@productbrain/cli 0.1.0-beta.7 → 0.1.0-beta.71

package/dist/index.js

@@ -1,19 +1,216 @@
 #!/usr/bin/env node
 /**
- * Product Brain CLI — read-only Chain knowledge in the terminal.
- * BET-108 Slice 0: pb orient
+ * Product Brain CLI — Chain knowledge + write-back in the terminal.
+ * Read: BET-108. Write: pb session + pb capture (TEN-27, INS-80).
+ * BET-181 Slice 0: global --json / --pretty flags for agent-native output (DEC-299).
  */
-import { Command } from 'commander';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Command, CommanderError } from 'commander';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const cliPackageVersion = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf8'));
+import { setOutputMode, setQuietMode, isJsonMode } from './lib/runner.js';
+import { CLIError, ErrorCode } from './lib/errors.js';
 import { runContext } from './commands/context.js';
-import { runGet } from './commands/get.js';
+import { runGet, runGetMany } from './commands/get.js';
+import { runConnect } from './commands/connect.js';
 import { runLogin } from './commands/login.js';
+import { runSetup } from './commands/setup.js';
 import { runOrient } from './commands/orient.js';
 import { runSearch } from './commands/search.js';
+import { runHandshake, runHandshakeInit } from './commands/handshake.js';
+import { runSessionStart, runSessionClose, runSessionId } from './commands/session.js';
+import { runCapture } from './commands/capture.js';
+import { runUpdate } from './commands/update.js';
+import { runRelate, runUnrelate } from './commands/relate.js';
+import { runIngest } from './commands/ingest.js';
+import { runFields } from './commands/fields.js';
+import { runConstellation } from './commands/constellation.js';
+import { runPromote } from './commands/promote.js';
+import { runBrandPack } from './commands/brand-pack.js';
+import { runAudit } from './commands/audit.js';
+import { runProposals } from './commands/proposals.js';
+import { runAccept } from './commands/accept.js';
+import { runReject } from './commands/reject.js';
+import { runChanges } from './commands/changes.js';
+import { runChainWalk } from './commands/chain-walk.js';
+import { runCrossCut } from './commands/cross-cut.js';
+import { runBrief, runCompoundBrief, isCompoundType } from './commands/brief.js';
+import { runVerify } from './commands/verify.js';
+import { runCodexPrep } from './commands/codex-prep.js';
+import { runCollectionsList, runCollectionsGet, runCollectionsAudit, runCollectionsExport } from './commands/collections.js';
+import { runWorkspaceVerify, runWorkspaceRepair, runDefinitionsDiff } from './commands/workspace.js';
+import { runDoctor } from './commands/doctor.js';
+import { runProfileList, runProfileCreate, runProfileUse, runProfileDelete } from './commands/profile.js';
+import { runInit } from './commands/init.js';
+import { createAdminCommand } from './commands/admin/index.js';
+import { runUsage } from './commands/usage.js';
+import { GLOSSARY, formatGlossary } from './lib/glossary.js';
+import { API_KEY_PREFIX } from './lib/tokenConstants.js';
+import { hint, heading, bold, dim, green, icons } from './lib/style.js';
+import { readSession } from './lib/session.js';
+import { formatElapsed } from './lib/format.js';
+import { probeWorkspace } from './lib/workspace-probe.js';
+import { checkForUpdate } from './lib/update-check.js';
 const program = new Command();
+/**
+ * Global error handler — single exit point for all CLI errors.
+ * CLIError: format with code + category + guidance.
+ * CommanderError: re-throw for --help / --version (exitCode 0), format others.
+ * Regular Error: wrap as INTERNAL.
+ */
+function handleError(err) {
+    // Commander help/version exits with code 0 — let them through
+    if (err instanceof CommanderError && err.exitCode === 0) {
+        process.exit(0);
+    }
+    const json = isJsonMode();
+    if (err instanceof CLIError) {
+        if (json) {
+            process.stderr.write(JSON.stringify(err.toJSON()) + '\n');
+        }
+        else {
+            process.stderr.write(err.message + '\n');
+            if (err.guidance) {
+                process.stderr.write(err.guidance + '\n');
+            }
+        }
+        process.exit(1);
+    }
+    // CommanderError (bad usage, missing args, etc.)
+    if (err instanceof CommanderError) {
+        const cliErr = new CLIError(err.message, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+        if (json) {
+            process.stderr.write(JSON.stringify(cliErr.toJSON()) + '\n');
+        }
+        else {
+            process.stderr.write(err.message + '\n');
+        }
+        process.exit(err.exitCode);
+    }
+    // Unknown / unstructured errors
+    const message = err instanceof Error ? err.message : String(err);
+    if (json) {
+        process.stderr.write(JSON.stringify({ error: message, code: 'INTERNAL', category: 'internal' }) + '\n');
+    }
+    else {
+        process.stderr.write(message + '\n');
+    }
+    process.exit(1);
+}
 program
     .name('pb')
-    .description('Product Brain — read-only CLI for Chain knowledge')
-    .version('0.1.0');
+    .description('Product Brain — Chain knowledge + write-back CLI')
+    .version(cliPackageVersion.version)
+    // Global output mode flags (DEC-299, BET-181)
+    .option('--json', 'Output machine-readable JSON (overrides TTY auto-detection)')
+    .option('--pretty', 'Force human-readable output even when piped')
+    .option('-q, --quiet', 'Suppress non-essential output (banners, hints, progress)')
+    .exitOverride(); // Throw CommanderError instead of calling process.exit directly
+// Apply global output mode BEFORE subcommand actions run
+program.hook('preAction', (thisCommand) => {
+    const globalOpts = program.opts();
+    if (globalOpts.json) {
+        setOutputMode('json');
+    }
+    else if (globalOpts.pretty) {
+        setOutputMode('pretty');
+    }
+    // else: 'auto' (default) — TTY detection handles it
+    if (globalOpts.quiet) {
+        setQuietMode(true);
+    }
+    // Ambient update notification — non-blocking, suppressed in JSON mode (WP-322 S1)
+    checkForUpdate(cliPackageVersion.version);
+    void thisCommand;
+});
+// Default action — status dashboard when `pb` is invoked with no command.
+// `pb --help` still works because Commander intercepts --help before the action runs.
+program.action(async () => {
+    // Check if we have a valid API key (sync, no network)
+    let hasKey = false;
+    let config = null;
+    try {
+        const { getConfig: gc } = await import('./lib/config.js');
+        config = gc();
+        hasKey = true;
+    }
+    catch {
+        // No valid key
+    }
+    // JSON mode: structured status
+    if (isJsonMode()) {
+        if (!hasKey) {
+            process.stdout.write(JSON.stringify({
+                configured: false,
+                hint: 'Run pb login to configure your API key.',
+            }) + '\n');
+            return;
+        }
+        const session = readSession();
+        const wsInfo = await probeWorkspace();
+        process.stdout.write(JSON.stringify({
+            configured: true,
+            workspace: wsInfo?.name ?? null,
+            session: session ? { id: session.sessionId, startedAt: session.startedAt } : null,
+            entryCount: wsInfo?.entryCount ?? null,
+            hint: 'Run pb --help for available commands.',
+        }) + '\n');
+        return;
+    }
+    // Human mode — not configured
+    if (!hasKey) {
+        process.stdout.write('\n');
+        process.stdout.write(`${bold('Product Brain')} ${dim('— not connected')}\n\n`);
+        process.stdout.write(`${heading('Get started')}\n\n`);
+        hint('1. pb login      Save your API key');
+        hint('2. pb setup      Connect a workspace');
+        hint('3. pb orient -b  See what\'s happening');
+        process.stdout.write('\n');
+        hint('pb --help        Show all commands');
+        process.stdout.write('\n');
+        return;
+    }
+    // Human mode — configured, try workspace probe
+    const session = readSession();
+    const wsInfo = await probeWorkspace();
+    const workspaceName = wsInfo?.name ?? null;
+    const entryCount = wsInfo?.entryCount ?? null;
+    const offline = !wsInfo;
+    process.stdout.write('\n');
+    if (offline) {
+        process.stdout.write(`${bold('Product Brain')} ${dim('— connected (offline)')}\n\n`);
+        process.stdout.write(`  ${green(icons.pass)} Key: configured\n`);
+        process.stdout.write(`  ${dim('Server: unreachable — check your connection')}\n\n`);
+        hint('pb doctor        Diagnose connection issues');
+        hint('pb --help        Show all commands');
+        process.stdout.write('\n');
+        return;
+    }
+    // Online with workspace
+    const title = workspaceName
+        ? `${bold('Product Brain')} ${dim('—')} ${bold(workspaceName)}`
+        : `${bold('Product Brain')}`;
+    process.stdout.write(`${title}\n\n`);
+    if (session) {
+        const elapsed = formatElapsed(session.startedAt);
+        process.stdout.write(`  Session: active (started ${elapsed})\n`);
+    }
+    if (entryCount !== null && entryCount > 0) {
+        process.stdout.write(`  Entries: ${entryCount}\n`);
+    }
+    process.stdout.write('\n');
+    if (!session) {
+        hint('pb session start  Start a write session');
+    }
+    hint('pb orient -b      Workspace overview');
+    hint('pb --help         Show all commands');
+    process.stdout.write('\n');
+});
 program
     .command('get <entry-id>')
     .description('Display full entry by ID (data, relations, last 10 history events)')
@@ -22,29 +219,84 @@ program
         program.commands.find((c) => c.name() === 'get')?.help();
         return;
     }
-    try {
-        await runGet({ entryId: entryId.trim() });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runGet({ entryId: entryId.trim() });
+});
+program
+    .command('get-many <entry-ids...>')
+    .description('Fetch multiple entries in parallel (space-separated IDs)')
+    .action(async (entryIds) => {
+    await runGetMany({ entryIds: entryIds.map((id) => id.trim()).filter(Boolean) });
 });
 program
     .command('context <entry-id>')
-    .description('Gather and display constellation context (pipe-friendly markdown when stdout is not a TTY)')
+    .description('Gather and display constellation context (pipe-friendly: JSON when piped, human text in terminal)')
     .action(async (entryId) => {
     if (!entryId?.trim()) {
         program.commands.find((c) => c.name() === 'context')?.help();
         return;
     }
-    try {
-        await runContext({ entryId: entryId.trim() });
+    await runContext({ entryId: entryId.trim() });
+});
+program
+    .command('changes')
+    .description('Detect entries modified and relations created since a given time (BET-239)')
+    .requiredOption('--since <duration>', 'Time window: 1h, 6h, 1d, 7d, 30d')
+    .action(async (opts) => {
+    await runChanges({ since: opts.since });
+});
+program
+    .command('walk <entry-id>')
+    .description('Directed deep traversal along one relation type to depth 4 (BET-239)')
+    .option('-d, --depth <n>', 'Traversal depth 1-4 (default 2)', '2')
+    .option('--direction <dir>', 'Traversal direction: outgoing or incoming (default outgoing)', 'outgoing')
+    .option('-t, --type <relation-type>', 'Filter by relation type (e.g. depends_on, informs, governs)')
+    .action(async (entryId, opts) => {
+    const depth = parseInt(opts.depth, 10);
+    if (isNaN(depth) || depth < 1 || depth > 4) {
+        throw new CLIError('--depth must be between 1 and 4.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
     }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
+    await runChainWalk({
+        entryId: entryId.trim(),
+        depth,
+        direction: opts.direction,
+        type: opts.type,
+    });
+});
+program
+    .command('cross-cut')
+    .description('Structural aggregation — all relations of a given type grouped by source collection (BET-239)')
+    .requiredOption('--type <relation-type>', 'Relation type to scan (e.g. part_of, informs, governs)')
+    .action(async (opts) => {
+    await runCrossCut({ type: opts.type });
+});
+program
+    .command('brief [type]')
+    .description('Brief intelligence queries (BET-239).\n' +
+    '  pb brief --skill <name>    Incremental delta for a skill (E4)\n' +
+    '  pb brief steering          Compound: changes + structure + delta + readiness (E6)\n' +
+    '  pb brief confidence        Compound: changes + active bets + tensions (E6)\n' +
+    '  pb brief delta [--since]   Compound: changes + relations since timestamp (E6)')
+    .option('--skill <name>', 'Skill name for incremental brief (e.g. preflight, shaping, review)')
+    .option('--since-last', 'Compare against last brief run (incremental mode)')
+    .option('--since <timestamp>', 'ISO 8601 timestamp for delta type (e.g. 2026-03-24T00:00:00Z)')
+    .action(async (type, opts) => {
+    // If positional arg is a compound type, route to compound brief
+    if (type && isCompoundType(type)) {
+        await runCompoundBrief({ type, since: opts.since });
+        return;
+    }
+    // Otherwise, require --skill for incremental brief
+    if (!opts.skill) {
+        throw new CLIError('Usage:\n' +
+            '  pb brief --skill <name>    Incremental delta\n' +
+            '  pb brief steering          Compound steering brief\n' +
+            '  pb brief confidence        Compound confidence pass\n' +
+            '  pb brief delta             Compound delta sync', { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
     }
+    await runBrief({ skill: opts.skill, sinceLast: opts.sinceLast });
 });
 program
     .command('search [query...]')
@@ -55,38 +307,419 @@ program
         program.commands.find((c) => c.name() === 'search')?.help();
         return;
     }
-    try {
-        await runSearch({ query });
-    }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
-    }
+    await runSearch({ query });
 });
 program
     .command('orient')
     .description('Print workspace stage and all orient sections (strategic context, bets, governance, tensions, etc.)')
     .option('-b, --brief', 'Compact view: stage, counts, top bets, tensions, planned work')
+    .option('-t, --task <task>', 'Task description for task-shaped governance and context')
+    // SYNC: domain list must match TaskDomain in convex/agentKnowledge/startupResolver.ts
+    .option('-s, --scope <domain>', 'Domain scope for governance filtering. Valid values: auth, governance, architecture, product, data-foundation, chainwork, capture-pipeline, ingestion, intelligence-and-operations, review-and-learning, general')
     .action(async (opts) => {
-    try {
-        await runOrient({ brief: opts.brief });
+    await runOrient({ brief: opts.brief, task: opts.task?.trim() || undefined, scope: opts.scope?.trim() || undefined });
+});
+program
+    .command('handshake')
+    .description('Generate context files for AI developer tools (AGENTS.md, .codex/skills/, CLAUDE.md, .cursor/rules/, .github/copilot-instructions.md)')
+    .option('--force', 'Overwrite adapter files even if they exist without auto-generated marker')
+    .option('--dry-run', 'Show what would be generated without writing files')
+    .option('--init', 'Set up Claude Code integration: team hooks + personal trust level')
+    .option('--level <level>', 'With --init: trust level (guide|work|silent|full-trust). Without --init: content tier (beginner|intermediate|expert)')
+    .option('--generate', 'Fetch governance entries from the Chain and merge generated rules (BET-286)')
+    .option('--surfaces <list>', 'Comma-separated surfaces to write (cursor,claude,copilot,codex)')
+    .action(async (opts) => {
+    if (opts.init) {
+        await runHandshakeInit({ level: opts.level, dryRun: opts.dryRun });
+        return;
     }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
+    await runHandshake({ force: opts.force, dryRun: opts.dryRun, level: opts.level, generate: opts.generate, surfaces: opts.surfaces?.split(',') });
+});
+program
+    .command('codex-prep <task...>')
+    .description('Generate task-specific governance context for Codex (.codex/task-context.md)')
+    .option('--dry-run', 'Print to stdout instead of writing file')
+    .action(async (taskParts, opts) => {
+    const task = taskParts.join(' ').trim();
+    if (!task) {
+        program.commands.find((c) => c.name() === 'codex-prep')?.help();
+        return;
     }
+    await runCodexPrep({ task, dryRun: opts.dryRun });
+});
+program
+    .command('init')
+    .description('Detect setup state and guide you through configuration (WP-303)')
+    .action(async () => {
+    await runInit();
+});
+program
+    .command('connect <token>')
+    .description('Redeem an onboarding token and save your API key locally (FEAT-958). Uses CONVEX_SITE_URL if set, otherwise the production gateway. Override with --gateway or PB_CONNECT_GATEWAY_URL.')
+    .option('--gateway <url>', 'Override redeem gateway (default: CONVEX_SITE_URL or production). Use when token came from a different Convex deployment.')
+    .action(async (token, opts) => {
+    if (!token?.trim()) {
+        program.commands.find((c) => c.name() === 'connect')?.help();
+        return;
+    }
+    await runConnect(token.trim(), { gateway: opts.gateway });
 });
 program
     .command('login')
     .description('Save your API key to ~/.config/productbrain/.env (works from any directory)')
     .action(async () => {
-    try {
-        await runLogin();
+    await runLogin();
+});
+program
+    .command('doctor')
+    .description('Check CLI configuration and connectivity')
+    .option('--fix', 'Auto-repair common configuration issues')
+    .option('--dry-run', 'Preview what --fix would do without changing anything')
+    .action(async (opts) => {
+    await runDoctor({ fix: opts.fix, dryRun: opts.dryRun });
+});
+program
+    .command('setup')
+    .description('Guided first-time setup: account, login, workspace, first capture')
+    .action(async () => {
+    await runSetup();
+});
+// --- Write commands (require active session) ---
+const sessionCmd = program
+    .command('session')
+    .description('Manage write sessions (DEC-9: sessions required before write access)');
+sessionCmd
+    .command('start')
+    .description('Start a tracked write session (opens session, refreshes context)')
+    .option('--json', 'Output machine-readable JSON (deprecated: use global --json flag)')
+    .action(async (opts) => {
+    await runSessionStart({ json: opts.json });
+});
+sessionCmd
+    .command('id')
+    .description('Print current session ID to stdout (machine-readable, TEN-707)')
+    .action(() => {
+    runSessionId();
+});
+sessionCmd
+    .command('close')
+    .description('Close the active session (wrapup, refresh context)')
+    .option('--force', 'Clear local session state even if server close fails')
+    .action(async (opts) => {
+    await runSessionClose({ force: opts.force });
+});
+program
+    .command('capture [text...]')
+    .description('Capture knowledge to the Chain (requires active session)')
+    .option('-n, --name <name>', 'Entry name (defaults to capture text)')
+    .option('-d, --description <desc>', 'Entry description (defaults to capture text)')
+    .option('-c, --collection <slug>', 'Explicit collection (skip auto-classification)')
+    .option('-l, --link <entry-id>', 'Link new entry to an existing entry (TEN-705)')
+    .option('-t, --type <relation-type>', 'Relation type for --link (default: surfaces_tension_in)')
+    .option('--source-ref <ref>', 'Source reference URI (BET-240 E2: e.g. "meeting-2026-03-28.md")')
+    .option('--source-excerpt <text>', 'Verbatim source excerpt (BET-240 E2)')
+    .option('--json', 'Output machine-readable JSON (deprecated: use global --json flag)')
+    .option('--suggest-only', 'Show grounding preview (possible duplicates, related entries) without creating entry (WP-319)')
+    .option('--strict', 'Prompt y/N before capturing when a possible duplicate is detected (WP-319)')
+    .action(async (textParts = [], opts) => {
+    const text = textParts.join(' ').trim();
+    if (!text && !opts.name) {
+        program.commands.find((c) => c.name() === 'capture')?.help();
+        return;
     }
-    catch (err) {
-        console.error(err instanceof Error ? err.message : String(err));
-        process.exit(1);
+    await runCapture({
+        text: text || opts.name || '',
+        name: opts.name,
+        description: opts.description,
+        collection: opts.collection,
+        link: opts.link,
+        type: opts.type,
+        sourceRef: opts.sourceRef,
+        sourceExcerpt: opts.sourceExcerpt,
+        json: opts.json,
+        suggestOnly: opts.suggestOnly,
+        strict: opts.strict,
+    });
+});
+// --- Update command (TEN-703) ---
+program
+    .command('update <entry-id>')
+    .description('Update fields on an existing Chain entry (requires active session)')
+    .option('-f, --field <key=value>', 'Set a data field (repeatable)', (val, prev) => [...prev, val], [])
+    .option('--name <name>', 'Update entry name')
+    .option('--status <status>', 'Update entry status (draft | active | deprecated | archived)')
+    .option('--workflow-status <status>', 'Set workflow status (server-validated)')
+    .option('--note <text>', 'Change note for history')
+    .action(async (entryId, opts) => {
+    await runUpdate({
+        entryId,
+        field: opts.field,
+        name: opts.name,
+        status: opts.status,
+        workflowStatus: opts.workflowStatus,
+        note: opts.note,
+    });
+});
+// --- Promote command (Wave 2 CLI Polish) ---
+program
+    .command('verify <entry-id>')
+    .description('Mark an entry as verified (BET-240: source fidelity trust signal)')
+    .action(async (entryId) => {
+    if (!entryId?.trim()) {
+        program.commands.find((c) => c.name() === 'verify')?.help();
+        return;
+    }
+    await runVerify({ entryId: entryId.trim() });
+});
+program
+    .command('promote <entry-id>')
+    .description('Promote entry from draft to active (commit to SSOT)')
+    .option('-m, --message <text>', 'Commit message')
+    .action(async (entryId, opts) => {
+    await runPromote({ entryId, message: opts.message });
+});
+// --- Relate / Unrelate commands (TEN-704) ---
+program
+    .command('relate <from-id> <type> <to-id>')
+    .description('Add a typed relation between two entries (requires active session)')
+    .option('--if-missing', 'Only create relation if it does not already exist')
+    .action(async (fromId, type, toId, opts) => {
+    await runRelate({ fromId, type, toId, ifMissing: opts.ifMissing });
+});
+program
+    .command('unrelate <from-id> <type> <to-id>')
+    .description('Remove a typed relation between two entries (requires active session)')
+    .action(async (fromId, type, toId) => {
+    await runUnrelate({ fromId, type, toId });
+});
+// --- Ingest command (BET-81) ---
+program
+    .command('ingest <pattern>')
+    .description('Bulk ingest documents to Chain as drafts')
+    .option('--dry-run', 'Stage entries without auto-committing. Shows summary only.')
+    .option('--resume', 'Skip files whose sourceRef is already committed in staging.')
+    .option('--concurrency <n>', 'Process up to N files in parallel (default 1, max 5).', '1')
+    .action(async (pattern, opts) => {
+    const concurrency = parseInt(opts.concurrency ?? '1', 10);
+    if (Number.isNaN(concurrency) || concurrency < 1) {
+        throw new CLIError('--concurrency must be a positive integer.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    await runIngest({
+        pattern,
+        dryRun: opts.dryRun,
+        resume: opts.resume,
+        concurrency,
+    });
+});
+// --- Fields command (BET-181 Slice 2) ---
+program
+    .command('fields <collection>')
+    .description('List all field definitions for a collection (schema discovery for agents)')
+    .action(async (collection) => {
+    if (!collection?.trim()) {
+        program.commands.find((c) => c.name() === 'fields')?.help();
+        return;
+    }
+    await runFields({ collectionSlug: collection.trim() });
+});
+// --- Constellation command (BET-181 Slice 3) ---
+program
+    .command('constellation <entry-id>')
+    .description('Compound view: entry + all related entries grouped by relation type (agent-native)')
+    .action(async (entryId) => {
+    if (!entryId?.trim()) {
+        program.commands.find((c) => c.name() === 'constellation')?.help();
+        return;
+    }
+    await runConstellation({ entryId: entryId.trim() });
+});
+// --- Audit command (BET-182 Slice 2) ---
+program
+    .command('audit <entry-ids...>')
+    .description('Run STD-113 hygiene audit on bet(s) — 13 gates, exit code reflects verdict')
+    .option('--phase <phase>', 'Override phase detection (shaping | handoff)')
+    .option('--gate <name>', 'Run only specified gate(s) (repeatable)', (val, prev) => [...prev, val], [])
+    .option('--fix', 'Auto-execute exact fixes via pb update, rerun once')
+    .option('--verbose', 'Show all gates including PASS detail')
+    .action(async (entryIds, opts) => {
+    await runAudit({
+        entryIds: entryIds.map((id) => id.trim()).filter(Boolean),
+        phase: opts.phase,
+        gate: opts.gate,
+        fix: opts.fix,
+        verbose: opts.verbose,
+    });
+});
+program
+    .command('brand-pack')
+    .description('Internal marketing: structured community copy via OpenRouter (requires OPENROUTER_API_KEY). Forwards args to scripts/brand-pack.mjs')
+    .allowUnknownOption(true)
+    .allowExcessArguments(true)
+    .action(() => {
+    runBrandPack(process.argv);
+});
+// --- Governance proposal commands (BET-221 Slice 3) ---
+program
+    .command('proposals')
+    .description('List open consent proposals with expiry countdown (BET-221)')
+    .action(async () => {
+    await runProposals();
+});
+program
+    .command('accept [proposal-id]')
+    .description('Approve a consent proposal by ID, or --auto to batch-approve all')
+    .option('-a, --auto', 'Auto-approve all open proposals (skip contradictions)')
+    .action(async (proposalId, opts) => {
+    if (!proposalId && !opts.auto) {
+        throw new CLIError('Usage: pb accept <proposal-id> or pb accept --auto', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+    }
+    await runAccept({ proposalId, auto: opts.auto });
+});
+program
+    .command('reject <proposal-id>')
+    .description('Reject a consent proposal with a required reason (BR-7)')
+    .requiredOption('-r, --reason <text>', 'Reason for rejection (required)')
+    .action(async (proposalId, opts) => {
+    await runReject({ proposalId, reason: opts.reason });
+});
+// --- Collections command (BET-280 Slice 1) ---
+const collectionsCmd = program
+    .command('collections')
+    .description('Inspect and audit workspace collection registry (BET-280)');
+collectionsCmd
+    .command('list')
+    .description('List all collections — slug, name, field count, icon')
+    .action(async () => {
+    await runCollectionsList();
+});
+collectionsCmd
+    .command('get <slug>')
+    .description('Show full detail for a collection by slug')
+    .action(async (slug) => {
+    if (!slug?.trim()) {
+        program.commands.find((c) => c.name() === 'collections')?.help();
+        return;
+    }
+    await runCollectionsGet({ slug: slug.trim() });
+});
+collectionsCmd
+    .command('audit')
+    .description('Collection health report — classification, icon, displayHint coverage, schema gaps')
+    .action(async () => {
+    await runCollectionsAudit();
+});
+collectionsCmd
+    .command('export')
+    .description('Export all system_collection_definitions with full classification metadata (admin only)')
+    .action(async () => {
+    await runCollectionsExport();
+});
+// --- Workspace operator commands (WP-305 Slice 4) ---
+const workspaceCmd = program
+    .command('workspace')
+    .description('Operator commands for workspace health and repair (WP-305)');
+workspaceCmd
+    .command('verify')
+    .description('Check workspace health — seeds, collections, glossary (admin only)')
+    .action(async () => {
+    await runWorkspaceVerify();
+});
+workspaceCmd
+    .command('repair')
+    .description('Backfill missing seeds for the active workspace (admin only)')
+    .action(async () => {
+    await runWorkspaceRepair();
+});
+// --- Definitions diff command (WP-305 Slice 4) ---
+const definitionsCmd = program
+    .command('definitions')
+    .description('Inspect and compare workspace definitions (WP-305)');
+definitionsCmd
+    .command('diff [file]')
+    .description('Compare local dev-system-collections.json against server definitions (admin only)')
+    .action(async (file) => {
+    await runDefinitionsDiff({ file });
+});
+// --- Profile commands (WP-302 Slice 2) ---
+const profileCmd = program
+    .command('profile')
+    .description('Manage workspace profiles (WP-302: multi-workspace support)');
+profileCmd
+    .command('list')
+    .description('List all profiles, mark active one')
+    .action(async () => {
+    await runProfileList();
+});
+profileCmd
+    .command('create <name>')
+    .description('Create a new profile with an API key')
+    .requiredOption('--api-key <key>', `API key (${API_KEY_PREFIX}...)`)
+    .option('--url <url>', 'Convex site URL (defaults to production)')
+    .action(async (name, opts) => {
+    await runProfileCreate({ name, apiKey: opts.apiKey, url: opts.url });
+});
+profileCmd
+    .command('use <name>')
+    .description('Switch active profile (closes any active session)')
+    .action(async (name) => {
+    await runProfileUse({ name });
+});
+profileCmd
+    .command('delete <name>')
+    .description('Delete a profile (cannot delete active or last profile)')
+    .action(async (name) => {
+    await runProfileDelete({ name });
+});
+// --- Glossary command (WP-302 Slice 4) ---
+program
+    .command('glossary')
+    .description('Show key Product Brain CLI terms and definitions')
+    .action(() => {
+    if (isJsonMode()) {
+        process.stdout.write(JSON.stringify(GLOSSARY) + '\n');
+        return;
+    }
+    const lines = [
+        '',
+        heading('Glossary'),
+        '',
+        formatGlossary(),
+        '',
+    ];
+    process.stdout.write(lines.join('\n') + '\n');
+});
+// --- Usage command (WP-322 S4, FEAT-1011) ---
+program
+    .command('usage')
+    .description('Session and activity dashboard — 4-tab Ink TUI (WP-322)')
+    .option('--json', 'Output machine-readable JSON (sessions, entries30d, activity array)')
+    .action(async (opts) => {
+    await runUsage({ json: opts.json });
+});
+// --- Admin command group (WP-312 S2, FEAT-969) ---
+program.addCommand(createAdminCommand());
+// --- Upgrade command (WP-322 S1: ambient update notification) ---
+program
+    .command('upgrade')
+    .description('Upgrade pb CLI to the latest version (npm install -g @productbrain/cli@latest)')
+    .action(() => {
+    if (isJsonMode()) {
+        process.stdout.write(JSON.stringify({
+            command: 'npm install -g @productbrain/cli@latest',
+            hint: 'Run the command above to upgrade pb CLI.',
+        }) + '\n');
+        return;
     }
+    process.stdout.write('\n');
+    process.stdout.write(`${bold('Upgrade pb CLI')}  ${dim('—')} run the command below:\n\n`);
+    process.stdout.write(`  npm install -g @productbrain/cli@latest\n\n`);
 });
-program.parse();
+// Parse with global error handler — all uncaught errors route through handleError
+program.parseAsync().catch(handleError);
 //# sourceMappingURL=index.js.map