@arcships/morula-runtime 0.1.0-alpha.7 → 0.1.0-alpha.8

package/dist/morula.js

@@ -41,6 +41,11 @@ function parseArgs(argv) {
   const positionals = [];
   const flags = {};
   const bareFlags = [];
+  const valueOccurrences = {};
+  const recordValue = (key, value) => {
+    flags[key] = value;
+    (valueOccurrences[key] ??= []).push(value);
+  };
   let positionalOnly = false;
   for (let index = 0; index < argv.length; index += 1) {
     const value = argv[index];
@@ -62,7 +67,7 @@ function parseArgs(argv) {
     }
     const equal = value.indexOf("=");
     if (equal > 2) {
-      flags[value.slice(2, equal)] = value.slice(equal + 1);
+      recordValue(value.slice(2, equal), value.slice(equal + 1));
       continue;
     }
     const key = value.slice(2);
@@ -70,21 +75,34 @@ function parseArgs(argv) {
       throw usage("invalid empty flag");
     const next = argv[index + 1];
     if (next !== void 0 && !next.startsWith("--")) {
-      flags[key] = next;
+      recordValue(key, next);
       index += 1;
     } else {
       flags[key] = true;
       bareFlags.push(key);
     }
   }
+  const repeatedFlags = {};
+  for (const [key, values] of Object.entries(valueOccurrences)) {
+    if (values.length > 1)
+      repeatedFlags[key] = values;
+  }
   return {
     command: positionals.shift(),
     action: positionals.shift(),
     positionals,
     flags,
-    bareFlags
+    bareFlags,
+    repeatedFlags
   };
 }
+function flagStrings(parsed, name) {
+  const repeated = parsed.repeatedFlags[name];
+  if (repeated?.length)
+    return repeated;
+  const single = flagString(parsed.flags, name);
+  return single === void 0 ? [] : [single];
+}
 function flagString(flags, ...names) {
   for (const name of names) {
     const value = flags[name];
@@ -686,8 +704,8 @@ function page(ok, message) {
 }
 
 // ../morula-cli-core/dist/build-env.js
-var BUILD_VERSION = "0.1.0-alpha.7";
-var BUILD_ID = "20260917073516.nogit";
+var BUILD_VERSION = "0.1.0-alpha.8";
+var BUILD_ID = "20260921065825.nogit";
 var BUILD_CONTEXTS = {
   "local": "http://localhost:8080/api",
   "test": "https://morula.basecastle.com/api",
@@ -695,6 +713,42 @@ var BUILD_CONTEXTS = {
 };
 var BUILD_DEFAULT_CONTEXT = "prod";
 
+// ../morula-api-client/dist/agent-task.js
+var AgentTaskApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  /** 列出 AgentTask（objectId 必填；status/page/pageSize 可选） */
+  list(query = {}) {
+    return this.client.get("/agent-tasks", query);
+  }
+  /**
+   * 取消执行。
+   *
+   * 服务端语义（`agent-task.controller.ts` cancel，2026-09-20 起）：
+   * - 成功 → 200 `{ ok: true, message: 'Task cancelled' }`；
+   * - 任务不存在 → **404** `NOT_FOUND`；
+   * - 状态不允许（`completed` / `cancelled`）→ **409** `CONFLICT`（带可读原因）。
+   *
+   * 即：**失败会 reject**（不再 200 假成功，见 issues/agent-task-cancel-returns-200-on-failure.md）——
+   * 调用方按异常/退出码判断，不要假定「调用返回了就是已取消」。
+   */
+  cancel(id) {
+    return this.client.post(`/agent-tasks/${encodeURIComponent(requiredId(id))}/cancel`);
+  }
+  /** 重跑失败/已取消的执行（服务端复制原任务重新入队，返回**新** taskId） */
+  rerun(id) {
+    return this.client.post(`/agent-tasks/${encodeURIComponent(requiredId(id))}/rerun`);
+  }
+};
+function requiredId(id) {
+  const normalized = id.trim();
+  if (!normalized)
+    throw new TypeError("agent task id is required");
+  return normalized;
+}
+
 // ../morula-api-client/dist/attachment.js
 var AttachmentApi = class {
   client;
@@ -740,6 +794,13 @@ var AttachmentApi = class {
   getDownloadUrl(id) {
     return this.client.get(`/attachments/${encodeURIComponent(id)}/download-url`);
   }
+  /**
+   * 读取附件的解析产物全文（MinerU markdown）。
+   * 未解析/解析中/解析失败由服务端在返回体里说明，不当作 HTTP 错误。
+   */
+  content(id, maxChars) {
+    return this.client.get(`/attachments/${encodeURIComponent(id)}/content`, { maxChars });
+  }
   /** 更新附件关联的资源 ID */
   updateResourceId(id, resourceId) {
     return this.client.patch(`/attachments/${encodeURIComponent(id)}`, { resourceId });
@@ -770,6 +831,81 @@ var AuthApi = class {
   }
 };
 
+// ../morula-api-client/dist/autopilot.js
+var AutopilotApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  list(query = {}) {
+    return this.client.get("/agent-autopilots", query);
+  }
+  create(input) {
+    return this.client.post("/agent-autopilots", input);
+  }
+};
+
+// ../morula-api-client/dist/ci.js
+var CiApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  /** 任务面 CI 视图（本任务关联的流水线运行 + 部署记录 + 归属依据） */
+  taskView(taskId, query = {}) {
+    return this.client.get(`/agent-tasks/${encodeURIComponent(requiredId2(taskId, "task id"))}/vcs/ci`, query);
+  }
+  /** 任务面部署记录（D3：仅展示，不驱动流转） */
+  taskDeployments(taskId) {
+    return this.client.get(`/agent-tasks/${encodeURIComponent(requiredId2(taskId, "task id"))}/vcs/ci/deployments`);
+  }
+  /** 空间面 CI 巡检视图（管家主入口；`ref` / `failed` / `limit` 为服务端过滤） */
+  spaceView(spaceId, query = {}) {
+    return this.client.get(`/vcs/spaces/${encodeURIComponent(requiredId2(spaceId, "space id"))}/ci`, query);
+  }
+  /** 空间面部署记录（D3：仅展示） */
+  spaceDeployments(spaceId) {
+    return this.client.get(`/vcs/spaces/${encodeURIComponent(requiredId2(spaceId, "space id"))}/ci/deployments`);
+  }
+  /**
+   * job 日志（按 job id；服务端反查所属运行）。
+   *
+   * 两个面共用本端点：任务凭证按 tenantId 收敛，会话凭证按 `connection.spaceId === scopeId` 收敛。
+   * `truncated` 显式返回——日志被尾部截断时调用方必须知道（不能把截断当全文）。
+   */
+  jobLog(jobId, query = {}) {
+    return this.client.get(`/vcs/jobs/${encodeURIComponent(requiredId2(jobId, "job id"))}/log`, query);
+  }
+  /** 失败用例清单（平台可选能力：GitLab test_report 有、GitHub 无 → `CAPABILITY_UNSUPPORTED`） */
+  testReport(runId) {
+    return this.client.get(`/vcs/runs/${encodeURIComponent(requiredId2(runId, "run id"))}/test-report`);
+  }
+  /**
+   * 重跑整条流水线的失败 job（Phase 3；开放面 = 人 + 管家）。
+   *
+   * 只允许 failure / cancelled 的运行，其余状态服务端回 `CI_RETRY_NOT_ALLOWED`（不是 4xx）。
+   * **非幂等**：每次调用都会在平台上产生一次新的重跑，重复调用不会去重。
+   */
+  retryRun(runId) {
+    return this.client.post(`/vcs/runs/${encodeURIComponent(requiredId2(runId, "run id"))}/retry`);
+  }
+  /**
+   * 重跑单个 job（Phase 3；开放面 = 人 + 管家）。
+   *
+   * 服务端按 jobId 反查所属运行（`CI_JOB_NOT_FOUND` 覆盖「job 不存在」与「反查不到运行」两种情况）；
+   * 状态门禁与 `retryRun` 相同。非幂等。
+   */
+  retryJob(jobId) {
+    return this.client.post(`/vcs/jobs/${encodeURIComponent(requiredId2(jobId, "job id"))}/retry`);
+  }
+};
+function requiredId2(id, label) {
+  const normalized = id.trim();
+  if (!normalized)
+    throw new TypeError(`${label} is required`);
+  return normalized;
+}
+
 // ../morula-api-client/dist/client.js
 var EXIT_CODE = {
   OK: 0,
@@ -787,14 +923,16 @@ var MorulaApiError = class extends Error {
   status;
   retryable;
   details;
+  errorCode;
   name = "MorulaApiError";
-  constructor(code, message, exitCode, status2, retryable = false, details) {
+  constructor(code, message, exitCode, status2, retryable = false, details, errorCode) {
     super(message);
     this.code = code;
     this.exitCode = exitCode;
     this.status = status2;
     this.retryable = retryable;
     this.details = details;
+    this.errorCode = errorCode;
   }
 };
 var CLI_BUILD_HEADER = "X-Morula-Cli-Build";
@@ -960,28 +1098,35 @@ function isEnvelope(value) {
 function errorFromResponse(status2, parsed, raw) {
   const message = extractMessage(parsed, raw, status2);
   const details = isEnvelope(parsed) ? parsed.data : parsed;
+  const errorCode = extractErrorCode(parsed);
   if (status2 === 400 || status2 === 422) {
-    return new MorulaApiError("BAD_REQUEST", message, EXIT_CODE.USAGE, status2, false, details);
+    return new MorulaApiError("BAD_REQUEST", message, EXIT_CODE.USAGE, status2, false, details, errorCode);
   }
   if (status2 === 401) {
-    return new MorulaApiError("UNAUTHENTICATED", message, EXIT_CODE.UNAUTHENTICATED, status2, false, details);
+    return new MorulaApiError("UNAUTHENTICATED", message, EXIT_CODE.UNAUTHENTICATED, status2, false, details, errorCode);
   }
   if (status2 === 403) {
-    return new MorulaApiError("FORBIDDEN", message, EXIT_CODE.FORBIDDEN, status2, false, details);
+    return new MorulaApiError("FORBIDDEN", message, EXIT_CODE.FORBIDDEN, status2, false, details, errorCode);
   }
   if (status2 === 404) {
-    return new MorulaApiError("NOT_FOUND", message, EXIT_CODE.NOT_FOUND, status2, false, details);
+    return new MorulaApiError("NOT_FOUND", message, EXIT_CODE.NOT_FOUND, status2, false, details, errorCode);
   }
   if (status2 === 409) {
-    return new MorulaApiError("CONFLICT", message, EXIT_CODE.CONFLICT, status2, false, details);
+    return new MorulaApiError("CONFLICT", message, EXIT_CODE.CONFLICT, status2, false, details, errorCode);
   }
   if (status2 === 429) {
-    return new MorulaApiError("RATE_LIMITED", message, EXIT_CODE.UPSTREAM, status2, true, details);
+    return new MorulaApiError("RATE_LIMITED", message, EXIT_CODE.UPSTREAM, status2, true, details, errorCode);
   }
   if (status2 >= 500) {
-    return new MorulaApiError("UPSTREAM", message, EXIT_CODE.UPSTREAM, status2, true, details);
+    return new MorulaApiError("UPSTREAM", message, EXIT_CODE.UPSTREAM, status2, true, details, errorCode);
   }
-  return new MorulaApiError("HTTP_ERROR", message, EXIT_CODE.OTHER, status2, false, details);
+  return new MorulaApiError("HTTP_ERROR", message, EXIT_CODE.OTHER, status2, false, details, errorCode);
+}
+function extractErrorCode(parsed) {
+  if (!parsed || typeof parsed !== "object")
+    return void 0;
+  const value = parsed.errorCode;
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 function extractMessage(parsed, raw, status2) {
   if (parsed && typeof parsed === "object" && "message" in parsed) {
@@ -1011,25 +1156,120 @@ var CommentApi = class {
     return this.client.get("/comments", params);
   }
   get(id) {
-    return this.client.get(`/comments/${encodeURIComponent(requiredId(id))}`);
+    return this.client.get(`/comments/${encodeURIComponent(requiredId3(id))}`);
   }
   create(input) {
     return this.client.post("/comments", input);
   }
   update(id, input) {
-    return this.client.patch(`/comments/${encodeURIComponent(requiredId(id))}`, input);
+    return this.client.patch(`/comments/${encodeURIComponent(requiredId3(id))}`, input);
   }
   delete(id) {
-    return this.client.delete(`/comments/${encodeURIComponent(requiredId(id))}`);
+    return this.client.delete(`/comments/${encodeURIComponent(requiredId3(id))}`);
   }
 };
-function requiredId(id) {
+function requiredId3(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("comment id is required");
   return normalized;
 }
 
+// ../morula-api-client/dist/dashboard.js
+var DashboardApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  get(spaceId) {
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId4(spaceId))}/dashboard`);
+  }
+  statistics(spaceId) {
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId4(spaceId))}/statistics`);
+  }
+  workload(spaceId) {
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId4(spaceId))}/workload`);
+  }
+};
+function requiredId4(id) {
+  const normalized = id.trim();
+  if (!normalized)
+    throw new TypeError("space id is required");
+  return normalized;
+}
+
+// ../morula-api-client/dist/document.js
+var DocumentApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  list(query = {}) {
+    return this.client.get("/documents", query);
+  }
+  get(id) {
+    return this.client.get(`/documents/${encodeURIComponent(requiredId5(id))}`);
+  }
+  /** 已解析归档的文档内容（Markdown 正文等） */
+  artifacts(id) {
+    return this.client.get(`/documents/${encodeURIComponent(requiredId5(id))}/artifacts`);
+  }
+};
+function requiredId5(id) {
+  const normalized = String(id).trim();
+  if (!normalized)
+    throw new TypeError("document id is required");
+  return normalized;
+}
+
+// ../morula-api-client/dist/object-meta.js
+var ObjectMetaApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  list(objectId) {
+    return this.client.get(`/objects/${encodeURIComponent(requiredId6(objectId))}/agent-meta`);
+  }
+  set(objectId, key, value) {
+    return this.client.request(`/objects/${encodeURIComponent(requiredId6(objectId))}/agent-meta/${encodeURIComponent(requiredKey(key))}`, { method: "PUT", body: { value } });
+  }
+};
+function requiredId6(id) {
+  const normalized = id.trim();
+  if (!normalized)
+    throw new TypeError("object id is required");
+  return normalized;
+}
+function requiredKey(key) {
+  const normalized = key.trim();
+  if (!normalized)
+    throw new TypeError("meta key is required");
+  return normalized;
+}
+
+// ../morula-api-client/dist/repo.js
+var RepoApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  /** 目录清单（path 缺省 = 仓库根） */
+  files(spaceId, query = {}) {
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId7(spaceId))}/repo/files`, query);
+  }
+  /** 单文件内容（path 必填） */
+  read(spaceId, query) {
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId7(spaceId))}/repo/file`, query);
+  }
+};
+function requiredId7(id) {
+  const normalized = id.trim();
+  if (!normalized)
+    throw new TypeError("space id is required");
+  return normalized;
+}
+
 // ../morula-api-client/dist/report.js
 var ReportApi = class {
   client;
@@ -1040,13 +1280,13 @@ var ReportApi = class {
     return this.client.post("/agent-reports", input);
   }
   get(id) {
-    return this.client.get(`/agent-reports/${encodeURIComponent(requiredId2(id))}`);
+    return this.client.get(`/agent-reports/${encodeURIComponent(requiredId8(id))}`);
   }
   listByAutopilot(autopilotId, query = {}) {
-    return this.client.get(`/agent-autopilots/${encodeURIComponent(requiredId2(autopilotId, "autopilot"))}/reports`, { ...query });
+    return this.client.get(`/agent-autopilots/${encodeURIComponent(requiredId8(autopilotId, "autopilot"))}/reports`, { ...query });
   }
 };
-function requiredId2(id, label = "report") {
+function requiredId8(id, label = "report") {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError(`${label} id is required`);
@@ -1063,19 +1303,19 @@ var SpaceMemberApi = class {
     return this.client.get("/space-members", { spaceId, ...query });
   }
   get(id) {
-    return this.client.get(`/space-members/${encodeURIComponent(requiredId3(id))}`);
+    return this.client.get(`/space-members/${encodeURIComponent(requiredId9(id))}`);
   }
   create(input) {
     return this.client.post("/space-members", input);
   }
   update(id, input) {
-    return this.client.patch(`/space-members/${encodeURIComponent(requiredId3(id))}`, input);
+    return this.client.patch(`/space-members/${encodeURIComponent(requiredId9(id))}`, input);
   }
   delete(id) {
-    return this.client.delete(`/space-members/${encodeURIComponent(requiredId3(id))}`);
+    return this.client.delete(`/space-members/${encodeURIComponent(requiredId9(id))}`);
   }
 };
-function requiredId3(id) {
+function requiredId9(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("space member id is required");
@@ -1092,25 +1332,47 @@ var SpaceApi = class {
     return this.client.get("/spaces", query);
   }
   get(id) {
-    return this.client.get(`/spaces/${encodeURIComponent(requiredId4(id))}`);
+    return this.client.get(`/spaces/${encodeURIComponent(requiredId10(id))}`);
   }
   create(input) {
     return this.client.post("/spaces", input);
   }
   update(id, input) {
-    return this.client.patch(`/spaces/${encodeURIComponent(requiredId4(id))}`, input);
+    return this.client.patch(`/spaces/${encodeURIComponent(requiredId10(id))}`, input);
   }
   delete(id) {
-    return this.client.delete(`/spaces/${encodeURIComponent(requiredId4(id))}`);
+    return this.client.delete(`/spaces/${encodeURIComponent(requiredId10(id))}`);
   }
 };
-function requiredId4(id) {
+function requiredId10(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("space id is required");
   return normalized;
 }
 
+// ../morula-api-client/dist/steward.js
+var StewardApi = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  /** 管家信息（未接管的空间返回 null） */
+  get(projectId) {
+    return this.client.get(`/stewards/projects/${encodeURIComponent(requiredId11(projectId))}`);
+  }
+  /** 派单：建任务并派发（目标状态由 state 决定，backlog 不派发执行） */
+  dispatch(projectId, input) {
+    return this.client.post(`/stewards/projects/${encodeURIComponent(requiredId11(projectId))}/dispatch`, input);
+  }
+};
+function requiredId11(id) {
+  const normalized = id.trim();
+  if (!normalized)
+    throw new TypeError("project id is required");
+  return normalized;
+}
+
 // ../morula-api-client/dist/task.js
 var TaskApi = class {
   client;
@@ -1121,16 +1383,16 @@ var TaskApi = class {
     return this.client.get("/objects", query);
   }
   get(id) {
-    return this.client.get(`/objects/${encodeURIComponent(requiredId5(id))}`);
+    return this.client.get(`/objects/${encodeURIComponent(requiredId12(id))}`);
   }
   create(input) {
     return this.client.post("/objects", input);
   }
   update(id, input) {
-    return this.client.patch(`/objects/${encodeURIComponent(requiredId5(id))}`, input);
+    return this.client.patch(`/objects/${encodeURIComponent(requiredId12(id))}`, input);
   }
   delete(id) {
-    return this.client.delete(`/objects/${encodeURIComponent(requiredId5(id))}`);
+    return this.client.delete(`/objects/${encodeURIComponent(requiredId12(id))}`);
   }
   /** 查询空间字段模板（字段 key → id 映射、options） */
   getSchemaFields(spaceId) {
@@ -1159,7 +1421,7 @@ var TaskApi = class {
     return this.client.delete(`/object-field-values`, { objectId, schemaFieldId });
   }
 };
-function requiredId5(id) {
+function requiredId12(id) {
   const normalized = id.trim();
   if (!normalized)
     throw new TypeError("task id is required");
@@ -1183,23 +1445,39 @@ var WebhookApi = class {
 // ../morula-api-client/dist/index.js
 var MorulaClient = class {
   http;
+  agentTasks;
   attachments;
   auth;
+  autopilots;
+  ci;
   comments;
+  dashboard;
+  documents;
+  objectMeta;
   reports;
+  repos;
   tasks;
   spaces;
   spaceMembers;
+  stewards;
   webhooks;
   constructor(options) {
     this.http = new MorulaApiClient(options);
+    this.agentTasks = new AgentTaskApi(this.http);
     this.attachments = new AttachmentApi(this.http);
     this.auth = new AuthApi(this.http);
+    this.autopilots = new AutopilotApi(this.http);
+    this.ci = new CiApi(this.http);
     this.comments = new CommentApi(this.http);
+    this.dashboard = new DashboardApi(this.http);
+    this.documents = new DocumentApi(this.http);
+    this.objectMeta = new ObjectMetaApi(this.http);
     this.reports = new ReportApi(this.http);
+    this.repos = new RepoApi(this.http);
     this.tasks = new TaskApi(this.http);
     this.spaces = new SpaceApi(this.http);
     this.spaceMembers = new SpaceMemberApi(this.http);
+    this.stewards = new StewardApi(this.http);
     this.webhooks = new WebhookApi(this.http);
   }
 };
@@ -1255,7 +1533,8 @@ function renderActionHelp(base, resource, action) {
       ...f.valueHint ? { valueHint: f.valueHint } : {},
       required: f.required ?? false,
       ...f.enum ? { enum: f.enum } : {},
-      ...f.default !== void 0 ? { default: f.default } : {}
+      ...f.default !== void 0 ? { default: f.default } : {},
+      ...f.repeatable ? { repeatable: true } : {}
     })),
     examples: action.examples ?? [],
     writes: action.writes ?? "none",
@@ -1396,6 +1675,16 @@ function validateArgs(resource, action, parsed, options = {}) {
       hint: `${usageHint}  (e.g. --${flag} ${valuePart})`
     });
   }
+  for (const [name, values] of Object.entries(parsed.repeatedFlags)) {
+    if (values.length < 2)
+      continue;
+    const spec = declaredFlags.find((f) => f.name === name);
+    if (spec?.repeatable)
+      continue;
+    throw usage(`duplicate flag --${name} (given ${values.length} times; only the last value would be used)`, {
+      hint: usageHint
+    });
+  }
   for (const spec of declaredFlags) {
     if (!spec.required)
       continue;
@@ -1515,6 +1804,8 @@ function resolveToken(flags, env, context, baseUrl, saved, options) {
     return { token: explicitToken, tokenSource: "flag" };
   if (!options.excludeTaskToken && env.MORULA_TASK_TOKEN)
     return { token: env.MORULA_TASK_TOKEN, tokenSource: "env:MORULA_TASK_TOKEN" };
+  if (!options.excludeTaskToken && env.MORULA_SESSION_TOKEN)
+    return { token: env.MORULA_SESSION_TOKEN, tokenSource: "env:MORULA_SESSION_TOKEN" };
   if (env.MORULA_TOKEN)
     return { token: env.MORULA_TOKEN, tokenSource: "env:MORULA_TOKEN" };
   const savedToken = saved?.url && normalizeBaseUrl(saved.url) === baseUrl ? saved.token : void 0;
@@ -1627,6 +1918,10 @@ async function run(argv, deps = {}) {
         code: error.code,
         message: error.message,
         ...error.retryable ? { retryable: true } : {},
+        // 服务端业务错误码（如 SESSION_SCOPE_DENIED）：`code` 是按 HTTP 状态派生的粗档位，
+        // 行为契约要判断的是业务码——不打印出来，契约就永远不可执行
+        // （issues/api-client-drops-business-error-code.md）。退出码仍由 `error.exitCode` 决定。
+        ...error instanceof MorulaApiError && error.errorCode ? { errorCode: error.errorCode } : {},
         // 新增字段（可选）：可执行的下一步 + typo 建议
         ...error instanceof CliError && error.hint ? { hint: error.hint } : {},
         ...error instanceof CliError && error.didYouMean ? { didYouMean: error.didYouMean } : {}
@@ -1838,6 +2133,13 @@ async function attachmentCommand(context) {
     rejectUnknownFlags(flags, []);
     return context.client.attachments.get(requireId(positionals, "attachment get"));
   }
+  if (action === "content") {
+    rejectUnknownFlags(flags, ["max-chars"]);
+    return context.client.attachments.content(
+      requireId(positionals, "attachment content"),
+      flagNumber(flags, "max-chars")
+    );
+  }
   if (action === "download-url") {
     rejectUnknownFlags(flags, []);
     return context.client.attachments.getDownloadUrl(requireId(positionals, "attachment download-url"));
@@ -1855,6 +2157,198 @@ function requireId(positionals, command) {
   return id;
 }
 
+// ../morula-cli/src/commands/autopilot.ts
+async function autopilotCommand(context) {
+  if (!context.runtime.token)
+    throw new CliError("UNAUTHENTICATED", EXIT.UNAUTHENTICATED, "\u8BF7\u5148\u8FD0\u884C morula auth login");
+  const { action, flags } = context.parsed;
+  if (action === "list") {
+    rejectUnknownFlags(flags, ["space", "page", "page-size"]);
+    return context.client.autopilots.list({
+      spaceId: flagString(flags, "space"),
+      page: flagNumber(flags, "page"),
+      pageSize: flagNumber(flags, "page-size")
+    });
+  }
+  if (action === "create") {
+    rejectUnknownFlags(flags, ["space", "name", "runbook", "executor", "description", "cron", "vcs-connection"]);
+    const spaceId = requireFlag(flags, "space");
+    const name = requireFlag(flags, "name");
+    const runbook = requireFlag(flags, "runbook");
+    const executorKey = requireFlag(flags, "executor");
+    const description = flagString(flags, "description");
+    const cronExpr = flagString(flags, "cron");
+    const vcsConnectionId = flagString(flags, "vcs-connection");
+    return context.client.autopilots.create({
+      spaceId,
+      name,
+      runbook,
+      executorKey,
+      ...description !== void 0 ? { description } : {},
+      ...cronExpr !== void 0 ? { cronExpr } : {},
+      ...vcsConnectionId !== void 0 ? { vcsConnectionId } : {}
+    });
+  }
+  throw usage("usage: morula autopilot <list|create>");
+}
+
+// ../morula-cli/src/commands/ci.ts
+async function ciCommand(context) {
+  if (!context.runtime.token)
+    throw new CliError("UNAUTHENTICATED", EXIT.UNAUTHENTICATED, "\u8BF7\u5148\u8FD0\u884C morula auth login");
+  const { action } = context.parsed;
+  if (action === "status")
+    return ciStatus(context);
+  if (action === "log")
+    return ciLog(context);
+  if (action === "deployments")
+    return ciDeployments(context);
+  if (action === "test-report")
+    return ciTestReport(context);
+  if (action === "retry")
+    return ciRetry(context);
+  throw usage("usage: morula ci <status|log|deployments|test-report|retry>");
+}
+async function ciStatus(context) {
+  const { positionals, flags } = context.parsed;
+  rejectUnknownFlags(flags, ["space", "repo", "ref", "failed", "limit"]);
+  const repo = flagString(flags, "repo");
+  const ref = flagString(flags, "ref");
+  const failed = flagBoolean(flags, "failed");
+  const limit = flagNumber(flags, "limit");
+  if (limit != null && (!Number.isInteger(limit) || limit <= 0))
+    throw usage("--limit \u5FC5\u987B\u662F\u6B63\u6574\u6570");
+  const face = resolveFace(context, "usage: morula ci status <taskId> [--repo <owner/name>] [--limit <n>] | morula ci status --space <spaceId> [--ref <branch>] [--failed] [--limit <n>]");
+  if (face.kind === "space") {
+    if (repo)
+      throw usage("--repo \u53EA\u5728\u4EFB\u52A1\u9762\u53EF\u7528\uFF1A\u7A7A\u95F4\u9762\u8BF7\u7528 --ref \u8FC7\u6EE4\u5206\u652F\uFF08\u670D\u52A1\u7AEF\u4E0D\u652F\u6301\u6309\u4ED3\u5E93\u8FC7\u6EE4\uFF09");
+    const result2 = await context.client.ci.spaceView(face.spaceId, {
+      ...ref ? { ref } : {},
+      ...failed ? { failed: true } : {},
+      ...limit ? { limit } : {}
+    });
+    if (result2.ok === false)
+      throw ciFailure(result2);
+    return result2;
+  }
+  const result = await context.client.ci.taskView(face.taskId, { ...limit ? { limit } : {} });
+  if (result.ok === false)
+    throw ciFailure(result);
+  if (!repo)
+    return result;
+  const runs = result.runs.filter((run2) => run2.repoFullName === repo);
+  return { ...result, runs, repoFilter: { repo, total: result.runs.length, matched: runs.length } };
+}
+async function ciLog(context) {
+  const { flags } = context.parsed;
+  rejectUnknownFlags(flags, ["space", "job", "tail"]);
+  const jobId = flagString(flags, "job");
+  if (!jobId)
+    throw usage("usage: morula ci log <taskId> --job <jobId> [--tail <n>] | morula ci log --space <spaceId> --job <jobId> [--tail <n>]");
+  const tail = flagNumber(flags, "tail");
+  if (tail != null && (!Number.isInteger(tail) || tail <= 0))
+    throw usage("--tail \u5FC5\u987B\u662F\u6B63\u6574\u6570\uFF08\u4FDD\u7559\u7684\u65E5\u5FD7\u5C3E\u90E8\u5B57\u8282\u6570\uFF09");
+  resolveFace(context, "usage: morula ci log <taskId> --job <jobId> [--tail <n>] | morula ci log --space <spaceId> --job <jobId> [--tail <n>]");
+  const result = await context.client.ci.jobLog(jobId, { ...tail ? { tail } : {} });
+  if (result.ok === false)
+    throw ciFailure(result);
+  return result;
+}
+async function ciDeployments(context) {
+  const { flags } = context.parsed;
+  rejectUnknownFlags(flags, ["space"]);
+  const face = resolveFace(context, "usage: morula ci deployments <taskId> | morula ci deployments --space <spaceId>");
+  const result = face.kind === "space" ? await context.client.ci.spaceDeployments(face.spaceId) : await context.client.ci.taskDeployments(face.taskId);
+  if (result.ok === false)
+    throw ciFailure(result);
+  return result;
+}
+async function ciTestReport(context) {
+  const { flags } = context.parsed;
+  rejectUnknownFlags(flags, ["space", "run"]);
+  const runFlag = flagString(flags, "run");
+  const face = resolveFace(context, "usage: morula ci test-report <taskId> [--run <runId>] | morula ci test-report --space <spaceId> [--run <runId>]");
+  let runId = runFlag;
+  if (!runId) {
+    const view = face.kind === "space" ? await context.client.ci.spaceView(face.spaceId) : await context.client.ci.taskView(face.taskId);
+    if (view.ok === false)
+      throw ciFailure(view);
+    runId = view.runs[0]?.id;
+    if (!runId) {
+      throw new CliError(
+        "CI_RUN_NOT_FOUND",
+        EXIT.NOT_FOUND,
+        face.kind === "space" ? "\u8BE5\u7A7A\u95F4\u6CA1\u6709\u6D41\u6C34\u7EBF\u8FD0\u884C\u8BB0\u5F55\uFF0C\u53D6\u4E0D\u5230\u5931\u8D25\u7528\u4F8B\u6E05\u5355\uFF08\u53EF\u5148\u7528 morula ci status --space <id> \u786E\u8BA4\uFF09" : "\u672C\u4EFB\u52A1\u6CA1\u6709\u6D41\u6C34\u7EBF\u8FD0\u884C\u8BB0\u5F55\uFF0C\u53D6\u4E0D\u5230\u5931\u8D25\u7528\u4F8B\u6E05\u5355\uFF08\u53EF\u5148\u7528 morula ci status <taskId> \u786E\u8BA4\uFF09"
+      );
+    }
+  }
+  const result = await context.client.ci.testReport(runId);
+  if (result.ok === false)
+    throw ciFailure(result);
+  return result;
+}
+async function ciRetry(context) {
+  const { positionals, flags } = context.parsed;
+  rejectUnknownFlags(flags, ["space", "run", "job"]);
+  const usageHint = "usage: morula ci retry --space <spaceId> [--run <runId>] [--job <jobId>]";
+  if (positionals.length)
+    throw usage(`\u91CD\u8DD1\u53EA\u5728\u7A7A\u95F4\u9762\u5F00\u653E\uFF1A\u8BF7\u7528 --space <spaceId>\uFF08\u4EFB\u52A1\u9762\u4E0D\u63D0\u4F9B retry\uFF09\u3002${usageHint}`);
+  const runId = flagString(flags, "run");
+  const jobId = flagString(flags, "job");
+  if (runId && jobId)
+    throw usage(`--run \u4E0E --job \u4E92\u65A5\uFF0C\u53EA\u80FD\u7ED9\u4E00\u4E2A\uFF08${usageHint}\uFF09`);
+  const spaceId = flagString(flags, "space");
+  if (!spaceId)
+    throw usage(usageHint);
+  if (jobId) {
+    const result2 = await context.client.ci.retryJob(jobId);
+    if (result2.ok === false)
+      throw ciFailure(result2, "\u64CD\u4F5C");
+    return result2;
+  }
+  let targetRunId = runId;
+  if (!targetRunId) {
+    const view = await context.client.ci.spaceView(spaceId, { failed: true });
+    if (view.ok === false)
+      throw ciFailure(view);
+    targetRunId = view.runs[0]?.id;
+    if (!targetRunId) {
+      throw new CliError(
+        "CI_RUN_NOT_FOUND",
+        EXIT.NOT_FOUND,
+        `\u7A7A\u95F4 ${spaceId} \u6CA1\u6709\u5931\u8D25\u7684\u6D41\u6C34\u7EBF\u8FD0\u884C\u53EF\u91CD\u8DD1\uFF08\u53EF\u5148\u7528 morula ci status --space ${spaceId} --failed \u786E\u8BA4\uFF09`
+      );
+    }
+  }
+  const result = await context.client.ci.retryRun(targetRunId);
+  if (result.ok === false)
+    throw ciFailure(result, "\u64CD\u4F5C");
+  return result;
+}
+function resolveFace(context, usageHint) {
+  const taskId = context.parsed.positionals[0]?.trim();
+  const spaceId = flagString(context.parsed.flags, "space");
+  if (taskId && spaceId)
+    throw usage(`<taskId> \u4E0E --space \u4E92\u65A5\uFF0C\u53EA\u80FD\u7ED9\u4E00\u4E2A\uFF08${usageHint}\uFF09`);
+  if (!taskId && !spaceId)
+    throw usage(usageHint);
+  return taskId ? { kind: "task", taskId } : { kind: "space", spaceId };
+}
+function ciFailure(failure, verb = "\u67E5\u8BE2") {
+  return new CliError(
+    failure.code,
+    exitForCiCode(failure.code),
+    `CI ${verb}\u5931\u8D25: ${failure.message || "\u672A\u77E5\u539F\u56E0"}\uFF08${failure.code}\uFF09`
+  );
+}
+function exitForCiCode(code) {
+  if (code === "CI_RETRY_NOT_ALLOWED" || code === "CI_JOB_NOT_MANUAL")
+    return EXIT.CONFLICT;
+  if (code === "CI_JOB_NOT_FOUND" || code === "CI_RUN_NOT_FOUND" || code === "TASK_NOT_FOUND" || code === "OBJECT_NOT_FOUND")
+    return EXIT.NOT_FOUND;
+  return EXIT.OTHER;
+}
+
 // ../morula-cli/src/commands/comment.ts
 function detectCommentFormat(text) {
   if (!text)
@@ -1888,16 +2382,19 @@ async function commentCommand(context) {
     return context.client.comments.get(id);
   }
   if (action === "add") {
-    rejectUnknownFlags(flags, ["object", "content", "parent", "format"]);
+    rejectUnknownFlags(flags, ["object", "content", "parent", "format", "mention"]);
     const objectId = requireFlag(flags, "object");
     const content = requireFlag(flags, "content");
     const formatFlag = flagString(flags, "format");
     const format = formatFlag === "markdown" || formatFlag === "plain" || formatFlag === "richtext" ? formatFlag : detectCommentFormat(content);
+    const mentions = parseMentions(flagStrings(context.parsed, "mention"));
     const input = compact({
       objectId,
       content,
       parentCommentId: flagString(flags, "parent"),
-      contentFormat: format
+      contentFormat: format,
+      // 无 --mention 时**不带** mentions 字段（服务端按缺省处理，不发任何通知）
+      ...mentions.length ? { mentions } : {}
     });
     return context.client.comments.create(input);
   }
@@ -1923,6 +2420,89 @@ async function commentCommand(context) {
 function compact(value) {
   return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== void 0));
 }
+function parseMentions(rawValues) {
+  const seen = /* @__PURE__ */ new Set();
+  const mentions = [];
+  for (const raw of rawValues) {
+    for (const part of raw.split(",")) {
+      const principalId = part.trim();
+      if (!principalId || seen.has(principalId))
+        continue;
+      seen.add(principalId);
+      mentions.push({ type: "member", principalId });
+    }
+  }
+  return mentions;
+}
+
+// ../morula-cli/src/commands/dashboard.ts
+async function dashboardCommand(context) {
+  if (!context.runtime.token)
+    throw new CliError("UNAUTHENTICATED", EXIT.UNAUTHENTICATED, "\u8BF7\u5148\u8FD0\u884C morula auth login");
+  const { action, flags } = context.parsed;
+  if (action === "get") {
+    rejectUnknownFlags(flags, ["space"]);
+    return context.client.dashboard.get(requireFlag(flags, "space"));
+  }
+  if (action === "statistics") {
+    rejectUnknownFlags(flags, ["space"]);
+    return context.client.dashboard.statistics(requireFlag(flags, "space"));
+  }
+  if (action === "workload") {
+    rejectUnknownFlags(flags, ["space"]);
+    return context.client.dashboard.workload(requireFlag(flags, "space"));
+  }
+  throw usage("usage: morula dashboard <get|statistics|workload>");
+}
+
+// ../morula-cli/src/commands/document.ts
+async function documentCommand(context) {
+  if (!context.runtime.token)
+    throw new CliError("UNAUTHENTICATED", EXIT.UNAUTHENTICATED, "\u8BF7\u5148\u8FD0\u884C morula auth login");
+  const { action, positionals, flags } = context.parsed;
+  if (action === "list") {
+    rejectUnknownFlags(flags, ["page", "page-size"]);
+    return context.client.documents.list({
+      page: flagNumber(flags, "page"),
+      pageSize: flagNumber(flags, "page-size")
+    });
+  }
+  if (action === "get") {
+    rejectUnknownFlags(flags, []);
+    return context.client.documents.get(requireId2(positionals, "document get"));
+  }
+  if (action === "artifacts") {
+    rejectUnknownFlags(flags, []);
+    return context.client.documents.artifacts(requireId2(positionals, "document artifacts"));
+  }
+  throw usage("usage: morula document <list|get|artifacts>");
+}
+function requireId2(positionals, command) {
+  const id = positionals[0]?.trim();
+  if (!id)
+    throw usage(`usage: morula ${command} <id>`);
+  return id;
+}
+
+// ../morula-cli/src/commands/object-meta.ts
+async function objectMetaCommand(context) {
+  if (!context.runtime.token)
+    throw new CliError("UNAUTHENTICATED", EXIT.UNAUTHENTICATED, "\u8BF7\u5148\u8FD0\u884C morula auth login");
+  const { action, flags } = context.parsed;
+  if (action === "get") {
+    rejectUnknownFlags(flags, ["object"]);
+    return context.client.objectMeta.list(requireFlag(flags, "object"));
+  }
+  if (action === "set") {
+    rejectUnknownFlags(flags, ["object", "key", "value"]);
+    return context.client.objectMeta.set(
+      requireFlag(flags, "object"),
+      requireFlag(flags, "key"),
+      requireFlag(flags, "value")
+    );
+  }
+  throw usage("usage: morula object-meta <get|set>");
+}
 
 // ../morula-cli/src/commands/repo.ts
 import { execFileSync } from "node:child_process";
@@ -2000,7 +2580,30 @@ async function repoCommand(context) {
   if (action === "mr" && positionals[0] === "diff") {
     return mrDiff(context, flags);
   }
-  throw usage("usage: morula repo <list|checkout|prepare|mr create|mr list|mr comment|mr get|mr diff>");
+  if (action === "files") {
+    rejectUnknownFlags(flags, ["space", "repo", "path", "ref"]);
+    const spaceId = flagString(flags, "space");
+    if (!spaceId)
+      throw usage("usage: morula repo files --space <id> [--repo <owner/name>] [--path <p>] [--ref <r>]");
+    return context.client.repos.files(spaceId, {
+      repo: flagString(flags, "repo"),
+      path: flagString(flags, "path"),
+      ref: flagString(flags, "ref")
+    });
+  }
+  if (action === "read") {
+    rejectUnknownFlags(flags, ["space", "repo", "path", "ref"]);
+    const spaceId = flagString(flags, "space");
+    const path = flagString(flags, "path");
+    if (!spaceId || !path)
+      throw usage("usage: morula repo read --space <id> --path <p> [--repo <owner/name>] [--ref <r>]");
+    return context.client.repos.read(spaceId, {
+      path,
+      repo: flagString(flags, "repo"),
+      ref: flagString(flags, "ref")
+    });
+  }
+  throw usage("usage: morula repo <list|checkout|prepare|files|read|mr create|mr list|mr comment|mr get|mr diff>");
 }
 function resolveMrBase(flagBase, env = process.env) {
   return env.MORULA_BASE_BRANCH?.trim() || flagBase?.trim() || "main";
@@ -2114,7 +2717,7 @@ async function mrCreateViaPushOptions(input) {
       const list = listRes.ok ? await listRes.json().catch(() => null) : null;
       const existing = Array.isArray(list) ? list[0] : null;
       if (existing?.iid) {
-        console.log("[morula-cli] mr create \u5206\u652F\u5DF2\u6709 opened MR\uFF0C\u590D\u7528\u73B0\u6709 MR");
+        process.stderr.write("[morula-cli] mr create \u5206\u652F\u5DF2\u6709 opened MR\uFF0C\u590D\u7528\u73B0\u6709 MR\n");
         return { ok: true, repoFullName, branch, base, taskCode, title, mrUrl: existing.web_url ?? `${gitlabBase}/${repoFullName}/-/merge_requests/${existing.iid}` };
       }
       if (listRes.ok) {
@@ -2499,7 +3102,901 @@ async function spaceCommand(context) {
       throw usage("usage: morula space get <id>");
     return context.client.spaces.get(id);
   }
-  throw usage("usage: morula space <list|get>");
+  if (action === "create") {
+    rejectUnknownFlags(flags, ["name", "description", "code", "visibility"]);
+    return context.client.spaces.create({
+      name: requireFlag(flags, "name"),
+      description: flagString(flags, "description"),
+      code: flagString(flags, "code"),
+      visibility: flagString(flags, "visibility")
+    });
+  }
+  if (action === "update") {
+    rejectUnknownFlags(flags, ["name", "description", "visibility"]);
+    const id = requireId3(positionals, "space update");
+    const input = {
+      name: flagString(flags, "name"),
+      description: flagString(flags, "description"),
+      visibility: flagString(flags, "visibility")
+    };
+    if (Object.values(input).every((value) => value === void 0))
+      throw usage("space update \u81F3\u5C11\u9700\u8981\u4E00\u4E2A\u5B57\u6BB5\u65D7\u6807\uFF08--name / --description / --visibility\uFF09");
+    return context.client.spaces.update(id, input);
+  }
+  if (action === "delete") {
+    rejectUnknownFlags(flags, []);
+    return context.client.spaces.delete(requireId3(positionals, "space delete"));
+  }
+  throw usage("usage: morula space <list|get|create|update|delete>");
+}
+function requireId3(positionals, command) {
+  const id = positionals[0]?.trim();
+  if (!id)
+    throw usage(`usage: morula ${command} <id>`);
+  return id;
+}
+
+// ../morula-cli/src/commands/spec.ts
+var SPEC = {
+  name: "morula",
+  summary: "Agent-first CLI for Morula task management (plugin surface, injected into task workspaces). Success output is JSON on stdout; errors are JSON on stderr.",
+  resources: [
+    {
+      resource: "auth",
+      summary: "SkyDoor authentication (shared config with morula-runtime)",
+      actions: [
+        {
+          action: "login",
+          summary: "browser SkyDoor SSO using PKCE and loopback callback (writes ~/.morula-cli/config.yaml)",
+          flags: [{ name: "url", type: "string", valueHint: "<baseUrl>", description: "server base URL to log in to" }],
+          examples: ["morula auth login"],
+          writes: "local",
+          interactive: true,
+          emits: ["loggedIn", "context", "baseUrl", "expiresIn"]
+        },
+        {
+          action: "logout",
+          summary: "remove the current context token",
+          flags: [],
+          examples: ["morula auth logout"],
+          writes: "local",
+          idempotent: true,
+          emits: ["loggedIn", "context"]
+        },
+        {
+          action: "status",
+          summary: "show context, endpoint, and authentication state",
+          flags: [],
+          examples: ["morula auth status"],
+          writes: "none",
+          idempotent: true,
+          emits: ["loggedIn", "context", "baseUrl", "user", "expired"]
+        }
+      ]
+    },
+    {
+      resource: "task",
+      summary: "task (business Object) read/write + AgentTask machine protocol (branch/state/analysis-verdict/inbox)",
+      actions: [
+        {
+          action: "list",
+          summary: "list tasks (--mine: \u4EC5\u6211\u8D1F\u8D23\u7684\uFF1B--field key=value \u81EA\u5B9A\u4E49\u5B57\u6BB5\u7B5B\u9009\uFF0C\u9700 --space)",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "space id" },
+            { name: "mine", type: "boolean", description: "\u4EC5\u6211\u8D1F\u8D23\u7684\uFF08\u4E0E --assignee \u4E92\u65A5\uFF09" },
+            { name: "assignee", type: "string", valueHint: "<principalId>", description: "\u6309\u8D1F\u8D23\u4EBA\u8FC7\u6EE4" },
+            { name: "principal", type: "string", valueHint: "<id>", description: "\u6309\u521B\u5EFA\u4EBA\u8FC7\u6EE4" },
+            { name: "page", type: "number", valueHint: "<n>", description: "\u9875\u7801" },
+            { name: "page-size", type: "number", valueHint: "<n>", description: "\u6BCF\u9875\u6761\u6570" },
+            { name: "search", type: "string", valueHint: "<text>", description: "\u5173\u952E\u8BCD\u641C\u7D22" },
+            { name: "priority", type: "string", valueHint: "<low|medium|high|urgent>", description: "\u4F18\u5148\u7EA7\u8FC7\u6EE4" },
+            { name: "state", type: "string", valueHint: "<id>", description: "\u72B6\u6001\u8FC7\u6EE4" },
+            { name: "sort", type: "string", valueHint: "<field>", description: "\u6392\u5E8F\u5B57\u6BB5" },
+            { name: "order", type: "string", valueHint: "<asc|desc>", description: "\u6392\u5E8F\u65B9\u5411" },
+            { name: "field", type: "string", valueHint: "key=value[,key=value]", description: "\u81EA\u5B9A\u4E49\u5B57\u6BB5\u7B49\u503C\u7B5B\u9009\uFF08\u591A\u6761\u4EF6 AND\uFF1B\u9700 --space \u89E3\u6790\u5B57\u6BB5\u6A21\u677F\uFF09" }
+          ],
+          examples: ["morula task list --space <id>", "morula task list --mine", "morula task list --space <id> --field priority=p1"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "create",
+          summary: "create task (\u5FC5\u586B --space/--title\uFF1B\u843D backlog \u7531\u670D\u52A1\u7AEF\u51B3\u5B9A\u521D\u59CB\u72B6\u6001)",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "title", type: "string", valueHint: "<text>", description: "\u6807\u9898\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "description", type: "string", valueHint: "<text>", description: "\u63CF\u8FF0\uFF08\u683C\u5F0F\u81EA\u52A8\u68C0\u6D4B\uFF09" },
+            { name: "priority", type: "string", valueHint: "<low|medium|high|urgent>", description: "\u4F18\u5148\u7EA7" },
+            { name: "state", type: "string", valueHint: "<id>", description: "\u521D\u59CB\u72B6\u6001\uFF08\u4E1A\u52A1 Object state id\uFF09" },
+            { name: "owner", type: "string", valueHint: "<principalId>", description: "\u8D1F\u8D23\u4EBA\uFF08\u4EC5\u521B\u5EFA\u65F6\uFF09" },
+            { name: "assignee", type: "string", valueHint: "<principalId>", description: "\u7ECF\u529E\u4EBA" },
+            { name: "visibility", type: "string", valueHint: "<value>", description: "\u53EF\u89C1\u6027" },
+            { name: "estimate-hours", type: "number", valueHint: "<n>", description: "\u9884\u4F30\u5DE5\u65F6" },
+            { name: "schema", type: "string", valueHint: "<id>", description: "\u5B57\u6BB5\u6A21\u677F" },
+            { name: "sort-order", type: "number", valueHint: "<n>", description: "\u6392\u5E8F\u53F7" },
+            { name: "field", type: "string", valueHint: "key=value[,key=value]", description: "\u81EA\u5B9A\u4E49\u5B57\u6BB5 upsert\uFF08\u521B\u5EFA\u540E\u5199\u5165\uFF09" }
+          ],
+          examples: ["morula task create --space <id> --title <text>"],
+          writes: "remote"
+        },
+        {
+          action: "get",
+          summary: "get task details. No argument = the current AgentTask (id resolved from MORULA_TASK_ID / .morula/checkout.json). With an id = the business Object (title/description)",
+          args: [{ name: "objectId", required: false, description: "\u4E1A\u52A1\u4EFB\u52A1\uFF08Object\uFF09ID\uFF1B\u7701\u7565 = \u5F53\u524D AgentTask \u8BE6\u60C5" }],
+          flags: [],
+          examples: ["morula task get", "morula task get <objectId>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "update",
+          summary: "update task (--state here is the business Object state id, NOT the AgentTask state code \u2014 see `task state`)",
+          args: [{ name: "id", required: true, description: "\u4EFB\u52A1\uFF08Object\uFF09ID" }],
+          flags: [
+            { name: "title", type: "string", valueHint: "<text>", description: "\u6807\u9898" },
+            { name: "description", type: "string", valueHint: "<text>", description: "\u63CF\u8FF0" },
+            { name: "priority", type: "string", valueHint: "<low|medium|high|urgent>", description: "\u4F18\u5148\u7EA7" },
+            { name: "state", type: "string", valueHint: "<id>", description: "\u72B6\u6001\uFF08\u4E1A\u52A1 Object state id\uFF09" },
+            { name: "assignee", type: "string", valueHint: "<principalId>", description: "\u7ECF\u529E\u4EBA" },
+            { name: "visibility", type: "string", valueHint: "<value>", description: "\u53EF\u89C1\u6027" },
+            { name: "estimate-hours", type: "number", valueHint: "<n>", description: "\u9884\u4F30\u5DE5\u65F6" },
+            { name: "schema", type: "string", valueHint: "<id>", description: "\u5B57\u6BB5\u6A21\u677F" },
+            { name: "sort-order", type: "number", valueHint: "<n>", description: "\u6392\u5E8F\u53F7" },
+            { name: "field", type: "string", valueHint: "key=value[,key=value]", description: "\u81EA\u5B9A\u4E49\u5B57\u6BB5 upsert\uFF08\u7A7A value = \u6E05\u7A7A\uFF09" }
+          ],
+          examples: ["morula task update <id> --title <text>"],
+          writes: "remote"
+        },
+        {
+          action: "delete",
+          summary: "hard delete task",
+          args: [{ name: "id", required: true, description: "\u4EFB\u52A1\uFF08Object\uFF09ID" }],
+          flags: [],
+          examples: ["morula task delete <id>"],
+          writes: "remote"
+        },
+        {
+          action: "branch",
+          summary: "report the final branch name for an agent task (machine protocol; agent naming, runtimeId from env; --repo: secondary repo in a multi-repo task)",
+          args: [{ name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID\uFF08morula task get \u65E0\u53C2\u8FD4\u56DE\u7684 id\uFF09" }],
+          flags: [
+            { name: "name", type: "string", valueHint: "<branch>", description: "\u5206\u652F\u540D\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u6B21\u4ED3\u5E93\uFF08\u591A\u4ED3\u5E93\u4EFB\u52A1\u7684\u5206\u652F\u9010\u4ED3\u4E0A\u62A5\uFF09" }
+          ],
+          examples: ["morula task branch <taskId> --name <type>/<code>-<slug>"],
+          writes: "remote"
+        },
+        {
+          action: "state",
+          summary: "self-transition task state (machine protocol; agent drives todo\u2192in_progress\u2192review, runtimeId from env)",
+          args: [{ name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID" }],
+          flags: [{ name: "state", type: "string", valueHint: "<in_progress|review>", description: "\u76EE\u6807\u72B6\u6001 code\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula task state <taskId> --state in_progress"],
+          writes: "remote"
+        },
+        {
+          action: "analysis-verdict",
+          summary: "report the task-analysis verdict (machine protocol; ready \u2192 platform auto-starts development, blocked \u2192 task stays in analysis)",
+          args: [{ name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID" }],
+          flags: [
+            { name: "verdict", type: "string", valueHint: "<ready|blocked>", enum: ["ready", "blocked"], description: "\u5206\u6790\u7ED3\u8BBA\uFF08\u5FC5\u586B\uFF1B\u4EC5\u4EFB\u52A1\u5206\u6790\u4EFB\u52A1\u53EF\u4E0A\u62A5\uFF09", required: true },
+            { name: "reason", type: "string", valueHint: "<text>", description: "blocked \u65F6\u7684\u963B\u585E/\u5F85\u6F84\u6E05\u539F\u56E0" }
+          ],
+          examples: ["morula task analysis-verdict <taskId> --verdict ready"],
+          writes: "remote"
+        },
+        {
+          action: "inbox",
+          summary: "checkpoint: pull this thread's unconsumed messages into the current turn (machine protocol; --peek reads without marking them consumed)",
+          flags: [
+            { name: "peek", type: "boolean", description: "\u53EA\u8BFB\uFF0C\u4E0D\u6807\u8BB0\u6D88\u8D39" },
+            { name: "after-seq", type: "number", valueHint: "<n>", description: "\u4ECE\u8BE5 seq \u4E4B\u540E\u62C9\u53D6" }
+          ],
+          examples: ["morula task inbox", "morula task inbox --peek"],
+          writes: "remote"
+        },
+        {
+          action: "agent-tasks",
+          summary: "list the AgentTask executions of a business task (Object). AgentTask UUID \u2260 \u4E1A\u52A1\u4EFB\u52A1 id \u2014 cancel/rerun \u8981\u7684\u662F\u8FD9\u91CC\u7684 id",
+          flags: [
+            { name: "object", type: "string", valueHint: "<objectId>", description: "\u4E1A\u52A1\u4EFB\u52A1\uFF08Object\uFF09ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "status", type: "string", valueHint: "<queued|dispatched|running|awaiting_approval|completed|failed|cancelled>", description: "\u6309\u5355\u4E2A\u72B6\u6001\u8FC7\u6EE4\uFF08\u7F3A\u7701 = \u5168\u90E8\uFF1B\u670D\u52A1\u7AEF\u4E0D\u505A\u679A\u4E3E\u6821\u9A8C\uFF0C\u975E\u6CD5\u503C\u53EA\u8FD4\u56DE\u7A7A\uFF09" },
+            { name: "page", type: "number", valueHint: "<n>", description: "\u9875\u7801" },
+            { name: "page-size", type: "number", valueHint: "<n>", description: "\u6BCF\u9875\u6761\u6570\uFF08\u670D\u52A1\u7AEF\u7F3A\u7701 20\uFF09" }
+          ],
+          examples: ["morula task agent-tasks --object <objectId>", "morula task agent-tasks --object <objectId> --status failed"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "cancel",
+          summary: "cancel a running execution (POST /agent-tasks/:id/cancel). queued/dispatched/running/awaiting_approval/failed \u53EF\u53D6\u6D88\uFF1Bcompleted/cancelled \u4E0D\u53EF\uFF08409 CONFLICT\uFF09\uFF1B\u4EFB\u52A1\u4E0D\u5B58\u5728 404 NOT_FOUND\u3002\u6210\u529F\u8FD4\u56DE { ok: true }\u2014\u2014**\u975E\u96F6\u9000\u51FA\u5373\u672A\u53D6\u6D88**\uFF0C\u4E0D\u8981\u5411\u7528\u6237\u6C47\u62A5\u300C\u5DF2\u505C\u6389\u300D",
+          args: [{ name: "taskId", required: true, description: "AgentTask UUID\uFF08\u6765\u81EA morula task agent-tasks\uFF09" }],
+          flags: [],
+          examples: ["morula task cancel <taskId>"],
+          writes: "remote"
+        },
+        {
+          action: "rerun",
+          summary: "rerun a failed/cancelled execution (POST /agent-tasks/:id/rerun; copies the task and re-queues it \u2192 returns a NEW taskId). \u4EC5 failed/cancelled \u53EF\u91CD\u8DD1\uFF0C\u5176\u4ED6\u72B6\u6001 ok:false + code CONFLICT\uFF1B10s \u5185\u5DF2\u6709\u6D3B\u8DC3\u91CD\u8DD1\u4E3A ALREADY_QUEUED",
+          args: [{ name: "taskId", required: true, description: "AgentTask UUID\uFF08\u6765\u81EA morula task agent-tasks\uFF09" }],
+          flags: [],
+          examples: ["morula task rerun <taskId>"],
+          writes: "remote"
+        }
+      ]
+    },
+    {
+      resource: "space",
+      summary: "space (project) read/write",
+      actions: [
+        {
+          action: "list",
+          summary: "list visible spaces",
+          flags: [
+            { name: "page", type: "number", valueHint: "<n>", description: "\u9875\u7801" },
+            { name: "page-size", type: "number", valueHint: "<n>", description: "\u6BCF\u9875\u6761\u6570" },
+            { name: "keyword", type: "string", valueHint: "<text>", description: "\u5173\u952E\u8BCD" }
+          ],
+          examples: ["morula space list"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "get",
+          summary: "get space details",
+          args: [{ name: "id", required: true, description: "\u7A7A\u95F4 ID" }],
+          flags: [],
+          examples: ["morula space get <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "create",
+          summary: "create space (project)",
+          flags: [
+            { name: "name", type: "string", valueHint: "<text>", description: "\u7A7A\u95F4\u540D\u79F0\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "description", type: "string", valueHint: "<text>", description: "\u63CF\u8FF0" },
+            { name: "code", type: "string", valueHint: "<code>", description: "\u7A7A\u95F4\u7F16\u53F7\uFF08\u7F3A\u7701\u7531\u670D\u52A1\u7AEF\u751F\u6210\uFF09" },
+            { name: "visibility", type: "string", valueHint: "<private|internal|public>", enum: ["private", "internal", "public"], description: "\u53EF\u89C1\u6027" }
+          ],
+          examples: ["morula space create --name <text>"],
+          writes: "remote"
+        },
+        {
+          action: "update",
+          summary: "update space (\u81F3\u5C11\u4E00\u4E2A\u5B57\u6BB5\u65D7\u6807)",
+          args: [{ name: "id", required: true, description: "\u7A7A\u95F4 ID" }],
+          flags: [
+            { name: "name", type: "string", valueHint: "<text>", description: "\u7A7A\u95F4\u540D\u79F0" },
+            { name: "description", type: "string", valueHint: "<text>", description: "\u63CF\u8FF0" },
+            { name: "visibility", type: "string", valueHint: "<private|internal|public>", enum: ["private", "internal", "public"], description: "\u53EF\u89C1\u6027" }
+          ],
+          examples: ["morula space update <id> --name <text>"],
+          writes: "remote"
+        },
+        {
+          action: "delete",
+          summary: "delete space",
+          args: [{ name: "id", required: true, description: "\u7A7A\u95F4 ID" }],
+          flags: [],
+          examples: ["morula space delete <id>"],
+          writes: "remote"
+        }
+      ]
+    },
+    {
+      resource: "space-member",
+      summary: "space member management (admin operations)",
+      actions: [
+        {
+          action: "list",
+          summary: "list space members",
+          flags: [{ name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula space-member list --space <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "add",
+          summary: "add member to space",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "principal", type: "string", valueHint: "<id>", description: "\u6210\u5458 principalId\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "role", type: "string", valueHint: "<admin|member>", enum: ["admin", "member"], description: "\u89D2\u8272\uFF08\u7F3A\u7701 member\uFF09" }
+          ],
+          examples: ["morula space-member add --space <id> --principal <id>"],
+          writes: "remote"
+        },
+        {
+          action: "update",
+          summary: "update member role",
+          args: [{ name: "memberId", required: true, description: "\u6210\u5458\u884C ID" }],
+          flags: [{ name: "role", type: "string", valueHint: "<admin|member>", enum: ["admin", "member"], description: "\u65B0\u89D2\u8272\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula space-member update <memberId> --role admin"],
+          writes: "remote"
+        },
+        {
+          action: "remove",
+          summary: "remove member from space",
+          args: [{ name: "memberId", required: true, description: "\u6210\u5458\u884C ID" }],
+          flags: [],
+          examples: ["morula space-member remove <memberId>"],
+          writes: "remote"
+        }
+      ]
+    },
+    {
+      resource: "steward",
+      summary: "space steward (project-level agent): read takeover state / dispatch a task with an explicit target state",
+      actions: [
+        {
+          action: "get",
+          summary: "get the steward record of a space (null = \u672A\u63A5\u7BA1)",
+          flags: [{ name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4\uFF08\u9879\u76EE\uFF09ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula steward get --space <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "dispatch",
+          summary: "dispatch a task: create the task and hand it to the pipeline. --state backlog = \u843D\u5F85\u89C4\u5212\uFF08\u4E0D\u6D3E\u53D1\u6267\u884C\uFF0C\u670D\u52A1\u7AEF\u4E0D\u5EFA AgentTask\uFF09\uFF1B\u7F3A\u7701 todo\uFF08\u5F85\u5206\u6790\uFF09",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4\uFF08\u9879\u76EE\uFF09ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "title", type: "string", valueHint: "<text>", description: "\u4EFB\u52A1\u6807\u9898\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "description", type: "string", valueHint: "<text>", description: "\u4EFB\u52A1\u63CF\u8FF0" },
+            { name: "state", type: "string", valueHint: "<backlog|todo|in_progress>", enum: ["backlog", "todo", "in_progress"], description: "\u76EE\u6807\u521D\u59CB\u72B6\u6001\uFF08\u7F3A\u7701 todo\uFF09" },
+            { name: "assignee", type: "string", valueHint: "<principalId>", description: "\u6307\u5B9A\u6267\u884C\u8005" },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u591A\u4ED3\u5E93\u7A7A\u95F4\uFF1A\u6307\u5B9A\u76EE\u6807\u4ED3\u5E93\uFF08\u7F3A\u7701\u7531\u670D\u52A1\u7AEF\u89E3\u6790\uFF09" },
+            { name: "client-message-id", type: "string", valueHint: "<id>", description: "\u5E42\u7B49\u952E\uFF1A\u540C\u4E00\u952E\u91CD\u590D\u6D3E\u5355\u8FD4\u56DE\u539F\u7ED3\u679C" }
+          ],
+          examples: ["morula steward dispatch --space <id> --title <text>", "morula steward dispatch --space <id> --title <text> --state backlog"],
+          writes: "remote"
+        }
+      ]
+    },
+    {
+      resource: "autopilot",
+      summary: "agent autopilots (scheduled/webhook-triggered automated runs; list only shows your own)",
+      actions: [
+        {
+          action: "list",
+          summary: "list autopilots created by the current user",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u6309\u7A7A\u95F4\u8FC7\u6EE4" },
+            { name: "page", type: "number", valueHint: "<n>", description: "\u9875\u7801" },
+            { name: "page-size", type: "number", valueHint: "<n>", description: "\u6BCF\u9875\u6761\u6570" }
+          ],
+          examples: ["morula autopilot list", "morula autopilot list --space <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "create",
+          summary: "create an autopilot (--executor is a runtime key; the server currently only accepts `dim`)",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u5F52\u5C5E\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "name", type: "string", valueHint: "<text>", description: "\u540D\u79F0\uFF08\u540C\u79DF\u6237\u552F\u4E00\uFF0C\u5FC5\u586B\uFF09", required: true },
+            { name: "runbook", type: "string", valueHint: "<text>", description: "Runbook\uFF1A\u6BCF\u6B21\u89E6\u53D1\u7ED9\u8FD0\u884C\u65F6\u7684\u76EE\u6807/\u80CC\u666F/\u6B65\u9AA4\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "executor", type: "string", valueHint: "<key>", description: "\u6267\u884C\u8005\u8FD0\u884C\u65F6 key\uFF08\u5FC5\u586B\uFF1B\u5F53\u524D\u4EC5 dim\uFF09", required: true },
+            { name: "description", type: "string", valueHint: "<text>", description: "\u63CF\u8FF0" },
+            { name: "cron", type: "string", valueHint: "<expr>", description: "cron \u8868\u8FBE\u5F0F\uFF085 \u5B57\u6BB5\uFF09\uFF1B\u7F3A\u7701 = \u4EC5 webhook \u89E6\u53D1" },
+            { name: "vcs-connection", type: "string", valueHint: "<id>", description: "\u9650\u5B9A\u4ED3\u5E93\u8FDE\u63A5\uFF08\u7F3A\u7701\u4E0D\u9650\uFF09" }
+          ],
+          examples: ["morula autopilot create --space <id> --name <text> --runbook <text> --executor dim"],
+          writes: "remote"
+        }
+      ]
+    },
+    {
+      resource: "dashboard",
+      summary: "space dashboard / statistics / member workload (read-only aggregates)",
+      actions: [
+        {
+          action: "get",
+          summary: "get the space dashboard aggregate",
+          flags: [{ name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula dashboard get --space <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "statistics",
+          summary: "get space task statistics",
+          flags: [{ name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula dashboard statistics --space <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "workload",
+          summary: "get per-member workload in a space",
+          flags: [{ name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula dashboard workload --space <id>"],
+          writes: "none",
+          idempotent: true
+        }
+      ]
+    },
+    {
+      resource: "object-meta",
+      summary: "task-level agent metadata (D-06 high-signal keys only)",
+      actions: [
+        {
+          action: "get",
+          summary: "read all agent metadata of a task",
+          flags: [{ name: "object", type: "string", valueHint: "<id>", description: "\u4EFB\u52A1\uFF08Object\uFF09ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula object-meta get --object <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "set",
+          summary: "write one agent metadata key. Key must be in the high-signal whitelist: pr_url / pr_number / pipeline_status / deploy_url / waiting_on / blocked_reason / decision",
+          flags: [
+            { name: "object", type: "string", valueHint: "<id>", description: "\u4EFB\u52A1\uFF08Object\uFF09ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "key", type: "string", valueHint: "<key>", description: "\u5143\u6570\u636E\u952E\uFF08\u5FC5\u586B\uFF0C\u767D\u540D\u5355\uFF09", required: true },
+            { name: "value", type: "string", valueHint: "<text>", description: "\u503C\uFF08\u5FC5\u586B\uFF0C\u975E\u7A7A\uFF09", required: true }
+          ],
+          examples: ["morula object-meta set --object <id> --key pr_url --value <url>"],
+          writes: "remote"
+        }
+      ]
+    },
+    {
+      resource: "document",
+      summary: "document artifacts (ag_artifact; id is a numeric auto-increment id, not a uuid)",
+      actions: [
+        {
+          action: "list",
+          summary: "list document artifacts",
+          flags: [
+            { name: "page", type: "number", valueHint: "<n>", description: "\u9875\u7801" },
+            { name: "page-size", type: "number", valueHint: "<n>", description: "\u6BCF\u9875\u6761\u6570" }
+          ],
+          examples: ["morula document list"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "get",
+          summary: "get document metadata (\u4E0D\u542B\u5B8C\u6574\u6B63\u6587)",
+          args: [{ name: "id", required: true, description: "\u6587\u6863 ID\uFF08\u6570\u5B57\uFF0C\u6765\u81EA document list\uFF09" }],
+          flags: [],
+          examples: ["morula document get <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "artifacts",
+          summary: "read the parsed document content (markdown)",
+          args: [{ name: "id", required: true, description: "\u6587\u6863 ID\uFF08\u6570\u5B57\uFF0C\u6765\u81EA document list\uFF09" }],
+          flags: [],
+          examples: ["morula document artifacts <id>"],
+          writes: "none",
+          idempotent: true
+        }
+      ]
+    },
+    {
+      resource: "comment",
+      summary: "object comments (agent summaries live here)",
+      actions: [
+        {
+          action: "list",
+          summary: "list comments for an object",
+          flags: [{ name: "object", type: "string", valueHint: "<id>", description: "\u5BF9\u8C61 ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula comment list --object <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "get",
+          summary: "get comment details",
+          args: [{ name: "id", required: true, description: "\u8BC4\u8BBA ID" }],
+          flags: [],
+          examples: ["morula comment get <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "add",
+          summary: "add comment (format auto-detected; use markdown for agent final summaries). --mention \u53EF @ \u4EBA\uFF08\u89E6\u53D1\u901A\u77E5/\u50AC\u529E\uFF09",
+          flags: [
+            { name: "object", type: "string", valueHint: "<id>", description: "\u5BF9\u8C61 ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "content", type: "string", valueHint: "<text>", description: "\u8BC4\u8BBA\u5185\u5BB9\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "parent", type: "string", valueHint: "<id>", description: "\u7236\u8BC4\u8BBA\uFF08\u56DE\u590D\uFF09" },
+            { name: "format", type: "string", valueHint: "<markdown|plain|richtext>", enum: ["markdown", "plain", "richtext"], description: "\u5185\u5BB9\u683C\u5F0F\uFF08\u7F3A\u7701\u81EA\u52A8\u68C0\u6D4B\uFF09" },
+            { name: "mention", type: "string", valueHint: "<principalId[,principalId]>", repeatable: true, description: "@ \u4EBA\uFF1A\u88AB\u63D0\u53CA\u8005\u7684 principalId\uFF0C\u53EF\u91CD\u590D\u4F20\uFF08--mention a --mention b\uFF09\u6216\u7528\u9017\u53F7\u5206\u9694\u591A\u4E2A\uFF08\u4E24\u79CD\u6DF7\u7528\u81EA\u52A8\u5408\u5E76\u53BB\u91CD\u4FDD\u5E8F\uFF09\uFF1B\u53EA\u652F\u6301\u4EBA\uFF0C\u4E0D\u652F\u6301 @ \u8FD0\u884C\u65F6/\u667A\u80FD\u4F53" }
+          ],
+          examples: ["morula comment add --object <id> --content <text>", "morula comment add --object <id> --content <text> --mention <principalId>", "morula comment add --object <id> --content <text> --mention <principalIdA> --mention <principalIdB>"],
+          writes: "remote"
+        },
+        {
+          action: "update",
+          summary: "update comment",
+          args: [{ name: "id", required: true, description: "\u8BC4\u8BBA ID" }],
+          flags: [{ name: "content", type: "string", valueHint: "<text>", description: "\u65B0\u5185\u5BB9\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula comment update <id> --content <text>"],
+          writes: "remote"
+        },
+        {
+          action: "delete",
+          summary: "hard delete comment",
+          args: [{ name: "id", required: true, description: "\u8BC4\u8BBA ID" }],
+          flags: [],
+          examples: ["morula comment delete <id>"],
+          writes: "remote"
+        }
+      ]
+    },
+    {
+      resource: "review",
+      summary: "Code Review verdict submission (review task machine protocol)",
+      actions: [
+        {
+          action: "submit",
+          summary: "submit Code Review verdict (machine protocol; review task token)",
+          args: [{ name: "objectId", required: true, description: "\u8BC4\u5BA1\u5BF9\u8C61 ID\uFF08\u7CFB\u7EDF\u63D0\u793A\u300C\u8BC4\u5BA1\u5BF9\u8C61\u300D\uFF09" }],
+          flags: [
+            { name: "verdict", type: "string", valueHint: "<approved|changes_requested|commented>", enum: ["approved", "changes_requested", "commented"], description: "\u8BC4\u5BA1\u7ED3\u8BBA\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "details", type: "string", valueHint: "<text>", description: "\u8BC4\u5BA1\u610F\u89C1\uFF08changes_requested \u5FC5\u586B\uFF1A\u6587\u4EF6/\u884C/\u95EE\u9898/\u5EFA\u8BAE\uFF09" },
+            { name: "pr-number", type: "number", valueHint: "<n>", description: "\u8BC4\u5BA1\u5BF9\u8C61\u7684 PR \u7F16\u53F7\uFF08\u6709\u5219\u586B\uFF09" }
+          ],
+          examples: ["morula review submit <objectId> --verdict approved"],
+          writes: "remote"
+        }
+      ]
+    },
+    {
+      resource: "report",
+      summary: "autopilot reports (conclusion-heavy output of automated runs)",
+      actions: [
+        {
+          action: "create",
+          summary: "create an autopilot report (\u6B63\u6587\u4E8C\u9009\u4E00\uFF1A--content \u77ED\u6B63\u6587 / --content-file \u957F Markdown\uFF1B--autopilot \u7701\u7565\u65F6\u6309\u5F53\u524D\u4EFB\u52A1\u53CD\u67E5\u6240\u5C5E\u81EA\u52A8\u5316)",
+          flags: [
+            { name: "title", type: "string", valueHint: "<text>", description: "\u6807\u9898\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "content", type: "string", valueHint: "<markdown>", description: "\u77ED\u6B63\u6587\uFF08\u4E0E --content-file \u4E8C\u9009\u4E00\uFF09" },
+            { name: "content-file", type: "string", valueHint: "<path>", description: "\u957F Markdown \u62A5\u544A\u6587\u4EF6\uFF08\u4E0E --content \u4E8C\u9009\u4E00\uFF09" },
+            { name: "space", type: "string", valueHint: "<id>", description: "\u5F52\u5C5E\u7A7A\u95F4" },
+            { name: "autopilot", type: "string", valueHint: "<id>", description: "\u6240\u5C5E\u81EA\u52A8\u5316\uFF08\u7701\u7565\u65F6\u6309\u5F53\u524D\u4EFB\u52A1\u53CD\u67E5\uFF09" }
+          ],
+          examples: ["morula report create --title <t> --content-file <path>"],
+          writes: "remote"
+        },
+        {
+          action: "get",
+          summary: "get report details (\u542B Markdown \u6B63\u6587)",
+          args: [{ name: "id", required: true, description: "\u62A5\u544A ID" }],
+          flags: [],
+          examples: ["morula report get <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "list",
+          summary: "list reports of an autopilot",
+          flags: [
+            { name: "autopilot", type: "string", valueHint: "<id>", description: "\u81EA\u52A8\u5316 ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "page", type: "number", valueHint: "<n>", description: "\u9875\u7801" },
+            { name: "page-size", type: "number", valueHint: "<n>", description: "\u6BCF\u9875\u6761\u6570" }
+          ],
+          examples: ["morula report list --autopilot <id>"],
+          writes: "none",
+          idempotent: true
+        }
+      ]
+    },
+    {
+      resource: "repo",
+      summary: "task-space VCS repos: materialize checkout / MR read & comment (server channel; never approves/merges)",
+      actions: [
+        {
+          action: "list",
+          summary: "list task-space VCS connections (the space repo list \u2014 the task prompt does NOT list repos; query this when a task may span multiple repos)",
+          flags: [{ name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula repo list --space <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "checkout",
+          summary: "materialize a repo into the task workdir (local daemon endpoint preferred, works same-turn; falls back to server machine protocol which resolves scope + workContext)",
+          args: [
+            { name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID" },
+            { name: "repoFullName", required: true, description: "\u4ED3\u5E93\u5168\u540D\uFF08owner/name\uFF09" }
+          ],
+          flags: [{ name: "ref", type: "string", valueHint: "<branch|sha>", description: "\u68C0\u51FA\u5F15\u7528\uFF08\u7F3A\u7701 = \u7ED1\u5B9A\u5206\u652F\uFF09" }],
+          examples: ["morula repo checkout <taskId> <owner/name>"],
+          writes: "local",
+          idempotent: true
+        },
+        {
+          action: "prepare",
+          summary: "materialize a secondary repo into the task workdir (same level as the primary repo dir)",
+          args: [
+            { name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID" },
+            { name: "repoFullName", required: true, description: "\u6B21\u4ED3\u5E93\u5168\u540D\uFF08owner/name\uFF09" }
+          ],
+          flags: [],
+          examples: ["morula repo prepare <taskId> <owner/name>"],
+          writes: "local",
+          idempotent: true
+        },
+        {
+          action: "files",
+          summary: "list files in a space repo via the server (read-only, non-task: no local checkout, no AgentTask context)",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u4ED3\u5E93\u5168\u540D\uFF08\u7F3A\u7701 = \u7A7A\u95F4\u4E3B\u4ED3\u5E93\uFF09" },
+            { name: "path", type: "string", valueHint: "<path>", description: "\u76EE\u5F55\u8DEF\u5F84\uFF08\u7F3A\u7701 = \u4ED3\u5E93\u6839\uFF09" },
+            { name: "ref", type: "string", valueHint: "<branch|sha>", description: "\u5206\u652F / tag / commit\uFF08\u7F3A\u7701 = \u9ED8\u8BA4\u5206\u652F\uFF09" }
+          ],
+          examples: ["morula repo files --space <id>", "morula repo files --space <id> --path src"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "read",
+          summary: "read a single file from a space repo via the server (read-only, non-task)",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "path", type: "string", valueHint: "<path>", description: "\u6587\u4EF6\u8DEF\u5F84\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u4ED3\u5E93\u5168\u540D\uFF08\u7F3A\u7701 = \u7A7A\u95F4\u4E3B\u4ED3\u5E93\uFF09" },
+            { name: "ref", type: "string", valueHint: "<branch|sha>", description: "\u5206\u652F / tag / commit\uFF08\u7F3A\u7701 = \u9ED8\u8BA4\u5206\u652F\uFF09" }
+          ],
+          examples: ["morula repo read --space <id> --path src/index.ts"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "mr create",
+          summary: "create a GitLab MR for the task via the server channel (target project forced to the bound repo, PR linked immediately; push the branch first)",
+          args: [{ name: "repoFullName", required: true, description: "\u4ED3\u5E93\u5168\u540D\uFF08owner/name\uFF09" }],
+          flags: [
+            { name: "branch", type: "string", valueHint: "<branch>", description: "\u6E90\u5206\u652F\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "base", type: "string", valueHint: "<base>", description: "\u76EE\u6807\u5206\u652F\uFF08\u7F3A\u7701 MORULA_BASE_BRANCH / main\uFF09" },
+            { name: "task-code", type: "string", valueHint: "<code>", description: "\u4EFB\u52A1\u7F16\u53F7\uFF08MR \u6807\u9898/\u6B63\u6587\u56DE\u94FE\uFF09" }
+          ],
+          examples: ["morula repo mr create <owner/name> --branch <b> --task-code <code>"],
+          writes: "remote"
+        },
+        {
+          action: "mr list",
+          summary: "list the task-space repos' merge requests (read-only; includes createdAt/updatedAt/author; never approves/merges)",
+          args: [{ name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID" }],
+          flags: [
+            { name: "state", type: "string", valueHint: "<opened|closed|merged>", enum: ["opened", "closed", "merged"], description: "MR \u72B6\u6001\u8FC7\u6EE4\uFF08\u7F3A\u7701 opened\uFF09" },
+            { name: "limit", type: "number", valueHint: "<n>", description: "\u6761\u6570\u4E0A\u9650" },
+            { name: "author", type: "string", valueHint: "<username>", description: "\u6309\u4F5C\u8005\u8FC7\u6EE4" },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u591A\u4ED3\u5E93\u7A7A\u95F4\uFF1A\u76EE\u6807\u4ED3\u5E93\uFF08\u7F3A\u7701\u4E3B\u4ED3\u5E93\uFF09" }
+          ],
+          examples: ["morula repo mr list <taskId> --state opened"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "mr comment",
+          summary: "write a review comment on an MR/PR (write-only: never approves or merges). \u5199\u4E4B\u524D\u5FC5\u987B\u5148 `morula repo mr get <taskId> --mr <iid> --notes` \u8BFB\u5DF2\u6709\u8BA8\u8BBA\uFF1A\u82E5\u672C\u81EA\u52A8\u5316\u5DF2\u5C31\u540C\u4E00\u95EE\u9898\u7559\u8FC7\u7ED3\u8BBA\u4E14\u7ED3\u8BBA\u672A\u53D8\uFF0C\u4E0D\u8981\u518D\u8BC4\u8BBA\u3002\u5185\u5BB9\u4E3A\u7ED3\u8BBA + \u5173\u952E\u95EE\u9898\uFF08\u6587\u4EF6:\u884C + \u5EFA\u8BAE\uFF09\uFF0C\u672B\u5C3E\u52A0\u7F72\u540D\u884C\uFF1B\u957F\u5185\u5BB9\u5199\u6210\u62A5\u544A\u540E\u7528\u6458\u8981\u5F15\u7528\uFF08morula report create \u2192 \u8BC4\u8BBA\u91CC\u7ED9\u8981\u70B9\uFF09",
+          args: [{ name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID" }],
+          flags: [
+            { name: "mr", type: "number", valueHint: "<iid>", description: "MR \u7F16\u53F7\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u591A\u4ED3\u5E93\u7A7A\u95F4\uFF1A\u76EE\u6807\u4ED3\u5E93\uFF08\u7F3A\u7701\u4E3B\u4ED3\u5E93\uFF09" },
+            { name: "connection", type: "string", valueHint: "<id>", description: "\u8FDE\u63A5 ID\uFF08\u591A\u8FDE\u63A5\u573A\u666F\uFF09" },
+            { name: "content", type: "string", valueHint: "<text>", description: "\u8BC4\u8BBA\u6B63\u6587\uFF08\u4E0E --content-file \u4E8C\u9009\u4E00\uFF09" },
+            { name: "content-file", type: "string", valueHint: "<path>", description: "\u8BC4\u8BBA\u6B63\u6587\u6587\u4EF6\uFF08\u4E0E --content \u4E8C\u9009\u4E00\uFF09" }
+          ],
+          examples: ["morula repo mr comment <taskId> --mr <iid> --content-file <path>"],
+          writes: "remote"
+        },
+        {
+          action: "mr get",
+          summary: "get a single MR detail (read-only; --ci attaches pipeline status where none = no pipeline, not an error; --notes attaches existing comments \u2014 read this before writing a comment to avoid duplicates)",
+          args: [{ name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID" }],
+          flags: [
+            { name: "mr", type: "number", valueHint: "<iid>", description: "MR \u7F16\u53F7\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u591A\u4ED3\u5E93\u7A7A\u95F4\uFF1A\u76EE\u6807\u4ED3\u5E93\uFF08\u7F3A\u7701\u4E3B\u4ED3\u5E93\uFF09" },
+            { name: "ci", type: "boolean", description: "\u9644\u5E26 pipeline \u72B6\u6001" },
+            { name: "notes", type: "boolean", description: "\u9644\u5E26\u5DF2\u6709\u8BC4\u8BBA\uFF08\u5199\u8BC4\u8BBA\u524D\u5148\u8BFB\uFF0C\u9632\u91CD\u590D\uFF09" }
+          ],
+          examples: ["morula repo mr get <taskId> --mr <iid> --notes"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "mr diff",
+          summary: "read an MR diff via the server (read-only; works without a local checkout; truncated flag is set when output was capped)",
+          args: [{ name: "taskId", required: true, description: "\u672C\u4EFB\u52A1 AgentTask UUID" }],
+          flags: [
+            { name: "mr", type: "number", valueHint: "<iid>", description: "MR \u7F16\u53F7\uFF08\u5FC5\u586B\uFF09", required: true },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u591A\u4ED3\u5E93\u7A7A\u95F4\uFF1A\u76EE\u6807\u4ED3\u5E93\uFF08\u7F3A\u7701\u4E3B\u4ED3\u5E93\uFF09" },
+            { name: "max-files", type: "number", valueHint: "<n>", description: "\u6587\u4EF6\u6570\u4E0A\u9650" },
+            { name: "max-chars", type: "number", valueHint: "<n>", description: "\u5B57\u7B26\u6570\u4E0A\u9650" }
+          ],
+          examples: ["morula repo mr diff <taskId> --mr <iid>"],
+          writes: "none",
+          idempotent: true
+        }
+      ],
+      notes: [
+        "mr \u662F\u591A\u7EA7\u5B50\u547D\u4EE4\u5F62\u6001\uFF08action=mr\u3001\u5B50\u547D\u4EE4\u4F4D\u5728 positionals[0]\uFF09\uFF1A\u5951\u7EA6\u6309\u5B50\u547D\u4EE4\u62C6\u5206\u58F0\u660E\uFF08mr create / mr list / ...\uFF09\uFF0C\u4E25\u683C\u6821\u9A8C\u53EA\u5BF9\u5355\u7EA7 action \u751F\u6548"
+      ]
+    },
+    {
+      resource: "ci",
+      summary: "CI/CD pipeline facts and pipeline operations: pipeline runs / job logs / deployments / failed test cases (read-only) plus retry of a failed pipeline or job (Phase 3 write, space face only). Read faces share one command surface \u2014 task face `<taskId>` (AgentTask credential, self-check your MR pipeline) vs space face `--space <spaceId>` (steward/session credential, space-wide inspection); the two are mutually exclusive. Retry is space-face ONLY (person + steward); trigger-deploy (play a manual job) stays person-only and is intentionally absent from the CLI",
+      actions: [
+        {
+          action: "status",
+          summary: "pipeline runs + deployments for a task (or a space); hasCiConfig:false comes with a notice explaining the repo has no CI config (not an error); on the task face --repo filters runs client-side by repoFullName and echoes repoFilter (the server does NOT support repo filtering)",
+          args: [{ name: "taskId", description: "\u672C\u4EFB\u52A1 AgentTask UUID\uFF08\u4E0E --space \u4E92\u65A5\uFF09" }],
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u7BA1\u5BB6/\u7A7A\u95F4\u9762\uFF1B\u4E0E <taskId> \u4E92\u65A5\uFF09" },
+            { name: "repo", type: "string", valueHint: "<owner/name>", description: "\u591A\u4ED3\u5E93\u7A7A\u95F4\uFF1A\u53EA\u770B\u8BE5\u4ED3\u5E93\u7684\u8FD0\u884C\uFF08\u4EFB\u52A1\u9762\u4E13\u7528\uFF0C\u5BA2\u6237\u7AEF\u8FC7\u6EE4\uFF09" },
+            { name: "ref", type: "string", valueHint: "<branch>", description: "\u6309\u5206\u652F/tag \u8FC7\u6EE4\uFF08\u7A7A\u95F4\u9762\u4E13\u7528\uFF09" },
+            { name: "failed", type: "boolean", description: "\u53EA\u770B\u5931\u8D25\u7684\u8FD0\u884C\uFF08\u7A7A\u95F4\u9762\u4E13\u7528\uFF09" },
+            { name: "limit", type: "number", valueHint: "<n>", description: "\u8FD0\u884C\u6761\u6570\u4E0A\u9650\uFF08\u670D\u52A1\u7AEF\u9ED8\u8BA4 20\uFF0C\u4E0A\u9650 100\uFF09" }
+          ],
+          examples: ["morula ci status <taskId>", "morula ci status --space <id> --failed"],
+          writes: "none",
+          idempotent: true,
+          emits: ["ok", "taskId", "spaceId", "runs", "deployments", "hasCiConfig", "notice", "repoFilter"]
+        },
+        {
+          action: "log",
+          summary: "job log by job id (the server resolves the owning run; both faces use this same endpoint \u2014 the task/space flag only declares which face you are calling from). `truncated:true` means the log was tail-cut, not complete",
+          args: [{ name: "taskId", description: "\u672C\u4EFB\u52A1 AgentTask UUID\uFF08\u4E0E --space \u4E92\u65A5\uFF09" }],
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u7BA1\u5BB6/\u7A7A\u95F4\u9762\uFF1B\u4E0E <taskId> \u4E92\u65A5\uFF09" },
+            { name: "job", type: "string", valueHint: "<jobId>", description: "job ID\uFF08\u5FC5\u586B\uFF1B\u6765\u81EA ci status \u7684 jobs[].id\uFF09", required: true },
+            { name: "tail", type: "number", valueHint: "<n>", description: "\u4FDD\u7559\u7684\u65E5\u5FD7\u5C3E\u90E8\u5B57\u8282\u6570\uFF08\u670D\u52A1\u7AEF\u9ED8\u8BA4 64KB\uFF09" }
+          ],
+          examples: ["morula ci log <taskId> --job <jobId> --tail 20000"],
+          writes: "none",
+          idempotent: true,
+          emits: ["ok", "runId", "jobId", "log", "truncated"]
+        },
+        {
+          action: "deployments",
+          summary: "deployment records for a task (or a space) \u2014 display only: deployments do NOT drive lifecycle state (released is driven solely by a successful production-branch pipeline run)",
+          args: [{ name: "taskId", description: "\u672C\u4EFB\u52A1 AgentTask UUID\uFF08\u4E0E --space \u4E92\u65A5\uFF09" }],
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u7BA1\u5BB6/\u7A7A\u95F4\u9762\uFF1B\u4E0E <taskId> \u4E92\u65A5\uFF09" }
+          ],
+          examples: ["morula ci deployments <taskId>"],
+          writes: "none",
+          idempotent: true,
+          emits: ["ok", "spaceId", "deployments"]
+        },
+        {
+          action: "test-report",
+          summary: "failed test cases of a run; --run omitted resolves to the newest run in the CI view \u2014 no run at all is CI_RUN_NOT_FOUND (exit 3), never an empty report; provider without this capability (GitHub) returns CAPABILITY_UNSUPPORTED",
+          args: [{ name: "taskId", description: "\u672C\u4EFB\u52A1 AgentTask UUID\uFF08\u4E0E --space \u4E92\u65A5\uFF09" }],
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u7BA1\u5BB6/\u7A7A\u95F4\u9762\uFF1B\u4E0E <taskId> \u4E92\u65A5\uFF09" },
+            { name: "run", type: "string", valueHint: "<runId>", description: "\u8FD0\u884C ID\uFF08\u7F3A\u7701 = CI \u89C6\u56FE\u91CC\u6700\u65B0\u4E00\u6761\u8FD0\u884C\uFF09" }
+          ],
+          examples: ["morula ci test-report <taskId>"],
+          writes: "none",
+          idempotent: true,
+          emits: ["ok", "runId", "report"]
+        },
+        {
+          action: "retry",
+          summary: "re-run a failed pipeline (Phase 3; space face ONLY \u2014 a positional <taskId> is a usage error, retry is not open to the task face; person + steward, and a steward must go through an elicitation confirm card). Omit both --run and --job to retry the newest FAILED run of the space (no failed run at all \u2192 CI_RUN_NOT_FOUND exit 3). Only failure/cancelled runs or jobs can be retried (CI_RETRY_NOT_ALLOWED exit 6). NOT idempotent: every call starts another platform re-run",
+          flags: [
+            { name: "space", type: "string", valueHint: "<id>", description: "\u7A7A\u95F4 ID\uFF08\u5FC5\u586B\uFF1Bretry \u53EA\u6709\u7A7A\u95F4\u9762\uFF0C\u4EFB\u52A1\u9762\u4E0D\u5F00\u653E\uFF09", required: true },
+            { name: "run", type: "string", valueHint: "<runId>", description: "\u8981\u91CD\u8DD1\u7684\u8FD0\u884C ID\uFF08\u4E0E --job \u4E92\u65A5\uFF1B\u7F3A\u7701 = \u8BE5\u7A7A\u95F4\u6700\u65B0\u4E00\u6761\u5931\u8D25\u8FD0\u884C\uFF09" },
+            { name: "job", type: "string", valueHint: "<jobId>", description: "\u8981\u91CD\u8DD1\u7684\u5355\u4E2A job ID\uFF08\u4E0E --run \u4E92\u65A5\uFF1B\u6765\u81EA ci status \u7684 jobs[].id\uFF09" }
+          ],
+          examples: ["morula ci retry --space <id>", "morula ci retry --space <id> --job <jobId>"],
+          writes: "remote",
+          idempotent: false,
+          emits: ["ok", "action", "runId", "jobId", "externalId", "ref", "acceptedAt"]
+        }
+      ],
+      notes: [
+        "\u4E24\u4E2A\u9762\uFF08\u4EFB\u52A1\u9762 <taskId> / \u7A7A\u95F4\u9762 --space <spaceId>\uFF09\u4E92\u65A5\uFF1A\u540C\u65F6\u7ED9 \u2192 usage error(2)\uFF0C\u90FD\u4E0D\u7ED9\u540C\u6837 usage error\u3002\u51ED\u8BC1\u4E0E\u4F5C\u7528\u57DF\u4E0D\u540C\uFF0C\u731C\u9519\u4F1A\u53D8\u6210\u9759\u9ED8\u8D8A\u6743\u6216\u9759\u9ED8\u5931\u8D25",
+        "\u53EA\u8BFB\u9762\uFF1Astatus / log / deployments / test-report \u53EA\u8BFB\uFF08writes: none\uFF09\uFF1Bretry \u662F Phase 3 \u7684\u552F\u4E00\u5199\u9762\uFF08writes: remote\uFF0C\u975E\u5E42\u7B49\uFF09\uFF0C\u4E14**\u53EA\u6709\u7A7A\u95F4\u9762**\u2014\u2014\u7ED9\u4F4D\u7F6E\u53C2\u6570 <taskId> \u2192 usage error(2)",
+        "\u89E6\u53D1\u624B\u52A8 job\uFF08play\uFF0C\u90E8\u7F72\uFF09\u4E0D\u8FDB CLI\uFF1A\u4EC5\u4EBA\u9762\uFF08D5/D6\uFF09\uFF0C\u5165\u53E3\u53EA\u5728 web \u786E\u8BA4\u5F39\u7A97",
+        "\u670D\u52A1\u7AEF\u4E1A\u52A1\u5931\u8D25\u662F HTTP 200 + `{ ok:false, code, message }`\uFF1ACI_JOB_NOT_FOUND / CI_RUN_NOT_FOUND / TASK_NOT_FOUND / OBJECT_NOT_FOUND \u2192 exit 3\uFF1BCI_RETRY_NOT_ALLOWED / CI_JOB_NOT_MANUAL \u2192 exit 6\uFF1BCAPABILITY_UNSUPPORTED / NO_CONNECTION / \u5176\u4F59 \u2192 exit 1"
+      ]
+    },
+    {
+      resource: "attachment",
+      summary: "file attachments for objects / comments / chat messages (local file upload)",
+      actions: [
+        {
+          action: "upload",
+          summary: "upload a local file and attach it to a task (--object) / comment (--comment) / chat message (--ag-message); for pure chat tasks pass --task <agentTaskId> to attach to the chat session; omit target to auto-merge (object if bound, else chat message)",
+          args: [{ name: "file", required: true, description: "\u672C\u5730\u6587\u4EF6\u8DEF\u5F84" }],
+          flags: [
+            { name: "object", type: "string", valueHint: "<id>", description: "\u6302\u5230\u5BF9\u8C61" },
+            { name: "comment", type: "string", valueHint: "<id>", description: "\u6302\u5230\u8BC4\u8BBA" },
+            { name: "ag-message", type: "boolean", description: "\u6302\u5230 Chat \u4F1A\u8BDD\u6700\u65B0\u6D88\u606F" },
+            { name: "task", type: "string", valueHint: "<agentTaskId>", description: "\u7EAF Chat \u4EFB\u52A1\u5F52\u5E76\u5230\u4F1A\u8BDD\u6D88\u606F" },
+            { name: "inline", type: "boolean", description: "\u5185\u8054\u9644\u4EF6" }
+          ],
+          examples: ["morula attachment upload <file> --object <id>"],
+          writes: "remote"
+        },
+        {
+          action: "list",
+          summary: "list attachments for an object",
+          flags: [{ name: "object", type: "string", valueHint: "<id>", description: "\u5BF9\u8C61 ID\uFF08\u5FC5\u586B\uFF09", required: true }],
+          examples: ["morula attachment list --object <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "get",
+          summary: "get attachment details",
+          args: [{ name: "id", required: true, description: "\u9644\u4EF6 ID" }],
+          flags: [],
+          examples: ["morula attachment get <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "content",
+          summary: "read the parsed text content (MinerU markdown) of an attachment; unparsed/parsing/failed is reported in the body, not as an HTTP error",
+          args: [{ name: "id", required: true, description: "\u9644\u4EF6 ID" }],
+          flags: [{ name: "max-chars", type: "number", valueHint: "<n>", description: "\u6700\u5927\u8FD4\u56DE\u5B57\u7B26\u6570\uFF08\u670D\u52A1\u7AEF\u7F3A\u7701 8000\uFF09" }],
+          examples: ["morula attachment content <id>", "morula attachment content <id> --max-chars 20000"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "download-url",
+          summary: "get signed download URL for an attachment",
+          args: [{ name: "id", required: true, description: "\u9644\u4EF6 ID" }],
+          flags: [],
+          examples: ["morula attachment download-url <id>"],
+          writes: "none",
+          idempotent: true
+        },
+        {
+          action: "delete",
+          summary: "delete attachment",
+          args: [{ name: "id", required: true, description: "\u9644\u4EF6 ID" }],
+          flags: [],
+          examples: ["morula attachment delete <id>"],
+          writes: "remote"
+        }
+      ]
+    }
+  ]
+};
+
+// ../morula-cli/src/commands/steward.ts
+async function stewardCommand(context) {
+  if (!context.runtime.token)
+    throw new CliError("UNAUTHENTICATED", EXIT.UNAUTHENTICATED, "\u8BF7\u5148\u8FD0\u884C morula auth login");
+  const { action, flags } = context.parsed;
+  if (action === "get") {
+    rejectUnknownFlags(flags, ["space"]);
+    return context.client.stewards.get(requireFlag(flags, "space"));
+  }
+  if (action === "dispatch") {
+    rejectUnknownFlags(flags, ["space", "title", "description", "state", "assignee", "repo", "client-message-id"]);
+    const projectId = requireFlag(flags, "space");
+    const title = requireFlag(flags, "title");
+    const state = flagString(flags, "state");
+    const description = flagString(flags, "description");
+    const assigneePrincipalId = flagString(flags, "assignee");
+    const repoFullName = flagString(flags, "repo");
+    const clientMessageId = flagString(flags, "client-message-id");
+    return context.client.stewards.dispatch(projectId, {
+      title,
+      ...description !== void 0 ? { description } : {},
+      ...state !== void 0 ? { state } : {},
+      ...assigneePrincipalId !== void 0 ? { assigneePrincipalId } : {},
+      ...repoFullName !== void 0 ? { repoFullName } : {},
+      ...clientMessageId !== void 0 ? { clientMessageId } : {}
+    });
+  }
+  throw usage("usage: morula steward <get|dispatch>");
 }
 
 // ../morula-cli/src/commands/task.ts
@@ -2598,7 +4095,7 @@ async function taskCommand(context) {
   morula task get <objectId>      # \u4E1A\u52A1\u4EFB\u52A1\uFF08Object\uFF09\u8BE6\u60C5\uFF08\u542B\u81EA\u5B9A\u4E49\u5B57\u6BB5\u503C\uFF09`);
       return context.client.http.get(`/agent-tasks/${encodeURIComponent(taskId)}`);
     }
-    const id = requireId2(positionals, "task get");
+    const id = requireId4(positionals, "task get");
     const task = await context.client.tasks.get(id);
     if (!task)
       return null;
@@ -2633,7 +4130,7 @@ async function taskCommand(context) {
   }
   if (action === "update") {
     rejectUnknownFlags(flags, WRITE_FLAGS.filter((flag) => flag !== "space" && flag !== "owner"));
-    const id = requireId2(positionals, "task update");
+    const id = requireId4(positionals, "task update");
     const input = taskInput(flags, false);
     const fieldSpecs = parseFieldFlags(flagString(flags, "field"));
     if (!Object.keys(input).length && !flagString(flags, "field"))
@@ -2664,12 +4161,12 @@ async function taskCommand(context) {
   }
   if (action === "delete") {
     rejectUnknownFlags(flags, []);
-    const id = requireId2(positionals, "task delete");
+    const id = requireId4(positionals, "task delete");
     return context.client.tasks.delete(id);
   }
   if (action === "branch") {
     rejectUnknownFlags(flags, ["name", "repo"]);
-    const id = requireId2(positionals, "task branch");
+    const id = requireId4(positionals, "task branch");
     const branchName = requireFlag(flags, "name");
     const runtimeId = context.env.MORULA_RUNTIME_ID;
     if (!runtimeId)
@@ -2683,7 +4180,7 @@ async function taskCommand(context) {
   }
   if (action === "state") {
     rejectUnknownFlags(flags, ["state"]);
-    const id = requireId2(positionals, "task state");
+    const id = requireId4(positionals, "task state");
     const stateCode = requireFlag(flags, "state");
     const runtimeId = context.env.MORULA_RUNTIME_ID;
     if (!runtimeId)
@@ -2695,7 +4192,7 @@ async function taskCommand(context) {
   }
   if (action === "analysis-verdict") {
     rejectUnknownFlags(flags, ["verdict", "reason"]);
-    const id = requireId2(positionals, "task analysis-verdict");
+    const id = requireId4(positionals, "task analysis-verdict");
     const verdict = requireFlag(flags, "verdict");
     if (verdict !== "ready" && verdict !== "blocked")
       throw usage(`--verdict \u5FC5\u987B\u662F ready / blocked
@@ -2758,7 +4255,37 @@ async function taskCommand(context) {
       ...messages.length === 0 ? { hint: "\u672C\u7EBF\u7A0B\u6CA1\u6709\u65B0\u6D88\u606F\uFF1A\u6309\u539F\u8BA1\u5212\u7EE7\u7EED\uFF0C\u4E0D\u8981\u5C55\u5F00\u8BA8\u8BBA\u3002" } : {}
     };
   }
-  throw usage("usage: morula task <list|create|get|update|delete|branch|state|analysis-verdict|inbox>");
+  if (action === "agent-tasks") {
+    rejectUnknownFlags(flags, ["object", "status", "page", "page-size"]);
+    const objectId = requireFlag(flags, "object");
+    return context.client.agentTasks.list(compact3({
+      objectId,
+      status: flagString(flags, "status"),
+      page: flagNumber(flags, "page"),
+      pageSize: flagNumber(flags, "page-size")
+    }));
+  }
+  if (action === "cancel") {
+    rejectUnknownFlags(flags, []);
+    const id = requireId4(positionals, "task cancel");
+    return context.client.agentTasks.cancel(id);
+  }
+  if (action === "rerun") {
+    rejectUnknownFlags(flags, []);
+    const id = requireId4(positionals, "task rerun");
+    const result = await context.client.agentTasks.rerun(id);
+    if (result?.ok === false)
+      throw new CliError(result.code ?? "RERUN_FAILED", rerunExitCode(result.code), `\u91CD\u8DD1\u5931\u8D25: ${result.message ?? result.code ?? "\u672A\u77E5\u539F\u56E0"}`);
+    return result;
+  }
+  throw usage("usage: morula task <list|create|get|update|delete|branch|state|analysis-verdict|inbox|agent-tasks|cancel|rerun>");
+}
+function rerunExitCode(code) {
+  if (code === "NOT_FOUND")
+    return EXIT.NOT_FOUND;
+  if (code === "CONFLICT" || code === "ALREADY_QUEUED")
+    return EXIT.CONFLICT;
+  return EXIT.OTHER;
 }
 function taskInput(flags, create) {
   const description = flagString(flags, "description");
@@ -2782,7 +4309,7 @@ function taskInput(flags, create) {
   }
   return values;
 }
-function requireId2(positionals, command) {
+function requireId4(positionals, command) {
   const id = positionals[0]?.trim();
   if (!id)
     throw usage(`usage: morula ${command} <id>`);
@@ -2799,13 +4326,19 @@ function unauthenticated() {
 var COMMANDS = {
   "attachment": attachmentCommand,
   "auth": authCommand,
+  "autopilot": autopilotCommand,
+  "ci": ciCommand,
   "comment": commentCommand,
+  "dashboard": dashboardCommand,
+  "document": documentCommand,
+  "object-meta": objectMetaCommand,
   "report": reportCommand,
   "repo": repoCommand,
   "review": reviewCommand,
   "task": taskCommand,
   "space": spaceCommand,
-  "space-member": spaceMemberCommand
+  "space-member": spaceMemberCommand,
+  "steward": stewardCommand
 };
 var HELP = {
   name: "morula",
@@ -2813,70 +4346,12 @@ var HELP = {
   build: BUILD_ID,
   summary: "Agent-first CLI for Morula task management. Success output is JSON on stdout; errors are JSON on stderr.",
   usage: "morula <resource> <action> [id] [--flags]",
-  commands: {
-    "auth": {
-      login: "browser SkyDoor SSO using PKCE and loopback callback",
-      logout: "remove the current context token",
-      status: "show context, endpoint, and authentication state"
-    },
-    "task": {
-      "list [--space <id>] [--mine] [--assignee <id>] [--page <n>] [--page-size <n>] [--search <text>] [--priority <low|medium|high|urgent>] [--state <id>]": "list tasks (--mine: \u4EC5\u6211\u8D1F\u8D23\u7684)",
-      "create --space <id> --title <text> [--priority <value>] [--assignee <id>]": "create task",
-      "get [id]": "get task details. No argument = the current AgentTask (id resolved from MORULA_TASK_ID / .morula/checkout.json). With an id = the business Object (title/description)",
-      "update <id> [--title <text>] [--state <id>] [--priority <value>] [--sort-order <n>]": "update task (--state here is the business Object state id, NOT the AgentTask state code \u2014 see `task state`)",
-      "delete <id>": "hard delete task",
-      "branch <id> --name <name> [--repo <owner/name>]": "report the final branch name for an agent task (machine protocol; agent naming, runtimeId from env; --repo: secondary repo in a multi-repo task)",
-      "state <id> --state <code>": "self-transition task state (machine protocol; agent drives todo\u2192in_progress\u2192review, runtimeId from env)",
-      "analysis-verdict <taskId> --verdict <ready|blocked> [--reason <text>]": "report the task-analysis verdict (machine protocol; ready \u2192 platform auto-starts development, blocked \u2192 task stays in analysis)",
-      "inbox [--peek]": "checkpoint: pull this thread's unconsumed messages into the current turn (machine protocol; --peek reads without marking them consumed)"
-    },
-    "space": {
-      "list [--page <n>] [--page-size <n>] [--keyword <text>]": "list visible spaces",
-      "get <id>": "get space details"
-    },
-    "space-member": {
-      "list --space <id>": "list space members",
-      "add --space <id> --principal <id> [--role <admin|member>]": "add member to space",
-      "update <member-id> --role <admin|member>": "update member role",
-      "remove <member-id>": "remove member from space"
-    },
-    "comment": {
-      "list --object <id>": "list comments for an object",
-      "get <id>": "get comment details",
-      "add --object <id> --content <text> [--parent <id>] [--format markdown|plain|richtext]": "add comment (format auto-detected; use markdown for agent final summaries)",
-      "update <id> --content <text>": "update comment",
-      "delete <id>": "hard delete comment"
-    },
-    "review": {
-      "submit <objectId> --verdict <approved|changes_requested|commented> [--details <text>] [--pr-number <n>]": "submit Code Review verdict (machine protocol; review task token)"
-    },
-    "report": {
-      "create --title <text> [--content <markdown> | --content-file <path>] [--space <id>] [--autopilot <id>]": "create an autopilot report (\u6B63\u6587\u4E8C\u9009\u4E00\uFF1A--content \u77ED\u6B63\u6587 / --content-file \u957F Markdown\uFF1B--autopilot \u7701\u7565\u65F6\u6309\u5F53\u524D\u4EFB\u52A1\u53CD\u67E5\u6240\u5C5E\u81EA\u52A8\u5316)",
-      "get <id>": "get report details (\u542B Markdown \u6B63\u6587)",
-      "list --autopilot <id> [--page <n>] [--page-size <n>]": "list reports of an autopilot"
-    },
-    "repo": {
-      "list --space <id>": "list task-space VCS connections (available repos; note: the system prompt already lists them for a task \u2014 you rarely need this)",
-      "checkout <taskId> <repoFullName> [--ref <branch|sha>]": "materialize a repo into the task workdir (local daemon endpoint preferred, works same-turn; falls back to server machine protocol which resolves scope + workContext)",
-      "prepare <taskId> <repoFullName>": "materialize a secondary repo into the task workdir (same level as the primary repo dir)",
-      "mr create <repoFullName> --branch <branch> [--base <base>] [--task-code <code>]": "create a GitLab MR for the task via the server channel (target project forced to the bound repo, PR linked immediately; push the branch first)",
-      "mr list <taskId> [--state opened|closed|merged] [--limit <n>] [--author <username>] [--repo <owner/name>]": "list the task-space repos' merge requests (read-only; includes createdAt/updatedAt/author; never approves/merges)",
-      "mr comment <taskId> --mr <iid> [--repo <owner/name>] (--content <text> | --content-file <path>)": "write a review comment on an MR/PR (write-only: never approves or merges). \u5199\u4E4B\u524D\u5FC5\u987B\u5148 `morula repo mr get <taskId> --mr <iid> --notes` \u8BFB\u5DF2\u6709\u8BA8\u8BBA\uFF1A\u82E5\u672C\u81EA\u52A8\u5316\u5DF2\u5C31\u540C\u4E00\u95EE\u9898\u7559\u8FC7\u7ED3\u8BBA\u4E14\u7ED3\u8BBA\u672A\u53D8\uFF0C\u4E0D\u8981\u518D\u8BC4\u8BBA\u3002\u5185\u5BB9\u4E3A\u7ED3\u8BBA + \u5173\u952E\u95EE\u9898\uFF08\u6587\u4EF6:\u884C + \u5EFA\u8BAE\uFF09\uFF0C\u672B\u5C3E\u52A0\u7F72\u540D\u884C\u300C> \u7531\u81EA\u52A8\u5316\u300C<\u540D\u79F0>\u300D\u4E8E <\u65E5\u671F> \u751F\u6210\u300D\uFF1B\u4E0D\u8981\u8D34\u5927\u6BB5\u65E5\u5FD7\u6216\u590D\u8FF0 diff\uFF1B\u957F\u5185\u5BB9\u5199\u6210\u62A5\u544A\u540E\u7528\u6458\u8981\u5F15\u7528\uFF08morula report create \u2192 \u8BC4\u8BBA\u91CC\u7ED9\u8981\u70B9\uFF09",
-      "mr get <taskId> --mr <iid> [--repo <owner/name>] [--ci] [--notes]": "get a single MR detail (read-only; --ci attaches pipeline status where none = no pipeline, not an error; --notes attaches existing comments \u2014 read this before writing a comment to avoid duplicates)",
-      "mr diff <taskId> --mr <iid> [--repo <owner/name>] [--max-files <n>] [--max-chars <n>]": "read an MR diff via the server (read-only; works without a local checkout; truncated flag is set when output was capped)"
-    },
-    "attachment": {
-      "upload <file> [--object <id>] [--comment <id>] [--ag-message] [--task <agentTaskId>] [--inline]": "upload a local file and attach it to a task (--object) / comment (--comment) / chat message (--ag-message); for pure chat tasks pass --task <agentTaskId> to attach to the chat session; omit target to auto-merge (object if bound, else chat message)",
-      "list --object <id>": "list attachments for an object",
-      "get <id>": "get attachment details",
-      "download-url <id>": "get signed download URL for an attachment",
-      "delete <id>": "delete attachment"
-    }
-  },
+  commands: renderTopLevelCommands(SPEC),
   globalFlags: {
     "--env <context>": "select test or a saved context",
     "--url <baseUrl>": "override API base URL",
     "--token <token>": "override token for this invocation (not persisted)",
+    "--json": "no-op; output is always JSON (accepted for familiarity)",
     "--help": "print this machine-readable command surface",
     "--version": "print version JSON"
   },
@@ -2893,4 +4368,4 @@ var HELP = {
 };
 
 // ../morula-cli/src/index.ts
-runEntry({ commands: COMMANDS, help: HELP });
+runEntry({ commands: COMMANDS, help: HELP, spec: SPEC });