@productbrain/cli 0.1.0-beta.30 → 0.1.0-beta.3012

package/dist/commands/profile.js

@@ -0,0 +1,170 @@
+/**
+ * pb profile — workspace profile management commands.
+ * WP-302 Slice 2: list, create, use, delete profiles.
+ *
+ * Uses runCliCommand pattern from runner.ts for JSON/pretty output.
+ * Uses CLIError from errors.ts for structured error reporting.
+ */
+import { runCliCommand } from '../lib/runner.js';
+import { listProfiles, getActiveProfile, createProfile, useProfile, deleteProfile, } from '../lib/profiles.js';
+import { readSession, discardAllSessions, hasAnyActiveSession } from '../lib/session.js';
+import { resetConfigCache, findProjectRoot, readLocalProjectConfig, setLocalProfilePin } from '../lib/config.js';
+import { probeWorkspace } from '../lib/workspace-probe.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+export function resolveProfileListState() {
+    const profiles = listProfiles();
+    const globalActive = getActiveProfile();
+    const localActive = readLocalProjectConfig()?.profile ?? null;
+    const active = localActive ?? globalActive;
+    const activeSource = localActive ? 'local' : globalActive ? 'global' : 'none';
+    return { profiles, active, globalActive, localActive, activeSource };
+}
+/** pb profile list — show all profiles, mark active one. */
+export async function runProfileList() {
+    await runCliCommand({
+        fn: async () => {
+            return resolveProfileListState();
+        },
+        formatPretty: (data) => {
+            if (data.profiles.length === 0) {
+                return 'No profiles configured. Run: pb profile create <name> --api-key <key>';
+            }
+            const lines = data.profiles.map((name) => {
+                const marker = name === data.active
+                    ? data.activeSource === 'local' ? ' (active, local)' : ' (active)'
+                    : '';
+                return `  ${name}${marker}`;
+            });
+            if (data.localActive && data.globalActive && data.localActive !== data.globalActive) {
+                lines.push('');
+                lines.push(`Repo local profile: ${data.localActive}`);
+                lines.push(`Global profile:     ${data.globalActive}`);
+            }
+            return `Profiles:\n${lines.join('\n')}`;
+        },
+    });
+}
+/** pb profile create <name> --api-key <key> [--url <url>] */
+export async function runProfileCreate(opts) {
+    await runCliCommand({
+        fn: async () => {
+            createProfile(opts.name, opts.apiKey, opts.url);
+            return { name: opts.name, created: true };
+        },
+        formatPretty: (data) => `Profile "${data.name}" created.`,
+    });
+}
+export async function runProfileUse(opts) {
+    if (opts.local && opts.global) {
+        throw new CLIError('Cannot use both --local and --global.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Pick one: --local (repo pin only), --global (global only), or neither (reconcile both).',
+        });
+    }
+    await runCliCommand({
+        fn: async () => {
+            const projectRoot = findProjectRoot(process.cwd());
+            const localPin = readLocalProjectConfig()?.profile ?? null;
+            // PB_PROFILE always wins resolution (by design). If it's set, ANY profile write
+            // here is shadowed — surface that instead of failing silently (the TEN-2163 trap).
+            const PB_PROFILE = process.env.PB_PROFILE?.trim() || null;
+            const resetEnv = () => {
+                resetConfigCache();
+                delete process.env.PRODUCTBRAIN_API_KEY;
+                delete process.env.CONVEX_SITE_URL;
+            };
+            // Discard ANY session file (active OR stale closed marker) — a closed marker would
+            // let the 2h auto-resume re-pin the old workspace. Report only an ACTIVE session
+            // in the print line. Review fix (Codex): a profile switch changes the effective workspace,
+            // so clear ALL conversation markers, not just the current conversation's — otherwise a
+            // sibling conversation's active marker survives and could be reused against the new workspace.
+            const discardSessionState = () => {
+                // Report accurately whether an active session was cleared — including a SIBLING conversation's
+                // (Codex re-review): a profile switch from a shell whose current conversation has no marker
+                // still discards all markers, so `readSession()` (current only) would under-report and
+                // silently strand a sibling active session on the old workspace.
+                const hadActive = readSession() !== null || hasAnyActiveSession();
+                discardAllSessions();
+                return hadActive;
+            };
+            // --- --local: repo pin only ---
+            if (opts.local) {
+                if (!projectRoot) {
+                    throw new CLIError('No .productbrain/ directory found in this directory tree. Run `pb connect` first or use `pb use <name> --global` to switch globally.', { code: ErrorCode.CONFIG_INVALID, category: 'config',
+                        guidance: 'Run `pb connect <token>` to set up a project workspace, or use --global.' });
+                }
+                setLocalProfilePin(projectRoot, opts.name);
+                const sessionCleared = discardSessionState();
+                resetEnv();
+                return { name: opts.name, scope: 'local', reconciledLocalPin: false,
+                    sessionCleared, workspace: await safeProbe(), pinnedElsewhere: null, 'PB_PROFILE': PB_PROFILE };
+            }
+            // --- --global: global only (does not change a locally-pinned repo) ---
+            if (opts.global) {
+                useProfile(opts.name);
+                const pinnedElsewhere = localPin && localPin !== opts.name ? localPin : null;
+                // The repo's effective workspace only changes when it is NOT pinned elsewhere.
+                const sessionCleared = pinnedElsewhere ? false : discardSessionState();
+                resetEnv();
+                const workspace = pinnedElsewhere ? null : await safeProbe();
+                return { name: opts.name, scope: 'global', reconciledLocalPin: false,
+                    sessionCleared, workspace, pinnedElsewhere, 'PB_PROFILE': PB_PROFILE };
+            }
+            // --- default: flip global AND reconcile the repo pin if one exists ---
+            useProfile(opts.name);
+            let reconciledLocalPin = false;
+            if (projectRoot && localPin) {
+                setLocalProfilePin(projectRoot, opts.name);
+                reconciledLocalPin = true;
+            }
+            const sessionCleared = discardSessionState();
+            resetEnv();
+            return { name: opts.name, scope: 'reconcile', reconciledLocalPin,
+                sessionCleared, workspace: await safeProbe(), pinnedElsewhere: null, 'PB_PROFILE': PB_PROFILE };
+        },
+        formatPretty: (d) => {
+            const lines = [];
+            if (d.scope === 'global') {
+                const arrow = d.workspace ? ` → ${d.workspace}` : '';
+                lines.push(`Switched global profile to "${d.name}"${arrow}.`);
+                if (d.pinnedElsewhere) {
+                    lines.push(`Note: this repo is pinned to "${d.pinnedElsewhere}" via config.local.json — the global switch won't change it here.`);
+                    lines.push(`Run \`pb use ${d.name}\` (no flag) to switch this repo too.`);
+                }
+            }
+            else {
+                const arrow = d.workspace ? ` → ${d.workspace}` : '';
+                const where = d.scope === 'local' ? ' (repo-local)' : '';
+                lines.push(`Now using "${d.name}"${where}${arrow}`);
+                if (d.reconciledLocalPin)
+                    lines.push('(updated repo-local pin in .productbrain/config.local.json)');
+            }
+            if (d.sessionCleared)
+                lines.push('(previous session closed)');
+            if (d['PB_PROFILE']) {
+                lines.push(`⚠ PB_PROFILE is set to "${d['PB_PROFILE']}" in your environment and overrides profile resolution.`);
+                lines.push(`  This switch won't take effect until you unset it: \`unset PB_PROFILE\`.`);
+            }
+            return lines.join('\n');
+        },
+    });
+}
+/**
+ * Best-effort workspace name after a profile switch; null on any failure.
+ * probeWorkspace() already swallows network/auth errors and returns null, so this is offline-safe.
+ */
+async function safeProbe() {
+    return (await probeWorkspace())?.name ?? null;
+}
+/** pb profile delete <name> */
+export async function runProfileDelete(opts) {
+    await runCliCommand({
+        fn: async () => {
+            deleteProfile(opts.name);
+            return { name: opts.name, deleted: true };
+        },
+        formatPretty: (data) => `Profile "${data.name}" deleted.`,
+    });
+}
+//# sourceMappingURL=profile.js.map

package/dist/commands/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/commands/profile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACjH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAUvD,MAAM,UAAU,uBAAuB;IACrC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;IAC9D,MAAM,MAAM,GAAG,WAAW,IAAI,YAAY,CAAC;IAC3C,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAE9E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AACvE,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,uEAAuE,CAAC;YACjF,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACvC,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM;oBACjC,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW;oBAClE,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAItC;IACC,MAAM,aAAa,CAAC;QAClB,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC,IAAI,YAAY;KAC1D,CAAC,CAAC;AACL,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAyD;IAC3F,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,uCAAuC,EAAE;YAC1D,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,yFAAyF;SACpG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAmB;QACpC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;YAC3D,gFAAgF;YAChF,mFAAmF;YACnF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;YAE1D,MAAM,QAAQ,GAAG,GAAG,EAAE;gBACpB,gBAAgB,EAAE,CAAC;gBACnB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBACxC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YACrC,CAAC,CAAC;YACF,mFAAmF;YACnF,iFAAiF;YACjF,2FAA2F;YAC3F,uFAAuF;YACvF,+FAA+F;YAC/F,MAAM,mBAAmB,GAAG,GAAY,EAAE;gBACxC,+FAA+F;gBAC/F,4FAA4F;gBAC5F,uFAAuF;gBACvF,iEAAiE;gBACjE,MAAM,SAAS,GAAG,WAAW,EAAE,KAAK,IAAI,IAAI,mBAAmB,EAAE,CAAC;gBAClE,kBAAkB,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YAEF,iCAAiC;YACjC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,MAAM,IAAI,QAAQ,CAChB,sIAAsI,EACtI,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ;wBAClD,QAAQ,EAAE,0EAA0E,EAAE,CACzF,CAAC;gBACJ,CAAC;gBACD,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,cAAc,GAAG,mBAAmB,EAAE,CAAC;gBAC7C,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK;oBACjE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;YACpG,CAAC;YAED,wEAAwE;YACxE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,MAAM,eAAe,GAAG,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC7E,+EAA+E;gBAC/E,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;gBACvE,QAAQ,EAAE,CAAC;gBACX,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC;gBAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK;oBAClE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;YAC3E,CAAC;YAED,wEAAwE;YACxE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,IAAI,kBAAkB,GAAG,KAAK,CAAC;YAC/B,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;gBAC5B,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,kBAAkB,GAAG,IAAI,CAAC;YAC5B,CAAC;YACD,MAAM,cAAc,GAAG,mBAAmB,EAAE,CAAC;YAC7C,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB;gBAC9D,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QACpG,CAAC;QACD,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;YAClB,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;gBAC9D,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,eAAe,mEAAmE,CAAC,CAAC;oBAClI,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,uCAAuC,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;gBACpD,IAAI,CAAC,CAAC,kBAAkB;oBAAE,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YACtG,CAAC;YACD,IAAI,CAAC,CAAC,cAAc;gBAAE,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,YAAY,CAAC,yDAAyD,CAAC,CAAC;gBAChH,KAAK,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS;IACtB,OAAO,CAAC,MAAM,cAAc,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AAChD,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAsB;IAC3D,MAAM,aAAa,CAAC;QAClB,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC,IAAI,YAAY;KAC1D,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/promote.d.ts

@@ -4,8 +4,19 @@
  * Thin client: governance checks live in Convex (BR-104).
  */
 interface PromoteOptions {
-    entryId: string;
+    /** Single entry id (back-compat: `pb promote <id>`). */
+    entryId?: string;
+    /** Batch of entry ids (INS-1813). Takes precedence when provided. */
+    entryIds?: string[];
     message?: string;
+    /** Typed override that clears a steering coherency block at the publish chokepoint. */
+    overrideReason?: string;
+    /** Acknowledgement response to a coherency challenge: linked | accepted-fix | diverged. */
+    acknowledge?: string;
+    /** Authorizing entry for --acknowledge linked / accepted-fix. */
+    ackEntry?: string;
+    /** Divergence rationale for --acknowledge diverged. */
+    ackReason?: string;
 }
 export declare function runPromote(options: PromoteOptions): Promise<void>;
 export {};

package/dist/commands/promote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,UAAU,cAAc;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyBD,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAyEvE"}
+{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,UAAU,cAAc;IACtB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAoND,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAgHvE"}

package/dist/commands/promote.js

@@ -4,11 +4,164 @@
  * Thin client: governance checks live in Convex (BR-104).
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCallWithSession } from '../lib/client.js';
+import { kernelCallWithSession, McpError } from '../lib/client.js';
 import { readSession } from '../lib/session.js';
-import { runCliCommand } from '../lib/runner.js';
+import { runCliCommand, isJsonMode } from '../lib/runner.js';
 import { formatPromoteReceipt } from '../formatters/promote.js';
-const BLOCKING_CONTRADICTION_THRESHOLD = 0.75;
+import { copy } from '../lib/style.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { emitWriteTargetNotice } from '../lib/workspaceNotice.js';
+/** Strip any fields `chain.commitEntry`'s `conflicts` arg validator doesn't declare. */
+function toConflictEvidence(conflicts) {
+    return conflicts.map((c) => ({
+        chainEntryId: c.chainEntryId,
+        chainEntryName: c.chainEntryName,
+        ...(c.chainEntryDescription ? { chainEntryDescription: c.chainEntryDescription } : {}),
+        type: c.type,
+        confidence: c.confidence,
+        explanation: c.explanation,
+    }));
+}
+/**
+ * Error categories that signal a GLOBAL precondition (not entry-specific): they fail
+ * every id in a batch identically, so the batch path rethrows them immediately rather
+ * than collecting them as per-entry failures. `validation` (not-found, contradiction)
+ * is entry-specific and stays collectable so one bad id never aborts the batch.
+ * `session` is global too — a closed/expired/wrong-workspace session (SESSION_REQUIRED,
+ * which McpError maps to category `session`) the server raises mid-batch dooms every
+ * remaining id, so it must surface the actionable session error, not a per-entry relabel.
+ */
+const GLOBAL_PRECONDITION_CATEGORIES = new Set([
+    'auth',
+    'network',
+    'config',
+    'session',
+]);
+/**
+ * Promote a single entry to active (commit to SSOT). Throws on any failure —
+ * the caller decides whether to propagate (single-id) or collect (batch).
+ */
+async function promoteOne(entryId, message, session, coherency, 
+// When true (single-id path only), a coherency refusal emits its machine-readable
+// payload to stdout before throwing. The batch path leaves this false so its single
+// JSON results array is never polluted by a mid-stream refusal line.
+surfaceRefusalJson = false) {
+    const entry = await kernelCallWithSession('chain.getEntry', { entryId });
+    if (!entry) {
+        throw new CLIError(`Entry ${entryId} not found.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Check the entry ID and try again. Use `pb search` to find entries.',
+        });
+    }
+    const description = (typeof entry.data?.description === 'string' ? entry.data.description : undefined) ??
+        (typeof entry.data?.rationale === 'string' ? entry.data.rationale : undefined) ??
+        '';
+    // WP-485 Slice 2b (R2, FEAT-1370): DISCOVERY only — the blocking DECISION moved server-side
+    // into commitEntry's evaluate()/assessContradiction gate (Slice 2a). This client no longer
+    // compares against a local threshold or throws; it hands the candidates to the server as
+    // `conflicts` evidence and renders whatever `contradictionAdvisory` comes back. Mutations
+    // can't call the LLM-backed detector themselves (evaluate.ts: "contradiction — CALLER-FED,
+    // always"), so the fetch stays — only the enforcement it used to gate locally is gone.
+    // WP-488 Slice 3 (FEAT-1377) — DEVIATION, documented: this call site is NOT converted to
+    // kernel-client's typed derivation. Verified (not assumed) that both viable mechanisms
+    // fail for packages/cli specifically: (a) `GatewayRouteReturnByName<'chain.detectSemantic
+    // Conflicts'>` pulls in kernel-client's full index.ts (211 routes.generated.ts imports +
+    // convex/lib + kernel/errors.ts), which fails packages/cli's `rootDir: "src"` (TS6059 for
+    // every file outside it — real build is plain `tsc`, unlike mcp-server's tsup, so rootDir
+    // can't be dropped the way it was there); (b) importing the ONE needed export directly
+    // (bypassing kernel-client) ALSO fails — convex/intelligence/conflictDetection.ts's OWN
+    // internal relative imports lack the explicit `.js` extensions packages/cli's
+    // `moduleResolution: "NodeNext"` requires (convex/tsconfig.json uses lenient "Bundler"
+    // resolution), cascading into ~40 further implicit-any errors. Both reproduced and
+    // reverted, not hypothesized. mcp-server's conflict-preflight.ts (same route, kernelQuery
+    // not kernelCallWithSession) DOES convert cleanly — see that file. Fixing this for CLI
+    // would need either a real project-references split or explicit extensions added
+    // throughout convex/ — both well beyond "pure typing lift, no behavior change" scope.
+    let conflicts = [];
+    try {
+        conflicts = (await kernelCallWithSession('chain.detectSemanticConflicts', {
+            name: entry.name,
+            description,
+            collectionHint: entry.collectionSlug ?? entry.collection?.slug ?? entry.collection?.name,
+        })) ?? [];
+    }
+    catch {
+        process.stderr.write('Warning: conflict detection unavailable — proceeding without contradiction check.\n');
+    }
+    const args = {
+        entryId,
+        author: `agent:${session.sessionId}`,
+        sessionId: session.sessionId,
+    };
+    if (message) {
+        args.commitMessage = message;
+    }
+    if (conflicts.length > 0) {
+        args.conflicts = toConflictEvidence(conflicts);
+    }
+    // WP-465 slice ⑤: coherency controls — relayed verbatim; the gate validates.
+    if (coherency?.overrideReason) {
+        args.steeringOverrideReason = coherency.overrideReason;
+    }
+    if (coherency?.acknowledge) {
+        args.coherencyAcknowledgement = {
+            response: coherency.acknowledge,
+            ...(coherency.ackEntry ? { entryId: coherency.ackEntry } : {}),
+            ...(coherency.ackReason ? { reason: coherency.ackReason } : {}),
+        };
+    }
+    // WP-B (attestation-model spec §4.3): the server auto-verifies an unverified
+    // agent entry as part of the promote itself (verifiedContext 'promote-gate'),
+    // so the old client-side verify-then-retry on a QUALITY_GATE_BLOCKED
+    // "verification" error-string match is dead code — deleted, not kept as a
+    // fallback (an old server's block still surfaces as a legible error).
+    let result;
+    try {
+        // `chain.commitEntry`'s real success branch carries several more fields (contract,
+        // etc.) than this file's `CommitEntryResult` declares — a deliberate narrower subset
+        // (only the fields formatPromoteReceipt actually reads), not a structural mismatch to
+        // chase field-for-field (PR #398, Lane C S3c annotation pass).
+        result = (await kernelCallWithSession('chain.commitEntry', args));
+    }
+    catch (err) {
+        // WP-485 Slice 2b (FEAT-1370): DEAD-BUT-TYPED. `{ graduated: false }` (DEC-1321) means
+        // the contradiction gate's disposition can only be allow/advisory today — this branch
+        // cannot fire from the current server. Typed so a future policy graduation to block/
+        // acknowledge/queue needs no CLI retrofit; unit-tested with a forced double (see
+        // promote.test.ts). Note `conflictDetails` on the server's thrown ConvexError does NOT
+        // survive the HTTP gateway round-trip (only a fixed field set does — convex/lib/errors.ts
+        // getConvexErrorData), so only `code`/`message` are reliable here.
+        if (err instanceof McpError && err.code === ErrorCode.CONTRADICTION_BLOCKED) {
+            throw new CLIError(err.message, {
+                code: ErrorCode.CONTRADICTION_BLOCKED,
+                category: 'validation',
+                guidance: 'Resolve the contradiction before committing. Use `pb get` to inspect the conflicting entry.',
+            });
+        }
+        throw err;
+    }
+    // WP-465 slice ⑤ (Option B): the server RETURNS a structured refusal instead of
+    // throwing — surface it as an actionable failure, never as success.
+    const maybeRefused = result;
+    if (maybeRefused.status === 'coherency_refused') {
+        const refusal = maybeRefused.refusal;
+        // Mirror `pb update --json` (update.ts): emit the machine-readable refusal (subject +
+        // routes) to stdout BEFORE throwing so a --json agent can populate the retry controls
+        // (--acknowledge / --ack-entry / --override-reason) instead of scraping the generic
+        // error off stderr. Human (non-json) output is unchanged — the throw below carries it.
+        if (surfaceRefusalJson && refusal && isJsonMode()) {
+            process.stdout.write(JSON.stringify({ outcome: 'refused', refusal }) + '\n');
+        }
+        throw new CLIError(refusal?.reason ?? `Commit of ${entryId} was refused by the coherency gate.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Link the entry to the strategic spine and retry, or respond with --acknowledge <linked|accepted-fix|diverged> (--ack-entry / --ack-reason), or supply --override-reason "<why this stands alone>" (at least 12 characters).',
+        });
+    }
+    const name = ('name' in result && typeof result.name === 'string') ? result.name : entryId;
+    return { entryId, name, result };
+}
 export async function runPromote(options) {
     const config = await getConfigOrGuide(() => runPromote(options));
     if (!config)
@@ -16,60 +169,98 @@ export async function runPromote(options) {
     // Require active session (DEC-9, BR-8)
     const session = readSession();
     if (!session) {
-        process.stderr.write('No active session. Run `pb session start` first.\n');
-        process.stderr.write('Write access requires a tracked session (DEC-9).\n');
-        process.exit(1);
-    }
-    const entryId = options.entryId.trim();
-    if (!entryId) {
-        process.stderr.write('Entry ID is required. Usage: pb promote <entry-id>\n');
-        process.exit(1);
-    }
-    await runCliCommand({
-        fn: async () => {
-            const entry = await mcpCallWithSession('chain.getEntry', { entryId });
-            if (!entry) {
-                throw new Error(`Entry ${entryId} not found.`);
-            }
-            const description = (typeof entry.data?.description === 'string' ? entry.data.description : undefined) ??
-                (typeof entry.data?.rationale === 'string' ? entry.data.rationale : undefined) ??
-                '';
-            let conflicts = [];
-            try {
-                conflicts = (await mcpCallWithSession('chain.detectSemanticConflicts', {
-                    name: entry.name,
-                    description,
-                    collectionHint: entry.collectionSlug ?? entry.collection?.slug ?? entry.collection?.name,
-                })) ?? [];
-            }
-            catch {
-                process.stderr.write('Warning: conflict detection unavailable — proceeding without contradiction check.\n');
-            }
-            const blockingContradiction = conflicts.find((conflict) => conflict.type === 'contradiction' && conflict.confidence >= BLOCKING_CONTRADICTION_THRESHOLD);
-            if (blockingContradiction) {
-                throw new Error(`Commit blocked by contradiction with ${blockingContradiction.chainEntryId}: ${blockingContradiction.explanation}`);
+        throw new CLIError(copy.noSession, {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: copy.sessionRequired,
+        });
+    }
+    const ids = (options.entryIds ?? (options.entryId !== undefined ? [options.entryId] : []))
+        .map((id) => id.trim())
+        .filter(Boolean);
+    if (ids.length === 0) {
+        throw new CLIError('Entry ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb promote <entry-id> [<entry-id>...]',
+        });
+    }
+    // WP-1: name the target workspace before the write (stderr, gated by json). Covers both
+    // the single and batch paths below.
+    await emitWriteTargetNotice(isJsonMode());
+    // Single-entry path: preserve exact error propagation + JSON behavior (back-compat).
+    if (ids.length === 1) {
+        await runCliCommand({
+            fn: () => promoteOne(ids[0], options.message, session, options, true),
+            formatPretty: (data) => formatPromoteReceipt({
+                entryId: data.entryId,
+                name: data.name,
+                commitMessage: options.message,
+                result: data.result,
+            }),
+        });
+        return;
+    }
+    // Batch path (INS-1813): attempt each independently — a single failure must NOT
+    // abort the rest of the batch.
+    const results = [];
+    for (const id of ids) {
+        try {
+            const data = await promoteOne(id, options.message, session, options);
+            results.push({ entryId: id, ok: true, data });
+        }
+        catch (err) {
+            // A global precondition — expired/invalid key (auth), network down, bad config —
+            // fails every remaining id identically. Rethrow it untouched so the batch fails
+            // fast and the caller sees the real code/category/guidance, instead of retrying
+            // each id and masking it as a per-entry VALIDATION_FAILED (the single-id path
+            // preserves these errors; the batch path must too). Entry-specific failures
+            // (validation: not-found, contradiction) are collected so one bad id never
+            // aborts the rest of the batch (INS-1813).
+            if (err instanceof CLIError && GLOBAL_PRECONDITION_CATEGORIES.has(err.category)) {
+                throw err;
             }
-            const args = {
-                entryId,
-                author: `agent:${session.sessionId}`,
-                sessionId: session.sessionId,
+            results.push({ entryId: id, ok: false, error: err instanceof Error ? err.message : String(err) });
+        }
+    }
+    const failed = results.filter((r) => !r.ok);
+    if (isJsonMode()) {
+        process.stdout.write(JSON.stringify(results.map((r) => {
+            if (!r.ok)
+                return { entryId: r.entryId, ok: false, error: r.error };
+            // WP-485 Slice 2b round 2 (Codex P1, FEAT-1370): the single-id JSON path already
+            // returns the full `result` object (contradictionAdvisory included); batch JSON used
+            // to reduce every success to `{entryId, ok:true}`, silently discarding the server's
+            // advisory — a detected contradiction could commit with zero trace in --json mode.
+            const advisory = r.data && 'contradictionAdvisory' in r.data.result
+                ? r.data.result.contradictionAdvisory
+                : undefined;
+            return {
+                entryId: r.entryId,
+                ok: true,
+                ...(advisory ? { contradictionAdvisory: advisory } : {}),
             };
-            if (options.message) {
-                args.commitMessage = options.message;
+        })) + '\n');
+    }
+    else {
+        for (const r of results) {
+            if (r.ok && r.data) {
+                process.stdout.write(formatPromoteReceipt({ entryId: r.data.entryId, name: r.data.name, commitMessage: options.message, result: r.data.result }) + '\n');
             }
-            const result = await mcpCallWithSession('chain.commitEntry', args);
-            // Resolve display name from result
-            const name = ('name' in result && typeof result.name === 'string')
-                ? result.name
-                : entryId;
-            return { entryId, name, result };
-        },
-        formatPretty: (data) => formatPromoteReceipt({
-            entryId: data.entryId,
-            name: data.name,
-            commitMessage: options.message,
-            result: data.result,
-        }),
-    });
+            else {
+                process.stdout.write(`Failed ${r.entryId}: ${r.error}\n`);
+            }
+        }
+        process.stdout.write(`\nBatch promote: ${results.length - failed.length}/${results.length} promoted` +
+            (failed.length ? `, ${failed.length} failed (${failed.map((f) => f.entryId).join(', ')})` : '') +
+            '.\n');
+    }
+    if (failed.length > 0) {
+        throw new CLIError(`${failed.length} of ${results.length} promotion(s) failed: ${failed.map((f) => f.entryId).join(', ')}.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Inspect the failures above, then re-run `pb promote <entry-id>` for each that failed.',
+        });
+    }
 }
 //# sourceMappingURL=promote.js.map

package/dist/commands/promote.js.map

@@ -1 +1 @@
-{"version":3,"file":"promote.js","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAA0B,MAAM,0BAA0B,CAAC;AA4BxF,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,uCAAuC;IACvC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,aAAa,CAAgB;QACjC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAsB,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,aAAa,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,WAAW,GACf,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClF,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9E,EAAE,CAAC;YACL,IAAI,SAAS,GAAuB,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,SAAS,GAAG,CAAC,MAAM,kBAAkB,CAA4B,+BAA+B,EAAE;oBAChG,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,WAAW;oBACX,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI;iBACzF,CAAC,CAAC,IAAI,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,qBAAqB,GAAG,SAAS,CAAC,IAAI,CAC1C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,UAAU,IAAI,gCAAgC,CAC3G,CAAC;YACF,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,wCAAwC,qBAAqB,CAAC,YAAY,KAAK,qBAAqB,CAAC,WAAW,EAAE,CACnH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAA4B;gBACpC,OAAO;gBACP,MAAM,EAAE,SAAS,OAAO,CAAC,SAAS,EAAE;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAoB,mBAAmB,EAAE,IAAI,CAAC,CAAC;YAEtF,mCAAmC;YACnC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAChE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,OAAO,CAAC;YAEZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,OAAO,CAAC,OAAO;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"promote.js","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAA0B,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAsB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AA8DlE,wFAAwF;AACxF,SAAS,kBAAkB,CAAC,SAA6B;IACvD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,8BAA8B,GAA+B,IAAI,GAAG,CAAC;IACzE,MAAM;IACN,SAAS;IACT,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,UAAU,UAAU,CACvB,OAAe,EACf,OAA2B,EAC3B,OAA8B,EAC9B,SAA6F;AAC7F,kFAAkF;AAClF,oFAAoF;AACpF,qEAAqE;AACrE,kBAAkB,GAAG,KAAK;IAE1B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAsB,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,SAAS,OAAO,aAAa,EAAE;YAChD,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,oEAAoE;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GACf,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,EAAE,CAAC;IACL,4FAA4F;IAC5F,2FAA2F;IAC3F,yFAAyF;IACzF,0FAA0F;IAC1F,2FAA2F;IAC3F,uFAAuF;IACvF,yFAAyF;IACzF,uFAAuF;IACvF,0FAA0F;IAC1F,yFAAyF;IACzF,0FAA0F;IAC1F,0FAA0F;IAC1F,uFAAuF;IACvF,wFAAwF;IACxF,8EAA8E;IAC9E,uFAAuF;IACvF,mFAAmF;IACnF,0FAA0F;IAC1F,uFAAuF;IACvF,iFAAiF;IACjF,sFAAsF;IACtF,IAAI,SAAS,GAAuB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,qBAAqB,CAA4D,+BAA+B,EAAE;YACnI,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW;YACX,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI;SACzF,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,IAAI,GAA4B;QACpC,OAAO;QACP,MAAM,EAAE,SAAS,OAAO,CAAC,SAAS,EAAE;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;IAC/B,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,6EAA6E;IAC7E,IAAI,SAAS,EAAE,cAAc,EAAE,CAAC;QAC9B,IAAI,CAAC,sBAAsB,GAAG,SAAS,CAAC,cAAc,CAAC;IACzD,CAAC;IACD,IAAI,SAAS,EAAE,WAAW,EAAE,CAAC;QAC3B,IAAI,CAAC,wBAAwB,GAAG;YAC9B,QAAQ,EAAE,SAAS,CAAC,WAAW;YAC/B,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,qEAAqE;IACrE,0EAA0E;IAC1E,sEAAsE;IACtE,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,mFAAmF;QACnF,qFAAqF;QACrF,sFAAsF;QACtF,+DAA+D;QAC/D,MAAM,GAAG,CAAC,MAAM,qBAAqB,CAAgD,mBAAmB,EAAE,IAAI,CAAC,CAAsB,CAAC;IACxI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uFAAuF;QACvF,sFAAsF;QACtF,qFAAqF;QACrF,iFAAiF;QACjF,uFAAuF;QACvF,0FAA0F;QAC1F,mEAAmE;QACnE,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,qBAAqB,EAAE,CAAC;YAC5E,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE;gBAC9B,IAAI,EAAE,SAAS,CAAC,qBAAqB;gBACrC,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,6FAA6F;aACxG,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,gFAAgF;IAChF,oEAAoE;IACpE,MAAM,YAAY,GAAG,MAA2E,CAAC;IACjG,IAAI,YAAY,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;QACrC,sFAAsF;QACtF,sFAAsF;QACtF,oFAAoF;QACpF,uFAAuF;QACvF,IAAI,kBAAkB,IAAI,OAAO,IAAI,UAAU,EAAE,EAAE,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,OAAO,EAAE,MAAM,IAAI,aAAa,OAAO,qCAAqC,EAC5E;YACE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EACN,6NAA6N;SAChO,CACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,uCAAuC;IACvC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;YACjC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,IAAI,CAAC,eAAe;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACvF,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE;YAC1C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,8CAA8C;SACzD,CAAC,CAAC;IACL,CAAC;IAED,wFAAwF;IACxF,oCAAoC;IACpC,MAAM,qBAAqB,CAAC,UAAU,EAAE,CAAC,CAAC;IAE1C,qFAAqF;IACrF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,aAAa,CAAgB;YACjC,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;YACrE,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC;gBAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,OAAO,CAAC,OAAO;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;SACH,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,gFAAgF;IAChF,+BAA+B;IAC/B,MAAM,OAAO,GAAkF,EAAE,CAAC;IAClG,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iFAAiF;YACjF,gFAAgF;YAChF,gFAAgF;YAChF,8EAA8E;YAC9E,4EAA4E;YAC5E,2EAA2E;YAC3E,2CAA2C;YAC3C,IAAI,GAAG,YAAY,QAAQ,IAAI,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChF,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE5C,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/B,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YACpE,iFAAiF;YACjF,qFAAqF;YACrF,oFAAoF;YACpF,mFAAmF;YACnF,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,IAAI,uBAAuB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM;gBACjE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB;gBACrC,CAAC,CAAC,SAAS,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,EAAE,EAAE,IAAI;gBACR,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC;QACJ,CAAC,CAAC,CAAC,GAAG,IAAI,CACX,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CACnI,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,WAAW;YAC7E,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,KAAK,CACR,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,QAAQ,CAChB,GAAG,MAAM,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,yBAAyB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACxG;YACE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,uFAAuF;SAClG,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/commands/proof-run.d.ts

@@ -0,0 +1,51 @@
+/**
+ * pb proof-run <proof-name> — run an admin-only proof against the seeded preview
+ * via the WP-459 proof bridge.
+ *
+ * NOT a kernel/MCP call: the bridge is a token-gated httpAction with a SIMPLER
+ * envelope than /api/aki. It authenticates with the short-lived preview admin
+ * token (pb_pat_…) minted into .productbrain/preview-admin.json by the seed
+ * (scripts/seed-preview.mjs step 7) — NOT the pb API key. So this command does
+ * not call getConfig()/kernelCall(); it reads the throwaway token from disk and
+ * POSTs directly to {siteUrl}/api/admin/proof-run.
+ *
+ *   Success → HTTP 200 { data: <verdict> } (verdict may carry zeroHandAuthoringProven)
+ *   Failure → non-200 { error, code }
+ *
+ * Chain: WP-459 (Admin-proof bridge).
+ */
+/** Resolved inputs for a proof-bridge call. */
+export interface ProofBridgeInputs {
+    siteUrl: string;
+    rawToken: string;
+    workspaceId: string;
+    /** Server-enforced expiry (ms epoch), if the token record carried one. */
+    expiresAt?: number;
+}
+/**
+ * Resolve the proof-bridge inputs (siteUrl, rawToken, workspaceId) from the
+ * worktree's seed sidecars. Pure + testable: takes the project root explicitly,
+ * throws CLIError with actionable guidance on any missing/invalid file.
+ */
+export declare function resolveProofBridgeInputs(projectRoot: string): ProofBridgeInputs;
+/** Parsed bridge response — discriminated on `ok`. */
+type BridgeResult = {
+    ok: true;
+    data: unknown;
+} | {
+    ok: false;
+    error: string;
+    code: string;
+};
+/**
+ * POST to the proof bridge and parse its simple envelope ({ data } / { error, code }).
+ * Uses an AbortController timeout (mirrors lib/client.js). Network / non-JSON
+ * failures surface as a structured { ok: false } so the caller can exit non-zero.
+ */
+export declare function callProofBridge(inputs: ProofBridgeInputs, proofName: string, timeoutMs?: number): Promise<BridgeResult>;
+interface ProofRunOptions {
+    proofName: string;
+}
+export declare function runProofRun(options: ProofRunOptions): Promise<void>;
+export {};
+//# sourceMappingURL=proof-run.d.ts.map

package/dist/commands/proof-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-run.d.ts","sourceRoot":"","sources":["../../src/commands/proof-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAuBH,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAeD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,CA8E/E;AAED,sDAAsD;AACtD,KAAK,YAAY,GACb;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,MAAM,EACjB,SAAS,SAAS,GACjB,OAAO,CAAC,YAAY,CAAC,CA8CvB;AAED,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAgEzE"}