome)) {
+        throw new CLIError(`--outcome must be one of ${LIST_OUTCOMES.join(', ')} (got "${options.outcome}").`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb shape list [--disposition <disposition>] [--outcome <outcome>]',
+        });
+    }
+    const config = await getConfigOrGuide(() => runShapeList(options));
+    if (!config)
+        return;
+    // Review round 4 (Codex P2, mirrors the MCP `shape` tool's own S4 fix): a bare `pb shape
+    // list` — the normal first call of the documented list/show/agree flow — requests every
+    // ledger outcome; the backend returns only the newest 50 subjects, so recent
+    // not_candidate/atomic/unavailable rows can push an older PENDING COMPOUND row (the only
+    // outcome the disposition mutation can actually act on) out of the page. Default a
+    // fully-unfiltered call to the actionable set; any explicitly requested --disposition/--outcome
+    // is honored as-is, with no override.
+    const noFiltersGiven = options.disposition === undefined && options.outcome === undefined;
+    const effectiveDisposition = options.disposition ?? (noFiltersGiven ? 'pending' : undefined);
+    const effectiveOutcome = options.outcome ?? (noFiltersGiven ? 'compound' : undefined);
+    // WP-571 sweep fix (P1 review finding on PR #520): `chain.shapeAdvisories` was ALREADY
+    // live (auto-deployed/published on every merge to main) returning a BARE ARRAY — both as
+    // the HTTP wire `data` AND as this command's own `--json` stdout shape (a separate,
+    // ALSO-already-published contract scripts/agents may pipe). Both stay a bare array.
+    // The LIST_SCAN_CAP truncation signal rides `_meta.truncated` on the wire
+    // (convex/lib/envelopeContract.ts) and is surfaced ONLY in pretty/TTY mode here via the
+    // closure variable below — kernelCallEnvelope (not kernelCall, which strips to `.data`
+    // only) is needed to read `_meta` back.
+    let truncated = false;
+    await runCliCommand({
+        fn: async () => {
+            const envelope = await kernelCallEnvelope('chain.shapeAdvisories', {
+                ...(effectiveDisposition ? { disposition: effectiveDisposition } : {}),
+                ...(effectiveOutcome ? { outcome: effectiveOutcome } : {}),
+                ...(options.limit ? { limit: Number(options.limit) } : {}),
+            });
+            truncated = Boolean(envelope._meta?.truncated);
+            return envelope.data;
+        },
+        formatPretty: (value) => formatShapeAdvisoriesList(value, undefined, truncated),
+    });
+}
+export async function runShapeShow(rowId) {
+    const config = await getConfigOrGuide(() => runShapeShow(rowId));
+    if (!config)
+        return;
+    await runCliCommand({
+        fn: async () => {
+            const value = await kernelCall('chain.showShapeAdvisory', { rowId });
+            // Review round 1 (Codex P2): a missing/cross-workspace row must fail the command (exit
+            // non-zero), not print "not found" and exit 0 — matches the MCP show action's structured
+            // failure, and lets scripts/agents distinguish "found" from "doesn't exist" reliably.
+            if (!value) {
+                throw new CLIError(`Advisory '${rowId}' not found (missing, or belongs to a different workspace).`, {
+                    code: ErrorCode.VALIDATION_FAILED,
+                    category: 'validation',
+                    guidance: 'Use `pb shape list` to find valid ids.',
+                });
+            }
+            return value;
+        },
+        formatPretty: (value) => formatShapeAdvisoryShow(value),
+    });
+}
+const DISPOSITION_ALIASES = {
+    agree: 'agreed',
+    dismiss: 'dismissed',
+};
+async function runShapeDisposition(verb, rowId, options) {
+    const config = await getConfigOrGuide(() => runShapeDisposition(verb, rowId, options));
+    if (!config)
+        return;
+    // Client-side session gate only (matches requireConflictsSession's discipline) — identity
+    // for the write itself is gateway-derived, never sessionId.
+    requireShapeSession();
+    const disposition = DISPOSITION_ALIASES[verb];
+    await runCliCommand({
+        fn: () => kernelCallWithSession('chain.dispositionShapeAdvisory', {
+            rowId,
+            disposition,
+            ...(options.reason ? { dispositionReason: options.reason } : {}),
+        }),
+        formatPretty: (value) => formatShapeDispositionReceipt(value),
+    });
+}
+export async function runShapeAgree(rowId, options) {
+    await runShapeDisposition('agree', rowId, options);
+}
+export async function runShapeDismiss(rowId, options) {
+    await runShapeDisposition('dismiss', rowId, options);
+}
+export function createShapeCommand() {
+    const command = new Command('shape').description('Review and disposition shape-advisory (single-concern) suggestions (WP-559, TEN-2532)');
+    command.command('list')
+        .description('List shape advisories for this workspace, latest per subject (no filters defaults to disposition:pending + outcome:compound)')
+        .option('--disposition <disposition>', `Filter by disposition (${LIST_DISPOSITIONS.join('|')}); omitting both filters defaults to pending`)
+        .option('--outcome <outcome>', `Filter by outcome (${LIST_OUTCOMES.join('|')}); omitting both filters defaults to compound`)
+        .option('--limit <limit>', 'Max rows to return (default 50, max 200)')
+        .action(runShapeList);
+    command.command('show <id>')
+        .description('Show one shape advisory by id')
+        .action(runShapeShow);
+    command.command('agree <id>')
+        .description('Agree with a compound advisory\'s split verdict')
+        .option('--reason <reason>', 'Optional reason (capped at 1000 chars)')
+        .action(runShapeAgree);
+    command.command('dismiss <id>')
+        .description('Dismiss a compound advisory\'s split verdict')
+        .option('--reason <reason>', 'Optional reason (capped at 1000 chars)')
+        .action(runShapeDismiss);
+    return command;
+}
+//# sourceMappingURL=shape.js.map

package/dist/commands/shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shape.js","sourceRoot":"","sources":["../../src/commands/shape.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAqB,MAAM,mBAAmB,CAAC;AACnE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,GAG9B,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;GAOG;AAEH,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,gEAAgE;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;AACjF,MAAM,aAAa,GAAG,CAAC,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAU,CAAC;AAEtF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,IAAI,OAAO,CAAC,WAAW,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,QAAQ,CAAC,gCAAgC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,WAAW,KAAK,EAAE;YACjH,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,0EAA0E;SACrF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,QAAQ,CAAC,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,OAAO,KAAK,EAAE;YACrG,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,0EAA0E;SACrF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,yFAAyF;IACzF,wFAAwF;IACxF,6EAA6E;IAC7E,yFAAyF;IACzF,mFAAmF;IACnF,gGAAgG;IAChG,sCAAsC;IACtC,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC;IAC1F,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtF,uFAAuF;IACvF,yFAAyF;IACzF,oFAAoF;IACpF,oFAAoF;IACpF,0EAA0E;IAC1E,wFAAwF;IACxF,uFAAuF;IACvF,wCAAwC;IACxC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,aAAa,CAAsB;QACvC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAsB,uBAAuB,EAAE;gBACtF,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;KAChF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,KAAK,GAAG,MAAM,UAAU,CAAsD,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAA6B,CAAC;YACtJ,uFAAuF;YACvF,yFAAyF;YACzF,sFAAsF;YACtF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,QAAQ,CAAC,aAAa,KAAK,6DAA6D,EAAE;oBAClG,IAAI,EAAE,SAAS,CAAC,iBAAiB;oBACjC,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,wCAAwC;iBACnD,CAAC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,mBAAmB,GAAwD;IAC/E,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,WAAW;CACrB,CAAC;AAEF,KAAK,UAAU,mBAAmB,CAChC,IAAyB,EACzB,KAAa,EACb,OAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,0FAA0F;IAC1F,4DAA4D;IAC5D,mBAAmB,EAAE,CAAC;IACtB,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,aAAa,CAA0B;QAC3C,EAAE,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAA6D,gCAAgC,EAAE;YAC5H,KAAK;YACL,WAAW;YACX,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAqC;QACtC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,KAAK,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,OAA4B;IAC7E,MAAM,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,OAA4B;IAC/E,MAAM,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,uFAAuF,CAAC,CAAC;IAE1I,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;SACpB,WAAW,CAAC,8HAA8H,CAAC;SAC3I,MAAM,CAAC,6BAA6B,EAAE,0BAA0B,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC;SAC1I,MAAM,CAAC,qBAAqB,EAAE,sBAAsB,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,+CAA+C,CAAC;SAC3H,MAAM,CAAC,iBAAiB,EAAE,0CAA0C,CAAC;SACrE,MAAM,CAAC,YAAY,CAAC,CAAC;IAExB,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;SACzB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,YAAY,CAAC,CAAC;IAExB,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;SAC1B,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,CAAC;SACrE,MAAM,CAAC,aAAa,CAAC,CAAC;IAEzB,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;SAC5B,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,CAAC;SACrE,MAAM,CAAC,eAAe,CAAC,CAAC;IAE3B,OAAO,OAAO,CAAC;AACjB,CAAC"}