@productbrain/cli 0.1.0-beta.52 → 0.1.0-beta.5217

package/dist/commands/orient.js

@@ -2,11 +2,92 @@
  * pb orient — prints workspace stage and all orient sections per ARCH-25.
  * BET-181 Slice 0: routes through runCliCommand for JSON-default output.
  */
-import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCall } from '../lib/client.js';
-import { runCliCommand } from '../lib/runner.js';
+import { getConfig, getConfigOrGuide } from '../lib/config.js';
+import { kernelCall } from '../lib/client.js';
+import { runCliCommand, isJsonMode } from '../lib/runner.js';
+import { stripConvexInternals } from '../lib/strip.js';
 import { formatOrient, formatOrientBrief } from '../formatters/orient.js';
-function normalizeView(raw) {
+import { getOrFetchVocabCtx } from '../lib/workspaceVocabCache.js';
+import { discardSession, readSession } from '../lib/session.js';
+import { collectCliStartupSignals } from '../lib/startup-signals.js';
+/**
+ * The orient read is useful even when its optional local session marker has gone stale on the
+ * server. Only the three lifecycle failures that prove that marker can no longer be used are
+ * recoverable here; ownership/workspace/auth failures still surface instead of being hidden.
+ */
+function isStaleSessionMarkerError(error) {
+    if (!(error instanceof Error) || error.name !== 'McpError')
+        return false;
+    const code = error.code;
+    if (code !== 'MCP_GATEWAY_CLIENT' && code !== 'SESSION_REQUIRED')
+        return false;
+    return error.message === 'Agent session not found'
+        || error.message === 'Agent session has expired (8-hour maximum exceeded)'
+        || /^Agent session is .+, not active$/.test(error.message);
+}
+/**
+ * WP-376 α.3: fire-and-forget orient byte report from the CLI surface.
+ *
+ * Inlined raw fetch (vs `kernelCall`) for three reasons:
+ *   1. No spinner — observability must not show user-visible progress
+ *      indicators after the orient render completes.
+ *   2. Truly fire-and-forget — never block returning to the shell on a
+ *      slow gateway, never propagate errors to the user.
+ *   3. Avoids the post-write session-touch heartbeat (kernelCallWithSession)
+ *      — orient byte report is itself a heartbeat-equivalent observability
+ *      write, so a follow-up agent.touchSession is redundant (parallel to
+ *      MCP's TOUCH_EXCLUDED exemption in client.ts).
+ *
+ * The gateway's `injectSessionAuth` (BR-18) resolves workspaceId / apiKeyId /
+ * clerkUserId from the bearer token, so the surface only sends payload bytes
+ * + truncation flag. Auth and identity stay server-side.
+ */
+// WP-480 S3 (FEAT-1360): the taskIsMeaningful predicate mirror is DELETED — the
+// server resolves task-meaningfulness + effective tier and serves them on the
+// orient payload (`taskMeaningful`, `resolvedTier`); this surface consumes them.
+// DEC-NEW: reports the resolved tier + task-presence alongside bytes + truncated.
+function reportOrientCliBytes(bytes, truncated, tier, taskProvided) {
+    let apiKey;
+    let siteUrl;
+    try {
+        ({ apiKey, siteUrl } = getConfig());
+    }
+    catch {
+        // No config — best-effort observability never fails the command.
+        return;
+    }
+    // Thread the active session context (Codex re-review): without it, the server's N-per-key
+    // ambiguity guard skips the rendered-byte update when a key has >1 active conversation — the whole
+    // point of this public report route is the surface-rendered metric.
+    const active = readSession();
+    void fetch(`${siteUrl}/api/aki`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${apiKey}`,
+        },
+        body: JSON.stringify({
+            fn: 'agent.reportOrientMetric',
+            args: {
+                bytes,
+                truncated,
+                tier,
+                taskProvided,
+                ...(active?.sessionId ? { sessionId: active.sessionId } : {}),
+                ...(active?.conversationId ? { conversationId: active.conversationId } : {}),
+            },
+        }),
+    }).catch(() => {
+        // Best-effort — silently swallow.
+    });
+}
+/**
+ * Normalize the raw API view into the formatter's `OrientView` shape (optional
+ * sections become empty arrays / null, not absent). Exported so other surfaces
+ * (e.g. `pb codex-prep`) route their API view through the SAME normalizer the
+ * canonical `pb orient` path uses, instead of re-deriving fields ad hoc.
+ */
+export function normalizeView(raw) {
     return {
         ...raw,
         governance: raw.governance ?? {
@@ -14,6 +95,7 @@ function normalizeView(raw) {
             standards: [],
             businessRules: [],
         },
+        strategyHighlights: raw.strategyHighlights ?? [],
         tensions: raw.tensions ?? [],
         architectureNotes: raw.architectureNotes ?? [],
         proposals: raw.proposals ?? [],
@@ -37,6 +119,27 @@ export async function runOrient(options = {}) {
     const config = await getConfigOrGuide(() => runOrient(options));
     if (!config)
         return;
+    // WP-436 S2: resolve workspace vocabulary context (Axis 2, PAT-230, DEC-1021).
+    // Uses the API key as the cache key (1:1 with workspace at CLI layer).
+    // Fail-open: if chain.getVocabulary is unreachable, resolver falls back to canonicalKey literal.
+    const vocabCtx = await getOrFetchVocabCtx(config.apiKey, async () => {
+        const vocab = await kernelCall('chain.getVocabulary', {});
+        if (vocab?.collectionLabels || vocab?.collectionDefaults) {
+            return {
+                ...(vocab.collectionLabels ? { collectionLabels: vocab.collectionLabels } : {}),
+                ...(vocab.collectionDefaults ? { collectionDefaults: vocab.collectionDefaults } : {}),
+            };
+        }
+        return null;
+    });
+    // WP-376 α.3: capture the view + raw flag from the closure so we can
+    // measure client-side rendered bytes after runCliCommand finishes.
+    let capturedView = null;
+    let capturedTruncated = false;
+    // WP-480 S3 (FEAT-1360): the served resolution (getOrientView is the payload
+    // owner) — undefined when an old deploy doesn't serve the fields yet.
+    let capturedResolvedTier;
+    let capturedTaskMeaningful;
     await runCliCommand({
         fn: async () => {
             const callArgs = {};
@@ -44,14 +147,127 @@ export async function runOrient(options = {}) {
                 callArgs.task = options.task;
             if (options.scope)
                 callArgs.scope = options.scope;
-            const raw = await mcpCall('chain.getOrientView', Object.keys(callArgs).length > 0 ? callArgs : {});
+            // WP-486 Slice 1 (FEAT-1371, TEN-2724): the primary orient path — this call — never sent
+            // the signals `resolveStartupDomain` already knows how to consume. `startupSignals` is
+            // sent unconditionally (harmless when no task is present — the server only threads it into
+            // domain resolution when a task is, and `context.served`'s presence telemetry benefits from
+            // an honest signal either way). `invocationPath` is NOT unconditional (PR #369 review,
+            // Codex): `kernel/telemetry/contextServed.ts`'s own `computeContextServed` comment
+            // ("Defaulting an unset invocationPath to 'manual-orient' conflated unattributed calls
+            // [base/workspace orients, bare `pb handshake`] with REAL manual `pb orient --task` rows")
+            // is an established contract this call must respect — a bare `pb orient` (no task) stays
+            // unattributed, exactly like it was before this slice. Only a task-shaped orient — the
+            // 'manual-orient' shape this constant actually names — stamps it.
+            const startupSignals = collectCliStartupSignals();
+            if (Object.keys(startupSignals).length > 0)
+                callArgs.startupSignals = startupSignals;
+            if (options.task)
+                callArgs.invocationPath = 'manual-orient';
+            // STD-219 §5 chain-versioned by DEC-NEW: surface forwards tier by key omission;
+            // kernel applies the task-conditional default via resolveEffectiveTier when tier unset.
+            if (options.full)
+                callArgs.tier = 'full';
+            // TEN-2449 + WP-479 review fix (Codex): declare the render mode EXPLICITLY as a tri-state so
+            // the server selects the rendered set once (and instruments the right coverage row). Rendering
+            // is per-invocation, which is why the caller — not a source header — is the one that can say
+            // this. The server must never INFER json from "non-brief": that mislabels this interactive
+            // pretty path as agent json traffic. Precedence: json mode (`--json` / non-TTY subprocess,
+            // where `-b --json` prints the FULL view) → 'json'; `-b` on a TTY → 'brief'; else the
+            // interactive human view → 'pretty' (deliberately uninstrumented).
+            if (isJsonMode())
+                callArgs.renderMode = 'json';
+            else if (options.brief)
+                callArgs.renderMode = 'brief';
+            else
+                callArgs.renderMode = 'pretty';
+            // WP-479 E3 stage 2 (TEN-2654): thread the EXPLICIT local session marker, when one exists,
+            // so the gateway can stamp the M1 emit rows with a real per-conversation sessionId/
+            // conversationId instead of leaving them null. `readSession()` returns null when no
+            // marker is active (no session started, or a legacy/foreign conversation) — feature-detect,
+            // never required: a bare `pb orient` with no active session still works, just unstamped.
+            const activeSession = readSession();
+            if (activeSession?.sessionId)
+                callArgs.sessionId = activeSession.sessionId;
+            if (activeSession?.conversationId)
+                callArgs.conversationId = activeSession.conversationId;
+            // WP-488 Slice 3 (FEAT-1377) — DEVIATION, documented (same root cause as
+            // packages/cli/src/commands/promote.ts's `chain.detectSemanticConflicts` call, see
+            // that comment for the full evidence): deriving this route's return type from
+            // kernel-client (`GatewayRouteReturnByName<'chain.getOrientView'>`, or a direct
+            // type-only import of `convex/agentKnowledge/orientView.ts`'s `getOrientView`) fails
+            // packages/cli's `rootDir: "src"` + `moduleResolution: "NodeNext"` — verified via the
+            // identical failure mode reproduced for the detectSemanticConflicts call. Left as the
+            // pre-existing hand-typed `OrientViewFromApi` generic; that interface is also
+            // consumed by codex-prep.ts / handshake.ts / tests, so replacing its DEFINITION with
+            // the derived type (rather than just this one call site) was independently out of
+            // scope for a "no behavior change" slice regardless of the tsconfig issue.
+            const raw = await kernelCall('chain.getOrientView', Object.keys(callArgs).length > 0 ? callArgs : {});
+            // An orient read and the session lifecycle transition are separate server operations.
+            // MCP already completes both; the CLI previously only forwarded the session id for
+            // attribution, leaving the session permanently unoriented and making every server-gated
+            // follow-up reject the normal `session start → orient → write` sequence. Complete the
+            // transition only when a local session exists; sessionless orient remains a read-only path.
+            // Codex P2 (PR #372): orientation unlocks server-gated writes, so it must only complete
+            // for a TASK-GROUNDED orient — the same hasTaskGrounding gate MCP applies
+            // (packages/mcp-server/src/tools/orient.ts: task provided AND the server returned real
+            // taskContext entries). A bare `pb orient` / `pb orient -b` stays a read.
+            const hasTaskGrounding = Boolean(options.task && (raw.taskContext?.context?.length ?? 0) > 0);
+            if (activeSession?.sessionId && hasTaskGrounding) {
+                try {
+                    await kernelCall('agent.markOriented', { sessionId: activeSession.sessionId });
+                }
+                catch (error) {
+                    if (!isStaleSessionMarkerError(error))
+                        throw error;
+                    // The read already succeeded. Remove only this conversation's unusable marker and
+                    // return the sessionless view; the next write will correctly require a fresh session.
+                    discardSession(activeSession.conversationId);
+                }
+            }
             // Normalize before output in any mode — ensures JSON keys are stable
             // for agent consumers (optional sections become empty arrays, not absent).
-            return normalizeView(raw);
+            const view = normalizeView(raw);
+            capturedView = view;
+            // BET-β S3b parity with MCP: prefer the tier-budget signal (_budget.truncated),
+            // fall back to the legacy input-scan flag (_truncated). Summary-tier section
+            // dropping is reported via _budget.truncated only, so reading _truncated alone
+            // recorded lastOrientTruncated:false on the main path this change introduces.
+            capturedTruncated = raw._budget?.truncated ?? raw._truncated === true;
+            // WP-480 S3: capture the server's resolution off the payload.
+            capturedResolvedTier = raw.resolvedTier;
+            capturedTaskMeaningful = raw.taskMeaningful;
+            return view;
         },
         formatPretty: (view) => {
-            return options.brief ? formatOrientBrief(view) : formatOrient(view);
+            return options.brief ? formatOrientBrief(view, vocabCtx) : formatOrient(view, vocabCtx);
         },
     });
+    // WP-376 α.3: fire-and-forget byte report. Match what the user actually saw —
+    // JSON-stringified data for piped/JSON mode, formatted text for TTY.
+    if (capturedView != null) {
+        try {
+            let rendered;
+            if (isJsonMode()) {
+                rendered = JSON.stringify(stripConvexInternals(capturedView));
+            }
+            else {
+                rendered = options.brief ? formatOrientBrief(capturedView, vocabCtx) : formatOrient(capturedView, vocabCtx);
+            }
+            const bytes = Buffer.byteLength(rendered, 'utf8');
+            // WP-480 S3 (FEAT-1360): consume the SERVED resolution (the payload now
+            // carries `resolvedTier` + `taskMeaningful`; getOrientView is the payload
+            // owner). Old-deploy fallback, null-guarded like retrievalMiss: explicit
+            // --full is still client-known input (not a mirrored rule); else
+            // 'standard' / false — honestly degraded, never re-derived locally.
+            const resolvedTier = capturedResolvedTier ?? (options.full ? 'full' : 'standard');
+            reportOrientCliBytes(bytes, capturedTruncated, resolvedTier, capturedTaskMeaningful ?? false);
+            // Activation-telemetry context.served is no longer emitted here. It moved to the
+            // shared server-side seam (DEC-1207): the AKI gateway derives + emits it for EVERY
+            // connector that calls chain.getOrientView, so the CLI no longer carries its own copy.
+        }
+        catch {
+            // Best-effort observability — never fail the command on measurement.
+        }
+    }
 }
 //# sourceMappingURL=orient.js.map

package/dist/commands/orient.js.map

@@ -1 +1 @@
-{"version":3,"file":"orient.js","sourceRoot":"","sources":["../../src/commands/orient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAmB,MAAM,yBAAyB,CAAC;AAoH3F,SAAS,aAAa,CAAC,GAAsB;IAC3C,OAAO;QACL,GAAG,GAAG;QACN,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI;YAC5B,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,EAAE;SAClB;QACD,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;QAC5B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,EAAE;QAC9C,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;QAC9B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;QACxC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI;YAC9B,iBAAiB,EAAE,EAAE;YACrB,iBAAiB,EAAE,EAAE;YACrB,YAAY,EAAE,EAAE;SACjB;QACD,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;QACtC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAA8D,EAAE;IAC9F,uEAAuE;IACvE,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAa;QAC9B,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,QAAQ,GAA2B,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC/C,IAAI,OAAO,CAAC,KAAK;gBAAE,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAClD,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;YACF,qEAAqE;YACrE,2EAA2E;YAC3E,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"orient.js","sourceRoot":"","sources":["../../src/commands/orient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAqC,MAAM,yBAAyB,CAAC;AAE7G,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,IAAI,GAAI,KAAmC,CAAC,IAAI,CAAC;IACvD,IAAI,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,KAAK,CAAC,OAAO,KAAK,yBAAyB;WAC7C,KAAK,CAAC,OAAO,KAAK,qDAAqD;WACvE,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAkLD;;;;;;;;;;;;;;;;GAgBG;AACH,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AAEjF,kFAAkF;AAClF,SAAS,oBAAoB,CAC3B,KAAa,EACb,SAAkB,EAClB,IAAqC,EACrC,YAAqB;IAErB,IAAI,MAAc,CAAC;IACnB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,OAAO;IACT,CAAC;IACD,0FAA0F;IAC1F,mGAAmG;IACnG,oEAAoE;IACpE,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,KAAK,KAAK,CAAC,GAAG,OAAO,UAAU,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,EAAE;SAClC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,EAAE,EAAE,0BAA0B;YAC9B,IAAI,EAAE;gBACJ,KAAK;gBACL,SAAS;gBACT,IAAI;gBACJ,YAAY;gBACZ,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E;SACF,CAAC;KACH,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACZ,kCAAkC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAsB;IAClD,OAAO;QACL,GAAG,GAAG;QACN,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI;YAC5B,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,EAAE;SAClB;QACD,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,EAAE;QAChD,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;QAC5B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,EAAE;QAC9C,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;QAC9B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;QACxC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI;YAC9B,iBAAiB,EAAE,EAAE;YACrB,iBAAiB,EAAE,EAAE;YACrB,YAAY,EAAE,EAAE;SACjB;QACD,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;QACtC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAA8E,EAAE;IAC9G,uEAAuE;IACvE,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,+EAA+E;IAC/E,uEAAuE;IACvE,iGAAiG;IACjG,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QAElE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAkD,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAC3G,IAAI,KAAK,EAAE,gBAAgB,IAAI,KAAK,EAAE,kBAAkB,EAAE,CAAC;YACzD,OAAO;gBACL,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAyD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxH,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAA6D,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjI,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,mEAAmE;IACnE,IAAI,YAAY,GAAsB,IAAI,CAAC;IAC3C,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,oBAAiE,CAAC;IACtE,IAAI,sBAA2C,CAAC;IAEhD,MAAM,aAAa,CAAa;QAC9B,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,QAAQ,GAA4B,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC/C,IAAI,OAAO,CAAC,KAAK;gBAAE,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAClD,yFAAyF;YACzF,uFAAuF;YACvF,2FAA2F;YAC3F,4FAA4F;YAC5F,uFAAuF;YACvF,mFAAmF;YACnF,uFAAuF;YACvF,2FAA2F;YAC3F,yFAAyF;YACzF,uFAAuF;YACvF,kEAAkE;YAClE,MAAM,cAAc,GAAG,wBAAwB,EAAE,CAAC;YAClD,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;YACrF,IAAI,OAAO,CAAC,IAAI;gBAAE,QAAQ,CAAC,cAAc,GAAG,eAAe,CAAC;YAC5D,gFAAgF;YAChF,wFAAwF;YACxF,IAAI,OAAO,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC;YACzC,6FAA6F;YAC7F,+FAA+F;YAC/F,6FAA6F;YAC7F,2FAA2F;YAC3F,2FAA2F;YAC3F,sFAAsF;YACtF,mEAAmE;YACnE,IAAI,UAAU,EAAE;gBAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;iBAC1C,IAAI,OAAO,CAAC,KAAK;gBAAE,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC;;gBACjD,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC;YACpC,2FAA2F;YAC3F,oFAAoF;YACpF,oFAAoF;YACpF,4FAA4F;YAC5F,yFAAyF;YACzF,MAAM,aAAa,GAAG,WAAW,EAAE,CAAC;YACpC,IAAI,aAAa,EAAE,SAAS;gBAAE,QAAQ,CAAC,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;YAC3E,IAAI,aAAa,EAAE,cAAc;gBAAE,QAAQ,CAAC,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;YAC1F,yEAAyE;YACzE,mFAAmF;YACnF,8EAA8E;YAC9E,gFAAgF;YAChF,qFAAqF;YACrF,sFAAsF;YACtF,sFAAsF;YACtF,8EAA8E;YAC9E,qFAAqF;YACrF,kFAAkF;YAClF,2EAA2E;YAC3E,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;YACF,sFAAsF;YACtF,mFAAmF;YACnF,wFAAwF;YACxF,sFAAsF;YACtF,4FAA4F;YAC5F,wFAAwF;YACxF,0EAA0E;YAC1E,uFAAuF;YACvF,0EAA0E;YAC1E,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9F,IAAI,aAAa,EAAE,SAAS,IAAI,gBAAgB,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACH,MAAM,UAAU,CAAiD,oBAAoB,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;gBACjI,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;wBAAE,MAAM,KAAK,CAAC;oBACnD,kFAAkF;oBAClF,sFAAsF;oBACtF,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,2EAA2E;YAC3E,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAChC,YAAY,GAAG,IAAI,CAAC;YACpB,gFAAgF;YAChF,6EAA6E;YAC7E,+EAA+E;YAC/E,8EAA8E;YAC9E,iBAAiB,GAAG,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC;YACtE,8DAA8D;YAC9D,oBAAoB,GAAG,GAAG,CAAC,YAAY,CAAC;YACxC,sBAAsB,GAAG,GAAG,CAAC,cAAc,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1F,CAAC;KACF,CAAC,CAAC;IAEH,8EAA8E;IAC9E,qEAAqE;IACrE,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,QAAgB,CAAC;YACrB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClD,wEAAwE;YACxE,0EAA0E;YAC1E,yEAAyE;YACzE,iEAAiE;YACjE,oEAAoE;YACpE,MAAM,YAAY,GAChB,oBAAoB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC/D,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,sBAAsB,IAAI,KAAK,CAAC,CAAC;YAC9F,iFAAiF;YACjF,mFAAmF;YACnF,uFAAuF;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/profile.d.ts

@@ -5,6 +5,19 @@
  * Uses runCliCommand pattern from runner.ts for JSON/pretty output.
  * Uses CLIError from errors.ts for structured error reporting.
  */
+type ProfileListResult = {
+    profiles: string[];
+    active: string | null;
+    globalActive: string | null;
+    localActive: string | null;
+    activeSource: 'local' | 'global' | 'none' | 'missing-pin' | 'env-key' | 'preview' | 'cwd-key' | 'local-key';
+};
+export declare function resolveProfileListState(): ProfileListResult;
+/**
+ * Pure pretty-printer for `pb profile list`. Exported (like formatWhoami) so the copy can be
+ * asserted directly — an inline lambda left the env-key case untestable and therefore wrong.
+ */
+export declare function formatProfileList(data: ProfileListResult): string;
 /** pb profile list — show all profiles, mark active one. */
 export declare function runProfileList(): Promise<void>;
 /** pb profile create <name> --api-key <key> [--url <url>] */
@@ -13,12 +26,14 @@ export declare function runProfileCreate(opts: {
     apiKey: string;
     url?: string;
 }): Promise<void>;
-/** pb profile use <name> — switch active profile, close any active session. */
 export declare function runProfileUse(opts: {
     name: string;
+    local?: boolean;
+    global?: boolean;
 }): Promise<void>;
 /** pb profile delete <name> */
 export declare function runProfileDelete(opts: {
     name: string;
 }): Promise<void>;
+export {};
 //# sourceMappingURL=profile.d.ts.map

package/dist/commands/profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../src/commands/profile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,4DAA4D;AAC5D,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAkBpD;AAED,6DAA6D;AAC7D,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB;AAED,+EAA+E;AAC/E,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BzE;AAED,+BAA+B;AAC/B,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E"}
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../src/commands/profile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgBH,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;CAC7G,CAAC;AAEF,wBAAgB,uBAAuB,IAAI,iBAAiB,CAkB3D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CA8BjE;AAED,4DAA4D;AAC5D,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAKpD;AAED,6DAA6D;AAC7D,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB;AAeD,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyH5G;AAUD,+BAA+B;AAC/B,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E"}

package/dist/commands/profile.js

@@ -7,26 +7,69 @@
  */
 import { runCliCommand } from '../lib/runner.js';
 import { listProfiles, getActiveProfile, createProfile, useProfile, deleteProfile, } from '../lib/profiles.js';
-import { readSession, clearSession } from '../lib/session.js';
-import { resetConfigCache } from '../lib/config.js';
+import { readSession, discardAllSessions, hasAnyActiveSession } from '../lib/session.js';
+import { resetConfigCache, findProjectRoot, readLocalProjectConfig, setLocalProfilePin } from '../lib/config.js';
+import { resolveReportedProfile, isEnvKeyBinding } from '../lib/reportedProfile.js';
+import { probeWorkspace } from '../lib/workspace-probe.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+export function resolveProfileListState() {
+    const profiles = listProfiles();
+    const globalActive = getActiveProfile();
+    const localActive = readLocalProjectConfig()?.profile ?? null;
+    const reported = resolveReportedProfile();
+    // Four sources all mean NO profile is the active one: the CLI refuses (`missing-pin`), or an
+    // exported key / a dotenv file here / a preview binding outranks every profile file. In each
+    // case `globalActive` is still listed below, just never marked `(active)`.
+    const shadowed = ['missing-pin', 'env-key', 'preview', 'cwd-key', 'local-key'];
+    const noActiveProfile = shadowed.includes(reported.source);
+    const active = noActiveProfile ? null : reported.profile;
+    const activeSource = noActiveProfile ? reported.source
+        : reported.source === 'local' ? 'local'
+            : reported.profile ? 'global'
+                : 'none';
+    return { profiles, active, globalActive, localActive, activeSource };
+}
+/**
+ * Pure pretty-printer for `pb profile list`. Exported (like formatWhoami) so the copy can be
+ * asserted directly — an inline lambda left the env-key case untestable and therefore wrong.
+ */
+export function formatProfileList(data) {
+    // TEN-3240 (Codex P2): an exported key SHADOWS every profile here. Without this note the list
+    // prints with no active marker and no reason why — and the empty-list branch would recommend
+    // creating a profile the export would immediately shadow too.
+    // "…for these profiles to take effect" would be a promise this function cannot keep: in a
+    // preview-bound worktree the direct apiKey/siteUrl binding wins ahead of every profile
+    // (resolveConfig step 2a), so unsetting the key still leaves them unused (Codex P2 round 2).
+    const envKeyNote = data.activeSource === 'env-key'
+        ? 'An exported PRODUCTBRAIN_API_KEY is the active binding — no profile below is in use.\nUnset it (`unset PRODUCTBRAIN_API_KEY`) and re-run to see which binding takes over.'
+        : data.activeSource === 'preview'
+            ? 'This worktree is bound to a throwaway preview — no profile below is in use.\nRun `npm run pb:real` to go back to the real Chain.'
+            : data.activeSource === 'cwd-key'
+                ? 'A dotenv file in this directory is the active binding — no profile below is in use.\nRemove it, or run pb from your project directory, to use one.'
+                : data.activeSource === 'local-key'
+                    ? '.productbrain/config.local.json binds a credential directly — no profile below is in use.\nRun `npm run pb:real` to strip it — re-pinning alone leaves that binding winning.'
+                    : null;
+    if (data.profiles.length === 0) {
+        return envKeyNote ?? 'No profiles configured. Run: pb profile create <name> --api-key <key>';
+    }
+    const lines = data.profiles.map((name) => {
+        const marker = name === data.active
+            ? data.activeSource === 'local' ? ' (active, local)' : ' (active)'
+            : '';
+        return `  ${name}${marker}`;
+    });
+    if (envKeyNote)
+        lines.push('', envKeyNote);
+    if (data.localActive && data.globalActive && data.localActive !== data.globalActive) {
+        lines.push('', `Repo local profile: ${data.localActive}`, `Global profile:     ${data.globalActive}`);
+    }
+    return `Profiles:\n${lines.join('\n')}`;
+}
 /** pb profile list — show all profiles, mark active one. */
 export async function runProfileList() {
     await runCliCommand({
-        fn: async () => {
-            const profiles = listProfiles();
-            const active = getActiveProfile();
-            return { profiles, active };
-        },
-        formatPretty: (data) => {
-            if (data.profiles.length === 0) {
-                return 'No profiles configured. Run: pb profile create <name> --api-key <key>';
-            }
-            const lines = data.profiles.map((name) => {
-                const marker = name === data.active ? ' (active)' : '';
-                return `  ${name}${marker}`;
-            });
-            return `Profiles:\n${lines.join('\n')}`;
-        },
+        fn: async () => resolveProfileListState(),
+        formatPretty: formatProfileList,
     });
 }
 /** pb profile create <name> --api-key <key> [--url <url>] */
@@ -39,36 +82,129 @@ export async function runProfileCreate(opts) {
         formatPretty: (data) => `Profile "${data.name}" created.`,
     });
 }
-/** pb profile use <name> — switch active profile, close any active session. */
 export async function runProfileUse(opts) {
+    if (opts.local && opts.global) {
+        throw new CLIError('Cannot use both --local and --global.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Pick one: --local (repo pin only), --global (global only), or neither (reconcile both).',
+        });
+    }
     await runCliCommand({
         fn: async () => {
-            // Close active session before switching (TEN-1277: session orphaning)
-            const session = readSession();
-            if (session) {
-                clearSession();
+            const projectRoot = findProjectRoot(process.cwd());
+            const localPin = readLocalProjectConfig()?.profile ?? null;
+            // PB_PROFILE always wins resolution (by design). If it's set, ANY profile write
+            // here is shadowed — surface that instead of failing silently (the TEN-2163 trap).
+            const PB_PROFILE = process.env.PB_PROFILE?.trim() || null;
+            // An exported key outranks every profile file, so a switch made under one is SHADOWED in
+            // the parent shell exactly like PB_PROFILE above — report it rather than printing a
+            // "Now using …" the operator will never observe (Codex P2 r7).
+            const shadowingKey = isEnvKeyBinding();
+            const resetEnv = () => {
+                resetConfigCache();
+                delete process.env.PRODUCTBRAIN_API_KEY;
+                delete process.env.CONVEX_SITE_URL;
+                // NOTE: deliberately NOT re-snapshotting the reported source here. The delete above only
+                // affects THIS child process; the parent shell still exports the key, so re-snapshotting
+                // would record an absence that is true for nobody and label the next command's binding
+                // wrong. `shadowingKey` above keeps the startup truth.
+            };
+            // Discard ANY session file (active OR stale closed marker) — a closed marker would
+            // let the 2h auto-resume re-pin the old workspace. Report only an ACTIVE session
+            // in the print line. Review fix (Codex): a profile switch changes the effective workspace,
+            // so clear ALL conversation markers, not just the current conversation's — otherwise a
+            // sibling conversation's active marker survives and could be reused against the new workspace.
+            const discardSessionState = () => {
+                // Report accurately whether an active session was cleared — including a SIBLING conversation's
+                // (Codex re-review): a profile switch from a shell whose current conversation has no marker
+                // still discards all markers, so `readSession()` (current only) would under-report and
+                // silently strand a sibling active session on the old workspace.
+                const hadActive = readSession() !== null || hasAnyActiveSession();
+                discardAllSessions();
+                return hadActive;
+            };
+            // --- --local: repo pin only ---
+            if (opts.local) {
+                if (!projectRoot) {
+                    throw new CLIError('No .productbrain/ directory found in this directory tree. Run `pb connect` first or use `pb use <name> --global` to switch globally.', { code: ErrorCode.CONFIG_INVALID, category: 'config',
+                        guidance: 'Run `pb connect <token>` to set up a project workspace, or use --global.' });
+                }
+                setLocalProfilePin(projectRoot, opts.name);
+                const sessionCleared = discardSessionState();
+                resetEnv();
+                return { name: opts.name, scope: 'local', reconciledLocalPin: false,
+                    sessionCleared, workspace: await safeProbe(), pinnedElsewhere: null, 'PB_PROFILE': PB_PROFILE, shadowedByApiKey: shadowingKey };
+            }
+            // --- --global: global only (does not change a locally-pinned repo) ---
+            if (opts.global) {
+                useProfile(opts.name);
+                const pinnedElsewhere = localPin && localPin !== opts.name ? localPin : null;
+                // The repo's effective workspace only changes when it is NOT pinned elsewhere.
+                const sessionCleared = pinnedElsewhere ? false : discardSessionState();
+                resetEnv();
+                const workspace = pinnedElsewhere ? null : await safeProbe();
+                return { name: opts.name, scope: 'global', reconciledLocalPin: false,
+                    sessionCleared, workspace, pinnedElsewhere, 'PB_PROFILE': PB_PROFILE, shadowedByApiKey: shadowingKey };
             }
+            // --- default: flip global AND reconcile the repo pin if one exists ---
             useProfile(opts.name);
-            // Reset config cache so next getConfig() reads the new profile
-            resetConfigCache();
-            // Clear env vars so they get re-read from the new profile
-            delete process.env.PRODUCTBRAIN_API_KEY;
-            delete process.env.CONVEX_SITE_URL;
-            return {
-                name: opts.name,
-                active: true,
-                sessionClosed: session !== null,
-            };
+            let reconciledLocalPin = false;
+            if (projectRoot && localPin) {
+                setLocalProfilePin(projectRoot, opts.name);
+                reconciledLocalPin = true;
+            }
+            const sessionCleared = discardSessionState();
+            resetEnv();
+            return { name: opts.name, scope: 'reconcile', reconciledLocalPin,
+                sessionCleared, workspace: await safeProbe(), pinnedElsewhere: null, 'PB_PROFILE': PB_PROFILE, shadowedByApiKey: shadowingKey };
         },
-        formatPretty: (data) => {
-            let msg = `Switched to profile "${data.name}".`;
-            if (data.sessionClosed) {
-                msg += ' (previous session closed)';
+        formatPretty: (d) => {
+            const lines = [];
+            if (d.scope === 'global') {
+                const arrow = d.workspace ? ` → ${d.workspace}` : '';
+                lines.push(`Switched global profile to "${d.name}"${arrow}.`);
+                if (d.pinnedElsewhere) {
+                    lines.push(`Note: this repo is pinned to "${d.pinnedElsewhere}" via config.local.json — the global switch won't change it here.`);
+                    lines.push(`Run \`pb use ${d.name}\` (no flag) to switch this repo too.`);
+                }
+            }
+            else {
+                const arrow = d.workspace ? ` → ${d.workspace}` : '';
+                const where = d.scope === 'local' ? ' (repo-local)' : '';
+                lines.push(`Now using "${d.name}"${where}${arrow}`);
+                if (d.reconciledLocalPin)
+                    lines.push('(updated repo-local pin in .productbrain/config.local.json)');
             }
-            return msg;
+            if (d.sessionCleared)
+                lines.push('(previous session closed)');
+            if (d['PB_PROFILE']) {
+                lines.push(`⚠ PB_PROFILE is set to "${d['PB_PROFILE']}" in your environment and overrides profile resolution.`);
+                // Only promise that unsetting PB_PROFILE is sufficient when it actually IS (Codex P2 r14):
+                // an exported API key outranks it too, so with both set, unsetting this one alone changes
+                // nothing — and the key's own warning below already names the step that does.
+                if (!d.shadowedByApiKey)
+                    lines.push(`  This switch won't take effect until you unset it: \`unset PB_PROFILE\`.`);
+            }
+            // Same trap one rung higher: an exported key outranks every profile file, so without this
+            // the command reports a switch the operator's shell will keep shadowing (Codex P2 r7).
+            if (d.shadowedByApiKey) {
+                lines.push('⚠ PRODUCTBRAIN_API_KEY is exported in your environment and outranks every profile.');
+                lines.push(d['PB_PROFILE']
+                    ? "  This switch won't take effect until you unset both: `unset PRODUCTBRAIN_API_KEY PB_PROFILE`."
+                    : "  This switch won't take effect until you unset it: `unset PRODUCTBRAIN_API_KEY`.");
+            }
+            return lines.join('\n');
         },
     });
 }
+/**
+ * Best-effort workspace name after a profile switch; null on any failure.
+ * probeWorkspace() already swallows network/auth errors and returns null, so this is offline-safe.
+ */
+async function safeProbe() {
+    return (await probeWorkspace())?.name ?? null;
+}
 /** pb profile delete <name> */
 export async function runProfileDelete(opts) {
     await runCliCommand({

package/dist/commands/profile.js.map

@@ -1 +1 @@
-{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/commands/profile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,aAAa,CAAC;QAClB,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,uEAAuE,CAAC;YACjF,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACvC,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,OAAO,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,OAAO,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAItC;IACC,MAAM,aAAa,CAAC;QAClB,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC,IAAI,YAAY;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAsB;IACxD,MAAM,aAAa,CAAC;QAClB,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,sEAAsE;YACtE,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;YAC9B,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,EAAE,CAAC;YACjB,CAAC;YAED,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtB,+DAA+D;YAC/D,gBAAgB,EAAE,CAAC;YACnB,0DAA0D;YAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACxC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAEnC,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI;gBACZ,aAAa,EAAE,OAAO,KAAK,IAAI;aAChC,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,IAAI,GAAG,GAAG,wBAAwB,IAAI,CAAC,IAAI,IAAI,CAAC;YAChD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,GAAG,IAAI,4BAA4B,CAAC;YACtC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAsB;IAC3D,MAAM,aAAa,CAAC;QAClB,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC,IAAI,YAAY;KAC1D,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/commands/profile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACjH,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAUvD,MAAM,UAAU,uBAAuB;IACrC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;IAC9D,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,6FAA6F;IAC7F,6FAA6F;IAC7F,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;IACxF,MAAM,eAAe,GAAI,QAA8B,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;IACzD,MAAM,YAAY,GAChB,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAmC;QAC5D,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO;YACrC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;gBAC3B,CAAC,CAAC,MAAM,CAAC;IAEjB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAuB;IACvD,8FAA8F;IAC9F,6FAA6F;IAC7F,8DAA8D;IAC9D,0FAA0F;IAC1F,uFAAuF;IACvF,6FAA6F;IAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS;QAChD,CAAC,CAAC,2KAA2K;QAC7K,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YAC/B,CAAC,CAAC,kIAAkI;YACpI,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;gBAC/B,CAAC,CAAC,oJAAoJ;gBACtJ,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,WAAW;oBACjC,CAAC,CAAC,8KAA8K;oBAChL,CAAC,CAAC,IAAI,CAAC;IACf,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,UAAU,IAAI,uEAAuE,CAAC;IAC/F,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM;YACjC,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QACpF,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,IAAI,CAAC,WAAW,EAAE,EAAE,uBAAuB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAuB,EAAE;QACzC,YAAY,EAAE,iBAAiB;KAChC,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAItC;IACC,MAAM,aAAa,CAAC;QAClB,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC,IAAI,YAAY;KAC1D,CAAC,CAAC;AACL,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAyD;IAC3F,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,uCAAuC,EAAE;YAC1D,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,yFAAyF;SACpG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAmB;QACpC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;YAC3D,gFAAgF;YAChF,mFAAmF;YACnF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;YAE1D,yFAAyF;YACzF,oFAAoF;YACpF,+DAA+D;YAC/D,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,GAAG,EAAE;gBACpB,gBAAgB,EAAE,CAAC;gBACnB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBACxC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;gBACnC,yFAAyF;gBACzF,yFAAyF;gBACzF,uFAAuF;gBACvF,uDAAuD;YACzD,CAAC,CAAC;YACF,mFAAmF;YACnF,iFAAiF;YACjF,2FAA2F;YAC3F,uFAAuF;YACvF,+FAA+F;YAC/F,MAAM,mBAAmB,GAAG,GAAY,EAAE;gBACxC,+FAA+F;gBAC/F,4FAA4F;gBAC5F,uFAAuF;gBACvF,iEAAiE;gBACjE,MAAM,SAAS,GAAG,WAAW,EAAE,KAAK,IAAI,IAAI,mBAAmB,EAAE,CAAC;gBAClE,kBAAkB,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YAEF,iCAAiC;YACjC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,MAAM,IAAI,QAAQ,CAChB,sIAAsI,EACtI,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ;wBAClD,QAAQ,EAAE,0EAA0E,EAAE,CACzF,CAAC;gBACJ,CAAC;gBACD,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,cAAc,GAAG,mBAAmB,EAAE,CAAC;gBAC7C,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK;oBACjE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC;YACpI,CAAC;YAED,wEAAwE;YACxE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,MAAM,eAAe,GAAG,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC7E,+EAA+E;gBAC/E,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;gBACvE,QAAQ,EAAE,CAAC;gBACX,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC;gBAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK;oBAClE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC;YAC3G,CAAC;YAED,wEAAwE;YACxE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,IAAI,kBAAkB,GAAG,KAAK,CAAC;YAC/B,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;gBAC5B,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,kBAAkB,GAAG,IAAI,CAAC;YAC5B,CAAC;YACD,MAAM,cAAc,GAAG,mBAAmB,EAAE,CAAC;YAC7C,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB;gBAC9D,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC;QACpI,CAAC;QACD,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;YAClB,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;gBAC9D,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,eAAe,mEAAmE,CAAC,CAAC;oBAClI,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,uCAAuC,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;gBACpD,IAAI,CAAC,CAAC,kBAAkB;oBAAE,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YACtG,CAAC;YACD,IAAI,CAAC,CAAC,cAAc;gBAAE,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,YAAY,CAAC,yDAAyD,CAAC,CAAC;gBAChH,2FAA2F;gBAC3F,0FAA0F;gBAC1F,8EAA8E;gBAC9E,IAAI,CAAC,CAAC,CAAC,gBAAgB;oBAAE,KAAK,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;YACnH,CAAC;YACD,0FAA0F;YAC1F,uFAAuF;YACvF,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;gBACjG,KAAK,CAAC,IAAI,CACR,CAAC,CAAC,YAAY,CAAC;oBACb,CAAC,CAAC,gGAAgG;oBAClG,CAAC,CAAC,mFAAmF,CACxF,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS;IACtB,OAAO,CAAC,MAAM,cAAc,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AAChD,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAsB;IAC3D,MAAM,aAAa,CAAC;QAClB,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC,IAAI,YAAY;KAC1D,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/promote.d.ts

@@ -4,8 +4,19 @@
  * Thin client: governance checks live in Convex (BR-104).
  */
 interface PromoteOptions {
-    entryId: string;
+    /** Single entry id (back-compat: `pb promote <id>`). */
+    entryId?: string;
+    /** Batch of entry ids (INS-1813). Takes precedence when provided. */
+    entryIds?: string[];
     message?: string;
+    /** Typed override that clears a steering coherency block at the publish chokepoint. */
+    overrideReason?: string;
+    /** Acknowledgement response to a coherency challenge: linked | accepted-fix | diverged. */
+    acknowledge?: string;
+    /** Authorizing entry for --acknowledge linked / accepted-fix. */
+    ackEntry?: string;
+    /** Divergence rationale for --acknowledge diverged. */
+    ackReason?: string;
 }
 export declare function runPromote(options: PromoteOptions): Promise<void>;
 export {};

package/dist/commands/promote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,UAAU,cAAc;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyBD,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAuFvE"}
+{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,UAAU,cAAc;IACtB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAoND,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA0HvE"}