@productbrain/cli 0.1.0-beta.989 → 0.1.0-beta.9895

package/dist/lib/canonicalRefs.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonicalRefs.js","sourceRoot":"","sources":["../../src/lib/canonicalRefs.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AAkCH;;GAEG;AACH,MAAM,kBAAkB,GAAG,oEAAoE,CAAC;AAEhG;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,mDAAmD;IACnD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,KAA6B,CAAC;IAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,YAAqB;IACnE,IAAI,YAAY,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,GAAG,GAAG,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,WAAgC;IACjF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEzD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,YAAgC,EAAE,EAAE;QACpF,qFAAqF;QACrF,IAAI,YAAY,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,OAAO,gBAAgB,GAAG,GAAG,CAAC;IAC/B,CAAC,CAAC,CAAC;AACJ,CAAC;AAiDD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CACjC,YAAoB,EACpB,IAAY,EACZ,YAAgC,EAChC,aAAkC;IAElC,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,YAAY,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,CAAC;IAChE,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAI,QAA+C,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3D,CAAC;IAED,+EAA+E;IAC/E,MAAM,SAAS,GAAG,aAAa,EAAE,MAAM,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,MAAM,GAAI,SAAgD,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAC9D,CAAC;IAED,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,aAAa,GAAG,YAAY,EAAE,kBAAkB,EAAE,CAAC,YAAY,CAAC,CAAC;IACvE,IAAI,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GAAI,aAAoD,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAC9D,CAAC;IAED,yCAAyC;IACzC,OAAO,YAAY,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,IAAY,EACZ,YAAgC,EAChC,gBAAkD;IAElD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAExD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,YAAoB,EAAE,IAAY,EAAE,EAAE;QACzE,MAAM,aAAa,GAAG,gBAAgB,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1D,OAAO,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"canonicalRefs.js","sourceRoot":"","sources":["../../src/lib/canonicalRefs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAkCH;;GAEG;AACH,MAAM,kBAAkB,GAAG,oEAAoE,CAAC;AAEhG;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,mDAAmD;IACnD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,KAA6B,CAAC;IAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,YAAqB;IACnE,IAAI,YAAY,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,GAAG,GAAG,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,WAAgC;IACjF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEzD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,YAAgC,EAAE,EAAE;QACpF,qFAAqF;QACrF,IAAI,YAAY,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,OAAO,gBAAgB,GAAG,GAAG,CAAC;IAC/B,CAAC,CAAC,CAAC;AACJ,CAAC;AAiDD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CACjC,YAAoB,EACpB,IAAY,EACZ,YAAgC,EAChC,aAAkC;IAElC,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,YAAY,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,CAAC;IAChE,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAI,QAA+C,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3D,CAAC;IAED,+EAA+E;IAC/E,MAAM,SAAS,GAAG,aAAa,EAAE,MAAM,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,MAAM,GAAI,SAAgD,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAC9D,CAAC;IAED,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,aAAa,GAAG,YAAY,EAAE,kBAAkB,EAAE,CAAC,YAAY,CAAC,CAAC;IACvE,IAAI,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GAAI,aAAoD,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAC9D,CAAC;IAED,yCAAyC;IACzC,OAAO,YAAY,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,IAAY,EACZ,YAAgC,EAChC,gBAAkD;IAElD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAExD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,YAAoB,EAAE,IAAY,EAAE,EAAE;QACzE,MAAM,aAAa,GAAG,gBAAgB,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1D,OAAO,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/captureGrounding.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `pb capture` grounding presentation helpers — extracted from capture.ts (WP-688 S4, TASK-105)
+ * purely to fund that file's shrink-only LOC budget (STD-2/DEC-1504); no behavior change at
+ * the time of that extraction.
+ *
+ * WP-755 C1a (TASK-215, DEC-1717): re-pointed at the one capture door's verdict shape
+ * (`chain.capture`, replacing the deleted `chain.suggestLinksForCapture`). The old
+ * related[]/duplicates[]/governance[] shape is gone — rendering now switches on
+ * `CaptureVerdict.kind`. Known narrowing, cited here rather than silently dropped: the old
+ * route's per-candidate governance severity (block/warn/inform on governed collections) has
+ * no equivalent in the new door for C1a — it scored a DIFFERENT concern (governed-collection
+ * advisory) layered on top of link suggestion, not one of DEC-1717's verdicts. Revisit
+ * if governance advisory needs to ride the new door in a later slice. (A fourth verdict, `split`,
+ * was scoped for C3/TASK-217 and never built — TEN-3699's ruling closed C3 as deletion-only.)
+ *
+ * `promptYN` stays used only by `--strict`'s "ask" verdict confirmation, unchanged.
+ *
+ * TASK-608 (WP-802, DEC-1915): the "Related" banner and the `--suggest-only` preview are deleted —
+ * a capture reply shows no guessed relations; the door's "create" verdict carries no candidates.
+ */
+import type { GatewayRouteReturnByName } from '@productbrain/kernel-client';
+/**
+ * WP-755 C1a: the one door's verdict, as returned by chain.capture — the verdict union plus
+ * `scanTruncated` (the candidate pool's own completeness signal, attached by the Convex wrapper
+ * alongside the pure kernel verdict; see convex/capture/decide.ts).
+ */
+export type CaptureVerdict = GatewayRouteReturnByName<'chain.capture'>;
+/**
+ * Extract a known ID prefix hint from capture text.
+ * Pattern: "FLO: description" or "TEN: something broken" — prefix must be uppercase,
+ * followed by colon and optional whitespace, then the actual text.
+ * Returns the resolved collection slug and the cleaned text (prefix stripped).
+ */
+export declare function extractPrefixHint(text: string, prefixMap: Record<string, string>): {
+    resolvedCollection: string | null;
+    cleanText: string;
+};
+/** The verdict's top-scoring candidate, if any — used for grounding telemetry. */
+export declare function highestVerdictScore(verdict: CaptureVerdict | null): number;
+/**
+ * Print the possible-match warning for an "ask" verdict, and the coverage note when the scan was
+ * truncated — stderr only. TASK-608 (DEC-1915): a "create" verdict names no candidates, so no
+ * related list is ever printed.
+ */
+export declare function printPossibleMatch(verdict: CaptureVerdict): void;
+/** Prompt the user with a y/N question. Resolves true for "y", false otherwise. */
+export declare function promptYN(message: string): Promise<boolean>;
+//# sourceMappingURL=captureGrounding.d.ts.map

package/dist/lib/captureGrounding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureGrounding.d.ts","sourceRoot":"","sources":["../../src/lib/captureGrounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE5E;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,wBAAwB,CAAC,eAAe,CAAC,CAAC;AAMvE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IAAE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAO3I;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,GAAG,MAAM,CAI1E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAShE;AAED,mFAAmF;AACnF,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQhE"}

package/dist/lib/captureGrounding.js

@@ -0,0 +1,54 @@
+function groundingCoverageNote(verdict) {
+    return verdict.scanTruncated ? 'Grounding sample omitted accepted entries; additional matching entries may exist.' : null;
+}
+/**
+ * Extract a known ID prefix hint from capture text.
+ * Pattern: "FLO: description" or "TEN: something broken" — prefix must be uppercase,
+ * followed by colon and optional whitespace, then the actual text.
+ * Returns the resolved collection slug and the cleaned text (prefix stripped).
+ */
+export function extractPrefixHint(text, prefixMap) {
+    const match = text.match(/^([A-Z]{2,4}):\s*(.+)$/s);
+    if (!match)
+        return { resolvedCollection: null, cleanText: text };
+    const [, prefix, rest] = match;
+    const slug = prefixMap[prefix];
+    if (!slug)
+        return { resolvedCollection: null, cleanText: text };
+    return { resolvedCollection: slug, cleanText: rest.trim() };
+}
+/** The verdict's top-scoring candidate, if any — used for grounding telemetry. */
+export function highestVerdictScore(verdict) {
+    if (!verdict)
+        return 0;
+    if (verdict.kind === 'ask')
+        return Math.max(...verdict.candidates.map((c) => c.score), 0); // raw max — candidates are ordered for display (lifted first), not by score
+    return 0; // create — names no candidates (TASK-608, DEC-1915).
+}
+/**
+ * Print the possible-match warning for an "ask" verdict, and the coverage note when the scan was
+ * truncated — stderr only. TASK-608 (DEC-1915): a "create" verdict names no candidates, so no
+ * related list is ever printed.
+ */
+export function printPossibleMatch(verdict) {
+    const coverageNote = groundingCoverageNote(verdict);
+    if (verdict.kind === 'ask') {
+        const items = verdict.candidates.slice(0, 3).map((c) => `${c.entryId} "${c.name}"`).join(', ');
+        const note = coverageNote ? `\n  ${coverageNote}` : '';
+        process.stderr.write(`\n  ⚠ Possible match — confirm before creating: ${items}${note}\n\n`);
+        return;
+    }
+    if (verdict.kind === 'create' && coverageNote)
+        process.stderr.write(`\n  ${coverageNote}\n\n`);
+}
+/** Prompt the user with a y/N question. Resolves true for "y", false otherwise. */
+export async function promptYN(message) {
+    return new Promise((resolve) => {
+        process.stderr.write(message);
+        process.stdin.once('data', (data) => {
+            const answer = data.toString().trim().toLowerCase();
+            resolve(answer === 'y');
+        });
+    });
+}
+//# sourceMappingURL=captureGrounding.js.map

package/dist/lib/captureGrounding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureGrounding.js","sourceRoot":"","sources":["../../src/lib/captureGrounding.ts"],"names":[],"mappings":"AA6BA,SAAS,qBAAqB,CAAC,OAAuB;IACpD,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,mFAAmF,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5H,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAiC;IAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,OAA8B;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,4EAA4E;IACvK,OAAO,CAAC,CAAC,CAAC,qDAAqD;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,YAAY,MAAM,CAAC,CAAC;AACjG,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAe;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpD,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/captureGrounding.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=captureGrounding.test.d.ts.map

package/dist/lib/captureGrounding.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureGrounding.test.d.ts","sourceRoot":"","sources":["../../src/lib/captureGrounding.test.ts"],"names":[],"mappings":""}

package/dist/lib/captureGrounding.test.js

@@ -0,0 +1,74 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { printPossibleMatch, highestVerdictScore } from './captureGrounding.js';
+function candidate(overrides = {}) {
+    return {
+        entryId: 'DEC-1',
+        name: 'Some entry',
+        collectionSlug: 'decisions',
+        score: 0,
+        docId: 'doc-1',
+        boosted: false,
+        titleExact: false,
+        ...overrides,
+    };
+}
+const create = { kind: 'create', candidates: [], scanTruncated: false };
+afterEach(() => vi.restoreAllMocks());
+describe('capture verdict rendering (WP-755 C1a; create and ask only, TASK-619)', () => {
+    // TASK-608 (WP-802, DEC-1915): a create verdict names no candidates, so the reply carries no
+    // "Related" line — only the coverage note when the scan was truncated.
+    it.each([true, false])('create prints no related list; coverage note only when truncated=%s', (scanTruncated) => {
+        const output = vi.spyOn(process.stderr, 'write').mockReturnValue(true);
+        printPossibleMatch({ ...create, scanTruncated });
+        const text = output.mock.calls.map(([chunk]) => String(chunk)).join('');
+        expect(text).not.toContain('Related');
+        expect(text.includes('additional matching entries may exist')).toBe(scanTruncated);
+        if (!scanTruncated)
+            expect(output).not.toHaveBeenCalled();
+    });
+    it('ask surfaces candidates for confirmation before creating, with the truncation caveat', () => {
+        const output = vi.spyOn(process.stderr, 'write').mockReturnValue(true);
+        printPossibleMatch({
+            kind: 'ask',
+            candidates: [candidate({ entryId: 'DEC-7', name: 'Related decision', score: 0.75 })],
+            scanTruncated: true,
+        });
+        const text = output.mock.calls.map(([chunk]) => String(chunk)).join('');
+        expect(text).toContain('Possible match');
+        expect(text).toContain('DEC-7');
+        expect(text).toContain('additional matching entries may exist');
+    });
+});
+describe('highestVerdictScore', () => {
+    it('is 0 for a null verdict', () => {
+        expect(highestVerdictScore(null)).toBe(0);
+    });
+    it('reads the highest candidate score for ask', () => {
+        const verdict = {
+            kind: 'ask',
+            candidates: [
+                candidate({ entryId: 'DEC-1', name: 'a', score: 0.75 }),
+                candidate({ entryId: 'DEC-2', name: 'b', score: 0.72 }),
+            ],
+            scanTruncated: false,
+        };
+        expect(highestVerdictScore(verdict)).toBe(0.75);
+    });
+    // TASK-619: the judge lists a lifted (boosted / title-exact) candidate first for display, so the
+    // first row is not the highest raw score — telemetry reads the max, never the first row.
+    it('reads the max raw score when a lifted low-score candidate is listed first', () => {
+        const verdict = {
+            kind: 'ask',
+            candidates: [
+                candidate({ entryId: 'QUE-1', name: 'lifted', score: 0.3, boosted: true }),
+                candidate({ entryId: 'QUE-2', name: 'raw', score: 0.95 }),
+            ],
+            scanTruncated: false,
+        };
+        expect(highestVerdictScore(verdict)).toBe(0.95);
+    });
+    it('is 0 for a create verdict', () => {
+        expect(highestVerdictScore(create)).toBe(0);
+    });
+});
+//# sourceMappingURL=captureGrounding.test.js.map

package/dist/lib/captureGrounding.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureGrounding.test.js","sourceRoot":"","sources":["../../src/lib/captureGrounding.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAuB,MAAM,uBAAuB,CAAC;AAIrG,SAAS,SAAS,CAAC,YAAgC,EAAE;IACnD,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,YAAY;QAClB,cAAc,EAAE,WAAW;QAC3B,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,KAAK;QACjB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACxF,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEtC,QAAQ,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACrF,6FAA6F;IAC7F,uEAAuE;IACvE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,qEAAqE,EAAE,CAAC,aAAa,EAAE,EAAE;QAC9G,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvE,kBAAkB,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACvE,kBAAkB,CAAC;YACjB,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,OAAO,GAAmB;YAC9B,IAAI,EAAE,KAAK;YACX,UAAU,EAAE;gBACV,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACvD,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aACxD;YACD,aAAa,EAAE,KAAK;SACrB,CAAC;QACF,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,iGAAiG;IACjG,yFAAyF;IACzF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,OAAO,GAAmB;YAC9B,IAAI,EAAE,KAAK;YACX,UAAU,EAAE;gBACV,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC1E,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aAC1D;YACD,aAAa,EAAE,KAAK;SACrB,CAAC;QACF,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/captureLink.d.ts

@@ -0,0 +1,26 @@
+import type { CoachingResult } from '../formatters/coaching.js';
+import { CLIError } from './errors.js';
+export interface CaptureLinkParams {
+    entryId: string;
+    link: string | undefined;
+    linkType: string | undefined;
+    /** The pre-relation coaching verdict — the post-relation re-eval below overwrites it only
+     *  on a genuinely written relation (fail-open on a re-eval failure keeps this one). */
+    coaching: CoachingResult | null | undefined;
+}
+export interface CaptureLinkResult {
+    actualLinkedTo: string | undefined;
+    actualRelationType: string | undefined;
+    linkTypeRefusal: CLIError | null;
+    coaching: CoachingResult | null | undefined;
+}
+/**
+ * WP-475 E1 fix: the pre-relation verdict predates this relation, so relation-dependent rubric
+ * criteria read falsely-failed; re-run AFTER the relation lands and render THAT verdict.
+ * Fail-open (BR-144): a re-eval failure keeps the pre-relation verdict. WP-688 S4 (TASK-105,
+ * element 11): what was ACTUALLY written — never guessed, never defaulted; `--link` without
+ * `--link-type` is refused with no default, ever, and the refusal is DEFERRED (returned, not
+ * thrown) so the caller can still render the successful capture/version receipt first.
+ */
+export declare function applyCaptureLink(params: CaptureLinkParams): Promise<CaptureLinkResult>;
+//# sourceMappingURL=captureLink.d.ts.map

package/dist/lib/captureLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureLink.d.ts","sourceRoot":"","sources":["../../src/lib/captureLink.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAGlD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;2FACuF;IACvF,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,eAAe,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiG5F"}

package/dist/lib/captureLink.js

@@ -0,0 +1,110 @@
+import { kernelCallWithSession } from './client.js';
+import { CLIError, ErrorCode } from './errors.js';
+import { resolveCreatableRelationTypes } from './legalRelationTypes.js';
+/**
+ * WP-475 E1 fix: the pre-relation verdict predates this relation, so relation-dependent rubric
+ * criteria read falsely-failed; re-run AFTER the relation lands and render THAT verdict.
+ * Fail-open (BR-144): a re-eval failure keeps the pre-relation verdict. WP-688 S4 (TASK-105,
+ * element 11): what was ACTUALLY written — never guessed, never defaulted; `--link` without
+ * `--link-type` is refused with no default, ever, and the refusal is DEFERRED (returned, not
+ * thrown) so the caller can still render the successful capture/version receipt first.
+ */
+export async function applyCaptureLink(params) {
+    const { entryId, link, linkType } = params;
+    let actualLinkedTo;
+    let actualRelationType;
+    let linkTypeRefusal = null;
+    let coaching = params.coaching;
+    if (link === undefined)
+        return { actualLinkedTo, actualRelationType, linkTypeRefusal, coaching };
+    const linkTarget = link.trim();
+    if (!linkTarget) {
+        // bcRUML/bcRpJQ: an empty or whitespace-only --link must not silently no-op.
+        linkTypeRefusal = new CLIError('--link requires a non-empty entry ID.', { code: ErrorCode.VALIDATION_FAILED, category: 'validation', guidance: `${entryId} was captured — only the link was refused. Re-run with a valid --link <entry-id>.` });
+    }
+    else if (!linkType) {
+        // No default, ever (element 11). Legal verbs = the workspace type row's declared valid_relation_types
+        // (matched like loadTypeMap: data.canonical_key, never a guessed entryId), filtered to what `pb relate` can create (bdB5K, cQFZ_).
+        let declaredTypes;
+        let targetMissing = false;
+        try {
+            const [created, target] = await Promise.all([
+                kernelCallWithSession('chain.getEntry', { entryId }),
+                kernelCallWithSession('chain.getEntry', { entryId: linkTarget }),
+            ]);
+            targetMissing = target === null; // bcRUMR: never recommend `pb relate ... <missing-id>`
+            const canonicalKey = created?.canonicalKey;
+            if (canonicalKey) {
+                const typeRows = await kernelCallWithSession('chain.listEntries', { collectionSlug: 'semantic-types' });
+                declaredTypes = resolveCreatableRelationTypes(typeRows, canonicalKey, target?.canonicalKey === 'domain');
+            }
+        }
+        catch {
+            // Advisory read only — a failure here still refuses the link, just without the list.
+        }
+        const verbHint = declaredTypes && declaredTypes.length > 0 ? `Legal relation types for this entry: ${declaredTypes.join(', ')}.` : `No relation types are declared valid for this entry's type.`;
+        linkTypeRefusal = new CLIError(`--link requires --link-type — no default is written. ${verbHint}`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: targetMissing
+                ? `${entryId} was captured — the link was refused, and target "${linkTarget}" was not found. Verify the target entry ID.`
+                : `${entryId} was captured — only the link was refused. Re-run: pb relate ${entryId} <verb> ${linkTarget}`,
+        });
+    }
+    else {
+        const relationType = linkType;
+        let relationWritten = false;
+        let relateErr;
+        try {
+            const relateResult = await kernelCallWithSession('chain.createEntryRelation', {
+                fromEntryId: entryId, toEntryId: linkTarget, type: relationType,
+            });
+            // WP-753 O4 (TEN-3651) / this PR's P1 fix (same class as packages/mcp-server/src/tools/relations.ts's
+            // handleCreate): chain.createEntryRelation RETURNS `{outcome:'refused', refusal}` on an
+            // organisational-authority refusal — it never throws for this case, so the `catch` below
+            // never saw it and `linkTypeRefusal` stayed null, silently dropping the refusal reason from
+            // the capture receipt (the receipt itself was still correct — `relationWritten` already reads
+            // `false` off the missing `relationId` — but the caller learned nothing about WHY).
+            if (relateResult && 'outcome' in relateResult && relateResult.outcome === 'refused') {
+                const { refusal } = relateResult;
+                throw new CLIError(refusal.reason ?? `Relating ${entryId} to ${linkTarget} was refused.`, {
+                    code: refusal.category === 'auth' ? ErrorCode.AUTH_DENIED : ErrorCode.VALIDATION_FAILED,
+                    category: refusal.category === 'auth' ? 'auth' : 'validation',
+                    guidance: refusal.requiredAction ?? 'Route this change to the accountable role or Team Lead.',
+                });
+            }
+            // relationId is the ONLY "a row was inserted" marker (relations.ts:94-291) — a proposal diversion or the DEC-1399 auto-link gate return WITHOUT one.
+            relationWritten = Boolean(relateResult?.relationId);
+            if (relationWritten) {
+                actualLinkedTo = linkTarget;
+                actualRelationType = relationType;
+            }
+        }
+        catch (err) { // WP-745 review: a relate-door refusal must not escape uncaught — entryId above was ALREADY written.
+            relateErr = err;
+        }
+        // WP-745 round 3 (PRRT_kwDORS4ils6hz0vD): re-eval runs regardless of relate outcome — un-defers deferLLMSchedule; a refused link must not leave llmStatus:'skipped' forever. Diverted/refused verdicts are still discarded below.
+        try {
+            const reEval = await kernelCallWithSession('quality.evaluateHeuristicAndSchedule', { entryId, context: 'capture' });
+            if (relationWritten && reEval?.verdict)
+                coaching = reEval;
+        }
+        catch {
+            // Advisory — keep the pre-relation verdict rather than fail the capture.
+        }
+        if (relateErr instanceof CLIError && relateErr.code === ErrorCode.NETWORK_TIMEOUT) {
+            // WP-745 round 3 (PRRT_...h0VPP): NETWORK_TIMEOUT is outcome-UNKNOWN, not a refusal (the relate call may have landed server-side) — never buried under a contradictory blind-retry claim.
+            linkTypeRefusal = new CLIError(relateErr.message, { code: relateErr.code, category: relateErr.category, guidance: `${entryId} was captured. The link's outcome is UNKNOWN (not refused) — check before retrying: pb get ${entryId}. ${relateErr.guidance ?? ''}` });
+        }
+        else if (relateErr instanceof CLIError && relateErr.code !== ErrorCode.VALIDATION_FAILED) {
+            // WP-745 round 3 (PRRT_...h0CCc): preserve a real CLIError/McpError's own code/category (auth, rate limit) — only REL-LEGAL-2 VALIDATION (or a non-CLIError) gets the generic "was refused, re-run" guidance below.
+            const guidance = `${entryId} was captured — only the link was refused. Re-run: pb relate ${entryId} <verb> ${linkTarget}`;
+            linkTypeRefusal = new CLIError(relateErr.message, { code: relateErr.code, category: relateErr.category, guidance: relateErr.guidance ? `${guidance} (${relateErr.guidance})` : guidance });
+        }
+        else if (relateErr !== undefined) {
+            linkTypeRefusal = new CLIError(relateErr instanceof Error ? relateErr.message : String(relateErr), { code: ErrorCode.VALIDATION_FAILED, category: 'validation', guidance: `${entryId} was captured — only the link was refused. Re-run: pb relate ${entryId} <verb> ${linkTarget}` });
+        }
+    }
+    return { actualLinkedTo, actualRelationType, linkTypeRefusal, coaching };
+}
+//# sourceMappingURL=captureLink.js.map

package/dist/lib/captureLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureLink.js","sourceRoot":"","sources":["../../src/lib/captureLink.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAkBxE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAyB;IAC9D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC3C,IAAI,cAAkC,CAAC;IACvC,IAAI,kBAAsC,CAAC;IAC3C,IAAI,eAAe,GAAoB,IAAI,CAAC;IAC5C,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAE/B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IAEjG,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,6EAA6E;QAC7E,eAAe,GAAG,IAAI,QAAQ,CAAC,uCAAuC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,OAAO,mFAAmF,EAAE,CAAC,CAAC;IAClP,CAAC;SAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,sGAAsG;QACtG,mIAAmI;QACnI,IAAI,aAAmC,CAAC;QACxC,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC1C,qBAAqB,CAAsB,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC;gBACzE,qBAAqB,CAAsB,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;aACtF,CAAC,CAAC;YACH,aAAa,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,uDAAuD;YACxF,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;YAC3C,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAiB,mBAAmB,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACxH,aAAa,GAAG,6BAA6B,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,wCAAwC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,6DAA6D,CAAC;QACjM,eAAe,GAAG,IAAI,QAAQ,CAC5B,wDAAwD,QAAQ,EAAE,EAClE;YACE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,aAAa;gBACrB,CAAC,CAAC,GAAG,OAAO,qDAAqD,UAAU,8CAA8C;gBACzH,CAAC,CAAC,GAAG,OAAO,gEAAgE,OAAO,WAAW,UAAU,EAAE;SAC7G,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,QAAQ,CAAC;QAC9B,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE;gBACnI,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY;aAChE,CAAC,CAAC;YACH,sGAAsG;YACtG,wFAAwF;YACxF,yFAAyF;YACzF,4FAA4F;YAC5F,8FAA8F;YAC9F,oFAAoF;YACpF,IAAI,YAAY,IAAI,SAAS,IAAI,YAAY,IAAI,YAAY,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACpF,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC;gBACjC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,YAAY,OAAO,OAAO,UAAU,eAAe,EAAE;oBACxF,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB;oBACvF,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;oBAC7D,QAAQ,EAAE,OAAO,CAAC,cAAc,IAAI,yDAAyD;iBAC9F,CAAC,CAAC;YACL,CAAC;YACD,qJAAqJ;YACrJ,eAAe,GAAG,OAAO,CAAE,YAAoD,EAAE,UAAU,CAAC,CAAC;YAC7F,IAAI,eAAe,EAAE,CAAC;gBACpB,cAAc,GAAG,UAAU,CAAC;gBAC5B,kBAAkB,GAAG,YAAY,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC,CAAC,qGAAqG;YACnH,SAAS,GAAG,GAAG,CAAC;QAClB,CAAC;QACD,kOAAkO;QAClO,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,sCAAsC,EACtC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAChC,CAAC;YACF,IAAI,eAAe,IAAI,MAAM,EAAE,OAAO;gBAAE,QAAQ,GAAG,MAAM,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;QACD,IAAI,SAAS,YAAY,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,eAAe,EAAE,CAAC;YAClF,0LAA0L;YAC1L,eAAe,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,8FAA8F,OAAO,KAAK,SAAS,CAAC,QAAQ,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACtQ,CAAC;aAAM,IAAI,SAAS,YAAY,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,iBAAiB,EAAE,CAAC;YAC3F,oNAAoN;YACpN,MAAM,QAAQ,GAAG,GAAG,OAAO,gEAAgE,OAAO,WAAW,UAAU,EAAE,CAAC;YAC1H,eAAe,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7L,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,eAAe,GAAG,IAAI,QAAQ,CAAC,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,OAAO,gEAAgE,OAAO,WAAW,UAAU,EAAE,EAAE,CAAC,CAAC;QACxR,CAAC;IACH,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;AAC3E,CAAC"}

package/dist/lib/checklist.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The quality checklist — one renderer for every surface (TASK-590, DEC-1910, DEC-1913).
+ *
+ * A blocked or pending accept shows every criterion of the entry's rubric as one short
+ * instruction with one of three states: met, not yet, or still judging (the AI verdict has
+ * not landed). The line is the repair; an unmet line adds what the AI judge named as missing.
+ * The judge's free-text explanation is never shown, so it can never contradict a tick.
+ *
+ * Lines exist only for the gated spine rubrics, purpose, vision, strategy, objective and key
+ * result (DEC-1913, DEC-1935), and for the strategy-link gate's rungs (TASK-609:
+ * kernel/strategy/spineRefusal.ts marks each rung above a work package, key result or objective
+ * met or not yet); for any other key `renderChecklist` returns null. No Chain ids in any line:
+ * these strings reach users. The AI judge decides every spine line, so no line names a word count.
+ *
+ * Dependency-free on purpose: scripts/generate-mcp-embedded-copies.mjs ships this exact
+ * source to the CLI and the MCP server, and the accept gate (convex/lib/gates/evaluate.ts)
+ * calls it for the Rail, so every surface prints the same lines.
+ */
+/** One instruction per criterion id, per gated rubric. A kernel test pins it to the rubrics. */
+export declare const CHECKLIST_LINES: Readonly<Record<string, Readonly<Record<string, string>>>>;
+export interface ChecklistCriterion {
+    id: string;
+    passed: boolean;
+    /** What the AI judge named as concretely absent, on a fail. */
+    missing?: string;
+}
+/**
+ * The checklist lines for an entry's verdict, or null when its type has no checklist.
+ * `judging` is true while the AI verdict has not settled.
+ */
+export declare function renderChecklist(canonicalKey: string, criteria: readonly ChecklistCriterion[], judging: boolean): string[] | null;
+//# sourceMappingURL=checklist.d.ts.map

package/dist/lib/checklist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checklist.d.ts","sourceRoot":"","sources":["../../src/lib/checklist.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;GAiBG;AAEH,gGAAgG;AAChG,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAmCtF,CAAC;AAEF,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAC9B,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,OAAO,EAAE,OAAO,GACd,MAAM,EAAE,GAAG,IAAI,CAWjB"}

package/dist/lib/checklist.js

@@ -0,0 +1,77 @@
+// GENERATED by scripts/generate-mcp-embedded-copies.mjs from kernel/quality/checklist.ts.
+// DO NOT EDIT. Run `npm run mcp:embedded-copies` to regenerate.
+// Local runtime copy for the isolated connector build.
+/**
+ * The quality checklist — one renderer for every surface (TASK-590, DEC-1910, DEC-1913).
+ *
+ * A blocked or pending accept shows every criterion of the entry's rubric as one short
+ * instruction with one of three states: met, not yet, or still judging (the AI verdict has
+ * not landed). The line is the repair; an unmet line adds what the AI judge named as missing.
+ * The judge's free-text explanation is never shown, so it can never contradict a tick.
+ *
+ * Lines exist only for the gated spine rubrics, purpose, vision, strategy, objective and key
+ * result (DEC-1913, DEC-1935), and for the strategy-link gate's rungs (TASK-609:
+ * kernel/strategy/spineRefusal.ts marks each rung above a work package, key result or objective
+ * met or not yet); for any other key `renderChecklist` returns null. No Chain ids in any line:
+ * these strings reach users. The AI judge decides every spine line, so no line names a word count.
+ *
+ * Dependency-free on purpose: scripts/generate-mcp-embedded-copies.mjs ships this exact
+ * source to the CLI and the MCP server, and the accept gate (convex/lib/gates/evaluate.ts)
+ * calls it for the Rail, so every surface prints the same lines.
+ */
+/** One instruction per criterion id, per gated rubric. A kernel test pins it to the rubrics. */
+export const CHECKLIST_LINES = {
+    purpose: {
+        stranger_test: 'Explain it so a stranger knows why this company exists',
+        specificity: 'Say what would be missing from the world without this company',
+        not_a_platitude: 'Say something a reasonable company would not also claim',
+        beneficiary_named: 'Name who the company exists for: a role, a persona or a segment',
+        durable_not_dated: 'Leave out dates and planning cycles; those belong on goals',
+    },
+    vision: {
+        specificity: 'Say what will be different, in words only this product could use',
+        beneficiary: 'Name who benefits: a role, a persona or a segment',
+        falsifiability: 'Choose a direction a reasonable rival would reject',
+        stranger_test: 'Explain it so a stranger knows what will be different, and for whom',
+    },
+    strategy: {
+        coherent_narrative: 'Connect the diagnosis, the policy and the first actions',
+        decisiveness: 'Say what you will not do',
+        time_bounded: 'Name a horizon: a date, a duration or a milestone',
+    },
+    objective: {
+        outcome_not_activity: 'State what will be true once it is met, not the work to do',
+        serves_strategy: 'Say what must be true for the strategy to succeed',
+        observable: 'Make it something a reader could see has happened',
+    },
+    key_result: {
+        measurable: 'Name a measure and the target value or state',
+        bounded: 'Say by when, or how often, the measure is read',
+        moves_the_objective: 'Pick a result that shows the objective is happening, not that work was done',
+    },
+    /** One line per spine rung, keyed by the rung it reaches (kernel/strategy/spineTrace.ts order). */
+    strategy_link: {
+        key_result: 'Link this work to an accepted key result it validates',
+        objective: 'Put the key result under an accepted objective',
+        strategy: 'Put the objective under an accepted strategy',
+    },
+};
+const MARK = { met: '[x]', not_yet: '[ ]', judging: '[~]' };
+/**
+ * The checklist lines for an entry's verdict, or null when its type has no checklist.
+ * `judging` is true while the AI verdict has not settled.
+ */
+export function renderChecklist(canonicalKey, criteria, judging) {
+    const lines = CHECKLIST_LINES[canonicalKey];
+    if (!lines)
+        return null;
+    return criteria
+        .filter((c) => lines[c.id] !== undefined)
+        .map((c) => {
+        const state = !c.passed ? 'not_yet' : judging ? 'judging' : 'met';
+        const still = state === 'judging' ? ' (still judging)' : '';
+        const missing = state === 'not_yet' && c.missing ? ` — missing: ${c.missing}` : '';
+        return `${MARK[state]} ${lines[c.id]}${still}${missing}`;
+    });
+}
+//# sourceMappingURL=checklist.js.map

package/dist/lib/checklist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checklist.js","sourceRoot":"","sources":["../../src/lib/checklist.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,gEAAgE;AAChE,uDAAuD;AAEvD;;;;;;;;;;;;;;;;;GAiBG;AAEH,gGAAgG;AAChG,MAAM,CAAC,MAAM,eAAe,GAA+D;IAC1F,OAAO,EAAE;QACR,aAAa,EAAE,wDAAwD;QACvE,WAAW,EAAE,+DAA+D;QAC5E,eAAe,EAAE,yDAAyD;QAC1E,iBAAiB,EAAE,iEAAiE;QACpF,iBAAiB,EAAE,4DAA4D;KAC/E;IACD,MAAM,EAAE;QACP,WAAW,EAAE,kEAAkE;QAC/E,WAAW,EAAE,mDAAmD;QAChE,cAAc,EAAE,oDAAoD;QACpE,aAAa,EAAE,qEAAqE;KACpF;IACD,QAAQ,EAAE;QACT,kBAAkB,EAAE,yDAAyD;QAC7E,YAAY,EAAE,0BAA0B;QACxC,YAAY,EAAE,mDAAmD;KACjE;IACD,SAAS,EAAE;QACV,oBAAoB,EAAE,4DAA4D;QAClF,eAAe,EAAE,mDAAmD;QACpE,UAAU,EAAE,mDAAmD;KAC/D;IACD,UAAU,EAAE;QACX,UAAU,EAAE,8CAA8C;QAC1D,OAAO,EAAE,gDAAgD;QACzD,mBAAmB,EAAE,6EAA6E;KAClG;IACD,mGAAmG;IACnG,aAAa,EAAE;QACd,UAAU,EAAE,uDAAuD;QACnE,SAAS,EAAE,gDAAgD;QAC3D,QAAQ,EAAE,8CAA8C;KACxD;CACD,CAAC;AASF,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAW,CAAC;AAErE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC9B,YAAoB,EACpB,QAAuC,EACvC,OAAgB;IAEhB,MAAM,KAAK,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,QAAQ;SACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,OAAO,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/client.d.ts

@@ -1,29 +1,27 @@
 /**
  * MCP HTTP client — POST to Convex gateway with Bearer auth.
  *
- * TEN-729: Detects sandbox-blocked fetch (Claude Code, Cursor, etc.) and
- * provides an actionable error instead of the opaque "fetch failed".
+ * TEN-729: Detects sandbox-blocked fetch (Claude Code, Cursor, etc.) and provides an
+ * actionable error instead of the opaque "fetch failed".
  *
- * Sandbox proxy support: Node.js fetch (undici) ignores proxy env vars by
- * default. We detect HTTPS_PROXY and configure a ProxyAgent so pb works in
- * sandboxed environments (Claude Code, Cursor) without requiring
- * NODE_OPTIONS="--use-env-proxy".
+ * Sandbox proxy support: Node.js fetch (undici) ignores proxy env vars by default. We detect
+ * HTTPS_PROXY and configure a ProxyAgent so pb works in sandboxed environments (Claude Code,
+ * Cursor) without requiring NODE_OPTIONS="--use-env-proxy".
  */
+import type { ValidationErrorDetail } from './kernelEnvelope.js';
 import { CLIError } from './errors.js';
-/** Structured field-level detail from a VALIDATION_FAILED response. */
-export interface ValidationErrorDetail {
-    fieldKey: string;
-    fieldLabel: string;
-    invalidValue: unknown;
-    validOptions?: string[];
-    errorType: 'type_mismatch' | 'invalid_option' | 'required';
-    message: string;
-}
+import { type KernelCallOptions } from './rate-limit.js';
+export declare function isPerEntryAuthorizationRefusal(code?: string): boolean;
 /** Error thrown by kernelCall/kernelCallWithSession when the server returns a non-OK response. */
 export declare class McpError extends CLIError {
     details?: ValidationErrorDetail[];
-    constructor(message: string, code?: string, details?: ValidationErrorDetail[]);
+    /** Present only when code === 'rate-limited' — seconds until the caller may retry. */
+    retryAfterSeconds?: number;
+    missingRequiredFields?: string[];
+    constructor(message: string, code?: string, details?: ValidationErrorDetail[], retryAfterSeconds?: number, missingRequiredFields?: string[]);
 }
+export { resetTouchThrottle, type KernelCallOptions } from './rate-limit.js';
+export type { KernelEnvelope, ValidationErrorDetail } from './kernelEnvelope.js';
 /** Result of validateKey — used by `pb login` to verify a key before saving. */
 export type ValidateKeyResult = {
     valid: true;
@@ -39,6 +37,15 @@ export type ValidateKeyResult = {
  * Returns { valid: true, workspaceId } on success.
  * Returns { valid: false, error } on auth failure (401) or other server error.
  * Throws on network/timeout errors so the caller can distinguish "bad key" from "can't reach server".
+ *
+ * WP-575: `timeoutMs` now DEFAULTS to `resolveWorkspace`'s declared budget instead of a
+ * local `5000` literal — that literal was the last connector-owned timeout on the gateway
+ * path, and the point of this work package is that no connector gets to pick its own. It
+ * stays an explicit parameter so a caller (or a test) can still override deliberately.
+ * Widening 5s -> the declared 10s costs nothing in the case people actually hit: an
+ * unreachable host fails with ECONNREFUSED/ENOTFOUND immediately, not by timeout. The
+ * timeout only governs a server that ACCEPTS the connection then stalls, where waiting the
+ * route's real declared budget before calling the key invalid is the correct behavior.
  */
 export declare function validateKey(apiKey: string, siteUrl: string, timeoutMs?: number): Promise<ValidateKeyResult>;
 /** Get a human-friendly spinner label for an MCP function name. */
@@ -51,16 +58,37 @@ export declare function spinnerLabel(fn: string): string;
  * Throws CLIError on auth failure or non-OK response.
  */
 export declare function adminCall(command: string, args?: Record<string, unknown>): Promise<unknown>;
-export declare function kernelCall<T = unknown>(fn: string, args?: Record<string, unknown>): Promise<T>;
+export declare function kernelCall<T = unknown>(fn: string, args?: Record<string, unknown>, options?: KernelCallOptions): Promise<T>;
 /**
- * kernelCall variant that injects X-Agent-Session-Id header for write operations.
+ * kernelCall variant that returns the full kernel envelope (data + summary + _meta) instead
+ * of stripping to just `data` — mirrors packages/mcp-server/src/client.ts's
+ * `kernelCallEnvelope`. Use when a caller needs `_meta` (e.g. a route-specific additive
+ * flag like chain.shapeAdvisories' `truncated`, WP-571 sweep) without changing `data`'s own
+ * shape — the reason `_meta` exists as a side-channel at all (convex/lib/envelopeContract.ts).
+ */
+export declare function kernelCallEnvelope<T = unknown>(fn: string, args?: Record<string, unknown>, options?: KernelCallOptions): Promise<{
+    data: T;
+    summary?: string;
+    _meta?: {
+        durationMs?: number;
+        truncated?: boolean;
+    };
+}>;
+/**
+ * kernelCall variant for write operations. Callers that need server-side session
+ * validation (e.g. `chain.verifyEntry`) pass `sessionId` in `args` explicitly —
+ * it now travels in the request body, not a header (http.ts never read the old
+ * `X-Agent-Session-Id` header).
  * All write commands (update, relate, unrelate, capture) should use this.
  *
+ * WP-711/712: the binding guard lives in the shared fetchKernelEnvelope. TEN-3398 (follow-up)
+ * added the effective-tenant notice here too, alongside the post-write session-touch below.
+ *
  * After a successful write, fires a non-blocking `agent.touchSession` call to
  * renew the session TTL — mirroring MCP server behavior (DEC-299, BET-181 Slice 1).
  * The touch is fire-and-forget: it does not block the write response, and errors
  * are silently swallowed. No touch is attempted if no session is active or if
  * the write itself fails.
  */
-export declare function kernelCallWithSession<T = unknown>(fn: string, args?: Record<string, unknown>): Promise<T>;
+export declare function kernelCallWithSession<T = unknown>(fn: string, args?: Record<string, unknown>, options?: KernelCallOptions): Promise<T>;
 //# sourceMappingURL=client.d.ts.map

package/dist/lib/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAKlD,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,eAAe,GAAG,gBAAgB,GAAG,UAAU,CAAC;IAC3D,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,kGAAkG;AAClG,qBAAa,QAAS,SAAQ,QAAQ;IACpC,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,EAAE;CAQ9E;AA2DD,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,SAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AA0BD,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,UAAU,CAAC,CAAC,GAAG,OAAO,EAC1C,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CAAC,CAAC,CAAC,CAyBZ;AA0BD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EACrD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CAAC,CAAC,CAAC,CAwCZ"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,OAAO,KAAK,EAAkB,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAMjF,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAGlD,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAoBzF,wBAAgB,8BAA8B,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAErE;AAkCD,kGAAkG;AAClG,qBAAa,QAAS,SAAQ,QAAQ;IACpC,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAClC,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;gBAEjD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,EAAE,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,EAAE,MAAM,EAAE;CAc5I;AAGD,OAAO,EAAE,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAK7E,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAoDjF,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,SAA8C,GACtD,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AA6BD,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,OAAO,CAAC,CAoClB;AAqFD,wBAAsB,UAAU,CAAC,CAAC,GAAG,OAAO,EAC1C,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAIZ;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,GAAG,OAAO,EAClD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,CAAC,CAI9F;AA+BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EACrD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC,CA8BZ"}