@productbrain/cli 0.1.0-beta.92 → 0.1.0-beta.925

package/dist/commands/setup-audit.js

@@ -0,0 +1,250 @@
+/**
+ * `pb setup-audit` — WP-439 S2 (audit) + S3 (--repair).
+ *
+ * Operator preflight for handshake: classifies every setup_asset row in the
+ * caller's active workspace and surfaces orphaned bodies BEFORE handshake
+ * runs. With --repair, attempts a transactional fix for each orphan that has
+ * a canonical body in STARTER_* (class III and class II rows).
+ *
+ * Modes:
+ *   pb setup-audit                 — human table; exit 1 if orphans > 0.
+ *   pb setup-audit --json          — machine-readable JSON; exit 1 if orphans > 0.
+ *   pb setup-audit --repair        — audit + attempt repair on III/II rows.
+ *                                    Exit 1 if any repair genuinely fails (not
+ *                                    counted: 'unrecoverable' — those are
+ *                                    expected when no STARTER_* match exists).
+ *
+ * Server contract (see convex/setup.ts:auditAssetBodies, repairAssetBody):
+ *   - Gateway derives workspaceId from the API key / JWT (injectSessionAuth).
+ *   - Audit returns { summary, rows[] }. See `AuditResult` below.
+ *   - Repair returns { status, newBodyStorageId, error, receiptId }.
+ *
+ * Notes:
+ *   - Class 'i_inline_only' rows are NOT repaired by this slice (their body
+ *     recovery comes from the inline `data.body` via a future bet, not from
+ *     STARTER_*).
+ *   - Class 'iv_hash_drift' rows are NOT repaired by this slice (out of scope
+ *     for S3; resolution is per-row operator review).
+ *
+ * Auth: requires `pb login` / API key. No active write session needed.
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCall } from '../lib/client.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { bold, dim, green, red, yellow, heading, icons, } from '../lib/style.js';
+import { isJsonMode } from '../lib/runner.js';
+// ── Formatting ───────────────────────────────────────────────────────────────
+const CLASS_LABEL = {
+    ok: 'ok',
+    i_inline_only: 'I:inline-only',
+    ii_unrecoverable: 'II:unrecoverable',
+    iii_blob_missing: 'III:blob-missing',
+    iv_hash_drift: 'IV:hash-drift',
+};
+function colorize(cls, text) {
+    if (cls === 'ok')
+        return green(text);
+    if (cls === 'iii_blob_missing' || cls === 'ii_unrecoverable')
+        return red(text);
+    return yellow(text);
+}
+function pad(s, len) {
+    if (s.length >= len)
+        return s;
+    return s + ' '.repeat(len - s.length);
+}
+function formatPretty(result) {
+    const lines = [];
+    lines.push('');
+    lines.push(`${bold('Setup-asset orphan audit')} ${dim('— WP-439 S2')}`);
+    lines.push('');
+    const { total, ok, orphans, byClass } = result.summary;
+    lines.push(heading('Summary'));
+    lines.push('');
+    lines.push(`  ${dim('Total rows  :')} ${bold(String(total))}`);
+    lines.push(`  ${dim('OK          :')} ${green(String(ok))}`);
+    lines.push(`  ${dim('Orphans     :')} ${orphans > 0 ? red(String(orphans)) : green(String(orphans))}`);
+    if (orphans > 0) {
+        lines.push('');
+        lines.push(`  ${dim('Class I   (inline-only)   :')} ${yellow(String(byClass.i))}`);
+        lines.push(`  ${dim('Class II  (unrecoverable) :')} ${red(String(byClass.ii))}`);
+        lines.push(`  ${dim('Class III (blob-missing)  :')} ${red(String(byClass.iii))}`);
+        lines.push(`  ${dim('Class IV  (hash-drift)    :')} ${yellow(String(byClass.iv))}`);
+    }
+    lines.push('');
+    if (result.rows.length === 0) {
+        lines.push(dim('No setup_asset rows in this workspace.'));
+        return lines.join('\n');
+    }
+    // Show orphan rows first, then ok rows (for scannability).
+    const orphanRows = result.rows.filter((r) => r.class !== 'ok');
+    const okRows = result.rows.filter((r) => r.class === 'ok');
+    if (orphanRows.length > 0) {
+        lines.push(heading('Orphaned rows'));
+        lines.push('');
+        // Column widths sized to the data so the table stays readable in narrow shells.
+        const idW = Math.min(40, Math.max(...orphanRows.map((r) => r.entryId.length), 'EntryId'.length));
+        const nameW = Math.min(30, Math.max(...orphanRows.map((r) => r.name.length), 'Name'.length));
+        lines.push(`  ${dim(pad('EntryId', idW))}  ${dim(pad('Kind', 6))}  ${dim(pad('Name', nameW))}  ${dim('Class')}`);
+        for (const row of orphanRows) {
+            const label = CLASS_LABEL[row.class];
+            lines.push(`  ${pad(row.entryId, idW)}  ${pad(row.assetKind, 6)}  ${pad(row.name.slice(0, nameW), nameW)}  ${colorize(row.class, label)}`);
+        }
+        lines.push('');
+    }
+    if (okRows.length > 0) {
+        lines.push(`${dim(`${icons.dot} ${okRows.length} row(s) classified OK (hidden — re-run with --json to see them).`)}`);
+        lines.push('');
+    }
+    if (orphans === 0) {
+        lines.push(green(`${icons.pass} All setup_asset bodies resolve.`));
+    }
+    return lines.join('\n');
+}
+/**
+ * Repair targets: classes that can be regenerated from STARTER_* constants.
+ *   - iii_blob_missing — storage blob is gone; canonical body is the fix.
+ *   - ii_unrecoverable — neither storage nor inline body; canonical body
+ *     is the only recovery path (otherwise the row was never recoverable).
+ *
+ * Excluded:
+ *   - i_inline_only   — inline body IS the body; restore from `data.body`
+ *                       (out of scope for this slice).
+ *   - iv_hash_drift   — drifted; manual review (out of scope).
+ */
+function isRepairTarget(cls) {
+    return cls === 'iii_blob_missing' || cls === 'ii_unrecoverable';
+}
+async function runRepair(rows) {
+    const targets = rows.filter((r) => isRepairTarget(r.class));
+    const perRow = [];
+    let succeeded = 0;
+    let failed = 0;
+    let unrecoverable = 0;
+    for (const row of targets) {
+        let outcome;
+        try {
+            outcome = await kernelCall('setup.repairAssetBody', {
+                entryDocId: row.entryDocId,
+            });
+        }
+        catch (err) {
+            outcome = {
+                status: 'failed',
+                newBodyStorageId: null,
+                error: err instanceof Error ? err.message : String(err),
+                receiptId: '',
+            };
+        }
+        perRow.push({ row, outcome });
+        if (outcome.status === 'succeeded')
+            succeeded++;
+        else if (outcome.status === 'unrecoverable')
+            unrecoverable++;
+        else
+            failed++;
+        // Per-row outcome line.
+        if (outcome.status === 'succeeded') {
+            process.stdout.write(`${green(icons.pass)} ${row.entryId} repaired\n`);
+        }
+        else if (outcome.status === 'unrecoverable') {
+            process.stdout.write(`${yellow('⊘')} ${row.entryId} unrecoverable (no STARTER_* match)\n`);
+        }
+        else {
+            process.stdout.write(`${red(icons.fail)} ${row.entryId} failed: ${outcome.error ?? 'unknown error'}\n`);
+        }
+    }
+    return { succeeded, failed, unrecoverable, perRow };
+}
+async function fetchAudit() {
+    try {
+        return await kernelCall('setup.auditAssetBodies', {});
+    }
+    catch (err) {
+        if (err instanceof CLIError)
+            throw err;
+        throw new CLIError(err instanceof Error ? err.message : String(err), {
+            code: ErrorCode.INTERNAL,
+            category: 'internal',
+        });
+    }
+}
+export async function runSetupAudit(opts = {}) {
+    const config = await getConfigOrGuide(() => runSetupAudit(opts));
+    if (!config)
+        return;
+    // Respect both the global --json flag (isJsonMode) and the per-command override.
+    const json = opts.json || isJsonMode();
+    const repair = opts.repair === true;
+    // ── 1. Initial audit ──────────────────────────────────────────────────────
+    let result = await fetchAudit();
+    if (!repair) {
+        if (json) {
+            process.stdout.write(JSON.stringify(result) + '\n');
+        }
+        else {
+            process.stdout.write(formatPretty(result) + '\n');
+        }
+        // Exit-code contract: 0 when clean, 1 when any orphan class is present.
+        if (result.summary.orphans > 0) {
+            process.exit(1);
+        }
+        return;
+    }
+    // ── 2. --repair path: print initial audit, attempt repairs, re-audit. ─────
+    if (json) {
+        // JSON mode + --repair: emit the union artifact as a single object so
+        // pipelines can read structured outcomes.
+        const repairReport = await runRepair(result.rows);
+        const after = await fetchAudit();
+        process.stdout.write(JSON.stringify({
+            before: result,
+            repair: {
+                attempted: repairReport.perRow.length,
+                succeeded: repairReport.succeeded,
+                failed: repairReport.failed,
+                unrecoverable: repairReport.unrecoverable,
+                perRow: repairReport.perRow.map(({ row, outcome }) => ({
+                    entryId: row.entryId,
+                    entryDocId: row.entryDocId,
+                    class: row.class,
+                    status: outcome.status,
+                    error: outcome.error,
+                    receiptId: outcome.receiptId,
+                    newBodyStorageId: outcome.newBodyStorageId,
+                })),
+            },
+            after,
+        }) + '\n');
+        if (repairReport.failed > 0)
+            process.exit(1);
+        return;
+    }
+    // Pretty mode.
+    process.stdout.write(formatPretty(result) + '\n');
+    const repairTargets = result.rows.filter((r) => isRepairTarget(r.class));
+    if (repairTargets.length === 0) {
+        process.stdout.write(dim('\nNo repairable orphans (class III/II) — nothing to do.\n'));
+        if (result.summary.orphans > 0) {
+            // There are class I or IV orphans but nothing this slice can fix.
+            process.exit(1);
+        }
+        return;
+    }
+    process.stdout.write(`\n${heading('Repair')}\n\n`);
+    const repairReport = await runRepair(result.rows);
+    process.stdout.write('\n');
+    process.stdout.write(`  ${dim('Attempted   :')} ${bold(String(repairReport.perRow.length))}\n`);
+    process.stdout.write(`  ${dim('Succeeded   :')} ${green(String(repairReport.succeeded))}\n`);
+    process.stdout.write(`  ${dim('Unrecoverable:')} ${repairReport.unrecoverable > 0 ? yellow(String(repairReport.unrecoverable)) : String(repairReport.unrecoverable)}\n`);
+    process.stdout.write(`  ${dim('Failed      :')} ${repairReport.failed > 0 ? red(String(repairReport.failed)) : String(repairReport.failed)}\n`);
+    process.stdout.write('\n');
+    // ── 3. Re-run the audit so the operator sees the fresh state. ─────────────
+    const after = await fetchAudit();
+    process.stdout.write(formatPretty(after) + '\n');
+    // Exit code: only genuine failures (not 'unrecoverable') trip the wire.
+    if (repairReport.failed > 0) {
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=setup-audit.js.map

package/dist/commands/setup-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-audit.js","sourceRoot":"","sources":["../../src/commands/setup-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,IAAI,EACJ,GAAG,EACH,KAAK,EACL,GAAG,EACH,MAAM,EACN,OAAO,EACP,KAAK,GACN,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAwB9C,gFAAgF;AAEhF,MAAM,WAAW,GAAsC;IACrD,EAAE,EAAE,IAAI;IACR,aAAa,EAAE,eAAe;IAC9B,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,aAAa,EAAE,eAAe;CAC/B,CAAC;AAEF,SAAS,QAAQ,CAAC,GAAsB,EAAE,IAAY;IACpD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,GAAG,KAAK,kBAAkB,IAAI,GAAG,KAAK,kBAAkB;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,GAAW;IACjC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;IAEvD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CACR,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAC3F,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,6BAA6B,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,6BAA6B,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,6BAA6B,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAClF,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,6BAA6B,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,2DAA2D;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAE3D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,gFAAgF;QAChF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,EAAE,EACF,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CACvE,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,EAAE,EACF,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CACjE,CAAC;QACF,KAAK,CAAC,IAAI,CACR,KAAK,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,EAAE,CACrG,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CACR,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAC/H,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,kEAAkE,CAAC,EAAE,CAAC,CAAC;QACtH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,kCAAkC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAWD;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CAAC,GAAsB;IAC5C,OAAO,GAAG,KAAK,kBAAkB,IAAI,GAAG,KAAK,kBAAkB,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAgB;IAMvC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAqD,EAAE,CAAC;IACpE,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAgB,uBAAuB,EAAE;gBACjE,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG;gBACR,MAAM,EAAE,QAAQ;gBAChB,gBAAgB,EAAE,IAAI;gBACtB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACvD,SAAS,EAAE,EAAE;aACd,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,SAAS,EAAE,CAAC;aAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe;YAAE,aAAa,EAAE,CAAC;;YACxD,MAAM,EAAE,CAAC;QAEd,wBAAwB;QACxB,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC;QACzE,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,uCAAuC,CACrE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,YAAY,OAAO,CAAC,KAAK,IAAI,eAAe,IAAI,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AACtD,CAAC;AASD,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAc,wBAAwB,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ;YAAE,MAAM,GAAG,CAAC;QACvC,MAAM,IAAI,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YACnE,IAAI,EAAE,SAAS,CAAC,QAAQ;YACxB,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B,EAAE;IACjE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,iFAAiF;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAEpC,6EAA6E;IAC7E,IAAI,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAEhC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,wEAAwE;QACxE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,6EAA6E;IAC7E,IAAI,IAAI,EAAE,CAAC;QACT,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,MAAM;YACd,MAAM,EAAE;gBACN,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM;gBACrC,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,aAAa,EAAE,YAAY,CAAC,aAAa;gBACzC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;oBACrD,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;iBAC3C,CAAC,CAAC;aACJ;YACD,KAAK;SACN,CAAC,GAAG,IAAI,CACV,CAAC;QACF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,eAAe;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAElD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAC/B,kEAAkE;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAElD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC1E,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,CACvE,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CACnJ,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAC1H,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,6EAA6E;IAC7E,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAEjD,wEAAwE;IACxE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/setup-detect-surfaces.d.ts

@@ -0,0 +1,38 @@
+/**
+ * `pb setup-detect-surfaces` — WP-431 S3.
+ *
+ * Walks the repo for known surface markers (delegated to SURFACE_ADAPTERS) and
+ * union-merges the result with whatever `manifest.surfaces` already declares.
+ * STD-235 forward-only: detection NEVER removes a surface; only adds. Manifest
+ * write goes through `writeManifestSurfaces` which calls `assertSetupWritePath`
+ * (STD-234 perimeter).
+ *
+ * WP-433 S2: After the local manifest write, stamps the detected surfaces onto
+ * the server via `setup.stampDetectedSurfaces` so Phase 1 → Phase 2 advances in
+ * one server call (TEN-1990 / IMP-10). If the server call fails, the error is
+ * logged and surfaced to the caller but the local manifest is NOT rolled back
+ * (it is already on disk; the next run will retry the server stamp).
+ */
+export interface RunSetupDetectSurfacesOptions {
+    cwd?: string;
+    /** Skip the server stamp call (used in tests / offline mode). */
+    skipServerStamp?: boolean;
+}
+export interface SetupDetectSurfacesResult {
+    detected: string[];
+    existing: string[];
+    newlyAdded: string[];
+    union: string[];
+    manifestUpdated: boolean;
+    manifestPath: string;
+    /** WP-433 S2: result of the server stamp call, or null if skipped / not needed. */
+    serverStamp: {
+        stamped: boolean;
+        surfaces: string[];
+    } | null;
+    /** WP-433 S2: error from the server stamp call, if any. Does NOT abort the local write. */
+    serverStampError: string | null;
+}
+export declare function runSetupDetectSurfaces(opts?: RunSetupDetectSurfacesOptions): Promise<SetupDetectSurfacesResult>;
+export declare function formatDetectSurfacesSummary(result: SetupDetectSurfacesResult): string;
+//# sourceMappingURL=setup-detect-surfaces.d.ts.map

package/dist/commands/setup-detect-surfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-detect-surfaces.d.ts","sourceRoot":"","sources":["../../src/commands/setup-detect-surfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,WAAW,6BAA6B;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,WAAW,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7D,2FAA2F;IAC3F,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,GAAE,6BAAkC,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAsCpC;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,CAqBrF"}

package/dist/commands/setup-detect-surfaces.js

@@ -0,0 +1,76 @@
+/**
+ * `pb setup-detect-surfaces` — WP-431 S3.
+ *
+ * Walks the repo for known surface markers (delegated to SURFACE_ADAPTERS) and
+ * union-merges the result with whatever `manifest.surfaces` already declares.
+ * STD-235 forward-only: detection NEVER removes a surface; only adds. Manifest
+ * write goes through `writeManifestSurfaces` which calls `assertSetupWritePath`
+ * (STD-234 perimeter).
+ *
+ * WP-433 S2: After the local manifest write, stamps the detected surfaces onto
+ * the server via `setup.stampDetectedSurfaces` so Phase 1 → Phase 2 advances in
+ * one server call (TEN-1990 / IMP-10). If the server call fails, the error is
+ * logged and surfaced to the caller but the local manifest is NOT rolled back
+ * (it is already on disk; the next run will retry the server stamp).
+ */
+import { detectSurfaces, unionSurfaces } from '../setup/detect-surfaces.js';
+import { readManifestSurfaces, writeManifestSurfaces } from '../setup/manifest-writer.js';
+import { kernelCall } from '../lib/client.js';
+export async function runSetupDetectSurfaces(opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    const detected = await detectSurfaces(cwd);
+    const existing = readManifestSurfaces(cwd);
+    const union = unionSurfaces(existing, detected);
+    const existingSet = new Set(existing);
+    const newlyAdded = detected.filter((s) => !existingSet.has(s));
+    // Local manifest write (always runs first — server stamp is best-effort).
+    const writeResult = await writeManifestSurfaces(cwd, union);
+    // WP-433 S2: Stamp surfaces to server so state machine can advance Phase 1 → Phase 2.
+    // Only stamp if there are surfaces to declare (no-op on empty union).
+    // Error handling: log + surface to caller but do NOT roll back the local write.
+    // No config pre-check — kernelCall handles missing config; errors are caught below.
+    let serverStamp = null;
+    let serverStampError = null;
+    if (!opts.skipServerStamp && union.length > 0) {
+        try {
+            serverStamp = await kernelCall('setup.stampDetectedSurfaces', { surfaces: union });
+        }
+        catch (err) {
+            serverStampError = err instanceof Error ? err.message : String(err);
+        }
+    }
+    return {
+        detected: [...detected].sort(),
+        existing: [...existing].sort(),
+        newlyAdded: [...newlyAdded].sort(),
+        union,
+        manifestUpdated: writeResult.written,
+        manifestPath: writeResult.path,
+        serverStamp,
+        serverStampError,
+    };
+}
+export function formatDetectSurfacesSummary(result) {
+    const detected = result.detected.length === 0 ? 'none' : result.detected.join(', ');
+    const newOnes = result.newlyAdded.length === 0 ? 'none' : result.newlyAdded.join(', ');
+    const existing = result.existing.length === 0 ? 'none' : result.existing.join(', ');
+    const status = result.manifestUpdated ? 'Manifest updated.' : 'Manifest unchanged.';
+    let serverStatus = '';
+    if (result.serverStampError) {
+        serverStatus = ` Server stamp failed: ${result.serverStampError}`;
+    }
+    else if (result.serverStamp !== null) {
+        serverStatus = result.serverStamp.stamped ? ' Server stamped.' : ' Server: surfaces already current.';
+    }
+    let summary = `Detected: ${detected} (new: ${newOnes}). Existing: ${existing}. ${status}${serverStatus}`;
+    // WP-433 S5: bare-repo guidance — ask when there are truly zero known surfaces.
+    // Only applies when both detected AND existing are empty (true bare-repo state).
+    // STD-235 remnant case (existing surfaces present, none re-detected from disk) is
+    // intentionally suppressed: the manifest still carries the surface, so the user
+    // is not in a bare-repo state.
+    if (result.detected.length === 0 && result.existing.length === 0) {
+        summary += '\nI don\'t see Claude Code or Cursor — which AI tool do you use?';
+    }
+    return summary;
+}
+//# sourceMappingURL=setup-detect-surfaces.js.map

package/dist/commands/setup-detect-surfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-detect-surfaces.js","sourceRoot":"","sources":["../../src/commands/setup-detect-surfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAqB9C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAsC,EAAE;IAExC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/D,0EAA0E;IAC1E,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAE5D,sFAAsF;IACtF,sEAAsE;IACtE,gFAAgF;IAChF,oFAAoF;IACpF,IAAI,WAAW,GAAoD,IAAI,CAAC;IACxE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,UAAU,CAC5B,6BAA6B,EAC7B,EAAE,QAAQ,EAAE,KAAK,EAAE,CACpB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE;QAC9B,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE;QAC9B,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;QAClC,KAAK;QACL,eAAe,EAAE,WAAW,CAAC,OAAO;QACpC,YAAY,EAAE,WAAW,CAAC,IAAI;QAC9B,WAAW;QACX,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAiC;IAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACpF,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,YAAY,GAAG,yBAAyB,MAAM,CAAC,gBAAgB,EAAE,CAAC;IACpE,CAAC;SAAM,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACvC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oCAAoC,CAAC;IACxG,CAAC;IACD,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,OAAO,gBAAgB,QAAQ,KAAK,MAAM,GAAG,YAAY,EAAE,CAAC;IACzG,gFAAgF;IAChF,iFAAiF;IACjF,kFAAkF;IAClF,gFAAgF;IAChF,+BAA+B;IAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,kEAAkE,CAAC;IAChF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/setup-ingest.d.ts

@@ -0,0 +1,17 @@
+/**
+ * pb setup:ingest <path> — Push a single .productbrain skill/rule/hook file to the DB SSOT.
+ *
+ * WP-345 S3: Single-file push from disk to DB for workspace-managed setup assets.
+ * Lets users explicitly push an edited skill/rule/hook file to the DB rather than
+ * waiting for a full `migrate:setup` run.
+ *
+ * Idempotent: re-running produces created/updated/unchanged — never duplicates.
+ * entryId rule: SETUP-{KIND}-{SCREAMING_SNAKE_CASE_BASENAME}
+ *
+ * Chain: WP-345, TEN-1459 (handshake reads FS — this fixes it).
+ */
+export interface SetupIngestOptions {
+    dryRun?: boolean;
+}
+export declare function runSetupIngest(filePath: string, opts?: SetupIngestOptions): Promise<void>;
+//# sourceMappingURL=setup-ingest.d.ts.map

package/dist/commands/setup-ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-ingest.d.ts","sourceRoot":"","sources":["../../src/commands/setup-ingest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAgHD,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqInG"}

package/dist/commands/setup-ingest.js

@@ -0,0 +1,226 @@
+/**
+ * pb setup:ingest <path> — Push a single .productbrain skill/rule/hook file to the DB SSOT.
+ *
+ * WP-345 S3: Single-file push from disk to DB for workspace-managed setup assets.
+ * Lets users explicitly push an edited skill/rule/hook file to the DB rather than
+ * waiting for a full `migrate:setup` run.
+ *
+ * Idempotent: re-running produces created/updated/unchanged — never duplicates.
+ * entryId rule: SETUP-{KIND}-{SCREAMING_SNAKE_CASE_BASENAME}
+ *
+ * Chain: WP-345, TEN-1459 (handshake reads FS — this fixes it).
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { basename, resolve, dirname } from 'node:path';
+import { kernelCall } from '../lib/client.js';
+import { readSession } from '../lib/session.js';
+import { isJsonMode } from '../lib/runner.js';
+import { trackEvent } from '../lib/telemetry.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+/**
+ * Parse minimal frontmatter from a .md file.
+ * Supports YAML-style --- fences. Fields: name, description, assetKind.
+ * Array fields: triggers, semanticRefs (YAML list).
+ */
+function parseFrontmatter(raw) {
+    const fmMatch = raw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);
+    if (!fmMatch) {
+        // No frontmatter — derive name from H1, empty description
+        const h1 = raw.match(/^# (.+)$/m);
+        return { name: h1?.[1] ?? '', description: '', triggers: [], semanticRefs: [], body: raw };
+    }
+    const fmBlock = fmMatch[1];
+    const body = fmMatch[2];
+    const fields = new Map();
+    const arrayFields = new Map();
+    // Parse simple key: value and key:\n  - item YAML arrays
+    const lines = fmBlock.split('\n');
+    let currentArrayKey = null;
+    let currentArrayValues = [];
+    for (const line of lines) {
+        const arrayItemMatch = line.match(/^\s+-\s+(.+)$/);
+        const keyValueMatch = line.match(/^(\w+):\s*(.*)$/);
+        if (arrayItemMatch && currentArrayKey) {
+            currentArrayValues.push(arrayItemMatch[1].trim());
+        }
+        else if (keyValueMatch) {
+            if (currentArrayKey) {
+                arrayFields.set(currentArrayKey, currentArrayValues);
+                currentArrayKey = null;
+                currentArrayValues = [];
+            }
+            const [, key, value] = keyValueMatch;
+            if (value.trim() === '') {
+                // Start of array block
+                currentArrayKey = key;
+            }
+            else {
+                fields.set(key, value.trim().replace(/^['"]|['"]$/g, ''));
+            }
+        }
+    }
+    if (currentArrayKey) {
+        arrayFields.set(currentArrayKey, currentArrayValues);
+    }
+    const id = fields.get('id');
+    const name = fields.get('name') ?? body.match(/^# (.+)$/m)?.[1] ?? '';
+    const description = fields.get('description') ?? '';
+    const triggers = arrayFields.get('triggers') ?? [];
+    const semanticRefs = arrayFields.get('semanticRefs') ?? [];
+    const assetKind = fields.get('assetKind');
+    return { id, name, description, triggers, semanticRefs, assetKind, body };
+}
+/**
+ * Infer AssetKind from the file's directory path.
+ * Checks if any segment of the path is 'skills', 'rules', or 'hooks'.
+ */
+function inferKindFromPath(filePath) {
+    const parts = filePath.replace(/\\/g, '/').split('/');
+    for (const part of parts) {
+        if (part === 'skills')
+            return 'skill';
+        if (part === 'rules')
+            return 'rule';
+        if (part === 'hooks')
+            return 'hook';
+    }
+    return null;
+}
+/**
+ * Normalise a frontmatter assetKind string to AssetKind or null.
+ */
+function normalizeFrontmatterKind(raw) {
+    const lower = raw.toLowerCase().trim();
+    if (lower === 'skill')
+        return 'skill';
+    if (lower === 'rule')
+        return 'rule';
+    if (lower === 'hook')
+        return 'hook';
+    if (lower === 'bundle')
+        return 'bundle';
+    return null;
+}
+/**
+ * Derive a stable entryId from the filename and assetKind.
+ * Example: skills/triage.md, kind=skill → SETUP-SKILL-TRIAGE
+ */
+function deriveEntryId(filename, kind) {
+    const base = basename(filename, '.md');
+    const snakeCase = base.toUpperCase().replace(/[^A-Z0-9]+/g, '_');
+    return `SETUP-${kind.toUpperCase()}-${snakeCase}`;
+}
+export async function runSetupIngest(filePath, opts = {}) {
+    const dryRun = opts.dryRun ?? false;
+    const json = isJsonMode();
+    // Resolve path relative to cwd
+    const absPath = resolve(process.cwd(), filePath);
+    // Validate file exists
+    if (!existsSync(absPath)) {
+        trackEvent('setup.ingest.failed', { reason: 'file_not_found', path: absPath });
+        throw new CLIError(`File not found: ${absPath}`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    // Validate .md extension
+    if (!absPath.endsWith('.md')) {
+        trackEvent('setup.ingest.failed', { reason: 'not_markdown', path: absPath });
+        throw new CLIError(`File must be a .md file: ${absPath}`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    // Parse frontmatter
+    const raw = readFileSync(absPath, 'utf-8');
+    const { id, name, description, body, triggers, semanticRefs, assetKind: fmKind } = parseFrontmatter(raw);
+    // Determine assetKind — explicit bundle frontmatter always rejects this generic path.
+    // For skill/rule/hook, directory still wins and frontmatter is fallback.
+    const frontmatterKind = fmKind ? normalizeFrontmatterKind(fmKind) : null;
+    let kind = frontmatterKind === 'bundle'
+        ? 'bundle'
+        : inferKindFromPath(dirname(absPath));
+    if (!kind) {
+        kind = frontmatterKind;
+    }
+    if (!kind) {
+        const err = new CLIError(`Cannot determine asset kind for ${absPath}.\n` +
+            `File must be under a 'skills/', 'rules/', or 'hooks/' directory, ` +
+            `or include an 'assetKind: skill|rule|hook' field in frontmatter.`, { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
+        trackEvent('setup.ingest.failed', { reason: 'unknown_kind', path: absPath });
+        throw err;
+    }
+    // Bundle commit is UI-only (Clerk JWT auth via commitSetupBundle). CLI path not supported (WP-345).
+    if (kind === 'bundle') {
+        trackEvent('setup.bundle.commit.failed', { reason: 'bundle_cli_not_supported', path: absPath });
+        throw new CLIError(`Bundle assets must be committed via the UI (Customize → Setup → Commit Bundle).\n` +
+            `The 'commitSetupBundle' operation requires workspace session auth unavailable in the CLI.`, { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
+    }
+    const entryId = deriveEntryId(absPath, kind);
+    const resolvedName = name || basename(absPath, '.md');
+    // Get workspaceId from active session
+    const session = readSession();
+    if (!session?.workspaceId) {
+        trackEvent('setup.ingest.failed', { reason: 'no_session', path: absPath });
+        throw new CLIError('No active session found. Run `pb session start` first.', { code: ErrorCode.SESSION_REQUIRED, category: 'session' });
+    }
+    const workspaceId = session.workspaceId;
+    if (dryRun) {
+        if (json) {
+            process.stdout.write(JSON.stringify({
+                ok: true,
+                dryRun: true,
+                entryId,
+                name: resolvedName,
+                assetKind: kind,
+                workspaceId,
+                path: absPath,
+            }) + '\n');
+        }
+        else {
+            process.stdout.write(`[dry-run] Would ingest:\n`);
+            process.stdout.write(`  entryId:   ${entryId}\n`);
+            process.stdout.write(`  name:      ${resolvedName}\n`);
+            process.stdout.write(`  kind:      ${kind}\n`);
+            process.stdout.write(`  workspace: ${workspaceId}\n`);
+            process.stdout.write(`  path:      ${absPath}\n`);
+        }
+        return;
+    }
+    // Call the mutation
+    let result;
+    try {
+        result = await kernelCall('setup.ingestSetupAsset', {
+            workspaceId,
+            entryId,
+            frontmatterId: id,
+            name: resolvedName,
+            description,
+            body,
+            assetKind: kind,
+            triggers,
+            semanticRefs,
+        });
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        trackEvent('setup.ingest.failed', { reason, path: absPath });
+        throw err;
+    }
+    // Emit telemetry
+    trackEvent('setup.ingest.succeeded', {
+        action: result.action,
+        assetKind: kind,
+        entryId: result.entryId,
+    });
+    // Output result
+    if (json) {
+        process.stdout.write(JSON.stringify({ ok: true, ...result, assetKind: kind, path: absPath }) + '\n');
+    }
+    else {
+        const icon = result.action === 'created' ? '✓' : result.action === 'updated' ? '✓' : '—';
+        const label = result.action === 'created' ? 'created' : result.action === 'updated' ? 'updated' : 'unchanged';
+        process.stdout.write(`${icon} ${label} ${result.entryId}\n`);
+    }
+}
+//# sourceMappingURL=setup-ingest.js.map