@productbrain/cli 0.1.0-beta.77 → 0.1.0-beta.7707

package/dist/lib/reportedProfile.js

@@ -0,0 +1,144 @@
+/**
+ * Reported profile — the label status surfaces print.
+ *
+ * Credential resolution already refuses a declared project with no tenant
+ * (`getConfigSafe().kind === 'missing-pin'`). Labels must read that result
+ * rather than re-guess a cascade that names a workspace the CLI will not use.
+ *
+ * Lives outside config.ts (STD-2 / DEC-1504 shrink-only). Do not re-export
+ * from config.ts — this module imports FROM config.ts.
+ */
+import { resolveConfig, resolveEffectiveProfile } from './config.js';
+import { resolveConfigResult } from './configResult.js';
+import { declaresCompletePreviewBinding, declaresLocalBinding } from './localBinding.js';
+import { readLocalProjectConfig } from './projectConfig.js';
+import { getGlobalActiveProfile } from './profiles.js';
+import { isEnvKeyBinding } from './envKeySnapshot.js';
+// The snapshot itself lives in its own leaf so config.ts can use it too without a cycle.
+// Re-exported here because every label surface already imports it from this module.
+export { isEnvKeyBinding, resetReportedProfileSnapshot } from './envKeySnapshot.js';
+export function resolveReportedProfile() {
+    // Precedence mirrors the CREDENTIAL cascade (DEC-1607), so the label can never name a source
+    // that lost. An exported key wins resolveConfig() step 1 outright — ahead of the pin, ahead of
+    // the no-tenant refusal — so it is reported first, and `missing-pin` can never co-occur.
+    if (isEnvKeyBinding())
+        return { profile: null, source: 'env-key' };
+    // From here the answer comes from ONE place: the credential cascade re-run against the FILES.
+    //
+    // `ignoreEnvKey` is what makes that possible (TEN-3311). loadEnv() copies whichever credential
+    // won into PRODUCTBRAIN_API_KEY, so a plain getConfigSafe() after any kernel call reports every
+    // binding as `env` — which is why five review rounds each surfaced one more branch whose label
+    // was wrong. We have already established above that no OPERATOR export exists, so skipping
+    // step 1 recovers the branch that actually supplied the key, with the name it recorded.
+    const cfg = resolveConfigResult(() => resolveConfig(true));
+    if (!cfg.ok) {
+        // ONE RULE, and every refusal obeys it: a refusal is still an answer about WHICH binding is in
+        // play, so it must never be attributed to a source that binding already beat. Four review
+        // rounds found four refusals violating it, so they are handled by what the refusal KNOWS
+        // rather than case by case (Codex P2 r8, r16, r18, r20):
+        //   the no-tenant refusal   → say so; nothing is bound (r8).
+        //   it names the winner     → name it, even though the cascade then rejected what it held.
+        //                             Re-deriving returns a DIFFERENT profile when PB_PROFILE points
+        //                             at a missing one (r18).
+        //   it names only a source  → a dotenv file supplied it and then failed validation (r20).
+        //   config.local.json's own → an incomplete claim, or a complete one with a bad URL (r16).
+        // Only a DANGLING PIN falls through to the configured name, because naming the pin IS the
+        // diagnosis the operator needs there (TEN-2163).
+        if (cfg.kind === 'missing-pin')
+            return { profile: null, source: 'missing-pin' };
+        if (cfg.profileName)
+            return { profile: cfg.profileName, source: classifyProfileName(cfg.profileName) };
+        if (cfg.source === 'cwd')
+            return { profile: null, source: 'cwd-key' };
+        return classifyLocalBinding() ?? safeDerive();
+    }
+    const source = cfg.source;
+    switch (source) {
+        case 'project': {
+            // config.local.json won. `profileName` present = the repo PIN; absent = a direct
+            // apiKey/siteUrl binding, which resolveLocalBinding() puts AHEAD of any sibling pin
+            // (Codex P2 r7) — so naming that pin would name a workspace pb is not using.
+            if (cfg.profileName)
+                return { profile: cfg.profileName, source: 'local' };
+            return classifyLocalBinding() ?? { profile: null, source: 'local-key' };
+        }
+        // resolveProfileConfig() falls PB_PROFILE → active-profile file → "default" → legacy and
+        // RECORDS the winner, so a PB_PROFILE naming a DELETED profile no longer reports that dead
+        // name. Absent only for the nameless legacy home file, which no profile describes.
+        case 'profile':
+            // No name only for the nameless legacy home file, which is auto-migrated on first use;
+            // leave that rare path on the configured-name behaviour rather than inventing a label.
+            return cfg.profileName
+                ? { profile: cfg.profileName, source: classifyProfileName(cfg.profileName) }
+                : safeDerive();
+        // A dotenv file here supplied the key. No profile involved — same lie as env-key, other file.
+        case 'cwd':
+            return { profile: null, source: 'cwd-key' };
+        // 'env' cannot reach here — an operator export returned above. 'default' means no credential
+        // at all, so the configured name is the right thing to show.
+        case 'env':
+        case 'default':
+            return safeDerive();
+    }
+    // No `default:` on purpose. doneWhen asks for a CENSUS of every label path rather than sampling,
+    // and TEN-3311 is the record of what sampling cost: each review round turned up one more
+    // unmapped branch. A catch-all would let a NEW ConfigSource member join the union and silently
+    // fall through to the configured name — the same failure, one more time. This makes the compiler
+    // refuse to build until the new member is mapped, so the census cannot rot.
+    const unmapped = source;
+    return unmapped;
+}
+/**
+ * Name config.local.json's own direct binding, or null when it declares none. Shared by the
+ * success and refusal paths so a binding is described the same way whether it resolved or blew up.
+ */
+function classifyLocalBinding() {
+    try {
+        const local = readLocalProjectConfig();
+        // localBinding's OWN claim predicate, not a copy of it. Mine missed `apiKeyMalformed` — a
+        // wrong-prefix or non-string key, which resolveLocalBinding() still treats as a direct-binding
+        // claim that outranks the pin, so the label fell back to naming that pin (Codex P2 r17).
+        // Duplicating this test is what caused it; sharing it is what stops the next one.
+        if (!declaresLocalBinding(local))
+            return null;
+        const preview = declaresCompletePreviewBinding(local);
+        return preview
+            ? { profile: preview.workspaceName, source: 'preview' }
+            : { profile: null, source: 'local-key' };
+    }
+    catch {
+        return null;
+    }
+}
+/** The configured-name path, guarded: whoami must degrade on an unreadable/racing file, not throw. */
+function safeDerive() {
+    try {
+        return resolveEffectiveProfile();
+    }
+    catch {
+        return { profile: null, source: 'none' };
+    }
+}
+/**
+ * Where a profile NAME that actually supplied the credential came from.
+ *
+ * Same precedence as `resolveEffectiveProfile()`: repo pin > PB_PROFILE > global > default. The
+ * pin came last-minute (Codex P2 r19) — without it, a pinned profile whose URL is then rejected
+ * was reported `global`, pointing the operator at the wrong file to repair.
+ */
+function classifyProfileName(name) {
+    try {
+        if (name === readLocalProjectConfig()?.profile)
+            return 'local';
+    }
+    catch { /* fall through */ }
+    if (name === process.env.PB_PROFILE?.trim())
+        return 'env';
+    try {
+        if (name === getGlobalActiveProfile())
+            return 'global';
+    }
+    catch { /* fall through */ }
+    return name === 'default' ? 'default' : 'global';
+}
+//# sourceMappingURL=reportedProfile.js.map

package/dist/lib/reportedProfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reportedProfile.js","sourceRoot":"","sources":["../../src/lib/reportedProfile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAA+B,MAAM,aAAa,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAKtD,yFAAyF;AACzF,oFAAoF;AACpF,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEpF,MAAM,UAAU,sBAAsB;IAIpC,6FAA6F;IAC7F,+FAA+F;IAC/F,yFAAyF;IACzF,IAAI,eAAe,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,8FAA8F;IAC9F,EAAE;IACF,+FAA+F;IAC/F,gGAAgG;IAChG,+FAA+F;IAC/F,2FAA2F;IAC3F,wFAAwF;IACxF,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,+FAA+F;QAC/F,0FAA0F;QAC1F,yFAAyF;QACzF,yDAAyD;QACzD,6DAA6D;QAC7D,2FAA2F;QAC3F,6FAA6F;QAC7F,sDAAsD;QACtD,0FAA0F;QAC1F,2FAA2F;QAC3F,0FAA0F;QAC1F,iDAAiD;QACjD,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAChF,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACvG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACtE,OAAO,oBAAoB,EAAE,IAAI,UAAU,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,iFAAiF;YACjF,oFAAoF;YACpF,6EAA6E;YAC7E,IAAI,GAAG,CAAC,WAAW;gBAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1E,OAAO,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC1E,CAAC;QACD,yFAAyF;QACzF,2FAA2F;QAC3F,mFAAmF;QACnF,KAAK,SAAS;YACZ,uFAAuF;YACvF,uFAAuF;YACvF,OAAO,GAAG,CAAC,WAAW;gBACpB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;gBAC5E,CAAC,CAAC,UAAU,EAAE,CAAC;QACnB,8FAA8F;QAC9F,KAAK,KAAK;YACR,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9C,6FAA6F;QAC7F,6DAA6D;QAC7D,KAAK,KAAK,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,UAAU,EAAE,CAAC;IACxB,CAAC;IACD,iGAAiG;IACjG,yFAAyF;IACzF,+FAA+F;IAC/F,iGAAiG;IACjG,4EAA4E;IAC5E,MAAM,QAAQ,GAAU,MAAM,CAAC;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACvC,0FAA0F;QAC1F,+FAA+F;QAC/F,yFAAyF;QACzF,kFAAkF;QAClF,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,OAAO;YACZ,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE;YACvD,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,OAAO,uBAAuB,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,sBAAsB,EAAE,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,sBAAsB,EAAE;YAAE,OAAO,QAAQ,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnD,CAAC"}

package/dist/lib/ruleListRender.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Rule delivery — served-row TEXT RENDERING (DEC-1774, TASK-436; B4b pre-review, findings 1+3).
+ *
+ * ONE implementation, generated into both connectors (`packages/cli/src/lib/ruleListRender.ts`,
+ * `packages/mcp-server/src/lib/ruleListRender.ts` — `scripts/generate-mcp-embedded-copies.mjs`)
+ * instead of two independently hand-maintained twins. Finding 3: the CLI and MCP copies had
+ * already drifted ("  Label:"/"    • " vs "Label:"/"  - ") with nothing pinning them — the same
+ * class of bug Constitution §13 exists to prevent ("connector copies are generated, never
+ * hand-edited on one side"). Living in `kernel/` rather than `convex/lib/` is deliberate: kernel
+ * has zero Convex/package build edges (STD-K1, INS-2092), so this file defines its OWN
+ * structural row/bucket/view shape rather than importing `convex/lib/ruleLists.ts`'s — a real
+ * `RuleListServedRow`/`ClientRuleListsResult` (or `@productbrain/kernel-client`'s type-only
+ * re-export of the former) satisfies these shapes structurally, no cast needed. Still a
+ * generated copy, not a live import, for the SAME reason every other kernel/ generator target
+ * is (see that generator's own header): Railway's isolated MCP Docker build cannot resolve a
+ * private workspace package at runtime, kernel included — TEN-3891 (no new convex/ module) does
+ * not apply here since this file is not under convex/, but the connector-isolation constraint
+ * still does.
+ *
+ * Finding 1 (silent truncation): `kernel/governance/ruleLists.ts:131`'s own contract — "a caller
+ * must not treat these lists as complete when `truncated` is true" — was being violated by
+ * BOTH connector renderers: `truncated`/`unassigned` reached every payload (declared on
+ * `RuleListsRenderView` since day one) but neither renderer ever printed them, so a truncated
+ * read looked identical to a complete one. Fixed here, once: a top-level trailer when
+ * `truncated`, a top-level trailer when `unassigned > 0`, and the per-bucket over-cap line says
+ * "at least +N more" (not a bare count) when `truncated` — the true trim count could be larger
+ * than what this capped-and-possibly-incomplete read could see.
+ */
+export interface RuleListRenderRow {
+    entryId: string;
+    bucket: 'everyone' | 'team' | 'role';
+    ownerRoleId?: string;
+    teamId?: string;
+    servedAt?: number;
+}
+export interface RuleListRenderBucket {
+    rows: RuleListRenderRow[];
+    overCap: number;
+}
+export interface RuleListsRenderView {
+    everyone: RuleListRenderBucket;
+    team: RuleListRenderBucket | null;
+    role: RuleListRenderBucket;
+    unassigned: number;
+    truncated: boolean;
+}
+/** One line per served rule. `—` for an absent optional field — the row model's own convention:
+ *  absence means the source genuinely doesn't carry it (e.g. a live serve has no `servedAt`
+ *  yet), never a placeholder standing in for a real value. */
+export declare function formatRuleListRow(row: RuleListRenderRow): string;
+/** One capped bucket ("Everyone"/"Team"/"Role") as a label line + one bullet per row + an
+ *  over-cap trailer when the cap trimmed rows. `truncated` (finding 1) qualifies the trailer as
+ *  a floor, not an exact count, when the underlying read itself may have missed rows before the
+ *  cap ever applied. Empty/null bucket renders nothing (never an empty header). */
+export declare function formatRuleListBucketLines(label: string, bucket: RuleListRenderBucket | null | undefined, truncated: boolean): string[];
+/** All three buckets as text lines, plus the two finding-1 trailers — empty array only when
+ *  every bucket is empty/absent AND neither trailer applies. */
+export declare function formatRuleListsLines(ruleLists: RuleListsRenderView | undefined): string[];
+//# sourceMappingURL=ruleListRender.d.ts.map

package/dist/lib/ruleListRender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleListRender.d.ts","sourceRoot":"","sources":["../../src/lib/ruleListRender.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAClC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACnB;AAeD;;8DAE8D;AAC9D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAMhE;AAED;;;mFAGmF;AACnF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAAE,SAAS,EAAE,OAAO,GAAG,MAAM,EAAE,CAKtI;AAED;gEACgE;AAChE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,mBAAmB,GAAG,SAAS,GAAG,MAAM,EAAE,CAoBzF"}

package/dist/lib/ruleListRender.js

@@ -0,0 +1,63 @@
+// GENERATED by scripts/generate-mcp-embedded-copies.mjs from kernel/governance/ruleListRender.ts.
+// DO NOT EDIT. Run `npm run mcp:embedded-copies` to regenerate.
+// Local runtime copy for the isolated connector build.
+/** Round 1 fix (PRRT_kwDORS4ils6mH53G): `entryId`/`ownerRoleId`/`teamId` are caller-supplied
+ *  Chain ids (`entries.create` takes `entryId: v.string()`, same fact `sanitizeEntryIdForPrompt`
+ *  documents at `convex/review/reviewAction.ts:167-179` for a sibling surface) — strip control
+ *  characters and collapse whitespace/newlines before a row is interpolated into a rendered
+ *  line, mirroring `sanitizeSingleLineField` (`packages/{cli,mcp-server}/src/lib/strip.ts`) as a
+ *  self-contained copy: kernel/ has zero Convex/package build edges (STD-K1), so this can't
+ *  import either connector's copy, only duplicate the minimal logic. */
+// eslint-disable-next-line no-control-regex
+const RULE_LIST_CONTROL_CHARS_RE = /[\x00-\x08\x0b-\x1f\x7f]/g;
+function sanitizeRuleListField(value) {
+    return value.replace(RULE_LIST_CONTROL_CHARS_RE, '').replace(/\s+/g, ' ').trim();
+}
+/** One line per served rule. `—` for an absent optional field — the row model's own convention:
+ *  absence means the source genuinely doesn't carry it (e.g. a live serve has no `servedAt`
+ *  yet), never a placeholder standing in for a real value. */
+export function formatRuleListRow(row) {
+    const entryId = sanitizeRuleListField(row.entryId);
+    const owner = row.ownerRoleId ? sanitizeRuleListField(row.ownerRoleId) : '—';
+    const team = row.teamId ? ` (team ${sanitizeRuleListField(row.teamId)})` : '';
+    const servedAt = row.servedAt ? ` — served ${new Date(row.servedAt).toISOString()}` : '';
+    return `${entryId} — owner ${owner}${team}${servedAt}`;
+}
+/** One capped bucket ("Everyone"/"Team"/"Role") as a label line + one bullet per row + an
+ *  over-cap trailer when the cap trimmed rows. `truncated` (finding 1) qualifies the trailer as
+ *  a floor, not an exact count, when the underlying read itself may have missed rows before the
+ *  cap ever applied. Empty/null bucket renders nothing (never an empty header). */
+export function formatRuleListBucketLines(label, bucket, truncated) {
+    if (!bucket || bucket.rows.length === 0)
+        return [];
+    const lines = [`${label}:`, ...bucket.rows.map((r) => `  - ${formatRuleListRow(r)}`)];
+    if (bucket.overCap > 0)
+        lines.push(`  (${truncated ? 'at least ' : ''}+${bucket.overCap} more, capped)`);
+    return lines;
+}
+/** All three buckets as text lines, plus the two finding-1 trailers — empty array only when
+ *  every bucket is empty/absent AND neither trailer applies. */
+export function formatRuleListsLines(ruleLists) {
+    if (!ruleLists)
+        return [];
+    const lines = [
+        ...formatRuleListBucketLines('Everyone', ruleLists.everyone, ruleLists.truncated),
+        ...formatRuleListBucketLines('Team', ruleLists.team, ruleLists.truncated),
+        ...formatRuleListBucketLines('Role', ruleLists.role, ruleLists.truncated),
+    ];
+    if (lines.length === 0 && ruleLists.unassigned === 0 && !ruleLists.truncated)
+        return [];
+    if (ruleLists.truncated) {
+        lines.push('(Some Current rules may be missing from these lists — the underlying read was truncated.)');
+    }
+    if (ruleLists.unassigned > 0) {
+        // Round 2 fix (PRRT_kwDORS4ils6mKtav): `unassigned` is counted from the SAME possibly-
+        // incomplete read `truncated` already qualifies — when truncated, a rule this read never
+        // saw could also be unassigned, so the true count could be larger. Mirrors the per-bucket
+        // overCap "at least +N more" qualification above (line 82) for the same reason.
+        const atLeast = ruleLists.truncated ? 'at least ' : '';
+        lines.push(`(${atLeast}${ruleLists.unassigned} rule(s) opted into a list but could not be resolved — excluded, not silently dropped.)`);
+    }
+    return lines;
+}
+//# sourceMappingURL=ruleListRender.js.map

package/dist/lib/ruleListRender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleListRender.js","sourceRoot":"","sources":["../../src/lib/ruleListRender.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,gEAAgE;AAChE,uDAAuD;AAoDvD;;;;;;wEAMwE;AACxE,4CAA4C;AAC5C,MAAM,0BAA0B,GAAG,2BAA2B,CAAC;AAC/D,SAAS,qBAAqB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAClF,CAAC;AAED;;8DAE8D;AAC9D,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACvD,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7E,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,OAAO,GAAG,OAAO,YAAY,KAAK,GAAG,IAAI,GAAG,QAAQ,EAAE,CAAC;AACxD,CAAC;AAED;;;mFAGmF;AACnF,MAAM,UAAU,yBAAyB,CAAC,KAAa,EAAE,MAA+C,EAAE,SAAkB;IAC3H,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC;AACd,CAAC;AAED;gEACgE;AAChE,MAAM,UAAU,oBAAoB,CAAC,SAA0C;IAC9E,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG;QACb,GAAG,yBAAyB,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC;QACjF,GAAG,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC;QACzE,GAAG,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC;KACzE,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IACxF,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC9B,uFAAuF;QACvF,yFAAyF;QACzF,0FAA0F;QAC1F,gFAAgF;QAChF,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,GAAG,SAAS,CAAC,UAAU,yFAAyF,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/lib/runner.d.ts

@@ -2,7 +2,7 @@
  * runCliCommand — shared command runner for the Product Brain CLI.
  *
  * Owns:
- *   (a) TTY detection via process.stdout.isTTY
+ *   (a) auto-mode JSON opt-in via PB_JSON=1 (piping alone does NOT switch modes — WP-744 / 1e-B)
  *   (b) JSON vs human output branching
  *   (c) stripConvexInternals() application in JSON mode
  *   (d) --json and --pretty explicit overrides that take precedence over auto-detection
@@ -15,7 +15,15 @@ export declare function getOutputMode(): 'auto' | 'json' | 'pretty';
 /** Returns true if the current output mode resolves to JSON. */
 export declare function isJsonMode(): boolean;
 export declare function setQuietMode(quiet: boolean): void;
+/**
+ * The RAW quiet flag, independent of JSON mode. isQuietMode() conflates JSON mode,
+ * so read this when you need the literal quiet state (e.g. to assert that a window
+ * left quiet — and therefore the interactive-prompt gate — untouched).
+ */
+export declare function getQuietMode(): boolean;
 export declare function isQuietMode(): boolean;
+export declare function setSpinnersSilenced(silenced: boolean): void;
+export declare function areSpinnersSilenced(): boolean;
 export interface RunCliCommandOptions<T> {
     /** The async function that performs the MCP call and returns data. */
     fn: () => Promise<T>;

package/dist/lib/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/lib/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI,CAEpE;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,MAAM,GAAG,QAAQ,CAE1D;AAED,gEAAgE;AAChE,wBAAgB,UAAU,IAAI,OAAO,CAKpC;AASD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAEjD;AAED,wBAAgB,WAAW,IAAI,OAAO,CAIrC;AAED,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACrC,sEAAsE;IACtE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACrB,kDAAkD;IAClD,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC;CACnC;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtF"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/lib/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI,CAEpE;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,MAAM,GAAG,QAAQ,CAE1D;AAED,gEAAgE;AAChE,wBAAgB,UAAU,IAAI,OAAO,CAQpC;AASD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED,wBAAgB,WAAW,IAAI,OAAO,CAIrC;AAYD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAE3D;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACrC,sEAAsE;IACtE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACrB,kDAAkD;IAClD,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC;CACnC;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtF"}

package/dist/lib/runner.js

@@ -2,7 +2,7 @@
  * runCliCommand — shared command runner for the Product Brain CLI.
  *
  * Owns:
- *   (a) TTY detection via process.stdout.isTTY
+ *   (a) auto-mode JSON opt-in via PB_JSON=1 (piping alone does NOT switch modes — WP-744 / 1e-B)
  *   (b) JSON vs human output branching
  *   (c) stripConvexInternals() application in JSON mode
  *   (d) --json and --pretty explicit overrides that take precedence over auto-detection
@@ -14,7 +14,7 @@ import { stripConvexInternals } from './strip.js';
 import { CLIError } from './errors.js';
 /**
  * Global output mode — set by the CLI entry point when --json or --pretty flags are parsed.
- * 'auto' = detect via TTY; 'json' = force JSON; 'pretty' = force human.
+ * 'auto' = card unless PB_JSON=1; 'json' = force JSON; 'pretty' = force human.
  */
 let outputMode = 'auto';
 export function setOutputMode(mode) {
@@ -29,8 +29,11 @@ export function isJsonMode() {
         return true;
     if (outputMode === 'pretty')
         return false;
-    // auto: non-TTY (piped) → JSON, TTY → human
-    return !process.stdout.isTTY;
+    // auto: only an explicit PB_JSON=1 opts into JSON. Piping alone does NOT — the card is the
+    // default in every shell, TTY or not; `--json` (or PB_JSON=1) is the only way to ask for the
+    // warehouse (WP-744 / 1e-B). Formerly `!process.stdout.isTTY`, which made piped output
+    // indistinguishable from `--json` and left the card unreachable from a pipe.
+    return process.env.PB_JSON === '1';
 }
 /**
  * Quiet mode — suppresses non-essential output (banners, hints, progress).
@@ -41,12 +44,35 @@ let quietMode = false;
 export function setQuietMode(quiet) {
     quietMode = quiet;
 }
+/**
+ * The RAW quiet flag, independent of JSON mode. isQuietMode() conflates JSON mode,
+ * so read this when you need the literal quiet state (e.g. to assert that a window
+ * left quiet — and therefore the interactive-prompt gate — untouched).
+ */
+export function getQuietMode() {
+    return quietMode;
+}
 export function isQuietMode() {
     // JSON mode is inherently quiet — no decorative output needed
     if (isJsonMode())
         return true;
     return quietMode;
 }
+/**
+ * Spinner suppression — independent of quiet/json mode. Silences withSpinner()
+ * output WITHOUT making the CLI "quiet" (quiet also gates interactive prompts via
+ * prompts.ts/assertInteractive). `pb connect` flips this to hide the raw per-kernelCall
+ * spinner labels ("Loading chain getVocabulary", …) while still letting the handshake's
+ * adopt/revert prompts for PB-managed tampered files run (TEN-2561 / WP-2: legible
+ * output must never silence a prompt the user needs to answer).
+ */
+let spinnersSilenced = false;
+export function setSpinnersSilenced(silenced) {
+    spinnersSilenced = silenced;
+}
+export function areSpinnersSilenced() {
+    return spinnersSilenced;
+}
 /**
  * Execute a CLI command with unified output handling.
  *

package/dist/lib/runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/lib/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC;;;GAGG;AACH,IAAI,UAAU,GAA+B,MAAM,CAAC;AAEpD,MAAM,UAAU,aAAa,CAAC,IAAgC;IAC5D,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,UAAU;IACxB,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1C,4CAA4C;IAC5C,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,SAAS,GAAG,KAAK,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,8DAA8D;IAC9D,IAAI,UAAU,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,SAAS,CAAC;AACnB,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAI,OAAgC;IACrE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC;QAEhC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6EAA6E;QAC7E,+DAA+D;QAC/D,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/lib/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC;;;GAGG;AACH,IAAI,UAAU,GAA+B,MAAM,CAAC;AAEpD,MAAM,UAAU,aAAa,CAAC,IAAgC;IAC5D,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,UAAU;IACxB,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1C,2FAA2F;IAC3F,6FAA6F;IAC7F,uFAAuF;IACvF,6EAA6E;IAC7E,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,SAAS,GAAG,KAAK,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,8DAA8D;IAC9D,IAAI,UAAU,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAE7B,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,gBAAgB,GAAG,QAAQ,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAI,OAAgC;IACrE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC;QAEhC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6EAA6E;QAC7E,+DAA+D;QAC/D,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/session.d.ts

@@ -5,6 +5,17 @@
  *
  * WP-322 S2: session.json also serves as a closed marker (closedAt present)
  * for auto-resume logic when the last session closed <2h ago.
+ *
+ * WP-479 E2 (client half): when a conversation identity resolves (see ./conversation.ts —
+ * PB_CONVERSATION_ID / CLAUDE_CODE_SESSION_ID / CURSOR_CONVERSATION_ID / hashed
+ * CODEX_TUI_SESSION_LOG_PATH), the marker moves to `.productbrain/sessions/<conversationId>.json`
+ * so concurrent harness conversations sharing a worktree don't collide on one marker. Every
+ * function below resolves the conversation id ONCE (via resolveConversationId) and derives its
+ * path from that single value. With no identity signal present, resolveConversationId() returns
+ * null and every function falls back to the exact legacy `.productbrain/session.json` path and
+ * behavior — byte-identical, zero-config invariant. An explicit `conversationIdOverride` (only
+ * threaded from the CLI's `--conversation` flag on `pb session start`) takes priority over env
+ * detection; every other call site across the CLI calls these with no argument.
  */
 export interface SessionState {
     sessionId: string;
@@ -14,16 +25,39 @@ export interface SessionState {
     entriesCaptured: string[];
     /** Optional: set when session is closed. Presence indicates a closed-marker state. */
     closedAt?: string;
+    /** Effective profile name at session start — backstop for detecting a profile switch. */
+    profile?: string;
+    /**
+     * Fingerprint of the CREDENTIAL this session was started under (TEN-3240).
+     *
+     * `profile` alone cannot see a raw exported `PRODUCTBRAIN_API_KEY`: it names profiles, and an
+     * exported key supplies no profile name. Swap that key for another workspace's between two
+     * invocations and the name is unchanged, so the name-only backstop reports the OLD workspace's
+     * session as still active. This is derived from the resolved key + gateway, so it moves
+     * whenever the binding does — profile switch, preview flip, or bare key swap alike.
+     *
+     * Optional: sessions written before this field existed carry only `profile`, and the backstop
+     * still honours that. Never the key itself — a one-way digest, and only its head is kept.
+     */
+    bindingFingerprint?: string;
+    /** WP-479 E2: the conversation identity this marker is scoped to, when one resolved. */
+    conversationId?: string;
 }
+/** 2-hour window for auto-resume (WP-322 E1) — also the GC threshold for closed conversation
+ *  markers (WP-479 E2): a closed marker past this window will never be auto-resumed, so it's
+ *  garbage. Exported so commands/session.ts's resume logic uses the exact same constant. */
+export declare const RESUME_WINDOW_MS: number;
 /** Shape returned by readClosedMarker when a closed marker is present. */
 export interface ClosedMarker {
     sessionId: string;
     closedAt: string;
     workspaceId: string;
     workspaceName: string;
+    /** WP-479 E2: the conversation identity this marker was scoped to, when one resolved. */
+    conversationId?: string;
 }
-export declare function readSession(): SessionState | null;
-export declare function writeSession(state: SessionState): void;
+export declare function readSession(conversationIdOverride?: string): SessionState | null;
+export declare function writeSession(state: SessionState, conversationIdOverride?: string): void;
 /**
  * Writes a closed marker instead of deleting the file.
  * If the file is already a closed marker (closedAt present), deletes it outright
@@ -31,12 +65,62 @@ export declare function writeSession(state: SessionState): void;
  * Uses atomic write (tmp → rename) to prevent partial writes on active sessions.
  * WP-322 S2 — enables auto-resume within 2h window.
  */
-export declare function clearSession(): void;
+export declare function clearSession(conversationIdOverride?: string): void;
+/**
+ * Delete the CURRENT conversation's marker outright — NO closed marker. Use when discarding a
+ * single conversation's session (clearSession writes a resume marker; that is only correct for
+ * session close).
+ */
+export declare function discardSession(conversationIdOverride?: string): void;
+/**
+ * Delete EVERY session marker in this project — the legacy `session.json` AND every per-conversation
+ * marker under `.productbrain/sessions/`. Use on a WORKSPACE change (profile switch / connect
+ * redirect) so the 2h auto-resume can't re-pin the old workspace from ANY marker.
+ *
+ * Review fix (Codex): `discardSession()` resolves only the CURRENT conversation's marker, so a
+ * workspace-switch caller with no conversation env would leave other conversations' active markers
+ * behind — later reusable against the NEW workspace. A workspace change invalidates ALL of them, so
+ * this clears the whole set rather than one marker.
+ */
+export declare function discardAllSessions(): void;
+/** True if a session marker file exists at all — active session OR closed marker. */
+export declare function sessionFileExists(conversationIdOverride?: string): boolean;
+/**
+ * True if ANY session marker exists — the legacy `session.json` OR any per-conversation marker under
+ * `.productbrain/sessions/`. Used by `pb session reset` so a hard reset (and the binding-flip recovery
+ * it backs) can detect + clear a sibling conversation's marker it has no env to resolve (Codex
+ * re-review — the flip guard refuses on ANY active marker, so reset must see them ALL).
+ */
+export declare function hasAnySessionMarker(): boolean;
+/**
+ * True if ANY marker — legacy `session.json` OR any per-conversation marker — represents an ACTIVE
+ * session (no `closedAt`). Used by `pb session reset` so its confirmation/`--force` guard fires when
+ * a SIBLING conversation's session is active, not only the current one (Codex re-review: an
+ * all-marker reset must not silently strand an active sibling server session). Closed markers are
+ * inert and don't require a prompt.
+ */
+export declare function hasAnyActiveSession(): boolean;
+/**
+ * Find the ACTIVE marker carrying `sessionId`, across both storage shapes, or null.
+ *
+ * TEN-3315: the write-binding guard compares the bound credential against a marker's fingerprint,
+ * but a command can select a DIFFERENT conversation's session and pass its id explicitly (e.g.
+ * `pb rework report --conversation A`). Judging the ambient marker there would judge the wrong
+ * session, so the guard used to skip — blind exactly where the caller was most deliberate about
+ * which session it meant. This lets it judge the marker the call actually uses.
+ *
+ * Enumerates the same two places `hasAnyActiveSession()` does — the legacy `session.json` and the
+ * per-conversation directory — because a session id says nothing about which conversation owns it.
+ * Closed markers are not sessions, so they never match; a malformed one is skipped rather than
+ * throwing, since this sits in front of every session-attributed write.
+ */
+export declare function readSessionBySessionId(sessionId: string): SessionState | null;
 /**
- * Reads the closed marker from session.json.
+ * Reads the closed marker from the resolved conversation's marker file (or the legacy
+ * session.json when no conversation identity resolves).
  * Returns the marker if closedAt is present, otherwise null.
  * WP-322 S2 — used by runSessionStart to detect recent closed sessions.
  */
-export declare function readClosedMarker(): ClosedMarker | null;
-export declare function addCapturedEntry(entryId: string): void;
+export declare function readClosedMarker(conversationIdOverride?: string): ClosedMarker | null;
+export declare function addCapturedEntry(entryId: string, conversationIdOverride?: string): void;
 //# sourceMappingURL=session.d.ts.map

package/dist/lib/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/lib/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAcD,wBAAgB,WAAW,IAAI,YAAY,GAAG,IAAI,CAWjD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAItD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,IAAI,CA0BnC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,GAAG,IAAI,CAetD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAKtD"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/lib/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wFAAwF;IACxF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;4FAE4F;AAC5F,eAAO,MAAM,gBAAgB,QAAqB,CAAC;AAEnD,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAiFD,wBAAgB,WAAW,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAahF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAUvF;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CA6BlE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAIpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAmBzC;AAED,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,OAAO,CAG1E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAS7C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAkB7C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CA0B7E;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAkBrF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAKvF"}