@productbrain/mcp 0.0.1-beta.2744 → 0.0.1-beta.2771

package/dist/{chunk-PU2BI5UU.js → chunk-VVC5Z5E5.js}

@@ -40,7 +40,7 @@ import {
   trackSessionCaptureRate,
   trackWriteBackHintServed,
   trackZeroCaptureAuditFired
-} from "./chunk-UCYQNZOC.js";
+} from "./chunk-6XYRKXER.js";
 
 // src/server.ts
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -8108,7 +8108,7 @@ var startPbSchema = z13.object({
   // capability that does not exist and would diverge start_pb from orient.
 });
 var PB_SETUP_SKILL_ENTRY_ID = "SKILL-pb-setup";
-var FEEDBACK_HINT = "Friction or ideas? Use `feedback action=submit` \u2014 describe how pb behaved, not your workspace content. Seconds, it reaches the builders.";
+var FEEDBACK_HINT = "Friction or ideas? Use `feedback action=submit` \u2014 describe how pb behaved, not your workspace content. Once screening completes, it enters the builders' triage queue.";
 async function tryMarkOriented(agentSessionId, coherenceSnapshot) {
   if (!agentSessionId) return { oriented: false, orientationStatus: "no_session" };
   try {
@@ -12395,9 +12395,9 @@ async function handleStart2() {
   );
   if (result2.feedbackQueueNew && result2.feedbackQueueNew > 0) {
     const ageDays = result2.feedbackOldestNewAt ? Math.max(0, Math.floor((Date.now() - result2.feedbackOldestNewAt) / 864e5)) : null;
-    lines.push(`Feedback queue: ${result2.feedbackQueueNew} new (oldest ${ageDays === null ? "unknown" : `${ageDays}d`}) \u2014 feedback action=list`);
+    lines.push(`Feedback queue: ${result2.feedbackQueueNew} new (oldest ${ageDays === null ? "unknown" : `${ageDays}d`}) \u2014 feedback action=queue`);
   }
-  lines.push("Friction or ideas? Use `feedback action=submit` \u2014 describe how pb behaved, not your workspace content. Seconds, it reaches the builders.");
+  lines.push("Friction or ideas? Use `feedback action=submit` \u2014 describe how pb behaved, not your workspace content. Once screening completes, it enters the builders' triage queue.");
   const summary = `Session ${result2.sessionId} active. Workspace ${result2.workspaceName}. Write tools available after orient.`;
   return {
     content: [{ type: "text", text: lines.join("\n") }],
@@ -14495,12 +14495,16 @@ import { z as z27 } from "zod/v3";
 
 // src/lib/productFeedbackConstants.ts
 var PRODUCT_FEEDBACK_CATEGORIES = ["bug", "friction", "idea", "praise", "other"];
-var PRODUCT_FEEDBACK_STATUSES = ["new", "triaged", "planned", "resolved", "dismissed"];
+var PRODUCT_FEEDBACK_STATUSES = ["new", "triaged", "planned", "resolved", "dismissed", "screening"];
+var VENDOR_SETTABLE_STATUSES = PRODUCT_FEEDBACK_STATUSES.filter(
+  (status2) => status2 !== "screening"
+);
 
 // src/tools/feedback.ts
-var actions = ["submit", "list", "note", "group", "status"];
+var actions = ["submit", "list", "queue", "note", "group", "status"];
 var category = z27.enum(PRODUCT_FEEDBACK_CATEGORIES);
 var status = z27.enum(PRODUCT_FEEDBACK_STATUSES);
+var vendorStatus = z27.enum(VENDOR_SETTABLE_STATUSES);
 var GATEWAY_MAX_STRING_BYTES = 10240;
 var utf8Bytes = (value) => new TextEncoder().encode(value).length;
 var fitsGatewayBytes = (value) => utf8Bytes(value) <= GATEWAY_MAX_STRING_BYTES;
@@ -14510,37 +14514,40 @@ var byteLimitMessage = (field) => ({
 var MESSAGE_DISPLAY_LIMIT = 1e3;
 var FULL_MESSAGE_MAX_LIMIT = 5;
 var feedbackSchema = z27.object({
-  action: z27.enum(actions).describe("submit requires message; list accepts filters; note requires feedbackId+note; group requires feedbackIds+groupId (null clears); status requires feedbackId+status."),
+  action: z27.enum(actions).describe("submit requires message; list returns your own workspace's feedback (all statuses); queue is the vendor triage queue (system admins only) and accepts filters; note requires feedbackId+note; group requires feedbackIds+groupId (null clears); status requires feedbackId+status."),
   message: z27.string().max(1e4).optional().describe("Required for submit: the product feedback text (max 10,000 chars and 10,240 UTF-8 bytes)."),
-  category: category.optional().describe("Submit/list category; submit defaults to other."),
+  category: category.optional().describe("Submit/queue category; submit defaults to other."),
   command: z27.string().max(1e3).optional().describe("Optional submit command context; argument values are scrubbed server-side."),
   route: z27.string().max(500).optional().describe("Optional submit route context."),
   client: z27.string().max(100).optional().describe("Optional submit client label."),
   feedbackId: z27.string().max(200).optional().describe("Required for note/status: target feedback ID."),
   feedbackIds: z27.array(z27.string().max(200)).max(100).optional().describe("Required for group: 1\u2013100 target feedback IDs."),
   note: z27.string().max(4e3).optional().describe("Required for note: replacement triage note (max 10,240 UTF-8 bytes)."),
-  status: status.optional().describe("List filter or required status action value."),
-  groupId: z27.string().max(200).nullable().optional().describe("Group filter, or required group destination; null explicitly clears grouping."),
-  workspaceId: z27.string().max(200).optional().describe("Vendor-only list filter; omitted means all workspaces."),
-  since: z27.number().optional().describe("Vendor list lower createdAt window bound (inclusive) in epoch milliseconds."),
-  before: z27.number().optional().describe("Vendor list upper createdAt window bound (exclusive) in epoch milliseconds. A time-window FILTER, not the pager \u2014 use cursor to page."),
-  limit: z27.number().int().min(1).max(100).optional().describe("Vendor list row limit, default 50, maximum 100."),
-  cursor: z27.string().max(2e3).optional().describe("Opaque pagination cursor from a previous list response (continueCursor); omit for the first page."),
-  full: z27.boolean().optional().describe(`List only: return untruncated messages; allowed only when limit <= ${FULL_MESSAGE_MAX_LIMIT}.`)
+  status: status.optional().describe("list/queue filter (any status, including 'screening'); the status action's required target value excludes 'screening' (system-only)."),
+  groupId: z27.string().min(1).max(200).nullable().optional().describe("Group filter, or required group destination; null explicitly clears grouping."),
+  workspaceId: z27.string().max(200).optional().describe("Queue-only filter (vendor cross-workspace triage); omitted means all workspaces. Has no effect on list \u2014 your own workspace is always injected server-side."),
+  since: z27.number().optional().describe("Queue-only lower createdAt window bound (inclusive) in epoch milliseconds."),
+  before: z27.number().optional().describe("Queue-only upper createdAt window bound (exclusive) in epoch milliseconds. A time-window FILTER, not the pager \u2014 use cursor to page."),
+  limit: z27.number().int().min(1).max(100).optional().describe("list/queue row limit, default 50, maximum 100."),
+  cursor: z27.string().max(2e3).optional().describe("Opaque pagination cursor from a previous list/queue response (continueCursor); omit for the first page."),
+  full: z27.boolean().optional().describe(`list/queue only: return untruncated messages; allowed only when limit <= ${FULL_MESSAGE_MAX_LIMIT}.`)
 });
 var union = z27.discriminatedUnion("action", [
   z27.object({ action: z27.literal("submit"), message: z27.string().min(1).max(1e4).refine(fitsGatewayBytes, byteLimitMessage("message")), category: category.optional(), command: z27.string().max(1e3).optional(), route: z27.string().max(500).optional(), client: z27.string().max(100).optional() }),
-  z27.object({ action: z27.literal("list"), status: status.optional(), category: category.optional(), groupId: z27.string().max(200).optional(), workspaceId: z27.string().max(200).optional(), since: z27.number().optional(), before: z27.number().optional(), limit: z27.number().int().min(1).max(100).optional(), cursor: z27.string().max(2e3).optional(), full: z27.boolean().optional() }),
+  z27.object({ action: z27.literal("list"), status: status.optional(), limit: z27.number().int().min(1).max(100).optional(), cursor: z27.string().max(2e3).optional(), full: z27.boolean().optional() }),
+  z27.object({ action: z27.literal("queue"), status: status.optional(), category: category.optional(), groupId: z27.string().min(1).max(200).optional(), workspaceId: z27.string().max(200).optional(), since: z27.number().optional(), before: z27.number().optional(), limit: z27.number().int().min(1).max(100).optional(), cursor: z27.string().max(2e3).optional(), full: z27.boolean().optional() }),
   z27.object({ action: z27.literal("note"), feedbackId: z27.string().min(1).max(200), note: z27.string().max(4e3).refine(fitsGatewayBytes, byteLimitMessage("note")) }),
-  z27.object({ action: z27.literal("group"), feedbackIds: z27.array(z27.string().min(1).max(200)).min(1).max(100), groupId: z27.string().max(200).nullable() }),
-  z27.object({ action: z27.literal("status"), feedbackId: z27.string().min(1).max(200), status })
+  z27.object({ action: z27.literal("group"), feedbackIds: z27.array(z27.string().min(1).max(200)).min(1).max(100), groupId: z27.string().min(1).max(200).nullable() }),
+  z27.object({ action: z27.literal("status"), feedbackId: z27.string().min(1).max(200), status: vendorStatus })
 ]);
 var specs = {
   submit: { params: ["message", "category", "command", "route", "client"], description: "message is required; category defaults to other." },
-  list: { params: ["status", "category", "groupId", "workspaceId", "since", "before", "limit", "cursor", "full"], description: "Vendor queue filters are optional; status defaults to new; cursor pages, full lifts message truncation for limit <= 5." },
+  // Own-workspace read-back (spec: WP-494 §5) — the member default; vendor queue is the `queue` action.
+  list: { params: ["status", "limit", "cursor", "full"], description: "Your workspace's own feedback \u2014 all statuses by default (including screening); cursor pages, full lifts message truncation for limit <= 5. No vendor gate." },
+  queue: { params: ["status", "category", "groupId", "workspaceId", "since", "before", "limit", "cursor", "full"], description: "Vendor cross-workspace triage queue (system admins only); filters are optional, status defaults to new; cursor pages, full lifts message truncation for limit <= 5." },
   note: { params: ["feedbackId", "note"], description: "feedbackId and note are required." },
   group: { params: ["feedbackIds", "groupId"], description: "feedbackIds and groupId are required; null clears a group." },
-  status: { params: ["feedbackId", "status"], description: "feedbackId and status are required." }
+  status: { params: ["feedbackId", "status"], description: "feedbackId and status are required; status cannot be set to 'screening' (system-only)." }
 };
 function result(action, data) {
   const summary = action === "submit" ? "Feedback submitted." : `Feedback ${action} complete.`;
@@ -14612,17 +14619,34 @@ function registerFeedbackTool(server) {
         context: { command: data.command, route: data.route, client: data.client ?? "mcp" }
       }));
     },
+    // WP-494 §5 (TEN-2742): own-workspace read-back — the default verb. NO vendor/triage
+    // gate: it's a member query (`feedback.listOwn`), a read-scoped key passes, and the
+    // gateway force-injects the caller's own workspaceId regardless of anything sent here.
     list: async ({ action: _action, full, cursor, ...data }) => {
+      const wantFull = full === true;
+      if (wantFull && (data.limit ?? 50) > FULL_MESSAGE_MAX_LIMIT) {
+        throw new Error(`full=true returns untruncated messages and is only allowed with limit <= ${FULL_MESSAGE_MAX_LIMIT}; re-fetch the target rows with a smaller limit (page with cursor).`);
+      }
+      const page = normalizeListPage(await kernelCall("feedback.listOwn", {
+        ...data,
+        cursor: cursor ?? null
+      }));
+      return result("list", { ...page, items: truncateListItems(page.items, wantFull) });
+    },
+    // WP-494 §5: the vendor cross-workspace triage queue — takes over `list`'s old
+    // behavior verbatim, including the triage-session gate and every existing filter.
+    queue: async ({ action: _action, full, cursor, groupId, ...data }) => {
       const wantFull = full === true;
       if (wantFull && (data.limit ?? 50) > FULL_MESSAGE_MAX_LIMIT) {
         throw new Error(`full=true returns untruncated messages and is only allowed with limit <= ${FULL_MESSAGE_MAX_LIMIT}; re-fetch the target rows with a smaller limit (page with cursor).`);
       }
       const page = normalizeListPage(await kernelCall("feedback.list", {
         ...data,
+        ...groupId !== void 0 ? { groupId } : {},
         cursor: cursor ?? null,
         sessionId: requireTriageSessionId()
       }));
-      return result("list", { ...page, items: truncateListItems(page.items, wantFull) });
+      return result("queue", { ...page, items: truncateListItems(page.items, wantFull) });
     },
     note: async ({ action: _action, ...data }) => result("note", await kernelCall("feedback.note", { ...data, sessionId: requireTriageSessionId() })),
     group: async ({ action: _action, ...data }) => groupResult(await kernelCall("feedback.group", { ...data, sessionId: requireTriageSessionId() })),
@@ -14630,7 +14654,7 @@ function registerFeedbackTool(server) {
   };
   server.registerTool("feedback", {
     title: "Feedback \u2014 Submit & Triage",
-    description: "Submit Product Brain feedback from any agent, including with a read-only key and no session. Vendor operators can also list, note, group, and change queue status.",
+    description: "Submit Product Brain feedback from any agent, including with a read-only key and no session. list reads back your own workspace's feedback (all statuses, no gate). Vendor operators can also queue (triage), note, group, and change queue status.",
     inputSchema: feedbackSchema,
     annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: false }
   }, thinWrapper(async (args) => {
@@ -14645,6 +14669,53 @@ import { existsSync as existsSync3 } from "fs";
 import { dirname, join, resolve as resolve4 } from "path";
 import { fileURLToPath } from "url";
 import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+
+// src/resources/agentCheatsheet.ts
+var AGENT_CHEATSHEET = `# Product Brain \u2014 Agent Cheatsheet
+
+## Core Tools (Serves 11 default compound tools; 3 more (chain, chain-review, map) behind PB_MODULES=gitchain)
+| Tool | Purpose | Key params |
+|---|---|---|
+| \`orient\` | Workspace context, governance, active bets, session start | \`action\`: start, task, record-activation |
+| \`capture\` | Create entry (draft), single or batch | \`collection\`, \`name\`, \`description\`, optional \`data\` / \`items[]\` |
+| \`entries\` | List / get / batch / search / update / commit / history / move / verify | \`action\` + \`entryId\` / \`query\` / \`collection\` |
+| \`relations\` | Create / batch-create / dismiss / delete / find / suggest links | \`action\` + \`from\`, \`to\`, \`type\` or \`entryId\` |
+| \`context\` | Gather related knowledge, last-verified brief | \`action\` + \`entryId\` or \`task\` |
+| \`collections\` | List / create / update collections, manage labels | \`action\` |
+| \`quality\` | Score an entry, verify the Chain, audit a bet | \`action\`: check, re-evaluate, verify-chain, audit |
+| \`session\` | Start / close, wrapup, resume, constellation accept | \`action\`: start, close, status, wrapup-review, wrapup-commit, resume, commit-constellation |
+| \`workflows\` | Run workflows, checkpoint, load a skill | \`action\`: list, start, checkpoint, get-run, load-skill |
+| \`workspace\` | Check / whoami / status / self-test, usage, governance proposals | \`action\`: check, whoami, status, audit, self-test, usage, proposals-* |
+| \`feedback\` | Submit product feedback (any key, no session required); \`list\` reads back your own workspace's feedback (no gate); vendor triage: queue / note / group / status | \`action\`: submit, list, queue, note, group, status |
+
+## Collection Prefixes
+GLO (glossary), BR (business-rules), PRI (principles), STD (standards),
+DEC (decisions), STR (strategy), TEN (tensions), FEAT (features),
+BET (bets), INS (insights), ARCH (architecture), TEAM (teams),
+ROL (roles), MAP (maps), MTRC (tracking-events), ST (semantic-types)
+
+## Valid Relation Types (21)
+informs, governs, surfaces_tension_in, defines_term_for, belongs_to,
+references, related_to, fills_slot, commits_to, informed_by, depends_on,
+conflicts_with, confused_with, replaces, part_of, constrains,
+governed_by, alternative_to, has_proposal, requests_promotion_of, resolves
+
+## Lifecycle Status
+All entries: \`draft\` | \`active\` | \`deprecated\` | \`archived\`
+
+## Workflow Status (per collection)
+- **tensions:** open \u2192 processing \u2192 decided \u2192 closed
+- **decisions:** pending \u2192 decided
+- **bets:** shaped \u2192 bet \u2192 building \u2192 shipped
+- **business-rules:** active | conflict | review
+
+## Key Patterns
+- **Capture flow:** \`capture\` \u2192 \`relations action=suggest\` \u2192 \`relations action=batch-create\` \u2192 \`entries action=commit\`
+- Use \`workflowStatus\` (not \`status\`) for domain workflow state
+- \`data\` param is merged (not replaced) \u2014 safe for partial updates
+`;
+
+// src/resources/index.ts
 var MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 var UI_VIEW_BASE_CANDIDATES = [
   resolve4(MODULE_DIR, "views"),
@@ -14747,49 +14818,6 @@ Browse: \`entries action=list collection=tracking-events\`.`
   );
   return sections.join("\n\n---\n\n");
 }
-var AGENT_CHEATSHEET = `# Product Brain \u2014 Agent Cheatsheet
-
-## Core Tools (Serves 11 default compound tools; 3 more (chain, chain-review, map) behind PB_MODULES=gitchain)
-| Tool | Purpose | Key params |
-|---|---|---|
-| \`orient\` | Workspace context, governance, active bets, session start | \`action\`: start, task, record-activation |
-| \`capture\` | Create entry (draft), single or batch | \`collection\`, \`name\`, \`description\`, optional \`data\` / \`items[]\` |
-| \`entries\` | List / get / batch / search / update / commit / history / move / verify | \`action\` + \`entryId\` / \`query\` / \`collection\` |
-| \`relations\` | Create / batch-create / dismiss / delete / find / suggest links | \`action\` + \`from\`, \`to\`, \`type\` or \`entryId\` |
-| \`context\` | Gather related knowledge, last-verified brief | \`action\` + \`entryId\` or \`task\` |
-| \`collections\` | List / create / update collections, manage labels | \`action\` |
-| \`quality\` | Score an entry, verify the Chain, audit a bet | \`action\`: check, re-evaluate, verify-chain, audit |
-| \`session\` | Start / close, wrapup, resume, constellation accept | \`action\`: start, close, status, wrapup-review, wrapup-commit, resume, commit-constellation |
-| \`workflows\` | Run workflows, checkpoint, load a skill | \`action\`: list, start, checkpoint, get-run, load-skill |
-| \`workspace\` | Check / whoami / status / self-test, usage, governance proposals | \`action\`: check, whoami, status, audit, self-test, usage, proposals-* |
-| \`feedback\` | Submit product feedback (any key, no session required); vendor triage: list / note / group / status | \`action\`: submit, list, note, group, status |
-
-## Collection Prefixes
-GLO (glossary), BR (business-rules), PRI (principles), STD (standards),
-DEC (decisions), STR (strategy), TEN (tensions), FEAT (features),
-BET (bets), INS (insights), ARCH (architecture), TEAM (teams),
-ROL (roles), MAP (maps), MTRC (tracking-events), ST (semantic-types)
-
-## Valid Relation Types (21)
-informs, governs, surfaces_tension_in, defines_term_for, belongs_to,
-references, related_to, fills_slot, commits_to, informed_by, depends_on,
-conflicts_with, confused_with, replaces, part_of, constrains,
-governed_by, alternative_to, has_proposal, requests_promotion_of, resolves
-
-## Lifecycle Status
-All entries: \`draft\` | \`active\` | \`deprecated\` | \`archived\`
-
-## Workflow Status (per collection)
-- **tensions:** open \u2192 processing \u2192 decided \u2192 closed
-- **decisions:** pending \u2192 decided
-- **bets:** shaped \u2192 bet \u2192 building \u2192 shipped
-- **business-rules:** active | conflict | review
-
-## Key Patterns
-- **Capture flow:** \`capture\` \u2192 \`relations action=suggest\` \u2192 \`relations action=batch-create\` \u2192 \`entries action=commit\`
-- Use \`workflowStatus\` (not \`status\`) for domain workflow state
-- \`data\` param is merged (not replaced) \u2014 safe for partial updates
-`;
 function registerResources(server) {
   server.resource(
     "agent-cheatsheet",
@@ -15564,4 +15592,4 @@ export {
   createProductBrainServer,
   initFeatureFlags
 };
-//# sourceMappingURL=chunk-PU2BI5UU.js.map
+//# sourceMappingURL=chunk-VVC5Z5E5.js.map