@productbrain/cli 0.1.0-beta.29 → 0.1.0-beta.2902

package/dist/commands/proof-run.js

@@ -0,0 +1,209 @@
+/**
+ * pb proof-run <proof-name> — run an admin-only proof against the seeded preview
+ * via the WP-459 proof bridge.
+ *
+ * NOT a kernel/MCP call: the bridge is a token-gated httpAction with a SIMPLER
+ * envelope than /api/aki. It authenticates with the short-lived preview admin
+ * token (pb_pat_…) minted into .productbrain/preview-admin.json by the seed
+ * (scripts/seed-preview.mjs step 7) — NOT the pb API key. So this command does
+ * not call getConfig()/kernelCall(); it reads the throwaway token from disk and
+ * POSTs directly to {siteUrl}/api/admin/proof-run.
+ *
+ *   Success → HTTP 200 { data: <verdict> } (verdict may carry zeroHandAuthoringProven)
+ *   Failure → non-200 { error, code }
+ *
+ * Chain: WP-459 (Admin-proof bridge).
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { findProjectRoot } from '../lib/config.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { green, red, bold, dim, icons } from '../lib/style.js';
+/** Convert a Convex `.cloud` URL to its `.site` sibling, trailing slash stripped. */
+function toSiteUrl(convexUrl) {
+    return convexUrl.replace('.convex.cloud', '.convex.site').replace(/\/$/, '');
+}
+function readJsonFile(path) {
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve the proof-bridge inputs (siteUrl, rawToken, workspaceId) from the
+ * worktree's seed sidecars. Pure + testable: takes the project root explicitly,
+ * throws CLIError with actionable guidance on any missing/invalid file.
+ */
+export function resolveProofBridgeInputs(projectRoot) {
+    const seedPath = resolve(projectRoot, '.convex-seed.json');
+    if (!existsSync(seedPath)) {
+        throw new CLIError('No seeded preview found (.convex-seed.json missing).', {
+            code: ErrorCode.CONFIG_MISSING,
+            category: 'config',
+            guidance: 'Run `npm run convex:reprovision` first.',
+        });
+    }
+    const seed = readJsonFile(seedPath);
+    if (!seed) {
+        throw new CLIError('Could not parse .convex-seed.json.', {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Re-run `npm run convex:reprovision` to regenerate it.',
+        });
+    }
+    const adminPath = resolve(projectRoot, '.productbrain', 'preview-admin.json');
+    if (!existsSync(adminPath)) {
+        throw new CLIError('No preview admin token (.productbrain/preview-admin.json missing).', {
+            code: ErrorCode.CONFIG_MISSING,
+            category: 'config',
+            guidance: 'Run `npm run convex:reprovision` to mint one.',
+        });
+    }
+    const admin = readJsonFile(adminPath);
+    if (!admin?.rawToken) {
+        throw new CLIError('preview-admin.json is missing its rawToken.', {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Run `npm run convex:reprovision` to mint a fresh token.',
+        });
+    }
+    // Stale-sidecar guard: both sidecars are written by the SAME seed run, so their
+    // workspaceIds MUST agree. A mismatch means preview-admin.json is left over from an
+    // earlier preview — and because we prefer its pinned values below, using it would aim
+    // the proof at that stale (possibly still-live) deployment while THIS worktree's preview
+    // goes unexercised. Fail closed rather than silently proving the wrong workspace.
+    if (seed.workspaceId && admin.workspaceId && seed.workspaceId !== admin.workspaceId) {
+        throw new CLIError(`Stale preview admin token: preview-admin.json is pinned to workspace ${admin.workspaceId}, ` +
+            `but the current seed (.convex-seed.json) is workspace ${seed.workspaceId}.`, {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Run `npm run convex:reprovision` to re-mint the admin token for the current preview.',
+        });
+    }
+    // Prefer the pinned values from preview-admin.json; fall back to the seed sidecar.
+    const siteUrl = admin.siteUrl ?? (seed.convexUrl ? toSiteUrl(seed.convexUrl) : undefined);
+    if (!siteUrl) {
+        throw new CLIError('Could not determine the preview site URL.', {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Re-run `npm run convex:reprovision` to regenerate the seed sidecars.',
+        });
+    }
+    const workspaceId = admin.workspaceId ?? seed.workspaceId;
+    if (!workspaceId) {
+        throw new CLIError('Could not determine the preview workspaceId.', {
+            code: ErrorCode.CONFIG_INVALID,
+            category: 'config',
+            guidance: 'Re-run `npm run convex:reprovision` to regenerate the seed sidecars.',
+        });
+    }
+    return {
+        siteUrl: siteUrl.replace(/\/$/, ''),
+        rawToken: admin.rawToken,
+        workspaceId,
+        expiresAt: typeof admin.expiresAt === 'number' ? admin.expiresAt : undefined,
+    };
+}
+/**
+ * POST to the proof bridge and parse its simple envelope ({ data } / { error, code }).
+ * Uses an AbortController timeout (mirrors lib/client.js). Network / non-JSON
+ * failures surface as a structured { ok: false } so the caller can exit non-zero.
+ */
+export async function callProofBridge(inputs, proofName, timeoutMs = 30_000) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let res;
+    try {
+        res = await fetch(`${inputs.siteUrl}/api/admin/proof-run`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'x-pb-admin-token': inputs.rawToken,
+            },
+            body: JSON.stringify({ proofName, workspaceId: inputs.workspaceId }),
+            signal: controller.signal,
+        });
+    }
+    catch (err) {
+        clearTimeout(timer);
+        const msg = err instanceof Error ? err.message : String(err);
+        const reason = msg === 'The operation was aborted' || msg.includes('abort')
+            ? `Request timed out after ${timeoutMs}ms`
+            : `Could not reach the proof bridge (${msg})`;
+        return { ok: false, error: reason, code: 'NETWORK_UNREACHABLE' };
+    }
+    clearTimeout(timer);
+    const body = (await res.json().catch(() => null));
+    if (!body) {
+        return {
+            ok: false,
+            error: `Bridge returned a non-JSON response (HTTP ${res.status}).`,
+            code: 'BAD_RESPONSE',
+        };
+    }
+    if (res.ok) {
+        return { ok: true, data: body.data };
+    }
+    return {
+        ok: false,
+        error: body.error ?? res.statusText ?? `HTTP ${res.status}`,
+        code: body.code ?? `HTTP_${res.status}`,
+    };
+}
+export async function runProofRun(options) {
+    const proofName = options.proofName.trim();
+    if (!proofName) {
+        throw new CLIError('Proof name is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb proof-run <proof-name>',
+        });
+    }
+    const projectRoot = findProjectRoot(process.cwd());
+    if (!projectRoot) {
+        throw new CLIError('Not inside a Product Brain project (no .productbrain/ found).', {
+            code: ErrorCode.CONFIG_MISSING,
+            category: 'config',
+            guidance: 'Run this from a worktree with a seeded preview (npm run convex:reprovision).',
+        });
+    }
+    const inputs = resolveProofBridgeInputs(projectRoot);
+    // Friendly pre-check — the server is the authority, so we still attempt the call.
+    if (inputs.expiresAt && Date.now() > inputs.expiresAt) {
+        process.stderr.write(`${icons.warn} preview admin token looks expired (${new Date(inputs.expiresAt).toISOString()}); ` +
+            `run \`npm run convex:reprovision\` to mint a fresh one.\n`);
+    }
+    const result = await callProofBridge(inputs, proofName);
+    if (!result.ok) {
+        throw new CLIError(`Proof bridge rejected the run: ${result.error}`, {
+            code: ErrorCode.INTERNAL,
+            category: 'internal',
+            guidance: `Bridge error code: ${result.code}`,
+        });
+    }
+    const verdict = result.data;
+    const proven = verdict && typeof verdict === 'object' && 'zeroHandAuthoringProven' in verdict
+        ? verdict.zeroHandAuthoringProven
+        : undefined;
+    if (typeof proven === 'boolean') {
+        const mark = proven ? green(icons.pass) : red(icons.fail);
+        process.stdout.write(`${mark} ${bold('zeroHandAuthoringProven')}: ${proven}\n`);
+    }
+    process.stdout.write(`${dim(`proof: ${proofName}`)}\n`);
+    process.stdout.write(JSON.stringify(verdict, null, 2) + '\n');
+    // A recognized proof boolean that came back `false` is a FAILED proof, not a successful
+    // run. This command is the agent-surface smoke proof, so its exit status must reflect the
+    // verdict — exit non-zero so operators/CI don't read a failed proof as passing. (We still
+    // print the full verdict above first.) Unrecognized verdicts (no boolean) stay exit-0:
+    // we can't adjudicate a proof we don't model.
+    if (proven === false) {
+        throw new CLIError(`Proof "${proofName}" did not hold: zeroHandAuthoringProven=false.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'The seeded policy seam resolved away from the zero-hand-authoring default — inspect the verdict above.',
+        });
+    }
+}
+//# sourceMappingURL=proof-run.js.map

package/dist/commands/proof-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-run.js","sourceRoot":"","sources":["../../src/commands/proof-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AA0B/D,qFAAqF;AACrF,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,sDAAsD,EAAE;YACzE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,yCAAyC;SACpD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAa,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,oCAAoC,EAAE;YACvD,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,uDAAuD;SAClE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;IAC9E,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,oEAAoE,EAAE;YACvF,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,+CAA+C;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAmB,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,6CAA6C,EAAE;YAChE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,oFAAoF;IACpF,sFAAsF;IACtF,yFAAyF;IACzF,kFAAkF;IAClF,IAAI,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACpF,MAAM,IAAI,QAAQ,CAChB,wEAAwE,KAAK,CAAC,WAAW,IAAI;YAC3F,yDAAyD,IAAI,CAAC,WAAW,GAAG,EAC9E;YACE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,sFAAsF;SACjG,CACF,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,2CAA2C,EAAE;YAC9D,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,sEAAsE;SACjF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;IAC1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,8CAA8C,EAAE;YACjE,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,sEAAsE;SACjF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW;QACX,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC;AACJ,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAyB,EACzB,SAAiB,EACjB,SAAS,GAAG,MAAM;IAElB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAE9D,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,sBAAsB,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,MAAM,CAAC,QAAQ;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,GAAG,KAAK,2BAA2B,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzE,CAAC,CAAC,2BAA2B,SAAS,IAAI;YAC1C,CAAC,CAAC,qCAAqC,GAAG,GAAG,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IACnE,CAAC;IACD,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAExC,CAAC;IAET,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,6CAA6C,GAAG,CAAC,MAAM,IAAI;YAClE,IAAI,EAAE,cAAc;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE;QAC3D,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE;KACxC,CAAC;AACJ,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,kCAAkC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,+DAA+D,EAAE;YAClF,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,8EAA8E;SACzF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAErD,kFAAkF;IAClF,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,KAAK,CAAC,IAAI,uCAAuC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK;YAC/F,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAExD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,kCAAkC,MAAM,CAAC,KAAK,EAAE,EAAE;YACnE,IAAI,EAAE,SAAS,CAAC,QAAQ;YACxB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,sBAAsB,MAAM,CAAC,IAAI,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,MAAM,MAAM,GACV,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,yBAAyB,IAAI,OAAO;QAC5E,CAAC,CAAE,OAAgD,CAAC,uBAAuB;QAC3E,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,OAAO,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,yBAAyB,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,UAAU,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAE9D,wFAAwF;IACxF,0FAA0F;IAC1F,0FAA0F;IAC1F,uFAAuF;IACvF,8CAA8C;IAC9C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,UAAU,SAAS,gDAAgD,EAAE;YACtF,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,wGAAwG;SACnH,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/commands/proposals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../../src/commands/proposals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAWlD"}
+{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../../src/commands/proposals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAWlD"}

package/dist/commands/proposals.js

@@ -6,7 +6,7 @@
  * Read-only — no active session required.
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCall } from '../lib/client.js';
+import { kernelCall } from '../lib/client.js';
 import { runCliCommand } from '../lib/runner.js';
 import { formatProposalsList } from '../formatters/proposals.js';
 export async function runProposals() {
@@ -15,7 +15,7 @@ export async function runProposals() {
         return;
     await runCliCommand({
         fn: async () => {
-            const proposals = await mcpCall('governance.listProposals', {});
+            const proposals = await kernelCall('governance.listProposals', {});
             return { proposals, count: proposals.length };
         },
         formatPretty: (data) => formatProposalsList(data),

package/dist/commands/proposals.js.map

@@ -1 +1 @@
-{"version":3,"file":"proposals.js","sourceRoot":"","sources":["../../src/commands/proposals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA6C,MAAM,4BAA4B,CAAC;AAE5G,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,SAAS,GAAG,MAAM,OAAO,CAAiB,0BAA0B,EAAE,EAAE,CAAC,CAAC;YAChF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"proposals.js","sourceRoot":"","sources":["../../src/commands/proposals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA6C,MAAM,4BAA4B,CAAC;AAE5G,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,SAAS,GAAG,MAAM,UAAU,CAAuD,0BAA0B,EAAE,EAAE,CAAC,CAAC;YACzH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/reject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reject.d.ts","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BrE"}
+{"version":3,"file":"reject.d.ts","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCrE"}

package/dist/commands/reject.js

@@ -6,26 +6,33 @@
  * Reason is mandatory — objections must be explained (BR-7).
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCall } from '../lib/client.js';
+import { kernelCall } from '../lib/client.js';
 import { runCliCommand } from '../lib/runner.js';
 import { formatRejectReceipt } from '../formatters/proposals.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
 export async function runReject(options) {
     const config = await getConfigOrGuide(() => runReject(options));
     if (!config)
         return;
     const proposalId = options.proposalId?.trim();
     if (!proposalId) {
-        process.stderr.write('Proposal ID is required. Usage: pb reject <id> --reason "..."\n');
-        process.exit(1);
+        throw new CLIError('Proposal ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb reject <id> --reason "..."',
+        });
     }
     if (!options.reason?.trim()) {
-        process.stderr.write('A reason is required when rejecting. Usage: pb reject <id> --reason "..."\n');
-        process.stderr.write('Governance requires that objections are explained (BR-7).\n');
-        process.exit(1);
+        throw new CLIError('A reason is required when rejecting.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            // BR-7
+            guidance: 'Governance requires that objections are explained. Usage: pb reject <id> --reason "..."',
+        });
     }
     await runCliCommand({
         fn: async () => {
-            return await mcpCall('governance.respondToProposal', {
+            return await kernelCall('governance.respondToProposal', {
                 proposalId,
                 verdict: 'reject',
                 reason: options.reason.trim(),

package/dist/commands/reject.js.map

@@ -1 +1 @@
-{"version":3,"file":"reject.js","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AAOzF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACpG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,OAAO,MAAM,OAAO,CAAoB,8BAA8B,EAAE;gBACtE,UAAU;gBACV,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"reject.js","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAOvD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE;YAC7C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,sCAAsC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,sCAAsC,EAAE;YACzD,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,OAAO;YACP,QAAQ,EAAE,yFAAyF;SACpG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,OAAO,MAAM,UAAU,CAA2D,8BAA8B,EAAE;gBAChH,UAAU;gBACV,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/relate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relate.d.ts","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAWD,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAiDrE;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCvE"}
+{"version":3,"file":"relate.d.ts","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAWD,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ErE;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAyCvE"}

package/dist/commands/relate.js

@@ -5,10 +5,12 @@
  * Thin client: relation type validation lives in Convex (BR-104).
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCallWithSession } from '../lib/client.js';
+import { kernelCallWithSession } from '../lib/client.js';
 import { readSession } from '../lib/session.js';
-import { runCliCommand } from '../lib/runner.js';
+import { runCliCommand, isJsonMode } from '../lib/runner.js';
 import { formatRelateReceipt, formatUnrelateReceipt } from '../formatters/relate.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { emitWriteTargetNotice } from '../lib/workspaceNotice.js';
 export async function runRelate(options) {
     const config = await getConfigOrGuide(() => runRelate(options));
     if (!config)
@@ -16,17 +18,25 @@ export async function runRelate(options) {
     // Require active session
     const session = readSession();
     if (!session) {
-        process.stderr.write('No active session. Run `pb session start` first.\n');
-        process.stderr.write('Write access requires a tracked session (DEC-9).\n');
-        process.exit(1);
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            // DEC-9
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
+        });
     }
     const fromId = options.fromId.trim();
     const type = options.type.trim();
     const toId = options.toId.trim();
     if (!fromId || !type || !toId) {
-        process.stderr.write('All arguments required. Usage: pb relate <from-id> <type> <to-id>\n');
-        process.exit(1);
+        throw new CLIError('All arguments required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb relate <from-id> <type> <to-id>',
+        });
     }
+    // WP-1: name the target workspace before the write (stderr, gated by json).
+    await emitWriteTargetNotice(isJsonMode());
     await runCliCommand({
         fn: async () => {
             const mcpArgs = {
@@ -37,7 +47,20 @@ export async function runRelate(options) {
             if (options.ifMissing) {
                 mcpArgs.ifMissing = true;
             }
-            const result = await mcpCallWithSession('chain.createEntryRelation', mcpArgs);
+            const result = await kernelCallWithSession('chain.createEntryRelation', mcpArgs);
+            // WP-363 S5: Chain debt prevented — misuse pattern intercepted, print coaching message.
+            if (result?.chainDebtPrevented) {
+                const alts = result.suggestedAlternatives ?? [];
+                console.warn(`\n⚠ Chain debt prevented`);
+                console.warn(`  "${result.originalType ?? type}" is a common misuse for this entry pair.`);
+                console.warn(`  Created agent sign-off proposal: ${result.proposalId}`);
+                console.warn(`\nSuggested alternatives:`);
+                for (const alt of alts) {
+                    console.warn(`  • ${alt.type}: ${alt.reason}`);
+                }
+                console.warn(`\nReview at /review in Cortex UI or use \`pb proposals\` to manage.`);
+                return { fromId, type, toId, action: 'proposal_created', proposalId: result.proposalId };
+            }
             const isProposal = result?.status === 'proposal_created';
             const output = {
                 fromId,
@@ -61,20 +84,28 @@ export async function runUnrelate(options) {
     // Require active session
     const session = readSession();
     if (!session) {
-        process.stderr.write('No active session. Run `pb session start` first.\n');
-        process.stderr.write('Write access requires a tracked session (DEC-9).\n');
-        process.exit(1);
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            // DEC-9
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
+        });
     }
     const fromId = options.fromId.trim();
     const type = options.type.trim();
     const toId = options.toId.trim();
     if (!fromId || !type || !toId) {
-        process.stderr.write('All arguments required. Usage: pb unrelate <from-id> <type> <to-id>\n');
-        process.exit(1);
+        throw new CLIError('All arguments required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb unrelate <from-id> <type> <to-id>',
+        });
     }
+    // WP-1: name the target workspace before the write (stderr, gated by json).
+    await emitWriteTargetNotice(isJsonMode());
     await runCliCommand({
         fn: async () => {
-            await mcpCallWithSession('chain.removeEntryRelation', {
+            await kernelCallWithSession('chain.removeEntryRelation', {
                 fromEntryId: fromId,
                 toEntryId: toId,
                 type,

package/dist/commands/relate.js.map

@@ -1 +1 @@
-{"version":3,"file":"relate.js","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAkBrF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,OAAO,GAA4B;gBACvC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,2BAA2B,EAAE,OAAO,CAI/D,CAAC;YACd,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,KAAK,kBAAkB,CAAC;YACzD,MAAM,MAAM,GAAiB;gBAC3B,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,kBAA2B,CAAC,CAAC,CAAC,SAAkB;aACtE,CAAC;YACF,IAAI,UAAU,IAAI,MAAM,EAAE,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC5E,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,kBAAkB,CAAC,2BAA2B,EAAE;gBACpD,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QAC9D,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"relate.js","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAkBlE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ;YACR,QAAQ,EAAE,wEAAwE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,2CAA2C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,qBAAqB,CAAC,UAAU,EAAE,CAAC,CAAC;IAE1C,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,OAAO,GAA4B;gBACvC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE,OAAO,CAOzH,CAAC;YAEd,wFAAwF;YACxF,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,YAAY,IAAI,IAAI,2CAA2C,CAAC,CAAC;gBAC3F,OAAO,CAAC,IAAI,CAAC,sCAAsC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;gBACpF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAA2B,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YACpG,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,KAAK,kBAAkB,CAAC;YACzD,MAAM,MAAM,GAAiB;gBAC3B,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,kBAA2B,CAAC,CAAC,CAAC,SAAkB;aACtE,CAAC;YACF,IAAI,UAAU,IAAI,MAAM,EAAE,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC5E,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ;YACR,QAAQ,EAAE,wEAAwE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,qBAAqB,CAAC,UAAU,EAAE,CAAC,CAAC;IAE1C,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE;gBAC9G,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QAC9D,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/rework.d.ts

@@ -0,0 +1,24 @@
+/**
+ * pb rework report — report an observed rework signal (WP-487 Slice 1 / FEAT-1373).
+ *
+ * Fills the M4 rework-meter slot reserved by `convex/scoreboard/aggregates.ts:1-15,597`. This is
+ * the SOLE ingestion path this quarter (founder-decided, WP-C spec §3/§4 Slice 1 Pass-2 review) —
+ * an agent-native checkpoint the CLI reports explicitly, not a CI/git-webhook adapter (excluded,
+ * spec §6). Requires an active session (mirrors `pb capture`, DEC-9/BR-8): the M4 join key needs
+ * a stable `conversationId`, which only resolves inside a tracked session.
+ */
+export interface ReworkReportOptions {
+    entryId: string;
+    classification: string;
+    reportedVia?: string;
+    attributable?: boolean;
+    task?: string;
+    /** Codex P2 fix (round 2, post-merge review): explicit conversation override, mirroring
+     *  `pb session start --conversation <id>`. Without this, `pb rework report` has no way to
+     *  find a session started with `--conversation <id>` when the shell never also set
+     *  PB_CONVERSATION_ID — readSession() with no override falls back to the legacy marker path,
+     *  not the conversation-scoped one `session start --conversation` wrote to. */
+    conversation?: string;
+}
+export declare function runReworkReport(options: ReworkReportOptions): Promise<void>;
+//# sourceMappingURL=rework.d.ts.map

package/dist/commands/rework.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework.d.ts","sourceRoot":"","sources":["../../src/commands/rework.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;mFAI+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AASD,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsFjF"}

package/dist/commands/rework.js

@@ -0,0 +1,97 @@
+/**
+ * pb rework report — report an observed rework signal (WP-487 Slice 1 / FEAT-1373).
+ *
+ * Fills the M4 rework-meter slot reserved by `convex/scoreboard/aggregates.ts:1-15,597`. This is
+ * the SOLE ingestion path this quarter (founder-decided, WP-C spec §3/§4 Slice 1 Pass-2 review) —
+ * an agent-native checkpoint the CLI reports explicitly, not a CI/git-webhook adapter (excluded,
+ * spec §6). Requires an active session (mirrors `pb capture`, DEC-9/BR-8): the M4 join key needs
+ * a stable `conversationId`, which only resolves inside a tracked session.
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCallWithSession } from '../lib/client.js';
+import { runCliCommand } from '../lib/runner.js';
+import { readSession } from '../lib/session.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+const CLASSIFICATIONS = ['revision', 'ci_review_correction', 'user_override'];
+const REPORTED_VIA = ['followup_commit', 'ci_rerun', 'manual'];
+export async function runReworkReport(options) {
+    const config = await getConfigOrGuide(() => runReworkReport(options));
+    if (!config)
+        return;
+    const entryId = options.entryId?.trim();
+    if (!entryId) {
+        throw new CLIError('An entry ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    if (!CLASSIFICATIONS.includes(options.classification)) {
+        throw new CLIError(`--classification must be one of: ${CLASSIFICATIONS.join(', ')}`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    const classification = options.classification;
+    const reportedVia = (options.reportedVia ?? 'manual');
+    if (!REPORTED_VIA.includes(reportedVia)) {
+        throw new CLIError(`--via must be one of: ${REPORTED_VIA.join(', ')}`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    // Require active session (DEC-9, BR-8, mirrors pb capture) — write access needs a tracked
+    // session, and the M4 join key needs the session's resolved conversationId.
+    //
+    // Codex P2 fix (round 2, post-merge review): pass `options.conversation` through to
+    // readSession() so a caller who started the session with `pb session start --conversation <id>`
+    // (writing the marker to .productbrain/sessions/<id>.json) can find it here even when the shell
+    // never ALSO exported PB_CONVERSATION_ID — a bare readSession() falls back to the legacy marker
+    // path and misses it. Without this override, an agent following `pb session start`'s own
+    // recovery guidance would still hit "No active session" on the very next command.
+    const session = readSession(options.conversation);
+    if (!session) {
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: 'Run `pb session start` first. Write access requires a tracked session. If you started a ' +
+                'session with `pb session start --conversation <id>`, re-run this command with ' +
+                '`--conversation <id>` (or export PB_CONVERSATION_ID=<id> in this shell) so it resolves the ' +
+                'same conversation-scoped marker.',
+        });
+    }
+    if (!session.conversationId) {
+        // Fail closed client-side too (TEN-2728): a rework signal with no conversationId cannot
+        // anchor the M4 join, and the server refuses it anyway — surface the real cause here rather
+        // than a generic server validation error.
+        throw new CLIError('No conversation identity resolved for this session.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'A rework signal needs a stable conversationId to join against the governance-served log (M4). ' +
+                'Run this from a harness that sets PB_CONVERSATION_ID / CLAUDE_CODE_SESSION_ID / CURSOR_CONVERSATION_ID, ' +
+                'or start a fresh session with `pb session start --conversation <id>` and re-run this command ' +
+                'with the SAME `--conversation <id>` (the flag is only read by `session start` otherwise).',
+        });
+    }
+    await runCliCommand({
+        fn: async () => {
+            return await kernelCallWithSession('rework.report', {
+                // Codex P1 fix (post-merge review): sessionId lets the server resolve conversationId
+                // AUTHORITATIVELY from the caller's own agentSessions row (mirrors served.ts's
+                // recordGovernanceServed stamping) rather than trusting the client-supplied string alone.
+                // conversationId still travels as a fallback for the server's bare-conversationId lookup
+                // path — both are verified server-side against the gateway-injected caller identity.
+                sessionId: session.sessionId,
+                conversationId: session.conversationId,
+                entryId,
+                classification,
+                reportedVia,
+                ...(options.attributable ? { attributableToGovernanceMiss: true } : {}),
+                ...(options.task ? { task: options.task } : {}),
+            });
+        },
+        formatPretty: (result) => result.deduped
+            ? `Rework signal already recorded (${classification}, via ${reportedVia}) — reused the existing row from a moment ago.`
+            : `Rework signal recorded (${classification}, via ${reportedVia}).`,
+    });
+}
+//# sourceMappingURL=rework.js.map

package/dist/commands/rework.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework.js","sourceRoot":"","sources":["../../src/commands/rework.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,sBAAsB,EAAE,eAAe,CAAU,CAAC;AAGvF,MAAM,YAAY,GAAG,CAAC,iBAAiB,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAwBxE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA4B;IAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE;YAC7C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAsC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,QAAQ,CAAC,oCAAoC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACnF,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAsC,CAAC;IAEtE,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAsB,CAAC;IAC3E,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAAC,yBAAyB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACrE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,4EAA4E;IAC5E,EAAE;IACF,oFAAoF;IACpF,gGAAgG;IAChG,gGAAgG;IAChG,gGAAgG;IAChG,yFAAyF;IACzF,kFAAkF;IAClF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EACN,0FAA0F;gBAC1F,gFAAgF;gBAChF,6FAA6F;gBAC7F,kCAAkC;SACrC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,wFAAwF;QACxF,4FAA4F;QAC5F,0CAA0C;QAC1C,MAAM,IAAI,QAAQ,CAAC,qDAAqD,EAAE;YACxE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EACN,gGAAgG;gBAChG,0GAA0G;gBAC1G,+FAA+F;gBAC/F,2FAA2F;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAqB;QACtC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,OAAO,MAAM,qBAAqB,CAA4C,eAAe,EAAE;gBAC7F,qFAAqF;gBACrF,+EAA+E;gBAC/E,0FAA0F;gBAC1F,yFAAyF;gBACzF,qFAAqF;gBACrF,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,OAAO;gBACP,cAAc;gBACd,WAAW;gBACX,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CACvB,MAAM,CAAC,OAAO;YACZ,CAAC,CAAC,mCAAmC,cAAc,SAAS,WAAW,gDAAgD;YACvH,CAAC,CAAC,2BAA2B,cAAc,SAAS,WAAW,IAAI;KACxE,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/scoreboard.d.ts

@@ -0,0 +1,28 @@
+/**
+ * pb scoreboard — the AGENT-PRIMARY flywheel scoreboard surface (spec §2d).
+ *
+ * The point of this board is NOT a dashboard a human watches — it is telemetry the AGENT reads
+ * to track the flywheel, diagnose what's degrading, and drive the fix without the human looking.
+ * So:
+ *   - `--json`: emits the structured M1/M2/M3/materialization payload (from the ONE internal
+ *     `scoreboard` action, via the AKI `scoreboard.get` route) PLUS the diagnosis layer (A4) and
+ *     the CLI-computed M5 local-pull drift (A5). This is the agent's structured consumption shape.
+ *   - pretty: a compact human-readable board with per-metric status + next action.
+ *
+ * The diagnosis layer is honest by design: unpinned-threshold flips render `awaiting` (never an
+ * invented number), M4 is a standing `awaiting` tile (deferred, TEN-2433), and coaching/moat
+ * quality is a standing `unmeasured` line (TEN-2377) so four green tiles ≠ a healthy moat.
+ */
+import { type ScoreboardPayload, type ScoreboardDiagnosis } from '../scoreboard/diagnose.js';
+import type { LocalDriftM5 } from '../scoreboard/diagnose.js';
+/** The full structured shape `pb scoreboard --json` emits (agent consumption surface). */
+export interface ScoreboardCliView {
+    payload: ScoreboardPayload;
+    /** M5 local-pull drift — computed at the CLI (DEC-1284), NOT in the data payload. */
+    localDrift: LocalDriftM5;
+    diagnosis: ScoreboardDiagnosis;
+}
+export declare function runScoreboard(options?: {
+    task?: string;
+}): Promise<void>;
+//# sourceMappingURL=scoreboard.d.ts.map

package/dist/commands/scoreboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoreboard.d.ts","sourceRoot":"","sources":["../../src/commands/scoreboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAY,KAAK,iBAAiB,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEvG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAG9D,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,qFAAqF;IACrF,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,mBAAmB,CAAC;CAChC;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBlF"}