@productbrain/cli 0.1.0-beta.22 → 0.1.0-beta.2200

package/dist/commands/promote.js

@@ -4,11 +4,114 @@
  * Thin client: governance checks live in Convex (BR-104).
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCallWithSession } from '../lib/client.js';
+import { kernelCallWithSession } from '../lib/client.js';
 import { readSession } from '../lib/session.js';
-import { runCliCommand } from '../lib/runner.js';
+import { runCliCommand, isJsonMode } from '../lib/runner.js';
 import { formatPromoteReceipt } from '../formatters/promote.js';
+import { copy } from '../lib/style.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { emitWriteTargetNotice } from '../lib/workspaceNotice.js';
 const BLOCKING_CONTRADICTION_THRESHOLD = 0.75;
+/**
+ * Error categories that signal a GLOBAL precondition (not entry-specific): they fail
+ * every id in a batch identically, so the batch path rethrows them immediately rather
+ * than collecting them as per-entry failures. `validation` (not-found, contradiction)
+ * is entry-specific and stays collectable so one bad id never aborts the batch.
+ * `session` is global too — a closed/expired/wrong-workspace session (SESSION_REQUIRED,
+ * which McpError maps to category `session`) the server raises mid-batch dooms every
+ * remaining id, so it must surface the actionable session error, not a per-entry relabel.
+ */
+const GLOBAL_PRECONDITION_CATEGORIES = new Set([
+    'auth',
+    'network',
+    'config',
+    'session',
+]);
+/**
+ * Promote a single entry to active (commit to SSOT). Throws on any failure —
+ * the caller decides whether to propagate (single-id) or collect (batch).
+ */
+async function promoteOne(entryId, message, session, coherency, 
+// When true (single-id path only), a coherency refusal emits its machine-readable
+// payload to stdout before throwing. The batch path leaves this false so its single
+// JSON results array is never polluted by a mid-stream refusal line.
+surfaceRefusalJson = false) {
+    const entry = await kernelCallWithSession('chain.getEntry', { entryId });
+    if (!entry) {
+        throw new CLIError(`Entry ${entryId} not found.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Check the entry ID and try again. Use `pb search` to find entries.',
+        });
+    }
+    const description = (typeof entry.data?.description === 'string' ? entry.data.description : undefined) ??
+        (typeof entry.data?.rationale === 'string' ? entry.data.rationale : undefined) ??
+        '';
+    let conflicts = [];
+    try {
+        conflicts = (await kernelCallWithSession('chain.detectSemanticConflicts', {
+            name: entry.name,
+            description,
+            collectionHint: entry.collectionSlug ?? entry.collection?.slug ?? entry.collection?.name,
+        })) ?? [];
+    }
+    catch {
+        process.stderr.write('Warning: conflict detection unavailable — proceeding without contradiction check.\n');
+    }
+    const blockingContradiction = conflicts.find((conflict) => conflict.type === 'contradiction' && conflict.confidence >= BLOCKING_CONTRADICTION_THRESHOLD);
+    if (blockingContradiction) {
+        throw new CLIError(`Commit blocked by contradiction with ${blockingContradiction.chainEntryId}: ${blockingContradiction.explanation}`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Resolve the contradiction before committing. Use `pb get` to inspect the conflicting entry.',
+        });
+    }
+    const args = {
+        entryId,
+        author: `agent:${session.sessionId}`,
+        sessionId: session.sessionId,
+    };
+    if (message) {
+        args.commitMessage = message;
+    }
+    // WP-465 slice ⑤: coherency controls — relayed verbatim; the gate validates.
+    if (coherency?.overrideReason) {
+        args.steeringOverrideReason = coherency.overrideReason;
+    }
+    if (coherency?.acknowledge) {
+        args.coherencyAcknowledgement = {
+            response: coherency.acknowledge,
+            ...(coherency.ackEntry ? { entryId: coherency.ackEntry } : {}),
+            ...(coherency.ackReason ? { reason: coherency.ackReason } : {}),
+        };
+    }
+    // WP-B (attestation-model spec §4.3): the server auto-verifies an unverified
+    // agent entry as part of the promote itself (verifiedContext 'promote-gate'),
+    // so the old client-side verify-then-retry on a QUALITY_GATE_BLOCKED
+    // "verification" error-string match is dead code — deleted, not kept as a
+    // fallback (an old server's block still surfaces as a legible error).
+    const result = await kernelCallWithSession('chain.commitEntry', args);
+    // WP-465 slice ⑤ (Option B): the server RETURNS a structured refusal instead of
+    // throwing — surface it as an actionable failure, never as success.
+    const maybeRefused = result;
+    if (maybeRefused.status === 'coherency_refused') {
+        const refusal = maybeRefused.refusal;
+        // Mirror `pb update --json` (update.ts): emit the machine-readable refusal (subject +
+        // routes) to stdout BEFORE throwing so a --json agent can populate the retry controls
+        // (--acknowledge / --ack-entry / --override-reason) instead of scraping the generic
+        // error off stderr. Human (non-json) output is unchanged — the throw below carries it.
+        if (surfaceRefusalJson && refusal && isJsonMode()) {
+            process.stdout.write(JSON.stringify({ outcome: 'refused', refusal }) + '\n');
+        }
+        throw new CLIError(refusal?.reason ?? `Commit of ${entryId} was refused by the coherency gate.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Link the entry to the strategic spine and retry, or respond with --acknowledge <linked|accepted-fix|diverged> (--ack-entry / --ack-reason), or supply --override-reason "<why this stands alone>" (at least 12 characters).',
+        });
+    }
+    const name = ('name' in result && typeof result.name === 'string') ? result.name : entryId;
+    return { entryId, name, result };
+}
 export async function runPromote(options) {
     const config = await getConfigOrGuide(() => runPromote(options));
     if (!config)
@@ -16,60 +119,83 @@ export async function runPromote(options) {
     // Require active session (DEC-9, BR-8)
     const session = readSession();
     if (!session) {
-        process.stderr.write('No active session. Run `pb session start` first.\n');
-        process.stderr.write('Write access requires a tracked session (DEC-9).\n');
-        process.exit(1);
+        throw new CLIError(copy.noSession, {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: copy.sessionRequired,
+        });
     }
-    const entryId = options.entryId.trim();
-    if (!entryId) {
-        process.stderr.write('Entry ID is required. Usage: pb promote <entry-id>\n');
-        process.exit(1);
+    const ids = (options.entryIds ?? (options.entryId !== undefined ? [options.entryId] : []))
+        .map((id) => id.trim())
+        .filter(Boolean);
+    if (ids.length === 0) {
+        throw new CLIError('Entry ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb promote <entry-id> [<entry-id>...]',
+        });
     }
-    await runCliCommand({
-        fn: async () => {
-            const entry = await mcpCallWithSession('chain.getEntry', { entryId });
-            if (!entry) {
-                throw new Error(`Entry ${entryId} not found.`);
-            }
-            const description = (typeof entry.data?.description === 'string' ? entry.data.description : undefined) ??
-                (typeof entry.data?.rationale === 'string' ? entry.data.rationale : undefined) ??
-                '';
-            let conflicts = [];
-            try {
-                conflicts = (await mcpCallWithSession('chain.detectSemanticConflicts', {
-                    name: entry.name,
-                    description,
-                    collectionHint: entry.collectionSlug ?? entry.collection?.slug ?? entry.collection?.name,
-                })) ?? [];
-            }
-            catch {
-                process.stderr.write('Warning: conflict detection unavailable — proceeding without contradiction check.\n');
+    // WP-1: name the target workspace before the write (stderr, gated by json). Covers both
+    // the single and batch paths below.
+    await emitWriteTargetNotice(isJsonMode());
+    // Single-entry path: preserve exact error propagation + JSON behavior (back-compat).
+    if (ids.length === 1) {
+        await runCliCommand({
+            fn: () => promoteOne(ids[0], options.message, session, options, true),
+            formatPretty: (data) => formatPromoteReceipt({
+                entryId: data.entryId,
+                name: data.name,
+                commitMessage: options.message,
+                result: data.result,
+            }),
+        });
+        return;
+    }
+    // Batch path (INS-1813): attempt each independently — a single failure must NOT
+    // abort the rest of the batch.
+    const results = [];
+    for (const id of ids) {
+        try {
+            const data = await promoteOne(id, options.message, session, options);
+            results.push({ entryId: id, ok: true, data });
+        }
+        catch (err) {
+            // A global precondition — expired/invalid key (auth), network down, bad config —
+            // fails every remaining id identically. Rethrow it untouched so the batch fails
+            // fast and the caller sees the real code/category/guidance, instead of retrying
+            // each id and masking it as a per-entry VALIDATION_FAILED (the single-id path
+            // preserves these errors; the batch path must too). Entry-specific failures
+            // (validation: not-found, contradiction) are collected so one bad id never
+            // aborts the rest of the batch (INS-1813).
+            if (err instanceof CLIError && GLOBAL_PRECONDITION_CATEGORIES.has(err.category)) {
+                throw err;
             }
-            const blockingContradiction = conflicts.find((conflict) => conflict.type === 'contradiction' && conflict.confidence >= BLOCKING_CONTRADICTION_THRESHOLD);
-            if (blockingContradiction) {
-                throw new Error(`Commit blocked by contradiction with ${blockingContradiction.chainEntryId}: ${blockingContradiction.explanation}`);
+            results.push({ entryId: id, ok: false, error: err instanceof Error ? err.message : String(err) });
+        }
+    }
+    const failed = results.filter((r) => !r.ok);
+    if (isJsonMode()) {
+        process.stdout.write(JSON.stringify(results.map((r) => (r.ok ? { entryId: r.entryId, ok: true } : { entryId: r.entryId, ok: false, error: r.error }))) + '\n');
+    }
+    else {
+        for (const r of results) {
+            if (r.ok && r.data) {
+                process.stdout.write(formatPromoteReceipt({ entryId: r.data.entryId, name: r.data.name, commitMessage: options.message, result: r.data.result }) + '\n');
             }
-            const args = {
-                entryId,
-                author: `agent:${session.sessionId}`,
-                sessionId: session.sessionId,
-            };
-            if (options.message) {
-                args.commitMessage = options.message;
+            else {
+                process.stdout.write(`Failed ${r.entryId}: ${r.error}\n`);
             }
-            const result = await mcpCallWithSession('chain.commitEntry', args);
-            // Resolve display name from result
-            const name = ('name' in result && typeof result.name === 'string')
-                ? result.name
-                : entryId;
-            return { entryId, name, result };
-        },
-        formatPretty: (data) => formatPromoteReceipt({
-            entryId: data.entryId,
-            name: data.name,
-            commitMessage: options.message,
-            result: data.result,
-        }),
-    });
+        }
+        process.stdout.write(`\nBatch promote: ${results.length - failed.length}/${results.length} promoted` +
+            (failed.length ? `, ${failed.length} failed (${failed.map((f) => f.entryId).join(', ')})` : '') +
+            '.\n');
+    }
+    if (failed.length > 0) {
+        throw new CLIError(`${failed.length} of ${results.length} promotion(s) failed: ${failed.map((f) => f.entryId).join(', ')}.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Inspect the failures above, then re-run `pb promote <entry-id>` for each that failed.',
+        });
+    }
 }
 //# sourceMappingURL=promote.js.map

package/dist/commands/promote.js.map

@@ -1 +1 @@
-{"version":3,"file":"promote.js","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAA0B,MAAM,0BAA0B,CAAC;AA4BxF,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,uCAAuC;IACvC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,aAAa,CAAgB;QACjC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAsB,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,aAAa,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,WAAW,GACf,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClF,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9E,EAAE,CAAC;YACL,IAAI,SAAS,GAAuB,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,SAAS,GAAG,CAAC,MAAM,kBAAkB,CAA4B,+BAA+B,EAAE;oBAChG,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,WAAW;oBACX,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI;iBACzF,CAAC,CAAC,IAAI,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,qBAAqB,GAAG,SAAS,CAAC,IAAI,CAC1C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,UAAU,IAAI,gCAAgC,CAC3G,CAAC;YACF,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,wCAAwC,qBAAqB,CAAC,YAAY,KAAK,qBAAqB,CAAC,WAAW,EAAE,CACnH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAA4B;gBACpC,OAAO;gBACP,MAAM,EAAE,SAAS,OAAO,CAAC,SAAS,EAAE;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAoB,mBAAmB,EAAE,IAAI,CAAC,CAAC;YAEtF,mCAAmC;YACnC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAChE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,OAAO,CAAC;YAEZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,OAAO,CAAC,OAAO;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"promote.js","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAA0B,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAsB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAsDlE,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,8BAA8B,GAA+B,IAAI,GAAG,CAAC;IACzE,MAAM;IACN,SAAS;IACT,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,UAAU,UAAU,CACvB,OAAe,EACf,OAA2B,EAC3B,OAA8B,EAC9B,SAA6F;AAC7F,kFAAkF;AAClF,oFAAoF;AACpF,qEAAqE;AACrE,kBAAkB,GAAG,KAAK;IAE1B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAsB,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,SAAS,OAAO,aAAa,EAAE;YAChD,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,oEAAoE;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GACf,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,EAAE,CAAC;IACL,IAAI,SAAS,GAAuB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,qBAAqB,CAA4B,+BAA+B,EAAE;YACnG,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW;YACX,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI;SACzF,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,qBAAqB,GAAG,SAAS,CAAC,IAAI,CAC1C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,UAAU,IAAI,gCAAgC,CAC3G,CAAC;IACF,IAAI,qBAAqB,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAChB,wCAAwC,qBAAqB,CAAC,YAAY,KAAK,qBAAqB,CAAC,WAAW,EAAE,EAClH;YACE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,6FAA6F;SACxG,CACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAA4B;QACpC,OAAO;QACP,MAAM,EAAE,SAAS,OAAO,CAAC,SAAS,EAAE;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;IAC/B,CAAC;IACD,6EAA6E;IAC7E,IAAI,SAAS,EAAE,cAAc,EAAE,CAAC;QAC9B,IAAI,CAAC,sBAAsB,GAAG,SAAS,CAAC,cAAc,CAAC;IACzD,CAAC;IACD,IAAI,SAAS,EAAE,WAAW,EAAE,CAAC;QAC3B,IAAI,CAAC,wBAAwB,GAAG;YAC9B,QAAQ,EAAE,SAAS,CAAC,WAAW;YAC/B,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,qEAAqE;IACrE,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAoB,mBAAmB,EAAE,IAAI,CAAC,CAAC;IAEzF,gFAAgF;IAChF,oEAAoE;IACpE,MAAM,YAAY,GAAG,MAA2E,CAAC;IACjG,IAAI,YAAY,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;QACrC,sFAAsF;QACtF,sFAAsF;QACtF,oFAAoF;QACpF,uFAAuF;QACvF,IAAI,kBAAkB,IAAI,OAAO,IAAI,UAAU,EAAE,EAAE,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,OAAO,EAAE,MAAM,IAAI,aAAa,OAAO,qCAAqC,EAC5E;YACE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EACN,6NAA6N;SAChO,CACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,uCAAuC;IACvC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;YACjC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,IAAI,CAAC,eAAe;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACvF,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE;YAC1C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,8CAA8C;SACzD,CAAC,CAAC;IACL,CAAC;IAED,wFAAwF;IACxF,oCAAoC;IACpC,MAAM,qBAAqB,CAAC,UAAU,EAAE,CAAC,CAAC;IAE1C,qFAAqF;IACrF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,aAAa,CAAgB;YACjC,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;YACrE,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC;gBAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,OAAO,CAAC,OAAO;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;SACH,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,gFAAgF;IAChF,+BAA+B;IAC/B,MAAM,OAAO,GAAkF,EAAE,CAAC;IAClG,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iFAAiF;YACjF,gFAAgF;YAChF,gFAAgF;YAChF,8EAA8E;YAC9E,4EAA4E;YAC5E,2EAA2E;YAC3E,2CAA2C;YAC3C,IAAI,GAAG,YAAY,QAAQ,IAAI,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChF,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE5C,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CACzI,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CACnI,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,WAAW;YAC7E,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,KAAK,CACR,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,QAAQ,CAChB,GAAG,MAAM,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,yBAAyB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACxG;YACE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,uFAAuF;SAClG,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/commands/proof-run.d.ts

@@ -0,0 +1,51 @@
+/**
+ * pb proof-run <proof-name> — run an admin-only proof against the seeded preview
+ * via the WP-459 proof bridge.
+ *
+ * NOT a kernel/MCP call: the bridge is a token-gated httpAction with a SIMPLER
+ * envelope than /api/aki. It authenticates with the short-lived preview admin
+ * token (pb_pat_…) minted into .productbrain/preview-admin.json by the seed
+ * (scripts/seed-preview.mjs step 7) — NOT the pb API key. So this command does
+ * not call getConfig()/kernelCall(); it reads the throwaway token from disk and
+ * POSTs directly to {siteUrl}/api/admin/proof-run.
+ *
+ *   Success → HTTP 200 { data: <verdict> } (verdict may carry zeroHandAuthoringProven)
+ *   Failure → non-200 { error, code }
+ *
+ * Chain: WP-459 (Admin-proof bridge).
+ */
+/** Resolved inputs for a proof-bridge call. */
+export interface ProofBridgeInputs {
+    siteUrl: string;
+    rawToken: string;
+    workspaceId: string;
+    /** Server-enforced expiry (ms epoch), if the token record carried one. */
+    expiresAt?: number;
+}
+/**
+ * Resolve the proof-bridge inputs (siteUrl, rawToken, workspaceId) from the
+ * worktree's seed sidecars. Pure + testable: takes the project root explicitly,
+ * throws CLIError with actionable guidance on any missing/invalid file.
+ */
+export declare function resolveProofBridgeInputs(projectRoot: string): ProofBridgeInputs;
+/** Parsed bridge response — discriminated on `ok`. */
+type BridgeResult = {
+    ok: true;
+    data: unknown;
+} | {
+    ok: false;
+    error: string;
+    code: string;
+};
+/**
+ * POST to the proof bridge and parse its simple envelope ({ data } / { error, code }).
+ * Uses an AbortController timeout (mirrors lib/client.js). Network / non-JSON
+ * failures surface as a structured { ok: false } so the caller can exit non-zero.
+ */
+export declare function callProofBridge(inputs: ProofBridgeInputs, proofName: string, timeoutMs?: number): Promise<BridgeResult>;
+interface ProofRunOptions {
+    proofName: string;
+}
+export declare function runProofRun(options: ProofRunOptions): Promise<void>;
+export {};
+//# sourceMappingURL=proof-run.d.ts.map

package/dist/commands/proof-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-run.d.ts","sourceRoot":"","sources":["../../src/commands/proof-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAuBH,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAeD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,CA8E/E;AAED,sDAAsD;AACtD,KAAK,YAAY,GACb;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,MAAM,EACjB,SAAS,SAAS,GACjB,OAAO,CAAC,YAAY,CAAC,CA8CvB;AAED,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAgEzE"}

package/dist/commands/proof-run.js

@@ -0,0 +1,209 @@
+/**
+ * pb proof-run <proof-name> — run an admin-only proof against the seeded preview
+ * via the WP-459 proof bridge.
+ *
+ * NOT a kernel/MCP call: the bridge is a token-gated httpAction with a SIMPLER
+ * envelope than /api/aki. It authenticates with the short-lived preview admin
+ * token (pb_pat_…) minted into .productbrain/preview-admin.json by the seed
+ * (scripts/seed-preview.mjs step 7) — NOT the pb API key. So this command does
+ * not call getConfig()/kernelCall(); it reads the throwaway token from disk and
+ * POSTs directly to {siteUrl}/api/admin/proof-run.
+ *
+ *   Success → HTTP 200 { data: <verdict> } (verdict may carry zeroHandAuthoringProven)
+ *   Failure → non-200 { error, code }
+ *
+ * Chain: WP-459 (Admin-proof bridge).
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { findProjectRoot } from '../lib/config.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { green, red, bold, dim, icons } from '../lib/style.js';
+/** Convert a Convex `.cloud` URL to its `.site` sibling, trailing slash stripped. */
+function toSiteUrl(convexUrl) {
+    return convexUrl.replace('.convex.cloud', '.convex.site').replace(/\/$/, '');
+}
+function readJsonFile(path) {
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve the proof-bridge inputs (siteUrl, rawToken, workspaceId) from the
+ * worktree's seed sidecars. Pure + testable: takes the project root explicitly,
+ * throws CLIError with actionable guidance on any missing/invalid file.
+ */
+export function resolveProofBridgeInputs(projectRoot) {
+    const seedPath = resolve(projectRoot, '.convex-seed.json');
+    if (!existsSync(seedPath)) {
+        throw new CLIError('No seeded preview found (.convex-seed.json missing).', {
+            code: ErrorCode.CONFIG_MISSING,
+            category: 'config',
+            guidance: 'Run `npm run convex:reprovision` first.',
+        });
+    }
+    const seed = readJsonFile(seedPath);
+    if (!seed) {
+        throw new CLIError('Could not parse .convex-seed.json.', {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Re-run `npm run convex:reprovision` to regenerate it.',
+        });
+    }
+    const adminPath = resolve(projectRoot, '.productbrain', 'preview-admin.json');
+    if (!existsSync(adminPath)) {
+        throw new CLIError('No preview admin token (.productbrain/preview-admin.json missing).', {
+            code: ErrorCode.CONFIG_MISSING,
+            category: 'config',
+            guidance: 'Run `npm run convex:reprovision` to mint one.',
+        });
+    }
+    const admin = readJsonFile(adminPath);
+    if (!admin?.rawToken) {
+        throw new CLIError('preview-admin.json is missing its rawToken.', {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Run `npm run convex:reprovision` to mint a fresh token.',
+        });
+    }
+    // Stale-sidecar guard: both sidecars are written by the SAME seed run, so their
+    // workspaceIds MUST agree. A mismatch means preview-admin.json is left over from an
+    // earlier preview — and because we prefer its pinned values below, using it would aim
+    // the proof at that stale (possibly still-live) deployment while THIS worktree's preview
+    // goes unexercised. Fail closed rather than silently proving the wrong workspace.
+    if (seed.workspaceId && admin.workspaceId && seed.workspaceId !== admin.workspaceId) {
+        throw new CLIError(`Stale preview admin token: preview-admin.json is pinned to workspace ${admin.workspaceId}, ` +
+            `but the current seed (.convex-seed.json) is workspace ${seed.workspaceId}.`, {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Run `npm run convex:reprovision` to re-mint the admin token for the current preview.',
+        });
+    }
+    // Prefer the pinned values from preview-admin.json; fall back to the seed sidecar.
+    const siteUrl = admin.siteUrl ?? (seed.convexUrl ? toSiteUrl(seed.convexUrl) : undefined);
+    if (!siteUrl) {
+        throw new CLIError('Could not determine the preview site URL.', {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Re-run `npm run convex:reprovision` to regenerate the seed sidecars.',
+        });
+    }
+    const workspaceId = admin.workspaceId ?? seed.workspaceId;
+    if (!workspaceId) {
+        throw new CLIError('Could not determine the preview workspaceId.', {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Re-run `npm run convex:reprovision` to regenerate the seed sidecars.',
+        });
+    }
+    return {
+        siteUrl: siteUrl.replace(/\/$/, ''),
+        rawToken: admin.rawToken,
+        workspaceId,
+        expiresAt: typeof admin.expiresAt === 'number' ? admin.expiresAt : undefined,
+    };
+}
+/**
+ * POST to the proof bridge and parse its simple envelope ({ data } / { error, code }).
+ * Uses an AbortController timeout (mirrors lib/client.js). Network / non-JSON
+ * failures surface as a structured { ok: false } so the caller can exit non-zero.
+ */
+export async function callProofBridge(inputs, proofName, timeoutMs = 30_000) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let res;
+    try {
+        res = await fetch(`${inputs.siteUrl}/api/admin/proof-run`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'x-pb-admin-token': inputs.rawToken,
+            },
+            body: JSON.stringify({ proofName, workspaceId: inputs.workspaceId }),
+            signal: controller.signal,
+        });
+    }
+    catch (err) {
+        clearTimeout(timer);
+        const msg = err instanceof Error ? err.message : String(err);
+        const reason = msg === 'The operation was aborted' || msg.includes('abort')
+            ? `Request timed out after ${timeoutMs}ms`
+            : `Could not reach the proof bridge (${msg})`;
+        return { ok: false, error: reason, code: 'NETWORK_UNREACHABLE' };
+    }
+    clearTimeout(timer);
+    const body = (await res.json().catch(() => null));
+    if (!body) {
+        return {
+            ok: false,
+            error: `Bridge returned a non-JSON response (HTTP ${res.status}).`,
+            code: 'BAD_RESPONSE',
+        };
+    }
+    if (res.ok) {
+        return { ok: true, data: body.data };
+    }
+    return {
+        ok: false,
+        error: body.error ?? res.statusText ?? `HTTP ${res.status}`,
+        code: body.code ?? `HTTP_${res.status}`,
+    };
+}
+export async function runProofRun(options) {
+    const proofName = options.proofName.trim();
+    if (!proofName) {
+        throw new CLIError('Proof name is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb proof-run <proof-name>',
+        });
+    }
+    const projectRoot = findProjectRoot(process.cwd());
+    if (!projectRoot) {
+        throw new CLIError('Not inside a Product Brain project (no .productbrain/ found).', {
+            code: ErrorCode.CONFIG_MISSING,
+            category: 'config',
+            guidance: 'Run this from a worktree with a seeded preview (npm run convex:reprovision).',
+        });
+    }
+    const inputs = resolveProofBridgeInputs(projectRoot);
+    // Friendly pre-check — the server is the authority, so we still attempt the call.
+    if (inputs.expiresAt && Date.now() > inputs.expiresAt) {
+        process.stderr.write(`${icons.warn} preview admin token looks expired (${new Date(inputs.expiresAt).toISOString()}); ` +
+            `run \`npm run convex:reprovision\` to mint a fresh one.\n`);
+    }
+    const result = await callProofBridge(inputs, proofName);
+    if (!result.ok) {
+        throw new CLIError(`Proof bridge rejected the run: ${result.error}`, {
+            code: ErrorCode.INTERNAL,
+            category: 'internal',
+            guidance: `Bridge error code: ${result.code}`,
+        });
+    }
+    const verdict = result.data;
+    const proven = verdict && typeof verdict === 'object' && 'zeroHandAuthoringProven' in verdict
+        ? verdict.zeroHandAuthoringProven
+        : undefined;
+    if (typeof proven === 'boolean') {
+        const mark = proven ? green(icons.pass) : red(icons.fail);
+        process.stdout.write(`${mark} ${bold('zeroHandAuthoringProven')}: ${proven}\n`);
+    }
+    process.stdout.write(`${dim(`proof: ${proofName}`)}\n`);
+    process.stdout.write(JSON.stringify(verdict, null, 2) + '\n');
+    // A recognized proof boolean that came back `false` is a FAILED proof, not a successful
+    // run. This command is the agent-surface smoke proof, so its exit status must reflect the
+    // verdict — exit non-zero so operators/CI don't read a failed proof as passing. (We still
+    // print the full verdict above first.) Unrecognized verdicts (no boolean) stay exit-0:
+    // we can't adjudicate a proof we don't model.
+    if (proven === false) {
+        throw new CLIError(`Proof "${proofName}" did not hold: zeroHandAuthoringProven=false.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'The seeded policy seam resolved away from the zero-hand-authoring default — inspect the verdict above.',
+        });
+    }
+}
+//# sourceMappingURL=proof-run.js.map

package/dist/commands/proof-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-run.js","sourceRoot":"","sources":["../../src/commands/proof-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AA0B/D,qFAAqF;AACrF,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,sDAAsD,EAAE;YACzE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,yCAAyC;SACpD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAa,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,oCAAoC,EAAE;YACvD,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,uDAAuD;SAClE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;IAC9E,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,oEAAoE,EAAE;YACvF,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,+CAA+C;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAmB,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,6CAA6C,EAAE;YAChE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,oFAAoF;IACpF,sFAAsF;IACtF,yFAAyF;IACzF,kFAAkF;IAClF,IAAI,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACpF,MAAM,IAAI,QAAQ,CAChB,wEAAwE,KAAK,CAAC,WAAW,IAAI;YAC3F,yDAAyD,IAAI,CAAC,WAAW,GAAG,EAC9E;YACE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,sFAAsF;SACjG,CACF,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,2CAA2C,EAAE;YAC9D,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,sEAAsE;SACjF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;IAC1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,8CAA8C,EAAE;YACjE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,sEAAsE;SACjF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW;QACX,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC;AACJ,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAyB,EACzB,SAAiB,EACjB,SAAS,GAAG,MAAM;IAElB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAE9D,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,sBAAsB,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,MAAM,CAAC,QAAQ;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,GAAG,KAAK,2BAA2B,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzE,CAAC,CAAC,2BAA2B,SAAS,IAAI;YAC1C,CAAC,CAAC,qCAAqC,GAAG,GAAG,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IACnE,CAAC;IACD,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAExC,CAAC;IAET,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,6CAA6C,GAAG,CAAC,MAAM,IAAI;YAClE,IAAI,EAAE,cAAc;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE;QAC3D,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE;KACxC,CAAC;AACJ,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,kCAAkC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,+DAA+D,EAAE;YAClF,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,8EAA8E;SACzF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAErD,kFAAkF;IAClF,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,KAAK,CAAC,IAAI,uCAAuC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK;YAC/F,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAExD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,kCAAkC,MAAM,CAAC,KAAK,EAAE,EAAE;YACnE,IAAI,EAAE,SAAS,CAAC,QAAQ;YACxB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,sBAAsB,MAAM,CAAC,IAAI,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,MAAM,MAAM,GACV,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,yBAAyB,IAAI,OAAO;QAC5E,CAAC,CAAE,OAAgD,CAAC,uBAAuB;QAC3E,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,OAAO,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,yBAAyB,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,UAAU,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAE9D,wFAAwF;IACxF,0FAA0F;IAC1F,0FAA0F;IAC1F,uFAAuF;IACvF,8CAA8C;IAC9C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,UAAU,SAAS,gDAAgD,EAAE;YACtF,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,wGAAwG;SACnH,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/commands/proposals.js

@@ -6,7 +6,7 @@
  * Read-only — no active session required.
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCall } from '../lib/client.js';
+import { kernelCall } from '../lib/client.js';
 import { runCliCommand } from '../lib/runner.js';
 import { formatProposalsList } from '../formatters/proposals.js';
 export async function runProposals() {
@@ -15,7 +15,7 @@ export async function runProposals() {
         return;
     await runCliCommand({
         fn: async () => {
-            const proposals = await mcpCall('governance.listProposals', {});
+            const proposals = await kernelCall('governance.listProposals', {});
             return { proposals, count: proposals.length };
         },
         formatPretty: (data) => formatProposalsList(data),

package/dist/commands/proposals.js.map

@@ -1 +1 @@
-{"version":3,"file":"proposals.js","sourceRoot":"","sources":["../../src/commands/proposals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA6C,MAAM,4BAA4B,CAAC;AAE5G,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,SAAS,GAAG,MAAM,OAAO,CAAiB,0BAA0B,EAAE,EAAE,CAAC,CAAC;YAChF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"proposals.js","sourceRoot":"","sources":["../../src/commands/proposals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA6C,MAAM,4BAA4B,CAAC;AAE5G,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,SAAS,GAAG,MAAM,UAAU,CAAiB,0BAA0B,EAAE,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/reject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reject.d.ts","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BrE"}
+{"version":3,"file":"reject.d.ts","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCrE"}

package/dist/commands/reject.js

@@ -6,26 +6,33 @@
  * Reason is mandatory — objections must be explained (BR-7).
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCall } from '../lib/client.js';
+import { kernelCall } from '../lib/client.js';
 import { runCliCommand } from '../lib/runner.js';
 import { formatRejectReceipt } from '../formatters/proposals.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
 export async function runReject(options) {
     const config = await getConfigOrGuide(() => runReject(options));
     if (!config)
         return;
     const proposalId = options.proposalId?.trim();
     if (!proposalId) {
-        process.stderr.write('Proposal ID is required. Usage: pb reject <id> --reason "..."\n');
-        process.exit(1);
+        throw new CLIError('Proposal ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb reject <id> --reason "..."',
+        });
     }
     if (!options.reason?.trim()) {
-        process.stderr.write('A reason is required when rejecting. Usage: pb reject <id> --reason "..."\n');
-        process.stderr.write('Governance requires that objections are explained (BR-7).\n');
-        process.exit(1);
+        throw new CLIError('A reason is required when rejecting.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            // BR-7
+            guidance: 'Governance requires that objections are explained. Usage: pb reject <id> --reason "..."',
+        });
     }
     await runCliCommand({
         fn: async () => {
-            return await mcpCall('governance.respondToProposal', {
+            return await kernelCall('governance.respondToProposal', {
                 proposalId,
                 verdict: 'reject',
                 reason: options.reason.trim(),