@productbrain/cli 0.1.0-beta.49 → 0.1.0-beta.4902

package/dist/commands/relate.js

@@ -5,11 +5,12 @@
  * Thin client: relation type validation lives in Convex (BR-104).
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCallWithSession } from '../lib/client.js';
+import { kernelCallWithSession } from '../lib/client.js';
 import { readSession } from '../lib/session.js';
-import { runCliCommand } from '../lib/runner.js';
+import { runCliCommand, isJsonMode } from '../lib/runner.js';
 import { formatRelateReceipt, formatUnrelateReceipt } from '../formatters/relate.js';
 import { CLIError, ErrorCode } from '../lib/errors.js';
+import { emitWriteTargetNotice } from '../lib/workspaceNotice.js';
 export async function runRelate(options) {
     const config = await getConfigOrGuide(() => runRelate(options));
     if (!config)
@@ -20,7 +21,8 @@ export async function runRelate(options) {
         throw new CLIError('No active session.', {
             code: ErrorCode.SESSION_REQUIRED,
             category: 'session',
-            guidance: 'Run `pb session start` first. Write access requires a tracked session (DEC-9).',
+            // DEC-9
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
         });
     }
     const fromId = options.fromId.trim();
@@ -33,6 +35,8 @@ export async function runRelate(options) {
             guidance: 'Usage: pb relate <from-id> <type> <to-id>',
         });
     }
+    // WP-1: name the target workspace before the write (stderr, gated by json).
+    await emitWriteTargetNotice(isJsonMode());
     await runCliCommand({
         fn: async () => {
             const mcpArgs = {
@@ -43,7 +47,58 @@ export async function runRelate(options) {
             if (options.ifMissing) {
                 mcpArgs.ifMissing = true;
             }
-            const result = await mcpCallWithSession('chain.createEntryRelation', mcpArgs);
+            if (options.dryRun) {
+                mcpArgs.preview = true;
+            }
+            // WP-688 S2a review fix (thread bb1oj): a genuinely separate call arity for dry-run — a
+            // real write ALWAYS passes exactly 2 args (unchanged from before this fix), never a 3rd
+            // `undefined` options arg, so this is a true opt-IN to skipSessionTouch, not a silent
+            // no-op default threaded through every call.
+            const result = options.dryRun
+                ? await kernelCallWithSession('chain.createEntryRelation', mcpArgs, { skipSessionTouch: true })
+                : await kernelCallWithSession('chain.createEntryRelation', mcpArgs);
+            // WP-363 S5: Chain debt prevented — misuse pattern intercepted. Checked BEFORE the
+            // dry-run branch (WP-688 S2a review fix, thread bbzfq): the server now evaluates this
+            // gate regardless of preview, so a dry-run must reflect the SAME predicted diversion a
+            // real call would take, never a plain clean "would write" result.
+            if (result?.chainDebtPrevented) {
+                const alts = result.suggestedAlternatives ?? [];
+                if (options.dryRun) {
+                    console.warn(`\n⚠ [dry-run] Chain debt would be prevented`);
+                    console.warn(`  "${result.originalType ?? type}" is a common misuse for this entry pair.`);
+                    console.warn(`  A real (non-dry-run) call would create an agent sign-off proposal instead of writing this relation.`);
+                    console.warn(`\nSuggested alternatives:`);
+                    for (const alt of alts)
+                        console.warn(`  • ${alt.type}: ${alt.reason}`);
+                    return { fromId, type, toId, action: 'dry_run', chainDebtPrevented: true };
+                }
+                console.warn(`\n⚠ Chain debt prevented`);
+                console.warn(`  "${result.originalType ?? type}" is a common misuse for this entry pair.`);
+                console.warn(`  Created agent sign-off proposal: ${result.proposalId}`);
+                console.warn(`\nSuggested alternatives:`);
+                for (const alt of alts) {
+                    console.warn(`  • ${alt.type}: ${alt.reason}`);
+                }
+                // WP-640 SWEEP (#653 review): `pb proposals` is retired (DEC-1574) — the live route is
+                // the noun-scoped `pb proposal list`.
+                console.warn(`\nReview at /review in Cortex UI or use \`pb proposal list\` to manage.`);
+                return { fromId, type, toId, action: 'proposal_created', proposalId: result.proposalId };
+            }
+            // WP-688 S2a: preview mode returns a DIFFERENT shape than a real write — never asserted
+            // as 'related'. `alreadyExists` (thread bb38B) survives into the dry-run receipt: the
+            // ifMissing early-return in relations.ts is itself non-mutating regardless of `preview`,
+            // so it is safe and necessary to preserve — dropping it hid whether a real
+            // `--if-missing --dry-run` call would be a no-op.
+            if (options.dryRun) {
+                return {
+                    fromId, type, toId, action: 'dry_run',
+                    advisories: result?.advisories && result.advisories.length > 0 ? result.advisories : undefined,
+                    wouldBlock: result?.wouldBlock, blockingReason: result?.blockingReason,
+                    alreadyExists: options.ifMissing ? result?.alreadyExists === true : undefined,
+                    // WP-688 S2a review fix (thread bcFAC): predicted governs-proposal diversion.
+                    wouldRequireProposal: result?.wouldRequireProposal === true ? true : undefined,
+                };
+            }
             const isProposal = result?.status === 'proposal_created';
             const output = {
                 fromId,
@@ -55,6 +110,9 @@ export async function runRelate(options) {
                 output.proposalId = result.proposalId;
             if (options.ifMissing)
                 output.alreadyExists = result?.alreadyExists === true;
+            // WP-625 (S3 of WP-618, DEC-1546, TEN-3037): surface the relate door's advisories in the CLI.
+            if (result?.advisories && result.advisories.length > 0)
+                output.advisories = result.advisories;
             return output;
         },
         formatPretty: (result) => formatRelateReceipt(result),
@@ -70,7 +128,8 @@ export async function runUnrelate(options) {
         throw new CLIError('No active session.', {
             code: ErrorCode.SESSION_REQUIRED,
             category: 'session',
-            guidance: 'Run `pb session start` first. Write access requires a tracked session (DEC-9).',
+            // DEC-9
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
         });
     }
     const fromId = options.fromId.trim();
@@ -83,9 +142,11 @@ export async function runUnrelate(options) {
             guidance: 'Usage: pb unrelate <from-id> <type> <to-id>',
         });
     }
+    // WP-1: name the target workspace before the write (stderr, gated by json).
+    await emitWriteTargetNotice(isJsonMode());
     await runCliCommand({
         fn: async () => {
-            await mcpCallWithSession('chain.removeEntryRelation', {
+            await kernelCallWithSession('chain.removeEntryRelation', {
                 fromEntryId: fromId,
                 toEntryId: toId,
                 type,

package/dist/commands/relate.js.map

@@ -1 +1 @@
-{"version":3,"file":"relate.js","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAkBvD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,gFAAgF;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,2CAA2C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,OAAO,GAA4B;gBACvC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,2BAA2B,EAAE,OAAO,CAI/D,CAAC;YACd,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,KAAK,kBAAkB,CAAC;YACzD,MAAM,MAAM,GAAiB;gBAC3B,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,kBAA2B,CAAC,CAAC,CAAC,SAAkB;aACtE,CAAC;YACF,IAAI,UAAU,IAAI,MAAM,EAAE,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC5E,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,gFAAgF;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,kBAAkB,CAAC,2BAA2B,EAAE;gBACpD,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QAC9D,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"relate.js","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAuB,MAAM,yBAAyB,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AA+BlE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ;YACR,QAAQ,EAAE,wEAAwE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,2CAA2C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,qBAAqB,CAAC,UAAU,EAAE,CAAC,CAAC;IAE1C,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,OAAO,GAA4B;gBACvC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACzB,CAAC;YAmBD,wFAAwF;YACxF,wFAAwF;YACxF,sFAAsF;YACtF,6CAA6C;YAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;gBAC3B,CAAC,CAAC,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAyB;gBAC9K,CAAC,CAAC,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE,OAAO,CAAyB,CAAC;YAErJ,mFAAmF;YACnF,sFAAsF;YACtF,uFAAuF;YACvF,kEAAkE;YAClE,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC;gBAChD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;oBAC5D,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,YAAY,IAAI,IAAI,2CAA2C,CAAC,CAAC;oBAC3F,OAAO,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;oBACtH,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;oBAC1C,KAAK,MAAM,GAAG,IAAI,IAAI;wBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;oBACvE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAkB,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;gBACtF,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,YAAY,IAAI,IAAI,2CAA2C,CAAC,CAAC;gBAC3F,OAAO,CAAC,IAAI,CAAC,sCAAsC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,uFAAuF;gBACvF,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;gBACxF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAA2B,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YACpG,CAAC;YAED,wFAAwF;YACxF,sFAAsF;YACtF,yFAAyF;YACzF,2EAA2E;YAC3E,kDAAkD;YAClD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAkB;oBAC9C,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;oBAC9F,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc;oBACtE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS;oBAC7E,8EAA8E;oBAC9E,oBAAoB,EAAE,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;iBAC/E,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,KAAK,kBAAkB,CAAC;YACzD,MAAM,MAAM,GAAiB;gBAC3B,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,kBAA2B,CAAC,CAAC,CAAC,SAAkB;aACtE,CAAC;YACF,IAAI,UAAU,IAAI,MAAM,EAAE,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC5E,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;YAC7E,8FAA8F;YAC9F,IAAI,MAAM,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC9F,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ;YACR,QAAQ,EAAE,wEAAwE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,qBAAqB,CAAC,UAAU,EAAE,CAAC,CAAC;IAE1C,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE;gBAC9G,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QAC9D,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/restore.d.ts

@@ -0,0 +1,2 @@
+export declare function runRestore(entryIdArg: string): Promise<void>;
+//# sourceMappingURL=restore.d.ts.map

package/dist/commands/restore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.d.ts","sourceRoot":"","sources":["../../src/commands/restore.ts"],"names":[],"mappings":"AAoBA,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsElE"}

package/dist/commands/restore.js

@@ -0,0 +1,83 @@
+/**
+ * pb restore <entry-id> — restore an archived Chain entry to draft.
+ *
+ * WP-514 review round 2 (P1): the ONLY production path to restoreArchivedEntry — a brand-new,
+ * always-authority-gated capability (VALID_ENTRY_STATUS_TRANSITIONS stays closed for archived,
+ * lib/guards.ts:146; there is no legacy fallback). Thin client mirroring `pb update`'s
+ * session/refusal handling — the server owns validation (BR-104).
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCallWithSession } from '../lib/client.js';
+import { readSession } from '../lib/session.js';
+import { isJsonMode } from '../lib/runner.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { emitWriteTargetNotice } from '../lib/workspaceNotice.js';
+export async function runRestore(entryIdArg) {
+    const config = await getConfigOrGuide(() => runRestore(entryIdArg));
+    if (!config)
+        return;
+    const json = isJsonMode();
+    const session = readSession();
+    if (!session) {
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
+        });
+    }
+    const entryId = entryIdArg.trim();
+    if (!entryId) {
+        throw new CLIError('Entry ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb restore <entry-id>',
+        });
+    }
+    await emitWriteTargetNotice(json);
+    if (!json)
+        process.stdout.write(`Restoring ${entryId} to draft...\n`);
+    let result;
+    try {
+        result = await kernelCallWithSession('chain.restoreArchivedEntry', {
+            entryId, changedBy: `agent:${session.sessionId}`,
+        });
+    }
+    catch (err) {
+        const mcpErr = err;
+        if (err instanceof Error && err.name === 'McpError') {
+            // Sweep finding #5: preserve an authority refusal as an authority refusal — mirrors
+            // runUpdate (update.ts). Flattening every gateway error to VALIDATION_FAILED told a
+            // machine caller to "fix input" even for a deny-by-default AUTH_DENIED (e.g. a
+            // delegated credential), instead of routing the work to an authorized principal.
+            const serverCode = String(mcpErr.code);
+            if (serverCode === 'AUTHZ_PERMISSION_DENIED' || serverCode === ErrorCode.AUTH_DENIED) {
+                throw new CLIError(mcpErr.message, {
+                    code: ErrorCode.AUTH_DENIED,
+                    category: 'auth',
+                    guidance: mcpErr.guidance,
+                });
+            }
+            throw new CLIError(mcpErr.message, { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
+        }
+        throw err;
+    }
+    if (result.outcome === 'refused') {
+        const { refusal } = result;
+        if (json) {
+            process.stdout.write(JSON.stringify({ outcome: 'refused', refusal }) + '\n');
+        }
+        const authorityRefusal = refusal.code !== 'not_archived' && refusal.code !== 'still_superseded';
+        throw new CLIError(refusal.reason ?? `Restoring ${entryId} was refused.`, {
+            code: authorityRefusal ? ErrorCode.AUTH_DENIED : ErrorCode.VALIDATION_FAILED,
+            category: authorityRefusal ? 'auth' : 'validation',
+            guidance: refusal.requiredAction ?? 'Route this change to the accountable role or Team Lead.',
+        });
+    }
+    if (json) {
+        process.stdout.write(JSON.stringify({ outcome: 'restored', entryId }) + '\n');
+    }
+    else {
+        process.stdout.write(`${entryId} restored to draft.\n`);
+    }
+}
+//# sourceMappingURL=restore.js.map

package/dist/commands/restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.js","sourceRoot":"","sources":["../../src/commands/restore.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAMlE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAE1B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACxC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,wEAAwE;SAClF,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE;YAC3C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,8BAA8B;SACxC,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,gBAAgB,CAAC,CAAC;IAEtE,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,qBAAqB,CAAgB,4BAA4B,EAAE;YACjF,OAAO,EAAE,SAAS,EAAE,SAAS,OAAO,CAAC,SAAS,EAAE;SAChD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,GAAe,CAAC;QAC/B,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrD,oFAAoF;YACpF,oFAAoF;YACpF,+EAA+E;YAC/E,iFAAiF;YACjF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,UAAU,KAAK,yBAAyB,IAAI,UAAU,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;gBACtF,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;oBAClC,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBACzB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,GAAG,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,IAAI,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,CAAC;QAChG,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,OAAO,eAAe,EAAE;YACzE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB;YAC5E,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;YAClD,QAAQ,EAAE,OAAO,CAAC,cAAc,IAAI,yDAAyD;SAC7F,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,uBAAuB,CAAC,CAAC;IACzD,CAAC;AACF,CAAC"}

package/dist/commands/rework.d.ts

@@ -0,0 +1,24 @@
+/**
+ * pb rework report — report an observed rework signal (WP-487 Slice 1 / FEAT-1373).
+ *
+ * Fills the M4 rework-meter slot reserved by `convex/scoreboard/aggregates.ts:1-15,597`. This is
+ * the SOLE ingestion path this quarter (founder-decided, WP-C spec §3/§4 Slice 1 Pass-2 review) —
+ * an agent-native checkpoint the CLI reports explicitly, not a CI/git-webhook adapter (excluded,
+ * spec §6). Requires an active session (mirrors `pb capture`, DEC-9/BR-8): the M4 join key needs
+ * a stable `conversationId`, which only resolves inside a tracked session.
+ */
+export interface ReworkReportOptions {
+    entryId: string;
+    classification: string;
+    reportedVia?: string;
+    attributable?: boolean;
+    task?: string;
+    /** Codex P2 fix (round 2, post-merge review): explicit conversation override, mirroring
+     *  `pb session start --conversation <id>`. Without this, `pb rework report` has no way to
+     *  find a session started with `--conversation <id>` when the shell never also set
+     *  PB_CONVERSATION_ID — readSession() with no override falls back to the legacy marker path,
+     *  not the conversation-scoped one `session start --conversation` wrote to. */
+    conversation?: string;
+}
+export declare function runReworkReport(options: ReworkReportOptions): Promise<void>;
+//# sourceMappingURL=rework.d.ts.map

package/dist/commands/rework.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework.d.ts","sourceRoot":"","sources":["../../src/commands/rework.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;mFAI+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AASD,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsFjF"}

package/dist/commands/rework.js

@@ -0,0 +1,97 @@
+/**
+ * pb rework report — report an observed rework signal (WP-487 Slice 1 / FEAT-1373).
+ *
+ * Fills the M4 rework-meter slot reserved by `convex/scoreboard/aggregates.ts:1-15,597`. This is
+ * the SOLE ingestion path this quarter (founder-decided, WP-C spec §3/§4 Slice 1 Pass-2 review) —
+ * an agent-native checkpoint the CLI reports explicitly, not a CI/git-webhook adapter (excluded,
+ * spec §6). Requires an active session (mirrors `pb capture`, DEC-9/BR-8): the M4 join key needs
+ * a stable `conversationId`, which only resolves inside a tracked session.
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCallWithSession } from '../lib/client.js';
+import { runCliCommand } from '../lib/runner.js';
+import { readSession } from '../lib/session.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+const CLASSIFICATIONS = ['revision', 'ci_review_correction', 'user_override'];
+const REPORTED_VIA = ['followup_commit', 'ci_rerun', 'manual'];
+export async function runReworkReport(options) {
+    const config = await getConfigOrGuide(() => runReworkReport(options));
+    if (!config)
+        return;
+    const entryId = options.entryId?.trim();
+    if (!entryId) {
+        throw new CLIError('An entry ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    if (!CLASSIFICATIONS.includes(options.classification)) {
+        throw new CLIError(`--classification must be one of: ${CLASSIFICATIONS.join(', ')}`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    const classification = options.classification;
+    const reportedVia = (options.reportedVia ?? 'manual');
+    if (!REPORTED_VIA.includes(reportedVia)) {
+        throw new CLIError(`--via must be one of: ${REPORTED_VIA.join(', ')}`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    // Require active session (DEC-9, BR-8, mirrors pb capture) — write access needs a tracked
+    // session, and the M4 join key needs the session's resolved conversationId.
+    //
+    // Codex P2 fix (round 2, post-merge review): pass `options.conversation` through to
+    // readSession() so a caller who started the session with `pb session start --conversation <id>`
+    // (writing the marker to .productbrain/sessions/<id>.json) can find it here even when the shell
+    // never ALSO exported PB_CONVERSATION_ID — a bare readSession() falls back to the legacy marker
+    // path and misses it. Without this override, an agent following `pb session start`'s own
+    // recovery guidance would still hit "No active session" on the very next command.
+    const session = readSession(options.conversation);
+    if (!session) {
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: 'Run `pb session start` first. Write access requires a tracked session. If you started a ' +
+                'session with `pb session start --conversation <id>`, re-run this command with ' +
+                '`--conversation <id>` (or export PB_CONVERSATION_ID=<id> in this shell) so it resolves the ' +
+                'same conversation-scoped marker.',
+        });
+    }
+    if (!session.conversationId) {
+        // Fail closed client-side too (TEN-2728): a rework signal with no conversationId cannot
+        // anchor the M4 join, and the server refuses it anyway — surface the real cause here rather
+        // than a generic server validation error.
+        throw new CLIError('No conversation identity resolved for this session.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'A rework signal needs a stable conversationId to join against the governance-served log (M4). ' +
+                'Run this from a harness that sets PB_CONVERSATION_ID / CLAUDE_CODE_SESSION_ID / CURSOR_CONVERSATION_ID, ' +
+                'or start a fresh session with `pb session start --conversation <id>` and re-run this command ' +
+                'with the SAME `--conversation <id>` (the flag is only read by `session start` otherwise).',
+        });
+    }
+    await runCliCommand({
+        fn: async () => {
+            return await kernelCallWithSession('rework.report', {
+                // Codex P1 fix (post-merge review): sessionId lets the server resolve conversationId
+                // AUTHORITATIVELY from the caller's own agentSessions row (mirrors served.ts's
+                // recordGovernanceServed stamping) rather than trusting the client-supplied string alone.
+                // conversationId still travels as a fallback for the server's bare-conversationId lookup
+                // path — both are verified server-side against the gateway-injected caller identity.
+                sessionId: session.sessionId,
+                conversationId: session.conversationId,
+                entryId,
+                classification,
+                reportedVia,
+                ...(options.attributable ? { attributableToGovernanceMiss: true } : {}),
+                ...(options.task ? { task: options.task } : {}),
+            });
+        },
+        formatPretty: (result) => result.deduped
+            ? `Rework signal already recorded (${classification}, via ${reportedVia}) — reused the existing row from a moment ago.`
+            : `Rework signal recorded (${classification}, via ${reportedVia}).`,
+    });
+}
+//# sourceMappingURL=rework.js.map

package/dist/commands/rework.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework.js","sourceRoot":"","sources":["../../src/commands/rework.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,sBAAsB,EAAE,eAAe,CAAU,CAAC;AAGvF,MAAM,YAAY,GAAG,CAAC,iBAAiB,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAwBxE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA4B;IAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE;YAC7C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAsC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,QAAQ,CAAC,oCAAoC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACnF,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAsC,CAAC;IAEtE,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAsB,CAAC;IAC3E,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAAC,yBAAyB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACrE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,4EAA4E;IAC5E,EAAE;IACF,oFAAoF;IACpF,gGAAgG;IAChG,gGAAgG;IAChG,gGAAgG;IAChG,yFAAyF;IACzF,kFAAkF;IAClF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EACN,0FAA0F;gBAC1F,gFAAgF;gBAChF,6FAA6F;gBAC7F,kCAAkC;SACrC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,wFAAwF;QACxF,4FAA4F;QAC5F,0CAA0C;QAC1C,MAAM,IAAI,QAAQ,CAAC,qDAAqD,EAAE;YACxE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EACN,gGAAgG;gBAChG,0GAA0G;gBAC1G,+FAA+F;gBAC/F,2FAA2F;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAqB;QACtC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,OAAO,MAAM,qBAAqB,CAA4C,eAAe,EAAE;gBAC7F,qFAAqF;gBACrF,+EAA+E;gBAC/E,0FAA0F;gBAC1F,yFAAyF;gBACzF,qFAAqF;gBACrF,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,OAAO;gBACP,cAAc;gBACd,WAAW;gBACX,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CACvB,MAAM,CAAC,OAAO;YACZ,CAAC,CAAC,mCAAmC,cAAc,SAAS,WAAW,gDAAgD;YACvH,CAAC,CAAC,2BAA2B,cAAc,SAAS,WAAW,IAAI;KACxE,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/scoreboard.d.ts

@@ -0,0 +1,28 @@
+/**
+ * pb scoreboard — the AGENT-PRIMARY flywheel scoreboard surface (spec §2d).
+ *
+ * The point of this board is NOT a dashboard a human watches — it is telemetry the AGENT reads
+ * to track the flywheel, diagnose what's degrading, and drive the fix without the human looking.
+ * So:
+ *   - `--json`: emits the structured M1/M2/M3/materialization payload (from the ONE internal
+ *     `scoreboard` action, via the AKI `scoreboard.get` route) PLUS the diagnosis layer (A4) and
+ *     the CLI-computed M5 local-pull drift (A5). This is the agent's structured consumption shape.
+ *   - pretty: a compact human-readable board with per-metric status + next action.
+ *
+ * The diagnosis layer is honest by design: unpinned-threshold flips render `awaiting` (never an
+ * invented number), M4 is a standing `awaiting` tile (deferred, TEN-2433), and coaching/moat
+ * quality is a standing `unmeasured` line (TEN-2377) so four green tiles ≠ a healthy moat.
+ */
+import { type ScoreboardPayload, type ScoreboardDiagnosis } from '../scoreboard/diagnose.js';
+import type { LocalDriftM5 } from '../scoreboard/diagnose.js';
+/** The full structured shape `pb scoreboard --json` emits (agent consumption surface). */
+export interface ScoreboardCliView {
+    payload: ScoreboardPayload;
+    /** M5 local-pull drift — computed at the CLI (DEC-1284), NOT in the data payload. */
+    localDrift: LocalDriftM5;
+    diagnosis: ScoreboardDiagnosis;
+}
+export declare function runScoreboard(options?: {
+    task?: string;
+}): Promise<void>;
+//# sourceMappingURL=scoreboard.d.ts.map

package/dist/commands/scoreboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoreboard.d.ts","sourceRoot":"","sources":["../../src/commands/scoreboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAY,KAAK,iBAAiB,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEvG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAG9D,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,qFAAqF;IACrF,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,mBAAmB,CAAC;CAChC;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBlF"}

package/dist/commands/scoreboard.js

@@ -0,0 +1,40 @@
+/**
+ * pb scoreboard — the AGENT-PRIMARY flywheel scoreboard surface (spec §2d).
+ *
+ * The point of this board is NOT a dashboard a human watches — it is telemetry the AGENT reads
+ * to track the flywheel, diagnose what's degrading, and drive the fix without the human looking.
+ * So:
+ *   - `--json`: emits the structured M1/M2/M3/materialization payload (from the ONE internal
+ *     `scoreboard` action, via the AKI `scoreboard.get` route) PLUS the diagnosis layer (A4) and
+ *     the CLI-computed M5 local-pull drift (A5). This is the agent's structured consumption shape.
+ *   - pretty: a compact human-readable board with per-metric status + next action.
+ *
+ * The diagnosis layer is honest by design: unpinned-threshold flips render `awaiting` (never an
+ * invented number), M4 is a standing `awaiting` tile (deferred, TEN-2433), and coaching/moat
+ * quality is a standing `unmeasured` line (TEN-2377) so four green tiles ≠ a healthy moat.
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCall } from '../lib/client.js';
+import { runCliCommand } from '../lib/runner.js';
+import { diagnose } from '../scoreboard/diagnose.js';
+import { computeLocalDrift } from '../scoreboard/localDrift.js';
+import { formatScoreboard } from '../formatters/scoreboard.js';
+export async function runScoreboard(options = {}) {
+    const config = await getConfigOrGuide(() => runScoreboard(options));
+    if (!config)
+        return;
+    await runCliCommand({
+        fn: async () => {
+            // ONE internal computation, reached via the AKI route. workspaceId is injected from auth
+            // (server-derived, fail-closed) — never sent by the CLI.
+            const payload = await kernelCall('scoreboard.get', options.task ? { task: options.task } : {});
+            // A5: compute the TRUE M5 local-pull drift here (the data layer only has the server-side
+            // generation time — DEC-1284). Fail-soft if `.productbrain/` is absent.
+            const localDrift = computeLocalDrift(payload.materialization.latestMaterializedAt);
+            const diagnosis = diagnose(payload, localDrift);
+            return { payload, localDrift, diagnosis };
+        },
+        formatPretty: (view) => formatScoreboard(view),
+    });
+}
+//# sourceMappingURL=scoreboard.js.map

package/dist/commands/scoreboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoreboard.js","sourceRoot":"","sources":["../../src/commands/scoreboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAoD,MAAM,2BAA2B,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAU/D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAA6B,EAAE;IACjE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,yFAAyF;YACzF,yDAAyD;YACzD,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,gBAAgB,EAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC;YACF,yFAAyF;YACzF,wEAAwE;YACxE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC;YACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,wBAAsB,SAAS,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzE"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,wBAAsB,SAAS,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzE"}

package/dist/commands/search.js

@@ -3,7 +3,7 @@
  * BET-181 Slice 0: routes through runCliCommand for JSON-default output.
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCall } from '../lib/client.js';
+import { kernelCall } from '../lib/client.js';
 import { runCliCommand } from '../lib/runner.js';
 import { formatSearchResults } from '../formatters/search.js';
 export async function runSearch(options) {
@@ -11,7 +11,7 @@ export async function runSearch(options) {
     if (!config)
         return;
     await runCliCommand({
-        fn: () => mcpCall('chain.searchEntries', { query: options.query }),
+        fn: () => kernelCall('chain.searchEntries', { query: options.query }),
         formatPretty: (results) => formatSearchResults(results ?? []),
     });
 }

package/dist/commands/search.js.map

@@ -1 +1 @@
-{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,yBAAyB,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA0B;IACxD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAiB;QAClC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAiB,qBAAqB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAClF,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,IAAI,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,yBAAyB,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA0B;IACxD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAiB;QAClC,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAkD,qBAAqB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACtH,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,IAAI,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/session.d.ts

@@ -1,20 +1,72 @@
 /**
- * pb session start / close — CLI write session lifecycle.
- * Opens a tracked agent session (DEC-9, BR-8) with clientKind: 'cli' (DEC-184).
- * Session ID persisted to .productbrain/session.json (TEN-264 option 1).
- * BET-181 Slice 0: uses isJsonMode() for output branching. Existing --json flag
- * on session start preserved for backward compatibility.
+ * pb session start / close — CLI write session lifecycle. Opens a tracked agent session (DEC-9,
+ * BR-8) with clientKind: 'cli' (DEC-184). Session ID persisted to .productbrain/session.json
+ * (TEN-264 option 1). BET-181 Slice 0: uses isJsonMode() for output branching; existing --json
+ * flag on session start preserved for backward compatibility.
  */
-export declare function runSessionStart(options?: {
+type SessionStartOptions = {
     /** @deprecated Use global --json flag instead. Preserved for backward compatibility. */
     json?: boolean;
-}): Promise<void>;
+    /** WP-479 E2: explicit conversation-identity override (the manual seam — same tier as
+     *  PB_CONVERSATION_ID, takes priority over every env-detected channel). */
+    conversation?: string;
+};
+/**
+ * Auto-populate the session `label` (WP-479 E2, founder-day fix Pass 2) — the founder's recall
+ * cue for "which of my N conversations" is the worktree/branch, never a UUID. Priority:
+ * SUPERSET_WORKSPACE_NAME env → git branch (silent fail) → cwd basename. Server-side clamps to
+ * ~120 chars (mirrors MAX_TASK_LEN) — no client-side truncation needed here.
+ */
+export declare function resolveSessionLabel(): string;
+export declare function runSessionStart(options?: SessionStartOptions): Promise<void>;
 /**
  * pb session id — print current session ID bare to stdout (machine-readable).
  * Resolves TEN-707. Zero network call — reads local session.json only.
  */
 export declare function runSessionId(): void;
+/**
+ * pb session reset — hard-reset the worktree-local pb SESSION state. TEN-2189 / WP-456 E2.
+ *
+ * Discards session.json outright (via discardSession — NO resume marker, unlike
+ * `pb session close`). Purely local: no network call, no key needed — this is the recovery
+ * path when a session is stranded pinned to the wrong workspace (e.g. left over after a
+ * pb:preview/pb:real binding flip), so it must work even when the current binding is broken.
+ *
+ * Scope: SESSION state only. The preview *binding* (config.local.json keys + the
+ * .productbrain/PREVIEW_MODE marker) is owned end-to-end by `npm run pb:preview` /
+ * `npm run pb:real` — reset never touches it, so the marker can never disagree with the keys
+ * that actually route writes (codex PR #145 review: clearing the marker without the keys left
+ * the worktree silently still preview-bound). To return a preview-bound worktree to the real
+ * Chain: `pb session reset` (clear the session) then `npm run pb:real` (clear the binding).
+ *
+ * Guard (R4): if there IS an active session, confirm before discarding so in-flight captures
+ * aren't silently stranded. `--force` skips the prompt. In a non-interactive context the prompt
+ * can't run, so `--force` is required there.
+ *
+ * WP-479 review fix (Codex re-review): reset clears ALL session markers — the legacy session.json
+ * AND every per-conversation marker under `.productbrain/sessions/`. This is the recovery the
+ * pb:real/pb:preview binding-flip guard prints, and that guard refuses on ANY active marker; a
+ * conversation-scoped reset couldn't clear a sibling marker it has no env to resolve, so the flip
+ * would stay blocked unless `--force` (which strands the server session). A hard reset legitimately
+ * clears the whole worktree's local session state.
+ */
+export declare function runSessionReset(options?: {
+    force?: boolean;
+}): Promise<void>;
 export declare function runSessionClose(options?: {
     force?: boolean;
 }): Promise<void>;
+/**
+ * pb session list — active sessions (with the per-key quota gauge) + a handful of recent
+ * non-active ones. Pure read over `agent.listSessions`; no local session required — this is
+ * exactly the command you run when you're NOT sure which session is yours.
+ */
+export declare function runSessionList(): Promise<void>;
+/**
+ * pb session show <id-or-conversation> — reconstruct the full conversation lineage (all
+ * agentSessions rows across 2h resumes + legacy linkedPreviousSessionId chains) plus the
+ * governance serves recorded for the conversation.
+ */
+export declare function runSessionShow(idOrConversation: string): Promise<void>;
+export {};
 //# sourceMappingURL=session.d.ts.map

package/dist/commands/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/commands/session.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA2BH,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAC7C,wFAAwF;IACxF,IAAI,CAAC,EAAE,OAAO,CAAA;CACV,GAAG,OAAO,CAAC,IAAI,CAAC,CAuErB;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAUnC;AAED,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDtF"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/commands/session.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA6CH,KAAK,mBAAmB,GAAG;IACzB,wFAAwF;IACxF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;+EAC2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAc5C;AA6CD,wBAAsB,eAAe,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBtF;AA6ND;;;GAGG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAUnC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0CtF;AAED,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAwJtF;AAID;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAQpD;AAWD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B5E"}