@productbrain/cli 0.1.0-beta.14 → 0.1.0-beta.14010

package/dist/index.js

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 /**
- * Product Brain CLI — Chain knowledge + write-back in the terminal.
- * Read: BET-108. Write: pb session + pb capture (TEN-27, INS-80).
- * BET-181 Slice 0: global --json / --pretty flags for agent-native output (DEC-299).
+ * Product Brain CLI — Chain knowledge + write-back in the terminal. Read: BET-108.
+ * Write: pb session + pb capture (TEN-27, INS-80). BET-181 Slice 0: global --json / --pretty flags for agent-native output (DEC-299).
  */
 import { readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
@@ -10,41 +9,78 @@ import { fileURLToPath } from 'node:url';
 import { Command } from 'commander';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const cliPackageVersion = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf8'));
-import { setOutputMode } from './lib/runner.js';
+import { setOutputMode, setQuietMode, isJsonMode } from './lib/runner.js';
+import { CLIError, ErrorCode } from './lib/errors.js';
+import { handleCliError as handleError, silenceCommanderErrors } from './handleCliError.js';
 import { runContext } from './commands/context.js';
 import { runGet, runGetMany } from './commands/get.js';
+import { runScoreboard } from './commands/scoreboard.js';
+import { registerHistoryCommand } from './registerHistoryCommand.js';
+import { runReworkReport } from './commands/rework.js';
+import { runConnect } from './commands/connect.js';
 import { runLogin } from './commands/login.js';
 import { runOrient } from './commands/orient.js';
 import { runSearch } from './commands/search.js';
-import { runHandshake, runHandshakeInit } from './commands/handshake.js';
-import { runSessionStart, runSessionClose, runSessionId } from './commands/session.js';
+import { runSessionId, runSessionReset, runSessionList, runSessionShow } from './commands/session.js';
+import { registerSessionClose, registerSessionStart } from './commands/session-hook.js';
 import { runCapture } from './commands/capture.js';
 import { runUpdate } from './commands/update.js';
-import { runRelate, runUnrelate } from './commands/relate.js';
-import { runIngest } from './commands/ingest.js';
+import { runRestore } from './commands/restore.js';
 import { runFields } from './commands/fields.js';
 import { runConstellation } from './commands/constellation.js';
-import { runPromote } from './commands/promote.js';
-import { runBrandPack } from './commands/brand-pack.js';
-import { runAudit } from './commands/audit.js';
-import { runProposals } from './commands/proposals.js';
-import { runAccept } from './commands/accept.js';
-import { runReject } from './commands/reject.js';
+import { registerEntryCommands, registerRelateCommands } from './registerEntryCommands.js';
+import { registerTasksCommands, registerTensionsCommands } from './registerTensionsCommands.js';
 import { runChanges } from './commands/changes.js';
+import { registerMethodCommands } from './commands/method.js'; // TASK-1214 same-line combine
+import { registerOutcomeCommands } from './registerOutcomeCommands.js';
+import { registerRoleCommands } from './registerRoleCommands.js';
 import { runChainWalk } from './commands/chain-walk.js';
 import { runCrossCut } from './commands/cross-cut.js';
 import { runBrief, runCompoundBrief, isCompoundType } from './commands/brief.js';
 import { runVerify } from './commands/verify.js';
+import { runCodexPrep } from './commands/codex-prep.js';
+import { runStillTrue } from './commands/stillTrue.js'; // same-line combine, TASK-384 S1
+import { runCollectionsList, runCollectionsGet, runCollectionsAudit, runCollectionsExport } from './commands/collections.js';
+import { runWorkspaceVerify, runDefinitionsDiff } from './commands/workspace.js';
+import { runDoctor } from './commands/doctor.js';
+import { runWhoami } from './commands/whoami.js';
+import { runFiles } from './commands/files.js';
+import { runUpgrade } from './commands/upgrade.js';
+import { runProfileList, runProfileCreate, runProfileUse, runProfileDelete } from './commands/profile.js';
+import { parseInitClient, runInit } from './commands/init.js';
+import { runStatus } from './commands/status.js';
+import { createAdminCommand } from './commands/admin/index.js';
+import { createFeedbackCommand } from './commands/feedback.js';
+import { createConflictsCommand } from './commands/conflicts.js';
+import { createQuestionCommand } from './commands/questions.js';
+import { createDirectionCommand } from './commands/direction.js';
+import { createOrganisationCommand } from './commands/organisation.js';
+import { createAcceptPolicyCommand } from './commands/accept-policy.js'; // WP-661 S3
+import { runUsage } from './commands/usage.js';
+import { runProofRun } from './commands/proof-run.js'; // same-line combine
+import { registerQualityCommands } from './commands/quality.js';
+import { formatGlossary } from './lib/glossary.js';
+import { PLATFORM_GLOSSARY_TERMS } from './lib/platformGlossary.js';
+import { AGENT_KEY_PREFIX, API_KEY_PREFIX } from './lib/tokenConstants.js';
+import { heading } from './lib/style.js';
+import { printPreviewBanner } from './lib/previewBanner.js';
+import { checkForUpdate } from './lib/update-check.js';
+import { CLI_INSTALL_COMMAND } from './lib/cliFirstRun.js';
+import { ENTRY_BODY_HELP, ENTRY_NAME_HELP } from './lib/limits.js';
 const program = new Command();
+// WP-753 V2 (TASK-203): the global error handler lives in ./handleCliError.ts (STD-2/DEC-1724 —
+// kept out of this grandfathered file); imported below as handleError for the call site's own name.
 program
     .name('pb')
     .description('Product Brain — Chain knowledge + write-back CLI')
     .version(cliPackageVersion.version)
     // Global output mode flags (DEC-299, BET-181)
-    .option('--json', 'Output machine-readable JSON (overrides TTY auto-detection)')
-    .option('--pretty', 'Force human-readable output even when piped');
-// Apply global output mode BEFORE subcommand actions run
-program.hook('preAction', (thisCommand) => {
+    .option('--json', 'Output machine-readable JSON (the card is the default even when piped)')
+    .option('--pretty', 'Force human-readable output even when PB_JSON=1 is set')
+    .option('-q, --quiet', 'Suppress non-essential output (banners, hints, progress)')
+    .exitOverride(); // Throw CommanderError instead of calling process.exit directly
+// Apply global output mode BEFORE subcommand actions run. Commander preAction hook signature: (hookedCommand = root program, actionCommand = the subcommand actually invoked).
+program.hook('preAction', (_hookedCommand, actionCommand) => {
     const globalOpts = program.opts();
     if (globalOpts.json) {
         setOutputMode('json');
@@ -52,8 +88,18 @@ program.hook('preAction', (thisCommand) => {
     else if (globalOpts.pretty) {
         setOutputMode('pretty');
     }
-    // else: 'auto' (default) — TTY detection handles it
-    void thisCommand;
+    // else: 'auto' (default) — isJsonMode() checks PB_JSON=1, never TTY (WP-744 / 1e-B)
+    if (globalOpts.quiet) {
+        setQuietMode(true);
+    }
+    // Ambient update notification — non-blocking, suppressed in JSON mode (WP-322 S1)
+    checkForUpdate(cliPackageVersion.version);
+    // PREVIEW banner — writes to stderr so it's always visible even in --json/--quiet mode. Advisory line added for top-level Chain-write commands: real learnings belong in the real Chain.
+    printPreviewBanner(actionCommand);
+});
+// Default action — status dashboard when `pb` is invoked with no command. `pb --help` still works because Commander intercepts --help before the action runs.
+program.action(async () => {
+    await runStatus({ args: program.args, version: cliPackageVersion.version });
 });
 program
     .command('get <entry-id>')
@@ -63,125 +109,116 @@ program
         program.commands.find((c) => c.name() === 'get')?.help();
         return;
     }
-    try {
-        await runGet({ entryId: entryId.trim() });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runGet({ entryId: entryId.trim() });
+});
+registerHistoryCommand(program); // WP-753 V2 (TASK-203): same-line combine, module-health shrink-only budget
+program
+    .command('scoreboard')
+    .description('Flywheel scoreboard — metrics + diagnosis layer (agent-primary; --json for structured consumption)')
+    .action(async () => {
+    await runScoreboard();
+});
+const qualityCmd = program
+    .command('quality')
+    .description('Quality-check surfaces');
+registerQualityCommands(qualityCmd);
+const reworkCmd = program
+    .command('rework')
+    .description('Report observed rework signals (fills the rework meter)');
+reworkCmd
+    .command('report <entry-id>')
+    .description('Report a rework event attributed to a previously served governance entry (agent-native checkpoint; requires an active session)')
+    .requiredOption('--classification <kind>', 'revision | ci_review_correction | user_override')
+    .option('--via <kind>', 'How this was observed: followup_commit | ci_rerun | manual', 'manual')
+    .option('--attributable', 'Flag: this ci_review_correction is attributed to a missing/violated served decision')
+    .option('--task <text>', 'Task context this rework relates to (truncated server-side, never raw diff/comment text)')
+    .option('--conversation <id>', 'Explicit conversation override, matching `pb session start --conversation <id>` — use when the shell has no PB_CONVERSATION_ID set')
+    .action(async (entryId, opts) => {
+    await runReworkReport({
+        entryId,
+        classification: opts.classification,
+        reportedVia: opts.via,
+        attributable: opts.attributable,
+        task: opts.task,
+        conversation: opts.conversation,
+    });
 });
 program
     .command('get-many <entry-ids...>')
     .description('Fetch multiple entries in parallel (space-separated IDs)')
     .action(async (entryIds) => {
-    try {
-        await runGetMany({ entryIds: entryIds.map((id) => id.trim()).filter(Boolean) });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runGetMany({ entryIds: entryIds.map((id) => id.trim()).filter(Boolean) });
 });
 program
     .command('context <entry-id>')
-    .description('Gather and display constellation context (pipe-friendly: JSON when piped, human text in terminal)')
+    .description('Gather and display constellation context (human-readable card by default, even when piped — pass --json for machine-readable output)')
     .action(async (entryId) => {
     if (!entryId?.trim()) {
         program.commands.find((c) => c.name() === 'context')?.help();
         return;
     }
-    try {
-        await runContext({ entryId: entryId.trim() });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runContext({ entryId: entryId.trim() });
 });
 program
     .command('changes')
-    .description('Detect entries modified and relations created since a given time (BET-239)')
+    .description('Detect entries modified and relations created since a given time')
     .requiredOption('--since <duration>', 'Time window: 1h, 6h, 1d, 7d, 30d')
     .action(async (opts) => {
-    try {
-        await runChanges({ since: opts.since });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runChanges({ since: opts.since });
 });
 program
     .command('walk <entry-id>')
-    .description('Directed deep traversal along one relation type to depth 4 (BET-239)')
+    .description('Directed deep traversal along one relation type to depth 4')
     .option('-d, --depth <n>', 'Traversal depth 1-4 (default 2)', '2')
     .option('--direction <dir>', 'Traversal direction: outgoing or incoming (default outgoing)', 'outgoing')
     .option('-t, --type <relation-type>', 'Filter by relation type (e.g. depends_on, informs, governs)')
     .action(async (entryId, opts) => {
-    try {
-        const depth = parseInt(opts.depth, 10);
-        if (isNaN(depth) || depth < 1 || depth > 4) {
-            console.error('--depth must be between 1 and 4.');
-            process.exit(1);
-        }
-        await runChainWalk({
-            entryId: entryId.trim(),
-            depth,
-            direction: opts.direction,
-            type: opts.type,
+    const depth = parseInt(opts.depth, 10);
+    if (isNaN(depth) || depth < 1 || depth > 4) {
+        throw new CLIError('--depth must be between 1 and 4.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
         });
     }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runChainWalk({
+        entryId: entryId.trim(),
+        depth,
+        direction: opts.direction,
+        type: opts.type,
+    });
 });
 program
     .command('cross-cut')
-    .description('Structural aggregation — all relations of a given type grouped by source collection (BET-239)')
+    .description('Structural aggregation — all relations of a given type grouped by source collection')
     .requiredOption('--type <relation-type>', 'Relation type to scan (e.g. part_of, informs, governs)')
     .action(async (opts) => {
-    try {
-        await runCrossCut({ type: opts.type });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runCrossCut({ type: opts.type });
 });
 program
     .command('brief [type]')
-    .description('Brief intelligence queries (BET-239).\n' +
-    '  pb brief --skill <name>    Incremental delta for a skill (E4)\n' +
-    '  pb brief steering          Compound: changes + structure + delta + readiness (E6)\n' +
-    '  pb brief confidence        Compound: changes + active bets + tensions (E6)\n' +
-    '  pb brief delta [--since]   Compound: changes + relations since timestamp (E6)')
+    .description('Brief intelligence queries.\n' +
+    '  pb brief --skill <name>    Incremental delta for a skill\n' +
+    '  pb brief steering          Compound: changes + structure + delta + readiness\n' +
+    '  pb brief confidence        Compound: changes + active work packages (tensions: `pb tensions list`)\n' +
+    '  pb brief delta [--since]   Compound: changes + relations since timestamp')
     .option('--skill <name>', 'Skill name for incremental brief (e.g. preflight, shaping, review)')
     .option('--since-last', 'Compare against last brief run (incremental mode)')
     .option('--since <timestamp>', 'ISO 8601 timestamp for delta type (e.g. 2026-03-24T00:00:00Z)')
     .action(async (type, opts) => {
-    try {
-        // If positional arg is a compound type, route to compound brief
-        if (type && isCompoundType(type)) {
-            await runCompoundBrief({ type, since: opts.since });
-            return;
-        }
-        // Otherwise, require --skill for incremental brief
-        if (!opts.skill) {
-            console.error('Usage:\n' +
-                '  pb brief --skill <name>    Incremental delta\n' +
-                '  pb brief steering          Compound steering brief\n' +
-                '  pb brief confidence        Compound confidence pass\n' +
-                '  pb brief delta             Compound delta sync');
-            process.exit(1);
-        }
-        await runBrief({ skill: opts.skill, sinceLast: opts.sinceLast });
+    // If positional arg is a compound type, route to compound brief
+    if (type && isCompoundType(type)) {
+        await runCompoundBrief({ type, since: opts.since });
+        return;
     }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
+    // Otherwise, require --skill for incremental brief
+    if (!opts.skill) {
+        throw new CLIError('Usage:\n' +
+            '  pb brief --skill <name>    Incremental delta\n' +
+            '  pb brief steering          Compound steering brief\n' +
+            '  pb brief confidence        Compound confidence pass\n' +
+            '  pb brief delta             Compound delta sync', { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
     }
+    await runBrief({ skill: opts.skill, sinceLast: opts.sinceLast });
 });
 program
     .command('search [query...]')
@@ -192,237 +229,190 @@ program
         program.commands.find((c) => c.name() === 'search')?.help();
         return;
     }
-    try {
-        await runSearch({ query });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runSearch({ query });
 });
 program
     .command('orient')
-    .description('Print workspace stage and all orient sections (strategic context, bets, governance, tensions, etc.)')
-    .option('-b, --brief', 'Compact view: stage, counts, top bets, tensions, planned work')
+    .description('Print all orient sections (strategic context, work packages, governance, tensions, etc.)')
+    .option('-b, --brief', 'Compact view: counts, top work packages, tensions, planned work')
+    .option('-t, --task <task>', 'Task description for task-shaped governance and context')
+    .option('--full', 'Full depth orient (tier=full). Use for thorough context loading.')
     .action(async (opts) => {
-    try {
-        await runOrient({ brief: opts.brief });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runOrient({ brief: opts.brief, task: opts.task?.trim() || undefined, full: opts.full });
 });
 program
-    .command('handshake')
-    .description('Generate context files for AI developer tools (CLAUDE.md, .cursor/rules/, .github/copilot-instructions.md)')
-    .option('--force', 'Overwrite adapter files even if they exist without auto-generated marker')
-    .option('--dry-run', 'Show what would be generated without writing files')
-    .option('--init', 'Set up Claude Code integration: team hooks + personal trust level')
-    .option('--level <level>', 'With --init: trust level (guide|work|silent|full-trust). Without --init: content tier (beginner|intermediate|expert)')
-    .action(async (opts) => {
-    try {
-        if (opts.init) {
-            await runHandshakeInit({ level: opts.level, dryRun: opts.dryRun });
-            return;
-        }
-        await runHandshake({ force: opts.force, dryRun: opts.dryRun, level: opts.level });
+    .command('codex-prep <task...>')
+    .description('Generate task-specific governance context for Codex (.codex/task-context.md)')
+    .option('--dry-run', 'Print to stdout instead of writing file')
+    .option('--full', 'Full depth orient (tier=full). Use for thorough context loading.')
+    .action(async (taskParts, opts) => {
+    const task = taskParts.join(' ').trim();
+    if (!task) {
+        program.commands.find((c) => c.name() === 'codex-prep')?.help();
+        return;
     }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
+    await runCodexPrep({ task, dryRun: opts.dryRun, full: opts.full });
+});
+program
+    .command('init')
+    .description('Install the session hooks for Claude Code, Codex and Cursor in this repo and check your setup')
+    .option('--dry-run', 'Print the hooks it would add without writing any hook file')
+    .option('--client <tool>', 'Also write this tool\'s hook in a folder without its files: claude, codex or cursor', parseInitClient)
+    .action(async (opts) => { await runInit({ dryRun: opts.dryRun, client: opts.client }); });
+program
+    .command('connect <token>')
+    .description('Redeem an onboarding token and save your API key locally. Uses CONVEX_SITE_URL if set, otherwise the production gateway. Override with --gateway or PB_CONNECT_GATEWAY_URL. In a non-interactive shell (e.g. CI), pass --yes to confirm the workspace, optionally with --name to label the key.')
+    .option('--gateway <url>', 'Override redeem gateway (default: CONVEX_SITE_URL or production). Use when token came from a different Convex deployment.')
+    .option('--name <label>', 'Optional label for this API key in workspace settings. Skips the key-label prompt when set.')
+    .option('-y, --yes', 'Skip the interactive workspace confirmation. Required to connect in a non-interactive shell (e.g. CI).')
+    .action(async (token, opts) => {
+    if (!token?.trim()) {
+        program.commands.find((c) => c.name() === 'connect')?.help();
+        return;
     }
+    await runConnect(token.trim(), { gateway: opts.gateway, name: opts.name, assumeYes: opts.yes });
 });
 program
     .command('login')
     .description('Save your API key to ~/.config/productbrain/.env (works from any directory)')
     .action(async () => {
-    try {
-        await runLogin();
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runLogin();
+});
+program
+    .command('doctor')
+    .description('Check CLI configuration and connectivity')
+    .option('--fix', 'Auto-repair common configuration issues')
+    .option('--dry-run', 'Preview what --fix would do without changing anything')
+    .action(async (opts) => {
+    await runDoctor({ fix: opts.fix, dryRun: opts.dryRun });
+});
+program
+    .command('whoami')
+    .alias('status')
+    .description('Show the active profile + workspace (fast; no session required).')
+    .action(async () => {
+    await runWhoami();
+});
+program
+    .command('files')
+    .description('Show which .productbrain files are pb-owned vs committed, and what writes each.')
+    .option('--fix', 'Add any exposed pb-owned files to .gitignore (idempotent)')
+    .option('--dry-run', 'With --fix: preview the .gitignore lines without writing')
+    .action(async (opts) => {
+    await runFiles({ fix: opts.fix, dryRun: opts.dryRun });
 });
 // --- Write commands (require active session) ---
 const sessionCmd = program
     .command('session')
-    .description('Manage write sessions (DEC-9: sessions required before write access)');
-sessionCmd
-    .command('start')
-    .description('Start a tracked write session (opens session, refreshes context)')
-    .option('--json', 'Output machine-readable JSON (deprecated: use global --json flag)')
-    .action(async (opts) => {
-    try {
-        await runSessionStart({ json: opts.json });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
-});
+    .description('Manage write sessions (sessions required before write access)');
+registerSessionStart(sessionCmd); // TASK-562: start and close live in commands/session-hook.ts
 sessionCmd
     .command('id')
-    .description('Print current session ID to stdout (machine-readable, TEN-707)')
+    .description('Print current session ID to stdout (machine-readable)')
     .action(() => {
-    try {
-        runSessionId();
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    runSessionId();
+});
+registerSessionClose(sessionCmd);
+// WP-479 E4: traceback + quota observability.
+sessionCmd
+    .command('list')
+    .description('List active sessions (with quota gauge) + recent non-active ones')
+    .action(async () => {
+    await runSessionList();
 });
 sessionCmd
-    .command('close')
-    .description('Close the active session (wrapup, refresh context)')
-    .option('--force', 'Clear local session state even if server close fails')
+    .command('show <id-or-conversation>')
+    .description('Show a conversation\'s full session lineage + governance serves')
+    .action(async (idOrConversation) => {
+    await runSessionShow(idOrConversation);
+});
+// TEN-2189 / WP-456 E2: hard-reset worktree-local session state (no resume marker) + clear the PREVIEW_MODE marker. Recovery path for a session stranded on the wrong workspace after a pb:preview/pb:real binding flip.
+sessionCmd
+    .command('reset')
+    .description('Hard-reset local session state (discard session.json + clear PREVIEW_MODE)')
+    .option('--force', 'Skip the confirmation prompt when an active session is present')
     .action(async (opts) => {
-    try {
-        await runSessionClose({ force: opts.force });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runSessionReset({ force: opts.force });
 });
 program
     .command('capture [text...]')
     .description('Capture knowledge to the Chain (requires active session)')
-    .option('-n, --name <name>', 'Entry name (defaults to capture text)')
-    .option('-d, --description <desc>', 'Entry description (defaults to capture text)')
+    .option('-n, --name <name>', `${ENTRY_NAME_HELP} Left out, it is the first sentence of the text.`)
+    .option('-d, --description <desc>', `${ENTRY_BODY_HELP} Left out, it is the whole text.`)
     .option('-c, --collection <slug>', 'Explicit collection (skip auto-classification)')
-    .option('-l, --link <entry-id>', 'Link new entry to an existing entry (TEN-705)')
-    .option('-t, --type <relation-type>', 'Relation type for --link (default: surfaces_tension_in)')
+    .option('-f, --field <key=value>', 'Set a data field (repeatable; checklist: -f doneWhen="a" -f doneWhen="b", one item per flag)', (val, prev) => [...prev, val], [])
+    .option('-l, --link <entry-id>', 'Link to an existing entry by id or name (repeatable; pairs with the -t in the same position)', (val, prev) => [...prev, val], [])
+    .option('-t, --link-type <relation-type>', 'Relation type for the -l in the same position; one per --link, no default', (val, prev) => [...prev, val], [])
+    .option('--source-ref <ref>', 'Source reference URI (e.g. "meeting-2026-03-28.md")')
+    .option('--source-excerpt <text>', 'Verbatim source excerpt')
+    .option('--draft', 'Force the entry to draft regardless of workspace governance mode — opt-in override, keeps it draft even in Open mode')
     .option('--json', 'Output machine-readable JSON (deprecated: use global --json flag)')
+    .option('--owner-role <entry-id>', 'Existing Role entry ID to create AS OWNER of (you must hold it, and its team is the one you hold it in: root first, else the shallowest)') // WP-753 O1b: --owner-team deleted, default owner resolves from the session's acting role.
+    .option('--team <team-ref>', 'For a role: the team it is born in. For a team: its parent. Defaults to the root team')
+    .option('--entry-type <canonical-key>', 'Explicit canonical type for the new entry (e.g. objective, key_result) — bypasses classification; -t/--link-type is the --link relation type')
     .action(async (textParts = [], opts) => {
     const text = textParts.join(' ').trim();
     if (!text && !opts.name) {
         program.commands.find((c) => c.name() === 'capture')?.help();
         return;
     }
-    try {
-        await runCapture({
-            text: text || opts.name || '',
-            name: opts.name,
-            description: opts.description,
-            collection: opts.collection,
-            link: opts.link,
-            type: opts.type,
-            json: opts.json,
-        });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runCapture({
+        text: text || opts.name || '', name: opts.name, description: opts.description, collection: opts.collection,
+        field: opts.field, link: opts.link, linkType: opts.linkType, sourceRef: opts.sourceRef, sourceExcerpt: opts.sourceExcerpt,
+        draft: opts.draft, json: opts.json, ownerRole: opts.ownerRole, entryType: opts.entryType, team: opts.team,
+    });
 });
 // --- Update command (TEN-703) ---
 program
     .command('update <entry-id>')
     .description('Update fields on an existing Chain entry (requires active session)')
-    .option('-f, --field <key=value>', 'Set a data field (repeatable)', (val, prev) => [...prev, val], [])
+    .option('-f, --field <key=value>', 'Set a data field (repeatable; checklist: -f doneWhen="a" -f doneWhen="b", one item per flag)', (val, prev) => [...prev, val], [])
     .option('--name <name>', 'Update entry name')
-    .option('--status <status>', 'Update entry status (draft | active | deprecated | archived)')
-    .option('--note <text>', 'Change note for history')
+    .option('--status <status>', 'Update entry status (draft | archived) — accepted is set via `pb entry accept`; active/deprecated are legacy and refused')
+    .option('--workflow-status <status>', 'Set workflow status (server-validated)')
+    .option('--type <canonical-key>', 'Reclassify a DRAFT entry to another canonical type (immutable once accepted — supersede instead)')
+    .option('--note <text>', 'Change note for history').option('--change-reason <text>', 'Why what the entry promises is changing (required for a promise-field change)')
+    .option('--override-reason <text>', 'Why it stands alone or why a text keeps after its checklist failed, at least 12 characters. Your name is kept with it.')
+    .option('--acknowledge <response>', 'Answer why it stands alone: linked | accepted-fix | diverged')
+    .option('--ack-entry <entry-id>', 'Authorizing entry for --acknowledge linked / accepted-fix')
+    .option('--ack-reason <text>', 'Why you diverge, at least 12 characters; required with --acknowledge diverged')
+    // Commander camelCases every flag to exactly the UpdateOptions key it feeds, so the options
+    // object spreads straight through. The previous hand-written 1:1 mapping had to be edited twice
+    // per new flag (once here, once in the type) and silently dropped anything you forgot.
     .action(async (entryId, opts) => {
-    try {
-        await runUpdate({
-            entryId,
-            field: opts.field,
-            name: opts.name,
-            status: opts.status,
-            note: opts.note,
-        });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runUpdate({ entryId, ...opts });
 });
-// --- Promote command (Wave 2 CLI Polish) ---
+// --- Restore command (WP-514 review round 2, P1) ---
 program
-    .command('verify <entry-id>')
-    .description('Mark an entry as verified (BET-240: source fidelity trust signal)')
-    .action(async (entryId) => {
+    .command('restore <entry-id>')
+    .description('Restore an archived Chain entry to draft (requires active session + rung-3 authority coverage)')
+    .action(async (entryId) => { await runRestore(entryId); });
+// --- Entry noun-scoped commands (DEC-1574, WP-640 S4) — registerEntryCommands.ts ---
+registerEntryCommands(program);
+registerTensionsCommands(program);
+registerTasksCommands(program); // WP-768 L0, DEC-2459: same-line combine (module-health)
+program.command('verify <entry-id>').description('Mark an entry as verified (source fidelity trust signal)').action(async (entryId) => {
     if (!entryId?.trim()) {
         program.commands.find((c) => c.name() === 'verify')?.help();
         return;
     }
-    try {
-        await runVerify({ entryId: entryId.trim() });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
-});
-program
-    .command('promote <entry-id>')
-    .description('Promote entry from draft to active (commit to SSOT)')
-    .option('-m, --message <text>', 'Commit message')
-    .action(async (entryId, opts) => {
-    try {
-        await runPromote({ entryId, message: opts.message });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
-});
-// --- Relate / Unrelate commands (TEN-704) ---
-program
-    .command('relate <from-id> <type> <to-id>')
-    .description('Add a typed relation between two entries (requires active session)')
-    .option('--if-missing', 'Only create relation if it does not already exist')
-    .action(async (fromId, type, toId, opts) => {
-    try {
-        await runRelate({ fromId, type, toId, ifMissing: opts.ifMissing });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runVerify({ entryId: entryId.trim() });
 });
-program
-    .command('unrelate <from-id> <type> <to-id>')
-    .description('Remove a typed relation between two entries (requires active session)')
-    .action(async (fromId, type, toId) => {
-    try {
-        await runUnrelate({ fromId, type, toId });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
-});
-// --- Ingest command (BET-81) ---
-program
-    .command('ingest <pattern>')
-    .description('Bulk ingest documents to Chain as drafts')
-    .option('--dry-run', 'Stage entries without auto-committing. Shows summary only.')
-    .option('--resume', 'Skip files whose sourceRef is already committed in staging.')
-    .option('--concurrency <n>', 'Process up to N files in parallel (default 1, max 5).', '1')
-    .action(async (pattern, opts) => {
-    try {
-        const concurrency = parseInt(opts.concurrency ?? '1', 10);
-        if (Number.isNaN(concurrency) || concurrency < 1) {
-            console.error('--concurrency must be a positive integer.');
-            process.exit(1);
-        }
-        await runIngest({
-            pattern,
-            dryRun: opts.dryRun,
-            resume: opts.resume,
-            concurrency,
-        });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
+// TASK-384 S1: distinct from verify (attestation) — the holder of the owning role (else the nearest seated Team Lead) confirms accuracy; no content/version change.
+program.command('still-true <entry-id>').description('Confirm an entry is still true (the holder of the owning role, else the nearest seated Team Lead)').action(async (entryId) => {
+    if (!entryId?.trim()) {
+        program.commands.find((c) => c.name() === 'still-true')?.help();
+        return;
     }
+    await runStillTrue({ entryId: entryId.trim() });
 });
+// registerProposalCommands(program) deleted (WP-776 S2a, DEC-1771) — `pb accept`/`pb reject`/`pb proposals` are gone.
+registerOutcomeCommands(program);
+registerRoleCommands(program);
+registerMethodCommands(program); // WP-722 S2 outcome; WP-730 S2 role; TASK-1214 method
+// --- Relate / Unrelate commands (TEN-704) — registerEntryCommands.ts (WP-688 S2a: moved off
+// this shrink-only file to fund the --dry-run flag) ---
+registerRelateCommands(program);
 // --- Fields command (BET-181 Slice 2) ---
 program
     .command('fields <collection>')
@@ -432,13 +422,7 @@ program
         program.commands.find((c) => c.name() === 'fields')?.help();
         return;
     }
-    try {
-        await runFields({ collectionSlug: collection.trim() });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runFields({ collectionSlug: collection.trim() });
 });
 // --- Constellation command (BET-181 Slice 3) ---
 program
@@ -449,87 +433,152 @@ program
         program.commands.find((c) => c.name() === 'constellation')?.help();
         return;
     }
-    try {
-        await runConstellation({ entryId: entryId.trim() });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
+    await runConstellation({ entryId: entryId.trim() });
+});
+// --- Collections command (BET-280 Slice 1) ---
+const collectionsCmd = program
+    .command('collections')
+    .description('Inspect and audit workspace collection registry');
+collectionsCmd
+    .command('list')
+    .description('List all collections — slug, name, field count, icon')
+    .action(async () => {
+    await runCollectionsList();
+});
+collectionsCmd
+    .command('get <slug>')
+    .description('Show full detail for a collection by slug')
+    .action(async (slug) => {
+    if (!slug?.trim()) {
+        program.commands.find((c) => c.name() === 'collections')?.help();
+        return;
     }
+    await runCollectionsGet({ slug: slug.trim() });
+});
+collectionsCmd
+    .command('audit')
+    .description('Collection health report — classification, icon, displayHint coverage, schema gaps')
+    .action(async () => {
+    await runCollectionsAudit();
+});
+collectionsCmd
+    .command('export')
+    .description('Export all system_collection_definitions with full classification metadata (admin only)')
+    .action(async () => {
+    await runCollectionsExport();
+});
+// --- Workspace operator commands (WP-305 Slice 4) ---
+const workspaceCmd = program
+    .command('workspace')
+    .description('Operator command for workspace health');
+workspaceCmd
+    .command('verify')
+    .description('Check workspace health — seeds, collections, glossary (admin only)')
+    .action(async () => {
+    await runWorkspaceVerify();
+});
+// D3a (WP-754/TASK-213): the entire `authority-domains` CLI command tree deleted — its backing
+// HTTP gateway routes (convex/http.ts) and convex/authorityDomains.ts are deleted in this same
+// slice, so every one of these subcommands would call a route that no longer exists.
+// --- Definitions diff command (WP-305 Slice 4) ---
+const definitionsCmd = program
+    .command('definitions')
+    .description('Inspect and compare workspace definitions');
+definitionsCmd
+    .command('diff [file]')
+    .description('Compare local dev-system-collections.json against server definitions (admin only)')
+    .action(async (file) => {
+    await runDefinitionsDiff({ file });
+});
+// --- Profile commands (WP-302 Slice 2) ---
+const profileCmd = program
+    .command('profile')
+    .description('Manage workspace profiles (multi-workspace support)');
+profileCmd
+    .command('list')
+    .description('List all profiles, mark active one')
+    .action(async () => {
+    await runProfileList();
+});
+profileCmd
+    .command('create <name>')
+    .description('Create a new profile with an API key, pasted at a prompt that does not show it, or piped in on one line')
+    .option('--api-key <key>', `API key (${API_KEY_PREFIX} or ${AGENT_KEY_PREFIX}); it stays in shell history, so paste it instead`)
+    .option('--url <url>', "Gateway for this key. Defaults to the gateway of this folder's pinned profile, else production.")
+    .action(async (name, opts) => {
+    await runProfileCreate({ name, apiKey: opts.apiKey, url: opts.url });
+});
+profileCmd
+    .command('use <name>')
+    .description('Switch profile: reconciles the repo pin + global by default. --local = repo pin only; --global = global only.')
+    .option('--local', 'Write the profile pin only to .productbrain/config.local.json (repo-local, gitignored)')
+    .option('--global', 'Switch only the global active profile (does not change a locally-pinned repo)')
+    .action(async (name, opts) => {
+    await runProfileUse({ name, local: opts.local, global: opts.global });
+});
+profileCmd
+    .command('delete <name>')
+    .description('Delete a profile (cannot delete active or last profile)')
+    .action(async (name) => {
+    await runProfileDelete({ name });
 });
-// --- Audit command (BET-182 Slice 2) ---
 program
-    .command('audit <entry-ids...>')
-    .description('Run STD-113 hygiene audit on bet(s) — 13 gates, exit code reflects verdict')
-    .option('--phase <phase>', 'Override phase detection (shaping | handoff)')
-    .option('--gate <name>', 'Run only specified gate(s) (repeatable)', (val, prev) => [...prev, val], [])
-    .option('--fix', 'Auto-execute exact fixes via pb update, rerun once')
-    .option('--verbose', 'Show all gates including PASS detail')
-    .action(async (entryIds, opts) => {
-    try {
-        await runAudit({
-            entryIds: entryIds.map((id) => id.trim()).filter(Boolean),
-            phase: opts.phase,
-            gate: opts.gate,
-            fix: opts.fix,
-            verbose: opts.verbose,
-        });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    .command('use <name>')
+    .description('Switch the active workspace profile (alias for `pb profile use`).')
+    .option('--local', 'Write the profile pin only to .productbrain/config.local.json (repo-local, gitignored)')
+    .option('--global', 'Switch only the global active profile (does not change a locally-pinned repo)')
+    .action(async (name, opts) => {
+    await runProfileUse({ name, local: opts.local, global: opts.global });
 });
+// --- Glossary command (WP-302 Slice 4) ---
 program
-    .command('brand-pack')
-    .description('Internal marketing: structured community copy via OpenRouter (requires OPENROUTER_API_KEY). Forwards args to scripts/brand-pack.mjs')
-    .allowUnknownOption(true)
-    .allowExcessArguments(true)
+    .command('glossary')
+    .description('Show the four platform glossary terms; pb search <word> finds your team terms')
     .action(() => {
-    runBrandPack(process.argv);
+    if (isJsonMode()) {
+        process.stdout.write(JSON.stringify(PLATFORM_GLOSSARY_TERMS) + '\n');
+        return;
+    }
+    const lines = [
+        '',
+        heading('Glossary'),
+        '',
+        formatGlossary(),
+        '',
+    ];
+    process.stdout.write(lines.join('\n') + '\n');
 });
-// --- Governance proposal commands (BET-221 Slice 3) ---
+// --- Usage command (WP-322 S4, FEAT-1011) ---
 program
-    .command('proposals')
-    .description('List open consent proposals with expiry countdown (BET-221)')
-    .action(async () => {
-    try {
-        await runProposals();
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    .command('usage')
+    .description('Session and activity dashboard — 4-tab Ink TUI')
+    .option('--json', 'Output machine-readable JSON (sessions, entries30d, activity array)')
+    .action(async (opts) => {
+    await runUsage({ json: opts.json });
 });
+// --- Proof-run command (WP-459: admin-proof bridge dogfood) ---
 program
-    .command('accept [proposal-id]')
-    .description('Approve a consent proposal by ID, or --auto to batch-approve all')
-    .option('-a, --auto', 'Auto-approve all open proposals (skip contradictions)')
-    .action(async (proposalId, opts) => {
-    if (!proposalId && !opts.auto) {
-        process.stderr.write('Usage: pb accept <proposal-id> or pb accept --auto\n');
-        process.exit(1);
-    }
-    try {
-        await runAccept({ proposalId, auto: opts.auto });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    .command('proof-run <proof-name>')
+    .description('Run an admin-only proof against the seeded preview via the proof bridge')
+    .action(async (proofName) => {
+    await runProofRun({ proofName: proofName.trim() });
 });
+// --- Admin command group (WP-312 S2, FEAT-969) ---
+program.addCommand(createAdminCommand());
+program.addCommand(createFeedbackCommand());
+program.addCommand(createConflictsCommand());
+program.addCommand(createQuestionCommand());
+program.addCommand(createDirectionCommand());
+program.addCommand(createOrganisationCommand());
+program.addCommand(createAcceptPolicyCommand());
+// --- Upgrade command (WP-322 S1: ambient update notification) ---
 program
-    .command('reject <proposal-id>')
-    .description('Reject a consent proposal with a required reason (BR-7)')
-    .requiredOption('-r, --reason <text>', 'Reason for rejection (required)')
-    .action(async (proposalId, opts) => {
-    try {
-        await runReject({ proposalId, reason: opts.reason });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    .command('upgrade')
+    .description(`Upgrade pb CLI to the latest beta (${CLI_INSTALL_COMMAND})`)
+    .action(async () => {
+    await runUpgrade({ currentVersion: cliPackageVersion.version });
 });
-program.parse();
+// Parse with global error handler — every error routes through handleError, which alone prints it (TASK-959)
+silenceCommanderErrors(program);
+program.parseAsync(process.argv).catch(handleError);
 //# sourceMappingURL=index.js.map