@productbrain/cli 0.1.0-beta.71 → 0.1.0-beta.72

package/dist/__tests__/workspace.test.js

@@ -13,9 +13,9 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest';
 import { runWorkspaceVerify, runWorkspaceRepair, runDefinitionsDiff } from '../commands/workspace.js';
 // ── Mocks ──────────────────────────────────────────────────────────────────
-const convexCallMock = vi.fn();
+const kernelCallMock = vi.fn();
 vi.mock('../lib/client.js', () => ({
-    convexCall: (...args) => convexCallMock(...args),
+    kernelCall: (...args) => kernelCallMock(...args),
 }));
 vi.mock('../lib/config.js', () => ({
     getConfigOrGuide: vi.fn(() => Promise.resolve({ apiKey: 'pb_sk_test', siteUrl: 'https://test.convex.site' })),
@@ -84,12 +84,12 @@ const missingSeedsResult = {
 describe('formatWorkspaceVerify', () => {
     beforeEach(() => vi.clearAllMocks());
     it('renders workspace name in the heading', async () => {
-        convexCallMock.mockResolvedValue(healthyResult);
+        kernelCallMock.mockResolvedValue(healthyResult);
         const output = await captureStdout(() => runWorkspaceVerify());
         expect(output).toContain('Acme Workspace');
     });
     it('shows healthy status when all checks pass', async () => {
-        convexCallMock.mockResolvedValue(healthyResult);
+        kernelCallMock.mockResolvedValue(healthyResult);
         const output = await captureStdout(() => runWorkspaceVerify());
         expect(output).toContain('healthy');
         // No gaps section
@@ -97,7 +97,7 @@ describe('formatWorkspaceVerify', () => {
         expect(output).not.toContain('pb workspace repair');
     });
     it('shows all four check labels', async () => {
-        convexCallMock.mockResolvedValue(healthyResult);
+        kernelCallMock.mockResolvedValue(healthyResult);
         const output = await captureStdout(() => runWorkspaceVerify());
         expect(output).toContain('Collections aligned');
         expect(output).toContain('Glossary seeded');
@@ -105,7 +105,7 @@ describe('formatWorkspaceVerify', () => {
         expect(output).toContain('Default circle');
     });
     it('shows incomplete status with gaps section', async () => {
-        convexCallMock.mockResolvedValue(incompletResult);
+        kernelCallMock.mockResolvedValue(incompletResult);
         const output = await captureStdout(() => runWorkspaceVerify());
         expect(output).toContain('incomplete');
         expect(output).toContain('Gaps');
@@ -113,13 +113,13 @@ describe('formatWorkspaceVerify', () => {
         expect(output).toContain('pb workspace repair');
     });
     it('shows missing-seeds status', async () => {
-        convexCallMock.mockResolvedValue(missingSeedsResult);
+        kernelCallMock.mockResolvedValue(missingSeedsResult);
         const output = await captureStdout(() => runWorkspaceVerify());
         expect(output).toContain('missing-seeds');
         expect(output).toContain('collections missing');
     });
     it('lists all gaps individually', async () => {
-        convexCallMock.mockResolvedValue(incompletResult);
+        kernelCallMock.mockResolvedValue(incompletResult);
         const output = await captureStdout(() => runWorkspaceVerify());
         for (const gap of incompletResult.gaps) {
             expect(output).toContain(gap);
@@ -144,31 +144,31 @@ describe('formatWorkspaceRepair', () => {
         alreadyHealthy: false,
     };
     it('renders already-healthy message when alreadyHealthy is true', async () => {
-        convexCallMock.mockResolvedValue(alreadyHealthyResult);
+        kernelCallMock.mockResolvedValue(alreadyHealthyResult);
         const output = await captureStdout(() => runWorkspaceRepair());
         expect(output).toContain('already healthy');
         expect(output).not.toContain('Scheduled');
     });
     it('lists scheduled jobs when seeds were missing', async () => {
-        convexCallMock.mockResolvedValue(repairedResult);
+        kernelCallMock.mockResolvedValue(repairedResult);
         const output = await captureStdout(() => runWorkspaceRepair());
         expect(output).toContain('Scheduled');
         expect(output).toContain('seedSystemEntries');
         expect(output).toContain('seedSemanticTypes');
     });
     it('lists skipped jobs when already present', async () => {
-        convexCallMock.mockResolvedValue(repairedResult);
+        kernelCallMock.mockResolvedValue(repairedResult);
         const output = await captureStdout(() => runWorkspaceRepair());
         expect(output).toContain('Skipped');
         expect(output).toContain('seedDefaultCircle');
     });
     it('shows async-confirmation hint when seeds were scheduled', async () => {
-        convexCallMock.mockResolvedValue(repairedResult);
+        kernelCallMock.mockResolvedValue(repairedResult);
         const output = await captureStdout(() => runWorkspaceRepair());
         expect(output).toContain('pb workspace verify');
     });
     it('renders workspace name', async () => {
-        convexCallMock.mockResolvedValue(repairedResult);
+        kernelCallMock.mockResolvedValue(repairedResult);
         const output = await captureStdout(() => runWorkspaceRepair());
         expect(output).toContain('Fixed Workspace');
     });
@@ -215,7 +215,7 @@ describe('formatDefinitionsDiff — via runDefinitionsDiff mock', () => {
         const dir = mkdtempSync(join(tmpdir(), 'pb-test-'));
         const file = join(dir, 'defs.json');
         writeFileSync(file, JSON.stringify([]));
-        convexCallMock.mockResolvedValue([]);
+        kernelCallMock.mockResolvedValue([]);
         const output = await captureStdout(() => runDefinitionsDiff({ file }));
         expect(output).toContain('No definitions found');
         rmSync(dir, { recursive: true, force: true });
@@ -228,7 +228,7 @@ describe('formatDefinitionsDiff — via runDefinitionsDiff mock', () => {
         const file = join(dir, 'defs.json');
         const def = { slug: 'bets', name: 'Bets', description: 'Work packages' };
         writeFileSync(file, JSON.stringify([def]));
-        convexCallMock.mockResolvedValue([def]);
+        kernelCallMock.mockResolvedValue([def]);
         const output = await captureStdout(() => runDefinitionsDiff({ file }));
         expect(output).toContain('Identical');
         expect(output).toContain('1');
@@ -242,7 +242,7 @@ describe('formatDefinitionsDiff — via runDefinitionsDiff mock', () => {
         const dir = mkdtempSync(join(tmpdir(), 'pb-test-'));
         const file = join(dir, 'defs.json');
         writeFileSync(file, JSON.stringify([{ slug: 'experiments', name: 'Experiments' }]));
-        convexCallMock.mockResolvedValue([]);
+        kernelCallMock.mockResolvedValue([]);
         const output = await captureStdout(() => runDefinitionsDiff({ file }));
         expect(output).toContain('Only local');
         expect(output).toContain('experiments');
@@ -255,7 +255,7 @@ describe('formatDefinitionsDiff — via runDefinitionsDiff mock', () => {
         const dir = mkdtempSync(join(tmpdir(), 'pb-test-'));
         const file = join(dir, 'defs.json');
         writeFileSync(file, JSON.stringify([]));
-        convexCallMock.mockResolvedValue([{ slug: 'tensions', name: 'Tensions' }]);
+        kernelCallMock.mockResolvedValue([{ slug: 'tensions', name: 'Tensions' }]);
         const output = await captureStdout(() => runDefinitionsDiff({ file }));
         expect(output).toContain('Only server');
         expect(output).toContain('tensions');
@@ -268,7 +268,7 @@ describe('formatDefinitionsDiff — via runDefinitionsDiff mock', () => {
         const dir = mkdtempSync(join(tmpdir(), 'pb-test-'));
         const file = join(dir, 'defs.json');
         writeFileSync(file, JSON.stringify([{ slug: 'bets', name: 'Old name' }]));
-        convexCallMock.mockResolvedValue([{ slug: 'bets', name: 'New name' }]);
+        kernelCallMock.mockResolvedValue([{ slug: 'bets', name: 'New name' }]);
         const output = await captureStdout(() => runDefinitionsDiff({ file }));
         expect(output).toContain('Different');
         expect(output).toContain('bets');
@@ -283,7 +283,7 @@ describe('formatDefinitionsDiff — via runDefinitionsDiff mock', () => {
         const localDef = { slug: 'bets', name: 'Bets' };
         writeFileSync(file, JSON.stringify([localDef]));
         // Server returns same data but with Convex metadata — should still be identical
-        convexCallMock.mockResolvedValue([{ ...localDef, _id: 'abc123', _creationTime: 1234567890 }]);
+        kernelCallMock.mockResolvedValue([{ ...localDef, _id: 'abc123', _creationTime: 1234567890 }]);
         const output = await captureStdout(() => runDefinitionsDiff({ file }));
         expect(output).toContain('Identical');
         expect(output).toContain('All definitions match');
@@ -298,7 +298,7 @@ describe('formatDefinitionsDiff — via runDefinitionsDiff mock', () => {
         const identical = { slug: 'bets', name: 'Bets' };
         const changed = { slug: 'tensions', name: 'Old tensions' };
         writeFileSync(file, JSON.stringify([identical, changed]));
-        convexCallMock.mockResolvedValue([identical, { slug: 'tensions', name: 'New tensions' }]);
+        kernelCallMock.mockResolvedValue([identical, { slug: 'tensions', name: 'New tensions' }]);
         const output = await captureStdout(() => runDefinitionsDiff({ file }));
         // 1 identical / 2 total
         expect(output).toContain('1/2');

package/dist/commands/accept.js

@@ -10,7 +10,7 @@
  * skipped for manual review. Reports what was approved and what was skipped.
  */
 import { getConfigOrGuide } from '../lib/config.js';
-import { convexCall } from '../lib/client.js';
+import { kernelCall } from '../lib/client.js';
 import { runCliCommand } from '../lib/runner.js';
 import { CLIError, ErrorCode } from '../lib/errors.js';
 import { formatAcceptReceipt, formatAutoAcceptReport, } from '../formatters/proposals.js';
@@ -22,7 +22,7 @@ export async function runAccept(options) {
     if (options.auto) {
         await runCliCommand({
             fn: async () => {
-                const proposals = await convexCall('governance.listProposals', {});
+                const proposals = await kernelCall('governance.listProposals', {});
                 const approved = [];
                 const skipped = [];
                 for (const p of proposals) {
@@ -38,7 +38,7 @@ export async function runAccept(options) {
                         continue;
                     }
                     try {
-                        await convexCall('governance.respondToProposal', {
+                        await kernelCall('governance.respondToProposal', {
                             proposalId: p._id,
                             verdict: 'approve',
                         });
@@ -65,7 +65,7 @@ export async function runAccept(options) {
     }
     await runCliCommand({
         fn: async () => {
-            return await convexCall('governance.respondToProposal', {
+            return await kernelCall('governance.respondToProposal', {
                 proposalId: options.proposalId,
                 verdict: 'approve',
             });

package/dist/commands/admin/cockpit.d.ts

@@ -56,7 +56,7 @@ export type ChangelogRow = {
     timestamp: number;
     definitionSlug: string;
 };
-export type CockpitTab = 'workspaces' | 'seeds' | 'changelog';
+export type CockpitTab = 'workspaces' | 'seeds' | 'changelog' | 'manage';
 export type CockpitProps = {
     workspaces: WorkspaceRow[];
     currentKeyWorkspaceId: string | null;
@@ -70,8 +70,10 @@ export type CockpitProps = {
     seedRows: SeedRow[];
     /** Changelog rows for heatmap. WP-317 E8 / S4. */
     changelogRows: ChangelogRow[];
+    /** Called when ManageTab destructive flow becomes active/inactive. WP-324 S2. */
+    onFlowActive?: (active: boolean) => void;
 };
-export declare function Cockpit({ workspaces, currentKeyWorkspaceId, onExit, onDrillIn, onRunFix, siteUrl, seedRows, changelogRows }: CockpitProps): import("react/jsx-runtime").JSX.Element;
+export declare function Cockpit({ workspaces, currentKeyWorkspaceId, onExit, onDrillIn, onRunFix, siteUrl, seedRows, changelogRows, onFlowActive }: CockpitProps): import("react/jsx-runtime").JSX.Element;
 export type WorkspaceHealthData = {
     readiness: unknown;
     collections: unknown;

package/dist/commands/admin/cockpit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cockpit.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/cockpit.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,WAAW,CAAC;KAC1B,CAAC;CACH,CAAC;AAEF,gFAAgF;AAChF,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;CACpD,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG,WAAW,CAAC;AAE9D,MAAM,MAAM,YAAY,GAAG;IACzB,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,SAAS,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,IAAI,CAAC;IACtC,4EAA4E;IAC5E,QAAQ,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,kDAAkD;IAClD,aAAa,EAAE,YAAY,EAAE,CAAC;CAC/B,CAAC;AA+VF,wBAAgB,OAAO,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,YAAY,2CAkUzI;AAuBD,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,YAAY,CAAC;IACxB,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,MAAM,EAAE,MAAM,IAAI,CAAC;CACpB,CAAC;AAQF,wBAAgB,eAAe,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,oBAAoB,2CAwH9F"}
+{"version":3,"file":"cockpit.d.ts","sourceRoot":"","sources":["../../../src/commands/admin/cockpit.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAYH,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,WAAW,CAAC;KAC1B,CAAC;CACH,CAAC;AAEF,gFAAgF;AAChF,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;CACpD,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEzE,MAAM,MAAM,YAAY,GAAG;IACzB,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,SAAS,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,IAAI,CAAC;IACtC,4EAA4E;IAC5E,QAAQ,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,kDAAkD;IAClD,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,iFAAiF;IACjF,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;CAC1C,CAAC;AAumBF,wBAAgB,OAAO,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,YAAY,2CA+UvJ;AAuBD,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,YAAY,CAAC;IACxB,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,MAAM,EAAE,MAAM,IAAI,CAAC;CACpB,CAAC;AAQF,wBAAgB,eAAe,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,oBAAoB,2CAwH9F"}

package/dist/commands/admin/cockpit.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 /**
  * Ink TUI cockpit for pb admin (WP-314 S1, WP-317 S3).
  *
@@ -21,6 +21,8 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState, useMemo, useEffect, useCallback } from 'react';
 import { Box, Text, useInput, useApp } from 'ink';
 import TextInput from 'ink-text-input';
+import { adminCall } from '../../lib/client.js';
+import { resolveWorkspaceArg, resolveUserArg } from './inspect.js';
 // ---------------------------------------------------------------------------
 // Env label derivation
 // ---------------------------------------------------------------------------
@@ -86,11 +88,12 @@ function padLeft(s, width) {
 // ---------------------------------------------------------------------------
 // Tab names and order
 // ---------------------------------------------------------------------------
-const TABS = ['workspaces', 'seeds', 'changelog'];
+const TABS = ['workspaces', 'seeds', 'changelog', 'manage'];
 const TAB_LABELS = {
     workspaces: 'Workspaces',
     seeds: 'Seeds',
     changelog: 'Changelog',
+    manage: 'Manage',
 };
 function nextTab(current) {
     const idx = TABS.indexOf(current);
@@ -212,10 +215,208 @@ function ChangelogTab({ changelogRows, siteUrl }) {
                             })] }, dow));
                 }) }), _jsx(Box, { marginTop: 1, children: _jsxs(Text, { dimColor: true, children: ["\u00B7 0  \u2591 1-2  \u2592 3-5  \u2588 6+   ", days.length, " days, ", changelogRows.length, " change", changelogRows.length !== 1 ? 's' : ''] }) })] }));
 }
+const TEST_ONLY_WARNING = '⚠  TEST-ONLY — for onboarding reset testing only (BR-210)';
+const MANAGE_OPS = [
+    { op: 'delete-workspace', label: 'delete-workspace', description: 'Permanently delete a workspace and all its data' },
+    { op: 'delete-user', label: 'delete-user', description: 'Permanently delete a user across all workspaces' },
+];
+function ManageTab({ onFlowActive }) {
+    const [flowState, setFlowState] = useState('idle');
+    const [selectedOpIdx, setSelectedOpIdx] = useState(0);
+    const [selectedOp, setSelectedOp] = useState(null);
+    const [targetInput, setTargetInput] = useState('');
+    const [resolvedId, setResolvedId] = useState(null);
+    const [dryRunResult, setDryRunResult] = useState(null);
+    const [confirmInput, setConfirmInput] = useState('');
+    const [loading, setLoading] = useState(false);
+    const [errorMsg, setErrorMsg] = useState(null);
+    const [spinnerFrame, setSpinnerFrame] = useState(0);
+    const [doneResult, setDoneResult] = useState(null);
+    useEffect(() => {
+        const isActive = flowState !== 'idle' && flowState !== 'done';
+        onFlowActive?.(isActive);
+    }, [flowState, onFlowActive]);
+    useEffect(() => {
+        if (!loading)
+            return;
+        const timer = setInterval(() => setSpinnerFrame((f) => (f + 1) % SPINNER_FRAMES.length), 80);
+        return () => clearInterval(timer);
+    }, [loading]);
+    function goIdle() {
+        setFlowState('idle');
+        setSelectedOp(null);
+        setTargetInput('');
+        setResolvedId(null);
+        setDryRunResult(null);
+        setConfirmInput('');
+        setErrorMsg(null);
+        setDoneResult(null);
+    }
+    useInput((input, key) => {
+        if (flowState === 'idle') {
+            if (key.upArrow) {
+                setSelectedOpIdx((i) => Math.max(0, i - 1));
+                return;
+            }
+            if (key.downArrow) {
+                setSelectedOpIdx((i) => Math.min(MANAGE_OPS.length - 1, i + 1));
+                return;
+            }
+            if (key.return) {
+                const op = MANAGE_OPS[selectedOpIdx].op;
+                setSelectedOp(op);
+                setFlowState('entering-target');
+                return;
+            }
+            return;
+        }
+        if (flowState === 'entering-target') {
+            if (key.escape) {
+                goIdle();
+                return;
+            }
+            return;
+        }
+        if (flowState === 'showing-dry-run') {
+            if (key.escape) {
+                goIdle();
+                return;
+            }
+            if (key.return) {
+                setFlowState('confirming');
+                setConfirmInput('');
+                return;
+            }
+            return;
+        }
+        if (flowState === 'confirming') {
+            if (key.escape) {
+                goIdle();
+                return;
+            }
+            return;
+        }
+        if (flowState === 'done') {
+            goIdle();
+            return;
+        }
+    });
+    async function handleTargetSubmit(value) {
+        if (!value.trim())
+            return;
+        setLoading(true);
+        setErrorMsg(null);
+        try {
+            let id;
+            if (selectedOp === 'delete-workspace') {
+                id = await resolveWorkspaceArg(value.trim());
+                if (!id) {
+                    setErrorMsg(`Workspace not found: "${value.trim()}"`);
+                    setLoading(false);
+                    return;
+                }
+            }
+            else {
+                id = await resolveUserArg(value.trim());
+            }
+            setResolvedId(id);
+            let result;
+            if (selectedOp === 'delete-workspace') {
+                result = await adminCall('manage:delete-workspace', { workspaceId: id, dryRun: true });
+            }
+            else {
+                result = await adminCall('manage:delete-user', { clerkUserId: id, dryRun: true });
+            }
+            if (result?.success === false && result?.reason === 'user_owns_workspace') {
+                setErrorMsg('Cannot delete: user is the sole member of a workspace. Delete the workspace first.');
+                setLoading(false);
+                return;
+            }
+            setDryRunResult(result);
+            setFlowState('showing-dry-run');
+        }
+        catch (err) {
+            setErrorMsg(err instanceof Error ? err.message : String(err));
+        }
+        finally {
+            setLoading(false);
+        }
+    }
+    async function handleConfirmSubmit(value) {
+        if (!resolvedId || !selectedOp)
+            return;
+        const expectedText = `DELETE ${targetInput.trim()}`;
+        if (value !== expectedText) {
+            setErrorMsg('Input did not match — try again');
+            setConfirmInput('');
+            return;
+        }
+        setLoading(true);
+        setErrorMsg(null);
+        try {
+            let result;
+            if (selectedOp === 'delete-workspace') {
+                result = await adminCall('manage:delete-workspace', { workspaceId: resolvedId, dryRun: false });
+            }
+            else {
+                result = await adminCall('manage:delete-user', { clerkUserId: resolvedId, dryRun: false });
+            }
+            if (result?.success === false && result?.reason === 'user_owns_workspace') {
+                setErrorMsg('Cannot delete: user is the sole member of a workspace.');
+                goIdle();
+                return;
+            }
+            setDoneResult(result);
+            setFlowState('done');
+            // done state renders success screen; user presses any key → goIdle() fires via useInput handler
+        }
+        catch (err) {
+            setErrorMsg(err instanceof Error ? err.message : String(err));
+            goIdle();
+        }
+        finally {
+            setLoading(false);
+        }
+    }
+    function renderDryRunSummary(result) {
+        if (!result)
+            return '—';
+        const total = result.totalDeleted ?? 0;
+        const tables = result.tablesDeleted ?? {};
+        const lines = [`  Total rows to delete: ${total}`];
+        for (const [table, count] of Object.entries(tables)) {
+            if (count > 0)
+                lines.push(`    ${table}: ${count}`);
+        }
+        return lines.join('\n');
+    }
+    if (flowState === 'idle') {
+        return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: "red", children: "Manage \u2014 Destructive Operations" }) }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: "yellow", children: TEST_ONLY_WARNING }) }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: "gray", children: "Select an operation:" }) }), MANAGE_OPS.map((item, idx) => {
+                    const isSelected = idx === selectedOpIdx;
+                    return (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: isSelected ? 'cyan' : undefined, children: isSelected ? '▶ ' : '  ' }), _jsx(Text, { bold: isSelected, color: isSelected ? 'cyan' : 'white', children: item.label })] }), isSelected && (_jsx(Box, { paddingLeft: 4, children: _jsx(Text, { dimColor: true, color: "gray", children: item.description }) }))] }, item.op));
+                }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, color: "gray", children: "\u2191\u2193 navigate \u00B7 Enter select" }) })] }));
+    }
+    if (flowState === 'entering-target') {
+        const prompt = selectedOp === 'delete-workspace' ? 'Enter workspace slug:' : 'Enter user email:';
+        return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Box, { marginBottom: 1, children: _jsxs(Text, { bold: true, color: "red", children: ["Manage \u2014 ", selectedOp] }) }), loading ? (_jsxs(Text, { color: "cyan", children: [SPINNER_FRAMES[spinnerFrame], " Resolving\u2026"] })) : (_jsxs(_Fragment, { children: [_jsxs(Box, { children: [_jsxs(Text, { color: "cyan", children: [prompt, " "] }), _jsx(TextInput, { value: targetInput, onChange: setTargetInput, onSubmit: (v) => { void handleTargetSubmit(v); } })] }), errorMsg && _jsx(Box, { marginTop: 1, children: _jsxs(Text, { color: "red", children: ["\u2717 ", errorMsg] }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, color: "gray", children: "Enter confirm \u00B7 Escape cancel" }) })] }))] }));
+    }
+    if (flowState === 'showing-dry-run') {
+        return (_jsxs(Box, { flexDirection: "column", borderStyle: "single", borderColor: "yellow", paddingX: 2, paddingY: 1, children: [_jsxs(Text, { bold: true, color: "yellow", children: ["Dry-run impact \u2014 ", selectedOp] }), _jsxs(Text, { color: "gray", children: ["Target: ", targetInput.trim()] }), _jsx(Box, { marginTop: 1, marginBottom: 1, children: _jsx(Text, { color: "red", bold: true, children: TEST_ONLY_WARNING }) }), _jsx(Text, { color: "white", children: renderDryRunSummary(dryRunResult) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, color: "gray", children: "Enter to confirm \u2192 \u00B7 Escape cancel" }) })] }));
+    }
+    if (flowState === 'confirming') {
+        const expectedText = `DELETE ${targetInput.trim()}`;
+        return (_jsxs(Box, { flexDirection: "column", borderStyle: "single", borderColor: "red", paddingX: 2, paddingY: 1, children: [_jsxs(Text, { bold: true, color: "red", children: ["\u26A0  CONFIRM DELETION \u2014 ", selectedOp] }), _jsx(Box, { marginTop: 1, marginBottom: 1, children: _jsx(Text, { color: "red", bold: true, children: TEST_ONLY_WARNING }) }), loading ? (_jsxs(Text, { color: "cyan", children: [SPINNER_FRAMES[spinnerFrame], " Deleting\u2026"] })) : (_jsxs(_Fragment, { children: [_jsxs(Box, { children: [_jsxs(Text, { color: "cyan", children: ["Type ", _jsx(Text, { bold: true, children: expectedText }), " to confirm: "] }), _jsx(TextInput, { value: confirmInput, onChange: setConfirmInput, onSubmit: (v) => { void handleConfirmSubmit(v); } })] }), errorMsg && _jsx(Box, { marginTop: 1, children: _jsxs(Text, { color: "red", children: ["\u2717 ", errorMsg] }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, color: "gray", children: "Enter confirm \u00B7 Escape cancel" }) })] }))] }));
+    }
+    if (flowState === 'done') {
+        const total = doneResult?.totalDeleted ?? 0;
+        return (_jsxs(Box, { flexDirection: "column", borderStyle: "single", borderColor: "green", paddingX: 2, paddingY: 1, children: [_jsx(Text, { bold: true, color: "green", children: "\u2713 Deleted successfully" }), _jsxs(Text, { color: "gray", children: [total, " rows removed"] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, color: "gray", children: "Press any key to return" }) })] }));
+    }
+    return null;
+}
 // ---------------------------------------------------------------------------
 // Cockpit component
 // ---------------------------------------------------------------------------
-export function Cockpit({ workspaces, currentKeyWorkspaceId, onExit, onDrillIn, onRunFix, siteUrl, seedRows, changelogRows }) {
+export function Cockpit({ workspaces, currentKeyWorkspaceId, onExit, onDrillIn, onRunFix, siteUrl, seedRows, changelogRows, onFlowActive }) {
     const { exit } = useApp();
     const [activeTab, setActiveTab] = useState('workspaces');
     const [filter, setFilter] = useState('');
@@ -228,6 +429,12 @@ export function Cockpit({ workspaces, currentKeyWorkspaceId, onExit, onDrillIn,
     const [spinnerFrame, setSpinnerFrame] = useState(0);
     /** Set of workspace _ids whose topIssue was cleared locally after a fix ran. */
     const [localFixes, setLocalFixes] = useState(new Set());
+    // ManageTab flow active — blocks Tab/Shift-Tab (WP-324 S2, done-when #4)
+    const [manageFlowActive, setManageFlowActive] = useState(false);
+    const handleManageFlowActive = useCallback((active) => {
+        setManageFlowActive(active);
+        onFlowActive?.(active);
+    }, [onFlowActive]);
     // Animate spinner while a fix is running
     useEffect(() => {
         if (!runningFix)
@@ -260,8 +467,8 @@ export function Cockpit({ workspaces, currentKeyWorkspaceId, onExit, onDrillIn,
     }, [scored, filter]);
     // Keyboard handling
     useInput((input, key) => {
-        // Tab navigation — always active (unless in filter mode)
-        if (key.tab && !isFiltering && !confirmingFix && !runningFix) {
+        // Tab navigation — blocked during ManageTab destructive flow (WP-324 S2)
+        if (key.tab && !isFiltering && !confirmingFix && !runningFix && !manageFlowActive) {
             if (key.shift) {
                 setActiveTab((t) => prevTab(t));
             }
@@ -360,7 +567,7 @@ export function Cockpit({ workspaces, currentKeyWorkspaceId, onExit, onDrillIn,
                     }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", children: '  ' + '─'.repeat(COL_WORKSPACE + COL_ENTRIES + COL_COLS + COL_PARITY + COL_HEALTH + 4) }) }), _jsx(Box, { marginTop: 0, children: isFiltering ? (_jsxs(Box, { children: [_jsx(Text, { color: "cyan", children: "/ " }), _jsx(TextInput, { value: filter, onChange: setFilter, onSubmit: () => setIsFiltering(false) })] })) : runningFix ? (_jsxs(Text, { color: "cyan", children: [SPINNER_FRAMES[spinnerFrame], " Running fix\u2026"] })) : (_jsxs(Text, { color: "gray", children: [filtered.length, " workspace", filtered.length !== 1 ? 's' : '', filter ? ` matching "${filter}"` : '', '  ', _jsxs(Text, { color: "gray", dimColor: true, children: ['/ filter · ↑↓ nav · Enter drill-in · q quit · ? help', (() => {
                                             const sel = filtered[clampedIdx];
                                             return sel?.ws.topIssue && !localFixes.has(sel.ws._id) ? ' · f fix' : '';
-                                        })()] })] })) }), confirmingFix && (_jsxs(Box, { flexDirection: "column", marginTop: 1, borderStyle: "single", borderColor: "cyan", paddingX: 2, paddingY: 1, children: [_jsx(Text, { bold: true, color: "cyan", children: "Run fix?" }), _jsxs(Text, { color: "white", children: [" ", confirmingFix.cmd.label] }), _jsxs(Text, { dimColor: true, color: "gray", children: [" cmd: pb admin seed run ", confirmingFix.cmd.cmd, "  est. ", confirmingFix.cmd.estSeconds, "s"] }), _jsx(Text, { color: "gray", children: " " }), _jsxs(Text, { color: "gray", children: [_jsx(Text, { color: "cyan", children: "[y]" }), _jsx(Text, { color: "gray", children: " yes  " }), _jsx(Text, { color: "cyan", children: "[n]" }), _jsx(Text, { color: "gray", children: " no / Escape" })] })] })), showHelp && !confirmingFix && (_jsxs(Box, { flexDirection: "column", marginTop: 1, borderStyle: "single", borderColor: "gray", paddingX: 2, paddingY: 1, children: [_jsx(Text, { bold: true, color: "cyan", children: "Keyboard shortcuts" }), _jsx(Text, { color: "gray", children: " Tab / Shift+Tab  Switch tabs" }), _jsx(Text, { color: "gray", children: " /               Start fuzzy filter" }), _jsx(Text, { color: "gray", children: " Escape          Clear filter / exit cockpit" }), _jsx(Text, { color: "gray", children: " \u2191 / \u2193           Navigate rows" }), _jsx(Text, { color: "gray", children: " Enter           Drill into selected workspace" }), _jsx(Text, { color: "gray", children: " f               Run suggested fix for selected row" }), _jsx(Text, { color: "gray", children: " q               Quit cockpit" }), _jsx(Text, { color: "gray", children: " ?               Toggle this help panel" }), _jsx(Text, { dimColor: true, color: "gray", children: " Press ? again to close" })] }))] })), activeTab === 'seeds' && (_jsx(SeedsTab, { seedRows: seedRows })), activeTab === 'changelog' && (_jsx(ChangelogTab, { changelogRows: changelogRows, siteUrl: siteUrl }))] }));
+                                        })()] })] })) }), confirmingFix && (_jsxs(Box, { flexDirection: "column", marginTop: 1, borderStyle: "single", borderColor: "cyan", paddingX: 2, paddingY: 1, children: [_jsx(Text, { bold: true, color: "cyan", children: "Run fix?" }), _jsxs(Text, { color: "white", children: [" ", confirmingFix.cmd.label] }), _jsxs(Text, { dimColor: true, color: "gray", children: [" cmd: pb admin seed run ", confirmingFix.cmd.cmd, "  est. ", confirmingFix.cmd.estSeconds, "s"] }), _jsx(Text, { color: "gray", children: " " }), _jsxs(Text, { color: "gray", children: [_jsx(Text, { color: "cyan", children: "[y]" }), _jsx(Text, { color: "gray", children: " yes  " }), _jsx(Text, { color: "cyan", children: "[n]" }), _jsx(Text, { color: "gray", children: " no / Escape" })] })] })), showHelp && !confirmingFix && (_jsxs(Box, { flexDirection: "column", marginTop: 1, borderStyle: "single", borderColor: "gray", paddingX: 2, paddingY: 1, children: [_jsx(Text, { bold: true, color: "cyan", children: "Keyboard shortcuts" }), _jsx(Text, { color: "gray", children: " Tab / Shift+Tab  Switch tabs" }), _jsx(Text, { color: "gray", children: " /               Start fuzzy filter" }), _jsx(Text, { color: "gray", children: " Escape          Clear filter / exit cockpit" }), _jsx(Text, { color: "gray", children: " \u2191 / \u2193           Navigate rows" }), _jsx(Text, { color: "gray", children: " Enter           Drill into selected workspace" }), _jsx(Text, { color: "gray", children: " f               Run suggested fix for selected row" }), _jsx(Text, { color: "gray", children: " q               Quit cockpit" }), _jsx(Text, { color: "gray", children: " ?               Toggle this help panel" }), _jsx(Text, { dimColor: true, color: "gray", children: " Press ? again to close" })] }))] })), activeTab === 'seeds' && (_jsx(SeedsTab, { seedRows: seedRows })), activeTab === 'changelog' && (_jsx(ChangelogTab, { changelogRows: changelogRows, siteUrl: siteUrl })), activeTab === 'manage' && (_jsx(ManageTab, { onFlowActive: handleManageFlowActive }))] }));
 }
 function statusIcon(ok, warn) {
     if (ok)