@productbrain/cli 0.1.0-beta.99 → 0.1.0-beta.9900

package/dist/surfaces/adapters/copilot.js

@@ -0,0 +1,59 @@
+/**
+ * Copilot SurfaceAdapter — WP-421 S2c (DEC-952).
+ *
+ * Copilot has only one projection target — `.github/copilot-instructions.md` — which
+ * concatenates rule summaries. Per-skill projection is unsupported.
+ *
+ * canonicalPathFor returns null for the aggregate file: there is no 1:1 reverse map
+ * (the file is generated from many sources). Consumers fall back to the generic
+ * "edit upstream in .productbrain/{skills,rules,hooks}/" message and emit
+ * `surface-reverse-map-missing` telemetry — see surfaces/telemetry.ts.
+ */
+import { existsSync } from 'fs';
+import { join } from 'path';
+function transform(input) {
+    // Copilot aggregates rule summaries inside copilot-instructions.md; the
+    // single-asset transform emits the rule's summary block. Skills are not
+    // included (matches handshake.ts behavior).
+    const { canonical } = input;
+    if (canonical.kind === 'rule') {
+        return `### ${canonical.name}\n${canonical.description}\n`;
+    }
+    return '';
+}
+function paths(_asset) {
+    return { projectionPath: '.github/copilot-instructions.md' };
+}
+const goldenRule = {
+    name: 'sample-rule',
+    description: 'Sample rule for golden test',
+    scope: undefined,
+    autoApply: true,
+    body: 'unused for copilot summary',
+    sourcePath: '/abs/.productbrain/rules/sample-rule.md',
+};
+const goldens = [
+    {
+        name: 'rule-summary-block',
+        canonical: { kind: 'rule', ...goldenRule },
+        expected: `### ${goldenRule.name}\n${goldenRule.description}\n`,
+    },
+];
+function canonicalPathFor(projectionPath) {
+    // Copilot's only target file aggregates many canonical sources — no defensible
+    // 1:1 reverse map. Return null and let consumers emit the telemetry fallback.
+    const p = projectionPath.replace(/^\.\//, '');
+    if (p === '.github/copilot-instructions.md')
+        return null;
+    return null;
+}
+export const copilotAdapter = {
+    name: 'copilot',
+    displayName: 'GitHub Copilot',
+    detect: (repoRoot) => existsSync(join(repoRoot, '.github', 'copilot-instructions.md')),
+    paths,
+    transform,
+    goldens,
+    canonicalPathFor,
+};
+//# sourceMappingURL=copilot.js.map

package/dist/surfaces/adapters/copilot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot.js","sourceRoot":"","sources":["../../../src/surfaces/adapters/copilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,SAAS,SAAS,CAAC,KAA2E;IAC5F,wEAAwE;IACxE,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,OAAO,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,WAAW,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,KAAK,CAAC,MAAuB;IACpC,OAAO,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,GAAkB;IAChC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,6BAA6B;IAC1C,KAAK,EAAE,SAAS;IAChB,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,4BAA4B;IAClC,UAAU,EAAE,yCAAyC;CACtD,CAAC;AAEF,MAAM,OAAO,GAAoB;IAC/B;QACE,IAAI,EAAE,oBAAoB;QAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE;QAC1C,QAAQ,EAAE,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,IAAI;KAChE;CACF,CAAC;AAEF,SAAS,gBAAgB,CAAC,cAAsB;IAC9C,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,iCAAiC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,gBAAgB;IAC7B,MAAM,EAAE,CAAC,QAAgB,EAAE,EAAE,CAC3B,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAClE,KAAK;IACL,SAAS;IACT,OAAO;IACP,gBAAgB;CACjB,CAAC"}

package/dist/surfaces/adapters/cursor.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceAdapter } from '../adapter.js';
+export declare const cursorAdapter: SurfaceAdapter;
+//# sourceMappingURL=cursor.d.ts.map

package/dist/surfaces/adapters/cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../../src/surfaces/adapters/cursor.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAGV,cAAc,EAIf,MAAM,eAAe,CAAC;AA+DvB,eAAO,MAAM,aAAa,EAAE,cAQ3B,CAAC"}

package/dist/surfaces/adapters/cursor.js

@@ -0,0 +1,78 @@
+/**
+ * Cursor SurfaceAdapter — WP-421 S2c (DEC-952).
+ *
+ * Projects:
+ *   - rules → .cursor/rules/<name>.mdc   (note the .md → .mdc extension flip)
+ *   - skills → .cursor/skills/<name>/SKILL.md
+ *   - hooks: not supported (INS-740 — empty hookEvents)
+ */
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { generateCursorRule, generateCursorSkill, } from '../../generators/portable-knowledge.js';
+function transform(input) {
+    const { canonical } = input;
+    if (canonical.kind === 'rule')
+        return generateCursorRule(canonical);
+    return generateCursorSkill(canonical);
+}
+function paths(asset) {
+    switch (asset.kind) {
+        case 'rule':
+            // .md → .mdc extension flip is the cursor-specific signature.
+            return { projectionPath: `.cursor/rules/${asset.basename}.mdc` };
+        case 'skill':
+            return { projectionPath: `.cursor/skills/${asset.basename}/SKILL.md` };
+        case 'hook':
+            // INS-740: cursor has no native hook events. Path returned for completeness;
+            // handshake never writes here by default.
+            return { projectionPath: '.cursor/settings.json' };
+    }
+}
+const goldenRule = {
+    name: 'sample-rule',
+    description: 'Sample rule for golden test',
+    scope: undefined,
+    autoApply: true,
+    body: 'Body referencing .productbrain/rules/other.md and .productbrain/skills/x.md\n',
+    sourcePath: '/abs/.productbrain/rules/sample-rule.md',
+};
+const goldenSkill = {
+    name: 'sample-skill',
+    description: 'Sample skill for golden test',
+    triggers: ['/sample'],
+    body: 'Reference .productbrain/skills/other.md inside the body.\n',
+    sourcePath: '/abs/.productbrain/skills/sample-skill.md',
+};
+const goldens = [
+    {
+        name: 'rule-mdc-frontmatter',
+        canonical: { kind: 'rule', ...goldenRule },
+        expected: generateCursorRule(goldenRule),
+    },
+    {
+        name: 'skill-trigger-injection',
+        canonical: { kind: 'skill', ...goldenSkill },
+        expected: generateCursorSkill(goldenSkill),
+    },
+];
+function canonicalPathFor(projectionPath) {
+    const p = projectionPath.replace(/^\.\//, '');
+    // Reverse the .md → .mdc extension flip on the rule projection.
+    let m = p.match(/^\.cursor\/rules\/(.+)\.mdc$/);
+    if (m)
+        return `.productbrain/rules/${m[1]}.md`;
+    m = p.match(/^\.cursor\/skills\/(.+)\/SKILL\.md$/);
+    if (m)
+        return `.productbrain/skills/${m[1]}.md`;
+    return null;
+}
+export const cursorAdapter = {
+    name: 'cursor',
+    displayName: 'Cursor',
+    detect: (repoRoot) => existsSync(join(repoRoot, '.cursor')),
+    paths,
+    transform,
+    goldens,
+    canonicalPathFor,
+};
+//# sourceMappingURL=cursor.js.map

package/dist/surfaces/adapters/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../../src/surfaces/adapters/cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAWhD,SAAS,SAAS,CAAC,KAA2E;IAC5F,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACpE,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,KAAK,CAAC,KAAsB;IACnC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,8DAA8D;YAC9D,OAAO,EAAE,cAAc,EAAE,iBAAiB,KAAK,CAAC,QAAQ,MAAM,EAAE,CAAC;QACnE,KAAK,OAAO;YACV,OAAO,EAAE,cAAc,EAAE,kBAAkB,KAAK,CAAC,QAAQ,WAAW,EAAE,CAAC;QACzE,KAAK,MAAM;YACT,6EAA6E;YAC7E,0CAA0C;YAC1C,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAkB;IAChC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,6BAA6B;IAC1C,KAAK,EAAE,SAAS;IAChB,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,+EAA+E;IACrF,UAAU,EAAE,yCAAyC;CACtD,CAAC;AAEF,MAAM,WAAW,GAAmB;IAClC,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,8BAA8B;IAC3C,QAAQ,EAAE,CAAC,SAAS,CAAC;IACrB,IAAI,EAAE,4DAA4D;IAClE,UAAU,EAAE,2CAA2C;CACxD,CAAC;AAEF,MAAM,OAAO,GAAoB;IAC/B;QACE,IAAI,EAAE,sBAAsB;QAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE;QAC1C,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC;KACzC;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE;QAC5C,QAAQ,EAAE,mBAAmB,CAAC,WAAW,CAAC;KAC3C;CACF,CAAC;AAEF,SAAS,gBAAgB,CAAC,cAAsB;IAC9C,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9C,gEAAgE;IAChE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAChD,IAAI,CAAC;QAAE,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/C,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnD,IAAI,CAAC;QAAE,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,QAAQ;IACrB,MAAM,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnE,KAAK;IACL,SAAS;IACT,OAAO;IACP,gBAAgB;CACjB,CAAC"}

package/dist/surfaces/registry.d.ts

@@ -1,10 +1,15 @@
 /**
- * Surface Capability Registry — WP-310 S0 (FEAT-959)
+ * Surface Capability Registry — WP-310 S0 (FEAT-959), extended in WP-421 S2c (DEC-952).
+ *
+ * Static typed record of per-surface capabilities consumed by E1–E4 and the
+ * SurfaceAdapter set introduced in WP-421 S2c. The legacy `SURFACE_REGISTRY`
+ * shape is preserved verbatim for callers (handshake hook plumbing,
+ * `lib/hook-intents.ts`, existing tests).
  *
- * Static typed record of per-surface capabilities consumed by E1–E4.
  * INS-740: Cursor and Copilot had confirmed double-fire risk with Claude Code hooks.
  * Their hookEvents arrays MUST be empty in v1. Only 'claude' gets hook events by default.
  */
+import type { SurfaceAdapter } from './adapter.js';
 export type SurfaceName = 'claude' | 'cursor' | 'copilot' | 'codex';
 export interface SurfaceCapability {
     rulesFormat: 'markdown' | 'mdc';
@@ -17,4 +22,55 @@ export interface SurfaceCapability {
     supportsAgentsMd: boolean;
 }
 export declare const SURFACE_REGISTRY: Record<SurfaceName, SurfaceCapability>;
+/**
+ * Per-surface adapter registry. New surface = new adapter file + line here.
+ * Adapters expose detect/paths/transform/goldens/canonicalPathFor — one canonical
+ * asset, many surface projections.
+ */
+export declare const SURFACE_ADAPTERS: Record<SurfaceName, SurfaceAdapter>;
+/** Convenience array view for iteration (e.g. detect-all). */
+export declare const SURFACE_ADAPTER_LIST: SurfaceAdapter[];
+/**
+ * Lookup the canonical authoring path for a projection path on any surface.
+ * Returns the first non-null mapping; if every adapter returns null, returns null
+ * and the caller MUST emit `surface-reverse-map-missing` telemetry via
+ * `surfaces/telemetry.ts:reportReverseMapMissing`.
+ */
+export declare function canonicalPathForAnySurface(projectionPath: string): {
+    surface: SurfaceName;
+    canonicalPath: string;
+} | null;
+/** Govern mode declared with empty surfaces[]. Hard error (handshake refuses). */
+export declare const SURFACE_GOVERN_NO_SURFACES: "govern-no-surfaces";
+/** Surface name in manifest is not registered. Advisory flag for drift report. */
+export declare const SURFACE_ADAPTER_MISSING: "surface-adapter-missing";
+/**
+ * Result of the surfaces validation for a given authority mode.
+ *
+ * - `error` is set when the configuration is invalid for the requested mode
+ *   (today: only Govern + empty surfaces). Caller should refuse to proceed.
+ * - `unregisteredSurfaces` enumerates manifest surface names that are not in
+ *   SURFACE_ADAPTERS; emit one `SURFACE_ADAPTER_MISSING` flag per entry but
+ *   do NOT fail.
+ */
+export interface SurfacesValidationResult {
+    error?: typeof SURFACE_GOVERN_NO_SURFACES;
+    unregisteredSurfaces: string[];
+    /** Subset of `manifest.surfaces` that resolve to a known SurfaceName. */
+    registeredSurfaces: SurfaceName[];
+}
+/**
+ * Validate `manifest.surfaces[]` against the requested authority mode.
+ *
+ * Govern + empty surfaces → `{ error: SURFACE_GOVERN_NO_SURFACES }`.
+ * Any other mode is permitted with any (possibly empty) surface list.
+ *
+ * Unregistered surface names are reported via `unregisteredSurfaces` so the
+ * caller can flag them in the drift report. Pure: no I/O, no Convex calls.
+ *
+ * Surface name normalization: this validator strips a leading `.` from each
+ * entry (e.g. `.cursor` → `cursor`) so manifests can declare either form.
+ * The canonical SurfaceName values in SURFACE_ADAPTERS use the bare name.
+ */
+export declare function validateSurfacesForMode(mode: 'off' | 'observe' | 'project' | 'govern', surfacesFromManifest: string[]): SurfacesValidationResult;
 //# sourceMappingURL=registry.d.ts.map

package/dist/surfaces/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/surfaces/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;AAEpE,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,UAAU,GAAG,KAAK,CAAC;IAChC,YAAY,EAAE,UAAU,GAAG,MAAM,CAAC;IAClC,+FAA+F;IAC/F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,eAAe,GAAG,MAAM,CAAC;IAClD,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAiCnE,CAAC"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/surfaces/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAMnD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;AAEpE,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,UAAU,GAAG,KAAK,CAAC;IAChC,YAAY,EAAE,UAAU,GAAG,MAAM,CAAC;IAClC,+FAA+F;IAC/F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,eAAe,GAAG,MAAM,CAAC;IAClD,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAiCnE,CAAC;AAIF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,CAKhE,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,oBAAoB,EAAE,cAAc,EAAoC,CAAC;AAEtF;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,cAAc,EAAE,MAAM,GACrB;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAMxD;AAaD,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,EAAG,oBAA6B,CAAC;AAExE,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,EAAG,yBAAkC,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,EAAE,OAAO,0BAA0B,CAAC;IAC1C,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,yEAAyE;IACzE,kBAAkB,EAAE,WAAW,EAAE,CAAC;CACnC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,EAC9C,oBAAoB,EAAE,MAAM,EAAE,GAC7B,wBAAwB,CAuB1B"}

package/dist/surfaces/registry.js

@@ -1,10 +1,7 @@
-/**
- * Surface Capability Registry — WP-310 S0 (FEAT-959)
- *
- * Static typed record of per-surface capabilities consumed by E1–E4.
- * INS-740: Cursor and Copilot had confirmed double-fire risk with Claude Code hooks.
- * Their hookEvents arrays MUST be empty in v1. Only 'claude' gets hook events by default.
- */
+import { claudeAdapter } from './adapters/claude.js';
+import { cursorAdapter } from './adapters/cursor.js';
+import { copilotAdapter } from './adapters/copilot.js';
+import { codexAdapter } from './adapters/codex.js';
 export const SURFACE_REGISTRY = {
     claude: {
         rulesFormat: 'markdown',
@@ -39,4 +36,82 @@ export const SURFACE_REGISTRY = {
         supportsAgentsMd: true,
     },
 };
+// ── SurfaceAdapter registry — WP-421 S2c (DEC-952) ──────────────────────────
+/**
+ * Per-surface adapter registry. New surface = new adapter file + line here.
+ * Adapters expose detect/paths/transform/goldens/canonicalPathFor — one canonical
+ * asset, many surface projections.
+ */
+export const SURFACE_ADAPTERS = {
+    claude: claudeAdapter,
+    cursor: cursorAdapter,
+    copilot: copilotAdapter,
+    codex: codexAdapter,
+};
+/** Convenience array view for iteration (e.g. detect-all). */
+export const SURFACE_ADAPTER_LIST = Object.values(SURFACE_ADAPTERS);
+/**
+ * Lookup the canonical authoring path for a projection path on any surface.
+ * Returns the first non-null mapping; if every adapter returns null, returns null
+ * and the caller MUST emit `surface-reverse-map-missing` telemetry via
+ * `surfaces/telemetry.ts:reportReverseMapMissing`.
+ */
+export function canonicalPathForAnySurface(projectionPath) {
+    for (const surface of Object.keys(SURFACE_ADAPTERS)) {
+        const result = SURFACE_ADAPTERS[surface].canonicalPathFor(projectionPath);
+        if (result)
+            return { surface, canonicalPath: result };
+    }
+    return null;
+}
+// ── WP-421 S7: mode × surfaces matrix (doneWhen #19) ─────────────────────────
+//
+// Two stable error/flag codes (consumer-stable contract):
+//   - SURFACE_GOVERN_NO_SURFACES — Govern mode requires a non-empty surfaces[].
+//     Emitted by `validateSurfacesForMode` when `materialize: govern` and no
+//     surfaces declared. CLI surfaces this as a hard error.
+//   - SURFACE_ADAPTER_MISSING — A surface name in `manifest.surfaces[]` is not
+//     registered in SURFACE_ADAPTERS. Emitted by `flagUnregisteredSurfaces` for
+//     the drift report. The handshake MUST NOT crash on this — the flag is
+//     advisory and the handshake skips the unknown surface.
+/** Govern mode declared with empty surfaces[]. Hard error (handshake refuses). */
+export const SURFACE_GOVERN_NO_SURFACES = 'govern-no-surfaces';
+/** Surface name in manifest is not registered. Advisory flag for drift report. */
+export const SURFACE_ADAPTER_MISSING = 'surface-adapter-missing';
+/**
+ * Validate `manifest.surfaces[]` against the requested authority mode.
+ *
+ * Govern + empty surfaces → `{ error: SURFACE_GOVERN_NO_SURFACES }`.
+ * Any other mode is permitted with any (possibly empty) surface list.
+ *
+ * Unregistered surface names are reported via `unregisteredSurfaces` so the
+ * caller can flag them in the drift report. Pure: no I/O, no Convex calls.
+ *
+ * Surface name normalization: this validator strips a leading `.` from each
+ * entry (e.g. `.cursor` → `cursor`) so manifests can declare either form.
+ * The canonical SurfaceName values in SURFACE_ADAPTERS use the bare name.
+ */
+export function validateSurfacesForMode(mode, surfacesFromManifest) {
+    const knownNames = new Set(Object.keys(SURFACE_ADAPTERS));
+    const registeredSurfaces = [];
+    const unregisteredSurfaces = [];
+    for (const raw of surfacesFromManifest) {
+        if (typeof raw !== 'string' || raw.length === 0)
+            continue;
+        const stripped = raw.startsWith('.') ? raw.slice(1) : raw;
+        const normalized = stripped === 'github' ? 'copilot' : stripped;
+        if (knownNames.has(normalized)) {
+            registeredSurfaces.push(normalized);
+        }
+        else {
+            unregisteredSurfaces.push(raw);
+        }
+    }
+    // Govern requires at least one registered surface. Unregistered surface names
+    // do NOT count toward this minimum (they're advisory).
+    if (mode === 'govern' && registeredSurfaces.length === 0) {
+        return { error: SURFACE_GOVERN_NO_SURFACES, unregisteredSurfaces, registeredSurfaces };
+    }
+    return { unregisteredSurfaces, registeredSurfaces };
+}
 //# sourceMappingURL=registry.js.map

package/dist/surfaces/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/surfaces/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,MAAM,CAAC,MAAM,gBAAgB,GAA2C;IACtE,MAAM,EAAE;QACN,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC;QAClD,YAAY,EAAE,uBAAuB;QACrC,uBAAuB,EAAE,eAAe;QACxC,gBAAgB,EAAE,KAAK;KACxB;IACD,MAAM,EAAE;QACN,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,EAAE,EAAE,oDAAoD;QACpE,YAAY,EAAE,uBAAuB;QACrC,uBAAuB,EAAE,MAAM;QAC/B,gBAAgB,EAAE,KAAK;KACxB;IACD,OAAO,EAAE;QACP,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,EAAE,EAAE,oBAAoB;QACpC,YAAY,EAAE,iCAAiC;QAC/C,uBAAuB,EAAE,MAAM;QAC/B,gBAAgB,EAAE,KAAK;KACxB;IACD,KAAK,EAAE;QACL,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,EAAE;QACd,YAAY,EAAE,WAAW;QACzB,uBAAuB,EAAE,MAAM;QAC/B,gBAAgB,EAAE,IAAI;KACvB;CACF,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/surfaces/registry.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAenD,MAAM,CAAC,MAAM,gBAAgB,GAA2C;IACtE,MAAM,EAAE;QACN,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC;QAClD,YAAY,EAAE,uBAAuB;QACrC,uBAAuB,EAAE,eAAe;QACxC,gBAAgB,EAAE,KAAK;KACxB;IACD,MAAM,EAAE;QACN,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,EAAE,EAAE,oDAAoD;QACpE,YAAY,EAAE,uBAAuB;QACrC,uBAAuB,EAAE,MAAM;QAC/B,gBAAgB,EAAE,KAAK;KACxB;IACD,OAAO,EAAE;QACP,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,EAAE,EAAE,oBAAoB;QACpC,YAAY,EAAE,iCAAiC;QAC/C,uBAAuB,EAAE,MAAM;QAC/B,gBAAgB,EAAE,KAAK;KACxB;IACD,KAAK,EAAE;QACL,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,EAAE;QACd,YAAY,EAAE,WAAW;QACzB,uBAAuB,EAAE,MAAM;QAC/B,gBAAgB,EAAE,IAAI;KACvB;CACF,CAAC;AAEF,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwC;IACnE,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,YAAY;CACpB,CAAC;AAEF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAqB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,cAAsB;IAEtB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAkB,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAC1E,IAAI,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,0DAA0D;AAC1D,gFAAgF;AAChF,6EAA6E;AAC7E,4DAA4D;AAC5D,+EAA+E;AAC/E,gFAAgF;AAChF,2EAA2E;AAC3E,4DAA4D;AAE5D,kFAAkF;AAClF,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAA6B,CAAC;AAExE,kFAAkF;AAClF,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAkC,CAAC;AAkB1E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAA8C,EAC9C,oBAA8B;IAE9B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClE,MAAM,kBAAkB,GAAkB,EAAE,CAAC;IAC7C,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAE1C,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1D,MAAM,UAAU,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChE,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,kBAAkB,CAAC,IAAI,CAAC,UAAyB,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,uDAAuD;IACvD,IAAI,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;IACzF,CAAC;IAED,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;AACtD,CAAC"}

package/dist/surfaces/telemetry.d.ts

@@ -0,0 +1,17 @@
+export interface ReverseMapMissingEvent {
+    surface: string;
+    projectionPath: string;
+}
+/**
+ * Stable, copy-paste-able fallback message used by tampered-bucket prompts when
+ * an adapter cannot reverse-map a projection path. Centralized so every consumer
+ * surfaces the exact same instruction string.
+ */
+export declare function getReverseMapFallbackMessage(): string;
+/**
+ * Report that an adapter returned null for canonicalPathFor.
+ * Always emits a telemetry event; also writes a tagged warning to stderr so
+ * developers see it during local handshake runs.
+ */
+export declare function reportReverseMapMissing(evt: ReverseMapMissingEvent, warn?: (msg: string) => void): void;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/surfaces/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/surfaces/telemetry.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAKD;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,sBAAsB,EAC3B,IAAI,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAgD,GACtE,IAAI,CAQN"}

package/dist/surfaces/telemetry.js

@@ -0,0 +1,31 @@
+/**
+ * Surface telemetry — WP-421 S2c.
+ *
+ * Tagged log + PostHog event for unmapped projection paths. When a SurfaceAdapter's
+ * canonicalPathFor returns null, the consumer falls back to a generic
+ * "edit upstream in .productbrain/{skills,rules,hooks}/" message and emits
+ * `surface-reverse-map-missing` for observability.
+ */
+import { trackEvent } from '../lib/telemetry.js';
+const FALLBACK_MESSAGE = 'edit upstream in .productbrain/skills|rules|hooks/';
+/**
+ * Stable, copy-paste-able fallback message used by tampered-bucket prompts when
+ * an adapter cannot reverse-map a projection path. Centralized so every consumer
+ * surfaces the exact same instruction string.
+ */
+export function getReverseMapFallbackMessage() {
+    return FALLBACK_MESSAGE;
+}
+/**
+ * Report that an adapter returned null for canonicalPathFor.
+ * Always emits a telemetry event; also writes a tagged warning to stderr so
+ * developers see it during local handshake runs.
+ */
+export function reportReverseMapMissing(evt, warn = (msg) => process.stderr.write(msg + '\n')) {
+    trackEvent('surface-reverse-map-missing', {
+        surface: evt.surface,
+        projectionPath: evt.projectionPath,
+    });
+    warn(`[surface-reverse-map-missing] ${evt.surface} cannot reverse-map ${evt.projectionPath} — ${FALLBACK_MESSAGE}`);
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/surfaces/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/surfaces/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAOjD,MAAM,gBAAgB,GACpB,oDAAoD,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAA2B,EAC3B,OAA8B,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC;IAEvE,UAAU,CAAC,6BAA6B,EAAE;QACxC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,cAAc,EAAE,GAAG,CAAC,cAAc;KACnC,CAAC,CAAC;IACH,IAAI,CACF,iCAAiC,GAAG,CAAC,OAAO,uBAAuB,GAAG,CAAC,cAAc,MAAM,gBAAgB,EAAE,CAC9G,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,20 +1,22 @@
 {
   "name": "@productbrain/cli",
-  "version": "0.1.0-beta.99",
+  "version": "0.1.0-beta.9900",
   "description": "Product Brain — Chain knowledge and write-back CLI",
   "type": "module",
   "bin": {
     "pb": "dist/index.js"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=20"
   },
   "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
+    "build": "tsc --incremental false",
+    "prepare": "tsc --incremental false",
+    "dev": "tsc --watch --incremental false",
     "typecheck": "tsc --noEmit",
     "lint": "tsc --noEmit",
     "test": "vitest run src/",
+    "codegen": "node scripts/generate-seed-commands.mjs && node scripts/generate-health-gap-kinds.mjs && node scripts/generate-kernel-value-sets.mjs && node ../../scripts/generate-route-latency-budget.mjs",
     "prepublishOnly": "npm run build",
     "publish:beta": "npm publish --tag=beta",
     "version:prerelease": "npm version prerelease --no-git-tag-version"
@@ -26,11 +28,13 @@
     "ink": "^7.0.0",
     "ink-text-input": "^6.0.0",
     "react": "^19.0.0",
-    "undici": "^7.24.5"
+    "undici": "^7.28.0"
   },
   "devDependencies": {
+    "@productbrain/kernel-client": "*",
     "@types/node": "^25.3.0",
     "@types/react": "^19.0.0",
+    "kernel": "*",
     "typescript": "^5.0.0",
     "vitest": "^4.0.18"
   },

package/dist/__tests__/audit.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=audit.test.d.ts.map

package/dist/__tests__/audit.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/audit.test.ts"],"names":[],"mappings":""}