@productbrain/cli 0.1.0-beta.70 → 0.1.0-beta.7003

package/dist/commands/role.test.js

@@ -0,0 +1,173 @@
+/**
+ * WP-730 S2 — `pb role accountable <role-id>`.
+ *
+ * The surface is thin on purpose: every rule that matters (fail-closed roleId resolution,
+ * canonical-key restriction, the explicit/reporting split) lives behind the gateway and was
+ * proven in S1 (`convex/agentKnowledge/entriesByRole.ts`). What THIS slice can get wrong is the
+ * wire shape and the rendering — dropping a flag, or printing an empty section as a blank
+ * instead of the shared "not recorded yet" text.
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const { getConfigOrGuide, kernelCall, runCliCommand } = vi.hoisted(() => ({
+    getConfigOrGuide: vi.fn(),
+    kernelCall: vi.fn(),
+    runCliCommand: vi.fn(async ({ fn }) => fn()),
+}));
+vi.mock('../lib/config.js', () => ({ getConfigOrGuide }));
+vi.mock('../lib/client.js', () => ({ kernelCall }));
+vi.mock('../lib/runner.js', () => ({ runCliCommand }));
+import { runRoleAccountable, formatRoleAccountable } from './role.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+const ROLE = { id: 'doc-role-1', entryId: 'ROL-2', name: 'Data Steward' };
+const OWNED = { id: 'doc-obj-1', entryId: 'OBJ-1', name: 'An owned objective', canonicalKey: 'objective', status: 'accepted' };
+const REPORTED = { id: 'doc-kr-1', entryId: 'KR-1', name: 'A reported key result', canonicalKey: 'key_result', status: 'accepted' };
+const emptyResult = {
+    role: ROLE,
+    explicit: [], explicitTruncated: false, nextCursor: null,
+    reporting: [], reportingTruncated: false,
+    inherited: [], inheritedResolution: 'not-computed',
+    inheritedNotComputedReason: 'Team-Lead vacancy coverage requires an unbounded scan; not computed.',
+    truncated: false,
+};
+describe('pb role accountable', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        getConfigOrGuide.mockResolvedValue({ apiKey: 'pb_sk_test', siteUrl: 'https://example.test' });
+        kernelCall.mockResolvedValue(emptyResult);
+    });
+    it('calls chain.listByRole with roleId, no session required', async () => {
+        await runRoleAccountable('ROL-2', {});
+        expect(kernelCall).toHaveBeenCalledWith('chain.listByRole', { roleId: 'ROL-2' });
+    });
+    it('forwards canonicalKey, limit, and cursor only when supplied', async () => {
+        await runRoleAccountable('ROL-2', { canonicalKey: 'objective', limit: '5', cursor: '1700000000000' });
+        expect(kernelCall).toHaveBeenCalledWith('chain.listByRole', {
+            roleId: 'ROL-2', canonicalKey: 'objective', limit: 5, cursor: 1700000000000,
+        });
+    });
+    it('sends limit/cursor as NUMBERS, not the raw argv strings', async () => {
+        await runRoleAccountable('ROL-2', { limit: '5' });
+        const [, args] = kernelCall.mock.calls[0];
+        expect(args.limit).toBe(5);
+        expect(args.limit).not.toBe('5');
+    });
+    // PRRT_kwDORS4ils6gP8P9 (review): a non-numeric --limit/--cursor must refuse with
+    // CLIError/VALIDATION_FAILED (category: 'validation') BEFORE any network call — not fall
+    // through to runCliCommand's generic unknown-error wrap (code: INTERNAL), and never reach
+    // the gateway as `NaN` (which JSON.stringify silently turns into `null`).
+    it('refuses a non-numeric --limit with CLIError/VALIDATION_FAILED, before any network call', async () => {
+        await expect(runRoleAccountable('ROL-2', { limit: 'abc' })).rejects.toMatchObject({
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+        });
+        expect(kernelCall).not.toHaveBeenCalled();
+    });
+    it('refuses a non-numeric --cursor with CLIError/VALIDATION_FAILED, before any network call', async () => {
+        await expect(runRoleAccountable('ROL-2', { cursor: 'not-a-timestamp' })).rejects.toBeInstanceOf(CLIError);
+        expect(kernelCall).not.toHaveBeenCalled();
+    });
+    it('refuses a fractional --limit (not a whole number)', async () => {
+        await expect(runRoleAccountable('ROL-2', { limit: '1.5' })).rejects.toMatchObject({
+            code: ErrorCode.VALIDATION_FAILED,
+        });
+        expect(kernelCall).not.toHaveBeenCalled();
+    });
+    // PR #856 review round 3 (Codex P2, PRRT_kwDORS4ils6gQrZI): a whole number outside the
+    // advertised 1-200 range must be refused HERE, before the network call, not silently
+    // clamped server-side to a different page size than the caller asked for.
+    it.each(['0', '-1', '201'])('refuses --limit %s (outside the advertised 1-200 range)', async (limit) => {
+        await expect(runRoleAccountable('ROL-2', { limit })).rejects.toMatchObject({
+            code: ErrorCode.VALIDATION_FAILED,
+        });
+        expect(kernelCall).not.toHaveBeenCalled();
+    });
+    it('accepts the boundary values --limit 1 and --limit 200', async () => {
+        await runRoleAccountable('ROL-2', { limit: '1' });
+        await runRoleAccountable('ROL-2', { limit: '200' });
+        expect(kernelCall).toHaveBeenCalledTimes(2);
+    });
+});
+describe('formatRoleAccountable', () => {
+    it('prints "not recorded yet" for an empty explicit and reporting section', () => {
+        const text = formatRoleAccountable(emptyResult);
+        expect(text).toContain('explicit (owns): not recorded yet');
+        expect(text).toContain('reporting (reports on): not recorded yet');
+    });
+    it('lists explicit and reporting rows separately, never merged', () => {
+        const text = formatRoleAccountable({
+            ...emptyResult,
+            explicit: [OWNED], reporting: [REPORTED],
+        });
+        expect(text).toContain('explicit (owns):');
+        expect(text).toContain('OBJ-1');
+        expect(text).toContain('reporting (reports on):');
+        expect(text).toContain('KR-1');
+        // Never merged: OBJ-1 must not appear in the reporting section's own lines.
+        const reportingSection = text.split('reporting (reports on):')[1] ?? '';
+        expect(reportingSection).not.toContain('OBJ-1');
+    });
+    it('always reports inherited as not-computed, with the reason, never faked as empty', () => {
+        const text = formatRoleAccountable(emptyResult);
+        expect(text).toContain('inherited: not-computed');
+        expect(text).toContain(emptyResult.inheritedNotComputedReason);
+    });
+    it('notes truncation on the relevant section only', () => {
+        const text = formatRoleAccountable({ ...emptyResult, explicit: [OWNED], explicitTruncated: true });
+        const explicitSection = text.split('reporting (reports on):')[0] ?? '';
+        expect(explicitSection).toContain('scan incomplete, more may exist');
+    });
+    // PRRT_kwDORS4ils6gQAqo (review): the truncation hint used to CLAIM a cursor was printed
+    // without ever printing one. `nextCursor` must actually appear so a caller (human or agent)
+    // can literally copy it into --cursor.
+    it('renders the REAL nextCursor value when explicit is truncated, not just a bare claim', () => {
+        const text = formatRoleAccountable({
+            ...emptyResult, explicit: [OWNED], explicitTruncated: true, nextCursor: 1700000000000,
+        });
+        expect(text).toContain('--cursor 1700000000000');
+    });
+    // reporting has no cursor support (PR-1's own design — only `explicit` accepts one). A
+    // truncated reporting page must say so plainly, never point at a flag the gateway ignores.
+    it('states plainly that reporting has NO cursor when truncated, never a fake cursor hint', () => {
+        const text = formatRoleAccountable({
+            ...emptyResult, reporting: [REPORTED], reportingTruncated: true,
+        });
+        const reportingSection = text.split('reporting (reports on):')[1] ?? '';
+        expect(reportingSection).toContain('no cursor');
+        expect(reportingSection).not.toContain('--cursor');
+    });
+    it('returns "Role not found." for a null result', () => {
+        expect(formatRoleAccountable(null)).toBe('Role not found.');
+    });
+    // PR #856 review round 3 (Codex P2, PRRT_kwDORS4ils6gQrY9): an empty-but-truncated response
+    // (canonicalKey narrowing filtered out every row on this page, but the scan is incomplete and
+    // a real cursor exists) must never print the plain "not recorded yet" empty state — that
+    // swallows the cursor and falsely claims the role has no matching entries at all.
+    it('shows truncation and the cursor even when the page is empty (empty-but-truncated)', () => {
+        const text = formatRoleAccountable({
+            ...emptyResult, explicit: [], explicitTruncated: true, nextCursor: 1700000000000,
+        });
+        const explicitSection = text.split('reporting (reports on):')[0] ?? '';
+        expect(explicitSection).not.toContain('explicit (owns): not recorded yet\n');
+        expect(explicitSection).toContain('--cursor 1700000000000');
+    });
+    // PR #856 review round 3 (Codex P2, PRRT_kwDORS4ils6gQrZW): a tension's domain workflowStatus
+    // (open/closed) must render distinctly from its trust status, or two very different rows both
+    // print as `[tension/accepted]`.
+    it('renders the workflow status carried by a row, distinguishing open from closed', () => {
+        const openTension = { id: 'doc-ten-1', entryId: 'TEN-1', name: 'An open tension', canonicalKey: 'tension', status: 'accepted', workflowStatus: 'open' };
+        const closedTension = { id: 'doc-ten-2', entryId: 'TEN-2', name: 'A closed tension', canonicalKey: 'tension', status: 'accepted', workflowStatus: 'closed' };
+        const text = formatRoleAccountable({ ...emptyResult, explicit: [openTension, closedTension] });
+        expect(text).toContain('[tension/accepted / open]');
+        expect(text).toContain('[tension/accepted / closed]');
+    });
+    // PR #872 review round 3 (Codex P2): workflowStatus is stored content (a workspace
+    // collection's validWorkflowStatuses declaration), vocabulary-checked but never
+    // terminal-safety-checked — an embedded newline must not forge an extra row.
+    it('sanitizes an embedded newline in workflowStatus instead of forging an extra row', () => {
+        const evilRow = { id: 'doc-ten-1', entryId: 'TEN-1', name: 'A tension', canonicalKey: 'tension', status: 'accepted', workflowStatus: 'open\nFAKE ROW: nothing to see here' };
+        const text = formatRoleAccountable({ ...emptyResult, explicit: [evilRow] });
+        expect(text.split('\n')).not.toContain('    FAKE ROW: nothing to see here');
+        expect(text).toContain('open FAKE ROW: nothing to see here');
+    });
+});
+//# sourceMappingURL=role.test.js.map

package/dist/commands/role.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.test.js","sourceRoot":"","sources":["../../src/commands/role.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzE,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAkC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;CAC5E,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAC1D,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AACpD,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;AAEvD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAC1E,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC/H,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAEpI,MAAM,WAAW,GAAG;IACnB,IAAI,EAAE,IAAI;IACV,QAAQ,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI;IACxD,SAAS,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK;IACxC,SAAS,EAAE,EAAE,EAAE,mBAAmB,EAAE,cAAuB;IAC3D,0BAA0B,EAAE,sEAAsE;IAClG,SAAS,EAAE,KAAK;CAChB,CAAC;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,UAAU,CAAC,GAAG,EAAE;QACf,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC9F,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QACtG,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,EAAE;YAC3D,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa;SAC3E,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,kFAAkF;IAClF,yFAAyF;IACzF,0FAA0F;IAC1F,0EAA0E;IAC1E,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YACjF,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACxG,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC1G,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YACjF,IAAI,EAAE,SAAS,CAAC,iBAAiB;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,uFAAuF;IACvF,qFAAqF;IACrF,0EAA0E;IAC1E,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,yDAAyD,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACtG,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC1E,IAAI,EAAE,SAAS,CAAC,iBAAiB;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAChF,MAAM,IAAI,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,qBAAqB,CAAC;YAClC,GAAG,WAAW;YACd,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,4EAA4E;QAC5E,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QAC1F,MAAM,IAAI,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACnG,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,yFAAyF;IACzF,4FAA4F;IAC5F,uCAAuC;IACvC,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC9F,MAAM,IAAI,GAAG,qBAAqB,CAAC;YAClC,GAAG,WAAW,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa;SACrF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,uFAAuF;IACvF,2FAA2F;IAC3F,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC/F,MAAM,IAAI,GAAG,qBAAqB,CAAC;YAClC,GAAG,WAAW,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,kBAAkB,EAAE,IAAI;SAC/D,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,MAAM,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,4FAA4F;IAC5F,8FAA8F;IAC9F,yFAAyF;IACzF,kFAAkF;IAClF,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC5F,MAAM,IAAI,GAAG,qBAAqB,CAAC;YAClC,GAAG,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa;SAChF,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC7E,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,8FAA8F;IAC9F,8FAA8F;IAC9F,iCAAiC;IACjC,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACxF,MAAM,WAAW,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QACxJ,MAAM,aAAa,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;QAC7J,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,mFAAmF;IACnF,gFAAgF;IAChF,6EAA6E;IAC7E,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QAC1F,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,qCAAqC,EAAE,CAAC;QAC7K,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/commands/scoreboard.d.ts

@@ -0,0 +1,28 @@
+/**
+ * pb scoreboard — the AGENT-PRIMARY flywheel scoreboard surface (spec §2d).
+ *
+ * The point of this board is NOT a dashboard a human watches — it is telemetry the AGENT reads
+ * to track the flywheel, diagnose what's degrading, and drive the fix without the human looking.
+ * So:
+ *   - `--json`: emits the structured M1/M2/M3/materialization payload (from the ONE internal
+ *     `scoreboard` action, via the AKI `scoreboard.get` route) PLUS the diagnosis layer (A4) and
+ *     the CLI-computed M5 local-pull drift (A5). This is the agent's structured consumption shape.
+ *   - pretty: a compact human-readable board with per-metric status + next action.
+ *
+ * The diagnosis layer is honest by design: unpinned-threshold flips render `awaiting` (never an
+ * invented number), M4 is a standing `awaiting` tile (deferred, TEN-2433), and coaching/moat
+ * quality is a standing `unmeasured` line (TEN-2377) so four green tiles ≠ a healthy moat.
+ */
+import { type ScoreboardPayload, type ScoreboardDiagnosis } from '../scoreboard/diagnose.js';
+import type { LocalDriftM5 } from '../scoreboard/diagnose.js';
+/** The full structured shape `pb scoreboard --json` emits (agent consumption surface). */
+export interface ScoreboardCliView {
+    payload: ScoreboardPayload;
+    /** M5 local-pull drift — computed at the CLI (DEC-1284), NOT in the data payload. */
+    localDrift: LocalDriftM5;
+    diagnosis: ScoreboardDiagnosis;
+}
+export declare function runScoreboard(options?: {
+    task?: string;
+}): Promise<void>;
+//# sourceMappingURL=scoreboard.d.ts.map

package/dist/commands/scoreboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoreboard.d.ts","sourceRoot":"","sources":["../../src/commands/scoreboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAY,KAAK,iBAAiB,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEvG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAG9D,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,qFAAqF;IACrF,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,mBAAmB,CAAC;CAChC;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBlF"}

package/dist/commands/scoreboard.js

@@ -0,0 +1,40 @@
+/**
+ * pb scoreboard — the AGENT-PRIMARY flywheel scoreboard surface (spec §2d).
+ *
+ * The point of this board is NOT a dashboard a human watches — it is telemetry the AGENT reads
+ * to track the flywheel, diagnose what's degrading, and drive the fix without the human looking.
+ * So:
+ *   - `--json`: emits the structured M1/M2/M3/materialization payload (from the ONE internal
+ *     `scoreboard` action, via the AKI `scoreboard.get` route) PLUS the diagnosis layer (A4) and
+ *     the CLI-computed M5 local-pull drift (A5). This is the agent's structured consumption shape.
+ *   - pretty: a compact human-readable board with per-metric status + next action.
+ *
+ * The diagnosis layer is honest by design: unpinned-threshold flips render `awaiting` (never an
+ * invented number), M4 is a standing `awaiting` tile (deferred, TEN-2433), and coaching/moat
+ * quality is a standing `unmeasured` line (TEN-2377) so four green tiles ≠ a healthy moat.
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCall } from '../lib/client.js';
+import { runCliCommand } from '../lib/runner.js';
+import { diagnose } from '../scoreboard/diagnose.js';
+import { computeLocalDrift } from '../scoreboard/localDrift.js';
+import { formatScoreboard } from '../formatters/scoreboard.js';
+export async function runScoreboard(options = {}) {
+    const config = await getConfigOrGuide(() => runScoreboard(options));
+    if (!config)
+        return;
+    await runCliCommand({
+        fn: async () => {
+            // ONE internal computation, reached via the AKI route. workspaceId is injected from auth
+            // (server-derived, fail-closed) — never sent by the CLI.
+            const payload = await kernelCall('scoreboard.get', options.task ? { task: options.task } : {});
+            // A5: compute the TRUE M5 local-pull drift here (the data layer only has the server-side
+            // generation time — DEC-1284). Fail-soft if `.productbrain/` is absent.
+            const localDrift = computeLocalDrift(payload.materialization.latestMaterializedAt);
+            const diagnosis = diagnose(payload, localDrift);
+            return { payload, localDrift, diagnosis };
+        },
+        formatPretty: (view) => formatScoreboard(view),
+    });
+}
+//# sourceMappingURL=scoreboard.js.map

package/dist/commands/scoreboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoreboard.js","sourceRoot":"","sources":["../../src/commands/scoreboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAoD,MAAM,2BAA2B,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAU/D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAA6B,EAAE;IACjE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,yFAAyF;YACzF,yDAAyD;YACzD,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,gBAAgB,EAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC;YACF,yFAAyF;YACzF,wEAAwE;YACxE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC;YACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,wBAAsB,SAAS,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzE"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,wBAAsB,SAAS,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzE"}

package/dist/commands/search.js

@@ -3,7 +3,7 @@
  * BET-181 Slice 0: routes through runCliCommand for JSON-default output.
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { mcpCall } from '../lib/client.js';
+import { kernelCall } from '../lib/client.js';
 import { runCliCommand } from '../lib/runner.js';
 import { formatSearchResults } from '../formatters/search.js';
 export async function runSearch(options) {
@@ -11,7 +11,7 @@ export async function runSearch(options) {
     if (!config)
         return;
     await runCliCommand({
-        fn: () => mcpCall('chain.searchEntries', { query: options.query }),
+        fn: () => kernelCall('chain.searchEntries', { query: options.query }),
         formatPretty: (results) => formatSearchResults(results ?? []),
     });
 }

package/dist/commands/search.js.map

@@ -1 +1 @@
-{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,yBAAyB,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA0B;IACxD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAiB;QAClC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAiB,qBAAqB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAClF,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,IAAI,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,yBAAyB,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA0B;IACxD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,aAAa,CAAiB;QAClC,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAkD,qBAAqB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACtH,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,IAAI,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/session.d.ts

@@ -1,20 +1,73 @@
 /**
- * pb session start / close — CLI write session lifecycle.
- * Opens a tracked agent session (DEC-9, BR-8) with clientKind: 'cli' (DEC-184).
- * Session ID persisted to .productbrain/session.json (TEN-264 option 1).
- * BET-181 Slice 0: uses isJsonMode() for output branching. Existing --json flag
- * on session start preserved for backward compatibility.
+ * pb session start / close — CLI write session lifecycle. Opens a tracked agent session (DEC-9,
+ * BR-8) with clientKind: 'cli' (DEC-184). Session ID persisted to .productbrain/session.json
+ * (TEN-264 option 1). BET-181 Slice 0: uses isJsonMode() for output branching; existing --json
+ * flag on session start preserved for backward compatibility.
  */
-export declare function runSessionStart(options?: {
+type SessionStartOptions = {
     /** @deprecated Use global --json flag instead. Preserved for backward compatibility. */
     json?: boolean;
-}): Promise<void>;
+    /** WP-479 E2: explicit conversation-identity override (the manual seam — same tier as
+     *  PB_CONVERSATION_ID, takes priority over every env-detected channel). */
+    conversation?: string;
+    role?: string;
+};
+/**
+ * Auto-populate the session `label` (WP-479 E2, founder-day fix Pass 2) — the founder's recall
+ * cue for "which of my N conversations" is the worktree/branch, never a UUID. Priority:
+ * SUPERSET_WORKSPACE_NAME env → git branch (silent fail) → cwd basename. Server-side clamps to
+ * ~120 chars (mirrors MAX_TASK_LEN) — no client-side truncation needed here.
+ */
+export declare function resolveSessionLabel(): string;
+export declare function runSessionStart(options?: SessionStartOptions): Promise<void>;
 /**
  * pb session id — print current session ID bare to stdout (machine-readable).
  * Resolves TEN-707. Zero network call — reads local session.json only.
  */
 export declare function runSessionId(): void;
+/**
+ * pb session reset — hard-reset the worktree-local pb SESSION state. TEN-2189 / WP-456 E2.
+ *
+ * Discards session.json outright (via discardSession — NO resume marker, unlike
+ * `pb session close`). Purely local: no network call, no key needed — this is the recovery
+ * path when a session is stranded pinned to the wrong workspace (e.g. left over after a
+ * pb:preview/pb:real binding flip), so it must work even when the current binding is broken.
+ *
+ * Scope: SESSION state only. The preview *binding* (config.local.json keys + the
+ * .productbrain/PREVIEW_MODE marker) is owned end-to-end by `npm run pb:preview` /
+ * `npm run pb:real` — reset never touches it, so the marker can never disagree with the keys
+ * that actually route writes (codex PR #145 review: clearing the marker without the keys left
+ * the worktree silently still preview-bound). To return a preview-bound worktree to the real
+ * Chain: `pb session reset` (clear the session) then `npm run pb:real` (clear the binding).
+ *
+ * Guard (R4): if there IS an active session, confirm before discarding so in-flight captures
+ * aren't silently stranded. `--force` skips the prompt. In a non-interactive context the prompt
+ * can't run, so `--force` is required there.
+ *
+ * WP-479 review fix (Codex re-review): reset clears ALL session markers — the legacy session.json
+ * AND every per-conversation marker under `.productbrain/sessions/`. This is the recovery the
+ * pb:real/pb:preview binding-flip guard prints, and that guard refuses on ANY active marker; a
+ * conversation-scoped reset couldn't clear a sibling marker it has no env to resolve, so the flip
+ * would stay blocked unless `--force` (which strands the server session). A hard reset legitimately
+ * clears the whole worktree's local session state.
+ */
+export declare function runSessionReset(options?: {
+    force?: boolean;
+}): Promise<void>;
 export declare function runSessionClose(options?: {
     force?: boolean;
 }): Promise<void>;
+/**
+ * pb session list — active sessions (with the per-key quota gauge) + a handful of recent
+ * non-active ones. Pure read over `agent.listSessions`; no local session required — this is
+ * exactly the command you run when you're NOT sure which session is yours.
+ */
+export declare function runSessionList(): Promise<void>;
+/**
+ * pb session show <id-or-conversation> — reconstruct the full conversation lineage (all
+ * agentSessions rows across 2h resumes + legacy linkedPreviousSessionId chains) plus the
+ * governance serves recorded for the conversation.
+ */
+export declare function runSessionShow(idOrConversation: string): Promise<void>;
+export {};
 //# sourceMappingURL=session.d.ts.map

package/dist/commands/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/commands/session.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA6BH,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAC7C,wFAAwF;IACxF,IAAI,CAAC,EAAE,OAAO,CAAA;CACV,GAAG,OAAO,CAAC,IAAI,CAAC,CAyErB;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAUnC;AAED,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDtF"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/commands/session.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2BH,KAAK,mBAAmB,GAAG;IACzB,wFAAwF;IACxF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;+EAC2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAc5C;AAwCD,wBAAsB,eAAe,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAStF;AAkOD;;;GAGG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAUnC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0CtF;AAED,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ItF;AAID;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAQpD;AAWD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B5E"}