@productbrain/cli 0.1.0-beta.98 → 0.1.0-beta.9800

package/dist/commands/entryAccept.js

@@ -0,0 +1,296 @@
+/**
+ * pb entry accept <entry-id> (formerly pb promote, DEC-1578) — accept a draft entry to active
+ * (commit to SSOT).
+ * Calls chain.commitEntry. Requires active session (DEC-9, BR-8).
+ * Thin client: governance checks live in Convex (BR-104).
+ */
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCallWithSession, McpError, isPerEntryAuthorizationRefusal } from '../lib/client.js';
+import { readSession } from '../lib/session.js';
+import { runCliCommand, isJsonMode } from '../lib/runner.js';
+import { formatEntryAcceptReceipt } from '../formatters/entryAccept.js';
+import { copy } from '../lib/style.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { emitEffectiveTenantNotice } from '../lib/workspaceNotice.js';
+import { readEntryBody } from '../lib/proseBody.js';
+import { settleVerdictBeforeAccept, judgedAcceptedLine } from '../lib/judgeWait.js'; // TASK-612: GENERATED copy of kernel/quality/judgeWait.ts
+/** Strip any fields `chain.commitEntry`'s `conflicts` arg validator doesn't declare. */
+function toConflictEvidence(conflicts) {
+    return conflicts.map((c) => ({
+        chainEntryId: c.chainEntryId,
+        chainEntryName: c.chainEntryName,
+        ...(c.chainEntryDescription ? { chainEntryDescription: c.chainEntryDescription } : {}),
+        type: c.type,
+        confidence: c.confidence,
+        explanation: c.explanation,
+    }));
+}
+/**
+ * Error categories that signal a GLOBAL precondition (not entry-specific): they fail
+ * every id in a batch identically, so the batch path rethrows them immediately rather
+ * than collecting them as per-entry failures. `validation` (not-found, contradiction)
+ * is entry-specific and stays collectable so one bad id never aborts the batch.
+ * `session` is global too — a closed/expired/wrong-workspace session (SESSION_REQUIRED,
+ * which McpError maps to category `session`) the server raises mid-batch dooms every
+ * remaining id, so it must surface the actionable session error, not a per-entry relabel.
+ */
+const GLOBAL_PRECONDITION_CATEGORIES = new Set([
+    'auth',
+    'network',
+    'config',
+    'session',
+]);
+/**
+ * Promote a single entry to active (commit to SSOT). Throws on any failure —
+ * the caller decides whether to propagate (single-id) or collect (batch).
+ */
+async function acceptOne(entryId, message, session, coherency, 
+// When true (single-id path only), a coherency refusal emits its machine-readable
+// payload to stdout before throwing. The batch path leaves this false so its single
+// JSON results array is never polluted by a mid-stream refusal line.
+surfaceRefusalJson = false) {
+    const entry = await kernelCallWithSession('chain.getEntry', { entryId });
+    if (!entry) {
+        throw new CLIError(`Entry ${entryId} not found.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Check the entry ID and try again. Use `pb search` to find entries.',
+        });
+    }
+    // WP-770 B2b: readEntryBody prefers data.body (packages/cli's generated copy of
+    // kernel/entries/proseBody.ts — it cannot import convex/ or mcp-server/ directly). Below that,
+    // TEN-3989 order (same as orientGovernance.ts / verifyAnchor.ts): description, then why, then
+    // rationale — still the live WHY source for business-rules/standards/principles/features,
+    // whose entries the why_v1 fold never covered (TASK-445 is decisions-only).
+    const description = readEntryBody(entry.data, 'description') ??
+        readEntryBody(entry.data, 'why') ??
+        readEntryBody(entry.data, 'rationale') ??
+        '';
+    // WP-485 Slice 2b (R2, FEAT-1370): DISCOVERY only — the blocking DECISION moved server-side
+    // into commitEntry's evaluate()/assessContradiction gate (Slice 2a). This client no longer
+    // compares against a local threshold or throws; it hands the candidates to the server as
+    // `conflicts` evidence and renders whatever `contradictionAdvisory` comes back. Mutations
+    // can't call the LLM-backed detector themselves (evaluate.ts: "contradiction — CALLER-FED,
+    // always"), so the fetch stays — only the enforcement it used to gate locally is gone.
+    // WP-488 Slice 3 (FEAT-1377) — DEVIATION, documented: this call site is NOT converted to
+    // kernel-client's typed derivation. Verified (not assumed) that both viable mechanisms
+    // fail for packages/cli specifically: (a) `GatewayRouteReturnByName<'chain.detectSemantic
+    // Conflicts'>` pulls in kernel-client's full index.ts (211 routes.generated.ts imports +
+    // convex/lib + kernel/errors.ts), which fails packages/cli's `rootDir: "src"` (TS6059 for
+    // every file outside it — real build is plain `tsc`, unlike mcp-server's tsup, so rootDir
+    // can't be dropped the way it was there); (b) importing the ONE needed export directly
+    // (bypassing kernel-client) ALSO fails — convex/intelligence/conflictDetection.ts's OWN
+    // internal relative imports lack the explicit `.js` extensions packages/cli's
+    // `moduleResolution: "NodeNext"` requires (convex/tsconfig.json uses lenient "Bundler"
+    // resolution), cascading into ~40 further implicit-any errors. Both reproduced and
+    // reverted, not hypothesized. mcp-server's conflict-preflight.ts (same route, kernelQuery
+    // not kernelCallWithSession) DOES convert cleanly — see that file. Fixing this for CLI
+    // would need either a real project-references split or explicit extensions added
+    // throughout convex/ — both well beyond "pure typing lift, no behavior change" scope.
+    let conflicts = [];
+    try {
+        conflicts = (await kernelCallWithSession('chain.detectSemanticConflicts', {
+            name: entry.name,
+            description,
+            collectionHint: entry.collectionSlug ?? entry.collection?.slug ?? entry.collection?.name,
+        })) ?? [];
+    }
+    catch {
+        process.stderr.write('Warning: conflict detection unavailable — proceeding without contradiction check.\n');
+    }
+    const args = {
+        entryId,
+        author: `agent:${session.sessionId}`,
+        sessionId: session.sessionId,
+    };
+    if (message) {
+        args.commitMessage = message;
+    }
+    if (conflicts.length > 0) {
+        args.conflicts = toConflictEvidence(conflicts);
+    }
+    // WP-465 slice ⑤: coherency controls — relayed verbatim; the gate validates.
+    if (coherency?.overrideReason) {
+        args.steeringOverrideReason = coherency.overrideReason;
+    }
+    if (coherency?.acknowledge) {
+        args.coherencyAcknowledgement = {
+            response: coherency.acknowledge,
+            ...(coherency.ackEntry ? { entryId: coherency.ackEntry } : {}),
+            ...(coherency.ackReason ? { reason: coherency.ackReason } : {}),
+        };
+    }
+    // WP-B (attestation-model spec §4.3): the server auto-verifies an unverified
+    // agent entry as part of the promote itself (verifiedContext 'promote-gate'),
+    // so the old client-side verify-then-retry on a QUALITY_GATE_BLOCKED
+    // "verification" error-string match is dead code — deleted, not kept as a
+    // fallback (an old server's block still surfaces as a legible error).
+    // DEC-1935; TASK-612; WP-801: the kernel decides whether this accept needs a fresh judgment or
+    // reuses the verdict already settled or in flight (evaluateHeuristicAndScheduleCore, context
+    // 'commit'); when a judge run is in flight the accept waits for it, then commits once. The gate
+    // inside chain.commitEntry stays the only decider of accept or refuse.
+    const judgeWait = await settleVerdictBeforeAccept(() => kernelCallWithSession('quality.evaluateHeuristicAndSchedule', { entryId, context: 'commit' }), () => kernelCallWithSession('quality.getLatestVerdictForEntry', { entryId }));
+    let result;
+    try {
+        // `chain.commitEntry`'s real success branch carries several more fields (contract,
+        // etc.) than this file's `CommitEntryResult` declares — a deliberate narrower subset
+        // (only the fields formatEntryAcceptReceipt actually reads), not a structural mismatch to
+        // chase field-for-field (PR #398, Lane C S3c annotation pass).
+        result = (await kernelCallWithSession('chain.commitEntry', args));
+    }
+    catch (err) {
+        // WP-485 Slice 2b (FEAT-1370): DEAD-BUT-TYPED. `{ graduated: false }` (DEC-1321) means
+        // the contradiction gate's disposition can only be allow/advisory today — this branch
+        // cannot fire from the current server. Typed so a future policy graduation to block/
+        // acknowledge/queue needs no CLI retrofit; unit-tested with a forced double (see
+        // entryAccept.test.ts). Note `conflictDetails` on the server's thrown ConvexError does NOT
+        // survive the HTTP gateway round-trip (only a fixed field set does — convex/lib/errors.ts
+        // getConvexErrorData), so only `code`/`message` are reliable here.
+        if (err instanceof McpError && err.code === ErrorCode.CONTRADICTION_BLOCKED) {
+            throw new CLIError(err.message, {
+                code: ErrorCode.CONTRADICTION_BLOCKED,
+                category: 'validation',
+                guidance: 'Resolve the contradiction before committing. Use `pb get` to inspect the conflicting entry.',
+            });
+        }
+        throw err;
+    }
+    // WP-465 slice ⑤ (Option B): the server RETURNS a structured refusal instead of
+    // throwing — surface it as an actionable failure, never as success.
+    const maybeRefused = result;
+    if (maybeRefused.status === 'coherency_refused') {
+        const refusal = maybeRefused.refusal;
+        // Mirror `pb update --json` (update.ts): emit the machine-readable refusal (subject +
+        // routes) to stdout BEFORE throwing so a --json agent can populate the retry controls
+        // (--acknowledge / --ack-entry / --override-reason) instead of scraping the generic
+        // error off stderr. Human (non-json) output is unchanged — the throw below carries it.
+        if (surfaceRefusalJson && refusal && isJsonMode()) {
+            process.stdout.write(JSON.stringify({ outcome: 'refused', refusal }) + '\n');
+        }
+        throw new CLIError(refusal?.reason ?? `Commit of ${entryId} was refused by the coherency gate.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Link the entry to the strategic spine and retry, or respond with --acknowledge <linked|accepted-fix|diverged> (--ack-entry / --ack-reason), or supply --override-reason "<why this stands alone>" (at least 12 characters).',
+        });
+    }
+    const name = ('name' in result && typeof result.name === 'string') ? result.name : entryId;
+    return { entryId, name, result, judged: judgedAcceptedLine(judgeWait) };
+}
+export async function runEntryAccept(options) {
+    const config = await getConfigOrGuide(() => runEntryAccept(options));
+    if (!config)
+        return;
+    // Require active session (DEC-9, BR-8)
+    const session = readSession();
+    if (!session) {
+        throw new CLIError(copy.noSession, {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: copy.sessionRequired,
+        });
+    }
+    const ids = (options.entryIds ?? (options.entryId !== undefined ? [options.entryId] : []))
+        .map((id) => id.trim())
+        .filter(Boolean);
+    if (ids.length === 0) {
+        throw new CLIError('Entry ID is required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            // WP-640 SWEEP (#653 review): `pb promote` is retired (DEC-1578) — this shared runEntryAccept
+            // implementation is now reachable ONLY via `pb entry accept` (registerEntryCommands.ts).
+            guidance: 'Usage: pb entry accept <entry-id> [<entry-id>...]',
+        });
+    }
+    // WP-1: name the target workspace before the write (stderr, every output mode — WP-721). Covers both
+    // the single and batch paths below.
+    await emitEffectiveTenantNotice();
+    // Single-entry path: preserve exact error propagation + JSON behavior (back-compat).
+    if (ids.length === 1) {
+        await runCliCommand({
+            fn: () => acceptOne(ids[0], options.message, session, options, true),
+            formatPretty: (data) => formatEntryAcceptReceipt({
+                entryId: data.entryId,
+                name: data.name,
+                commitMessage: options.message,
+                judged: data.judged,
+                result: data.result,
+            }),
+        });
+        return;
+    }
+    // Batch path (INS-1813): attempt each independently — a single failure must NOT
+    // abort the rest of the batch.
+    const results = [];
+    for (const id of ids) {
+        try {
+            const data = await acceptOne(id, options.message, session, options);
+            results.push({ entryId: id, ok: true, data });
+        }
+        catch (err) {
+            // A global precondition — expired/invalid key (auth), network down, bad config —
+            // fails every remaining id identically. Rethrow it untouched so the batch fails
+            // fast and the caller sees the real code/category/guidance, instead of retrying
+            // each id and masking it as a per-entry VALIDATION_FAILED (the single-id path
+            // preserves these errors; the batch path must too). Entry-specific failures
+            // (validation: not-found, contradiction) are collected so one bad id never
+            // aborts the rest of the batch (INS-1813).
+            //
+            // WP-753 O5a fix round 2 (MAJOR): category 'auth' does NOT mean "fails every id
+            // identically" — an organisational-authority refusal (entry B's ownership) is per-entry,
+            // exactly like a validation failure, unlike a real credential/session failure. Exclude it
+            // from the global-precondition abort so INS-1813 stays true for this category too.
+            if (err instanceof CLIError && GLOBAL_PRECONDITION_CATEGORIES.has(err.category) && !isPerEntryAuthorizationRefusal(err.code)) {
+                throw err;
+            }
+            results.push({ entryId: id, ok: false, error: err instanceof Error ? err.message : String(err) });
+        }
+    }
+    const failed = results.filter((r) => !r.ok);
+    if (isJsonMode()) {
+        process.stdout.write(JSON.stringify(results.map((r) => {
+            if (!r.ok)
+                return { entryId: r.entryId, ok: false, error: r.error };
+            // WP-485 Slice 2b round 2 (Codex P1, FEAT-1370): the single-id JSON path already
+            // returns the full `result` object (contradictionAdvisory included); batch JSON used
+            // to reduce every success to `{entryId, ok:true}`, silently discarding the server's
+            // advisory — a detected contradiction could commit with zero trace in --json mode.
+            const advisory = r.data && 'contradictionAdvisory' in r.data.result
+                ? r.data.result.contradictionAdvisory
+                : undefined;
+            // WP-582 B1 (FEAT-1403): same precedent bug applies to the direction-trace advisory —
+            // the batch-JSON path must not silently drop it either.
+            const publishAdvisories = r.data && 'publishAdvisories' in r.data.result
+                ? r.data.result.publishAdvisories
+                : undefined;
+            return {
+                entryId: r.entryId,
+                ok: true,
+                ...(advisory ? { contradictionAdvisory: advisory } : {}),
+                ...(publishAdvisories && publishAdvisories.length > 0 ? { publishAdvisories } : {}),
+            };
+        })) + '\n');
+    }
+    else {
+        for (const r of results) {
+            if (r.ok && r.data) {
+                process.stdout.write(formatEntryAcceptReceipt({ entryId: r.data.entryId, name: r.data.name, commitMessage: options.message, judged: r.data.judged, result: r.data.result }) + '\n');
+            }
+            else {
+                process.stdout.write(`Failed ${r.entryId}: ${r.error}\n`);
+            }
+        }
+        process.stdout.write(`\nBatch accept: ${results.length - failed.length}/${results.length} accepted` +
+            (failed.length ? `, ${failed.length} failed (${failed.map((f) => f.entryId).join(', ')})` : '') +
+            '.\n');
+    }
+    if (failed.length > 0) {
+        throw new CLIError(`${failed.length} of ${results.length} acceptance(s) failed: ${failed.map((f) => f.entryId).join(', ')}.`, {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            // WP-640 SWEEP (#653 review): was `pb promote <entry-id>` — that command is retired
+            // (DEC-1578) and now hard-errors, breaking this exact recovery instruction.
+            guidance: 'Inspect the failures above, then re-run `pb entry accept <entry-id>` for each that failed.',
+        });
+    }
+}
+//# sourceMappingURL=entryAccept.js.map

package/dist/commands/entryAccept.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryAccept.js","sourceRoot":"","sources":["../../src/commands/entryAccept.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAA0B,MAAM,8BAA8B,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAsB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC,CAAC,0DAA0D;AAiE/I,wFAAwF;AACxF,SAAS,kBAAkB,CAAC,SAA6B;IACvD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,8BAA8B,GAA+B,IAAI,GAAG,CAAC;IACzE,MAAM;IACN,SAAS;IACT,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,UAAU,SAAS,CACtB,OAAe,EACf,OAA2B,EAC3B,OAA8B,EAC9B,SAAiG;AACjG,kFAAkF;AAClF,oFAAoF;AACpF,qEAAqE;AACrE,kBAAkB,GAAG,KAAK;IAE1B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAA0B,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,SAAS,OAAO,aAAa,EAAE;YAChD,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,oEAAoE;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,+FAA+F;IAC/F,8FAA8F;IAC9F,0FAA0F;IAC1F,4EAA4E;IAC5E,MAAM,WAAW,GACf,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC;QACxC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;QAChC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC;QACtC,EAAE,CAAC;IACL,4FAA4F;IAC5F,2FAA2F;IAC3F,yFAAyF;IACzF,0FAA0F;IAC1F,2FAA2F;IAC3F,uFAAuF;IACvF,yFAAyF;IACzF,uFAAuF;IACvF,0FAA0F;IAC1F,yFAAyF;IACzF,0FAA0F;IAC1F,0FAA0F;IAC1F,uFAAuF;IACvF,wFAAwF;IACxF,8EAA8E;IAC9E,uFAAuF;IACvF,mFAAmF;IACnF,0FAA0F;IAC1F,uFAAuF;IACvF,iFAAiF;IACjF,sFAAsF;IACtF,IAAI,SAAS,GAAuB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,qBAAqB,CAA4D,+BAA+B,EAAE;YACnI,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW;YACX,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI;SACzF,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,IAAI,GAA4B;QACpC,OAAO;QACP,MAAM,EAAE,SAAS,OAAO,CAAC,SAAS,EAAE;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;IAC/B,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,6EAA6E;IAC7E,IAAI,SAAS,EAAE,cAAc,EAAE,CAAC;QAC9B,IAAI,CAAC,sBAAsB,GAAG,SAAS,CAAC,cAAc,CAAC;IACzD,CAAC;IACD,IAAI,SAAS,EAAE,WAAW,EAAE,CAAC;QAC3B,IAAI,CAAC,wBAAwB,GAAG;YAC9B,QAAQ,EAAE,SAAS,CAAC,WAAW;YAC/B,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,qEAAqE;IACrE,0EAA0E;IAC1E,sEAAsE;IACtE,+FAA+F;IAC/F,6FAA6F;IAC7F,gGAAgG;IAChG,uEAAuE;IACvE,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAC/C,GAAG,EAAE,CAAC,qBAAqB,CACzB,sCAAsC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CACvE,EACD,GAAG,EAAE,CAAC,qBAAqB,CACzB,kCAAkC,EAAE,EAAE,OAAO,EAAE,CAChD,CACF,CAAC;IAEF,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,mFAAmF;QACnF,qFAAqF;QACrF,0FAA0F;QAC1F,+DAA+D;QAC/D,MAAM,GAAG,CAAC,MAAM,qBAAqB,CAAgD,mBAAmB,EAAE,IAAI,CAAC,CAAsB,CAAC;IACxI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uFAAuF;QACvF,sFAAsF;QACtF,qFAAqF;QACrF,iFAAiF;QACjF,2FAA2F;QAC3F,0FAA0F;QAC1F,mEAAmE;QACnE,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,qBAAqB,EAAE,CAAC;YAC5E,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE;gBAC9B,IAAI,EAAE,SAAS,CAAC,qBAAqB;gBACrC,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,6FAA6F;aACxG,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,gFAAgF;IAChF,oEAAoE;IACpE,MAAM,YAAY,GAAG,MAA2E,CAAC;IACjG,IAAI,YAAY,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;QACrC,sFAAsF;QACtF,sFAAsF;QACtF,oFAAoF;QACpF,uFAAuF;QACvF,IAAI,kBAAkB,IAAI,OAAO,IAAI,UAAU,EAAE,EAAE,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,OAAO,EAAE,MAAM,IAAI,aAAa,OAAO,qCAAqC,EAC5E;YACE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EACN,6NAA6N;SAChO,CACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA2B;IAC9D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,uCAAuC;IACvC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;YACjC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,IAAI,CAAC,eAAe;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACvF,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE;YAC1C,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,8FAA8F;YAC9F,yFAAyF;YACzF,QAAQ,EAAE,mDAAmD;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,qGAAqG;IACrG,oCAAoC;IACpC,MAAM,yBAAyB,EAAE,CAAC;IAElC,qFAAqF;IACrF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,aAAa,CAAoB;YACrC,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;YACpE,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,OAAO,CAAC,OAAO;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;SACH,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,gFAAgF;IAChF,+BAA+B;IAC/B,MAAM,OAAO,GAAsF,EAAE,CAAC;IACtG,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iFAAiF;YACjF,gFAAgF;YAChF,gFAAgF;YAChF,8EAA8E;YAC9E,4EAA4E;YAC5E,2EAA2E;YAC3E,2CAA2C;YAC3C,EAAE;YACF,gFAAgF;YAChF,yFAAyF;YACzF,0FAA0F;YAC1F,mFAAmF;YACnF,IAAI,GAAG,YAAY,QAAQ,IAAI,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7H,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE5C,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/B,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YACpE,iFAAiF;YACjF,qFAAqF;YACrF,oFAAoF;YACpF,mFAAmF;YACnF,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,IAAI,uBAAuB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM;gBACjE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB;gBACrC,CAAC,CAAC,SAAS,CAAC;YACd,sFAAsF;YACtF,wDAAwD;YACxD,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,IAAI,mBAAmB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM;gBACtE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBACjC,CAAC,CAAC,SAAS,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,EAAE,EAAE,IAAI;gBACR,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC;QACJ,CAAC,CAAC,CAAC,GAAG,IAAI,CACX,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAC9J,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mBAAmB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,WAAW;YAC5E,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,KAAK,CACR,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,QAAQ,CAChB,GAAG,MAAM,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,0BAA0B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACzG;YACE,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,oFAAoF;YACpF,4EAA4E;YAC5E,QAAQ,EAAE,4FAA4F;SACvG,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/commands/entryDiscardResolve.d.ts

@@ -0,0 +1,9 @@
+interface EntryCategoryVerbOptions {
+    entryId: string;
+    reason?: string;
+    note?: string;
+}
+export declare const runEntryDiscard: (options: EntryCategoryVerbOptions) => Promise<void>;
+export declare const runEntryResolve: (options: EntryCategoryVerbOptions) => Promise<void>;
+export {};
+//# sourceMappingURL=entryDiscardResolve.d.ts.map

package/dist/commands/entryDiscardResolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryDiscardResolve.d.ts","sourceRoot":"","sources":["../../src/commands/entryDiscardResolve.ts"],"names":[],"mappings":"AAgBA,UAAU,wBAAwB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAYD,eAAO,MAAM,eAAe,GAAI,SAAS,wBAAwB,KAAG,OAAO,CAAC,IAAI,CAAwC,CAAC;AACzH,eAAO,MAAM,eAAe,GAAI,SAAS,wBAAwB,KAAG,OAAO,CAAC,IAAI,CAAwC,CAAC"}

package/dist/commands/entryDiscardResolve.js

@@ -0,0 +1,27 @@
+/**
+ * pb entry discard <id> [--reason <text>]
+ * pb entry resolve <id> [--reason <text>]
+ * (TASK-400, WP-779, DEC-1814) — the two category verbs that replace `pb entry archive`.
+ *
+ * The VERB decides the category; there is no reason enum. Both relay to the ONE status door
+ * `pb update --status archived` uses (chain.updateEntry via runUpdate), sending an `archiveIntent`
+ * ('discard' | 'resolve'), never a status word. The server owns the rule
+ * (convex/lib/archiveWorkflowStatus.ts): discard -> the collection's Discarded word for a draft or
+ * current entry; resolve -> its Past archive word for a current entry only; either verb on an entry
+ * already Past or Discarded, and resolve on a draft, are refused in the same transaction as the
+ * write, so there is no read-then-write race and the rule works on collections with no statusList.
+ * `--reason` is FREE TEXT folded into the change note the archive's history event records.
+ */
+import { runUpdate } from './update.js';
+async function runCategoryVerb(intent, options) {
+    const note = [options.reason, options.note].filter((part) => typeof part === 'string' && part.length > 0).join(' — ');
+    await runUpdate({
+        entryId: options.entryId.trim(),
+        status: 'archived',
+        archiveIntent: intent,
+        note: note.length > 0 ? note : undefined,
+    });
+}
+export const runEntryDiscard = (options) => runCategoryVerb('discard', options);
+export const runEntryResolve = (options) => runCategoryVerb('resolve', options);
+//# sourceMappingURL=entryDiscardResolve.js.map

package/dist/commands/entryDiscardResolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryDiscardResolve.js","sourceRoot":"","sources":["../../src/commands/entryDiscardResolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAQxC,KAAK,UAAU,eAAe,CAAC,MAA6B,EAAE,OAAiC;IAC7F,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtI,MAAM,SAAS,CAAC;QACd,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;QAC/B,MAAM,EAAE,UAAU;QAClB,aAAa,EAAE,MAAM;QACrB,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KACzC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAiC,EAAiB,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACzH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAiC,EAAiB,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC"}

package/dist/commands/entryOwn.d.ts

@@ -0,0 +1,5 @@
+export declare function runEntryOwn(entry: string, options: {
+    team: string;
+    role: string;
+}): Promise<void>;
+//# sourceMappingURL=entryOwn.d.ts.map

package/dist/commands/entryOwn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryOwn.d.ts","sourceRoot":"","sources":["../../src/commands/entryOwn.ts"],"names":[],"mappings":"AA4BA,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvG"}

package/dist/commands/entryOwn.js

@@ -0,0 +1,17 @@
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCallWithSession } from '../lib/client.js';
+import { runOrganisationWrite } from './organisationWrite.js';
+// WP-753 O5a fix round 2 (item e): no outcome-check here — runOrganisationWrite only ever calls
+// this on the 'applied' branch (throws on 'refused' first); `result` is already narrowed to it.
+function formatEntryOwnApplied(result) {
+    return `${result.created ? 'Assigned' : 'Changed'} ${String(result.entry)} ownership to ${String(result.team)} / ${String(result.role)}.`;
+}
+export async function runEntryOwn(entry, options) {
+    const config = await getConfigOrGuide(() => runEntryOwn(entry, options));
+    if (!config)
+        return;
+    await runOrganisationWrite((context) => kernelCallWithSession('organisation.setOwnership', {
+        entryRef: entry, teamRef: options.team, roleRef: options.role, sessionId: context.sessionId,
+    }), formatEntryOwnApplied);
+}
+//# sourceMappingURL=entryOwn.js.map

package/dist/commands/entryOwn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryOwn.js","sourceRoot":"","sources":["../../src/commands/entryOwn.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAI9D,gGAAgG;AAChG,gGAAgG;AAChG,SAAS,qBAAqB,CAAC,MAAuD;IACrF,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;AAC3I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,OAAuC;IACvF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,oBAAoB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAiB,2BAA2B,EAAE;QAC1G,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;KAC3F,CAAC,EAAE,qBAAqB,CAAC,CAAC;AAC5B,CAAC"}

package/dist/commands/entryPreflight.d.ts

@@ -0,0 +1,8 @@
+export interface EntryPreflightOptions {
+    collection: string;
+    canonicalKey?: string;
+    link?: string[];
+    linkType?: string;
+}
+export declare function runEntryPreflight(options: EntryPreflightOptions): Promise<void>;
+//# sourceMappingURL=entryPreflight.d.ts.map

package/dist/commands/entryPreflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryPreflight.d.ts","sourceRoot":"","sources":["../../src/commands/entryPreflight.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,qBAAqB;IAAG,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AACxH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBrF"}

package/dist/commands/entryPreflight.js

@@ -0,0 +1,48 @@
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCall } from '../lib/client.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { runCliCommand } from '../lib/runner.js';
+/**
+ * A reader must not have to guess whether a line stops acceptance, merely failed to complete, or
+ * is deferred to the write door. The MCP connector (packages/mcp-server/src/lib/
+ * createEntryPreviewResult.ts `formatPreflightCheck`) and the Page's EntryPreflight surface
+ * (`checkLabel`) hold their own copy of this rule; this package may not import from either. The
+ * three copies are NOT byte-identical (the Page's has a redundant extra branch) — what must hold
+ * is that all three map every (status, blocking) pair to the same string. That cross-surface
+ * invariant is enforced by packages/mcp-server/src/__tests__/create-entry-preview-result.test.ts,
+ * which reads the other two copies off disk.
+ */
+function formatPreflightCheck(check) {
+    if (check.status === 'missing' && check.blocking)
+        return `Blocked: ${check.message}`;
+    if (check.status === 'incomplete')
+        return `Unverified: ${check.message}`;
+    if (check.status === 'not_checked')
+        return `Checked later: ${check.message}`;
+    return check.message;
+}
+export async function runEntryPreflight(options) {
+    const links = options.link?.map((link) => {
+        const separator = link.indexOf(':');
+        const type = (separator < 0 ? options.linkType : link.slice(0, separator))?.trim();
+        const entryId = (separator < 0 ? link : link.slice(separator + 1)).trim();
+        if (!type || !entryId)
+            throw new CLIError('Use --link <type:entry-id>, or pair --link <entry-id> with --link-type <type>.', { code: ErrorCode.VALIDATION_FAILED, category: 'validation' });
+        return { entryId, type };
+    });
+    const config = await getConfigOrGuide(() => runEntryPreflight(options));
+    if (!config)
+        return;
+    await runCliCommand({
+        fn: () => kernelCall('chain.preflightEntry', {
+            collectionSlug: options.collection, canonicalKey: options.canonicalKey,
+            links,
+        }),
+        formatPretty: (value) => {
+            const result = value;
+            return [...result.checks.map(formatPreflightCheck),
+                ...(result.requiredFields.length ? [`Required information: ${result.requiredFields.join(', ')}.`] : []), result.notice].join('\n');
+        },
+    });
+}
+//# sourceMappingURL=entryPreflight.js.map

package/dist/commands/entryPreflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryPreflight.js","sourceRoot":"","sources":["../../src/commands/entryPreflight.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIjD;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,KAAkC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,eAAe,KAAK,CAAC,OAAO,EAAE,CAAC;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,kBAAkB,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7E,OAAO,KAAK,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA8B;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACnF,MAAM,OAAO,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,gFAAgF,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3L,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,aAAa,CAAC;QACnB,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAY,sBAAsB,EAAE;YACvD,cAAc,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;YACtE,KAAK;SACL,CAAC;QACF,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,KAAkB,CAAC;YAClC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBACjD,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,yBAAyB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrI,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/commands/entryTick.d.ts

@@ -0,0 +1,8 @@
+interface EntryTickOptions {
+    entryId: string;
+    itemId: string;
+    undo?: boolean;
+}
+export declare function runEntryTick(options: EntryTickOptions): Promise<void>;
+export {};
+//# sourceMappingURL=entryTick.d.ts.map

package/dist/commands/entryTick.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryTick.d.ts","sourceRoot":"","sources":["../../src/commands/entryTick.ts"],"names":[],"mappings":"AAgBA,UAAU,gBAAgB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC3E"}

package/dist/commands/entryTick.js

@@ -0,0 +1,43 @@
+import { getConfigOrGuide } from '../lib/config.js';
+import { kernelCallWithSession } from '../lib/client.js';
+import { readSession } from '../lib/session.js';
+import { runCliCommand } from '../lib/runner.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+export async function runEntryTick(options) {
+    const config = await getConfigOrGuide(() => runEntryTick(options));
+    if (!config)
+        return;
+    const session = readSession();
+    if (!session) {
+        throw new CLIError('No active session.', {
+            code: ErrorCode.SESSION_REQUIRED,
+            category: 'session',
+            guidance: 'Run `pb session start` first. Write access requires a tracked session.',
+        });
+    }
+    const entryId = options.entryId.trim();
+    const itemId = options.itemId.trim();
+    if (!entryId || !itemId) {
+        throw new CLIError('Entry ID and item ID are required.', {
+            code: ErrorCode.VALIDATION_FAILED,
+            category: 'validation',
+            guidance: 'Usage: pb entry tick <entry-id> <item-id> [--undo]',
+        });
+    }
+    const done = !options.undo;
+    await runCliCommand({
+        fn: async () => {
+            const result = await kernelCallWithSession('chain.tickChecklistItem', {
+                entryId,
+                itemId,
+                done,
+                sessionId: session.sessionId,
+            });
+            return { entryId, itemId, done: result.done, changed: result.changed };
+        },
+        formatPretty: (data) => data.changed
+            ? `${data.entryId}: Done-when item ${data.itemId} ${data.done ? 'ticked' : 'unticked'} (not an edit).`
+            : `${data.entryId}: Done-when item ${data.itemId} was already ${data.done ? 'ticked' : 'unticked'}.`,
+    });
+}
+//# sourceMappingURL=entryTick.js.map

package/dist/commands/entryTick.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entryTick.js","sourceRoot":"","sources":["../../src/commands/entryTick.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAQvD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE;YACvC,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,wEAAwE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,oCAAoC,EAAE;YACvD,IAAI,EAAE,SAAS,CAAC,iBAAiB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,oDAAoD;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,MAAM,aAAa,CAAuE;QACxF,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAsD,yBAAyB,EAAE;gBACzH,OAAO;gBACP,MAAM;gBACN,IAAI;gBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACzE,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO;YAClC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,oBAAoB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,iBAAiB;YACtG,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,oBAAoB,IAAI,CAAC,MAAM,gBAAgB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,GAAG;KACvG,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/feedback.d.ts

@@ -0,0 +1,36 @@
+import { Command } from 'commander';
+export declare function runFeedbackSubmit(message: string, options: {
+    category: string;
+    command?: string;
+}): Promise<void>;
+/**
+ * WP-494 §5 (TEN-2742): the own-workspace read-back — the default verb. Calls
+ * `feedback.listOwn` for EVERY caller (no vendor gate, no triage session): it's a member
+ * query, so a read-scoped key passes; the gateway force-injects the credential's own
+ * `workspaceId` regardless of anything sent here. Default view spans ALL statuses
+ * (including `screening`) so nothing silently disappears from the submitter's own view.
+ */
+export declare function runFeedbackList(options: {
+    status?: string;
+    limit: string;
+    cursor?: string;
+}): Promise<void>;
+/**
+ * WP-494 §5 (TEN-2742): the vendor cross-workspace triage queue — takes over `list`'s old
+ * behavior verbatim, including the triage-session gate and every existing filter.
+ */
+export declare function runFeedbackQueue(options: {
+    status: string;
+    category?: string;
+    groupId?: string;
+    workspaceId?: string;
+    since?: string;
+    before?: string;
+    limit: string;
+    cursor?: string;
+}): Promise<void>;
+export declare function runFeedbackNote(feedbackId: string, note: string): Promise<void>;
+export declare function runFeedbackGroup(groupId: string, feedbackIds: string[]): Promise<void>;
+export declare function runFeedbackStatus(feedbackId: string, status: string): Promise<void>;
+export declare function createFeedbackCommand(): Command;
+//# sourceMappingURL=feedback.d.ts.map

package/dist/commands/feedback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.d.ts","sourceRoot":"","sources":["../../src/commands/feedback.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAavH;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjD,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC5I,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BhB;AAED,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQrF;AAED,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAW5F;AAED,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzF;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CAyC/C"}