@productbrain/cli 0.1.0-beta.77 → 0.1.0-beta.7707

package/dist/commands/files.test.js

@@ -0,0 +1,278 @@
+// packages/cli/src/commands/files.test.ts
+import { describe, it, expect } from 'vitest';
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync, readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { execSync } from 'node:child_process';
+import { resolveFiles, formatFilesPretty } from './files.js';
+// TEN-3088 / TEN-3082: a child `git` process spawned for a throwaway temp-repo fixture must
+// never inherit any repository-local env var a git hook's own process may have set (GIT_DIR
+// et al.) — if this suite ever runs from within a git hook process, those vars redirect a
+// fixture's `git init` at the REAL repo's gitdir instead of the temp dir. Mirrors
+// scripts/lib/gitFixtureEnv.mjs's fix for the same class of leak, kept local here to avoid a
+// cross-package import. GIT_ENV_LEAK_KEYS is `git rev-parse --local-env-vars`'s own output,
+// VENDORED (never shelled out to here) — not a hand-picked subset, which is what let GIT_CONFIG
+// and GIT_OBJECT_DIRECTORY through undetected in review round 1 (PRRT_kwDORS4ils6YnoW2). The
+// canonical copy + its superset test (verified live against a real `git rev-parse
+// --local-env-vars` run) lives in scripts/lib/gitFixtureEnv.mjs / .node-test.mjs; this array
+// must be kept in sync with it by hand (no shared import across the package boundary).
+const GIT_ENV_LEAK_KEYS = [
+    'GIT_ALTERNATE_OBJECT_DIRECTORIES',
+    'GIT_CONFIG',
+    'GIT_CONFIG_PARAMETERS',
+    'GIT_CONFIG_COUNT',
+    'GIT_OBJECT_DIRECTORY',
+    'GIT_DIR',
+    'GIT_WORK_TREE',
+    'GIT_IMPLICIT_WORK_TREE',
+    'GIT_GRAFT_FILE',
+    'GIT_INDEX_FILE',
+    'GIT_NO_REPLACE_OBJECTS',
+    'GIT_REPLACE_REF_BASE',
+    'GIT_PREFIX',
+    'GIT_SHALLOW_FILE',
+    'GIT_COMMON_DIR',
+];
+const GIT_FIXTURE_ENV = { ...process.env };
+for (const key of GIT_ENV_LEAK_KEYS)
+    delete GIT_FIXTURE_ENV[key];
+for (const key of Object.keys(GIT_FIXTURE_ENV)) {
+    if (/^GIT_CONFIG_(?:KEY|VALUE)_\d+$/.test(key))
+        delete GIT_FIXTURE_ENV[key];
+}
+function tmpRepoWith(files, gitignore) {
+    const dir = mkdtempSync(join(tmpdir(), 'pbcmd-'));
+    execSync('git init -q', { cwd: dir, env: GIT_FIXTURE_ENV });
+    mkdirSync(join(dir, '.productbrain'), { recursive: true });
+    for (const [p, c] of Object.entries(files))
+        writeFileSync(join(dir, '.productbrain', p), c);
+    if (gitignore !== undefined)
+        writeFileSync(join(dir, '.gitignore'), gitignore);
+    return dir;
+}
+describe('resolveFiles', () => {
+    it('classifies present files and finds an exposed secret', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}', 'soul.md': '#' }, '');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: false, dryRun: false });
+            expect(res.git).toBe(true);
+            expect(res.files.find((f) => f.path === 'config.local.json').exposed).toBe(true);
+            expect(res.exposures.some((e) => e.path === 'config.local.json')).toBe(true);
+            // pretty output is legible: names the secret + the fix command
+            const pretty = formatFilesPretty(res);
+            expect(pretty).toMatch(/config\.local\.json/);
+            expect(pretty).toMatch(/pb files --fix/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('all-clear when the secret is gitignored', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '.productbrain/config.local.json\n');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: false, dryRun: false });
+            expect(res.exposures).toHaveLength(0);
+            expect(formatFilesPretty(res)).toMatch(/all present pb-owned files are gitignored/i);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+});
+describe('resolveFiles --json shape + --fix', () => {
+    it('returns the documented --json schema', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: false, dryRun: false });
+            expect(res).toHaveProperty('workspace');
+            expect(res).toHaveProperty('root');
+            expect(res).toHaveProperty('git');
+            expect(Array.isArray(res.files)).toBe(true);
+            expect(Array.isArray(res.exposures)).toBe(true);
+            const row = res.files[0];
+            expect(row).toMatchObject({
+                path: expect.any(String), kind: expect.any(String), writer: expect.any(String),
+                when: expect.any(String), present: expect.any(Boolean),
+            });
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('--fix --dry-run computes lines but writes nothing', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: true });
+            expect(res.fix.added).toContain('.productbrain/config.local.json');
+            // dry-run: .gitignore unchanged (still empty)
+            expect(readFileSync(join(dir, '.gitignore'), 'utf8')).not.toMatch(/config\.local\.json/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('--fix actually seals the boundary (idempotent on re-run)', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const first = await resolveFiles({ fix: true, dryRun: false });
+            expect(first.fix.added).toContain('.productbrain/config.local.json');
+            expect(first.exposures).toHaveLength(0); // recomputed post-write: no stale exposure in the same call
+            const second = await resolveFiles({ fix: true, dryRun: false });
+            expect(second.fix.added).not.toContain('.productbrain/config.local.json');
+            expect(second.exposures).toHaveLength(0); // now sealed
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 60000);
+    it('nested root — fix refused message names <root>/.gitignore, not toplevel', async () => {
+        const dir = mkdtempSync(join(tmpdir(), 'pbcmd-nested-'));
+        const cwd = process.cwd();
+        try {
+            execSync('git init -q', { cwd: dir, env: GIT_FIXTURE_ENV });
+            const sub = join(dir, 'sub');
+            mkdirSync(join(sub, '.productbrain'), { recursive: true });
+            writeFileSync(join(sub, '.productbrain', 'config.json'), '{}');
+            process.chdir(sub);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            expect(res.fix.refused).toContain(sub + '/.gitignore');
+            expect(res.fix.refused).toContain('patterns are relative to that file');
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    it('--fix reports a tracked+exposed secret as needing git rm --cached, not sealed', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '.productbrain/config.local.json\n');
+        const cwd = process.cwd();
+        try {
+            // commit the secret so it is TRACKED despite the gitignore line
+            execSync('git add -f .productbrain/config.local.json', { cwd: dir, env: GIT_FIXTURE_ENV });
+            execSync('git -c user.email=t@t -c user.name=t commit -qm seed', { cwd: dir, env: GIT_FIXTURE_ENV });
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            expect(res.fix.trackedExposed).toContain('config.local.json');
+            expect(res.fix.added).not.toContain('.productbrain/config.local.json');
+            expect(formatFilesPretty(res)).toMatch(/git rm --cached/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 60000);
+    it('--fix reports stillExposed when a nested .productbrain/.gitignore negation overrides the root', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, ''); // empty root .gitignore
+        const cwd = process.cwd();
+        try {
+            // nested negation un-ignores the secret; a root pattern cannot override it (git precedence)
+            writeFileSync(join(dir, '.productbrain', '.gitignore'), '!config.local.json\n');
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            expect(res.fix.stillExposed).toContain('.productbrain/config.local.json');
+            expect(formatFilesPretty(res)).toMatch(/still exposed/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 60000);
+    it('--fix writes the rule for a tracked+exposed secret AND flags git rm --cached (coherent output)', async () => {
+        // realistic bootstrap: the secret is committed BEFORE any .gitignore rule exists
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, ''); // empty root .gitignore
+        const cwd = process.cwd();
+        try {
+            execSync('git add -f .productbrain/config.local.json', { cwd: dir, env: GIT_FIXTURE_ENV });
+            execSync('git -c user.email=t@t -c user.name=t commit -qm seed', { cwd: dir, env: GIT_FIXTURE_ENV });
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            // the rule IS written — after `git rm --cached` it keeps the secret ignored (Codex: add the rule)
+            expect(res.fix.added).toContain('.productbrain/config.local.json');
+            expect(readFileSync(join(dir, '.gitignore'), 'utf8')).toMatch(/^\.productbrain\/config\.local\.json$/m);
+            // and the untrack step is surfaced — coherently, WITHOUT the old contradictory "will NOT remove"
+            expect(res.fix.trackedExposed).toContain('config.local.json');
+            const pretty = formatFilesPretty(res);
+            expect(pretty).toMatch(/Added to \.gitignore/);
+            expect(pretty).toMatch(/git rm --cached [^\n]*config\.local\.json/);
+            expect(pretty).not.toMatch(/will NOT remove/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 60000);
+    it('--fix does not duplicate a root line on repeat runs, and never prints a false all-clear', async () => {
+        const dir = tmpRepoWith({ 'config.local.json': '{}' }, '');
+        const cwd = process.cwd();
+        try {
+            writeFileSync(join(dir, '.productbrain', '.gitignore'), '!config.local.json\n');
+            process.chdir(dir);
+            await resolveFiles({ fix: true, dryRun: false });
+            const second = await resolveFiles({ fix: true, dryRun: false });
+            // still exposed (nested negation wins), but the root line is appended at most once
+            expect(second.fix.added).not.toContain('.productbrain/config.local.json');
+            expect(second.fix.stillExposed).toContain('.productbrain/config.local.json');
+            const gi = readFileSync(join(dir, '.gitignore'), 'utf8');
+            expect(gi.match(/^\.productbrain\/config\.local\.json$/gm) ?? []).toHaveLength(1);
+            // Codex: no "Nothing to fix — all gitignored" while a path remains exposed
+            const pretty = formatFilesPretty(second);
+            expect(pretty).not.toMatch(/Nothing to fix/);
+            expect(pretty).toMatch(/still exposed/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 60000);
+    it('--fix REPORTS (does not silently pass) an absent path a same-file negation keeps exposed', async () => {
+        // self-contradictory pair: the next preview.json write would be committable → must be surfaced
+        const dir = tmpRepoWith({}, '.productbrain/preview.json\n!.productbrain/preview.json\n');
+        const cwd = process.cwd();
+        try {
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            // the descriptor line is already present, so it isn't re-added; the residual exposure is reported
+            expect(res.fix.added).not.toContain('.productbrain/preview.json');
+            expect(res.fix.stillExposed).toContain('.productbrain/preview.json');
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 60000);
+    it('--fix uses -r --cached when a tracked exposed entry is a directory', async () => {
+        const dir = mkdtempSync(join(tmpdir(), 'pbcmd-dir-'));
+        const cwd = process.cwd();
+        try {
+            execSync('git init -q', { cwd: dir, env: GIT_FIXTURE_ENV });
+            mkdirSync(join(dir, '.productbrain', 'drafts'), { recursive: true });
+            writeFileSync(join(dir, '.productbrain', 'drafts', 'foo.md'), 'x');
+            execSync('git add -f .productbrain/drafts/foo.md', { cwd: dir, env: GIT_FIXTURE_ENV });
+            execSync('git -c user.email=t@t -c user.name=t commit -qm seed', { cwd: dir, env: GIT_FIXTURE_ENV });
+            process.chdir(dir);
+            const res = await resolveFiles({ fix: true, dryRun: false });
+            expect(res.fix.trackedExposed).toContain('drafts/');
+            expect(formatFilesPretty(res)).toMatch(/git rm -r --cached/);
+        }
+        finally {
+            process.chdir(cwd);
+            rmSync(dir, { recursive: true, force: true });
+        }
+    }, 60000);
+});
+//# sourceMappingURL=files.test.js.map

package/dist/commands/files.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.test.js","sourceRoot":"","sources":["../../src/commands/files.test.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE7D,4FAA4F;AAC5F,4FAA4F;AAC5F,0FAA0F;AAC1F,kFAAkF;AAClF,6FAA6F;AAC7F,4FAA4F;AAC5F,gGAAgG;AAChG,6FAA6F;AAC7F,kFAAkF;AAClF,6FAA6F;AAC7F,uFAAuF;AACvF,MAAM,iBAAiB,GAAG;IACxB,kCAAkC;IAClC,YAAY;IACZ,uBAAuB;IACvB,kBAAkB;IAClB,sBAAsB;IACtB,SAAS;IACT,eAAe;IACf,wBAAwB;IACxB,gBAAgB;IAChB,gBAAgB;IAChB,wBAAwB;IACxB,sBAAsB;IACtB,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;CACjB,CAAC;AACF,MAAM,eAAe,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC9D,KAAK,MAAM,GAAG,IAAI,iBAAiB;IAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AACjE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;IAC/C,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAA6B,EAAE,SAAkB;IACpE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;IAC5D,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,IAAI,SAAS,KAAK,SAAS;QAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,+DAA+D;YAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;QACvF,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;gBACxB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC9E,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;aACvD,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACpE,8CAA8C;YAC9C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC3F,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACtE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,4DAA4D;YACrG,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACzD,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,gEAAgE;YAChE,QAAQ,CAAC,4CAA4C,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3F,QAAQ,CAAC,sDAAsD,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YACrG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACxE,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC5D,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;QACpF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,4FAA4F;YAC5F,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAChF,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC3E,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1D,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,iFAAiF;QACjF,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;QACpF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,CAAC,4CAA4C,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3F,QAAQ,CAAC,sDAAsD,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YACrG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,kGAAkG;YAClG,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YACpE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;YACxG,iGAAiG;YACjG,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAChF,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,mFAAmF;YACnF,MAAM,CAAC,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,CAAC,GAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,yCAAyC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAClF,2EAA2E;YAC3E,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,+FAA+F;QAC/F,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,2DAA2D,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,kGAAkG;YAClG,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACxE,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,QAAQ,CAAC,wCAAwC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YACvF,QAAQ,CAAC,sDAAsD,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YACrG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAI,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC,EAAE,KAAK,CAAC,CAAC;AACZ,CAAC,CAAC,CAAC"}

package/dist/commands/handshake.d.ts

@@ -1,7 +1,14 @@
 /**
  * pb handshake — generate context files for AI developer tools.
- * The fourth delivery surface: context export (GLO-63, DEC-161).
+ * Context export wiring (read-only filesystem bridge; GLO-63, DEC-161) — not a product surface.
  */
+import { type HandshakeReport } from '../formatters/handshake.js';
+import type { WorkspaceHealthResult } from './workspace.js';
+import { classifyDriftBucket, type DriftBucket } from './handshakeDriftClassification.js';
+import { type StartupResolutionSignals } from '../lib/startup-resolution-signals.js';
+import { type SurfaceName } from '../surfaces/registry.js';
+/** Wire-safe alias for a single health gap — derived from the CLI mirror in workspace.ts. */
+export type HealthGap = WorkspaceHealthResult['gaps'][number];
 export declare function runHandshakeInit(options?: {
     level?: string;
     dryRun?: boolean;
@@ -9,20 +16,65 @@ export declare function runHandshakeInit(options?: {
 interface HandshakeOptions {
     force?: boolean;
     dryRun?: boolean;
+    /** When true, actually write files. When false (default), show preview plan only. */
+    apply?: boolean;
     level?: string;
     /** When true, suppress all progress output. Used when handshake is called as a sub-step. */
     quiet?: boolean;
     /** When true, fetch governance entries from the Chain and merge generated rules. */
     generate?: boolean;
+    /** Optional caller-provided startup signals, merged with safe local signals. */
+    startupSignals?: Partial<StartupResolutionSignals>;
+    /** Queryable telemetry attribution for the path that invoked this handshake. */
+    invocationPath?: 'session-start' | 'session-close' | 'manual-orient' | 'handshake' | 'unknown';
     /** Target surfaces to write adapter files for. Empty = write all. */
     surfaces?: string[];
+    /** WP-421 S3 (#17): true, or non-TTY stdout, bypasses the adopt-or-revert prompt — tampered
+     *  files go to stderr, a `transition` setup_receipt records the refusal, exit non-zero. */
+    noPrompt?: boolean;
+}
+/** Dereference a "PR #N" ref to its changed paths via `gh pr diff <N> --name-only` (F4: server
+ *  resolver has no git/gh access). Guarded/time-boxed; `run` is injectable for tests. */
+export declare function dereferencePrRefToPaths(cwd: string, prNumber: number, run?: (cwd: string, command: string, timeoutMs: number) => string | undefined): string[];
+/** Injectable runners for deriveHandshakeStartupSignals — lets tests drive git/gh side effects
+ *  (changed paths, merge-base delta, PR-diff dereference) without real subprocesses. */
+export type HandshakeStartupSignalDeps = {
+    /** Run a read-only git command; undefined on failure. Default: runGitText. */
+    runGit: (cwd: string, command: string) => string | undefined;
+    /** Dereference a PR number to its changed paths (F4). Default: dereferencePrRefToPaths. */
+    prDiff: (cwd: string, prNumber: number) => string[];
+};
+export declare function deriveHandshakeStartupSignals(cwd: string, callerSignals?: Partial<StartupResolutionSignals>, deps?: HandshakeStartupSignalDeps): StartupResolutionSignals;
+/** Normalize volatile handshake-only timestamps before comparing generated files — keeps visible
+ *  timestamps in artifacts while avoiding meaningless rewrites when content is unchanged. */
+export declare function normalizeHandshakeContentForComparison(content: string): string;
+export { classifyDriftBucket, type DriftBucket };
+export interface LeftoverProjection {
+    path: string;
+    reason: string;
 }
 /**
- * Normalize volatile handshake-only timestamps before comparing generated files.
- * This keeps the visible timestamps in generated artifacts while avoiding
- * meaningless rewrites when semantic content is unchanged.
+ * findLeftoverProjections — WP-379 S5b
+ *
+ * Lists marker-bearing files under .cursor/rules/, .claude/rules/, .claude/skills/, .codex/skills/
+ * (plus the nested .cursor/skills/<name>/SKILL.md layout) that look stale: orphan (no canonical
+ * asset), stale case/punctuation variant, or a leftover `.dormant` copy. User-owned (no MARKER)
+ * files and unselected `allowedTargets` are never reported.
+ *
+ * Round 12: stops once `LEFTOVER_FILES_MAX + 1` matches are found across the flat + merged
+ * nested-Cursor scan combined — bounds read/enumerate I/O, not just the reported list.
+ * `truncated` says more exist beyond the capped, returned `files`.
+ *
+ * @param cursorSkillNames Cursor-specific, SKILL-kind-only canon (falls back to `assetNames`).
+ * @param exactRelativePaths Round 11: exact write-plan paths (forward-slash), exempted from both
+ *   checks — covers asset-less generated files and a canonical raw name not already normalized.
  */
-export declare function normalizeHandshakeContentForComparison(content: string): string;
-export declare function runHandshake(options?: HandshakeOptions): Promise<void>;
-export {};
+export declare function findLeftoverProjections(cwd: string, assetNames: string[], allowedTargets: Set<SurfaceName>, cursorSkillNames?: string[], exactRelativePaths?: Set<string>): {
+    files: LeftoverProjection[];
+    truncated: boolean;
+};
+export declare function runHandshake(options?: HandshakeOptions): Promise<HandshakeReport | undefined>;
+export declare const __test: {
+    MARKER: string;
+};
 //# sourceMappingURL=handshake.d.ts.map

package/dist/commands/handshake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../src/commands/handshake.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAsMH,wBAAsB,gBAAgB,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAiGxG;AACD,UAAU,gBAAgB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAO9E;AAsBD,wBAAsB,YAAY,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgYhF"}
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../src/commands/handshake.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA4CH,OAAO,EAAyB,KAAK,eAAe,EAAsB,MAAM,4BAA4B,CAAC;AAe7G,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,EAAoC,KAAK,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAEvH,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,yBAAyB,CAAC;AAWjC,6FAA6F;AAC7F,MAAM,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAqI9D,wBAAsB,gBAAgB,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAsHxG;AACD,UAAU,gBAAgB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qFAAqF;IACrF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gFAAgF;IAChF,cAAc,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACnD,gFAAgF;IAChF,cAAc,CAAC,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,GAAG,WAAW,GAAG,SAAS,CAAC;IAC/F,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;+FAC2F;IAC3F,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA0BD;yFACyF;AACzF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAA+B,GACjG,MAAM,EAAE,CAKV;AAmED;wFACwF;AACxF,MAAM,MAAM,0BAA0B,GAAG;IACvC,8EAA8E;IAC9E,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC7D,2FAA2F;IAC3F,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CACrD,CAAC;AAeF,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,MAAM,EACX,aAAa,GAAE,OAAO,CAAC,wBAAwB,CAAM,EACrD,IAAI,GAAE,0BAA0D,GAC/D,wBAAwB,CAwF1B;AAED;6FAC6F;AAC7F,wBAAgB,sCAAsC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAO9E;AA6BD,OAAO,EAAE,mBAAmB,EAAE,KAAK,WAAW,EAAE,CAAC;AAmBjD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAAE,EACpB,cAAc,EAAE,GAAG,CAAC,WAAW,CAAC,EAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAC3B,kBAAkB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAC/B;IAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CA2ErD;AAgBD,wBAAsB,YAAY,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAqzBvG;AAID,eAAO,MAAM,MAAM;;CAAa,CAAC"}