diff --git a/test/commands/devops/nutHelpers.ts b/test/commands/devops/nutHelpers.ts
new file mode 100644
index 00000000..7a991dfe
--- /dev/null
+++ b/test/commands/devops/nutHelpers.ts
@@ -0,0 +1,88 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd } from '@salesforce/cli-plugins-testkit';
+
+/**
+ * Real-org NUTs run only when the environment supplies org auth. CI sets these
+ * vars to empty strings when no org is configured, so `.some(Boolean)` (not `??`)
+ * is required — empty strings must be treated as "not set".
+ */
+export const REAL_ORG = [
+  process.env.TESTKIT_HUB_USERNAME,
+  process.env.TESTKIT_ORG_USERNAME,
+  process.env.TESTKIT_AUTH_URL,
+].some(Boolean);
+
+/**
+ * GitHub repo the pipeline/stage/branch fixtures connect a DevOps Center
+ * pipeline to. The target org's DevOps Center must have a GitHub source
+ * authorized against this repo for those real-org tests to run (otherwise the
+ * server returns REPO_NOT_FOUND_OR_UNAUTHORIZED and the fixture guard skips
+ * them). Override per-environment with DC_NUT_REPO; the default is a non-SSO
+ * repo so CI isn't gated on SAML-protected org access.
+ */
+export const GITHUB_REPO = process.env.DC_NUT_REPO ?? 'https://github.com/ad-shreya/Solar';
+
+/**
+ * Branch that `stage branch add` associates with a pipeline stage. It must already
+ * exist in GITHUB_REPO and must NOT be the repo's mainline (`main`): the server
+ * reserves the mainline and rejects associating it to a stage ("Failed to create
+ * Source Code Repository Branch"). A non-existent branch fails too ("Branch does
+ * not exist"), so this must name a real, non-default branch. Override with
+ * DC_NUT_STAGE_BRANCH when pointing at a different fixture repo.
+ */
+export const STAGE_BRANCH = process.env.DC_NUT_STAGE_BRANCH ?? 'staging';
+
+/**
+ * A target org may be authenticated but not have the DevOps Center feature
+ * enabled (e.g. the shared CI dev hub). In that case every API-backed command
+ * fails (FUNCTIONALITY_NOT_ENABLED, or "sObject type 'DevopsPipeline' is not
+ * supported"). Probe once with a read-only command so real-org NUTs can skip
+ * cleanly instead of failing the whole suite.
+ *
+ * Detection is by exit code, not error text, so it is robust to whichever error
+ * a disabled org returns: `devops pipeline list` exits 0 only when the feature
+ * is enabled (even with zero pipelines). Returns false when there is no real
+ * org, so callers can gate both fixture setup and the real-org assertions on a
+ * single flag.
+ */
+export const isDevopsCenterEnabled = (orgFlag: string): boolean => {
+  if (!REAL_ORG) return false;
+  const result = execCmd(`devops pipeline list --json ${orgFlag}`, { ensureExitCode: undefined });
+  return result.jsonOutput?.status === 0;
+};
+
+export type SeededWorkItem = { workItemId: string; workItemName: string; subject: string };
+
+/**
+ * `work-item create` returns only `{ success, subject }` — no id or name. Fixtures
+ * that need to update/review/promote a work item must read it back from
+ * `work-item list` (which returns `{ id, name, subject, ... }`). Create the item,
+ * then resolve its id and name by matching the unique subject.
+ */
+export const createWorkItem = (projectId: string, subject: string, orgFlag: string): SeededWorkItem => {
+  execCmd(`devops work-item create --project-id ${projectId} --subject "${subject}" --json ${orgFlag}`, {
+    ensureExitCode: 0,
+  });
+  const list = execCmd<{ workItems: Array<{ id: string; name: string; subject: string }> }>(
+    `devops work-item list --project-id ${projectId} --json ${orgFlag}`,
+    { ensureExitCode: 0 }
+  );
+  const wi = (list.jsonOutput?.result.workItems ?? []).find((w) => w.subject === subject);
+  if (!wi) throw new Error(`Seeded work item '${subject}' not found in project ${projectId}`);
+  return { workItemId: wi.id, workItemName: wi.name, subject: wi.subject };
+};
diff --git a/test/commands/devops/pipeline/create.nut.ts b/test/commands/devops/pipeline/create.nut.ts
new file mode 100644
index 00000000..dcf914d6
--- /dev/null
+++ b/test/commands/devops/pipeline/create.nut.ts
@@ -0,0 +1,91 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { CreatePipelineResult } from '../../../../src/utils/createPipeline.js';
+
+describe('devops pipeline create NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline create --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Create a DevOps Center pipeline');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops pipeline create', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  it('rejects invalid --repo-type values', () => {
+    const result = execCmd(`devops pipeline create --name MyPipeline --repo ${GITHUB_REPO} --repo-type notavalidtype`, {
+      ensureExitCode: 2,
+    });
+    expect(result.shellOutput.stderr).to.include('notavalidtype');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('creates a pipeline and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const name = genUniqueString('NUT-pipeline-%s');
+    const result = execCmd<CreatePipelineResult>(
+      `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    expect(output?.result.success).to.be.true;
+    expect(output?.result.pipelineId).to.match(/^[a-zA-Z0-9]{15,18}$/);
+    expect(output?.result.name).to.equal(name);
+    expect(output?.result.repository?.repoType).to.equal('github');
+  });
+
+  it('new pipeline starts in Inactive status', function () {
+    if (!dcEnabled) this.skip();
+
+    const name = genUniqueString('NUT-pipeline-inactive-%s');
+    const result = execCmd<CreatePipelineResult>(
+      `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    const pipelineId = result.jsonOutput!.result.pipelineId!;
+    // The create response `status` is the operation result ('SUCCESS'); a new pipeline's
+    // inactive state is exposed via `pipeline get` → isActive: false.
+    const get = execCmd<{ isActive: boolean }>(`devops pipeline get --pipeline-id ${pipelineId} --json ${orgFlag}`, {
+      ensureExitCode: 0,
+    });
+    expect(get.jsonOutput?.result.isActive).to.equal(false);
+  });
+});
diff --git a/test/commands/devops/pipeline/get.nut.ts b/test/commands/devops/pipeline/get.nut.ts
new file mode 100644
index 00000000..e26d0da9
--- /dev/null
+++ b/test/commands/devops/pipeline/get.nut.ts
@@ -0,0 +1,96 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { PipelineGetResult } from '../../../../src/utils/getPipeline.js';
+
+describe('devops pipeline get NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-get-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline get --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Get details of a DevOps Center pipeline');
+  });
+
+  it('errors when --pipeline-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops pipeline get --pipeline-id not-an-id', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid pipeline-id supplied)', () => {
+    const result = execCmd('devops pipeline get --pipeline-id 0XB000000000001AAA', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('returns structured JSON for an existing pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<PipelineGetResult>(`devops pipeline get --pipeline-id ${pipelineId} --json ${orgFlag}`, {
+      ensureExitCode: 0,
+    });
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    // create returns a 15-char id; get returns the 18-char form — compare on the 15-char prefix
+    expect(output?.result.id?.slice(0, 15)).to.equal(pipelineId);
+    expect(output?.result.name).to.be.a('string');
+    expect(output?.result.isActive).to.equal(false);
+    expect(output?.result.stages).to.be.an('array');
+    expect(output?.result.connectedProjects).to.be.an('array');
+  });
+
+  it('errors when the pipeline does not exist', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(`devops pipeline get --pipeline-id 0XB000000000001AAA ${orgFlag}`, { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('not found');
+  });
+});
diff --git a/test/commands/devops/pipeline/list.nut.ts b/test/commands/devops/pipeline/list.nut.ts
new file mode 100644
index 00000000..f6621bfa
--- /dev/null
+++ b/test/commands/devops/pipeline/list.nut.ts
@@ -0,0 +1,86 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { PipelineListResult } from '../../../../src/utils/listPipelines.js';
+
+describe('devops pipeline list NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-list-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline list --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('List DevOps Center pipelines');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops pipeline list', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('returns JSON with a pipelines array', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<PipelineListResult>(`devops pipeline list --json ${orgFlag}`, { ensureExitCode: 0 });
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    expect(output?.result.pipelines).to.be.an('array');
+  });
+
+  it('includes the seeded pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<PipelineListResult>(`devops pipeline list --json ${orgFlag}`, { ensureExitCode: 0 });
+    // list returns 18-char ids; the fixture holds the 15-char form — compare on the 15-char prefix
+    const ids = (result.jsonOutput?.result.pipelines ?? []).map((p) => p.Id?.slice(0, 15));
+    expect(ids).to.include(pipelineId);
+  });
+});
diff --git a/test/commands/devops/pipeline/project/add.nut.ts b/test/commands/devops/pipeline/project/add.nut.ts
new file mode 100644
index 00000000..b8525e60
--- /dev/null
+++ b/test/commands/devops/pipeline/project/add.nut.ts
@@ -0,0 +1,126 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../../nutHelpers.js';
+import type { AttachProjectResult } from '../../../../../src/utils/attachProject.js';
+
+describe('devops pipeline project add NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+  let projectId: string;
+  // Second project to test attaching another project to the same pipeline
+  let secondProjectId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const pipelineName = genUniqueString('NUT-projadd-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${pipelineName}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+
+        const projName = genUniqueString('NUT-projadd-proj-%s');
+        const proj = execCmd<{ projectId: string }>(`devops project create --name "${projName}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        projectId = proj.jsonOutput!.result.projectId!;
+
+        const secondName = genUniqueString('NUT-projadd-proj2-%s');
+        const proj2 = execCmd<{ projectId: string }>(`devops project create --name "${secondName}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        secondProjectId = proj2.jsonOutput!.result.projectId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline project add --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Attach a DevOps Center project to a pipeline');
+  });
+
+  it('errors when --pipeline-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops pipeline project add --pipeline-id not-an-id --project-id 0XC000000000001AAA', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd(
+      'devops pipeline project add --pipeline-id 0XB000000000001AAA --project-id 0XC000000000001AAA',
+      {
+        ensureExitCode: 1,
+      }
+    );
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('attaches a project to a pipeline and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<AttachProjectResult>(
+      `devops pipeline project add --pipeline-id ${pipelineId} --project-id ${projectId} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.status).to.equal(0);
+    expect(result.jsonOutput?.result.success).to.be.true;
+  });
+
+  it('errors when attaching the same project a second time', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops pipeline project add --pipeline-id ${pipelineId} --project-id ${projectId} ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    expect(result.shellOutput.stderr.toLowerCase()).to.include('already');
+  });
+
+  it('attaches a second project to the same pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<AttachProjectResult>(
+      `devops pipeline project add --pipeline-id ${pipelineId} --project-id ${secondProjectId} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.result.success).to.be.true;
+  });
+});
diff --git a/test/commands/devops/pipeline/project/delete.nut.ts b/test/commands/devops/pipeline/project/delete.nut.ts
new file mode 100644
index 00000000..70f66b9e
--- /dev/null
+++ b/test/commands/devops/pipeline/project/delete.nut.ts
@@ -0,0 +1,111 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../../nutHelpers.js';
+import type { DetachProjectResult } from '../../../../../src/utils/detachProject.js';
+
+describe('devops pipeline project delete NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+  let projectId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const pipelineName = genUniqueString('NUT-projdel-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${pipelineName}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+
+        const projName = genUniqueString('NUT-projdel-proj-%s');
+        const proj = execCmd<{ projectId: string }>(`devops project create --name "${projName}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        projectId = proj.jsonOutput!.result.projectId!;
+
+        // Attach the project so it can be removed
+        execCmd(`devops pipeline project add --pipeline-id ${pipelineId} --project-id ${projectId} ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline project delete --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include("Remove a DevOps Center project's connection to a pipeline");
+  });
+
+  it('errors when --pipeline-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops pipeline project delete --pipeline-id not-an-id --project-id 0XC000000000001AAA', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd(
+      'devops pipeline project delete --pipeline-id 0XB000000000001AAA --project-id 0XC000000000001AAA',
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('removes an attached project and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<DetachProjectResult>(
+      `devops pipeline project delete --pipeline-id ${pipelineId} --project-id ${projectId} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.status).to.equal(0);
+    expect(result.jsonOutput?.result.success).to.be.true;
+  });
+
+  it('errors when the project is not attached to the pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops pipeline project delete --pipeline-id ${pipelineId} --project-id ${projectId} ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    expect(result.shellOutput.stderr.toLowerCase()).to.include('not');
+  });
+});
diff --git a/test/commands/devops/pipeline/stage/add.nut.ts b/test/commands/devops/pipeline/stage/add.nut.ts
new file mode 100644
index 00000000..7c6a1296
--- /dev/null
+++ b/test/commands/devops/pipeline/stage/add.nut.ts
@@ -0,0 +1,104 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../../nutHelpers.js';
+import type { AddPipelineStageResult } from '../../../../../src/utils/addPipelineStage.js';
+import type { CreatePipelineResult } from '../../../../../src/utils/createPipeline.js';
+
+describe('devops pipeline stage add NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+  // One of the default stage IDs seeded by pipeline create, used as the `--next-stage-id`
+  let existingStageId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-stage-add-%s');
+        const pipeline = execCmd<CreatePipelineResult>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+
+        // Retrieve the first stage ID from the newly created pipeline via sf data query
+        const stagesResult = execCmd<{ records: Array<{ Id: string }> }>(
+          `data query --query "SELECT Id FROM DevopsPipelineStage WHERE DevopsPipelineId='${pipelineId}' ORDER BY CreatedDate ASC LIMIT 1" --json ${orgFlag}`,
+          { ensureExitCode: 0, cli: 'sf' }
+        );
+        existingStageId = stagesResult.jsonOutput!.result.records[0].Id;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline stage add --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Add a stage to a DevOps Center pipeline');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops pipeline stage add', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('adds a stage before an existing stage and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const stageName = genUniqueString('NUT-stage-%s');
+    const result = execCmd<AddPipelineStageResult>(
+      `devops pipeline stage add --pipeline-id ${pipelineId} --name "${stageName}" --next-stage-id ${existingStageId} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    expect(output?.result.success).to.be.true;
+    expect(output?.result.stageId).to.match(/^[a-zA-Z0-9]{15,18}$/);
+    expect(output?.result.name).to.equal(stageName);
+    expect(output?.result.nextStageId).to.equal(existingStageId);
+  });
+
+  it('errors when --next-stage-id does not belong to the pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops pipeline stage add --pipeline-id ${pipelineId} --name NewStage --next-stage-id 0XC000000000001AAA ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    expect(result.shellOutput.stderr).to.include('0XC000000000001AAA');
+  });
+});
diff --git a/test/commands/devops/pipeline/stage/delete.nut.ts b/test/commands/devops/pipeline/stage/delete.nut.ts
new file mode 100644
index 00000000..9c9f274b
--- /dev/null
+++ b/test/commands/devops/pipeline/stage/delete.nut.ts
@@ -0,0 +1,109 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../../nutHelpers.js';
+import type { DeletePipelineStageResult } from '../../../../../src/utils/deletePipelineStage.js';
+
+describe('devops pipeline stage delete NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+  let lastStageId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-stage-del-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+
+        // The last stage (no NextStageId) is safe to remove
+        const stagesResult = execCmd<{ records: Array<{ Id: string }> }>(
+          `data query --query "SELECT Id FROM DevopsPipelineStage WHERE DevopsPipelineId='${pipelineId}' AND NextStageId=null LIMIT 1" --json ${orgFlag}`,
+          { ensureExitCode: 0, cli: 'sf' }
+        );
+        lastStageId = stagesResult.jsonOutput!.result.records[0].Id;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline stage delete --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Delete a stage from a DevOps Center pipeline');
+  });
+
+  it('errors when --pipeline-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops pipeline stage delete --pipeline-id not-an-id --stage-id 1QV000000000001AAA', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd(
+      'devops pipeline stage delete --pipeline-id 0XB000000000001AAA --stage-id 1QV000000000001AAA',
+      {
+        ensureExitCode: 1,
+      }
+    );
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('deletes a stage and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<DeletePipelineStageResult>(
+      `devops pipeline stage delete --pipeline-id ${pipelineId} --stage-id ${lastStageId} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.status).to.equal(0);
+    expect(result.jsonOutput?.result.success).to.be.true;
+  });
+
+  it('errors when deleting a stage that does not belong to the pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops pipeline stage delete --pipeline-id ${pipelineId} --stage-id 1QV000000000001AAA ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    expect(result.shellOutput.stderr.toLowerCase()).to.include('stage');
+  });
+});
diff --git a/test/commands/devops/pipeline/stage/update.nut.ts b/test/commands/devops/pipeline/stage/update.nut.ts
new file mode 100644
index 00000000..03c3dfc1
--- /dev/null
+++ b/test/commands/devops/pipeline/stage/update.nut.ts
@@ -0,0 +1,105 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../../nutHelpers.js';
+import type { PipelineStageUpdateResult } from '../../../../../src/commands/devops/pipeline/stage/update.js';
+
+describe('devops pipeline stage update NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+  let stageId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-stage-upd-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+
+        const stagesResult = execCmd<{ records: Array<{ Id: string }> }>(
+          `data query --query "SELECT Id FROM DevopsPipelineStage WHERE DevopsPipelineId='${pipelineId}' ORDER BY CreatedDate ASC LIMIT 1" --json ${orgFlag}`,
+          { ensureExitCode: 0, cli: 'sf' }
+        );
+        stageId = stagesResult.jsonOutput!.result.records[0].Id;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline stage update --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Update a DevOps Center pipeline stage');
+  });
+
+  it('errors when --stage-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops pipeline stage update --stage-id not-an-id --name NewName', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd('devops pipeline stage update --stage-id 1QV000000000001AAA --name NewName', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('updates a stage name and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const newName = genUniqueString('NUT-stage-%s');
+    const result = execCmd<PipelineStageUpdateResult>(
+      `devops pipeline stage update --stage-id ${stageId} --name "${newName}" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.status).to.equal(0);
+    expect(result.jsonOutput?.result.success).to.be.true;
+    expect(result.jsonOutput?.result.stageId).to.equal(stageId);
+    expect(result.jsonOutput?.result.name).to.equal(newName);
+  });
+
+  it('errors when the stage does not exist', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(`devops pipeline stage update --stage-id 1QV000000000001AAA --name Whatever ${orgFlag}`, {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr.toLowerCase()).to.include('stage');
+  });
+});
diff --git a/test/commands/devops/pipeline/update.nut.ts b/test/commands/devops/pipeline/update.nut.ts
new file mode 100644
index 00000000..05785339
--- /dev/null
+++ b/test/commands/devops/pipeline/update.nut.ts
@@ -0,0 +1,112 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { PipelineUpdateResult } from '../../../../src/utils/activatePipeline.js';
+
+describe('devops pipeline update NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  // Pipeline created (with default stages) so activate/deactivate/rename can succeed
+  let pipelineId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-update-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops pipeline update --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Update a DevOps Center pipeline');
+  });
+
+  it('errors when --pipeline-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops pipeline update --pipeline-id not-an-id --activate', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd('devops pipeline update --pipeline-id 0XB000000000001AAA --activate', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  // A successful --activate cannot be tested headlessly: activation requires every
+  // stage to have an associated environment, and associating an environment needs
+  // interactive OAuth (browser + auth callback). We instead verify the command
+  // reaches DevOps Center and enforces that precondition on a freshly created
+  // pipeline whose default stages have no environments.
+  it('errors when activating a pipeline whose stages have no environments', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(`devops pipeline update --pipeline-id ${pipelineId} --activate ${orgFlag}`, {
+      ensureExitCode: 'nonZero',
+    });
+    expect(result.shellOutput.stderr).to.include('not associated to pipeline stages');
+  });
+
+  // The pipeline was never activated (see above), so it is still inactive — which
+  // exercises the deactivate path's already-inactive guard. A successful deactivate
+  // is unreachable headlessly for the same reason a successful activate is.
+  it('errors when deactivating an already-inactive pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(`devops pipeline update --pipeline-id ${pipelineId} --deactivate ${orgFlag}`, {
+      ensureExitCode: 'nonZero',
+    });
+    expect(result.shellOutput.stderr).to.include('already inactive');
+  });
+
+  it('renames the pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const newName = genUniqueString('NUT-renamed-%s');
+    const result = execCmd<PipelineUpdateResult>(
+      `devops pipeline update --pipeline-id ${pipelineId} --name "${newName}" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.result.success).to.be.true;
+    expect(result.jsonOutput?.result.name).to.equal(newName);
+  });
+});
diff --git a/test/commands/devops/project/create.nut.ts b/test/commands/devops/project/create.nut.ts
new file mode 100644
index 00000000..6fd255b1
--- /dev/null
+++ b/test/commands/devops/project/create.nut.ts
@@ -0,0 +1,79 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { CreateProjectResult } from '../../../../src/utils/createProject.js';
+
+// These tests require a real org. Set TESTKIT_HUB_USERNAME (and TESTKIT_AUTH_URL or JWT vars)
+// before running. CI sets these via secrets; locally use `sf org login web` and export the username.
+describe('devops project create NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests (no org required) ───────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops project create --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Create a DevOps Center project');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops project create', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('creates a project and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const name = genUniqueString('NUT-project-%s');
+    const result = execCmd<CreateProjectResult>(`devops project create --name "${name}" --json ${orgFlag}`, {
+      ensureExitCode: 0,
+    });
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    expect(output?.result.success).to.be.true;
+    expect(output?.result.projectId).to.match(/^[a-zA-Z0-9]{15,18}$/);
+    expect(output?.result.name).to.equal(name);
+  });
+
+  it('creates a project with a description', function () {
+    if (!dcEnabled) this.skip();
+
+    const name = genUniqueString('NUT-desc-%s');
+    const desc = 'Created by NUT';
+    const result = execCmd<CreateProjectResult>(
+      `devops project create --name "${name}" --description "${desc}" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.result.description).to.equal(desc);
+  });
+});
diff --git a/test/commands/devops/project/list.nut.ts b/test/commands/devops/project/list.nut.ts
new file mode 100644
index 00000000..59b95eca
--- /dev/null
+++ b/test/commands/devops/project/list.nut.ts
@@ -0,0 +1,101 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { DevopsProjectListResult } from '../../../../src/commands/devops/project/list.js';
+
+describe('devops project list NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let createdProjectId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        // Seed a project so the list is guaranteed non-empty
+        const name = genUniqueString('NUT-list-seed-%s');
+        const create = execCmd<{ projectId: string }>(`devops project create --name "${name}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        createdProjectId = create.jsonOutput!.result.projectId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops project list --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('List all DevOps Center projects');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops project list', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('returns JSON with a projects array', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<DevopsProjectListResult>(`devops project list --json ${orgFlag}`, {
+      ensureExitCode: 0,
+    });
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    expect(output?.result.projects).to.be.an('array');
+  });
+
+  it('lists the seeded project', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<DevopsProjectListResult>(`devops project list --json ${orgFlag}`, {
+      ensureExitCode: 0,
+    });
+    const ids = result.jsonOutput!.result.projects.map((p) => p.Id);
+    expect(ids).to.include(createdProjectId);
+  });
+
+  it('each project record has Id and Name fields', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<DevopsProjectListResult>(`devops project list --json ${orgFlag}`, {
+      ensureExitCode: 0,
+    });
+    for (const project of result.jsonOutput!.result.projects) {
+      expect(project.Id).to.match(/^[a-zA-Z0-9]{15,18}$/);
+      expect(project.Name).to.be.a('string').and.not.empty;
+    }
+  });
+});
diff --git a/test/commands/devops/project/update.nut.ts b/test/commands/devops/project/update.nut.ts
new file mode 100644
index 00000000..7679ff98
--- /dev/null
+++ b/test/commands/devops/project/update.nut.ts
@@ -0,0 +1,106 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { UpdateProjectResult } from '../../../../src/utils/updateProject.js';
+
+describe('devops project update NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let projectId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const projName = genUniqueString('NUT-proj-upd-%s');
+        const proj = execCmd<{ projectId: string }>(`devops project create --name "${projName}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        projectId = proj.jsonOutput!.result.projectId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops project update --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Update a DevOps Center project');
+  });
+
+  it('errors when --project-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops project update --project-id not-an-id --name NewName', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd('devops project update --project-id 0XC000000000001AAA --name NewName', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when no fields to update are provided', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(`devops project update --project-id ${projectId} ${orgFlag}`, { ensureExitCode: 'nonZero' });
+    expect(result.shellOutput.stderr).to.include('Provide at least one of');
+  });
+
+  it('updates the project name and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const newName = genUniqueString('NUT-proj-renamed-%s');
+    const result = execCmd<UpdateProjectResult>(
+      `devops project update --project-id ${projectId} --name "${newName}" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.status).to.equal(0);
+    expect(result.jsonOutput?.result.success).to.be.true;
+    expect(result.jsonOutput?.result.name).to.equal(newName);
+  });
+
+  it('updates the project description and active flag', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<UpdateProjectResult>(
+      `devops project update --project-id ${projectId} --description "NUT description" --no-is-active --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.result.success).to.be.true;
+    expect(result.jsonOutput?.result.description).to.equal('NUT description');
+    expect(result.jsonOutput?.result.isActive).to.equal(false);
+  });
+});
diff --git a/test/commands/devops/promote.nut.ts b/test/commands/devops/promote.nut.ts
new file mode 100644
index 00000000..3f0b8a85
--- /dev/null
+++ b/test/commands/devops/promote.nut.ts
@@ -0,0 +1,76 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from './nutHelpers.js';
+
+describe('devops promote NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops promote --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Promote work items or a pipeline stage');
+  });
+
+  it('errors when --target-stage-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops promote --target-stage-id not-an-id --stage-id 1QV000000000001AAA', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors with an invalid --test-level value', () => {
+    const result = execCmd(
+      'devops promote --target-stage-id 1QV000000000001AAA --stage-id 1QV000000000002AAA --test-level BogusLevel',
+      { ensureExitCode: 2 }
+    );
+    expect(result.shellOutput.stderr).to.include('BogusLevel');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd('devops promote --target-stage-id 1QV000000000001AAA --stage-id 1QV000000000002AAA', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when neither --work-item-id nor --stage-id is provided', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(`devops promote --target-stage-id 1QV000000000001AAA ${orgFlag}`, {
+      ensureExitCode: 'nonZero',
+    });
+    expect(result.shellOutput.stderr).to.include('--work-item-id');
+  });
+});
diff --git a/test/commands/devops/promotion/complete.nut.ts b/test/commands/devops/promotion/complete.nut.ts
new file mode 100644
index 00000000..9200e4fc
--- /dev/null
+++ b/test/commands/devops/promotion/complete.nut.ts
@@ -0,0 +1,64 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+
+describe('devops promotion complete NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops promotion complete --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Deploy undeployed work items to a pipeline stage org');
+  });
+
+  it('errors when --target-stage-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops promotion complete --target-stage-id not-an-id', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd('devops promotion complete --target-stage-id 1QV000000000001AAA', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when the target stage does not exist', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(`devops promotion complete --target-stage-id 1QV000000000001AAA ${orgFlag}`, {
+      ensureExitCode: 'nonZero',
+    });
+    expect(result.shellOutput.stderr.toLowerCase()).to.include('not found');
+  });
+});
diff --git a/test/commands/devops/promotion/validate.nut.ts b/test/commands/devops/promotion/validate.nut.ts
new file mode 100644
index 00000000..b0655eb7
--- /dev/null
+++ b/test/commands/devops/promotion/validate.nut.ts
@@ -0,0 +1,70 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+
+describe('devops promotion validate NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops promotion validate --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Validate work item promotion for a pipeline stage');
+  });
+
+  it('errors when --target-stage-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops promotion validate --target-stage-id not-an-id --work-item-id 1fk000000000001AAA', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd(
+      'devops promotion validate --target-stage-id 1QV000000000001AAA --work-item-id 1fk000000000001AAA',
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when the work item does not exist', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops promotion validate --target-stage-id 1QV000000000001AAA --work-item-id 1fk000000000001AAA ${orgFlag}`,
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.not.equal('');
+  });
+});
diff --git a/test/commands/devops/request/status.nut.ts b/test/commands/devops/request/status.nut.ts
new file mode 100644
index 00000000..6aaa1f88
--- /dev/null
+++ b/test/commands/devops/request/status.nut.ts
@@ -0,0 +1,62 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { RequestStatusResult } from '../../../../src/utils/getRequestStatus.js';
+
+describe('devops request status NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops request status --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Get the status of a request');
+  });
+
+  it('errors when --target-org is missing (valid request-token supplied)', () => {
+    const result = execCmd('devops request status --request-token some-token', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when the request token does not exist', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<RequestStatusResult>(
+      `devops request status --request-token NUT-nonexistent-token --json ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    // With --json the error surfaces in the JSON payload's `message`, not stderr.
+    expect(result.jsonOutput?.message?.toLowerCase()).to.include('not found');
+  });
+});
diff --git a/test/commands/devops/review/create.nut.ts b/test/commands/devops/review/create.nut.ts
new file mode 100644
index 00000000..dd2e874a
--- /dev/null
+++ b/test/commands/devops/review/create.nut.ts
@@ -0,0 +1,89 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { createWorkItem, isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { CreatePullRequestResult } from '../../../../src/utils/createPullRequest.js';
+
+describe('devops review create NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  // A work item that exists in the org but has no branch yet (freshly created)
+  let noBranchWorkItemName: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        // Create a project and a bare work item (no VCS branch assigned yet)
+        const projName = genUniqueString('NUT-review-%s');
+        const proj = execCmd<{ projectId: string }>(`devops project create --name "${projName}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        const projectId = proj.jsonOutput!.result.projectId;
+
+        const subject = genUniqueString('NUT review item %s');
+        noBranchWorkItemName = createWorkItem(projectId, subject, orgFlag).workItemName;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops review create --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Create a pull request for a work item branch');
+  });
+
+  it('errors when --work-item-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops review create --work-item-id not-an-id', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid work-item-name supplied)', () => {
+    const result = execCmd('devops review create --work-item-name WI-000001', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  // A work item without a DevOps Center branch assigned → command should error with NoBranch message
+  it('errors with a NoBranch message for a work item with no branch', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<CreatePullRequestResult>(
+      `devops review create --work-item-name ${noBranchWorkItemName} ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    // The command errors before touching any VCS provider — no token required
+    expect(result.shellOutput.stderr).to.include("doesn't have an associated branch");
+  });
+});
diff --git a/test/commands/devops/stage/branch/add.nut.ts b/test/commands/devops/stage/branch/add.nut.ts
new file mode 100644
index 00000000..0275aeed
--- /dev/null
+++ b/test/commands/devops/stage/branch/add.nut.ts
@@ -0,0 +1,110 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, STAGE_BRANCH, isDevopsCenterEnabled } from '../../nutHelpers.js';
+import type { AddStageBranchResult } from '../../../../../src/utils/addStageBranch.js';
+import type { CreatePipelineResult } from '../../../../../src/utils/createPipeline.js';
+
+describe('devops stage branch add NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  // The last stage of the pipeline (no NextStageId) — branch setup must start right-to-left
+  let lastStageId: string;
+  let pipelineId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-add-branch-%s');
+        const pipeline = execCmd<CreatePipelineResult>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+
+        // Query for the last stage (no NextStageId) — that's where branch setup must start
+        const stagesResult = execCmd<{ records: Array<{ Id: string }> }>(
+          `data query --query "SELECT Id FROM DevopsPipelineStage WHERE DevopsPipelineId='${pipelineId}' AND NextStageId=null LIMIT 1" --json ${orgFlag}`,
+          { ensureExitCode: 0, cli: 'sf' }
+        );
+        lastStageId = stagesResult.jsonOutput!.result.records[0].Id;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops stage branch add --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Add a source code repository branch to a pipeline stage');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops stage branch add', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  it('errors when --pipeline-id is an invalid Salesforce ID', () => {
+    const result = execCmd(
+      'devops stage branch add --pipeline-id not-an-id --stage-id 0XC000000000001AAA --branch-name main',
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('adds a branch to the last stage and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<AddStageBranchResult>(
+      `devops stage branch add --pipeline-id ${pipelineId} --stage-id ${lastStageId} --branch-name ${STAGE_BRANCH} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    expect(output?.result.success).to.be.true;
+    expect(output?.result.branchName).to.equal(STAGE_BRANCH);
+    expect(output?.result.repoBranchId).to.match(/^[a-zA-Z0-9]{15,18}$/);
+  });
+
+  it('errors when --stage-id does not belong to the pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops stage branch add --pipeline-id ${pipelineId} --stage-id 0XC000000000001AAA --branch-name main ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    expect(result.shellOutput.stderr).to.include('0XC000000000001AAA');
+  });
+});
diff --git a/test/commands/devops/stage/branch/delete.nut.ts b/test/commands/devops/stage/branch/delete.nut.ts
new file mode 100644
index 00000000..58c788da
--- /dev/null
+++ b/test/commands/devops/stage/branch/delete.nut.ts
@@ -0,0 +1,91 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../../nutHelpers.js';
+
+describe('devops stage branch delete NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-branch-del-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops stage branch delete --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include(
+      'Delete the source code repository branch associated with a pipeline stage'
+    );
+  });
+
+  it('errors when --pipeline-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops stage branch delete --pipeline-id not-an-id --stage-id 1QV000000000001AAA', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd(
+      'devops stage branch delete --pipeline-id 0XB000000000001AAA --stage-id 1QV000000000001AAA',
+      {
+        ensureExitCode: 1,
+      }
+    );
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when the stage does not belong to the pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops stage branch delete --pipeline-id ${pipelineId} --stage-id 1QV000000000001AAA ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    expect(result.shellOutput.stderr.toLowerCase()).to.include('stage');
+  });
+});
diff --git a/test/commands/devops/stage/environment/add.nut.ts b/test/commands/devops/stage/environment/add.nut.ts
new file mode 100644
index 00000000..03c22a8e
--- /dev/null
+++ b/test/commands/devops/stage/environment/add.nut.ts
@@ -0,0 +1,91 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../../nutHelpers.js';
+import type { CreatePipelineResult } from '../../../../../src/utils/createPipeline.js';
+
+describe('devops stage environment add NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-add-env-%s');
+        const pipeline = execCmd<CreatePipelineResult>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops stage environment add --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Add a Salesforce environment to a pipeline stage');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops stage environment add', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  it('rejects invalid --org-type values', () => {
+    const result = execCmd(
+      'devops stage environment add --pipeline-id 0XB000000000001AAA --stage-id 0XC000000000001AAA --environment-name myEnv --org-type NotValid',
+      { ensureExitCode: 2 }
+    );
+    expect(result.shellOutput.stderr).to.include('NotValid');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  // The full happy path requires interactive OAuth (browser open + org auth callback),
+  // which cannot run headlessly — with a valid stage the command prints an auth URL and
+  // blocks indefinitely on "Waiting for authentication to complete..." until a callback
+  // that never arrives. We therefore verify only that the command reaches the API layer,
+  // by supplying a non-existent stage ID so it errors before the OAuth step.
+  it('errors when --stage-id does not belong to the pipeline', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops stage environment add --pipeline-id ${pipelineId} --stage-id 0XC000000000001AAA --environment-name myEnv --org-type Sandbox --no-browser ${orgFlag}`,
+      { ensureExitCode: 'nonZero' }
+    );
+    expect(result.shellOutput.stderr).to.include('0XC000000000001AAA');
+  });
+});
diff --git a/test/commands/devops/stage/environment/delete.nut.ts b/test/commands/devops/stage/environment/delete.nut.ts
new file mode 100644
index 00000000..2743ce6b
--- /dev/null
+++ b/test/commands/devops/stage/environment/delete.nut.ts
@@ -0,0 +1,90 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { GITHUB_REPO, isDevopsCenterEnabled } from '../../nutHelpers.js';
+
+describe('devops stage environment delete NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let pipelineId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-env-del-%s');
+        const pipeline = execCmd<{ pipelineId: string }>(
+          `devops pipeline create --name "${name}" --repo ${GITHUB_REPO} --repo-type github --json ${orgFlag}`,
+          { ensureExitCode: 0 }
+        );
+        pipelineId = pipeline.jsonOutput!.result.pipelineId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops stage environment delete --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Delete an environment from a DevOps Center pipeline stage');
+  });
+
+  it('errors when --pipeline-id is an invalid Salesforce ID format', () => {
+    const result = execCmd(
+      'devops stage environment delete --pipeline-id not-an-id --environment-id 0Xk000000000001AAA',
+      {
+        ensureExitCode: 1,
+      }
+    );
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd(
+      'devops stage environment delete --pipeline-id 0XB000000000001AAA --environment-id 0Xk000000000001AAA',
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when the environment does not exist', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops stage environment delete --pipeline-id ${pipelineId} --environment-id 0Xk000000000001AAA ${orgFlag}`,
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.not.equal('');
+  });
+});
diff --git a/test/commands/devops/work-item/combine.nut.ts b/test/commands/devops/work-item/combine.nut.ts
new file mode 100644
index 00000000..a3a64ead
--- /dev/null
+++ b/test/commands/devops/work-item/combine.nut.ts
@@ -0,0 +1,71 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+
+describe('devops work-item combine NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops work-item combine --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Prepare work items to be combined for custom promotion');
+  });
+
+  it('errors when --parent-work-item-id is an invalid Salesforce ID format', () => {
+    const result = execCmd(
+      'devops work-item combine --parent-work-item-id not-an-id --child-work-item-id 1fk000000000001AAA --target-stage-id 1QV000000000001AAA',
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd(
+      'devops work-item combine --parent-work-item-id 1fk000000000001AAA --child-work-item-id 1fk000000000002AAA --target-stage-id 1QV000000000001AAA',
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when the parent work item does not exist', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops work-item combine --parent-work-item-id 1fk000000000001AAA --child-work-item-id 1fk000000000002AAA --target-stage-id 1QV000000000001AAA ${orgFlag}`,
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.not.equal('');
+  });
+});
diff --git a/test/commands/devops/work-item/create.nut.ts b/test/commands/devops/work-item/create.nut.ts
new file mode 100644
index 00000000..b4a62ecd
--- /dev/null
+++ b/test/commands/devops/work-item/create.nut.ts
@@ -0,0 +1,105 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { CreateWorkItemResult } from '../../../../src/utils/createWorkItem.js';
+
+describe('devops work-item create NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  // Project created in before() to host work items
+  let projectId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        const name = genUniqueString('NUT-wi-create-%s');
+        const create = execCmd<{ projectId: string }>(`devops project create --name "${name}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        projectId = create.jsonOutput!.result.projectId!;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops work-item create --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Create a new work item');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops work-item create', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  it('errors when --project-id prefix is wrong', () => {
+    // salesforceId flag with startsWith:'1Qg' rejects IDs that start with something else
+    const result = execCmd('devops work-item create --project-id 0XB000000000001AAA --subject Foo', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('1Qg');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('creates a work item and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const subject = genUniqueString('NUT work item %s');
+    const result = execCmd<CreateWorkItemResult>(
+      `devops work-item create --project-id ${projectId} --subject "${subject}" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    // The connect /workitem endpoint returns success + the echoed subject, not an id/name
+    expect(output?.result.success).to.be.true;
+    expect(output?.result.subject).to.equal(subject);
+  });
+
+  it('creates a work item with a description', function () {
+    if (!dcEnabled) this.skip();
+
+    const subject = genUniqueString('NUT wi desc %s');
+    const description = 'NUT description text';
+    const result = execCmd<CreateWorkItemResult>(
+      `devops work-item create --project-id ${projectId} --subject "${subject}" --description "${description}" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    // The API echoes the subject back on success; it does not return an id/name
+    expect(result.jsonOutput?.result.success).to.be.true;
+    expect(result.jsonOutput?.result.subject).to.equal(subject);
+  });
+});
diff --git a/test/commands/devops/work-item/list.nut.ts b/test/commands/devops/work-item/list.nut.ts
new file mode 100644
index 00000000..dd2d11f3
--- /dev/null
+++ b/test/commands/devops/work-item/list.nut.ts
@@ -0,0 +1,107 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { createWorkItem, isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { DevopsWorkItemListResult } from '../../../../src/commands/devops/work-item/list.js';
+
+describe('devops work-item list NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let projectId: string;
+  let createdWorkItemId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        // Create a project and seed one work item so the list is non-empty
+        const projName = genUniqueString('NUT-wi-list-%s');
+        const proj = execCmd<{ projectId: string }>(`devops project create --name "${projName}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        projectId = proj.jsonOutput!.result.projectId!;
+
+        const subject = genUniqueString('seed item %s');
+        createdWorkItemId = createWorkItem(projectId, subject, orgFlag).workItemId;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops work-item list --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('List all work items');
+  });
+
+  it('errors when --target-org is missing', () => {
+    const result = execCmd('devops work-item list', { ensureExitCode: 1 });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('returns JSON with a workItems array', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<DevopsWorkItemListResult>(
+      `devops work-item list --project-id ${projectId} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    expect(output?.result.workItems).to.be.an('array');
+  });
+
+  it('lists the seeded work item', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<DevopsWorkItemListResult>(
+      `devops work-item list --project-id ${projectId} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    const ids = result.jsonOutput!.result.workItems.map((wi) => wi.id);
+    expect(ids).to.include(createdWorkItemId);
+  });
+
+  it('each work item has required fields', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<DevopsWorkItemListResult>(
+      `devops work-item list --project-id ${projectId} --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    for (const wi of result.jsonOutput!.result.workItems) {
+      expect(wi).to.have.property('status').that.is.a('string');
+    }
+  });
+});
diff --git a/test/commands/devops/work-item/prepare.nut.ts b/test/commands/devops/work-item/prepare.nut.ts
new file mode 100644
index 00000000..028a39d1
--- /dev/null
+++ b/test/commands/devops/work-item/prepare.nut.ts
@@ -0,0 +1,72 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { isDevopsCenterEnabled } from '../nutHelpers.js';
+
+describe('devops work-item prepare NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops work-item prepare --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Prepare a work item for one-off promotion between pipeline stages');
+  });
+
+  it('errors when --work-item-id is an invalid Salesforce ID format', () => {
+    const result = execCmd('devops work-item prepare --work-item-id not-an-id --target-stage-id 1QV000000000001AAA', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('15 or 18 characters');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd(
+      'devops work-item prepare --work-item-id 1fk000000000001AAA --target-stage-id 1QV000000000001AAA',
+      {
+        ensureExitCode: 1,
+      }
+    );
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  it('errors when the work item does not exist', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd(
+      `devops work-item prepare --work-item-id 1fk000000000001AAA --target-stage-id 1QV000000000001AAA ${orgFlag}`,
+      { ensureExitCode: 1 }
+    );
+    expect(result.shellOutput.stderr).to.not.equal('');
+  });
+});
diff --git a/test/commands/devops/work-item/update.nut.ts b/test/commands/devops/work-item/update.nut.ts
new file mode 100644
index 00000000..e50fb481
--- /dev/null
+++ b/test/commands/devops/work-item/update.nut.ts
@@ -0,0 +1,133 @@
+/*
+ * Copyright 2026, Salesforce, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { execCmd, TestSession, genUniqueString } from '@salesforce/cli-plugins-testkit';
+import { expect } from 'chai';
+import { createWorkItem, isDevopsCenterEnabled } from '../nutHelpers.js';
+import type { UpdateWorkItemResult } from '../../../../src/utils/updateWorkItem.js';
+
+describe('devops work-item update NUTs', () => {
+  let session: TestSession;
+  let dcEnabled = false;
+  let orgFlag: string;
+  let workItemName: string;
+  let workItemId: string;
+
+  before(async () => {
+    session = await TestSession.create({ devhubAuthStrategy: 'AUTO' });
+    orgFlag = `--target-org ${session.hubOrg?.username ?? ''}`;
+
+    dcEnabled = isDevopsCenterEnabled(orgFlag);
+
+    if (dcEnabled) {
+      try {
+        // Create a project and a work item to update
+        const projName = genUniqueString('NUT-wi-update-%s');
+        const proj = execCmd<{ projectId: string }>(`devops project create --name "${projName}" --json ${orgFlag}`, {
+          ensureExitCode: 0,
+        });
+        const projectId = proj.jsonOutput!.result.projectId;
+
+        const subject = genUniqueString('NUT update item %s');
+        const wi = createWorkItem(projectId, subject, orgFlag);
+        workItemId = wi.workItemId;
+        workItemName = wi.workItemName;
+      } catch {
+        // Fixture setup needs VCS authentication / DevOps Center data that the
+        // target org may not have; skip the real-org tests instead of failing
+        // the whole suite (which would also drop the flag-validation tests).
+        dcEnabled = false;
+      }
+    }
+  });
+
+  after(async () => {
+    await session?.clean();
+  });
+
+  // ── flag-validation tests ─────────────────────────────────────────────────
+
+  it('displays help text', () => {
+    const result = execCmd('devops work-item update --help', { ensureExitCode: 0 });
+    expect(result.shellOutput.stdout).to.include('Update a work item in DevOps Center');
+  });
+
+  it('errors with an invalid --status value', () => {
+    const result = execCmd('devops work-item update --work-item-name WI-001 --status InvalidStatus', {
+      ensureExitCode: 2,
+    });
+    expect(result.shellOutput.stderr).to.include('InvalidStatus');
+  });
+
+  it('errors when --target-org is missing (valid flags supplied)', () => {
+    const result = execCmd('devops work-item update --work-item-id 1fk000000000001AAA --status "In Progress"', {
+      ensureExitCode: 1,
+    });
+    expect(result.shellOutput.stderr).to.include('target-org');
+  });
+
+  // ── real-org tests ────────────────────────────────────────────────────────
+
+  // NOTE: status "In Progress" is intentionally NOT tested here — that transition
+  // triggers a work-item context switch that the API rejects unless the project's
+  // pipeline is active (PIPELINE "not active" / SWITCHING_WORKITEM_FAILED), and
+  // activating a pipeline requires interactive OAuth (see pipeline/update NUTs).
+  // "Ready to Promote" updates the field without that switch, so it is headless-safe
+  // and still exercises the by-ID update path end to end.
+  it('updates a work item status by ID and returns structured JSON', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<UpdateWorkItemResult>(
+      `devops work-item update --work-item-id ${workItemId} --status "Ready to Promote" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    const output = result.jsonOutput;
+    expect(output?.status).to.equal(0);
+    expect(output?.result.success).to.be.true;
+    expect(output?.result.workItemId).to.equal(workItemId);
+    expect(output?.result.status).to.equal('Ready to Promote');
+  });
+
+  it('updates a work item status by name', function () {
+    if (!dcEnabled) this.skip();
+
+    const result = execCmd<UpdateWorkItemResult>(
+      `devops work-item update --work-item-name ${workItemName} --status "Ready to Promote" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.result.success).to.be.true;
+    expect(result.jsonOutput?.result.status).to.equal('Ready to Promote');
+  });
+
+  // SKIPPED — known product gap (bug to be filed): the work-item update endpoint
+  // (PATCH /connect/devops/projects/{projectId}/workitem/{workItemId}) rejects the
+  // `subject` and `description` fields with JSON_PARSER_ERROR "Unrecognized field",
+  // even though the create endpoint accepts those exact fields. Only `status` updates
+  // succeed today, so `work-item update --subject/--description` is non-functional
+  // against the live API. Re-enable this test once the endpoint supports those fields.
+  it.skip('updates the subject and description', function () {
+    if (!dcEnabled) this.skip();
+
+    const newSubject = genUniqueString('NUT subject %s');
+    const result = execCmd<UpdateWorkItemResult>(
+      `devops work-item update --work-item-id ${workItemId} --subject "${newSubject}" --description "NUT description" --json ${orgFlag}`,
+      { ensureExitCode: 0 }
+    );
+    expect(result.jsonOutput?.result.success).to.be.true;
+    expect(result.jsonOutput?.result.subject).to.equal(newSubject);
+    expect(result.jsonOutput?.result.description).to.equal('NUT description');
+  });
+});
diff --git a/test/commands/hello/world.nut.ts b/test/commands/hello/world.nut.ts
deleted file mode 100644
index 7fdb26a5..00000000
--- a/test/commands/hello/world.nut.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-/*
- * Copyright 2026, Salesforce, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-// TODO: remove file after we have another nut test