@productbrain/cli 0.1.0-beta.14 → 0.1.0-beta.14010

package/dist/commands/admin/inspect.test.js

@@ -0,0 +1,90 @@
+/**
+ * Tests for pb admin inspect helpers — resolveWorkspaceArg / requireWorkspaceArg (WP-312 S4, FEAT-971).
+ *
+ * Updated for WP-314 S3: both helpers are now async (slug resolution support).
+ */
+import { describe, it, expect, vi } from 'vitest';
+import { readSession } from '../../lib/session.js';
+import { resolveWorkspaceArg, requireWorkspaceArg, resolveUserArg } from './inspect.js';
+// Mock session so we can control it per test
+vi.mock('../../lib/session.js', () => ({
+    readSession: vi.fn(() => null),
+}));
+// Mock adminCall to avoid real network calls in the slug-resolution path
+vi.mock('../../lib/client.js', () => ({
+    adminCall: vi.fn(async () => null),
+}));
+describe('resolveWorkspaceArg', () => {
+    it('returns explicit raw Convex ID as-is (no resolution needed)', async () => {
+        // 26-char alphanum — looks like a Convex ID
+        const rawId = 'k573abc1234567890abcdefgh';
+        expect(await resolveWorkspaceArg(rawId)).toBe(rawId);
+    });
+    it('returns undefined when no explicit id and session mocked null', async () => {
+        expect(await resolveWorkspaceArg()).toBeUndefined();
+        expect(await resolveWorkspaceArg(undefined)).toBeUndefined();
+    });
+});
+describe('requireWorkspaceArg', () => {
+    it('returns explicit raw Convex ID when provided', async () => {
+        const rawId = 'k573abc1234567890abcdefgh';
+        expect(await requireWorkspaceArg(rawId)).toBe(rawId);
+    });
+    it('throws when missing and no session', async () => {
+        await expect(requireWorkspaceArg()).rejects.toThrow(/Workspace id required/);
+        await expect(requireWorkspaceArg(undefined)).rejects.toThrow(/Workspace id required/);
+    });
+});
+describe('resolveWorkspaceArg with session', () => {
+    it('falls back to session workspaceId', async () => {
+        vi.mocked(readSession).mockReturnValueOnce({
+            sessionId: 's1',
+            workspaceId: 'ws-from-session',
+            workspaceName: 'Test',
+            startedAt: '',
+            entriesCaptured: [],
+        });
+        expect(await resolveWorkspaceArg()).toBe('ws-from-session');
+    });
+});
+describe('resolveWorkspaceArg slug resolution', () => {
+    it('calls adminCall for slug-like values and returns resolved _id', async () => {
+        const { adminCall } = await import('../../lib/client.js');
+        vi.mocked(adminCall).mockResolvedValueOnce({ _id: 'resolved-ws-id', name: 'Test', slug: 'my-workspace', found: true });
+        const result = await resolveWorkspaceArg('my-workspace');
+        expect(result).toBe('resolved-ws-id');
+        expect(adminCall).toHaveBeenCalledWith('inspect:resolve-workspace', { slugOrId: 'my-workspace' });
+    });
+    it('falls back to original value when slug resolution fails', async () => {
+        const { adminCall } = await import('../../lib/client.js');
+        vi.mocked(adminCall).mockRejectedValueOnce(new Error('network error'));
+        const result = await resolveWorkspaceArg('my-workspace');
+        expect(result).toBe('my-workspace');
+    });
+    it('falls back to original value when resolution returns null', async () => {
+        const { adminCall } = await import('../../lib/client.js');
+        vi.mocked(adminCall).mockResolvedValueOnce(null);
+        const result = await resolveWorkspaceArg('unknown-slug');
+        expect(result).toBe('unknown-slug');
+    });
+});
+describe('resolveUserArg', () => {
+    it('returns clerkUserId when user found', async () => {
+        const { adminCall } = await import('../../lib/client.js');
+        vi.mocked(adminCall).mockResolvedValueOnce({ clerkUserId: 'user_abc123', found: true });
+        const result = await resolveUserArg('user@example.com');
+        expect(result).toBe('user_abc123');
+        expect(adminCall).toHaveBeenCalledWith('inspect:resolve-user', { email: 'user@example.com' });
+    });
+    it('throws CLIError VALIDATION_FAILED when user not found (null result)', async () => {
+        const { adminCall } = await import('../../lib/client.js');
+        vi.mocked(adminCall).mockResolvedValueOnce(null);
+        await expect(resolveUserArg('notfound@example.com')).rejects.toThrow(/No user found for email/);
+    });
+    it('throws CLIError VALIDATION_FAILED when adminCall throws', async () => {
+        const { adminCall } = await import('../../lib/client.js');
+        vi.mocked(adminCall).mockRejectedValueOnce(new Error('network error'));
+        await expect(resolveUserArg('fail@example.com')).rejects.toThrow(/Could not resolve user/);
+    });
+});
+//# sourceMappingURL=inspect.test.js.map

package/dist/commands/admin/inspect.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.test.js","sourceRoot":"","sources":["../../../src/commands/admin/inspect.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAExF,6CAA6C;AAC7C,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;CAC/B,CAAC,CAAC,CAAC;AAEJ,yEAAyE;AACzE,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;CACnC,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,4CAA4C;QAC5C,MAAM,KAAK,GAAG,2BAA2B,CAAC;QAC1C,MAAM,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,CAAC,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,KAAK,GAAG,2BAA2B,CAAC;QAC1C,MAAM,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC7E,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC;YACzC,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,iBAAiB;YAC9B,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/admin/manage.d.ts

@@ -0,0 +1,8 @@
+/**
+ * pb admin manage — non-interactive destructive operations (WP-324 S2, E3, FEAT-1020).
+ *
+ * Governance: DEC-516, BR-210, BR-209, STD-192
+ */
+import { Command } from 'commander';
+export declare function attachManageCommands(admin: Command): void;
+//# sourceMappingURL=manage.d.ts.map

package/dist/commands/admin/manage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/manage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAgEzD"}

package/dist/commands/admin/manage.js

@@ -0,0 +1,53 @@
+import { adminCall } from '../../lib/client.js';
+import { resolveWorkspaceArg, resolveUserArg } from './inspect.js';
+import { isJsonMode } from '../../lib/runner.js';
+import { bold, red } from '../../lib/style.js';
+export function attachManageCommands(admin) {
+    const manage = admin
+        .command('manage')
+        .description('Dangerous operations: delete-workspace, delete-user');
+    // ── delete-workspace ────────────────────────────────────────────────────
+    // TASK-1172: a dry run only; the gateway refuses a real run for every key.
+    manage
+        .command('delete-workspace <slug>')
+        .description('Preview what deleting this workspace would remove. A person deletes it from Cortex.')
+        .action(async (slug) => {
+        const workspaceId = await resolveWorkspaceArg(slug);
+        if (!workspaceId) {
+            process.stderr.write(red(`Workspace not found: "${slug}"\n`));
+            process.exit(1);
+        }
+        const result = await adminCall('manage:delete-workspace', { workspaceId, dryRun: true });
+        if (isJsonMode()) {
+            process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+            return;
+        }
+        process.stdout.write(bold('Dry-run — ' + slug) + '\n');
+        for (const entry of result.deletionLog ?? []) {
+            if (entry.count > 0)
+                process.stdout.write(`  ${entry.table}: ${entry.count}\n`);
+        }
+    });
+    // ── delete-user ─────────────────────────────────────────────────────────
+    manage
+        .command('delete-user <email>')
+        .description('Preview what deleting this person would remove. A person deletes them from Cortex.')
+        .action(async (email) => {
+        const clerkUserId = await resolveUserArg(email);
+        const result = await adminCall('manage:delete-user', { clerkUserId, dryRun: true });
+        if (!result.success && result.reason === 'user_owns_workspace') {
+            process.stderr.write(red(`Cannot delete: user is the sole member of workspace ${result.workspaceId ?? ''}. Delete the workspace first. (BR-209)\n`));
+            process.exit(1);
+        }
+        if (isJsonMode()) {
+            process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+            return;
+        }
+        process.stdout.write(bold('Dry-run — ' + email) + '\n');
+        for (const entry of result.deletionLog ?? []) {
+            if (entry.count > 0)
+                process.stdout.write(`  ${entry.table}: ${entry.count}\n`);
+        }
+    });
+}
+//# sourceMappingURL=manage.js.map

package/dist/commands/admin/manage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage.js","sourceRoot":"","sources":["../../../src/commands/admin/manage.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,MAAM,GAAG,KAAK;SACjB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qDAAqD,CAAC,CAAC;IAEtE,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM;SACH,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,qFAAqF,CAAC;SAClG,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QAC7B,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,IAAI,KAAK,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,yBAAyB,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAKtF,CAAC;QAEF,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QAClF,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,2EAA2E;IAC3E,MAAM;SACH,OAAO,CAAC,qBAAqB,CAAC;SAC9B,WAAW,CAAC,oFAAoF,CAAC;SACjG,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC9B,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAOjF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,uDAAuD,MAAM,CAAC,WAAW,IAAI,EAAE,0CAA0C,CAAC,CAAC,CAAC;YACrJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QAClF,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/admin/manage.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=manage.test.d.ts.map

package/dist/commands/admin/manage.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage.test.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/manage.test.ts"],"names":[],"mappings":""}

package/dist/commands/admin/manage.test.js

@@ -0,0 +1,103 @@
+/**
+ * TASK-1172: `pb admin manage delete-workspace|delete-user` are dry runs only, and a real run sent through `pb admin run`
+ * prints the gateway's refusal as served. The real adminCall and the real global error handler run; only the config,
+ * the session and fetch are stubbed.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { Command } from 'commander';
+vi.mock('../../lib/adminConfig.js', () => ({
+    resolveAdminConfig: () => ({ apiKey: 'pb_sk_test', siteUrl: 'http://127.0.0.1:3210', source: 'env', profileName: null }),
+}));
+vi.mock('../../lib/session.js', () => ({ readSession: () => null, readSessionBySessionId: () => null }));
+vi.mock('./inspect.js', () => ({
+    resolveWorkspaceArg: async () => 'ws_invented',
+    resolveUserArg: async () => 'user_invented',
+}));
+import { attachManageCommands } from './manage.js';
+import { attachRunCommand } from './run.js';
+import { handleCliError } from '../../handleCliError.js';
+import { setOutputMode } from '../../lib/runner.js';
+const ROWS = [
+    {
+        argv: ['delete-workspace', 'acme'], command: 'manage:delete-workspace', sentence: 'Only a person deletes a workspace.\nAcme stays as it is.',
+        next: 'Randy Hereman: open https://work.example.com/admin/workspaces?workspace=acme and click Delete workspace.',
+    },
+    {
+        argv: ['delete-user', 'someone@example.com'], command: 'manage:delete-user', sentence: 'Only a person deletes a person.\nSome One keeps their access.',
+        next: 'Randy Hereman: open https://work.example.com/admin/users?email=someone%40example.com and click Delete person.',
+    },
+];
+/** Runs `pb admin <argv>` and returns what reached stderr, the global handler's line included. */
+async function runAdmin(argv) {
+    const admin = new Command();
+    admin.exitOverride();
+    admin.configureOutput({ outputError: () => { } });
+    attachManageCommands(admin);
+    attachRunCommand(admin);
+    for (const child of admin.commands)
+        child.exitOverride().configureOutput({ outputError: () => { } });
+    for (const child of admin.commands.flatMap((c) => c.commands))
+        child.exitOverride().configureOutput({ outputError: () => { } });
+    const stderr = [];
+    const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation((c) => { stderr.push(String(c)); return true; });
+    const stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+    const exitSpy = vi.spyOn(process, 'exit').mockImplementation(((code) => { throw new Error(`exit ${code}`); }));
+    try {
+        await admin.parseAsync(['node', 'pb', ...argv]).catch((err) => handleCliError(err));
+    }
+    catch (err) {
+        expect(String(err)).toContain('exit 1');
+    }
+    finally {
+        stderrSpy.mockRestore();
+        stdoutSpy.mockRestore();
+        exitSpy.mockRestore();
+    }
+    return stderr.join('');
+}
+const refusal = (row) => ({
+    ok: false, status: 403, statusText: 'Forbidden', json: async () => ({ ok: false, error: row.sentence, code: 'person_only', details: [{ requiredAction: row.next }] }),
+});
+let fetchSpy;
+beforeEach(() => {
+    fetchSpy = vi.fn();
+    vi.stubGlobal('fetch', fetchSpy);
+});
+afterEach(() => {
+    setOutputMode('auto');
+    vi.unstubAllGlobals();
+});
+describe('pb admin manage delete-* are dry runs only (TASK-1172)', () => {
+    for (const row of ROWS) {
+        it(`${row.argv[0]} sends dryRun true`, async () => {
+            setOutputMode('pretty');
+            fetchSpy.mockResolvedValue({ ok: true, status: 200, json: async () => ({ ok: true, data: { success: true, isDryRun: true, deletionLog: [] } }) });
+            await runAdmin(['manage', ...row.argv]);
+            expect(JSON.parse(fetchSpy.mock.calls[0][1].body)).toMatchObject({ command: row.command, args: { dryRun: true } });
+        });
+        it(`${row.argv[0]} has no --confirm`, async () => {
+            setOutputMode('pretty');
+            const stderr = await runAdmin(['manage', ...row.argv, '--confirm']);
+            expect(fetchSpy).not.toHaveBeenCalled();
+            expect(stderr).toContain('--confirm');
+        });
+    }
+});
+describe('pb admin run prints the person-only refusal as served (TASK-1172, TASK-1173)', () => {
+    for (const row of ROWS) {
+        it(`${row.command} with dryRun false prints the reason, then who opens which page`, async () => {
+            setOutputMode('pretty');
+            fetchSpy.mockResolvedValue(refusal(row));
+            const stderr = await runAdmin(['run', row.command, '{"dryRun":false}']);
+            expect(stderr).toContain(`${row.sentence}\n${row.next}\n`);
+        });
+        it(`${row.command} with dryRun false and --json prints the sentence and the code`, async () => {
+            setOutputMode('json');
+            fetchSpy.mockResolvedValue(refusal(row));
+            const stderr = await runAdmin(['run', row.command, '{"dryRun":false}']);
+            const line = stderr.split('\n').find((l) => l.startsWith('{"error"'));
+            expect(JSON.parse(line ?? '{}')).toMatchObject({ error: row.sentence, code: 'person_only', category: 'auth', guidance: row.next });
+        });
+    }
+});
+//# sourceMappingURL=manage.test.js.map

package/dist/commands/admin/manage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage.test.js","sourceRoot":"","sources":["../../../src/commands/admin/manage.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;CACzH,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACzG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAC,aAAa;IAC9C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe;CAC5C,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,IAAI,GAAG;IACX;QACE,IAAI,EAAE,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,0DAA0D;QAC5I,IAAI,EAAE,0GAA0G;KACjH;IACD;QACE,IAAI,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,+DAA+D;QACtJ,IAAI,EAAE,+GAA+G;KACtH;CACO,CAAC;AAEX,kGAAkG;AAClG,KAAK,UAAU,QAAQ,CAAC,IAAuB;IAC7C,MAAM,KAAK,GAAG,IAAI,OAAO,EAAE,CAAC;IAC5B,KAAK,CAAC,YAAY,EAAE,CAAC;IACrB,KAAK,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IACjD,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5B,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ;QAAE,KAAK,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IACpG,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IAC/H,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAU,CAAC,CAAC;IACjI,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,WAAW,EAAE,CAAC;QACxB,SAAS,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,GAA0B,EAAE,EAAE,CAAC,CAAC;IAC/C,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;CACtK,CAAC,CAAC;AAEH,IAAI,QAAkC,CAAC;AACvC,UAAU,CAAC,GAAG,EAAE;IACd,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACnB,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,aAAa,CAAC,MAAM,CAAC,CAAC;IACtB,EAAE,CAAC,gBAAgB,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAChD,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAElJ,MAAM,QAAQ,CAAC,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAExC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACrH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YAC/C,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YAEpE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8EAA8E,EAAE,GAAG,EAAE;IAC5F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,iEAAiE,EAAE,KAAK,IAAI,EAAE;YAC7F,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAEzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAExE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC5F,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAEzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YAEtE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACrI,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/admin/probe.d.ts

@@ -0,0 +1,75 @@
+/**
+ * pb admin probe <name> --env <env> — the S3 cross-environment read window CLI (WP-608,
+ * parent WP-604).
+ *
+ * `--env` names a profile (the CLI's existing environment-selection mechanism —
+ * `resolveNamedProfileConfig`, the same one `pb profile use` manages), NOT a fixed
+ * prod|dev|preview enum: this codebase has no such enum today, and inventing one here would be
+ * a second, drifting copy of the profile system. An operator names profiles per environment
+ * (e.g. `prod`, `dev`) via the existing profile commands; `--env <name>` resolves each one and
+ * hits that profile's siteUrl with that profile's apiKey.
+ *
+ * `--env prod --env dev` (repeatable) prints both side by side and diffs per scope handle —
+ * "did it run everywhere" was the exact question being asked on 2026-08-02.
+ */
+import { Command } from 'commander';
+export type ProbeEnvResult = {
+    env: string;
+    ok: boolean;
+    status?: number;
+    data?: unknown;
+    error?: string;
+};
+export type LedgerDiffRow = {
+    migrationId: string;
+    scopeHandle: string;
+    statuses: Record<string, string | undefined>;
+    diff: boolean;
+};
+/**
+ * Per-migrationId, per-scopeHandle status comparison across environments — exported for unit
+ * testing (Task 11 Step 1). Degrades gracefully (empty rows) for a non-migrationLedger-shaped
+ * probe payload rather than throwing — `pb admin probe` supports every registered probe, not
+ * just migrationLedger, so a generic diff must not assume the shape.
+ */
+export declare function diffMigrationLedgerResults(results: ProbeEnvResult[]): {
+    rows: LedgerDiffRow[];
+};
+/** Resolves one --env value to its {apiKey, siteUrl} via the profile system. Exported for
+ * unit testing the "unknown profile" refusal without a network call. */
+export declare function resolveProbeEnv(envName: string): {
+    apiKey: string;
+    siteUrl: string;
+};
+/**
+ * Announce every `--env` this invocation targets (TEN-3398 / WP-711 follow-up: `probe` reached
+ * the gateway via `fetchProbePage`'s raw `fetch` with NO notice and NO binding guard at all —
+ * the one gateway door the rest of this lane's census missed). Called once per env in the
+ * command's action handler, alongside `adminBanner` — never inside `fetchProbePage`/`fetchProbe`,
+ * so a paginated `migrationLedger` probe (up to `MAX_PAGES` requests) still announces once per
+ * env, not once per page. Exported for unit testing, mirroring `resolveProbeEnv`/`fetchProbe`.
+ *
+ * Uses `source: 'local-profile'` (renders as a PLAIN "→ <name>" line, no qualifier): every
+ * `--env <name>` is an explicit, deliberate binding the operator typed — never an unpinned
+ * fallback — so the "global default" hint `'global-profile'` would attach is actively wrong
+ * here.
+ *
+ * Deliberately does NOT call `guardAdminCall`/`assertSessionStillBound`. Guarding "has the
+ * credential moved since the session started" makes sense for `adminCall`/`kernelCallWithSession`
+ * because those resolve ONE ambient credential the session is presumed to still be operating
+ * within. `probe --env <name>` is structurally different: `resolveNamedProfileConfig(name)`
+ * reads ONE named profile FILE directly, entirely independent of the session's own
+ * ambient-cascade credential (env var > local pin > global active profile > legacy) that
+ * `session.bindingFingerprint` was stamped against. Comparing the two would false-positive-
+ * refuse the tool's own core feature — `--env prod --env dev` — the moment ANY session is
+ * active, since at most one of the two named envs can ever match the session's single bound
+ * fingerprint. There is no credential "drift" to catch here: the operator names the target
+ * explicitly, every time. (On the record per TEN-3398 PR review: this is the one gateway path
+ * in this lane that stays announce-only, not guard-and-announce.)
+ */
+export declare function announceProbeEnvs(envs: string[]): void;
+/** Exported for unit testing the page-following loop (Copilot review, PR #574) — mocks global
+ * fetch and asserts the CLI accumulates every page before returning. */
+export declare function fetchProbe(env: string, name: string): Promise<ProbeEnvResult>;
+export declare function attachProbeCommand(admin: Command): void;
+//# sourceMappingURL=probe.d.ts.map

package/dist/commands/admin/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,MAAM,MAAM,cAAc,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAkCF,MAAM,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,IAAI,EAAE,OAAO,CAAC;CACd,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG;IAAE,IAAI,EAAE,aAAa,EAAE,CAAA;CAAE,CAqB/F;AAED;wEACwE;AACxE,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgBpF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAItD;AAsBD;wEACwE;AACxE,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAsCnF;AA8CD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAwBvD"}

package/dist/commands/admin/probe.js

@@ -0,0 +1,224 @@
+import { resolveNamedProfileConfig } from '../../lib/profiles.js';
+import { CLIError, ErrorCode } from '../../lib/errors.js';
+import { adminBanner, bold, cyan, dim, green, heading, red } from '../../lib/style.js';
+import { isJsonMode } from '../../lib/runner.js';
+import { emitAdminTenantNotice } from '../../lib/workspaceNotice.js';
+function isLedgerPayload(data) {
+    return (!!data &&
+        typeof data === 'object' &&
+        Array.isArray(data.rows));
+}
+/** Reconstructs the {rows:[{migrationId,scopes}]} shape diffMigrationLedgerResults expects,
+ * from the flat rows accumulated across every followed page. */
+function groupLedgerRows(rows) {
+    const byMigration = new Map();
+    for (const { migrationId, ...scope } of rows) {
+        const existing = byMigration.get(migrationId);
+        if (existing)
+            existing.push(scope);
+        else
+            byMigration.set(migrationId, [scope]);
+    }
+    return {
+        rows: Array.from(byMigration.entries()).map(([migrationId, scopes]) => ({ migrationId, scopes })),
+        truncated: false,
+    };
+}
+/**
+ * Per-migrationId, per-scopeHandle status comparison across environments — exported for unit
+ * testing (Task 11 Step 1). Degrades gracefully (empty rows) for a non-migrationLedger-shaped
+ * probe payload rather than throwing — `pb admin probe` supports every registered probe, not
+ * just migrationLedger, so a generic diff must not assume the shape.
+ */
+export function diffMigrationLedgerResults(results) {
+    const byKey = new Map();
+    for (const r of results) {
+        if (!r.ok || !isLedgerPayload(r.data))
+            continue;
+        for (const entry of r.data.rows) {
+            for (const scope of entry.scopes) {
+                const key = `${entry.migrationId} ${scope.scopeHandle}`;
+                if (!byKey.has(key))
+                    byKey.set(key, new Map());
+                byKey.get(key).set(r.env, scope.status);
+            }
+        }
+    }
+    const envNames = results.map((r) => r.env);
+    const rows = Array.from(byKey.entries()).map(([key, statusesByEnv]) => {
+        const [migrationId, scopeHandle] = key.split(' ');
+        const statuses = {};
+        for (const env of envNames)
+            statuses[env] = statusesByEnv.get(env);
+        const distinct = new Set(Object.values(statuses));
+        return { migrationId, scopeHandle, statuses, diff: distinct.size > 1 };
+    });
+    return { rows };
+}
+/** Resolves one --env value to its {apiKey, siteUrl} via the profile system. Exported for
+ * unit testing the "unknown profile" refusal without a network call. */
+export function resolveProbeEnv(envName) {
+    const config = resolveNamedProfileConfig(envName);
+    if (!config?.apiKey) {
+        throw new CLIError(`No profile named "${envName}" (pb admin probe --env resolves a PROFILE NAME, not a fixed environment enum). Run \`pb profile create ${envName}\` first, or check \`pb profile list\`.`, { code: ErrorCode.CONFIG_INVALID, category: 'config' });
+    }
+    const siteUrl = (config.siteUrl ?? '').replace(/\/$/, '');
+    if (!siteUrl) {
+        throw new CLIError(`Profile "${envName}" has no siteUrl configured.`, {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+        });
+    }
+    return { apiKey: config.apiKey, siteUrl };
+}
+/**
+ * Announce every `--env` this invocation targets (TEN-3398 / WP-711 follow-up: `probe` reached
+ * the gateway via `fetchProbePage`'s raw `fetch` with NO notice and NO binding guard at all —
+ * the one gateway door the rest of this lane's census missed). Called once per env in the
+ * command's action handler, alongside `adminBanner` — never inside `fetchProbePage`/`fetchProbe`,
+ * so a paginated `migrationLedger` probe (up to `MAX_PAGES` requests) still announces once per
+ * env, not once per page. Exported for unit testing, mirroring `resolveProbeEnv`/`fetchProbe`.
+ *
+ * Uses `source: 'local-profile'` (renders as a PLAIN "→ <name>" line, no qualifier): every
+ * `--env <name>` is an explicit, deliberate binding the operator typed — never an unpinned
+ * fallback — so the "global default" hint `'global-profile'` would attach is actively wrong
+ * here.
+ *
+ * Deliberately does NOT call `guardAdminCall`/`assertSessionStillBound`. Guarding "has the
+ * credential moved since the session started" makes sense for `adminCall`/`kernelCallWithSession`
+ * because those resolve ONE ambient credential the session is presumed to still be operating
+ * within. `probe --env <name>` is structurally different: `resolveNamedProfileConfig(name)`
+ * reads ONE named profile FILE directly, entirely independent of the session's own
+ * ambient-cascade credential (env var > local pin > global active profile > legacy) that
+ * `session.bindingFingerprint` was stamped against. Comparing the two would false-positive-
+ * refuse the tool's own core feature — `--env prod --env dev` — the moment ANY session is
+ * active, since at most one of the two named envs can ever match the session's single bound
+ * fingerprint. There is no credential "drift" to catch here: the operator names the target
+ * explicitly, every time. (On the record per TEN-3398 PR review: this is the one gateway path
+ * in this lane that stays announce-only, not guard-and-announce.)
+ */
+export function announceProbeEnvs(envs) {
+    for (const env of envs) {
+        emitAdminTenantNotice({ profileName: env, source: 'local-profile' });
+    }
+}
+async function fetchProbePage(siteUrl, apiKey, name, cursor) {
+    const url = new URL('/api/admin/probe', siteUrl);
+    url.searchParams.set('name', name);
+    if (cursor)
+        url.searchParams.set('cursor', cursor);
+    const res = await fetch(url.toString(), { headers: { Authorization: `Bearer ${apiKey}` } });
+    const body = (await res.json().catch(() => ({})));
+    return { res, body };
+}
+/** Fail-safe against a pathological non-terminating pagination loop (a server bug that never
+ * sets isDone) — this is not a realistic ledger size, just a circuit breaker. */
+const MAX_PAGES = 200;
+/** Exported for unit testing the page-following loop (Copilot review, PR #574) — mocks global
+ * fetch and asserts the CLI accumulates every page before returning. */
+export async function fetchProbe(env, name) {
+    const { apiKey, siteUrl } = resolveProbeEnv(env);
+    try {
+        if (name !== 'migrationLedger') {
+            const { res, body } = await fetchProbePage(siteUrl, apiKey, name, null);
+            if (body.ok === false || !res.ok) {
+                return { env, ok: false, status: res.status, error: body.error ?? res.statusText };
+            }
+            return { env, ok: true, status: res.status, data: body.data };
+        }
+        // migrationLedger is REAL cursor-paginated (Copilot review, PR #574) — pb admin probe
+        // auto-follows every page so the operator always sees the COMPLETE ledger, never a
+        // silently-partial one. The S5a reconciler reads production through this SAME probe to
+        // decide whether an in-scope migration is unapplied; an incomplete CLI view here would
+        // hide exactly the gap this bet exists to catch.
+        const accumulated = [];
+        let cursor = null;
+        for (let page = 0; page < MAX_PAGES; page++) {
+            const { res, body } = await fetchProbePage(siteUrl, apiKey, name, cursor);
+            if (body.ok === false || !res.ok) {
+                return { env, ok: false, status: res.status, error: body.error ?? res.statusText };
+            }
+            const payload = body.data;
+            accumulated.push(...(payload.page ?? []));
+            if (payload.isDone) {
+                return { env, ok: true, status: res.status, data: groupLedgerRows(accumulated) };
+            }
+            cursor = payload.continueCursor ?? null;
+        }
+        return {
+            env,
+            ok: false,
+            error: `migrationLedger probe did not report isDone after ${MAX_PAGES} pages`,
+        };
+    }
+    catch (err) {
+        return { env, ok: false, error: err instanceof Error ? err.message : String(err) };
+    }
+}
+function printSingleResult(result) {
+    if (isJsonMode()) {
+        process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+        return;
+    }
+    if (!result.ok) {
+        console.log(red(`✗ ${result.env}: ${result.error ?? 'failed'}`));
+        process.exitCode = 1;
+        return;
+    }
+    console.log(heading(`Probe result (${result.env})`));
+    console.log(JSON.stringify(result.data, null, 2));
+}
+function printComparison(results) {
+    if (isJsonMode()) {
+        process.stdout.write(JSON.stringify({ results, diff: diffMigrationLedgerResults(results) }, null, 2) + '\n');
+        return;
+    }
+    for (const r of results) {
+        if (!r.ok)
+            console.log(red(`✗ ${r.env}: ${r.error ?? 'failed'}`));
+    }
+    const { rows } = diffMigrationLedgerResults(results);
+    if (rows.length === 0) {
+        console.log(dim('No comparable migration-ledger rows across the given environments.'));
+        for (const r of results) {
+            if (r.ok) {
+                console.log(heading(`Probe result (${r.env})`));
+                console.log(JSON.stringify(r.data, null, 2));
+            }
+        }
+        return;
+    }
+    const envNames = results.map((r) => r.env);
+    console.log(heading(`Cross-environment comparison (${envNames.join(' vs ')})`));
+    for (const row of rows) {
+        const statusCols = envNames.map((e) => `${e}=${row.statuses[e] ?? dim('(absent)')}`).join('  ');
+        const marker = row.diff ? red('DIFF') : green('same');
+        console.log(`${bold(row.migrationId)} ${cyan(row.scopeHandle.slice(0, 10))}…  ${statusCols}  ${marker}`);
+    }
+}
+export function attachProbeCommand(admin) {
+    admin
+        .command('probe')
+        .description('Read the cross-environment probe window (GET /api/admin/probe). --env resolves a ' +
+        'named profile; repeat --env to compare environments side by side.')
+        .argument('<name>', 'probe name, e.g. migrationLedger, credentialAge, platformEntries, collectionShapeDrift')
+        .option('--env <name>', 'profile name to query (repeatable)', (v, prev) => [...prev, v], [])
+        .action(async (name, options) => {
+        const envs = options.env.length > 0 ? options.env : ['default'];
+        announceProbeEnvs(envs);
+        for (const env of envs) {
+            const { siteUrl } = resolveProbeEnv(env);
+            adminBanner(siteUrl);
+        }
+        const results = await Promise.all(envs.map((env) => fetchProbe(env, name)));
+        if (results.length > 1) {
+            printComparison(results);
+        }
+        else {
+            printSingleResult(results[0]);
+        }
+        if (results.some((r) => !r.ok))
+            process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=probe.js.map

package/dist/commands/admin/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../src/commands/admin/probe.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAcrE,SAAS,eAAe,CAAC,IAAa;IACrC,OAAO,CACN,CAAC,CAAC,IAAI;QACN,OAAO,IAAI,KAAK,QAAQ;QACxB,KAAK,CAAC,OAAO,CAAE,IAA2B,CAAC,IAAI,CAAC,CAChD,CAAC;AACH,CAAC;AAOD;gEACgE;AAChE,SAAS,eAAe,CAAC,IAAqB;IAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IACxD,KAAK,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC9B,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO;QACN,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjG,SAAS,EAAE,KAAK;KAChB,CAAC;AACH,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAyB;IACnE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAChD,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBAC/C,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACF,CAAC;IACF,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAoB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,EAAE;QACtF,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAuC,EAAE,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,CAAC;AACjB,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,eAAe,CAAC,OAAe;IAC9C,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CACjB,qBAAqB,OAAO,2GAA2G,OAAO,yCAAyC,EACvL,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACtD,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,YAAY,OAAO,8BAA8B,EAAE;YACrE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;SAClB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,qBAAqB,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAID,KAAK,UAAU,cAAc,CAC5B,OAAe,EACf,MAAc,EACd,IAAY,EACZ,MAAqB;IAErB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkB,CAAC;IACnE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;iFACiF;AACjF,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB;wEACwE;AACxE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY;IACzD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC;QACJ,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBAClC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACpF,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/D,CAAC;QAED,sFAAsF;QACtF,mFAAmF;QACnF,uFAAuF;QACvF,uFAAuF;QACvF,iDAAiD;QACjD,MAAM,WAAW,GAAoB,EAAE,CAAC;QACxC,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1E,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBAClC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACpF,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAA6E,CAAC;YACnG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YAClF,CAAC;YACD,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;QACzC,CAAC;QACD,OAAO;YACN,GAAG;YACH,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,qDAAqD,SAAS,QAAQ;SAC7E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACpF,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAsB;IAChD,IAAI,UAAU,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO;IACR,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACR,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,OAAyB;IACjD,IAAI,UAAU,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACtF,CAAC;QACF,OAAO;IACR,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC,CAAC;QACvF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;QACF,CAAC;QACD,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,iCAAiC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;IAC1G,CAAC;AACF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAChD,KAAK;SACH,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CACX,mFAAmF;QAClF,mEAAmE,CACpE;SACA,QAAQ,CAAC,QAAQ,EAAE,wFAAwF,CAAC;SAC5G,MAAM,CAAC,cAAc,EAAE,oCAAoC,EAAE,CAAC,CAAS,EAAE,IAAc,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,EAAc,CAAC;SACzH,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA0B,EAAE,EAAE;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChE,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACzC,WAAW,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACP,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/admin/probe.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=probe.test.d.ts.map

package/dist/commands/admin/probe.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.test.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/probe.test.ts"],"names":[],"mappings":""}