@productbrain/cli 0.1.0-beta.72 → 0.1.0-beta.7221

package/dist/commands/organisation.test.js

@@ -0,0 +1,204 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const { kernelCall, kernelCallWithSession, readSession } = vi.hoisted(() => ({
+    kernelCall: vi.fn(),
+    kernelCallWithSession: vi.fn(),
+    readSession: vi.fn(),
+}));
+vi.mock('../lib/config.js', () => ({
+    getConfigOrGuide: vi.fn(async () => ({ apiKey: 'test', siteUrl: 'https://test.invalid' })),
+}));
+vi.mock('../lib/client.js', () => ({ kernelCall, kernelCallWithSession }));
+vi.mock('../lib/session.js', () => ({ readSession }));
+vi.mock('../lib/workspaceNotice.js', () => ({ emitEffectiveTenantNotice: vi.fn(async () => undefined) }));
+vi.mock('../lib/runner.js', () => ({
+    isJsonMode: vi.fn(() => false),
+    runCliCommand: vi.fn(async ({ fn }) => { await fn(); }),
+}));
+import { createOrganisationCommand, formatStatus, runMembershipAssign, } from './organisation.js';
+describe('organisation CLI', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        readSession.mockReturnValue({ sessionId: 'session-1' });
+        kernelCallWithSession.mockResolvedValue({ outcome: 'applied', operation: 'membership.assign', created: true, person: 'Nina', team: 'TEAM-1', roles: ['ROLE-1'] });
+    });
+    it('binds membership writes to the active session and relays semantic entry IDs', async () => {
+        await runMembershipAssign('nina@example.com', { team: 'TEAM-1', role: ['ROLE-1', 'ROLE-2'] });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('organisation.assignMembership', {
+            sessionId: 'session-1',
+            targetPersonRef: 'nina@example.com',
+            teamRef: 'TEAM-1',
+            roleRefs: ['ROLE-1', 'ROLE-2'],
+        });
+    });
+    it('refuses every organisation write without an active session', async () => {
+        readSession.mockReturnValue(null);
+        await expect(runMembershipAssign('nina@example.com', { team: 'TEAM-1', role: ['ROLE-1'] }))
+            .rejects.toThrow('No active session');
+        expect(kernelCallWithSession).not.toHaveBeenCalled();
+    });
+    it('treats a server authority refusal as a failed command', async () => {
+        kernelCallWithSession.mockResolvedValue({
+            outcome: 'refused',
+            refusal: { code: 'team_lead_required', reason: 'Route this change to the Product Team Lead.' },
+        });
+        await expect(runMembershipAssign('nina@example.com', { team: 'TEAM-PRODUCT', role: ['ROLE-PRODUCT'] }))
+            .rejects.toThrow('Route this change to the Product Team Lead');
+    });
+    // WP-753 O5 (DEC-1710): runWorkOwn/runWorkUnown's own tests moved to entryOwn.test.ts — the
+    // verb is re-homed under the entry noun, not deleted; the two session/refusal-handling cases
+    // above stay here on runMembershipAssign, an equally generic runOrganisationWrite caller.
+    // WP-751 M2a (TASK-189, DEC-1700): runOrganisationActivate/Upgrade/UpgradeRung2-4 deleted —
+    // role authority is always on from workspace creation (DEC-1691), no activation step exists.
+    // WP-751 M3a-2 (TASK-210, DEC-1700): runOrganisationMode (and the `mode <mode>` subcommand
+    // it backed) is deleted — role is the only governance mode, so "requires the consensus-lock
+    // acknowledgement to enter consensus" is deleted with it; there is no mode left to enter.
+    // WP-753 O5 (DEC-1710): 'work' is deleted — ownership assignment moved to `pb entry own`.
+    it('exposes status, membership, and repair-team-shape commands', () => {
+        const command = createOrganisationCommand();
+        expect(command.commands.map((child) => child.name())).toEqual([
+            'status', 'hierarchy', 'membership', 'repair-team-shape',
+        ]);
+    });
+    it('shows hierarchy health in human-readable status output', () => {
+        const output = formatStatus({
+            authorityEnabled: true,
+            authorityState: {
+                source: 'legacy_update_pilot', binaryMaximum: 0,
+                storedVersion: null, storedCapabilityFloor: null,
+                diagnostics: [], coveredEffects: ['content_update'], refusedEffects: ['publish'],
+            },
+            governanceMode: 'role',
+            readyToActivate: true,
+            activationBlockers: [],
+            activationCounts: {
+                collections: { exact: true, count: 3 },
+                defaultTeamMemberships: { exact: true, count: 1 },
+                ownerships: { exact: true, count: 1 },
+                openProposals: { exact: true, count: 0 },
+                openConsentProposals: { exact: true, count: 0 },
+                proposedVersions: { exact: true, count: 0 },
+            },
+            defaultTeam: { id: 'TEAM-1', name: 'Main' },
+            teamLeadRole: { id: 'ROLE-1', name: 'Team Lead' },
+            activeDefaultTeamLeadCount: 1,
+            hasDuplicateDefaultTeamMemberships: false,
+            hierarchy: {
+                teamCount: 3, edgeCount: 2, integrityValid: true,
+                issueCount: 0, overLimit: false, limit: 200,
+            },
+            activationEffect: 'No automatic ownership.',
+            currentActor: {
+                personId: 'person-1', isWorkspaceOwner: false,
+                managementDisposition: 'allow', managementReason: 'Relevant Team Lead.',
+            },
+            coveredNow: ['canonical parent-child team structure'],
+            notCoveredYet: ['parent-team inheritance'],
+            pilot: 'entry_update_v1',
+        });
+        expect(output).toContain('Team hierarchy: 3 teams, 2 edges — valid');
+        expect(output).toContain('Authority state: versioned authority');
+        expect(output).toContain('all activation checks passed');
+        expect(output).toContain('Collection catalog: 3');
+        expect(output).toContain('Ownership assignments: 1');
+        // WP-512 review round 1 (PR #459, P2): status must reflect actual rung coverage,
+        // not just the static pre-rung1 coveredNow/notCoveredYet lists.
+        expect(output).toContain('editing role-owned working records');
+        expect(output).toContain('publishing role-owned working records');
+    });
+    // WP-751 M2a (TASK-189, DEC-1700): `source` can only ever be 'versioned_supported' now
+    // (kernel/organisationalAuthority/state.ts's resolver — deleted — was the only producer of
+    // 'versioned_future'/STOPPED), so authorityStateLabel/authoritySummary no longer branch on
+    // it. This test keeps its bounded-read-blocker coverage; the STOPPED-state assertions are
+    // dropped as unreachable.
+    it('prints bounded-read blockers without hiding identifiers', () => {
+        const output = formatStatus({
+            authorityEnabled: false,
+            authorityState: {
+                source: 'versioned_supported', binaryMaximum: 4,
+                storedVersion: null, storedCapabilityFloor: null,
+                diagnostics: ['version_floor_mismatch'], coveredEffects: [], refusedEffects: ['content_update'],
+            },
+            governanceMode: 'role', readyToActivate: false,
+            activationBlockers: [{
+                    code: 'open_working_record_proposal', source: 'proposal',
+                    message: 'Resolve open consent proposals before activation.', identifiers: ['ROADMAP-1'],
+                }],
+            activationCounts: {
+                collections: { exact: true, count: 3 },
+                defaultTeamMemberships: { exact: true, count: 1 },
+                ownerships: { exact: false, atLeast: 451, ceiling: 450 },
+                openProposals: { exact: true, count: 1 },
+                openConsentProposals: { exact: true, count: 1 },
+                proposedVersions: { exact: true, count: 0 },
+            },
+            defaultTeam: null, teamLeadRole: null,
+            activeDefaultTeamLeadCount: 0, hasDuplicateDefaultTeamMemberships: false,
+            hierarchy: { teamCount: 0, edgeCount: 0, integrityValid: true, issueCount: 0, overLimit: false, limit: 200 },
+            activationEffect: 'No automatic ownership.',
+            currentActor: { personId: 'person-1', isWorkspaceOwner: true, managementDisposition: 'refuse', managementReason: 'Unsafe state.' },
+            coveredNow: [], notCoveredYet: [], pilot: 'versioned_authority',
+        });
+        expect(output).toContain('Organisation authority: ON — versioned working-record authority');
+        expect(output).toContain('version_floor_mismatch');
+        expect(output).toContain('ROADMAP-1');
+        expect(output).toContain('at least 451 (safe limit 450)');
+    });
+    function baseStatus(overrides) {
+        return {
+            authorityEnabled: false,
+            authorityState: {
+                source: 'disabled', binaryMaximum: 1, storedVersion: null, storedCapabilityFloor: null,
+                diagnostics: [], coveredEffects: [], refusedEffects: [],
+            },
+            governanceMode: 'role', readyToActivate: true, activationBlockers: [],
+            activationCounts: {
+                collections: { exact: true, count: 0 }, defaultTeamMemberships: { exact: true, count: 0 },
+                ownerships: { exact: true, count: 0 }, openProposals: { exact: true, count: 0 },
+                openConsentProposals: { exact: true, count: 0 }, proposedVersions: { exact: true, count: 0 },
+            },
+            defaultTeam: null, teamLeadRole: null, activeDefaultTeamLeadCount: 0,
+            hasDuplicateDefaultTeamMemberships: false,
+            hierarchy: { teamCount: 0, edgeCount: 0, integrityValid: true, issueCount: 0, overLimit: false, limit: 200 },
+            activationEffect: 'No automatic ownership.',
+            currentActor: { personId: 'person-1', isWorkspaceOwner: true, managementDisposition: 'allow', managementReason: 'Owner.' },
+            coveredNow: [], notCoveredYet: [], pilot: 'not_enabled',
+            ...overrides,
+        };
+    }
+    it('WP-512 review round 1 (P2): a rung-1 upgraded workspace shows publish/move/restore as controlled', () => {
+        const output = formatStatus(baseStatus({
+            authorityState: {
+                source: 'versioned_supported', binaryMaximum: 1, storedVersion: 1, storedCapabilityFloor: 1,
+                diagnostics: [],
+                coveredEffects: ['content_update', 'publish', 'unpublish', 'move', 'restore_prior_version'],
+                refusedEffects: ['create', 'deprecate', 'supersede', 'archive', 'restore_archive_to_draft', 'hard_delete'],
+            },
+            pilot: 'versioned_authority',
+        }));
+        expect(output).toContain('publishing role-owned working records');
+        expect(output).toContain('moving role-owned working records between collections');
+        expect(output).toContain('restoring role-owned working records to a prior published version');
+        expect(output).toContain('creating working records');
+    });
+    it('WP-512 review round 1 (P2): a never-enabled workspace shows no effect-derived lines at all', () => {
+        const output = formatStatus(baseStatus({}));
+        expect(output).not.toContain('role-owned working records');
+    });
+    it('WP-513 review round 2 (P2): a rung-2 workspace shows create as controlled exactly once — no contradiction', () => {
+        const output = formatStatus(baseStatus({
+            authorityState: {
+                source: 'versioned_supported', binaryMaximum: 2, storedVersion: 2, storedCapabilityFloor: 2,
+                diagnostics: [],
+                coveredEffects: ['content_update', 'publish', 'unpublish', 'move', 'restore_prior_version', 'create'],
+                refusedEffects: ['deprecate', 'supersede', 'archive', 'restore_archive_to_draft', 'hard_delete'],
+            },
+            pilot: 'versioned_authority',
+            // The real server-side notCoveredYet no longer names 'creating' (WP-513 round 2 fix) —
+            // simulated here so this test would fail if that regressed back to the old static list.
+            notCoveredYet: ['deleting working records'],
+        }));
+        expect(output.match(/creating working records/g)).toHaveLength(1);
+        expect(output).not.toContain('creating or deleting working records');
+    });
+});
+//# sourceMappingURL=organisation.test.js.map

package/dist/commands/organisation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organisation.test.js","sourceRoot":"","sources":["../../src/commands/organisation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3E,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC9B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;CACrB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;CAC3F,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AAC3E,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AACtD,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,yBAAyB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1G,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IAC9B,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAkC,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;CACxF,CAAC,CAAC,CAAC;AAEJ,OAAO,EACL,yBAAyB,EAC1B,YAAY,EACX,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,WAAW,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QACxD,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpK,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,mBAAmB,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,+BAA+B,EAAE;YAClF,SAAS,EAAE,WAAW;YACtB,eAAe,EAAE,kBAAkB;YACnC,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;aACxF,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACxC,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,qBAAqB,CAAC,iBAAiB,CAAC;YACtC,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,6CAA6C,EAAE;SAC/F,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;aACpG,OAAO,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,4FAA4F;IAC5F,6FAA6F;IAC7F,0FAA0F;IAE1F,4FAA4F;IAC5F,6FAA6F;IAC7F,2FAA2F;IAC3F,4FAA4F;IAC5F,0FAA0F;IAE1F,0FAA0F;IAC1F,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,mBAAmB;SACxD,CAAC,CAAC;IACH,CAAC,CAAC,CAAC;IAEJ,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QACjE,MAAM,MAAM,GAAG,YAAY,CAAC;YAC3B,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE;gBACf,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,CAAC;gBAC/C,aAAa,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI;gBAChD,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,SAAS,CAAC;aAChF;YACD,cAAc,EAAE,MAAM;YACtB,eAAe,EAAE,IAAI;YACrB,kBAAkB,EAAE,EAAE;YACtB,gBAAgB,EAAE;gBACjB,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBACtC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBACjD,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBACrC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBACxC,oBAAoB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBAC/C,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;aAC3C;YACD,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE;YAC3C,YAAY,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE;YACjD,0BAA0B,EAAE,CAAC;YAC7B,kCAAkC,EAAE,KAAK;YACzC,SAAS,EAAE;gBACV,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI;gBAChD,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG;aAC3C;YACD,gBAAgB,EAAE,yBAAyB;YAC3C,YAAY,EAAE;gBACb,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK;gBAC7C,qBAAqB,EAAE,OAAO,EAAE,gBAAgB,EAAE,qBAAqB;aACvE;YACD,UAAU,EAAE,CAAC,uCAAuC,CAAC;YACrD,aAAa,EAAE,CAAC,yBAAyB,CAAC;YAC1C,KAAK,EAAE,iBAAiB;SACf,CAAC,CAAC;QACZ,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACrD,iFAAiF;QACjF,gEAAgE;QAChE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,uFAAuF;IACvF,2FAA2F;IAC3F,2FAA2F;IAC3F,0FAA0F;IAC1F,0BAA0B;IAC1B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,YAAY,CAAC;YAC3B,gBAAgB,EAAE,KAAK;YACvB,cAAc,EAAE;gBACf,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,CAAC;gBAC/C,aAAa,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI;gBAChD,WAAW,EAAE,CAAC,wBAAwB,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,gBAAgB,CAAC;aAC/F;YACD,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK;YAC9C,kBAAkB,EAAE,CAAC;oBACpB,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,UAAU;oBACxD,OAAO,EAAE,mDAAmD,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC;iBACxF,CAAC;YACF,gBAAgB,EAAE;gBACjB,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBACtC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBACjD,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;gBACxD,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBACxC,oBAAoB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBAC/C,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;aAC3C;YACD,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;YACrC,0BAA0B,EAAE,CAAC,EAAE,kCAAkC,EAAE,KAAK;YACxE,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE;YAC5G,gBAAgB,EAAE,yBAAyB;YAC3C,YAAY,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE;YAClI,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB;SACtD,CAAC,CAAC;QACZ,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iEAAiE,CAAC,CAAC;QAC5F,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,SAAS,UAAU,CAAC,SAAkC;QACrD,OAAO;YACN,gBAAgB,EAAE,KAAK;YACvB,cAAc,EAAE;gBACf,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI;gBACtF,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE;aACvD;YACD,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;YACrE,gBAAgB,EAAE;gBACjB,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBACzF,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;gBAC/E,oBAAoB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;aAC5F;YACD,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;YACpE,kCAAkC,EAAE,KAAK;YACzC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE;YAC5G,gBAAgB,EAAE,yBAAyB;YAC3C,YAAY,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE;YAC1H,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa;YACvD,GAAG,SAAS;SACH,CAAC;IACZ,CAAC;IAED,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;QAC3G,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC;YACtC,cAAc,EAAE;gBACf,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC;gBAC3F,WAAW,EAAE,EAAE;gBACf,cAAc,EAAE,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,uBAAuB,CAAC;gBAC3F,cAAc,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,0BAA0B,EAAE,aAAa,CAAC;aAC1G;YACD,KAAK,EAAE,qBAAqB;SAC5B,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uDAAuD,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mEAAmE,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACrG,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2GAA2G,EAAE,GAAG,EAAE;QACpH,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC;YACtC,cAAc,EAAE;gBACf,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC;gBAC3F,WAAW,EAAE,EAAE;gBACf,cAAc,EAAE,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,CAAC;gBACrG,cAAc,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,0BAA0B,EAAE,aAAa,CAAC;aAChG;YACD,KAAK,EAAE,qBAAqB;YAC5B,uFAAuF;YACvF,wFAAwF;YACxF,aAAa,EAAE,CAAC,0BAA0B,CAAC;SAC3C,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/commands/organisationHierarchy.d.ts

@@ -0,0 +1,8 @@
+import { Command } from 'commander';
+export declare function runHierarchyShow(): Promise<void>;
+export declare function runHierarchySet(child: string, options: {
+    parent: string;
+}): Promise<void>;
+export declare function runHierarchyClear(child: string): Promise<void>;
+export declare function createOrganisationHierarchyCommand(): Command;
+//# sourceMappingURL=organisationHierarchy.d.ts.map

package/dist/commands/organisationHierarchy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organisationHierarchy.d.ts","sourceRoot":"","sources":["../../src/commands/organisationHierarchy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpC,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAOtD;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAW/F;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUpE;AAED,wBAAgB,kCAAkC,IAAI,OAAO,CAoB5D"}

package/dist/commands/organisationHierarchy.js

@@ -0,0 +1,75 @@
+import { Command } from 'commander';
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCall, kernelCallWithSession } from '../lib/client.js';
+import { runCliCommand } from '../lib/runner.js';
+import { runOrganisationWrite } from './organisationWrite.js';
+function formatHierarchy(view) {
+    const lines = [
+        `Team hierarchy: ${view.integrity.valid ? 'valid' : 'needs repair'}`,
+        `Limits: ${view.limits.maxTeams} teams, ${view.limits.maxParentHops} parent hops`,
+        '',
+        'Teams:',
+        ...view.teams.map((team) => `  - ${team.name} (${team.id}) → ${team.parent ?? 'root'}`),
+    ];
+    if (view.integrity.issues.length > 0) {
+        lines.push('', 'Integrity issues:', ...view.integrity.issues.map((issue) => `  - ${issue.code}: ${issue.team}${issue.relatedTeam ? ` → ${issue.relatedTeam}` : ''}`));
+    }
+    return lines.join('\n');
+}
+function formatApplied(result) {
+    if (!result.changed)
+        return `${String(result.child)} already has the requested parent state; nothing changed.`;
+    return result.operation === 'hierarchy.set'
+        ? `Set ${String(result.child)} parent to ${String(result.parent)}.`
+        : `Cleared the parent of ${String(result.child)}.`;
+}
+export async function runHierarchyShow() {
+    const config = await getConfigOrGuide(runHierarchyShow);
+    if (!config)
+        return;
+    await runCliCommand({
+        fn: () => kernelCall('organisation.hierarchy.show'),
+        formatPretty: formatHierarchy,
+    });
+}
+export async function runHierarchySet(child, options) {
+    const config = await getConfigOrGuide(() => runHierarchySet(child, options));
+    if (!config)
+        return;
+    await runOrganisationWrite((context) => kernelCallWithSession('organisation.hierarchy.setParent', {
+        childTeamRef: child,
+        parentTeamRef: options.parent,
+        sessionId: context.sessionId,
+    }), formatApplied);
+}
+export async function runHierarchyClear(child) {
+    const config = await getConfigOrGuide(() => runHierarchyClear(child));
+    if (!config)
+        return;
+    await runOrganisationWrite((context) => kernelCallWithSession('organisation.hierarchy.clearParent', {
+        childTeamRef: child,
+        sessionId: context.sessionId,
+    }), formatApplied);
+}
+export function createOrganisationHierarchyCommand() {
+    const command = new Command('hierarchy')
+        .description('Inspect and govern canonical parent-child team structure');
+    command.command('show').description('Show the complete bounded team tree and integrity').action(runHierarchyShow);
+    // WP-735 S5 PR2 (D6): the arg is a team OR role id — the write door (organisationHierarchy.ts)
+    // already branches on the resolved child's canonicalKey (PR1). Renamed from <child-team-id>;
+    // no new command family, no widened ownership verb either — the entry-ownership verb (`pb
+    // entry own`, WP-753 O5a; the retired `pb organisation work own` it replaced) is a separate
+    // door, unrelated to this hierarchy one. Sign-off review (P3): this
+    // widening is CLI-arg-only — `show`'s read model (organisationHierarchyResource.ts) does not
+    // yet surface role placements at all (TEN-3488, deliberately out of scope here), so a role
+    // re-parented via `set` cannot be verified back through `show` today.
+    command.command('set <child-id>')
+        .description("Set or change one child team or role's canonical parent (team)")
+        .requiredOption('--parent <parent-team-id>', 'Existing active parent Team entry ID')
+        .action(runHierarchySet);
+    command.command('clear <child-id>')
+        .description('Clear one child team or role parent without cascading work or membership')
+        .action(runHierarchyClear);
+    return command;
+}
+//# sourceMappingURL=organisationHierarchy.js.map

package/dist/commands/organisationHierarchy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organisationHierarchy.js","sourceRoot":"","sources":["../../src/commands/organisationHierarchy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAM9D,SAAS,eAAe,CAAC,IAAmB;IAC3C,MAAM,KAAK,GAAG;QACb,mBAAmB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;QACpE,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,WAAW,IAAI,CAAC,MAAM,CAAC,aAAa,cAAc;QACjF,EAAE;QACF,QAAQ;QACR,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;KACvF,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1E,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACvF,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,MAA6D;IACnF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC;IAC/G,OAAO,MAAM,CAAC,SAAS,KAAK,eAAe;QAC1C,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;QACnE,CAAC,CAAC,yBAAyB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACrC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,aAAa,CAAgB;QAClC,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAgB,6BAA6B,CAAC;QAClE,YAAY,EAAE,eAAe;KAC7B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,OAA2B;IAC/E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,oBAAoB,CACzB,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAuB,kCAAkC,EAAE;QAC5F,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC5B,CAAC,EACF,aAAa,CACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,oBAAoB,CACzB,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAuB,oCAAoC,EAAE;QAC9F,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC5B,CAAC,EACF,aAAa,CACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC;IACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC;SACtC,WAAW,CAAC,0DAA0D,CAAC,CAAC;IAC1E,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,mDAAmD,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAClH,+FAA+F;IAC/F,6FAA6F;IAC7F,0FAA0F;IAC1F,4FAA4F;IAC5F,oEAAoE;IACpE,6FAA6F;IAC7F,2FAA2F;IAC3F,sEAAsE;IACtE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC/B,WAAW,CAAC,gEAAgE,CAAC;SAC7E,cAAc,CAAC,2BAA2B,EAAE,sCAAsC,CAAC;SACnF,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1B,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;SACjC,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5B,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/commands/organisationHierarchy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=organisationHierarchy.test.d.ts.map

package/dist/commands/organisationHierarchy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organisationHierarchy.test.d.ts","sourceRoot":"","sources":["../../src/commands/organisationHierarchy.test.ts"],"names":[],"mappings":""}

package/dist/commands/organisationHierarchy.test.js

@@ -0,0 +1,72 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const { kernelCall, kernelCallWithSession, readSession } = vi.hoisted(() => ({
+    kernelCall: vi.fn(),
+    kernelCallWithSession: vi.fn(),
+    readSession: vi.fn(),
+}));
+vi.mock('../lib/config.js', () => ({
+    getConfigOrGuide: vi.fn(async () => ({ apiKey: 'test', siteUrl: 'https://test.invalid' })),
+}));
+vi.mock('../lib/client.js', () => ({ kernelCall, kernelCallWithSession }));
+vi.mock('../lib/session.js', () => ({ readSession }));
+vi.mock('../lib/workspaceNotice.js', () => ({ emitEffectiveTenantNotice: vi.fn(async () => undefined) }));
+vi.mock('../lib/runner.js', () => ({
+    isJsonMode: vi.fn(() => false),
+    runCliCommand: vi.fn(async ({ fn }) => { await fn(); }),
+}));
+import { createOrganisationHierarchyCommand, runHierarchyClear, runHierarchySet, runHierarchyShow, } from './organisationHierarchy.js';
+describe('organisation hierarchy CLI', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        readSession.mockReturnValue({ sessionId: 'session-1' });
+        kernelCall.mockResolvedValue({ integrity: { valid: true, issues: [] }, limits: { maxTeams: 200, maxParentHops: 16 }, teams: [], roots: [], edges: [] });
+        kernelCallWithSession.mockResolvedValue({ outcome: 'applied', operation: 'hierarchy.set', changed: true, child: 'TEAM-CHILD', parent: 'TEAM-PARENT' });
+    });
+    it('reads the complete hierarchy through the read route', async () => {
+        await runHierarchyShow();
+        expect(kernelCall).toHaveBeenCalledWith('organisation.hierarchy.show');
+    });
+    it('binds set and clear to the active session and semantic team IDs', async () => {
+        await runHierarchySet('TEAM-CHILD', { parent: 'TEAM-PARENT' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('organisation.hierarchy.setParent', {
+            childTeamRef: 'TEAM-CHILD', parentTeamRef: 'TEAM-PARENT', sessionId: 'session-1',
+        });
+        kernelCallWithSession.mockResolvedValueOnce({ outcome: 'applied', operation: 'hierarchy.clear', changed: true, child: 'TEAM-CHILD', parent: null });
+        await runHierarchyClear('TEAM-CHILD');
+        expect(kernelCallWithSession).toHaveBeenLastCalledWith('organisation.hierarchy.clearParent', {
+            childTeamRef: 'TEAM-CHILD', sessionId: 'session-1',
+        });
+    });
+    it('surfaces structural refusals as failed commands', async () => {
+        kernelCallWithSession.mockResolvedValue({
+            outcome: 'refused',
+            refusal: { code: 'hierarchy_cycle', reason: 'This would create a cycle.' },
+        });
+        await expect(runHierarchySet('TEAM-PARENT', { parent: 'TEAM-CHILD' }))
+            .rejects.toThrow('This would create a cycle');
+    });
+    it('exposes only show, set, and clear lifecycle verbs', () => {
+        const commands = createOrganisationHierarchyCommand().commands;
+        expect(commands.map((command) => command.name())).toEqual(['show', 'set', 'clear']);
+        expect(commands.find((command) => command.name() === 'set')?.description())
+            .toBe("Set or change one child team or role's canonical parent (team)");
+    });
+    // D6 (WP-735 S5 PR2): the founder fine-tunes with the existing verb, widened — <child-id>
+    // accepts a role as the child, not just a team. No new command family.
+    it('D6: widens the child arg to accept a role or a team id (set and clear)', () => {
+        const commands = createOrganisationHierarchyCommand().commands;
+        const set = commands.find((command) => command.name() === 'set');
+        const clear = commands.find((command) => command.name() === 'clear');
+        expect(set?.usage()).toContain('<child-id>');
+        expect(set?.usage()).not.toContain('child-team-id');
+        expect(clear?.usage()).toContain('<child-id>');
+        expect(clear?.usage()).not.toContain('child-team-id');
+    });
+    it('D6: forwards a ROLE ref exactly like a team ref — the write door branches on canonicalKey, not the CLI', async () => {
+        await runHierarchySet('ROL-2', { parent: 'TEAM-1' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('organisation.hierarchy.setParent', {
+            childTeamRef: 'ROL-2', parentTeamRef: 'TEAM-1', sessionId: 'session-1',
+        });
+    });
+});
+//# sourceMappingURL=organisationHierarchy.test.js.map

package/dist/commands/organisationHierarchy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organisationHierarchy.test.js","sourceRoot":"","sources":["../../src/commands/organisationHierarchy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5E,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC9B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;CACpB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;CAC1F,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AAC3E,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AACtD,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,yBAAyB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1G,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IAC9B,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAkC,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;CACvF,CAAC,CAAC,CAAC;AAEJ,OAAO,EACN,kCAAkC,EAClC,iBAAiB,EACjB,eAAe,EACf,gBAAgB,GAChB,MAAM,4BAA4B,CAAC;AAEpC,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC3C,UAAU,CAAC,GAAG,EAAE;QACf,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,WAAW,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QACxD,UAAU,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACxJ,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACxJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,gBAAgB,EAAE,CAAC;QACzB,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,6BAA6B,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,eAAe,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,kCAAkC,EAAE;YACtF,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW;SAChF,CAAC,CAAC;QACH,qBAAqB,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACpJ,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,CAAC,qBAAqB,CAAC,CAAC,wBAAwB,CAAC,oCAAoC,EAAE;YAC5F,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW;SAClD,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAChE,qBAAqB,CAAC,iBAAiB,CAAC;YACvC,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,4BAA4B,EAAE;SAC1E,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,eAAe,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;aACpE,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC5D,MAAM,QAAQ,GAAG,kCAAkC,EAAE,CAAC,QAAQ,CAAC;QAC/D,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;aACzE,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,0FAA0F;IAC1F,uEAAuE;IACvE,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QACjF,MAAM,QAAQ,GAAG,kCAAkC,EAAE,CAAC,QAAQ,CAAC;QAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACvH,MAAM,eAAe,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,kCAAkC,EAAE;YACtF,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW;SACtE,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/commands/organisationWrite.d.ts

@@ -0,0 +1,18 @@
+type OrganisationWriteResult = {
+    outcome: 'applied';
+    [key: string]: unknown;
+} | {
+    outcome: 'refused';
+    refusal: {
+        code: string;
+        reason: string;
+        requiredAction?: string;
+    };
+};
+export declare function runOrganisationWrite<T extends OrganisationWriteResult>(call: (context: {
+    sessionId: string;
+}) => Promise<T>, formatApplied: (result: Extract<T, {
+    outcome: 'applied';
+}>) => string): Promise<void>;
+export {};
+//# sourceMappingURL=organisationWrite.d.ts.map

package/dist/commands/organisationWrite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organisationWrite.d.ts","sourceRoot":"","sources":["../../src/commands/organisationWrite.ts"],"names":[],"mappings":"AAMA,KAAK,uBAAuB,GACzB;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAC9C;IACA,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClE,CAAC;AA+CL,wBAAsB,oBAAoB,CAAC,CAAC,SAAS,uBAAuB,EAC3E,IAAI,EAAE,CAAC,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,CAAC,CAAC,EACpD,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,CAAC,KAAK,MAAM,GACnE,OAAO,CAAC,IAAI,CAAC,CAef"}

package/dist/commands/organisationWrite.js

@@ -0,0 +1,68 @@
+/** Shared session and refusal handling for organisation CLI resources. */
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { isJsonMode } from '../lib/runner.js';
+import { readSession } from '../lib/session.js';
+import { emitEffectiveTenantNotice } from '../lib/workspaceNotice.js';
+// WP-753 O5a fix round 2 (item a): CENSUS, not a generated mirror — these 12 codes span THREE
+// separate sources, not one kernel union the generate-kernel-value-sets.mjs chassis could
+// derive a single TARGETS row from (round 1's fix for client.ts's ORGANISATIONAL_AUTHORITY_
+// REFUSAL_CODES worked because that was ONE kernel union; this set is not):
+//   - `duplicate_membership` — kernel/organisationalAuthority/managementTypes.ts's
+//     `OrganisationManagementDecision` refuse-code union (also re-exposed on
+//     `TeamHierarchyDecision` via `Exclude<OrganisationManagementDecision, ...>['code']`).
+//   - `child_team_invalid`, `parent_team_invalid`, `existing_parent_invalid`,
+//     `hierarchy_ambiguous`, `self_parent`, `hierarchy_cycle`, `hierarchy_too_deep`,
+//     `hierarchy_too_large`, `hierarchy_repair_required`, `archived_parent_authority_invalid` —
+//     kernel/organisationalAuthority/hierarchyTypes.ts's `TeamHierarchyDecision` refuse-code
+//     union (which also carries an 11th, `archived_parent_team_lead_required`, deliberately NOT
+//     in this Set — it IS an authority refusal, correctly routed below to AUTH_DENIED/'auth',
+//     not a validation gap to fix).
+//   - `last_team_lead` — NOT a kernel type at all: a Convex-adapter-only code
+//     (convex/governance/organisationResources.ts:32), so no kernel runtime const can cover it.
+// Per the coordinator's ruling: a merged generated list would be invented, not derived — this
+// stays a hand-maintained Set with its provenance named, not a TARGETS row.
+const VALIDATION_REFUSALS = new Set([
+    'duplicate_membership',
+    'last_team_lead',
+    'child_team_invalid',
+    'parent_team_invalid',
+    'existing_parent_invalid',
+    'hierarchy_ambiguous',
+    'self_parent',
+    'hierarchy_cycle',
+    'hierarchy_too_deep',
+    'hierarchy_too_large',
+    'hierarchy_repair_required',
+    'archived_parent_authority_invalid',
+]);
+function requireSessionId() {
+    const session = readSession();
+    if (!session) {
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: 'Run `pb session start` and orient to the organisation work before changing it.',
+        });
+    }
+    return session.sessionId;
+}
+export async function runOrganisationWrite(call, formatApplied) {
+    const sessionId = requireSessionId();
+    await emitEffectiveTenantNotice();
+    const result = await call({ sessionId });
+    if (result.outcome === 'refused') {
+        if (isJsonMode())
+            process.stdout.write(`${JSON.stringify(result)}\n`);
+        const validation = VALIDATION_REFUSALS.has(result.refusal.code);
+        throw new CLIError(result.refusal.reason, {
+            code: validation ? ErrorCode.VALIDATION_FAILED : ErrorCode.AUTH_DENIED,
+            category: validation ? 'validation' : 'auth',
+            guidance: result.refusal.requiredAction ?? 'Ask the relevant Team Lead to make this change.',
+        });
+    }
+    if (isJsonMode())
+        process.stdout.write(`${JSON.stringify(result)}\n`);
+    else
+        process.stdout.write(`${formatApplied(result)}\n`);
+}
+//# sourceMappingURL=organisationWrite.js.map

package/dist/commands/organisationWrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organisationWrite.js","sourceRoot":"","sources":["../../src/commands/organisationWrite.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAStE,8FAA8F;AAC9F,0FAA0F;AAC1F,4FAA4F;AAC5F,4EAA4E;AAC5E,mFAAmF;AACnF,6EAA6E;AAC7E,2FAA2F;AAC3F,8EAA8E;AAC9E,qFAAqF;AACrF,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,8FAA8F;AAC9F,oCAAoC;AACpC,8EAA8E;AAC9E,gGAAgG;AAChG,8FAA8F;AAC9F,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACnC,sBAAsB;IACtB,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;IACrB,yBAAyB;IACzB,qBAAqB;IACrB,aAAa;IACb,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,2BAA2B;IAC3B,mCAAmC;CACnC,CAAC,CAAC;AAEH,SAAS,gBAAgB;IACxB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACxC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,gFAAgF;SAC1F,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,IAAoD,EACpD,aAAqE;IAErE,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,yBAAyB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,UAAU,EAAE;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE;YACzC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW;YACtE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;YAC5C,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,IAAI,iDAAiD;SAC5F,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,MAA4C,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC"}