@productbrain/cli 0.1.0-beta.77 → 0.1.0-beta.7700

package/dist/commands/questions.test.js

@@ -0,0 +1,159 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const { getConfigOrGuide, kernelCall, kernelCallWithSession, readSession, runCliCommand } = vi.hoisted(() => ({
+    getConfigOrGuide: vi.fn(),
+    kernelCall: vi.fn(),
+    kernelCallWithSession: vi.fn(),
+    readSession: vi.fn(),
+    runCliCommand: vi.fn(async ({ fn }) => fn()),
+}));
+vi.mock('../lib/config.js', () => ({ getConfigOrGuide }));
+vi.mock('../lib/client.js', () => ({ kernelCall, kernelCallWithSession }));
+vi.mock('../lib/runner.js', () => ({ runCliCommand }));
+vi.mock('../lib/session.js', () => ({ readSession }));
+import { createQuestionCommand, runQuestionCreateVerb, runQuestionAssign, runQuestionAnswer, runQuestionForceClose, displayRoleOrLeadName, } from './questions.js';
+/**
+ * `pb question` command surface tests (WP-638 S3). Mirrors commands/shape.test.ts's shape:
+ * every write verb here is a workspace WRITE (session-attributed, kernelCallWithSession), and
+ * human-id (TEN-nnn) args are resolved via `chain.getEntry` (a plain read, kernelCall) before
+ * the write — the R43 resolution layer this file builds instead of a private parser.
+ *
+ * D1c+D2a+D2b (TASK-413/414/416, WP-781): `adopt`/`snooze`/`decline` are deleted, and `assign`
+ * is reassign-to-a-role only now (DEC-1707/§10: no domain lookup anywhere; only assign/answer/
+ * forceClose remain).
+ */
+describe('pb question command surface (WP-638 S3)', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        getConfigOrGuide.mockResolvedValue({ apiKey: 'pb_sk_test', siteUrl: 'https://example.test' });
+        readSession.mockReturnValue({ sessionId: 'session-1' });
+        // Default: chain.getEntry resolves any human id to itself as _id — tests that need a
+        // DIFFERENT resolved doc id override with mockResolvedValueOnce.
+        kernelCall.mockImplementation(async (_fn, args) => ({ _id: args.entryId ?? args.id }));
+        kernelCallWithSession.mockResolvedValue({ entryId: 'TEN-100', facetId: 'facet-1', status: 'escalated', ownerRoleId: 'ROL-lead', routingReason: 'no_domain' });
+    });
+    it('exposes the four write subcommands plus `list`', () => {
+        const command = createQuestionCommand();
+        const names = command.commands.map((item) => item.name());
+        expect(names).toEqual(['create', 'assign', 'answer', 'force-close', 'list']);
+    });
+    it('requires an active session before every write verb (workspace write, session-attributed)', async () => {
+        readSession.mockReturnValue(null);
+        await expect(runQuestionCreateVerb('a question', {})).rejects.toMatchObject({ code: 'SESSION_REQUIRED' });
+        await expect(runQuestionAssign('TEN-1', { toRole: 'ROL-1' })).rejects.toMatchObject({ code: 'SESSION_REQUIRED' });
+        await expect(runQuestionAnswer('TEN-1', 'the answer', {})).rejects.toMatchObject({ code: 'SESSION_REQUIRED' });
+        await expect(runQuestionForceClose('TEN-1', { reason: 'stuck' })).rejects.toMatchObject({ code: 'SESSION_REQUIRED' });
+        expect(kernelCallWithSession).not.toHaveBeenCalled();
+    });
+    it('create: sends text/blocks straight through — no domainSlug (D1c: no domain lookup anywhere)', async () => {
+        await runQuestionCreateVerb('a question', {});
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.create', { text: 'a question', blocks: undefined, sessionId: 'session-1' });
+    });
+    it('create: resolves human-id --blocks targets via chain.getEntry before the write (R43)', async () => {
+        kernelCall.mockResolvedValueOnce({ _id: 'raw-doc-id-1' });
+        await runQuestionCreateVerb('a question', { blocks: ['TEN-42'] });
+        expect(kernelCall).toHaveBeenCalledWith('chain.getEntry', { entryId: 'TEN-42' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.create', { text: 'a question', blocks: ['raw-doc-id-1'], sessionId: 'session-1' });
+    });
+    it('create: a raw (non human-id-shaped) --blocks target passes through unresolved, no --blocks lookup', async () => {
+        await runQuestionCreateVerb('a question', { blocks: ['j5712abcxyz'] });
+        // The only kernelCall this makes is displayRoleOrLeadName's own chain.getEntry lookup for
+        // the born-escalated ownerRoleId (every question is born escalated now, D1c) — never a
+        // --blocks resolution, since 'j5712abcxyz' doesn't match the human-id pattern.
+        expect(kernelCall).not.toHaveBeenCalledWith('chain.getEntry', { entryId: 'j5712abcxyz' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.create', { text: 'a question', blocks: ['j5712abcxyz'], sessionId: 'session-1' });
+    });
+    it('assign: resolves both entryId and --to-role via chain.getEntry (R43), calls question.assign with toRoleId only', async () => {
+        kernelCall.mockResolvedValueOnce({ _id: 'raw-doc-id-1' }); // entryId resolution
+        kernelCall.mockResolvedValueOnce({ _id: 'raw-role-id-1' }); // toRole resolution
+        kernelCallWithSession.mockResolvedValueOnce({ entryId: 'TEN-1', status: 'routed', ownerRoleId: 'raw-role-id-1' });
+        await runQuestionAssign('TEN-1', { toRole: 'ROL-2' });
+        expect(kernelCall).toHaveBeenCalledWith('chain.getEntry', { entryId: 'TEN-1' });
+        expect(kernelCall).toHaveBeenCalledWith('chain.getEntry', { entryId: 'ROL-2' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.assign', { entryId: 'raw-doc-id-1', toRoleId: 'raw-role-id-1' });
+    });
+    // PRRT_kwDORS4ils6YnqKe (round 2 review): fn() must return the FLAT mutation result — the
+    // exact value runCliCommand serializes to stdout in JSON/non-TTY mode. An earlier shape
+    // wrapped it as {result, roleOrLeadName}/{result, targetName}/etc., breaking scripted
+    // consumers expecting entryId/status at the top level.
+    it('create/assign/answer: runCliCommand receives fn() returning the FLAT mutation result, never a {result, ...} wrapper', async () => {
+        const flatCreate = { entryId: 'TEN-1', facetId: 'facet-1', status: 'escalated', ownerRoleId: 'ROL-lead', routingReason: 'no_domain' };
+        kernelCallWithSession.mockResolvedValue(flatCreate);
+        await runQuestionCreateVerb('a question', {});
+        await expect(runCliCommand.mock.calls.at(-1)[0].fn()).resolves.toEqual(flatCreate);
+        const flatAssign = { entryId: 'TEN-1', status: 'routed', ownerRoleId: 'ROL-2' };
+        kernelCallWithSession.mockResolvedValue(flatAssign);
+        await runQuestionAssign('TEN-1', { toRole: 'ROL-2' });
+        await expect(runCliCommand.mock.calls.at(-1)[0].fn()).resolves.toEqual(flatAssign);
+        const flatAnswer = { entryId: 'TEN-1', status: 'processed', askerName: 'Mathijs' };
+        kernelCallWithSession.mockResolvedValue(flatAnswer);
+        await runQuestionAnswer('TEN-1', 'the answer', {});
+        await expect(runCliCommand.mock.calls.at(-1)[0].fn()).resolves.toEqual(flatAnswer);
+    });
+    it('answer: neither text nor --entry is a client-side refusal, §7.7\'s exact string', async () => {
+        await expect(runQuestionAnswer('TEN-1', undefined, {})).rejects.toMatchObject({
+            code: 'VALIDATION_FAILED',
+            message: 'Give the answer as text, or point at an entry with --entry <id>.',
+        });
+        expect(kernelCallWithSession).not.toHaveBeenCalled();
+    });
+    it('answer: both text and --entry is a client-side refusal, §7.7\'s exact string', async () => {
+        await expect(runQuestionAnswer('TEN-1', 'the answer', { entry: 'DEC-5' })).rejects.toMatchObject({
+            code: 'VALIDATION_FAILED',
+            message: 'Use either answer text or --entry, not both.',
+        });
+        expect(kernelCallWithSession).not.toHaveBeenCalled();
+    });
+    it('answer: text form forwards text, no answerEntryId', async () => {
+        kernelCallWithSession.mockResolvedValueOnce({ entryId: 'TEN-1', status: 'processed', answerEntryId: 'DEC-9', answerPending: true });
+        await runQuestionAnswer('TEN-1', 'the answer', {});
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.answer', { entryId: 'TEN-1', text: 'the answer', answerEntryId: undefined });
+    });
+    it('answer: --entry form resolves the target via chain.getEntry, forwards no text', async () => {
+        kernelCallWithSession.mockResolvedValueOnce({ entryId: 'TEN-1', status: 'processed', answerEntryId: 'DEC-9' });
+        await runQuestionAnswer('TEN-1', undefined, { entry: 'DEC-9' });
+        expect(kernelCall).toHaveBeenCalledWith('chain.getEntry', { entryId: 'DEC-9' });
+        // Default mock echoes the human id back as _id (beforeEach).
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.answer', { entryId: 'TEN-1', text: undefined, answerEntryId: 'DEC-9' });
+    });
+    it('force-close: requires --reason client-side before calling the gateway', async () => {
+        await expect(runQuestionForceClose('TEN-1', { reason: '' })).rejects.toMatchObject({ code: 'VALIDATION_FAILED' });
+        expect(kernelCallWithSession).not.toHaveBeenCalled();
+    });
+    it('force-close: forwards the reason', async () => {
+        kernelCallWithSession.mockResolvedValueOnce({ entryId: 'TEN-1', status: 'processed' });
+        await runQuestionForceClose('TEN-1', { reason: 'stuck forever' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.forceClose', { entryId: 'TEN-1', reason: 'stuck forever' });
+    });
+    it('parses the Commander create surface end to end', async () => {
+        const command = createQuestionCommand();
+        command.exitOverride();
+        await command.parseAsync(['create', 'a real question'], { from: 'user' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.create', { text: 'a real question', blocks: undefined, sessionId: 'session-1' });
+    });
+    it('parses the Commander assign surface end to end', async () => {
+        kernelCallWithSession.mockResolvedValueOnce({ entryId: 'TEN-1', status: 'routed', ownerRoleId: 'ROL-2' });
+        const command = createQuestionCommand();
+        command.exitOverride();
+        await command.parseAsync(['assign', 'TEN-1', '--to-role', 'ROL-2'], { from: 'user' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.assign', { entryId: 'TEN-1', toRoleId: 'ROL-2' });
+    });
+    it('parses the Commander force-close surface end to end', async () => {
+        kernelCallWithSession.mockResolvedValueOnce({ entryId: 'TEN-1', status: 'processed' });
+        const command = createQuestionCommand();
+        command.exitOverride();
+        await command.parseAsync(['force-close', 'TEN-1', '--reason', 'stuck'], { from: 'user' });
+        expect(kernelCallWithSession).toHaveBeenCalledWith('question.forceClose', { entryId: 'TEN-1', reason: 'stuck' });
+    });
+    // Late review (PR #907 done-audit, TEN-3600): the "present but unresolvable" twin shipped
+    // with no test — pin the rendered phrase directly, stubbing the underlying chain.getEntry
+    // lookup (kernelCall) to fail the way displayName's own bare catch degrades to undefined.
+    it('displayRoleOrLeadName renders a noun phrase, never a raw id or "someone", when the role lookup fails', async () => {
+        kernelCall.mockRejectedValueOnce(new Error('not found'));
+        await expect(displayRoleOrLeadName('role-doc-1')).resolves.toBe('an unresolved role (`role-doc-1` — reassign it)');
+    });
+    it('displayRoleOrLeadName still renders "someone" when no id was ever suggested (the true no-owner case)', async () => {
+        await expect(displayRoleOrLeadName(undefined)).resolves.toBe('someone');
+        expect(kernelCall).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=questions.test.js.map

package/dist/commands/questions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"questions.test.js","sourceRoot":"","sources":["../../src/commands/questions.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,qBAAqB,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5G,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC9B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAkC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;CAC7E,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAC1D,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AAC3E,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;AACvD,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AAEtD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;GASG;AACH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC9F,WAAW,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QACxD,qFAAqF;QACrF,iEAAiE;QACjE,UAAU,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAW,EAAE,IAAuC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAClI,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IAChK,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,CAAC,qBAAqB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1G,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAClH,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC/G,MAAM,MAAM,CAAC,qBAAqB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtH,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,qBAAqB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,UAAU,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1D,MAAM,qBAAqB,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;QACjH,MAAM,qBAAqB,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACvE,0FAA0F;QAC1F,uFAAuF;QACvF,+EAA+E;QAC/E,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IACjJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gHAAgH,EAAE,KAAK,IAAI,EAAE;QAC9H,UAAU,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,qBAAqB;QAChF,UAAU,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,oBAAoB;QAChF,qBAAqB,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;QAClH,MAAM,iBAAiB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAChI,CAAC,CAAC,CAAC;IAEH,0FAA0F;IAC1F,wFAAwF;IACxF,sFAAsF;IACtF,uDAAuD;IACvD,EAAE,CAAC,qHAAqH,EAAE,KAAK,IAAI,EAAE;QACnI,MAAM,UAAU,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;QACtI,qBAAqB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,qBAAqB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAEpF,MAAM,UAAU,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QAChF,qBAAqB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,iBAAiB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAEpF,MAAM,UAAU,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACnF,qBAAqB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC5E,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,kEAAkE;SAC5E,CAAC,CAAC;QACH,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC/F,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;QACH,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,qBAAqB,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpI,MAAM,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,qBAAqB,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/G,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,6DAA6D;QAC7D,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,CAAC,qBAAqB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAClH,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,qBAAqB,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,qBAAqB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IAChJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,qBAAqB,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACjH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,qBAAqB,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;IAEH,0FAA0F;IAC1F,0FAA0F;IAC1F,0FAA0F;IAC1F,EAAE,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;QACpH,UAAU,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACrH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;QACpH,MAAM,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/reject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reject.d.ts","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BrE"}
+{"version":3,"file":"reject.d.ts","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCrE"}

package/dist/commands/reject.js

@@ -19,14 +19,15 @@ export async function runReject(options) {
         throw new CLIError('Proposal ID is required.', {
             code: ErrorCode.VALIDATION_FAILED,
             category: 'validation',
-            guidance: 'Usage: pb reject <id> --reason "..."',
+            guidance: 'Usage: pb proposal reject <id> --reason "..."',
         });
     }
     if (!options.reason?.trim()) {
         throw new CLIError('A reason is required when rejecting.', {
             code: ErrorCode.VALIDATION_FAILED,
             category: 'validation',
-            guidance: 'Governance requires that objections are explained (BR-7). Usage: pb reject <id> --reason "..."',
+            // BR-7
+            guidance: 'Governance requires that objections are explained. Usage: pb proposal reject <id> --reason "..."',
         });
     }
     await runCliCommand({

package/dist/commands/reject.js.map

@@ -1 +1 @@
-{"version":3,"file":"reject.js","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAOvD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE;YAC7C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,sCAAsC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,sCAAsC,EAAE;YACzD,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,gGAAgG;SAC3G,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,OAAO,MAAM,UAAU,CAAoB,8BAA8B,EAAE;gBACzE,UAAU;gBACV,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"reject.js","sourceRoot":"","sources":["../../src/commands/reject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAOvD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE;YAC7C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,+CAA+C;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,sCAAsC,EAAE;YACzD,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,OAAO;YACP,QAAQ,EAAE,kGAAkG;SAC7G,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAoB;QACrC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,OAAO,MAAM,UAAU,CAA2D,8BAA8B,EAAE;gBAChH,UAAU;gBACV,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/relate.d.ts

@@ -9,6 +9,7 @@ interface RelateOptions {
     type: string;
     toId: string;
     ifMissing?: boolean;
+    dryRun?: boolean;
 }
 export declare function runRelate(options: RelateOptions): Promise<void>;
 export declare function runUnrelate(options: RelateOptions): Promise<void>;

package/dist/commands/relate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relate.d.ts","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAWD,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDrE;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvE"}
+{"version":3,"file":"relate.d.ts","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAsBD,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqKrE;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAyCvE"}

package/dist/commands/relate.js

@@ -10,6 +10,7 @@ import { readSession } from '../lib/session.js';
 import { runCliCommand } from '../lib/runner.js';
 import { formatRelateReceipt, formatUnrelateReceipt } from '../formatters/relate.js';
 import { CLIError, ErrorCode } from '../lib/errors.js';
+import { emitEffectiveTenantNotice } from '../lib/workspaceNotice.js';
 export async function runRelate(options) {
     const config = await getConfigOrGuide(() => runRelate(options));
     if (!config)
@@ -20,7 +21,8 @@ export async function runRelate(options) {
         throw new CLIError('No active session.', {
             code: ErrorCode.SESSION_REQUIRED,
             category: 'session',
-            guidance: 'Run `pb session start` first. Write access requires a tracked session (DEC-9).',
+            // DEC-9
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
         });
     }
     const fromId = options.fromId.trim();
@@ -33,6 +35,8 @@ export async function runRelate(options) {
             guidance: 'Usage: pb relate <from-id> <type> <to-id>',
         });
     }
+    // WP-1: name the target workspace before the write (stderr, every output mode — WP-721).
+    await emitEffectiveTenantNotice();
     await runCliCommand({
         fn: async () => {
             const mcpArgs = {
@@ -43,7 +47,96 @@ export async function runRelate(options) {
             if (options.ifMissing) {
                 mcpArgs.ifMissing = true;
             }
-            const result = await kernelCallWithSession('chain.createEntryRelation', mcpArgs);
+            if (options.dryRun) {
+                mcpArgs.preview = true;
+            }
+            // WP-688 S2a review fix (thread bb1oj): a genuinely separate call arity for dry-run — a
+            // real write ALWAYS passes exactly 2 args (unchanged from before this fix), never a 3rd
+            // `undefined` options arg, so this is a true opt-IN to skipSessionTouch, not a silent
+            // no-op default threaded through every call.
+            let result;
+            try {
+                result = options.dryRun
+                    ? await kernelCallWithSession('chain.createEntryRelation', mcpArgs, { skipSessionTouch: true })
+                    : await kernelCallWithSession('chain.createEntryRelation', mcpArgs);
+            }
+            catch (err) {
+                // WP-745 (DEC-1681, round 4 M2 + PR #896 review): do NOT copy update.ts:213-227's
+                // invalid_option branch verbatim — it pre-empts mcpErr.message and would drop the
+                // task-naming instruction. Render the server's message FIRST (it already names task +
+                // the 12 verbs), then also surface the structured validOptions line so an agent parsing
+                // stderr sees it twice. Gated on validOptions actually being present (the REL-LEGAL-2
+                // refusal shape) — any OTHER McpError (auth denial, rate limit, a different validation
+                // failure) rethrows unchanged so its own code/category/guidance survive (review finding:
+                // the prior unconditional `err.name === 'McpError'` match reclassified every gateway
+                // failure as VALIDATION_FAILED).
+                if (err instanceof Error && err.name === 'McpError') {
+                    const mcpErr = err;
+                    const validOptions = mcpErr.details?.find((d) => d.errorType === 'invalid_option' && d.validOptions)?.validOptions;
+                    if (validOptions && validOptions.length > 0) {
+                        const lines = [mcpErr.message, `Legal relation types toward this work package: ${validOptions.join(', ')}`];
+                        throw new CLIError(lines.join('\n'), { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
+                    }
+                }
+                throw err;
+            }
+            // WP-753 O4 (TEN-3651): chain.createEntryRelation now judges organisational authority
+            // and RETURNS `{outcome:'refused', refusal}` on refusal (never throws) — the exact shape
+            // update.ts's runUpdate already guards against with the same "a refusal must never read
+            // as success" comment. Without this check, the code below reads a refused write as a
+            // plain successful `action: 'related'` receipt.
+            const maybeRefused = result;
+            if (maybeRefused.outcome === 'refused' && maybeRefused.refusal) {
+                const refusal = maybeRefused.refusal;
+                const authorityRefusal = refusal.category === 'auth';
+                throw new CLIError(refusal.reason ?? `Relating ${fromId} to ${toId} was refused.`, {
+                    code: authorityRefusal ? ErrorCode.AUTH_DENIED : ErrorCode.VALIDATION_FAILED,
+                    category: authorityRefusal ? 'auth' : 'validation',
+                    guidance: refusal.requiredAction ?? 'Route this change to the accountable role or Team Lead.',
+                });
+            }
+            // WP-363 S5: Chain debt prevented — misuse pattern intercepted. Checked BEFORE the
+            // dry-run branch (WP-688 S2a review fix, thread bbzfq): the server now evaluates this
+            // gate regardless of preview, so a dry-run must reflect the SAME predicted diversion a
+            // real call would take, never a plain clean "would write" result.
+            if (result?.chainDebtPrevented) {
+                const alts = result.suggestedAlternatives ?? [];
+                if (options.dryRun) {
+                    console.warn(`\n⚠ [dry-run] Chain debt would be prevented`);
+                    console.warn(`  "${result.originalType ?? type}" is a common misuse for this entry pair.`);
+                    console.warn(`  A real (non-dry-run) call would create an agent sign-off proposal instead of writing this relation.`);
+                    console.warn(`\nSuggested alternatives:`);
+                    for (const alt of alts)
+                        console.warn(`  • ${alt.type}: ${alt.reason}`);
+                    return { fromId, type, toId, action: 'dry_run', chainDebtPrevented: true };
+                }
+                console.warn(`\n⚠ Chain debt prevented`);
+                console.warn(`  "${result.originalType ?? type}" is a common misuse for this entry pair.`);
+                console.warn(`  Created agent sign-off proposal: ${result.proposalId}`);
+                console.warn(`\nSuggested alternatives:`);
+                for (const alt of alts) {
+                    console.warn(`  • ${alt.type}: ${alt.reason}`);
+                }
+                // WP-640 SWEEP (#653 review): `pb proposals` is retired (DEC-1574) — the live route is
+                // the noun-scoped `pb proposal list`.
+                console.warn(`\nReview at /review in Cortex UI or use \`pb proposal list\` to manage.`);
+                return { fromId, type, toId, action: 'proposal_created', proposalId: result.proposalId };
+            }
+            // WP-688 S2a: preview mode returns a DIFFERENT shape than a real write — never asserted
+            // as 'related'. `alreadyExists` (thread bb38B) survives into the dry-run receipt: the
+            // ifMissing early-return in relations.ts is itself non-mutating regardless of `preview`,
+            // so it is safe and necessary to preserve — dropping it hid whether a real
+            // `--if-missing --dry-run` call would be a no-op.
+            if (options.dryRun) {
+                return {
+                    fromId, type, toId, action: 'dry_run',
+                    advisories: result?.advisories && result.advisories.length > 0 ? result.advisories : undefined,
+                    wouldBlock: result?.wouldBlock, blockingReason: result?.blockingReason,
+                    alreadyExists: options.ifMissing ? result?.alreadyExists === true : undefined,
+                    // WP-688 S2a review fix (thread bcFAC): predicted governs-proposal diversion.
+                    wouldRequireProposal: result?.wouldRequireProposal === true ? true : undefined,
+                };
+            }
             const isProposal = result?.status === 'proposal_created';
             const output = {
                 fromId,
@@ -55,6 +148,9 @@ export async function runRelate(options) {
                 output.proposalId = result.proposalId;
             if (options.ifMissing)
                 output.alreadyExists = result?.alreadyExists === true;
+            // WP-625 (S3 of WP-618, DEC-1546, TEN-3037): surface the relate door's advisories in the CLI.
+            if (result?.advisories && result.advisories.length > 0)
+                output.advisories = result.advisories;
             return output;
         },
         formatPretty: (result) => formatRelateReceipt(result),
@@ -70,7 +166,8 @@ export async function runUnrelate(options) {
         throw new CLIError('No active session.', {
             code: ErrorCode.SESSION_REQUIRED,
             category: 'session',
-            guidance: 'Run `pb session start` first. Write access requires a tracked session (DEC-9).',
+            // DEC-9
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
         });
     }
     const fromId = options.fromId.trim();
@@ -83,6 +180,8 @@ export async function runUnrelate(options) {
             guidance: 'Usage: pb unrelate <from-id> <type> <to-id>',
         });
     }
+    // WP-1: name the target workspace before the write (stderr, every output mode — WP-721).
+    await emitEffectiveTenantNotice();
     await runCliCommand({
         fn: async () => {
             await kernelCallWithSession('chain.removeEntryRelation', {

package/dist/commands/relate.js.map

@@ -1 +1 @@
-{"version":3,"file":"relate.js","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAkBvD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,gFAAgF;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,2CAA2C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,OAAO,GAA4B;gBACvC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,2BAA2B,EAAE,OAAO,CAIlE,CAAC;YACd,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,KAAK,kBAAkB,CAAC;YACzD,MAAM,MAAM,GAAiB;gBAC3B,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,kBAA2B,CAAC,CAAC,CAAC,SAAkB;aACtE,CAAC;YACF,IAAI,UAAU,IAAI,MAAM,EAAE,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC5E,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,gFAAgF;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,qBAAqB,CAAC,2BAA2B,EAAE;gBACvD,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QAC9D,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"relate.js","sourceRoot":"","sources":["../../src/commands/relate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAY,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAuB,MAAM,yBAAyB,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AA+BtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ;YACR,QAAQ,EAAE,wEAAwE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,2CAA2C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,yFAAyF;IACzF,MAAM,yBAAyB,EAAE,CAAC;IAElC,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,OAAO,GAA4B;gBACvC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACzB,CAAC;YAmBD,wFAAwF;YACxF,wFAAwF;YACxF,sFAAsF;YACtF,6CAA6C;YAC7C,IAAI,MAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,GAAG,OAAO,CAAC,MAAM;oBACrB,CAAC,CAAC,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAyB;oBAC9K,CAAC,CAAC,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE,OAAO,CAAyB,CAAC;YACvJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kFAAkF;gBAClF,kFAAkF;gBAClF,sFAAsF;gBACtF,wFAAwF;gBACxF,sFAAsF;gBACtF,uFAAuF;gBACvF,yFAAyF;gBACzF,qFAAqF;gBACrF,iCAAiC;gBACjC,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACpD,MAAM,MAAM,GAAG,GAAe,CAAC;oBAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,IAAI,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;oBACnH,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC5C,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,kDAAkD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBAC5G,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;oBACtG,CAAC;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,sFAAsF;YACtF,yFAAyF;YACzF,wFAAwF;YACxF,qFAAqF;YACrF,gDAAgD;YAChD,MAAM,YAAY,GAAG,MAAmI,CAAC;YACzJ,IAAI,YAAY,CAAC,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;gBACrC,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC;gBACrD,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,YAAY,MAAM,OAAO,IAAI,eAAe,EAAE;oBACjF,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB;oBAC5E,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;oBAClD,QAAQ,EAAE,OAAO,CAAC,cAAc,IAAI,yDAAyD;iBAC9F,CAAC,CAAC;YACL,CAAC;YAED,mFAAmF;YACnF,sFAAsF;YACtF,uFAAuF;YACvF,kEAAkE;YAClE,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC;gBAChD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;oBAC5D,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,YAAY,IAAI,IAAI,2CAA2C,CAAC,CAAC;oBAC3F,OAAO,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;oBACtH,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;oBAC1C,KAAK,MAAM,GAAG,IAAI,IAAI;wBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;oBACvE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAkB,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;gBACtF,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,YAAY,IAAI,IAAI,2CAA2C,CAAC,CAAC;gBAC3F,OAAO,CAAC,IAAI,CAAC,sCAAsC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,uFAAuF;gBACvF,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;gBACxF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAA2B,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YACpG,CAAC;YAED,wFAAwF;YACxF,sFAAsF;YACtF,yFAAyF;YACzF,2EAA2E;YAC3E,kDAAkD;YAClD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAkB;oBAC9C,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;oBAC9F,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc;oBACtE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS;oBAC7E,8EAA8E;oBAC9E,oBAAoB,EAAE,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;iBAC/E,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,KAAK,kBAAkB,CAAC;YACzD,MAAM,MAAM,GAAiB;gBAC3B,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,kBAA2B,CAAC,CAAC,CAAC,SAAkB;aACtE,CAAC;YACF,IAAI,UAAU,IAAI,MAAM,EAAE,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC5E,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;YAC7E,8FAA8F;YAC9F,IAAI,MAAM,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC9F,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ;YACR,QAAQ,EAAE,wEAAwE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE;YAC5C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,yFAAyF;IACzF,MAAM,yBAAyB,EAAE,CAAC;IAElC,MAAM,aAAa,CAAe;QAChC,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,qBAAqB,CAAwD,2BAA2B,EAAE;gBAC9G,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI;aACL,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QAC9D,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/restore.d.ts

@@ -0,0 +1,2 @@
+export declare function runRestore(entryIdArg: string): Promise<void>;
+//# sourceMappingURL=restore.d.ts.map

package/dist/commands/restore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.d.ts","sourceRoot":"","sources":["../../src/commands/restore.ts"],"names":[],"mappings":"AAoBA,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsElE"}

package/dist/commands/restore.js

@@ -0,0 +1,83 @@
+/**
+ * pb restore <entry-id> — restore an archived Chain entry to draft.
+ *
+ * WP-514 review round 2 (P1): the ONLY production path to restoreArchivedEntry — a brand-new,
+ * always-authority-gated capability (VALID_ENTRY_STATUS_TRANSITIONS stays closed for archived,
+ * lib/guards.ts:146; there is no legacy fallback). Thin client mirroring `pb update`'s
+ * session/refusal handling — the server owns validation (BR-104).
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCallWithSession } from '../lib/client.js';
+import { readSession } from '../lib/session.js';
+import { isJsonMode } from '../lib/runner.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { emitEffectiveTenantNotice } from '../lib/workspaceNotice.js';
+export async function runRestore(entryIdArg) {
+    const config = await getConfigOrGuide(() => runRestore(entryIdArg));
+    if (!config)
+        return;
+    const json = isJsonMode();
+    const session = readSession();
+    if (!session) {
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
+        });
+    }
+    const entryId = entryIdArg.trim();
+    if (!entryId) {
+        throw new CLIError('Entry ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb restore <entry-id>',
+        });
+    }
+    await emitEffectiveTenantNotice();
+    if (!json)
+        process.stdout.write(`Restoring ${entryId} to draft...\n`);
+    let result;
+    try {
+        result = await kernelCallWithSession('chain.restoreArchivedEntry', {
+            entryId, changedBy: `agent:${session.sessionId}`,
+        });
+    }
+    catch (err) {
+        const mcpErr = err;
+        if (err instanceof Error && err.name === 'McpError') {
+            // Sweep finding #5: preserve an authority refusal as an authority refusal — mirrors
+            // runUpdate (update.ts). Flattening every gateway error to VALIDATION_FAILED told a
+            // machine caller to "fix input" even for a deny-by-default AUTH_DENIED (e.g. a
+            // delegated credential), instead of routing the work to an authorized principal.
+            const serverCode = String(mcpErr.code);
+            if (serverCode === 'AUTHZ_PERMISSION_DENIED' || serverCode === ErrorCode.AUTH_DENIED) {
+                throw new CLIError(mcpErr.message, {
+                    code: ErrorCode.AUTH_DENIED,
+                    category: 'auth',
+                    guidance: mcpErr.guidance,
+                });
+            }
+            throw new CLIError(mcpErr.message, { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
+        }
+        throw err;
+    }
+    if (result.outcome === 'refused') {
+        const { refusal } = result;
+        if (json) {
+            process.stdout.write(JSON.stringify({ outcome: 'refused', refusal }) + '\n');
+        }
+        const authorityRefusal = refusal.code !== 'not_archived' && refusal.code !== 'still_superseded';
+        throw new CLIError(refusal.reason ?? `Restoring ${entryId} was refused.`, {
+            code: authorityRefusal ? ErrorCode.AUTH_DENIED : ErrorCode.VALIDATION_FAILED,
+            category: authorityRefusal ? 'auth' : 'validation',
+            guidance: refusal.requiredAction ?? 'Route this change to the accountable role or Team Lead.',
+        });
+    }
+    if (json) {
+        process.stdout.write(JSON.stringify({ outcome: 'restored', entryId }) + '\n');
+    }
+    else {
+        process.stdout.write(`${entryId} restored to draft.\n`);
+    }
+}
+//# sourceMappingURL=restore.js.map

package/dist/commands/restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.js","sourceRoot":"","sources":["../../src/commands/restore.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAMtE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAE1B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACxC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,wEAAwE;SAClF,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE;YAC3C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,8BAA8B;SACxC,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,yBAAyB,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,gBAAgB,CAAC,CAAC;IAEtE,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,qBAAqB,CAAgB,4BAA4B,EAAE;YACjF,OAAO,EAAE,SAAS,EAAE,SAAS,OAAO,CAAC,SAAS,EAAE;SAChD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,GAAe,CAAC;QAC/B,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrD,oFAAoF;YACpF,oFAAoF;YACpF,+EAA+E;YAC/E,iFAAiF;YACjF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,UAAU,KAAK,yBAAyB,IAAI,UAAU,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;gBACtF,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;oBAClC,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBACzB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,GAAG,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,IAAI,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,CAAC;QAChG,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,OAAO,eAAe,EAAE;YACzE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB;YAC5E,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;YAClD,QAAQ,EAAE,OAAO,CAAC,cAAc,IAAI,yDAAyD;SAC7F,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,uBAAuB,CAAC,CAAC;IACzD,CAAC;AACF,CAAC"}

package/dist/commands/rework.d.ts

@@ -0,0 +1,24 @@
+/**
+ * pb rework report — report an observed rework signal (WP-487 Slice 1 / FEAT-1373).
+ *
+ * Fills the M4 rework-meter slot reserved by `convex/scoreboard/aggregates.ts:1-15,597`. This is
+ * the SOLE ingestion path this quarter (founder-decided, WP-C spec §3/§4 Slice 1 Pass-2 review) —
+ * an agent-native checkpoint the CLI reports explicitly, not a CI/git-webhook adapter (excluded,
+ * spec §6). Requires an active session (mirrors `pb capture`, DEC-9/BR-8): the M4 join key needs
+ * a stable `conversationId`, which only resolves inside a tracked session.
+ */
+export interface ReworkReportOptions {
+    entryId: string;
+    classification: string;
+    reportedVia?: string;
+    attributable?: boolean;
+    task?: string;
+    /** Codex P2 fix (round 2, post-merge review): explicit conversation override, mirroring
+     *  `pb session start --conversation <id>`. Without this, `pb rework report` has no way to
+     *  find a session started with `--conversation <id>` when the shell never also set
+     *  PB_CONVERSATION_ID — readSession() with no override falls back to the legacy marker path,
+     *  not the conversation-scoped one `session start --conversation` wrote to. */
+    conversation?: string;
+}
+export declare function runReworkReport(options: ReworkReportOptions): Promise<void>;
+//# sourceMappingURL=rework.d.ts.map

package/dist/commands/rework.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework.d.ts","sourceRoot":"","sources":["../../src/commands/rework.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;mFAI+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AASD,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsFjF"}