@productbrain/cli 0.1.0-beta.5 → 0.1.0-beta.5060

package/dist/lib/workspaceNotice.js

@@ -0,0 +1,95 @@
+/**
+ * WP-1 — Loud workspace identity on every Chain write.
+ *
+ * Running `pb` from a directory with no repo pin (e.g. `~/`) silently resolves the
+ * GLOBAL profile and writes to whichever Chain that points at — proven live: captures
+ * meant for one workspace landed on another. This module makes every Chain write NAME
+ * its target workspace on stderr, and qualifies the line LOUDLY when the binding is an
+ * unpinned fallback (`global`/`default` — no repo pin) so a wrong-Chain write is never
+ * silent. An explicit binding (`local`/`env`) gets a plain, non-alarming line.
+ *
+ * Label source — the PROFILE SLUG only, via `resolveReportedProfile()`: it returns
+ * `missing-pin` when the credential cascade has ALREADY refused (nothing to name — see the
+ * formatter below), and otherwise delegates to `resolveEffectiveProfile()`, whose contract
+ * the rest of this paragraph describes.
+ * Deliberately NOT a workspace-name probe: `resolveEffectiveProfile()` reports the
+ * *configured* pin even when it dangles (TEN-2163), while a probe resolves what
+ * `resolveConfig()` actually binds. On a dangling local pin the two DISAGREE — the
+ * profile says `source='local'` (a plain, reassuring line) while the probe returns the
+ * GLOBAL workspace the write really drifts to. That would print a non-alarming line over
+ * the exact silent-drift this notice exists to expose. One resolution path means the
+ * label and its qualifier can never contradict — and there is no per-write network
+ * round-trip in front of the write.
+ *
+ * Output contract — follows capture.ts's grounding banner (the JSON-safety pattern):
+ *  - The notice is written to STDERR, never stdout, so strict-JSON stdout is byte-for-byte
+ *    unchanged in every mode.
+ *  - `--json` suppresses only the PLAIN line for an explicit binding (no warning to carry,
+ *    pure noise in agent logs). The unpinned-fallback WARNING is emitted in json mode too:
+ *    agents invoke pb with `--json` and do most of the writing, so suppressing it there
+ *    disabled this guard for its primary audience (TEN-3238).
+ *  - The gate is the `json` flag alone — not `--quiet`: a quiet human run still names its
+ *    target Chain.
+ *
+ * SSOT: one pure formatter + one thin emitter, called from all four write commands —
+ * no per-command copy-paste.
+ */
+import { resolveReportedProfile } from './reportedProfile.js';
+/**
+ * Build the one-line target-workspace notice — or null when there is nothing to say.
+ *
+ *  - `none`               → null (not configured: nothing to name, stay silent).
+ *  - `missing-pin`        → null (declared project, no pin: the CLI REFUSES this write, so
+ *                           there is no target workspace to name — and never `→ unknown`).
+ *  - `global` / `default` → qualified + hint (no repo pin → an unpinned fallback binding).
+ *  - `local` / `env`      → plain (an explicit, intentional binding).
+ *
+ * Pure: no IO. The display label is the profile slug — a single resolution path, so the
+ * label and the qualifier can never contradict each other.
+ */
+export function formatWriteTargetNotice({ profile, source }) {
+    if (source === 'none' || source === 'missing-pin')
+        return null;
+    const name = profile?.trim() || 'unknown';
+    if (source === 'global' || source === 'default') {
+        return `→ ${name} (global default — run from your project dir to use its workspace)`;
+    }
+    // 'local' | 'env' — an explicit, intentional binding.
+    return `→ ${name}`;
+}
+/**
+ * Resolve identity and write the target notice to STDERR. Pass the SAME `json` value the
+ * command computed (e.g. `isJsonMode() || options.json === true`).
+ *
+ * `json` suppresses only the PLAIN line for an explicit binding. The unpinned-fallback
+ * WARNING is never suppressed (TEN-3238): `--json` is how agents invoke pb, and agents are
+ * the bulk of Chain writers, so gating the warning on `json` switched this guard off in
+ * exactly the mode that needed it — a wrong-workspace write from an unpinned directory was
+ * silent for every agent. Emitting it in json mode is safe because it goes to STDERR, so
+ * strict JSON on stdout stays byte-for-byte unchanged either way (and the CLI already writes
+ * unconditional stderr warnings elsewhere, e.g. the preview-scrub misroute in config.ts).
+ * The plain line stays human-only: it carries no warning, so it is pure noise in agent logs.
+ *
+ * Never throws and does no network IO: a wrong/unreadable config degrades to silence, and
+ * the label comes from `resolveReportedProfile()` — only fast local config reads
+ * (no probe) in front of the write. It is safe to call immediately before any Chain write.
+ */
+export async function emitWriteTargetNotice(json) {
+    let profile = null;
+    let source = 'none';
+    try {
+        ({ profile, source } = resolveReportedProfile());
+    }
+    catch {
+        return; // unreadable/racing config — say nothing rather than crash a write.
+    }
+    if (source === 'none' || source === 'missing-pin')
+        return;
+    const isUnpinnedFallback = source === 'global' || source === 'default';
+    if (json && !isUnpinnedFallback)
+        return;
+    const notice = formatWriteTargetNotice({ profile, source });
+    if (notice)
+        process.stderr.write(notice + '\n');
+}
+//# sourceMappingURL=workspaceNotice.js.map

package/dist/lib/workspaceNotice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceNotice.js","sourceRoot":"","sources":["../../src/lib/workspaceNotice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,sBAAsB,EAA8B,MAAM,sBAAsB,CAAC;AAU1F;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAA0B;IACjF,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,KAAK,IAAI,oEAAoE,CAAC;IACvF,CAAC;IACD,sDAAsD;IACtD,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAa;IACvD,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,MAAM,GAA0B,MAAM,CAAC;IAC3C,IAAI,CAAC;QACH,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,sBAAsB,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,oEAAoE;IAC9E,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO;IAE1D,MAAM,kBAAkB,GAAG,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,CAAC;IACvE,IAAI,IAAI,IAAI,CAAC,kBAAkB;QAAE,OAAO;IAExC,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAClD,CAAC"}

package/dist/lib/workspaceVocabCache.d.ts

@@ -0,0 +1,60 @@
+/**
+ * 5-minute TTL cache for workspace vocabulary context (WP-436 S2).
+ *
+ * Purpose (R2 mitigation): the CLI resolves vocabulary labels on every invocation.
+ * Without a cache, each `pb orient` / `pb get` / `pb capture` would call
+ * `chain.getVocabulary` — adding a Convex round-trip overhead and risking
+ * handshake-time staleness. A 5-min TTL short-circuits repeat calls within
+ * a typical session while staying fresh enough that label changes land quickly.
+ *
+ * PAT-230: the cache holds WorkspaceVocabCtx (pure data, no Convex imports here).
+ * DEC-1021: only Axis 2 (collectionLabels) lives here; Axis 1 (displayNames) is untouched.
+ *
+ * S4 note: when Cortex UI builds its `vocabularyStore`, it should mirror this
+ * contract — a keyed map by workspaceId with an expiresAt field (Cortex has
+ * direct access to workspaceId; the CLI uses apiKey as a 1:1 surrogate, since
+ * the HTTP gateway server-side injects workspaceId from authResult per
+ * convex/http.ts:675).
+ */
+import type { WorkspaceVocabCtx } from './canonicalRefs.js';
+/**
+ * Get a cached WorkspaceVocabCtx by cacheKey, or null if expired/missing.
+ * Prints a staleness warning when the entry is older than STALE_WARN_MS.
+ */
+export declare function getCachedVocabCtx(cacheKey: string): WorkspaceVocabCtx | null;
+/**
+ * Store a WorkspaceVocabCtx under cacheKey with a 5-min TTL.
+ */
+export declare function setCachedVocabCtx(cacheKey: string, ctx: WorkspaceVocabCtx): void;
+/**
+ * Explicitly invalidate a cached vocab context by cacheKey.
+ * Call this when `updateCollectionLabels` mutation succeeds (e.g. after `pb handshake`).
+ */
+export declare function invalidateVocabCtx(cacheKey: string): void;
+/**
+ * Clear all cached entries (useful for testing or `pb handshake --refresh`).
+ */
+export declare function clearVocabCache(): void;
+/**
+ * Get the cached vocab context, or fetch it via the provided async fetcher on cache miss.
+ *
+ * Usage pattern at CLI command sites:
+ * ```ts
+ * const vocabCtx = await getOrFetchVocabCtx(config.apiKey, async () => {
+ *   type VocabResult = { collectionLabels?: Record<string, unknown> };
+ *   const vocab = await kernelCall<VocabResult>('chain.getVocabulary', {});
+ *   return vocab?.collectionLabels
+ *     ? { collectionLabels: vocab.collectionLabels as WorkspaceVocabCtx['collectionLabels'] }
+ *     : null;
+ * });
+ * ```
+ *
+ * - `cacheKey`: use the API key as a surrogate for cacheKey (1:1 mapping at CLI layer).
+ * - `fetcher`: async function that resolves the vocab ctx; returns null on failure to signal
+ *   "don't cache, fall back to resolver literal". Fetcher errors are swallowed — vocabulary
+ *   labels are advisory (PAT-230 / fail-open principle).
+ *
+ * Returns WorkspaceVocabCtx on cache hit or successful fetch; undefined on error/null fetcher result.
+ */
+export declare function getOrFetchVocabCtx(cacheKey: string, fetcher: () => Promise<WorkspaceVocabCtx | null>): Promise<WorkspaceVocabCtx | undefined>;
+//# sourceMappingURL=workspaceVocabCache.d.ts.map

package/dist/lib/workspaceVocabCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceVocabCache.d.ts","sourceRoot":"","sources":["../../src/lib/workspaceVocabCache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAc5D;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAe5E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAEhF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEzD;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAC/C,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAcxC"}

package/dist/lib/workspaceVocabCache.js

@@ -0,0 +1,98 @@
+/**
+ * 5-minute TTL cache for workspace vocabulary context (WP-436 S2).
+ *
+ * Purpose (R2 mitigation): the CLI resolves vocabulary labels on every invocation.
+ * Without a cache, each `pb orient` / `pb get` / `pb capture` would call
+ * `chain.getVocabulary` — adding a Convex round-trip overhead and risking
+ * handshake-time staleness. A 5-min TTL short-circuits repeat calls within
+ * a typical session while staying fresh enough that label changes land quickly.
+ *
+ * PAT-230: the cache holds WorkspaceVocabCtx (pure data, no Convex imports here).
+ * DEC-1021: only Axis 2 (collectionLabels) lives here; Axis 1 (displayNames) is untouched.
+ *
+ * S4 note: when Cortex UI builds its `vocabularyStore`, it should mirror this
+ * contract — a keyed map by workspaceId with an expiresAt field (Cortex has
+ * direct access to workspaceId; the CLI uses apiKey as a 1:1 surrogate, since
+ * the HTTP gateway server-side injects workspaceId from authResult per
+ * convex/http.ts:675).
+ */
+const TTL_MS = 5 * 60 * 1000; // 5 minutes
+const STALE_WARN_MS = 4 * 60 * 1000; // warn after 4 minutes (1 minute before expiry)
+/** In-memory cache: cacheKey (CLI: apiKey; Cortex would use workspaceId) → CacheEntry. */
+const cache = new Map();
+/**
+ * Get a cached WorkspaceVocabCtx by cacheKey, or null if expired/missing.
+ * Prints a staleness warning when the entry is older than STALE_WARN_MS.
+ */
+export function getCachedVocabCtx(cacheKey) {
+    const entry = cache.get(cacheKey);
+    if (!entry)
+        return null;
+    const now = Date.now();
+    if (now >= entry.expiresAt) {
+        cache.delete(cacheKey);
+        return null;
+    }
+    if (now - (entry.expiresAt - TTL_MS) >= STALE_WARN_MS) {
+        // Staleness hint: labels were fetched > 4 min ago, will refresh within 1 min.
+        process.stderr.write(`[pb] Workspace vocabulary context is almost stale — will refresh on next invocation.\n`);
+    }
+    return entry.ctx;
+}
+/**
+ * Store a WorkspaceVocabCtx under cacheKey with a 5-min TTL.
+ */
+export function setCachedVocabCtx(cacheKey, ctx) {
+    cache.set(cacheKey, { ctx, expiresAt: Date.now() + TTL_MS });
+}
+/**
+ * Explicitly invalidate a cached vocab context by cacheKey.
+ * Call this when `updateCollectionLabels` mutation succeeds (e.g. after `pb handshake`).
+ */
+export function invalidateVocabCtx(cacheKey) {
+    cache.delete(cacheKey);
+}
+/**
+ * Clear all cached entries (useful for testing or `pb handshake --refresh`).
+ */
+export function clearVocabCache() {
+    cache.clear();
+}
+/**
+ * Get the cached vocab context, or fetch it via the provided async fetcher on cache miss.
+ *
+ * Usage pattern at CLI command sites:
+ * ```ts
+ * const vocabCtx = await getOrFetchVocabCtx(config.apiKey, async () => {
+ *   type VocabResult = { collectionLabels?: Record<string, unknown> };
+ *   const vocab = await kernelCall<VocabResult>('chain.getVocabulary', {});
+ *   return vocab?.collectionLabels
+ *     ? { collectionLabels: vocab.collectionLabels as WorkspaceVocabCtx['collectionLabels'] }
+ *     : null;
+ * });
+ * ```
+ *
+ * - `cacheKey`: use the API key as a surrogate for cacheKey (1:1 mapping at CLI layer).
+ * - `fetcher`: async function that resolves the vocab ctx; returns null on failure to signal
+ *   "don't cache, fall back to resolver literal". Fetcher errors are swallowed — vocabulary
+ *   labels are advisory (PAT-230 / fail-open principle).
+ *
+ * Returns WorkspaceVocabCtx on cache hit or successful fetch; undefined on error/null fetcher result.
+ */
+export async function getOrFetchVocabCtx(cacheKey, fetcher) {
+    const cached = getCachedVocabCtx(cacheKey);
+    if (cached)
+        return cached;
+    try {
+        const ctx = await fetcher();
+        if (ctx) {
+            setCachedVocabCtx(cacheKey, ctx);
+            return ctx;
+        }
+    }
+    catch {
+        // fail-open — vocabulary labels are advisory, never block the command
+    }
+    return undefined;
+}
+//# sourceMappingURL=workspaceVocabCache.js.map

package/dist/lib/workspaceVocabCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceVocabCache.js","sourceRoot":"","sources":["../../src/lib/workspaceVocabCache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAUH,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAC1C,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,gDAAgD;AAErF,0FAA0F;AAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QACtD,8EAA8E;QAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAsB;IACxE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAAgD;IAEhD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,IAAI,GAAG,EAAE,CAAC;YACR,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjC,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/registerEntryCommands.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `pb entry propose|accept|archive` — the entry-lifecycle verbs, noun-scoped per
+ * DEC-1574 (WP-640 S4). Split out of index.ts (STD-2/DEC-1504: index.ts is
+ * grandfathered over-budget and shrink-only) — same "own every command group in
+ * its own file" split index.ts's other multi-command surfaces would benefit from.
+ *
+ * `propose` is a discoverable alias over the SAME draft-creating door `pb capture`
+ * already uses (DEC-1583: capturing creates a draft, which IS the propose act —
+ * both roads lead to one draft door; capture is NOT renamed or removed). `accept`
+ * is `pb promote`'s exact server route (chain.commitEntry) under its new name —
+ * pure rename, zero behavior change. `archive` is a friendlier front end over
+ * `pb update --status archived` requiring a DEC-1572 reason.
+ */
+import type { Command } from 'commander';
+export declare function registerEntryCommands(program: Command): void;
+export declare function registerRelateCommands(program: Command): void;
+//# sourceMappingURL=registerEntryCommands.d.ts.map

package/dist/registerEntryCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerEntryCommands.d.ts","sourceRoot":"","sources":["../src/registerEntryCommands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMzC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA4D5D;AAOD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgB7D"}

package/dist/registerEntryCommands.js

@@ -0,0 +1,83 @@
+import { runCapture } from './commands/capture.js';
+import { runPromote } from './commands/promote.js';
+import { runEntryArchive } from './commands/entryArchive.js';
+import { runRelate, runUnrelate } from './commands/relate.js';
+export function registerEntryCommands(program) {
+    const entryCmd = program
+        .command('entry')
+        .description('Entry-lifecycle commands — noun-scoped per DEC-1574 (propose | accept | archive)');
+    entryCmd
+        .command('propose [text...]')
+        .description('Propose (capture) a new draft entry — same draft door as `pb capture` (DEC-1583)')
+        .option('-n, --name <name>', 'Entry name (defaults to capture text)')
+        .option('-d, --description <desc>', 'Entry description (defaults to capture text)')
+        .option('-c, --collection <slug>', 'Explicit collection (skip auto-classification)')
+        .option('-f, --field <key=value>', 'Set a data field (repeatable; e.g. rationale="...")', (val, prev) => [...prev, val], [])
+        .option('-l, --link <entry-id>', 'Link new entry to an existing entry (TEN-705)')
+        .option('-t, --link-type <relation-type>', 'Relation type for --link — REQUIRED when --link is used (WP-688 S4): no default, the door refuses and lists the source entry\'s legal verbs if omitted')
+        .option('--source-ref <ref>', 'Source reference URI (BET-240 E2)')
+        .option('--source-excerpt <text>', 'Verbatim source excerpt (BET-240 E2)')
+        .option('--draft', 'Force the entry to draft regardless of workspace governance mode (TEN-2226)')
+        .option('--json', 'Output machine-readable JSON (deprecated: use global --json flag)')
+        .option('--suggest-only', 'Show grounding preview (possible duplicates, related entries) without creating entry (WP-319)')
+        .option('--strict', 'Prompt y/N before capturing when a possible duplicate is detected (WP-319)')
+        // WP-640 SWEEP (#653 review): `propose` is advertised as the same draft door as
+        // `pb capture` (DEC-1583), but these two rung-2 ownership options were never registered
+        // or forwarded here — an ownership-scoped propose hit "unknown option" instead of
+        // reaching runCapture. Mirrors index.ts's `capture` registration exactly.
+        .option('--owner-team <entry-id>', 'Existing Team entry ID to create AS OWNER of (WP-513 rung 2; pair with --owner-role)')
+        .option('--owner-role <entry-id>', 'Existing Role entry ID to create AS OWNER of (WP-513 rung 2; pair with --owner-team)')
+        .action(async (textParts = [], opts) => {
+        const text = textParts.join(' ').trim();
+        if (!text && !opts.name) {
+            entryCmd.commands.find((c) => c.name() === 'propose')?.help();
+            return;
+        }
+        await runCapture({
+            text: text || opts.name || '', name: opts.name, description: opts.description, collection: opts.collection,
+            field: opts.field, link: opts.link, linkType: opts.linkType, sourceRef: opts.sourceRef, sourceExcerpt: opts.sourceExcerpt,
+            draft: opts.draft, json: opts.json, suggestOnly: opts.suggestOnly, strict: opts.strict,
+            ownerTeam: opts.ownerTeam, ownerRole: opts.ownerRole,
+        });
+    });
+    entryCmd
+        .command('accept <entry-ids...>')
+        .description('Accept one or more draft entries onto the Chain (commit to SSOT). Batch: a single failure does not abort the rest (INS-1813).')
+        .option('-m, --message <text>', 'Commit message (applied to every entry in the batch)')
+        .option('--override-reason <text>', 'Typed override (≥12 chars) clearing a steering coherency block at publish — recorded with author attribution (WP-465)')
+        .option('--acknowledge <response>', 'Respond to a coherency challenge: linked | accepted-fix | diverged (WP-465)')
+        .option('--ack-entry <entry-id>', 'Authorizing entry for --acknowledge linked / accepted-fix')
+        .option('--ack-reason <text>', 'Divergence rationale (≥12 chars) for --acknowledge diverged')
+        .action(async (entryIds, opts) => {
+        await runPromote({ entryIds, message: opts.message, overrideReason: opts.overrideReason, acknowledge: opts.acknowledge, ackEntry: opts.ackEntry, ackReason: opts.ackReason });
+    });
+    entryCmd
+        .command('archive <entry-id>')
+        .description('Archive an entry with a DEC-1572 reason (superseded | resolved | no_longer_true | duplicate | never_adopted)')
+        .requiredOption('--reason <reason>', 'DEC-1572 archive reason (required, server-validated)')
+        .option('--note <text>', 'Change note for history')
+        .action(async (entryId, opts) => {
+        await runEntryArchive({ entryId, reason: opts.reason, note: opts.note });
+    });
+}
+// --- Relate / Unrelate commands (TEN-704) — moved from index.ts (WP-688 S2a): index.ts is
+// grandfathered shrink-only (STD-2/DEC-1504), and this file already owns the "own every command
+// group in its own file" registrar pattern. `relate`/`unrelate` stay TOP-LEVEL commands (not
+// nested under `entry`) — this is a file-location move for LOC budget, not a DEC-1574 rename.
+export function registerRelateCommands(program) {
+    program
+        .command('relate <from-id> <type> <to-id>')
+        .description('Add a typed relation between two entries (requires active session)')
+        .option('--if-missing', 'Only create relation if it does not already exist')
+        .option('--dry-run', 'Preview the write (advisories, wouldBlock) without creating the relation (WP-688 S2a)')
+        .action(async (fromId, type, toId, opts) => {
+        await runRelate({ fromId, type, toId, ifMissing: opts.ifMissing, dryRun: opts.dryRun });
+    });
+    program
+        .command('unrelate <from-id> <type> <to-id>')
+        .description('Remove a typed relation between two entries (requires active session)')
+        .action(async (fromId, type, toId) => {
+        await runUnrelate({ fromId, type, toId });
+    });
+}
+//# sourceMappingURL=registerEntryCommands.js.map

package/dist/registerEntryCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerEntryCommands.js","sourceRoot":"","sources":["../src/registerEntryCommands.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kFAAkF,CAAC,CAAC;IAEnG,QAAQ;SACL,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,kFAAkF,CAAC;SAC/F,MAAM,CAAC,mBAAmB,EAAE,uCAAuC,CAAC;SACpE,MAAM,CAAC,0BAA0B,EAAE,8CAA8C,CAAC;SAClF,MAAM,CAAC,yBAAyB,EAAE,gDAAgD,CAAC;SACnF,MAAM,CAAC,yBAAyB,EAAE,qDAAqD,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,EAAc,CAAC;SACzJ,MAAM,CAAC,uBAAuB,EAAE,+CAA+C,CAAC;SAChF,MAAM,CAAC,iCAAiC,EAAE,wJAAwJ,CAAC;SACnM,MAAM,CAAC,oBAAoB,EAAE,mCAAmC,CAAC;SACjE,MAAM,CAAC,yBAAyB,EAAE,sCAAsC,CAAC;SACzE,MAAM,CAAC,SAAS,EAAE,6EAA6E,CAAC;SAChG,MAAM,CAAC,QAAQ,EAAE,mEAAmE,CAAC;SACrF,MAAM,CAAC,gBAAgB,EAAE,+FAA+F,CAAC;SACzH,MAAM,CAAC,UAAU,EAAE,4EAA4E,CAAC;QACjG,gFAAgF;QAChF,wFAAwF;QACxF,kFAAkF;QAClF,0EAA0E;SACzE,MAAM,CAAC,yBAAyB,EAAE,sFAAsF,CAAC;SACzH,MAAM,CAAC,yBAAyB,EAAE,sFAAsF,CAAC;SACzH,MAAM,CAAC,KAAK,EAAE,YAAsB,EAAE,EAAE,IAAoR,EAAE,EAAE;QAC/T,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;YACvE,OAAO;QACT,CAAC;QACD,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;YAC1G,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;YACzH,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;YACtF,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;SACrD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,uBAAuB,CAAC;SAChC,WAAW,CAAC,+HAA+H,CAAC;SAC5I,MAAM,CAAC,sBAAsB,EAAE,sDAAsD,CAAC;SACtF,MAAM,CAAC,0BAA0B,EAAE,uHAAuH,CAAC;SAC3J,MAAM,CAAC,0BAA0B,EAAE,6EAA6E,CAAC;SACjH,MAAM,CAAC,wBAAwB,EAAE,2DAA2D,CAAC;SAC7F,MAAM,CAAC,qBAAqB,EAAE,6DAA6D,CAAC;SAC5F,MAAM,CAAC,KAAK,EAAE,QAAkB,EAAE,IAAgH,EAAE,EAAE;QACrJ,MAAM,UAAU,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAChL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,oBAAoB,CAAC;SAC7B,WAAW,CAAC,8GAA8G,CAAC;SAC3H,cAAc,CAAC,mBAAmB,EAAE,sDAAsD,CAAC;SAC3F,MAAM,CAAC,eAAe,EAAE,yBAAyB,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAuC,EAAE,EAAE;QACzE,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACP,CAAC;AAGD,2FAA2F;AAC3F,gGAAgG;AAChG,6FAA6F;AAC7F,8FAA8F;AAC9F,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,OAAO;SACJ,OAAO,CAAC,iCAAiC,CAAC;SAC1C,WAAW,CAAC,oEAAoE,CAAC;SACjF,MAAM,CAAC,cAAc,EAAE,mDAAmD,CAAC;SAC3E,MAAM,CAAC,WAAW,EAAE,uFAAuF,CAAC;SAC5G,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,IAAY,EAAE,IAA+C,EAAE,EAAE;QAC5G,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,mCAAmC,CAAC;SAC5C,WAAW,CAAC,uEAAuE,CAAC;SACpF,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE;QAC3D,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/registerProposalCommands.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `pb promote` retirement + `pb proposal accept|reject|list` — noun-scoped consent-
+ * proposal governance commands (DEC-1574/1578, WP-640 S4). Split out of index.ts
+ * (STD-2/DEC-1504: index.ts is grandfathered over-budget and shrink-only), same
+ * "own every command group in its own file" precedent as registerEntryCommands.ts.
+ *
+ * `pb promote` and the bare `pb accept` / `pb reject` / `pb proposals` retire with a
+ * CLEAN BREAK — no warning alias, no telemetry shim (DEC-1578's own precedent). Every
+ * caller must move to the noun-scoped form.
+ */
+import type { Command } from 'commander';
+export declare function registerProposalCommands(program: Command): void;
+//# sourceMappingURL=registerProposalCommands.d.ts.map

package/dist/registerProposalCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerProposalCommands.d.ts","sourceRoot":"","sources":["../src/registerProposalCommands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMzC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6E/D"}

package/dist/registerProposalCommands.js

@@ -0,0 +1,76 @@
+import { CLIError, ErrorCode } from './lib/errors.js';
+import { runAccept } from './commands/accept.js';
+import { runReject } from './commands/reject.js';
+import { runProposals } from './commands/proposals.js';
+export function registerProposalCommands(program) {
+    program
+        .command('promote <entry-ids...>')
+        .description('RETIRED (DEC-1578) — use `pb entry accept <entry-ids...>` instead.')
+        .action(() => {
+        throw new CLIError('`pb promote` is retired. Use `pb entry accept <entry-ids...>` instead — same server route (chain.commitEntry), same flags.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb entry accept <entry-id> [<entry-id>...] [-m <message>] [--override-reason ...] [--acknowledge ...]',
+        });
+    });
+    const proposalCmd = program
+        .command('proposal')
+        .description('Consent-proposal governance commands (BET-221) — noun-scoped per DEC-1574');
+    proposalCmd
+        .command('list')
+        .description('List open consent proposals with expiry countdown (BET-221)')
+        .action(async () => {
+        await runProposals();
+    });
+    proposalCmd
+        .command('accept [proposal-id]')
+        .description('Approve a consent proposal by ID, or --auto to batch-approve all')
+        .option('-a, --auto', 'Auto-approve all open proposals (skip contradictions)')
+        .action(async (proposalId, opts) => {
+        if (!proposalId && !opts.auto) {
+            throw new CLIError('Usage: pb proposal accept <proposal-id> or pb proposal accept --auto', {
+                code: ErrorCode.VALIDATION_FAILED,
+                category: 'validation',
+            });
+        }
+        await runAccept({ proposalId, auto: opts.auto });
+    });
+    proposalCmd
+        .command('reject <proposal-id>')
+        .description('Reject a consent proposal with a required reason (BR-7)')
+        .requiredOption('-r, --reason <text>', 'Reason for rejection (required)')
+        .action(async (proposalId, opts) => {
+        await runReject({ proposalId, reason: opts.reason });
+    });
+    program
+        .command('proposals')
+        .description('RETIRED (DEC-1574) — use `pb proposal list` instead.')
+        .action(() => {
+        throw new CLIError('`pb proposals` is retired. Use `pb proposal list` instead.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb proposal list',
+        });
+    });
+    program
+        .command('accept [proposal-id]')
+        .description('RETIRED (DEC-1574) — use `pb proposal accept` instead.')
+        .action(() => {
+        throw new CLIError('`pb accept` is retired. Use `pb proposal accept <proposal-id>` (or `pb proposal accept --auto`) instead.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb proposal accept <proposal-id> | pb proposal accept --auto',
+        });
+    });
+    program
+        .command('reject <proposal-id>')
+        .description('RETIRED (DEC-1574) — use `pb proposal reject` instead.')
+        .action(() => {
+        throw new CLIError('`pb reject` is retired. Use `pb proposal reject <proposal-id> --reason "..."` instead.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb proposal reject <proposal-id> --reason "..."',
+        });
+    });
+}
+//# sourceMappingURL=registerProposalCommands.js.map

package/dist/registerProposalCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerProposalCommands.js","sourceRoot":"","sources":["../src/registerProposalCommands.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CAAC,oEAAoE,CAAC;SACjF,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,IAAI,QAAQ,CAAC,4HAA4H,EAAE;YAC/I,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,8GAA8G;SACzH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,WAAW,GAAG,OAAO;SACxB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,2EAA2E,CAAC,CAAC;IAE5F,WAAW;SACR,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6DAA6D,CAAC;SAC1E,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEL,WAAW;SACR,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,YAAY,EAAE,uDAAuD,CAAC;SAC7E,MAAM,CAAC,KAAK,EAAE,UAA8B,EAAE,IAAwB,EAAE,EAAE;QACzE,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,QAAQ,CAAC,sEAAsE,EAAE;gBACzF,IAAI,EAAE,SAAS,CAAC,iBAAiB;gBACjC,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEL,WAAW;SACR,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,yDAAyD,CAAC;SACtE,cAAc,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;SACxE,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,IAAwB,EAAE,EAAE;QAC7D,MAAM,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,IAAI,QAAQ,CAAC,4DAA4D,EAAE;YAC/E,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,yBAAyB;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,IAAI,QAAQ,CAAC,0GAA0G,EAAE;YAC7H,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,qEAAqE;SAChF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,IAAI,QAAQ,CAAC,wFAAwF,EAAE;YAC3G,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,wDAAwD;SACnE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}