@productbrain/cli 0.1.0-beta.1125 → 0.1.0-beta.11265

package/dist/commands/history.d.ts

@@ -0,0 +1,32 @@
+/**
+ * pb history — entryVersions read-back: one line per published version (version, when, who,
+ * acting role, change note) plus an "Accepted by <person> (<role>)" line. Closes the gap where a
+ * post-accept edit published an invisible version row with no CLI/MCP verb to see it. Reuses the
+ * EXISTING `chain.listEntryVersions` gateway route (already registered, `agentKnowledge/entries.ts`'s
+ * `listEntryVersions`) — no new route for this slice.
+ */
+interface EntryVersionRow {
+    version: number | undefined;
+    name: string;
+    changeNote: string | null;
+    publishedAt: number;
+    versionStatus: string;
+    displayName: string;
+    authorRole: string | null;
+    authorRoleArchived: boolean;
+}
+interface ListEntryVersionsResult {
+    acceptedBy: string | null;
+    acceptedByRole: string | null;
+    acceptedByRoleArchived: boolean;
+    /** TASK-915 (DEC-1973): the kernel's words when the accept was made covering an empty role, else null. */
+    acceptedCovering: string | null;
+    truncated: boolean;
+    versions: EntryVersionRow[];
+}
+export declare function runHistory(options: {
+    entryId: string;
+}): Promise<void>;
+export declare function formatHistory(entryId: string, result: ListEntryVersionsResult): string;
+export {};
+//# sourceMappingURL=history.d.ts.map

package/dist/commands/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../src/commands/history.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,UAAU,eAAe;IACvB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,UAAU,uBAAuB;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,EAAE,OAAO,CAAC;IAChC,0GAA0G;IAC1G,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB5E;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,GAAG,MAAM,CAkBtF"}

package/dist/commands/history.js

@@ -0,0 +1,55 @@
+/**
+ * pb history — entryVersions read-back: one line per published version (version, when, who,
+ * acting role, change note) plus an "Accepted by <person> (<role>)" line. Closes the gap where a
+ * post-accept edit published an invisible version row with no CLI/MCP verb to see it. Reuses the
+ * EXISTING `chain.listEntryVersions` gateway route (already registered, `agentKnowledge/entries.ts`'s
+ * `listEntryVersions`) — no new route for this slice.
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCall } from '../lib/client.js';
+import { runCliCommand } from '../lib/runner.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { acceptedByLine, versionRoleSuffix } from '../lib/ruleListRender.js';
+export async function runHistory(options) {
+    const config = await getConfigOrGuide(() => runHistory(options));
+    if (!config)
+        return;
+    await runCliCommand({
+        fn: async () => {
+            const result = await kernelCall('chain.listEntryVersions', {
+                entryId: options.entryId,
+            });
+            if (!result) {
+                throw new CLIError(`Entry '${options.entryId}' not found.`, {
+                    code: ErrorCode.NOT_FOUND,
+                    category: 'validation',
+                    guidance: 'Check the entry ID and try again. Use `pb search` to find entries.',
+                });
+            }
+            return result;
+        },
+        formatPretty: (result) => formatHistory(options.entryId, result),
+    });
+}
+export function formatHistory(entryId, result) {
+    const lines = [`# History for ${entryId} (${result.versions.length} published version${result.versions.length === 1 ? '' : 's'})`];
+    // TASK-915: the accept line and the role suffix are the kernel's words (ruleListRender), shared with Brain Chat.
+    if (result.acceptedBy)
+        lines.push(acceptedByLine({ ...result, acceptedBy: result.acceptedBy }));
+    if (result.versions.length === 0) {
+        lines.push('', 'No published versions yet.');
+        return lines.join('\n');
+    }
+    if (result.truncated)
+        lines.push(`(showing the most recent ${result.versions.length} versions — older history was truncated)`);
+    lines.push('');
+    for (const ver of result.versions) {
+        const vLabel = ver.version != null ? `v${ver.version}` : 'v?';
+        const when = new Date(ver.publishedAt).toISOString().split('T')[0];
+        const who = `${ver.displayName}${versionRoleSuffix(ver.authorRole, ver.authorRoleArchived)}`;
+        const note = ver.changeNote ? ` — ${ver.changeNote}` : '';
+        lines.push(`${vLabel}  ${when}  ${who}  [${ver.versionStatus}]${note}`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=history.js.map

package/dist/commands/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/commands/history.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAuB7E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA4B;IAC3D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAA0B;QAC3C,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,MAAM,GAAG,MAAM,UAAU,CAAiC,yBAAyB,EAAE;gBACzF,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,QAAQ,CAAC,UAAU,OAAO,CAAC,OAAO,cAAc,EAAE;oBAC1D,IAAI,EAAE,SAAS,CAAC,SAAS;oBACzB,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,oEAAoE;iBAC/E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;KACjE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAA+B;IAC5E,MAAM,KAAK,GAAa,CAAC,iBAAiB,OAAO,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAC7I,iHAAiH;IACjH,IAAI,MAAM,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,QAAQ,CAAC,MAAM,0CAA0C,CAAC,CAAC;IAC/H,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/commands/history.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=history.test.d.ts.map

package/dist/commands/history.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.test.d.ts","sourceRoot":"","sources":["../../src/commands/history.test.ts"],"names":[],"mappings":""}

package/dist/commands/history.test.js

@@ -0,0 +1,121 @@
+/**
+ * `pb history <entry-id>`.
+ *
+ * Reuses the existing `chain.listEntryVersions` gateway route (no new door): these tests assert
+ * the exact route/args crossing the wire, the not-found refusal, and the pretty-print shape —
+ * especially the "Accepted by <person> (<role>)" line and its "role archived or no longer
+ * resolvable" marker (INS-2585's reader contract for a since-archived/unresolvable accepting role).
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const { getConfigOrGuide, kernelCall, runCliCommand } = vi.hoisted(() => ({
+    getConfigOrGuide: vi.fn(),
+    kernelCall: vi.fn(),
+    runCliCommand: vi.fn(async ({ fn }) => fn()),
+}));
+vi.mock('../lib/config.js', () => ({ getConfigOrGuide }));
+vi.mock('../lib/client.js', () => ({ kernelCall }));
+vi.mock('../lib/runner.js', () => ({ runCliCommand }));
+import { runHistory, formatHistory } from './history.js';
+describe('pb history', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        getConfigOrGuide.mockResolvedValue({ apiKey: 'pb_sk_test', siteUrl: 'https://example.test' });
+    });
+    it('calls chain.listEntryVersions with the given entry id, no workspaceId (gateway-injected)', async () => {
+        kernelCall.mockResolvedValue({ acceptedBy: null, acceptedByRole: null, acceptedByRoleArchived: false, acceptedCovering: null, truncated: false, versions: [] });
+        await runHistory({ entryId: 'DEC-100' });
+        expect(kernelCall).toHaveBeenCalledWith('chain.listEntryVersions', { entryId: 'DEC-100' });
+    });
+    it('refuses with a clear message when the entry is not found', async () => {
+        kernelCall.mockResolvedValue(null);
+        await expect(runHistory({ entryId: 'DEC-999' })).rejects.toThrow(/not found/i);
+    });
+    it('formats "Accepted by <person> (<role>)" when both are set', () => {
+        const text = formatHistory('DEC-100', {
+            acceptedBy: 'Randy Hereman', acceptedByRole: 'Head of Product', acceptedByRoleArchived: false, acceptedCovering: null,
+            truncated: false, versions: [],
+        });
+        expect(text).toContain('Accepted by Randy Hereman (Head of Product)');
+        expect(text).not.toContain('role archived');
+    });
+    it('reads a covering accept as the kernel words it, "as Team Lead of <team> covering <role>" (TASK-915, DEC-1973)', () => {
+        const text = formatHistory('DEC-100', {
+            acceptedBy: 'Randy Hereman', acceptedByRole: 'Product Design', acceptedByRoleArchived: false,
+            acceptedCovering: 'as Team Lead of Product Brain covering Product Design', truncated: false, versions: [],
+        });
+        expect(text).toContain('Accepted by Randy Hereman, as Team Lead of Product Brain covering Product Design');
+        expect(text).not.toContain('(Product Design)');
+    });
+    it('keeps the archived marker on a covering accept whose role no longer reads (Codex PRRT_kwDORS4ils6sxScC)', () => {
+        const text = formatHistory('DEC-100', {
+            acceptedBy: 'Randy', acceptedByRole: 'Product Design', acceptedByRoleArchived: true,
+            acceptedCovering: 'as Team Lead of Product Brain covering Product Design', truncated: false, versions: [],
+        });
+        expect(text).toContain('Accepted by Randy, as Team Lead of Product Brain covering Product Design (role archived or no longer resolvable)');
+    });
+    it('marks the accepting role archived-or-unresolvable without hiding the person or the frozen role name', () => {
+        const text = formatHistory('DEC-100', {
+            acceptedBy: 'Randy Hereman', acceptedByRole: 'Head of Product', acceptedByRoleArchived: true, acceptedCovering: null,
+            truncated: false, versions: [],
+        });
+        expect(text).toContain('Accepted by Randy Hereman (Head of Product, role archived or no longer resolvable)');
+    });
+    it('shows the person alone, no role parens, when acceptedByRole is null (e.g. no organisational authority applied)', () => {
+        const text = formatHistory('DEC-100', {
+            acceptedBy: 'Randy Hereman', acceptedByRole: null, acceptedByRoleArchived: false, acceptedCovering: null,
+            truncated: false, versions: [],
+        });
+        const acceptedByLine = text.split('\n').find((line) => line.startsWith('Accepted by'));
+        expect(acceptedByLine).toBe('Accepted by Randy Hereman');
+    });
+    it('omits the Accepted-by line entirely when no accept event has ever been written', () => {
+        const text = formatHistory('DEC-100', { acceptedBy: null, acceptedByRole: null, acceptedByRoleArchived: false, acceptedCovering: null, truncated: false, versions: [] });
+        expect(text).not.toContain('Accepted by');
+    });
+    it('renders one line per version with the resolved display name, role, and change note', () => {
+        const text = formatHistory('DEC-100', {
+            acceptedBy: null, acceptedByRole: null, acceptedByRoleArchived: false, acceptedCovering: null, truncated: false,
+            versions: [
+                {
+                    version: 2, name: 'DEC-100', changeNote: 'tightened scope',
+                    publishedAt: Date.parse('2026-02-01T00:00:00Z'),
+                    versionStatus: 'published', displayName: 'Randy Hereman', authorRole: 'Head of Product', authorRoleArchived: false,
+                },
+                {
+                    version: 1, name: 'DEC-100', changeNote: null,
+                    publishedAt: Date.parse('2026-01-01T00:00:00Z'),
+                    versionStatus: 'superseded', displayName: 'Randy Hereman', authorRole: null, authorRoleArchived: false,
+                },
+            ],
+        });
+        expect(text).toContain('v2  2026-02-01  Randy Hereman (Head of Product)  [published] — tightened scope');
+        expect(text).toContain('v1  2026-01-01  Randy Hereman  [superseded]');
+    });
+    it('marks a per-version authorRoleArchived the same way as the entry-level marker', () => {
+        const text = formatHistory('DEC-100', {
+            acceptedBy: null, acceptedByRole: null, acceptedByRoleArchived: false, acceptedCovering: null, truncated: false,
+            versions: [{
+                    version: 1, name: 'DEC-100', changeNote: null,
+                    publishedAt: Date.parse('2026-01-01T00:00:00Z'),
+                    versionStatus: 'published', displayName: 'Randy Hereman', authorRole: 'Retired Role', authorRoleArchived: true,
+                }],
+        });
+        expect(text).toContain('Randy Hereman (Retired Role, role archived or no longer resolvable)');
+    });
+    it('surfaces truncation when the read was bounded', () => {
+        const text = formatHistory('DEC-100', {
+            acceptedBy: null, acceptedByRole: null, acceptedByRoleArchived: false, acceptedCovering: null, truncated: true,
+            versions: [{
+                    version: 1, name: 'DEC-100', changeNote: null,
+                    publishedAt: Date.parse('2026-01-01T00:00:00Z'),
+                    versionStatus: 'published', displayName: 'Randy Hereman', authorRole: null, authorRoleArchived: false,
+                }],
+        });
+        expect(text).toContain('truncated');
+    });
+    it('says so plainly when an entry has no published versions yet', () => {
+        const text = formatHistory('DEC-100', { acceptedBy: null, acceptedByRole: null, acceptedByRoleArchived: false, acceptedCovering: null, truncated: false, versions: [] });
+        expect(text).toContain('No published versions yet.');
+    });
+});
+//# sourceMappingURL=history.test.js.map

package/dist/commands/history.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.test.js","sourceRoot":"","sources":["../../src/commands/history.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxE,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAkC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;CAC7E,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAC1D,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AACpD,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEzD,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,UAAU,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAChK,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE;YACpC,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI;YACrH,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;SAC/B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+GAA+G,EAAE,GAAG,EAAE;QACvH,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE;YACpC,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,KAAK;YAC5F,gBAAgB,EAAE,uDAAuD,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;SAC1G,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kFAAkF,CAAC,CAAC;QAC3G,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yGAAyG,EAAE,GAAG,EAAE;QACjH,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE;YACpC,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,IAAI;YACnF,gBAAgB,EAAE,uDAAuD,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;SAC1G,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kHAAkH,CAAC,CAAC;IAC7I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qGAAqG,EAAE,GAAG,EAAE;QAC7G,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE;YACpC,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI;YACpH,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;SAC/B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oFAAoF,CAAC,CAAC;IAC/G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gHAAgH,EAAE,GAAG,EAAE;QACxH,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE;YACpC,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI;YACxG,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;SAC/B,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACzK,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE;YACpC,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;YAC/G,QAAQ,EAAE;gBACR;oBACE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB;oBAC1D,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBAC/C,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,KAAK;iBACnH;gBACD;oBACE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;oBAC7C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBAC/C,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK;iBACvG;aACF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gFAAgF,CAAC,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE;YACpC,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;YAC/G,QAAQ,EAAE,CAAC;oBACT,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;oBAC7C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBAC/C,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,IAAI;iBAC/G,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qEAAqE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE;YACpC,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;YAC9G,QAAQ,EAAE,CAAC;oBACT,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;oBAC7C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBAC/C,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK;iBACtG,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACzK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/init.d.ts

@@ -2,7 +2,7 @@
  * pb init — intelligent entry point that detects setup state and guides the user.
  *
  * WP-303 Slice 4 (Keystone): 4-state machine (fresh → has-key → has-workspace → ready).
- * Uses getConfig() for key check, kernelCall for workspace validation.
+ * Uses getConfigSafe() for key diagnosis, then probes workspace connectivity.
  */
 export type InitState = 'fresh' | 'has-key' | 'ready';
 /**

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAEtD;;;GAGG;AACH,wBAAgB,WAAW,IAAI,SAAS,CAevC;AAED,wBAAsB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAqF7C"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAEtD;;;GAGG;AACH,wBAAgB,WAAW,IAAI,SAAS,CAEvC;AAeD,wBAAsB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CA+F7C"}

package/dist/commands/init.js

@@ -2,9 +2,9 @@
  * pb init — intelligent entry point that detects setup state and guides the user.
  *
  * WP-303 Slice 4 (Keystone): 4-state machine (fresh → has-key → has-workspace → ready).
- * Uses getConfig() for key check, kernelCall for workspace validation.
+ * Uses getConfigSafe() for key diagnosis, then probes workspace connectivity.
  */
-import { getConfig } from '../lib/config.js';
+import { getConfigSafe } from '../lib/config.js';
 import { readSession } from '../lib/session.js';
 import { isJsonMode } from '../lib/runner.js';
 import { hint, heading, bold, dim, green, icons } from '../lib/style.js';
@@ -15,12 +15,11 @@ import { probeWorkspace } from '../lib/workspace-probe.js';
  * Sync check only — does not hit the network.
  */
 export function detectState() {
-    try {
-        getConfig(); // throws CLIError if no valid key
-    }
-    catch {
+    return detectStateFromConfig(getConfigSafe());
+}
+function detectStateFromConfig(configResult) {
+    if (!configResult.ok)
         return 'fresh';
-    }
     // Key is valid. Check if we have a local session (proxy for workspace connectivity).
     const session = readSession();
     if (session?.workspaceId) {
@@ -31,14 +30,17 @@ export function detectState() {
 }
 export async function runInit() {
     const json = isJsonMode();
-    const localState = detectState();
+    const configResult = getConfigSafe();
+    const localState = detectStateFromConfig(configResult);
     if (json) {
         // For JSON mode, try to enrich with network probe if we have a key
         if (localState === 'fresh') {
+            const failure = configResult.ok ? null : configResult;
             process.stdout.write(JSON.stringify({
                 state: 'fresh',
                 configured: false,
-                next: 'pb login',
+                ...(failure && failure.kind !== 'missing-key' ? { reason: failure.reason } : {}),
+                next: failure?.nextCommand ?? 'pb login',
             }) + '\n');
             return;
         }
@@ -51,19 +53,27 @@ export async function runInit() {
             workspace: workspace?.name ?? null,
             session: session ? { id: session.sessionId, startedAt: session.startedAt } : null,
             entryCount: workspace?.entryCount ?? null,
-            next: state === 'ready' ? 'pb orient -b' : 'pb setup',
+            next: state === 'ready' ? 'pb orient -b' : 'pb doctor',
         }) + '\n');
         return;
     }
     // Human mode
     if (localState === 'fresh') {
+        if (!configResult.ok && configResult.kind !== 'missing-key') {
+            process.stdout.write('\n');
+            process.stdout.write(`${bold('Product Brain')} — configuration needs attention\n\n`);
+            process.stdout.write(`  ${configResult.reason}\n\n`);
+            process.stdout.write(`${heading('Next step')}\n\n`);
+            hint(configResult.nextCommand);
+            process.stdout.write('\n');
+            return;
+        }
         process.stdout.write('\n');
         process.stdout.write(`${bold('Welcome to Product Brain!')}\n\n`);
         process.stdout.write(`  Let's get you connected.\n\n`);
         process.stdout.write(`${heading('Next steps')}\n\n`);
         hint('1. pb login       Save your API key');
-        hint('2. pb setup       Connect a workspace');
-        hint('3. pb orient -b   See what\'s happening');
+        hint('2. pb orient -b   See what\'s happening');
         process.stdout.write('\n');
         hint(`Get a key: Product Brain app ${dim(icons.arrow)} Settings ${dim(icons.arrow)} API Keys`);
         process.stdout.write('\n');
@@ -79,7 +89,6 @@ export async function runInit() {
         process.stdout.write(`  ${green(icons.pass)} API key configured\n`);
         process.stdout.write(`  ${dim('Could not reach workspace — check your connection.')}\n\n`);
         process.stdout.write(`${heading('Next steps')}\n\n`);
-        hint('pb setup     Connect a workspace');
         hint('pb doctor    Diagnose connection issues');
         process.stdout.write('\n');
         return;

package/dist/commands/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAI3D;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,SAAS,EAAE,CAAC,CAAC,kCAAkC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qFAAqF;IACrF,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qFAAqF;IACrF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC;IAEjC,IAAI,IAAI,EAAE,CAAC;QACT,mEAAmE;QACnE,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAClC,KAAK,EAAE,OAAO;gBACd,UAAU,EAAE,KAAK;gBACjB,IAAI,EAAE,UAAU;aACjB,CAAC,GAAG,IAAI,CAAC,CAAC;YACX,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,IAAI;YAClC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;YACjF,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,IAAI;YACzC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU;SACtD,CAAC,GAAG,IAAI,CAAC,CAAC;QACX,OAAO;IACT,CAAC;IAED,aAAa;IACb,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC5C,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC9C,IAAI,CAAC,yCAAyC,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,gCAAgC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAE9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,sDAAsD;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,oDAAoD,CAAC,MAAM,CAAC,CAAC;QAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACzC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,cAAc;IACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,OAAO,KAAK,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,yBAAyB,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC7C,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC3C,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAqB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAI3D;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,qBAAqB,CAAC,aAAa,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,YAA0B;IACvD,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAErC,qFAAqF;IACrF,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qFAAqF;IACrF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,aAAa,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAEvD,IAAI,IAAI,EAAE,CAAC;QACT,mEAAmE;QACnE,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAClC,KAAK,EAAE,OAAO;gBACd,UAAU,EAAE,KAAK;gBACjB,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,IAAI,EAAE,OAAO,EAAE,WAAW,IAAI,UAAU;aACzC,CAAC,GAAG,IAAI,CAAC,CAAC;YACX,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,IAAI;YAClC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;YACjF,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,IAAI;YACzC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW;SACvD,CAAC,GAAG,IAAI,CAAC,CAAC;QACX,OAAO;IACT,CAAC;IAED,aAAa;IACb,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,sCAAsC,CAAC,CAAC;YACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,MAAM,MAAM,CAAC,CAAC;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC5C,IAAI,CAAC,yCAAyC,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,gCAAgC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAE9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,sDAAsD;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,oDAAoD,CAAC,MAAM,CAAC,CAAC;QAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,yCAAyC,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,cAAc;IACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,OAAO,KAAK,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,yBAAyB,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC7C,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC3C,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/commands/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAuDH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAiE9C"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA0DH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAkE9C"}

package/dist/commands/login.js

@@ -6,23 +6,27 @@
  * (don't block offline users).
  */
 import { mkdirSync, writeFileSync } from 'fs';
-import { resolve } from 'path';
 import { HOME_CONFIG_DIR, HOME_ENV_PATH } from '../lib/config.js';
 import { DEFAULT_SITE_URL, resolveAppUrl } from '../lib/constants.js';
 import { API_KEY_PREFIX } from '../lib/tokenConstants.js';
 import { validateKey } from '../lib/client.js';
 import { password as promptPassword } from '../lib/prompts.js';
 import { CLIError, ErrorCode } from '../lib/errors.js';
-import { getActiveProfile, PROFILES_DIR } from '../lib/profiles.js';
+import { getActiveProfile, profilePath, PROFILES_DIR } from '../lib/profiles.js';
 const SIGNUP_URL = resolveAppUrl();
-function saveKey(apiKey, siteUrl) {
-    // If a named profile is active, write to that profile's file instead of the
-    // legacy HOME_ENV_PATH. This ensures `pb profile use <name> && pb login`
-    // writes to the correct location and `pb doctor` finds the key immediately.
+/**
+ * Where the key goes: the active profile's file when one is named, else the legacy
+ * HOME_ENV_PATH. This ensures `pb profile use <name> && pb login` writes to the correct
+ * location and `pb doctor` finds the key immediately. Resolved BEFORE the key prompt so a bad
+ * PB_PROFILE or active-profile name (`../x`) is refused before anything is read or written
+ * (TEN-4503: profilePath validates the name).
+ */
+function resolveLoginTarget() {
     const activeProfile = getActiveProfile();
-    let savePath;
+    return { activeProfile, savePath: activeProfile ? profilePath(activeProfile) : HOME_ENV_PATH };
+}
+function saveKey(apiKey, siteUrl, { activeProfile, savePath }) {
     if (activeProfile) {
-        savePath = resolve(PROFILES_DIR, `${activeProfile}.env`);
         const profileContent = [
             `# Product Brain CLI profile: ${activeProfile}`,
             `# Saved by "pb login"`,
@@ -35,7 +39,6 @@ function saveKey(apiKey, siteUrl) {
         writeFileSync(savePath, profileContent, { mode: 0o600 });
     }
     else {
-        savePath = HOME_ENV_PATH;
         const content = [
             `# Product Brain CLI — saved by "pb login"`,
             `# Edit or delete this file to change or remove your key.`,
@@ -52,6 +55,7 @@ function saveKey(apiKey, siteUrl) {
     return savePath;
 }
 export async function runLogin() {
+    const target = resolveLoginTarget();
     console.log('Product Brain — sign in with your API key');
     console.log(`  Get a key: ${SIGNUP_URL} → Settings → API Keys\n`);
     const apiKey = await promptPassword({
@@ -87,7 +91,7 @@ export async function runLogin() {
         const result = await validateKey(apiKey, siteUrl);
         if (result.valid) {
             process.stdout.write(' connected.\n\n');
-            const savedPath = saveKey(apiKey, siteUrl);
+            const savedPath = saveKey(apiKey, siteUrl, target);
             console.log(`Saved to ${savedPath}`);
             console.log('You can run pb from any directory now. Try: pb orient -b\n');
         }
@@ -108,7 +112,7 @@ export async function runLogin() {
         process.stdout.write(' could not reach server.\n\n');
         console.warn('Could not reach server — key saved but not verified.\n' +
             'Run `pb doctor` to check connectivity later.\n');
-        const savedPath = saveKey(apiKey, siteUrl);
+        const savedPath = saveKey(apiKey, siteUrl, target);
         console.log(`Saved to ${savedPath}`);
         console.log('You can run pb from any directory now. Try: pb orient -b\n');
     }

package/dist/commands/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpE,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;AAEnC,SAAS,OAAO,CAAC,MAAc,EAAE,OAAe;IAC9C,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,IAAI,QAAgB,CAAC;IAErB,IAAI,aAAa,EAAE,CAAC;QAClB,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,aAAa,MAAM,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG;YACrB,gCAAgC,aAAa,EAAE;YAC/C,uBAAuB;YACvB,EAAE;YACF,wBAAwB,MAAM,EAAE;YAChC,mBAAmB,OAAO,EAAE;YAC5B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,aAAa,CAAC;QACzB,MAAM,OAAO,GAAG;YACd,2CAA2C;YAC3C,0DAA0D;YAC1D,EAAE;YACF,wBAAwB,MAAM,EAAE;YAChC,mBAAmB,OAAO,EAAE;YAC5B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;IAEtC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,UAAU,0BAA0B,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,OAAO,EAAE,uBAAuB,cAAc,MAAM;QACpD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,IAAI,CAAC,CAAC;gBAAE,OAAO,iBAAiB,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;gBAAE,OAAO,uBAAuB,cAAc,kBAAkB,UAAU,yBAAyB,CAAC;YACrI,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;IAEH,oEAAoE;IACpE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE;YACpC,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,kBAAkB,UAAU,gDAAgD;SACvF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,QAAQ,CAAC,uBAAuB,cAAc,GAAG,EAAE;YAC3D,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,wBAAwB,UAAU,yBAAyB;SACtE,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAErF,gDAAgD;IAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACrC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,EAAE;gBACjD,IAAI,EAAE,SAAS,CAAC,YAAY;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,oBAAoB,UAAU,yBAAyB;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gFAAgF;QAChF,IAAI,GAAG,YAAY,QAAQ;YAAE,MAAM,GAAG,CAAC;QACvC,oEAAoE;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CACV,wDAAwD;YACxD,gDAAgD,CACjD,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEjF,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;AAEnC;;;;;;GAMG;AACH,SAAS,kBAAkB;IACzB,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAsD;IAC/H,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,cAAc,GAAG;YACrB,gCAAgC,aAAa,EAAE;YAC/C,uBAAuB;YACvB,EAAE;YACF,wBAAwB,MAAM,EAAE;YAChC,mBAAmB,OAAO,EAAE;YAC5B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG;YACd,2CAA2C;YAC3C,0DAA0D;YAC1D,EAAE;YACF,wBAAwB,MAAM,EAAE;YAChC,mBAAmB,OAAO,EAAE;YAC5B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;IAEtC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,UAAU,0BAA0B,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,OAAO,EAAE,uBAAuB,cAAc,MAAM;QACpD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,IAAI,CAAC,CAAC;gBAAE,OAAO,iBAAiB,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;gBAAE,OAAO,uBAAuB,cAAc,kBAAkB,UAAU,yBAAyB,CAAC;YACrI,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;IAEH,oEAAoE;IACpE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE;YACpC,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,kBAAkB,UAAU,gDAAgD;SACvF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,QAAQ,CAAC,uBAAuB,cAAc,GAAG,EAAE;YAC3D,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,wBAAwB,UAAU,yBAAyB;SACtE,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAErF,gDAAgD;IAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACrC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,EAAE;gBACjD,IAAI,EAAE,SAAS,CAAC,YAAY;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,oBAAoB,UAAU,yBAAyB;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gFAAgF;QAChF,IAAI,GAAG,YAAY,QAAQ;YAAE,MAAM,GAAG,CAAC;QACvC,oEAAoE;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CACV,wDAAwD;YACxD,gDAAgD,CACjD,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/dist/commands/organisation.d.ts

@@ -0,0 +1,12 @@
+/** Product Brain organisation setup and management (WP-505 update-only pilot). */
+import type { GatewayRouteReturnByName } from '@productbrain/kernel-client';
+import { Command } from 'commander';
+type OrganisationStatus = GatewayRouteReturnByName<'organisation.status'>;
+export declare function formatStatus(status: OrganisationStatus): string;
+export declare function runOrganisationStatus(): Promise<void>;
+export declare function runMembershipRemove(person: string, options: {
+    team: string;
+}): Promise<void>;
+export declare function createOrganisationCommand(): Command;
+export {};
+//# sourceMappingURL=organisation.d.ts.map

package/dist/commands/organisation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organisation.d.ts","sourceRoot":"","sources":["../../src/commands/organisation.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBpC,KAAK,kBAAkB,GAAG,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;AAkC1E,wBAAgB,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CA+C/D;AAoBD,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3D;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlG;AAWD,wBAAgB,yBAAyB,IAAI,OAAO,CA2BnD"}

package/dist/commands/organisation.js

@@ -0,0 +1,146 @@
+import { Command } from 'commander';
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCall, kernelCallWithSession } from '../lib/client.js';
+import { runCliCommand } from '../lib/runner.js';
+import { createOrganisationHierarchyCommand } from './organisationHierarchy.js';
+import { runOrganisationWrite } from './organisationWrite.js';
+// WP-512 review round 1 (PR #459, P2): rung-1 coverage was invisible on the status surface —
+// this workspace could upgrade and `status` would keep showing the pre-upgrade static list.
+const WORKING_RECORD_EFFECT_LABELS = {
+    content_update: 'editing role-owned working records',
+    publish: 'publishing role-owned working records',
+    unpublish: 'unpublishing role-owned working records',
+    move: 'moving role-owned working records between collections',
+    create: 'creating working records',
+    deprecate: 'deprecating working records',
+    supersede: 'superseding working records',
+    archive: 'archiving working records',
+    restore_archive_to_draft: 'restoring an archived working record to draft',
+    hard_delete: 'hard-deleting working records',
+};
+function effectLabels(effects) {
+    return effects.map((effect) => WORKING_RECORD_EFFECT_LABELS[effect] ?? effect);
+}
+function boundedCountLabel(count) {
+    if (count.exact)
+        return String(count.count ?? 0);
+    if (count.atLeast !== undefined)
+        return `at least ${count.atLeast} (safe limit ${count.ceiling})`;
+    return `at least ${count.observedAtLeast ?? 0} seen in the first ${count.scanCeiling} rows`;
+}
+export function formatStatus(status) {
+    const blockerLines = status.activationBlockers.length === 0
+        ? ['  - all activation checks passed']
+        : status.activationBlockers.map((blocker) => {
+            const identifiers = blocker.identifiers.length > 0
+                ? ` (${blocker.identifiers.join(', ')})`
+                : '';
+            return `  - ${blocker.message}${identifiers}`;
+        });
+    const lines = [
+        // TASK-713 (WP-829): the constant authority lines (always ON, one version, no warnings) are deleted.
+        // WP-751 M3a-2 (TASK-210, DEC-1700): the "Governance: {mode}" line is deleted — role
+        // is the only governance mode, so this line always read the same value.
+        // PR #921 review (chatgpt-codex-connector P2, "Update status guidance for always-on
+        // ownerless authority"): was "Structural setup ready to activate" — under DEC-1691 every
+        // workspace is already judged from creation and `organisation activate` always refuses
+        // 'already enabled', so there is no pending activation left to be "ready" for. The
+        // underlying `readyToActivate` field is unchanged (it still names real structural
+        // health — default team, Team Lead role, no duplicate memberships); only the label was
+        // narrating a step that can no longer happen.
+        `Structural health (no activation blockers): ${status.readyToActivate ? 'yes' : 'no'}`,
+        `Default team: ${status.defaultTeam ? `${status.defaultTeam.name} (${status.defaultTeam.id})` : 'missing'}`,
+        `Team Lead role: ${status.teamLeadRole ? `${status.teamLeadRole.name} (${status.teamLeadRole.id})` : 'missing'}`,
+        `Active default-team Leads: ${status.activeDefaultTeamLeadCount}`,
+        status.hierarchy.overLimit
+            ? `Team hierarchy: over the ${status.hierarchy.limit}-team/edge limit — use a smaller or partitioned structure`
+            : `Team hierarchy: ${status.hierarchy.teamCount} teams, ${status.hierarchy.edgeCount} edges — ${status.hierarchy.integrityValid ? 'valid' : `needs repair (${status.hierarchy.issueCount} issues)`}`,
+        `Your authority now: ${status.currentActor.managementDisposition} — ${status.currentActor.managementReason}`,
+        `Ownerless records: ${status.activationEffect}`,
+        '',
+        'Activation checks:',
+        ...blockerLines,
+        '',
+        'Rows safely checked:',
+        `  - Collection catalog: ${boundedCountLabel(status.activationCounts.collections)}`,
+        `  - Default-team memberships: ${boundedCountLabel(status.activationCounts.defaultTeamMemberships)}`,
+        `  - Ownership assignments: ${boundedCountLabel(status.activationCounts.ownerships)}`,
+        '',
+        'Controlled now:',
+        ...status.coveredNow.map((item) => `  - ${item}`),
+        // DEC-1691: role authority is always on, so this list is never suppressed any more.
+        ...effectLabels(status.coveredEffects).map((item) => `  - ${item}`),
+        '',
+        'Not controlled yet:',
+        ...status.notCoveredYet.map((item) => `  - ${item}`),
+    ];
+    return lines.join('\n');
+}
+function formatApplied(result) {
+    if (result.outcome !== 'applied')
+        return result.refusal.reason;
+    switch (result.operation) {
+        case 'membership.remove':
+            return result.removed
+                ? `Removed ${String(result.person)} from ${String(result.team)}.`
+                : `${String(result.person)} was not assigned to ${String(result.team)}; nothing changed.`;
+        // WP-753 O5 (DEC-1710): 'ownership.assign'/'ownership.clear' cases deleted — this file no
+        // longer calls setOwnership/clearOwnership (see entryOwn.ts's own small formatter).
+        // WP-751 M2a (TASK-189, DEC-1700): organisation.activate/upgrade/upgradeRung2-4 deleted —
+        // role authority is always on from workspace creation (DEC-1691), no activation step exists.
+        // WP-751 M3a-2 (TASK-210, DEC-1700): the 'organisation.mode' case (governance-mode change
+        // confirmation) is deleted with runOrganisationMode below — role is the only mode.
+        default:
+            return 'Organisation change applied.';
+    }
+}
+export async function runOrganisationStatus() {
+    const config = await getConfigOrGuide(runOrganisationStatus);
+    if (!config)
+        return;
+    await runCliCommand({
+        fn: () => kernelCall('organisation.status'),
+        formatPretty: formatStatus,
+    });
+}
+export async function runMembershipRemove(person, options) {
+    const config = await getConfigOrGuide(() => runMembershipRemove(person, options));
+    if (!config)
+        return;
+    await runOrganisationWrite((context) => kernelCallWithSession('organisation.removeMembership', {
+        targetPersonRef: person,
+        teamRef: options.team,
+        sessionId: context.sessionId,
+    }), formatApplied);
+}
+// WP-753 O5 (DEC-1710, TASK-201): `runWorkOwn`/`runWorkUnown` and the `pb organisation work
+// own/unown` subcommand group are deleted whole — "the noun owns its verb": ownership
+// assignment moves to `pb entry own` (packages/cli/src/commands/entryOwn.ts), the SAME
+// `organisation.setOwnership` door, no second authority model. `unown` has no successor: an
+// entry is never unowned (an empty seat resolves to the nearest Team Lead), so a verb that
+// produced an unowned entry contradicted the invariant — `organisation.clearOwnership` and its
+// `clearEntryOwnership` primitive are deleted with it (convex/governance/organisation.ts,
+// organisationResources.ts), confirmed orphaned (their only caller was this CLI verb).
+export function createOrganisationCommand() {
+    const command = new Command('organisation')
+        .alias('organization')
+        .description('Set up and manage the update-only team-and-role authority pilot');
+    command.command('status')
+        .description('Show what organisation authority controls, what remains open, and activation readiness')
+        .action(runOrganisationStatus);
+    command.addCommand(createOrganisationHierarchyCommand());
+    // TASK-633 S3c (DEC-1954): seating is `pb role seat` / `pb role unseat`; `membership assign` is deleted.
+    const membership = command.command('membership').description('Take a person out of a team, every role they hold there with it (seat one role with pb role seat)');
+    membership.command('remove <person-id-or-email>')
+        .requiredOption('--team <team-id>', 'Existing Team entry ID')
+        .action(runMembershipRemove);
+    // WP-753 O5 (DEC-1710): `work own`/`work unown` deleted — see the deletion comment above.
+    // WP-751 M2a (TASK-189, DEC-1700): activate/upgrade/upgrade-rung-2/3/4 deleted — role
+    // authority is always on from workspace creation (DEC-1691), no activation step exists.
+    // WP-751 M3a-2 (TASK-210, DEC-1700): the `mode <mode>` subcommand is deleted — role is the
+    // only governance mode, so there is nothing left to change it to.
+    // TASK-478: `repair-team-shape` deleted — canonicalKey alone is team identity (DEC-1826), so
+    // no legacy team is ever missing the data.team_type marker this door existed to repair.
+    return command;
+}
+//# sourceMappingURL=organisation.js.map