@hagicode/cli 0.1.0-dev.5.1.b85b83a → 0.1.0-dev.52.1.13cffe6

package/skills/hagi/references/proposal-flow.md

@@ -0,0 +1,210 @@
+# Proposal Flow
+
+Treat the proposal lifecycle as explicit, non-interactive backend actions.
+One CLI command maps to one backend action.
+Do not imply hidden chaining between `create`, `optimize-description`, `generate`, `annotate`, `execute`, `archive`, and `complete`.
+
+## Configuration first
+
+Confirm the backend target before discussing proposal commands:
+
+- `--base-url <url>` or `HAGI_API_BASE_URL`
+- `--token <token>` or `HAGI_API_TOKEN`
+- `--lang <lang>` or `HAGI_API_LANG`
+- `--json` for automation and machine-readable output
+
+## Explicit lifecycle sequence
+
+Use this order when explaining or validating proposal flows:
+
+1. `proposal list`
+2. `proposal create`
+3. `proposal optimize-description` (optional)
+4. `proposal generate`
+5. `proposal annotate` (optional review loop)
+6. `proposal execute`
+7. `proposal archive`
+8. `proposal complete`
+9. `proposal send` for follow-up conversation on the active session
+
+`proposal status` sets the session status directly and is not part of the sequence above.
+
+Which stage each command starts, and what it leaves behind, is in [`openspec-workflow.md`](openspec-workflow.md).
+
+Between two lifecycle commands, follow the run with `hagi proposal get --session-id <id> --wait --json` and wait until the status settles. A returned command only accepts the request. Read [`openspec-workflow.md`](openspec-workflow.md#who-drives-each-step) for what each status means.
+
+After `proposal execute` settles and the code changes are still uncommitted, a Super Commit can commit them. Start it only when the user asks; see [`super-commit.md`](super-commit.md).
+
+The CLI may suggest a next command, but it does not call later lifecycle APIs automatically.
+
+## Repository scope
+
+Every proposal names the repositories it may edit (writable) and the repositories it may only read (read-only). Both lists are always present, and an empty list is written as `none`.
+
+1. Run `project repositories` for the proposal's project first:
+
+   ```bash
+   npx @hagicode/cli project repositories --id <project-id> --json
+   ```
+
+   Every `path` in that output (for example `repos/cli`) is a candidate. The human-readable output prints the same paths in its Path column.
+
+2. Begin `--chief-complaint` with a `Repository scope` section. Its `Writable repositories:` and `Read-only repositories:` lists hold paths taken from step 1, one `- ` entry per line. An empty list is written as `- none`. The chief complaint text follows after a blank line.
+
+3. Run `proposal create` with that chief complaint.
+
+The scope is a text convention inside the chief complaint, not a structured field the CLI sends. `proposal create` has no scope flags: do not invent `--writable-repo` or `--readonly-repo`.
+
+Where the scope comes from, in this order:
+
+- The user's request names the writable and read-only repositories. Check each path against the step 1 list.
+- Otherwise, the session's own repository scope, when the session states one. Name that scope with the action and its target before running `proposal create`.
+- Otherwise, ask the user and show the step 1 repositories as the choices. Wait for the answer.
+
+Rules:
+
+- A path that is not in the step 1 list is asked about, never corrected or guessed.
+- Never widen the writable list as a precaution, and never leave the `Repository scope` section out.
+- When the project lists no repositories, the project root `.` is the only candidate: write `- .` as the writable entry and `- none` for read-only. Ask the user only if the request implies something else.
+
+Worked example. The project has three repositories, and the user asks for a change to the CLI that only reads the core API:
+
+```json
+{
+  "projectId": "proj-1",
+  "name": "HagiCode",
+  "isMonoSpecs": true,
+  "hasError": false,
+  "repositories": [
+    { "name": "cli", "path": "repos/cli", "displayName": "CLI", "type": "library", "branch": "main", "isValidGitRepo": true },
+    { "name": "hagicode-core", "path": "repos/hagicode-core", "displayName": "Core", "type": "backend", "branch": "main", "isValidGitRepo": true },
+    { "name": "web", "path": "repos/web", "displayName": "Web", "type": "frontend", "branch": "main", "isValidGitRepo": true }
+  ]
+}
+```
+
+```bash
+npx @hagicode/cli proposal create \
+  --project-id proj-1 \
+  --chief-complaint "Repository scope
+Writable repositories:
+- repos/cli
+Read-only repositories:
+- repos/hagicode-core
+
+Add CLI completion for session workflows" \
+  --default-title \
+  --json
+```
+
+When the change touches only one repository and reads nothing else, the read-only list is written as `none`:
+
+```bash
+npx @hagicode/cli proposal create \
+  --project-id proj-1 \
+  --chief-complaint "Repository scope
+Writable repositories:
+- repos/web
+Read-only repositories:
+- none
+
+Tighten the settings page copy" \
+  --default-title \
+  --json
+```
+
+## Published package examples
+
+List sessions:
+
+```bash
+npx @hagicode/cli proposal list --json
+```
+
+Create a proposal session. The chief complaint begins with the `Repository scope` section; see [Repository scope](#repository-scope):
+
+```bash
+npx @hagicode/cli proposal create \
+  --project-id <project-id> \
+  --chief-complaint "Repository scope
+Writable repositories:
+- repos/cli
+Read-only repositories:
+- none
+
+Add CLI completion for session workflows" \
+  --default-title \
+  --json
+```
+
+Optimize the description explicitly:
+
+```bash
+npx @hagicode/cli proposal optimize-description \
+  --session-id <session-id> \
+  --description "Improve the proposal framing" \
+  --optimization-direction "Focus on implementation risk" \
+  --json
+```
+
+Generate the proposal body:
+
+```bash
+npx @hagicode/cli proposal generate \
+  --session-id <session-id> \
+  --enable-explore-mode \
+  --json
+```
+
+Submit annotations from a file or stdin:
+
+```bash
+npx @hagicode/cli proposal annotate --session-id <session-id> --input annotations.json
+cat annotations.json | npx @hagicode/cli proposal annotate --session-id <session-id> --input - --json
+```
+
+Execute, archive, complete, or continue the session:
+
+```bash
+npx @hagicode/cli proposal execute --session-id <session-id> --json
+npx @hagicode/cli proposal archive --session-id <session-id> --hero-id <hero-id>
+npx @hagicode/cli proposal status --session-id <session-id> --status Reviewing
+npx @hagicode/cli proposal complete --session-id <session-id>
+npx @hagicode/cli proposal send --session-id <session-id> --content "Please continue"
+```
+
+## Session metadata
+
+`proposal create` accepts `--metadata key=value` (repeatable) and `--metadata-json <file|->` (a JSON object of string values; `-` reads stdin). Use them to mark the sessions of one orchestrated run: a master marker on the orchestrator and worker markers on each proposal, so the run can find its sessions again.
+
+```bash
+MASTER_ID=$(hagi chat create --title "Batch master" --project-id <project-id> --metadata role=master --metadata batch=2026-11-07 --json | json_field '.session.sessionId')
+
+hagi proposal create \
+  --project-id <project-id> \
+  --chief-complaint "Repository scope
+Writable repositories:
+- repos/web
+Read-only repositories:
+- none
+
+Tighten the settings page copy" \
+  --default-title \
+  --metadata role=worker \
+  --metadata master="$MASTER_ID" \
+  --json
+```
+
+- Keys: 1 to 64 characters matching `^[a-z][a-z0-9._-]{0,63}$`. Values: 1 to 512 characters with no control characters. At most 16 entries. The backend checks these and its message is shown as it is.
+- Each key appears once across both options. A repeat, a missing `=`, or a non-string JSON value exits `2` with no request sent.
+- Metadata is write-once and visible to every reader of the session. Do not put secrets in it.
+- The output `session` object carries `userMetadata` when the session has entries. Read it to confirm the markers were stored.
+
+## Validation focus
+
+After each lifecycle step:
+
+- inspect JSON output or the suggested next command
+- confirm the session identifier used by the next command
+- check exit codes when the caller needs scripting guarantees
+- switch to `repos/cli` maintainer workflows only if package-level behavior is insufficient

package/skills/hagi/references/resource-lock.md

@@ -0,0 +1,135 @@
+# Resource lock
+
+`hagi agent lock` lets several agents take turns on one shared resource, for example a game server that only one agent may deploy to or test on at a time. The lock is a fair queue held by the backend. It is cooperative: it cannot stop an action that is already running on the remote resource, so every agent has to follow the protocol below.
+
+Every command is `hagi agent lock <verb>`. There is no top-level `hagi lock`. When the package is not installed, replace `hagi` with `npx @hagicode/cli`.
+
+## Numbers
+
+| Number | Value | Meaning |
+| --- | --- | --- |
+| Feedback timeout | 10 minutes | A holder that sends no heartbeat for 10 minutes loses the lock. Stopping the heartbeat alone releases the lock after this time. |
+| Maximum hold | 24 hours | Absolute, counted from the grant. The lock is taken back at the cap even when heartbeats keep arriving. |
+| Heartbeat interval | 2 minutes (120 s) | How often `heartbeat` renews. One lost beat is survivable. |
+| Claim window | 30 seconds | After a handoff the new holder must confirm (status, renew or acquire) within 30 s, or the lock moves on. A watcher confirms at once. |
+| Waiter TTL | 60 seconds | A queued owner that is not polling for 60 s is dropped from the queue. |
+| Default wait timeout | 900 seconds | `acquire --wait` gives up after this long. Change it with `--timeout <seconds>`. |
+
+`--lease-seconds` can request a shorter feedback timeout (30 to 600 seconds, never more than 10 minutes).
+
+## Addressing and owner
+
+- Name the lock with `--lock-id <id>` (for example `eu-1/duckov`) or with the pair `--server <name> --game <name>`, which means `<server>/<game>`. Do not mix the two forms.
+- The owner is **your own session ID**: pass it as `--owner <id>`, for example `--owner sess-7f2c`. When `--owner` is absent the CLI reads `HAGI_LOCK_OWNER`, then `HAGI_SESSION_ID`. With none of the three it exits `2` and makes no request. The CLI never invents an owner ID.
+- Use the same owner ID for every command about one lock. Two agents that share one owner ID act as one owner, and nothing detects that.
+
+```bash
+hagi agent lock acquire --lock-id eu-1/duckov --owner sess-7f2c
+hagi agent lock acquire --server eu-1 --game duckov --owner sess-7f2c --label "deploy test build" --json
+```
+
+## Commands
+
+| Command | Use |
+| --- | --- |
+| `hagi agent lock acquire` | Take the lock or join the queue. Without `--wait` it is one call and exits `0` for both `Holding` and `Queued`. With `--wait` it waits for the turn and exits `0` only when you hold the lock. It has no force option. Options: `--wait`, `--timeout <seconds>`, `--lease-seconds <n>`, `--label <text>`. |
+| `hagi agent lock status` | Read your own state: `Holding`, `Queued`, `Expired`, `Requisitioned` or `None`. Exit `0` for all of them. `--wait-seconds <n>` is a long poll (the server caps it at 25). |
+| `hagi agent lock heartbeat` | Keep a held lock alive. Long-running and quiet on success; run it under a watcher. Options: `--epoch <n>`, `--interval <seconds>`, `--lease-seconds <n>`, `--verbose`. |
+| `hagi agent lock renew` | One renewal, a single heartbeat. Prefer `heartbeat`. Options: `--epoch <n>`, `--lease-seconds <n>`. |
+| `hagi agent lock release` | Give the lock back or leave the queue. Exit `0` whether or not something was released. Option: `--epoch <n>`. |
+| `hagi agent lock requisition` | Emergency take that displaces the holder. Only on an explicit user order (rules 6 and 7). Requires `--reason <text>`; option `--label <text>`. |
+| `hagi agent lock list` | List locks that have a holder or a queue. Option: `--prefix <text>`. |
+
+Every command except `list` also takes `--lock-id`, `--server`, `--game` and `--owner`; all seven take the shared `--json` option. The answers carry the expected-time windows: when the lock is valid until, the hard cap, the check-in window and, for a queued owner, the turn window. Times are server times; they are guidance for when to expect something, not wake-up schedules. An epoch identifies one grant; the `acquire` answer prints it, and `heartbeat` reads it itself when `--epoch` is omitted.
+
+## Exit codes
+
+| Exit code | Meaning |
+| --- | --- |
+| `0` | Success. For `acquire --wait`: you hold the lock (your turn). For `heartbeat`: it was stopped by SIGINT or SIGTERM (the lock is not released). |
+| `2` | Usage error: missing owner, conflicting lock addressing, a bad number, `--timeout` without `--wait`. No request was sent. |
+| `20` / `21` / `23` / `24` / `29` | Backend refusal: invalid argument (for example a bad lock ID, owner or reason), unauthenticated, permission denied, not found, conflict. |
+| `30` | `acquire --wait` was interrupted (the queue entry is released), or the backend refused the operation. |
+| `31` | Wait timeout: `acquire --wait` reached `--timeout` without the turn. The queue entry it created was released. |
+| `32` | `LOCK_LOST`: the lock is no longer yours (lease expired, taken back at the 24-hour cap, stale epoch, not the holder, or requisitioned). Stop using the resource at once. Distinct from `31`. Printed by `heartbeat`, `renew`, and by `acquire --wait` when the queue entry was dropped. |
+| `40` / `50` | Other HTTP 4xx / HTTP 5xx equivalent. |
+| `60` | Transport failure. A watcher retries these itself and never treats them as loss. |
+| `70` | Unknown error. |
+
+## The watcher protocol
+
+A watcher is a long-running command whose output lines reach you as notifications. Use a Monitor that runs the command. Where there is no Monitor, run the same command as a background process whose output you read, or in a background sub-agent that reports back. State the rule in terms of what the watcher must do; the provider's tool is a detail.
+
+### 1. Acquire, read the windows, start the heartbeat watcher
+
+```bash
+hagi agent lock acquire --lock-id eu-1/duckov --owner sess-7f2c --label "deploy test build"
+```
+
+Read the status and the windows in the answer.
+
+- `Holding`: start the heartbeat watcher **before any work**, and keep it running while you use the resource.
+
+  ```bash
+  hagi agent lock heartbeat --lock-id eu-1/duckov --owner sess-7f2c --epoch 7
+  ```
+
+  It beats at once, then every 2 minutes. It prints one start line, then nothing while all is well. It prints a line, and exits `32`, when the lock is lost. It warns once when the backend has been unreachable for over 60 seconds and again on recovery, says "may already be lost" when the lease deadline passed during an outage, and warns 30 minutes and 5 minutes before the 24-hour cap. `--verbose` adds one line per beat. A transport error is never reported as loss.
+- `Queued`: start a continuous wait watcher and carry on with other work, or stop. Do not sleep until the window and then check.
+
+  ```bash
+  hagi agent lock acquire --lock-id eu-1/duckov --owner sess-7f2c --wait
+  ```
+
+  It prints one line when your position changes, and exits `0` when the turn comes (start the heartbeat watcher then), `31` on timeout (default 900 s), `32` if the entry was dropped. Pass `--timeout <seconds>` for a different limit.
+
+### 2. Finish: stop the heartbeat, then release
+
+When all tasks are done, stop the heartbeat watcher, then release:
+
+```bash
+hagi agent lock release --lock-id eu-1/duckov --owner sess-7f2c --epoch 7
+```
+
+Stopping the heartbeat watcher (SIGINT or SIGTERM) exits `0` and does not release. Stopping alone also ends the hold, because the backend releases the lock after 10 minutes without feedback, but `release` hands the resource over at once.
+
+### 3. Loss and recovery
+
+When a watcher reports that the lock was lost, stop using the resource immediately. Retrying does not extend the 24-hour cap or the 10-minute timeout.
+
+When you lose track of whether you hold the lock (for example after your context was compacted), run `acquire` again with the same owner. It is safe: the first acquire stays valid (same epoch, same 24-hour clock) and the answer gives the windows. It does **not** refresh the lease, so it is not a heartbeat. Then check that the heartbeat watcher is running, and start it if it is not.
+
+## The seven rules for the agent
+
+1. After an `acquire`, read the windows in the answer. If the status is `Holding`, start the heartbeat watcher (a Monitor running `hagi agent lock heartbeat ...`) before doing any work. Where Monitor is not available, run the same command as a background process or in a background sub-agent whose output you read.
+2. If the status is `Queued`, start a continuous wait watcher (a Monitor, or a sub-agent, running `hagi agent lock acquire --wait ...`) and carry on with other work or stop. Do not sleep until the window and then check: the waiter TTL (60 s) would drop your queue entry and the claim window (30 s) would take back a handoff nobody noticed. The window is a guide to when to expect the turn, not a wake-up schedule.
+3. When all tasks are done, stop the heartbeat watcher and then release the lock. Stopping the heartbeat alone is enough, because the backend releases the lock after 10 minutes without feedback, but `release` hands the resource over at once.
+4. When a watcher reports that the lock was lost, stop using the resource immediately. The 24-hour cap and the 10-minute timeout are not extended by retrying.
+5. If you lose track of whether you hold a lock (for example after your context is compacted), call `acquire` again with the same owner: it is safe, and the answer gives the windows. Then check that the heartbeat watcher is running.
+6. Never requisition unless the user has explicitly told you to force-take the lock. Your own judgment that something is urgent is not enough, and nothing is a requisition without an explicit user order. In every other case, call `acquire` and wait in the queue.
+7. When the user does order a requisition, run `requisition` with a reason that quotes the request, start the heartbeat watcher, and tell the user which owner was displaced. When you are the one displaced, stop using the resource immediately, tell the user, queue again only if your task still needs the resource, and never requisition back.
+
+## Requisition
+
+`requisition` takes the lock at once. It is its own command; `acquire` has no force option and `acquire --wait` never requisitions.
+
+```bash
+hagi agent lock requisition --lock-id eu-1/duckov --owner sess-7f2c --reason "User order: 'take the duckov lock now, the demo starts in five minutes'"
+```
+
+- Run it only after the user has explicitly ordered a forced take (rule 6). Quote the order in `--reason` (1 to 200 characters). The displaced agent is shown the reason and the backend logs it.
+- The answer prints the new epoch, the valid-until time and the windows. Start the heartbeat watcher at once (rule 7), then tell the user which owner was displaced.
+- If you already hold the lock, nothing changes. Waiters keep their order. The displaced owner is not queued again.
+- When you are displaced, your next heartbeat prints the requester, the time and the reason, and exits `32`. A status read shows `Requisitioned` for 10 minutes, then `None`. Stop at once, tell the user, queue again with `acquire` only if the task still needs the resource, and never requisition back.
+- A displaced agent may keep using the resource until its next heartbeat, up to 2 minutes. The lock cannot stop work that is already running on the remote resource.
+
+## Failure handling
+
+| Situation | What happens |
+| --- | --- |
+| Holder crashes, or stops its heartbeat without releasing | After 10 minutes the lock goes to the head of the queue; the old owner reads `Expired`. |
+| You never started a heartbeat watcher | The lock is released after 10 minutes; your next check-in reports loss. |
+| The heartbeat watcher dies while you live | Same as above. Check the watcher after a long step. |
+| The backend is unreachable | The heartbeat retries with 1 to 10 s backoff and warns after 60 s. It never reports loss by itself; the 10-minute timeout bounds the damage. |
+| You sleep instead of watching in the queue | The waiter TTL (60 s) removes your entry; the next call reads `Expired` and you queue again at the back. |
+| A slow old holder acts after being replaced | The epoch makes its renew and release fail; the new holder is unaffected. |

package/skills/hagi/references/saga.md

@@ -0,0 +1,260 @@
+# Saga commands
+
+Saga files are project-local. Select exactly one project with `--path <directory>` or `--project-id <id>` for every
+Saga command. A local `--path` is resolved on the CLI host and does not read backend configuration or make API calls.
+The one exception is `session create` (see [Worker sessions](#worker-sessions)), which calls the backend even with `--path`
+to find the registered project.
+
+## Initialize managed resources
+
+Run `init` before creating a Saga:
+
+```bash
+hagi saga init --path "./My Project"
+hagi saga init --path "./My Project" --json
+```
+
+Initialization installs only the ignore rule under `.hagicode/sagas/.gitignore`. It creates no `prompts/` directory and
+never installs method prompts into the project: the six bundled method prompts are read from the CLI package with
+`hagi saga method <name>` (see [Published methods](#published-methods)). It does not repair or overwrite existing Saga
+contracts, metadata, or runtime records.
+
+Existing project-local `prompts/` files from an earlier installation are left in place. Initialization does not read,
+compare, replace, or report them, so it never flags them as outdated or as conflicts. `--force` is still accepted, so
+existing scripts keep working, but it changes nothing: no managed resource can be replaced or conflict any more. The
+command prints each file's `created`, `unchanged`, or `merged` outcome and exits `0`. Forced initialization never discards custom `.gitignore` entries.
+
+The `.gitignore` rule `**/runtime/` is merged as a separate exact line. Existing bytes, line endings, and entries are
+preserved; LF and CRLF files are supported, and repeated initialization does not append duplicate rules.
+
+Before writing, initialization checks that managed directories and files are not redirected, that resource targets are
+regular files, and that writes will not replace unsafe hard-linked resources. Refused targets are reported as operation
+failures rather than followed outside the selected project. Exact resources are not rewritten on repeat runs, preserving
+their modes and modification times.
+
+With `--json`, stdout contains the installation root, the `force` setting, per-file `path`/`outcome` entries, and an
+empty `conflicts` array. The `files` array holds only the `.gitignore` entry.
+
+## Published methods
+
+The six method prompts (`goal`, `research`, `acceptance`, `plan`, `run`, `amend`) ship inside the installed CLI package,
+not in the project. Read one with:
+
+```bash
+hagi saga method run
+hagi saga method run --json
+```
+
+Plain output prints the method bytes unchanged. `--json` prints `{ "name", "sha256", "content" }`, where `sha256` is the
+lowercase SHA-256 of the same bytes. The command takes no `--path` or `--project-id`, reads no backend or project file,
+writes nothing, and works before a project has any Saga files. An unknown name, or a selector flag, exits `2`. Before
+returning any method, the CLI verifies every bundled resource against `resources/saga/manifest.json`; a missing or
+modified resource exits `30`, names the file, and prints no method content.
+
+`freeze` records the six digests in a `methods:` section of `contract.lock`, for revision 1 and for every later
+revision. The CLI computes the digests itself. A repeat freeze on an unchanged contract leaves the lock untouched,
+including a lock written before this section existed, and `revisions/rN.lock` keeps its own section byte for byte.
+
+`check --phase run --json` adds `methods: { "recorded", "drift": [{ "name", "recorded", "current" }] }` when a lock exists.
+`recorded` is `false` for a lock without the section, and then `drift` is empty. Drift means the installed CLI's method
+differs from the one the Saga was frozen under, which is expected after a CLI upgrade. It is a notice only: it never adds
+an error, never changes the exit code, and never writes a file. Human output prints one `notice:` line per drifted method.
+`execute` tells the user which methods changed and continues only after confirmation; a changed digest is not treated as
+tampering. The plan phase never reports methods.
+
+Project-local `prompts/` files are no longer used by any command. `execute` leaves them in place, ignores them, and says in
+its report that they may be deleted.
+
+## Create and inspect Sagas
+
+`new <saga-id>` creates the Saga natively: it reserves `<saga-id>/` with an exclusive directory creation and writes
+`saga.json` with `id`, `createdAt`, and `method`. It writes no runtime file. IDs must
+match `^[a-z0-9][a-z0-9-]{0,62}$`: one to 63 lowercase letters, digits, or hyphens, beginning with a letter or digit. The
+reserved names are `prompts`, `tools`, `archive`, `runtime`, `amendments`, and `revisions`. Invalid IDs are usage errors
+(code `2`). An existing active path or an archive entry whose name ends in `-<saga-id>` is a collision; creation is
+refused with code `30` and neither Saga is changed. Concurrent creations of one ID leave exactly one Saga.
+
+The `--json` result identifies the Saga directory and includes the metadata written to `saga.json`:
+
+```json
+{
+  "id": "demo",
+  "directory": "/path/to/My Project/.hagicode/sagas/demo",
+  "metadata": {
+    "id": "demo",
+    "createdAt": "2026-01-01T00:00:00Z",
+    "method": 1
+  }
+}
+```
+
+The human result names `hagi saga method goal` as the way to read the planning method, and the four planning files to
+write: `goal.md`, `research.md`, `acceptance.md`, and `progress.md`. `status` gives the same direction for the next artifact,
+for example `hagi saga method research`.
+
+Then inspect the Saga with the read-only commands:
+
+```bash
+hagi saga new demo --path "./My Project" --json
+hagi saga status demo --path "./My Project" --json
+hagi saga list --path "./My Project"
+hagi saga items demo --path "./My Project" --json
+```
+
+### Query payloads and read-only behavior
+
+`list --json` returns `{ "sagas": [...] }`; each row contains `sagaId`, `state`, `revision`, `counts`, `openAmendments`,
+and `updatedAt`. `items <saga-id> --json` returns `{ "sagaId": "...", "items": [...] }`, with each item carrying its
+canonical `id`, `title`, `state`, `cmd`, and `note`.
+
+`status <saga-id> --json` returns the `saga-status/2` projection directly, with `schema`, `sagaId`, `revision`, `state`,
+`updatedAt`, `note`, `artifacts`, `nextArtifact`, `counts`, `openAmendments`, and `items`. It derives this view from the
+Saga files; `updatedAt` is the time of this observation, not the execution heartbeat in `runtime/status.json`. The query
+does not refresh or rewrite that stored status, and its default `note` is empty rather than a cached execution note.
+
+All three queries are strictly read-only: they do not initialize or repair resources, create runtime files, run the Saga
+tool, or execute acceptance commands. Missing optional draft files use canonical empty-data behavior; malformed or
+unreadable existing data is reported instead of being repaired. ## Execution ownership and the token
+
+`claim`, `assert-owner`, and `release` manage `runtime/execute.lock`. Every mutating command (`freeze`, `tick`, `block`,
+`set-status`, `amend`, `archive`, `release`, `assert-owner`) reads the execution token from `--token <token>` or, when
+that flag is absent, from `SAGA_EXECUTION_TOKEN`. The exception is `session create`, which reads only `SAGA_EXECUTION_TOKEN`.
+
+```bash
+hagi saga claim demo --path "./My Project" --session orchestrator-1
+hagi saga assert-owner demo --path "./My Project" --token "$SAGA_EXECUTION_TOKEN"
+hagi saga release demo --path "./My Project" --token "$SAGA_EXECUTION_TOKEN" --workers-settled --json
+```
+
+- `claim --session <id>` creates the lock exclusively and returns the token once, in the human output and as `token` in
+  JSON. A second claim is refused with code `1` and names the owning session. A lock is never taken over because of its
+  age, and a refused claim changes no file.
+- While a lock exists, a mutating command needs the holder's token. A missing or different token is refused with exit
+  code `1` and changes no file. Without a lock, mutating commands run under their own gates, so a Saga created before ownership stays runnable.
+- `assert-owner` exits `0` when no lock exists or the token matches, and `1` otherwise.
+- `release` removes the lock only for the holder, with `--workers-settled`, and only when `runtime/status.json` records
+  `paused` or `done`. Any other case exits `1` and keeps the lock.
+- `status`, `items`, `list`, and `check` need no token and never write.
+- With `--project-id`, the root `--token` is the backend bearer token, so `--token` is rejected with `--project-id` as a
+  usage error (code `2`) that explains the rule. Pass the execution token through `SAGA_EXECUTION_TOKEN` instead. An execution token is never sent to the backend.
+
+## Plan check and freeze
+
+```bash
+hagi saga check demo --path "./My Project" --phase plan
+hagi saga check demo --path "./My Project" --phase run --json
+hagi saga freeze demo --path "./My Project" --token "$SAGA_EXECUTION_TOKEN" --json
+```
+
+`check --phase plan` passes when `goal.md`, `research.md`, `acceptance.md`, and `progress.md` exist, `progress.md` has at
+least one active item, every active item has an acceptance `cmd:`, and every acceptance entry names an active item.
+`check --phase run` is the default; it adds the frozen-contract hash comparison, the amendment and open-question gates,
+and the proof of every ticked item (an evidence file and a `Status: PASS` or `状态: PASS` report). Any other `--phase`
+value is a usage error (code `2`). Checks write nothing.
+
+`freeze` writes `contract.lock` revision 1 for a valid first contract, including the `methods:` section. A repeat on an unchanged contract exits `0`, reports
+the existing revision, and leaves the lock bytes intact. After a contract change, freeze writes revision N+1 only when an
+amendment is merged into `rN+1` and no frozen item disappeared without a superseded row. The previous lock moves to
+`revisions/rN.lock`, each ticked item whose acceptance command changed is reopened, and its evidence and report move to
+`runtime/history/rN/`. Every refusal (open question, unmerged amendment, plan mismatch, tampered contract, removed item)
+lists each reason, exits `1`, and writes nothing.
+
+## Worker sessions
+
+Set `SAGA_EXECUTION_TOKEN` to the token that `claim` printed, then create a Worker and record it:
+
+```bash
+hagi saga session create --saga demo --path "./My Project" --title "T1 implementation" --role implementation --master orchestrator-1 --item T1 --json
+```
+
+- The command creates one ordinary chat session in the project and appends one line to `runtime/sessions.md`. It sends
+  no message and does not archive the session; `hagi chat archive --session-id <id>` stays a separate step.
+- Required and nonblank: `--saga <id>`, `--title <title>`, `--role implementation|verification`, and `--master <session-id>`
+  (the orchestrator's own session ID). `--item <id>` is optional. `--saga` and `--item` are identifiers: a path separator
+  or a traversal segment is a usage error (code `2`). Exactly one of `--path <directory>` or `--project-id <id>` is
+  required.
+- The execution token comes only from `SAGA_EXECUTION_TOKEN`, which must be set and nonempty. `--token` is refused with
+  either selector as a usage error (code `2`), because the root `--token` is the backend bearer token and must never carry
+  the execution token. A missing token is also code `2`, and no request is sent.
+- `--path` calls the backend: the command lists the registered projects and takes the one whose real path equals the
+  root. Projects whose path is missing on this host are skipped. Zero matches, or several, is a refusal (code `1`) that
+  names the path or the matching IDs, and creates nothing. `--project-id` looks the project up directly.
+- After the project and the Saga are resolved, the owner check of `assert-owner` runs with the token. A Saga without a lock
+  still passes once a token is set. A wrong token is a refusal (code `1`), and an unknown Saga is code `24`.
+- The new session's `userMetadata` holds `saga.id` (the Saga), `saga.role` (always `worker`), `saga.worker` (the `--role`
+  value), `saga.master` (the `--master` value), and `saga.item` only when `--item` is given. The backend checks the key
+  format (`^[a-z][a-z0-9._-]{0,63}$`), at most 16 entries, and value length (1 to 512 characters). The metadata is
+  write-once and readable by everyone who can read the session, so it groups Workers and is not a security boundary. The
+  token never appears in it. Workers created before this command carry no `saga.*` metadata and are not backfilled.
+- The record is one line, `- <session-id> | <UTC time> | <role> | <item or -> | <title>`, appended after earlier content
+  in `<root>/.hagicode/sagas/<saga>/runtime/sessions.md`. The file and `runtime/` are created when missing. Whitespace in
+  the title, line breaks included, collapses to single spaces. A symbolic link or a redirected `runtime/` is refused
+  before the session is created.
+- If the append fails after the session was created, the command exits `1` and names the created session ID, in the
+  human output and as `session.sessionId` in `--json` with `ok` false.
+- `--json` success is one object: `{ "sagaId": "demo", "command": "session create", "ok": true, "session": { "sessionId": "...", "userMetadata": { ... } }, "record": "<path to sessions.md>" }`.
+- Exit codes: `0` created and recorded; `1` refused, or the record failed after creation; `2` usage error; `24` Saga not found.
+
+## Items, amendments, and archive
+
+```bash
+hagi saga tick demo T1 --path "./My Project" --token "$SAGA_EXECUTION_TOKEN" --json
+hagi saga block demo T2 "tests keep failing" --path "./My Project" --token "$SAGA_EXECUTION_TOKEN"
+hagi saga amend demo "Add retry" "Retry twice on timeout" --path "./My Project" --token "$SAGA_EXECUTION_TOKEN"
+hagi saga archive demo --path "./My Project" --token "$SAGA_EXECUTION_TOKEN" --json
+```
+
+- `tick` marks an active item done in `progress.md` as `- [x] <id> <title> | evidence/<id>.log`. It needs a PASS report at
+  `runtime/reports/<id>.md`, the evidence file, and a passing run check; otherwise it exits `1` and keeps `progress.md`.
+  A successful tick clears that item's blocker. Item IDs containing a path separator or `.`/`..` are refused before any
+  file access.
+- `block` records a reason for an active item in `runtime/blocked.json`. An unknown item is refused. An empty reason is a
+  usage error (code `2`).
+- `amend` appends the next numbered file, `amendments/<NNN>-<slug>.md`, with an empty `merged-in:` header; the new
+  amendment is open until the contract merges it. An empty title is a usage error (code `2`).
+- `archive` moves a finished Saga (every active item done, no open amendment) to `archive/<date>-<saga-id>`. Use
+  `--force` to archive unfinished work. An existing destination is refused even with `--force`.
+
+## Status snapshot
+
+```bash
+hagi saga set-status demo --state paused --note "freeze refused" --path "./My Project" --token "$SAGA_EXECUTION_TOKEN" --json
+```
+
+`set-status --state` accepts `draft`, `planned`, `running`, `paused`, or `done`; any other value (or a missing value) is a
+usage error (code `2`) and writes no file. The snapshot is the same `saga-status/2` projection that `status` reports, with
+only `state` and `note` replaced. `planned` and `running` require the plan check to pass. `done` requires every active
+item to be done with its evidence and PASS report, a frozen and unchanged contract, no open amendment, and no undecided
+research question. A refusal exits `1`, lists its reasons, and leaves the stored `runtime/status.json` unchanged. The file
+is replaced atomically, so a concurrent reader always sees a complete document.
+
+## Exit codes and JSON
+
+| Code | Meaning |
+|------|---------|
+| `0` | Success. |
+| `1` | Refusal or failed check. Every reason is printed; nothing was changed. |
+| `2` | Usage error: bad selector, missing or invalid argument, or `--token` with `--project-id` (with either selector for `session create`). |
+| `4` | Reserved. `init` no longer produces conflicts, so no current command returns it. |
+| `24` | Saga or project not found. |
+| `30` | Operation failed, including a `new` collision. |
+
+Write and check commands accept `--json`. Success and refusal write one object to stdout:
+
+```json
+{ "sagaId": "demo", "command": "tick", "ok": true, "itemId": "T1", "evidence": "evidence/T1.log" }
+{ "sagaId": "demo", "command": "tick", "ok": false, "errors": ["no PASS report for T1: runtime/reports/T1.md must contain \"Status: PASS\""] }
+```
+
+Human output prints a one-line outcome and one line per refusal reason.
+
+## Runtime ignore precondition
+
+Before any command writes a file under a Saga's `runtime/` directory (`claim`, `set-status`, `tick`, `block`, `session create`,
+and a `freeze` that moves history), it makes sure `.hagicode/sagas/.gitignore` ignores runtime directories. An existing
+`**/runtime/` line is kept byte for byte; otherwise `**/runtime/` is appended with the file's line endings.
+If the ignore file cannot be written, the command stops before `runtime/` is created.
+
+## Read-only projection and ownership
+
+Every write and check command is implemented by the CLI and never executes a separate tool. The CLI installs only the ignore rule and reads the method prompts from its own package; there is no installed tool to run.