@skrr-ai/cli 0.1.28 → 0.1.30

package/oclif.manifest.json

@@ -3327,324 +3327,6 @@
         "with.js"
       ]
     },
-    "api-keys:create": {
-      "aliases": [],
-      "args": {
-        "name": {
-          "description": "Human label for the key (also settable with --name)",
-          "name": "name"
-        }
-      },
-      "description": "Mint a Managed Agents API key (osk_*) for a Space. The secret is shown once and never again.",
-      "examples": [
-        "<%= config.bin %> api-keys create --space <space-id> --name \"ci\"",
-        "<%= config.bin %> api-keys create --space <space-id> --name \"probe\" --env test --scope environments:write"
-      ],
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "space": {
-          "description": "Space that owns the key",
-          "name": "space",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "name": {
-          "description": "Human label for the key (≤200 chars)",
-          "name": "name",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "env": {
-          "description": "Key environment",
-          "name": "env",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "live",
-            "test"
-          ],
-          "type": "option"
-        },
-        "scope": {
-          "description": "Scope to grant (repeatable, e.g. environments:write)",
-          "name": "scope",
-          "hasDynamicHelp": false,
-          "multiple": true,
-          "type": "option"
-        },
-        "expires-at": {
-          "description": "ISO 8601 expiry; must be in the future",
-          "name": "expires-at",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "api-keys:create",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "api-keys",
-        "create.js"
-      ]
-    },
-    "api-keys:list": {
-      "aliases": [],
-      "args": {},
-      "description": "List a Space's Managed Agents API keys. Secrets are never shown — only prefixes.",
-      "examples": [
-        "<%= config.bin %> api-keys list --space <space-id>"
-      ],
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "space": {
-          "description": "Space that owns the keys",
-          "name": "space",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "api-keys:list",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "api-keys",
-        "list.js"
-      ]
-    },
-    "api-keys:revoke": {
-      "aliases": [],
-      "args": {
-        "id": {
-          "description": "Key id",
-          "name": "id",
-          "required": true
-        }
-      },
-      "description": "Revoke a Managed Agents API key. Irreversible — mint a replacement rather than expecting to undo this.",
-      "examples": [
-        "<%= config.bin %> api-keys revoke <key-id> --space <space-id>"
-      ],
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "space": {
-          "description": "Space that owns the key",
-          "name": "space",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "api-keys:revoke",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "api-keys",
-        "revoke.js"
-      ]
-    },
-    "api-keys:rotate": {
-      "aliases": [],
-      "args": {
-        "id": {
-          "description": "Key id",
-          "name": "id",
-          "required": true
-        }
-      },
-      "description": "Rotate a Managed Agents API key. The new secret is shown once; the old one stops working.",
-      "examples": [
-        "<%= config.bin %> api-keys rotate <key-id> --space <space-id>"
-      ],
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "space": {
-          "description": "Space that owns the key",
-          "name": "space",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "api-keys:rotate",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "api-keys",
-        "rotate.js"
-      ]
-    },
     "agents:activity": {
       "aliases": [],
       "args": {
@@ -6367,6 +6049,324 @@
         "visibility.js"
       ]
     },
+    "api-keys:create": {
+      "aliases": [],
+      "args": {
+        "name": {
+          "description": "Human label for the key (also settable with --name)",
+          "name": "name"
+        }
+      },
+      "description": "Mint a Managed Agents API key (osk_*) for a Space. The secret is shown once and never again.",
+      "examples": [
+        "<%= config.bin %> api-keys create --space <space-id> --name \"ci\"",
+        "<%= config.bin %> api-keys create --space <space-id> --name \"probe\" --env test --scope environments:write"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "space": {
+          "description": "Space that owns the key",
+          "name": "space",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "name": {
+          "description": "Human label for the key (≤200 chars)",
+          "name": "name",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "env": {
+          "description": "Key environment",
+          "name": "env",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "live",
+            "test"
+          ],
+          "type": "option"
+        },
+        "scope": {
+          "description": "Scope to grant (repeatable, e.g. environments:write)",
+          "name": "scope",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "expires-at": {
+          "description": "ISO 8601 expiry; must be in the future",
+          "name": "expires-at",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "api-keys:create",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "api-keys",
+        "create.js"
+      ]
+    },
+    "api-keys:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List a Space's Managed Agents API keys. Secrets are never shown — only prefixes.",
+      "examples": [
+        "<%= config.bin %> api-keys list --space <space-id>"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "space": {
+          "description": "Space that owns the keys",
+          "name": "space",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "api-keys:list",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "api-keys",
+        "list.js"
+      ]
+    },
+    "api-keys:revoke": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Key id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Revoke a Managed Agents API key. Irreversible — mint a replacement rather than expecting to undo this.",
+      "examples": [
+        "<%= config.bin %> api-keys revoke <key-id> --space <space-id>"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "space": {
+          "description": "Space that owns the key",
+          "name": "space",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "api-keys:revoke",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "api-keys",
+        "revoke.js"
+      ]
+    },
+    "api-keys:rotate": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Key id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Rotate a Managed Agents API key. The new secret is shown once; the old one stops working.",
+      "examples": [
+        "<%= config.bin %> api-keys rotate <key-id> --space <space-id>"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "space": {
+          "description": "Space that owns the key",
+          "name": "space",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "api-keys:rotate",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "api-keys",
+        "rotate.js"
+      ]
+    },
     "balance:history": {
       "aliases": [],
       "args": {},
@@ -6889,79 +6889,6 @@
         "uninstall.js"
       ]
     },
-    "characters:list": {
-      "aliases": [],
-      "args": {},
-      "description": "List the 3D characters you can use — the ids `spaces live scene --character` takes",
-      "examples": [
-        "<%= config.bin %> characters list",
-        "<%= config.bin %> characters list --json"
-      ],
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "details": {
-          "description": "Include renderer-only inline image placeholders in JSON (may be large)",
-          "name": "details",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "limit": {
-          "description": "Maximum characters to return",
-          "name": "limit",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "characters:list",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "characters",
-        "list.js"
-      ]
-    },
     "chats:create": {
       "aliases": [],
       "args": {},
@@ -7867,7 +7794,7 @@
           "type": "option"
         },
         "daemon": {
-          "description": "Which daemon installs it. Defaults to the only active one; required when you have several.",
+          "description": "Which daemon installs it. Defaults to this machine on a Dedicated Runtime, otherwise to the only active one; required when you have several.",
           "name": "daemon",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -21820,7 +21747,7 @@
           "type": "option"
         },
         "daemon": {
-          "description": "Daemon ID; inferred when exactly one daemon is online",
+          "description": "Daemon ID; defaults to this machine on a Dedicated Runtime, otherwise inferred when exactly one daemon is online",
           "name": "daemon",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -64518,9 +64445,325 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "agent": {
-          "description": "Filter by agent ID",
-          "name": "agent",
+        "agent": {
+          "description": "Filter by agent ID",
+          "name": "agent",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "commitments:endpoints:list",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "commitments",
+        "endpoints",
+        "list.js"
+      ]
+    },
+    "commitments:endpoints:revoke": {
+      "aliases": [],
+      "args": {
+        "endpointId": {
+          "description": "Endpoint ID",
+          "name": "endpointId",
+          "required": true
+        }
+      },
+      "description": "Revoke a commitment endpoint’s connection (the record stays)",
+      "examples": [
+        "<%= config.bin %> commitments endpoints revoke ep_abc123",
+        "<%= config.bin %> commitments endpoints revoke ep_abc123 --yes"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "yes": {
+          "char": "y",
+          "description": "Skip confirmation prompt",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "commitments:endpoints:revoke",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "commitments",
+        "endpoints",
+        "revoke.js"
+      ]
+    },
+    "commitments:goals:link": {
+      "aliases": [],
+      "args": {
+        "commitmentId": {
+          "description": "Commitment ID",
+          "name": "commitmentId",
+          "required": true
+        },
+        "goalId": {
+          "description": "Goal ID",
+          "name": "goalId",
+          "required": true
+        }
+      },
+      "description": "Link a goal to a commitment (the commitment watches it)",
+      "examples": [
+        "<%= config.bin %> commitments goals link obj_abc123 goal_xyz789"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "commitments:goals:link",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "commitments",
+        "goals",
+        "link.js"
+      ]
+    },
+    "commitments:goals:unlink": {
+      "aliases": [],
+      "args": {
+        "commitmentId": {
+          "description": "Commitment ID",
+          "name": "commitmentId",
+          "required": true
+        },
+        "goalId": {
+          "description": "Goal ID",
+          "name": "goalId",
+          "required": true
+        }
+      },
+      "description": "Unlink a goal from a commitment (both keep existing)",
+      "examples": [
+        "<%= config.bin %> commitments goals unlink obj_abc123 goal_xyz789"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "commitments:goals:unlink",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "commitments",
+        "goals",
+        "unlink.js"
+      ]
+    },
+    "commitments:links:create": {
+      "aliases": [],
+      "args": {
+        "commitmentId": {
+          "description": "Commitment ID",
+          "name": "commitmentId",
+          "required": true
+        },
+        "targetType": {
+          "description": "Work object type",
+          "name": "targetType",
+          "options": [
+            "space",
+            "project",
+            "goal",
+            "task"
+          ],
+          "required": true
+        },
+        "targetId": {
+          "description": "Accessible work object ID",
+          "name": "targetId",
+          "required": true
+        }
+      },
+      "description": "Link a work object to a commitment with its current responsibility roles",
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "role": {
+          "description": "Responsibility role (repeat for more than one)",
+          "name": "role",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "options": [
+            "home",
+            "watch",
+            "advance",
+            "delivery"
+          ],
+          "type": "option"
+        },
+        "rationale": {
+          "description": "Why this work object belongs in the commitment scope",
+          "name": "rationale",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -64528,7 +64771,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "commitments:endpoints:list",
+      "id": "commitments:links:create",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -64540,24 +64783,25 @@
         "dist",
         "commands",
         "commitments",
-        "endpoints",
-        "list.js"
+        "links",
+        "create.js"
       ]
     },
-    "commitments:endpoints:revoke": {
+    "commitments:links:detach": {
       "aliases": [],
       "args": {
-        "endpointId": {
-          "description": "Endpoint ID",
-          "name": "endpointId",
+        "commitmentId": {
+          "description": "Commitment ID",
+          "name": "commitmentId",
+          "required": true
+        },
+        "linkId": {
+          "description": "Work link ID",
+          "name": "linkId",
           "required": true
         }
       },
-      "description": "Revoke a commitment endpoint’s connection (the record stays)",
-      "examples": [
-        "<%= config.bin %> commitments endpoints revoke ep_abc123",
-        "<%= config.bin %> commitments endpoints revoke ep_abc123 --yes"
-      ],
+      "description": "Detach a work object from a commitment without changing the work object",
       "flags": {
         "bare": {
           "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
@@ -64591,18 +64835,11 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
-        },
-        "yes": {
-          "char": "y",
-          "description": "Skip confirmation prompt",
-          "name": "yes",
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "commitments:endpoints:revoke",
+      "id": "commitments:links:detach",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -64614,28 +64851,20 @@
         "dist",
         "commands",
         "commitments",
-        "endpoints",
-        "revoke.js"
+        "links",
+        "detach.js"
       ]
     },
-    "commitments:goals:link": {
+    "commitments:links:list": {
       "aliases": [],
       "args": {
         "commitmentId": {
           "description": "Commitment ID",
           "name": "commitmentId",
           "required": true
-        },
-        "goalId": {
-          "description": "Goal ID",
-          "name": "goalId",
-          "required": true
         }
       },
-      "description": "Link a goal to a commitment (the commitment watches it)",
-      "examples": [
-        "<%= config.bin %> commitments goals link obj_abc123 goal_xyz789"
-      ],
+      "description": "List the current work objects a commitment watches, advances, or delivers into",
       "flags": {
         "bare": {
           "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
@@ -64669,11 +64898,17 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
+        },
+        "inactive": {
+          "description": "Include detached, archived, and access-revoked links",
+          "name": "inactive",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "commitments:goals:link",
+      "id": "commitments:links:list",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -64685,11 +64920,11 @@
         "dist",
         "commands",
         "commitments",
-        "goals",
-        "link.js"
+        "links",
+        "list.js"
       ]
     },
-    "commitments:goals:unlink": {
+    "commitments:links:update": {
       "aliases": [],
       "args": {
         "commitmentId": {
@@ -64697,16 +64932,13 @@
           "name": "commitmentId",
           "required": true
         },
-        "goalId": {
-          "description": "Goal ID",
-          "name": "goalId",
+        "linkId": {
+          "description": "Work link ID",
+          "name": "linkId",
           "required": true
         }
       },
-      "description": "Unlink a goal from a commitment (both keep existing)",
-      "examples": [
-        "<%= config.bin %> commitments goals unlink obj_abc123 goal_xyz789"
-      ],
+      "description": "Update the roles or rationale on an existing commitment work link",
       "flags": {
         "bare": {
           "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
@@ -64740,11 +64972,31 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
+        },
+        "role": {
+          "description": "Replacement responsibility role set (repeat for more than one)",
+          "name": "role",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "options": [
+            "home",
+            "watch",
+            "advance",
+            "delivery"
+          ],
+          "type": "option"
+        },
+        "rationale": {
+          "description": "Replacement rationale",
+          "name": "rationale",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "commitments:goals:unlink",
+      "id": "commitments:links:update",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -64756,8 +65008,8 @@
         "dist",
         "commands",
         "commitments",
-        "goals",
-        "unlink.js"
+        "links",
+        "update.js"
       ]
     },
     "commitments:pack:bind": {
@@ -65167,173 +65419,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "commitments:pack:promote",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "commitments",
-        "pack",
-        "promote.js"
-      ]
-    },
-    "commitments:pack:shadow": {
-      "aliases": [],
-      "args": {
-        "id": {
-          "description": "Commitment ID",
-          "name": "id",
-          "required": true
-        }
-      },
-      "description": "Activate shadow: run the Pack in Monitor while saving its Mode and delivery promotion target",
-      "examples": [
-        "<%= config.bin %> commitments pack shadow <commitment-id>"
-      ],
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "commitments:pack:shadow",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "commitments",
-        "pack",
-        "shadow.js"
-      ]
-    },
-    "commitments:links:create": {
-      "aliases": [],
-      "args": {
-        "commitmentId": {
-          "description": "Commitment ID",
-          "name": "commitmentId",
-          "required": true
-        },
-        "targetType": {
-          "description": "Work object type",
-          "name": "targetType",
-          "options": [
-            "space",
-            "project",
-            "goal",
-            "task"
-          ],
-          "required": true
-        },
-        "targetId": {
-          "description": "Accessible work object ID",
-          "name": "targetId",
-          "required": true
-        }
-      },
-      "description": "Link a work object to a commitment with its current responsibility roles",
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "role": {
-          "description": "Responsibility role (repeat for more than one)",
-          "name": "role",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": true,
-          "options": [
-            "home",
-            "watch",
-            "advance",
-            "delivery"
-          ],
-          "type": "option"
-        },
-        "rationale": {
-          "description": "Why this work object belongs in the commitment scope",
-          "name": "rationale",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "commitments:links:create",
+      "id": "commitments:pack:promote",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -65345,25 +65431,23 @@
         "dist",
         "commands",
         "commitments",
-        "links",
-        "create.js"
+        "pack",
+        "promote.js"
       ]
     },
-    "commitments:links:detach": {
+    "commitments:pack:shadow": {
       "aliases": [],
       "args": {
-        "commitmentId": {
+        "id": {
           "description": "Commitment ID",
-          "name": "commitmentId",
-          "required": true
-        },
-        "linkId": {
-          "description": "Work link ID",
-          "name": "linkId",
+          "name": "id",
           "required": true
         }
       },
-      "description": "Detach a work object from a commitment without changing the work object",
+      "description": "Activate shadow: run the Pack in Monitor while saving its Mode and delivery promotion target",
+      "examples": [
+        "<%= config.bin %> commitments pack shadow <commitment-id>"
+      ],
       "flags": {
         "bare": {
           "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
@@ -65401,7 +65485,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "commitments:links:detach",
+      "id": "commitments:pack:shadow",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -65413,20 +65497,18 @@
         "dist",
         "commands",
         "commitments",
-        "links",
-        "detach.js"
+        "pack",
+        "shadow.js"
       ]
     },
-    "commitments:links:list": {
+    "characters:list": {
       "aliases": [],
-      "args": {
-        "commitmentId": {
-          "description": "Commitment ID",
-          "name": "commitmentId",
-          "required": true
-        }
-      },
-      "description": "List the current work objects a commitment watches, advances, or delivers into",
+      "args": {},
+      "description": "List the 3D characters you can use — the ids `spaces live scene --character` takes",
+      "examples": [
+        "<%= config.bin %> characters list",
+        "<%= config.bin %> characters list --json"
+      ],
       "flags": {
         "bare": {
           "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
@@ -65461,96 +65543,15 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "inactive": {
-          "description": "Include detached, archived, and access-revoked links",
-          "name": "inactive",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "commitments:links:list",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "commitments",
-        "links",
-        "list.js"
-      ]
-    },
-    "commitments:links:update": {
-      "aliases": [],
-      "args": {
-        "commitmentId": {
-          "description": "Commitment ID",
-          "name": "commitmentId",
-          "required": true
-        },
-        "linkId": {
-          "description": "Work link ID",
-          "name": "linkId",
-          "required": true
-        }
-      },
-      "description": "Update the roles or rationale on an existing commitment work link",
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
+        "details": {
+          "description": "Include renderer-only inline image placeholders in JSON (may be large)",
+          "name": "details",
           "allowNo": false,
           "type": "boolean"
         },
-        "role": {
-          "description": "Replacement responsibility role set (repeat for more than one)",
-          "name": "role",
-          "hasDynamicHelp": false,
-          "multiple": true,
-          "options": [
-            "home",
-            "watch",
-            "advance",
-            "delivery"
-          ],
-          "type": "option"
-        },
-        "rationale": {
-          "description": "Replacement rationale",
-          "name": "rationale",
+        "limit": {
+          "description": "Maximum characters to return",
+          "name": "limit",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -65558,7 +65559,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "commitments:links:update",
+      "id": "characters:list",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -65569,9 +65570,8 @@
       "relativePath": [
         "dist",
         "commands",
-        "commitments",
-        "links",
-        "update.js"
+        "characters",
+        "list.js"
       ]
     },
     "dm:thread:broadcast": {
@@ -69367,7 +69367,7 @@
           "type": "option"
         },
         "engine": {
-          "description": "Which engine row to attach when the machine registered several (claude, codex, sky-code, oversky). Required only when it is ambiguous.",
+          "description": "Which engine row to attach when the machine registered several (claude, codex, sky-code). Required only when it is ambiguous.",
           "name": "engine",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -69465,19 +69465,20 @@
       "aliases": [],
       "args": {
         "source": {
-          "description": "Local path, or <lease-id>:<path> on the machine",
+          "description": "Local path, or <lease-id>:<path> on the machine (relative to /workspace, inside repos/ or user-data/)",
           "name": "source",
           "required": true
         },
         "destination": {
-          "description": "Local path, or <lease-id>:<path> on the machine",
+          "description": "Local path, or <lease-id>:<path> on the machine; a directory (or a path ending in /) receives the file under its own name",
           "name": "destination",
           "required": true
         }
       },
-      "description": "Copy a file to or from a Dedicated Runtime machine",
+      "description": "One file of at most 64 MiB, in either direction; exactly one side is <lease-id>:<path>. Push anything larger through Git or object storage.\n\nOn the machine a path is relative to /workspace (/workspace/... works too) and must be inside repos/ or user-data/: the rest of the workspace belongs to the runtime. A path that leads outside the workspace through a symbolic link is refused, and so is a name that holds credentials (.env, keys, .ssh/, .npmrc, .git/config and the like). A missing directory on the machine is created.\n\nAs with cp and scp, a destination that ends in / or is an existing directory receives the file under its source name.\n\nNeither side is left half-written: the file is staged beside its destination and renamed into place at the end. A file that changes while it is copied is refused, not spliced. Ctrl-C removes the partial copy and exits 130 (143 for SIGTERM, 129 when the terminal closes). Progress is shown on a terminal, but not with --json or under CI.",
       "examples": [
         "<%= config.bin %> machines dedicated cp ./dist/app.tar.gz rtl_abc123:repos/app/app.tar.gz",
+        "<%= config.bin %> machines dedicated cp ./notes.md rtl_abc123:user-data/",
         "<%= config.bin %> machines dedicated cp rtl_abc123:repos/app/coverage/report.html ./report.html"
       ],
       "flags": {
@@ -69522,6 +69523,7 @@
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
       "strict": true,
+      "summary": "Copy a file to or from a Dedicated Runtime machine",
       "enableJsonFlag": false,
       "resolveSpaceFlag": true,
       "isESM": false,
@@ -69538,6 +69540,7 @@
       "args": {},
       "description": "Request a Dedicated Runtime lease. See `machines dedicated catalog` for sizes, storage bounds and prices.",
       "examples": [
+        "<%= config.bin %> machines dedicated create --name dev-box --size-preset standard",
         "<%= config.bin %> machines dedicated create --name dev-box --size-preset standard --spending-limit-cents 20000",
         "<%= config.bin %> machines dedicated create --name dev-box --size-preset standard --spending-limit-cents 20000 --repository acme/app --wait --json"
       ],
@@ -69614,9 +69617,8 @@
           "type": "option"
         },
         "spending-limit-cents": {
-          "description": "Monthly spending limit in cents. Required; change it later with `machines dedicated spending-limit`.",
+          "description": "Monthly spending cap in cents. Omit it to take the product's default cap (see `machines dedicated catalog`); change it later with `machines dedicated spending-limit`.",
           "name": "spending-limit-cents",
-          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -69877,9 +69879,15 @@
           "description": "Dedicated Runtime lease id",
           "name": "id",
           "required": true
+        },
+        "command": {
+          "description": "The command and its arguments, after --",
+          "multiple": true,
+          "name": "command",
+          "required": false
         }
       },
-      "description": "Run one command on a Dedicated Runtime machine and return its output and exit code",
+      "description": "Runs the command once, as the workload user, in /workspace or --cwd, through a shell with no TTY. Give it after -- as words (each one quoted for you), or as one shell string with --command; not both. The agent shell policy does not apply. A start whose answer is lost is followed up under the same request id, never run a second time.\n\nExit status: the command's own exit code, and 124 when --timeout passes (its process group is killed; what it printed before then is still shown). When skrr refuses or cannot reach the machine it exits 1 (2 for a usage mistake) and prints a Code: line on stderr.\n\nOutput: stdout and stderr together. Each keeps its own order, but they are read as two streams, so a line from one can land before a line the other printed first; use --command '{ ...; } 2>&1' when that order matters. The machine returns at most 1 MB and the last 256 KiB of it is kept; when output was cut, stderr says how much.",
       "examples": [
         "<%= config.bin %> machines dedicated exec <lease-id> -- git -C repos/app status",
         "<%= config.bin %> machines dedicated exec <lease-id> --cwd repos/app --timeout 5m -- npm test",
@@ -69915,7 +69923,7 @@
           "type": "option"
         },
         "command": {
-          "description": "Command to run as one shell string, instead of trailing argv",
+          "description": "Command to run as one shell string, instead of the words after --",
           "name": "command",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -69955,7 +69963,8 @@
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
-      "strict": false,
+      "strict": true,
+      "summary": "Run one command on a Dedicated Runtime machine and return its output and exit code",
       "usage": "machines dedicated exec <lease-id> [flags] -- <command...>",
       "enableJsonFlag": false,
       "resolveSpaceFlag": true,
@@ -70229,6 +70238,7 @@
         "<%= config.bin %> machines dedicated stop <lease-id> --wait",
         "<%= config.bin %> machines dedicated start <lease-id> --wait",
         "<%= config.bin %> machines dedicated restart <lease-id>",
+        "<%= config.bin %> machines dedicated update-image <lease-id> --wait",
         "<%= config.bin %> machines dedicated snapshot <lease-id> --wait",
         "<%= config.bin %> machines dedicated grow <lease-id> --storage-gb 200",
         "<%= config.bin %> machines dedicated spending-limit <lease-id> --cents 30000",
@@ -70430,7 +70440,7 @@
           "required": true
         }
       },
-      "description": "Restore a deleted Dedicated Runtime into a new machine, from the recovery point its deletion kept. Only inside the recovery window, and once.",
+      "description": "Restore a deleted Dedicated Runtime into a new machine, from the recovery point its deletion kept: inside the recovery window, or at any time for one whose deletion was stopped after its machine was shut down. Once.",
       "examples": [
         "<%= config.bin %> machines dedicated restore <deleted-lease-id>",
         "<%= config.bin %> machines dedicated restore <deleted-lease-id> --name research-box --wait"
@@ -71068,7 +71078,7 @@
           "type": "option"
         },
         "command": {
-          "description": "A command to type into the shell once it is ready, as if you typed it. The shell stays open after it.",
+          "description": "A command to type into the shell once it shows its prompt, as if you typed it. Not typed if you type first. The shell stays open after it.",
           "name": "command",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -71091,6 +71101,98 @@
         "terminal.js"
       ]
     },
+    "machines:dedicated:update-image": {
+      "aliases": [],
+      "args": {
+        "lease": {
+          "description": "Dedicated Runtime lease id, or `self` when running on the machine itself",
+          "name": "lease",
+          "required": true
+        }
+      },
+      "description": "Move a Dedicated Runtime onto the current root image now, instead of at its next start or restart. The machine is replaced: files under the workspace are kept; memory, shells and background jobs are not. If the new image does not come back healthy, the machine returns to its previous image. With --wait, succeeds only once the move is judged healthy.",
+      "examples": [
+        "<%= config.bin %> machines dedicated update-image <lease-id>",
+        "<%= config.bin %> machines dedicated update-image <lease-id> --wait",
+        "<%= config.bin %> machines dedicated update-image <lease-id> --wait --timeout 20m --json"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "wait": {
+          "description": "Wait until the operation has finished. Exits 124 if --timeout passes first; the operation keeps running.",
+          "name": "wait",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "timeout": {
+          "dependsOn": [
+            "wait"
+          ],
+          "description": "How long --wait watches, such as 10m (default 15m)",
+          "name": "timeout",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "interval": {
+          "dependsOn": [
+            "wait"
+          ],
+          "description": "Seconds between checks while waiting (default 5)",
+          "name": "interval",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "machines:dedicated:update-image",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "machines",
+        "dedicated",
+        "update-image.js"
+      ]
+    },
     "memory:approvals:issue": {
       "aliases": [],
       "args": {},
@@ -74641,21 +74743,23 @@
         "list.js"
       ]
     },
-    "northstars:governance:configure": {
+    "northstars:recommendations:apply": {
       "aliases": [],
       "args": {
         "northstarId": {
           "description": "Northstar ID",
           "name": "northstarId",
           "required": true
+        },
+        "recommendationId": {
+          "description": "Recommendation ID",
+          "name": "recommendationId",
+          "required": true
         }
       },
-      "description": "Configure a northstar's portfolio governance policy",
+      "description": "Apply a northstar recommendation through CommitmentControl",
       "examples": [
-        "<%= config.bin %> northstars governance configure nst_abc123 --analysis agent_assisted --reviewer-agent agent_xyz",
-        "<%= config.bin %> northstars governance configure nst_abc123 --execution approval",
-        "<%= config.bin %> northstars governance configure nst_abc123 --execution bounded_auto --allow request_commitment_check --max-auto-per-day 3",
-        "<%= config.bin %> northstars governance configure nst_abc123 --protect cmt_1 --protect cmt_2"
+        "<%= config.bin %> northstars recommendations apply nst_abc123 a1b2c3d4"
       ],
       "flags": {
         "bare": {
@@ -74690,157 +74794,11 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
-        },
-        "analysis": {
-          "description": "Does an Agent reason about this portfolio?",
-          "name": "analysis",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "deterministic",
-            "agent_assisted"
-          ],
-          "type": "option"
-        },
-        "execution": {
-          "description": "How much write authority a review outcome carries",
-          "name": "execution",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "advisory",
-            "approval",
-            "bounded_auto"
-          ],
-          "type": "option"
-        },
-        "reviewer-agent": {
-          "description": "Agent that performs an agent_assisted review (required for that mode)",
-          "name": "reviewer-agent",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "clear-reviewer-agent": {
-          "description": "Unset the reviewer agent",
-          "name": "clear-reviewer-agent",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "allow": {
-          "description": "Intent kind the governor may emit (repeatable; replaces the current list)",
-          "name": "allow",
-          "hasDynamicHelp": false,
-          "multiple": true,
-          "options": [
-            "pause_commitment",
-            "resume_commitment",
-            "reprioritize_commitment",
-            "request_commitment_check",
-            "set_execution_bounds",
-            "create_commitment_proposal",
-            "reassign_commitment_proposal"
-          ],
-          "type": "option"
-        },
-        "require-approval-for": {
-          "description": "Change class that always needs a human (repeatable; replaces the current list)",
-          "name": "require-approval-for",
-          "hasDynamicHelp": false,
-          "multiple": true,
-          "options": [
-            "resume",
-            "complete",
-            "cancel",
-            "archive",
-            "create",
-            "reassign",
-            "critical_commitment",
-            "compute_increase"
-          ],
-          "type": "option"
-        },
-        "protect": {
-          "description": "Commitment the governor may never touch (repeatable; replaces the current list)",
-          "name": "protect",
-          "hasDynamicHelp": false,
-          "multiple": true,
-          "type": "option"
-        },
-        "max-intents-per-review": {
-          "description": "Cap on intents per review",
-          "name": "max-intents-per-review",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "max-auto-per-review": {
-          "description": "Cap on automatic mutations per review",
-          "name": "max-auto-per-review",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "max-auto-per-day": {
-          "description": "Hard daily cap on automatic mutations",
-          "name": "max-auto-per-day",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "cooldown-hours": {
-          "description": "Minimum hours between automatic mutations on ONE commitment",
-          "name": "cooldown-hours",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "min-interval-hours": {
-          "description": "Floor of the cadence band commitments may be tuned inside",
-          "name": "min-interval-hours",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "max-interval-hours": {
-          "description": "Ceiling of the cadence band commitments may be tuned inside",
-          "name": "max-interval-hours",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "max-relative-change": {
-          "description": "Largest single-step relative change a bounded-auto adjustment may make (0..1)",
-          "name": "max-relative-change",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "max-runs-per-day": {
-          "description": "Portfolio-wide observation budget (execution, NOT attention)",
-          "name": "max-runs-per-day",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "max-concurrent-runs": {
-          "description": "Portfolio concurrency cap",
-          "name": "max-concurrent-runs",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "critical-reserve": {
-          "description": "Fraction of the execution budget held for critical commitments (0..1)",
-          "name": "critical-reserve",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "northstars:governance:configure",
+      "id": "northstars:recommendations:apply",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -74852,23 +74810,27 @@
         "dist",
         "commands",
         "northstars",
-        "governance",
-        "configure.js"
+        "recommendations",
+        "apply.js"
       ]
     },
-    "northstars:governance:show": {
+    "northstars:recommendations:dismiss": {
       "aliases": [],
       "args": {
         "northstarId": {
           "description": "Northstar ID",
           "name": "northstarId",
           "required": true
+        },
+        "recommendationId": {
+          "description": "Recommendation ID",
+          "name": "recommendationId",
+          "required": true
         }
       },
-      "description": "Show a northstar's portfolio governance policy and state",
+      "description": "Dismiss a northstar recommendation (sticks across re-reviews)",
       "examples": [
-        "<%= config.bin %> northstars governance show nst_abc123",
-        "<%= config.bin %> northstars governance show nst_abc123 --json"
+        "<%= config.bin %> northstars recommendations dismiss nst_abc123 a1b2c3d4"
       ],
       "flags": {
         "bare": {
@@ -74907,7 +74869,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "northstars:governance:show",
+      "id": "northstars:recommendations:dismiss",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -74919,27 +74881,23 @@
         "dist",
         "commands",
         "northstars",
-        "governance",
-        "show.js"
+        "recommendations",
+        "dismiss.js"
       ]
     },
-    "northstars:recommendations:apply": {
+    "northstars:recommendations:list": {
       "aliases": [],
       "args": {
         "northstarId": {
           "description": "Northstar ID",
           "name": "northstarId",
           "required": true
-        },
-        "recommendationId": {
-          "description": "Recommendation ID",
-          "name": "recommendationId",
-          "required": true
         }
       },
-      "description": "Apply a northstar recommendation through CommitmentControl",
+      "description": "List a northstar's deterministic portfolio recommendations",
       "examples": [
-        "<%= config.bin %> northstars recommendations apply nst_abc123 a1b2c3d4"
+        "<%= config.bin %> northstars recommendations nst_abc123",
+        "<%= config.bin %> northstars recommendations nst_abc123 --status open"
       ],
       "flags": {
         "bare": {
@@ -74974,11 +74932,23 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
+        },
+        "status": {
+          "description": "Filter by status (default: all)",
+          "name": "status",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "open",
+            "applied",
+            "dismissed"
+          ],
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "northstars:recommendations:apply",
+      "id": "northstars:recommendations:list",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -74991,26 +74961,24 @@
         "commands",
         "northstars",
         "recommendations",
-        "apply.js"
+        "list.js"
       ]
     },
-    "northstars:recommendations:dismiss": {
+    "northstars:governance:configure": {
       "aliases": [],
       "args": {
         "northstarId": {
           "description": "Northstar ID",
           "name": "northstarId",
           "required": true
-        },
-        "recommendationId": {
-          "description": "Recommendation ID",
-          "name": "recommendationId",
-          "required": true
         }
       },
-      "description": "Dismiss a northstar recommendation (sticks across re-reviews)",
+      "description": "Configure a northstar's portfolio governance policy",
       "examples": [
-        "<%= config.bin %> northstars recommendations dismiss nst_abc123 a1b2c3d4"
+        "<%= config.bin %> northstars governance configure nst_abc123 --analysis agent_assisted --reviewer-agent agent_xyz",
+        "<%= config.bin %> northstars governance configure nst_abc123 --execution approval",
+        "<%= config.bin %> northstars governance configure nst_abc123 --execution bounded_auto --allow request_commitment_check --max-auto-per-day 3",
+        "<%= config.bin %> northstars governance configure nst_abc123 --protect cmt_1 --protect cmt_2"
       ],
       "flags": {
         "bare": {
@@ -75045,11 +75013,157 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
+        },
+        "analysis": {
+          "description": "Does an Agent reason about this portfolio?",
+          "name": "analysis",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "deterministic",
+            "agent_assisted"
+          ],
+          "type": "option"
+        },
+        "execution": {
+          "description": "How much write authority a review outcome carries",
+          "name": "execution",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "advisory",
+            "approval",
+            "bounded_auto"
+          ],
+          "type": "option"
+        },
+        "reviewer-agent": {
+          "description": "Agent that performs an agent_assisted review (required for that mode)",
+          "name": "reviewer-agent",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "clear-reviewer-agent": {
+          "description": "Unset the reviewer agent",
+          "name": "clear-reviewer-agent",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "allow": {
+          "description": "Intent kind the governor may emit (repeatable; replaces the current list)",
+          "name": "allow",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "options": [
+            "pause_commitment",
+            "resume_commitment",
+            "reprioritize_commitment",
+            "request_commitment_check",
+            "set_execution_bounds",
+            "create_commitment_proposal",
+            "reassign_commitment_proposal"
+          ],
+          "type": "option"
+        },
+        "require-approval-for": {
+          "description": "Change class that always needs a human (repeatable; replaces the current list)",
+          "name": "require-approval-for",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "options": [
+            "resume",
+            "complete",
+            "cancel",
+            "archive",
+            "create",
+            "reassign",
+            "critical_commitment",
+            "compute_increase"
+          ],
+          "type": "option"
+        },
+        "protect": {
+          "description": "Commitment the governor may never touch (repeatable; replaces the current list)",
+          "name": "protect",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "max-intents-per-review": {
+          "description": "Cap on intents per review",
+          "name": "max-intents-per-review",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "max-auto-per-review": {
+          "description": "Cap on automatic mutations per review",
+          "name": "max-auto-per-review",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "max-auto-per-day": {
+          "description": "Hard daily cap on automatic mutations",
+          "name": "max-auto-per-day",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "cooldown-hours": {
+          "description": "Minimum hours between automatic mutations on ONE commitment",
+          "name": "cooldown-hours",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "min-interval-hours": {
+          "description": "Floor of the cadence band commitments may be tuned inside",
+          "name": "min-interval-hours",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "max-interval-hours": {
+          "description": "Ceiling of the cadence band commitments may be tuned inside",
+          "name": "max-interval-hours",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "max-relative-change": {
+          "description": "Largest single-step relative change a bounded-auto adjustment may make (0..1)",
+          "name": "max-relative-change",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "max-runs-per-day": {
+          "description": "Portfolio-wide observation budget (execution, NOT attention)",
+          "name": "max-runs-per-day",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "max-concurrent-runs": {
+          "description": "Portfolio concurrency cap",
+          "name": "max-concurrent-runs",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "critical-reserve": {
+          "description": "Fraction of the execution budget held for critical commitments (0..1)",
+          "name": "critical-reserve",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "northstars:recommendations:dismiss",
+      "id": "northstars:governance:configure",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -75061,11 +75175,11 @@
         "dist",
         "commands",
         "northstars",
-        "recommendations",
-        "dismiss.js"
+        "governance",
+        "configure.js"
       ]
     },
-    "northstars:recommendations:list": {
+    "northstars:governance:show": {
       "aliases": [],
       "args": {
         "northstarId": {
@@ -75074,10 +75188,10 @@
           "required": true
         }
       },
-      "description": "List a northstar's deterministic portfolio recommendations",
+      "description": "Show a northstar's portfolio governance policy and state",
       "examples": [
-        "<%= config.bin %> northstars recommendations nst_abc123",
-        "<%= config.bin %> northstars recommendations nst_abc123 --status open"
+        "<%= config.bin %> northstars governance show nst_abc123",
+        "<%= config.bin %> northstars governance show nst_abc123 --json"
       ],
       "flags": {
         "bare": {
@@ -75112,23 +75226,11 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
-        },
-        "status": {
-          "description": "Filter by status (default: all)",
-          "name": "status",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "open",
-            "applied",
-            "dismissed"
-          ],
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "northstars:recommendations:list",
+      "id": "northstars:governance:show",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -75140,8 +75242,8 @@
         "dist",
         "commands",
         "northstars",
-        "recommendations",
-        "list.js"
+        "governance",
+        "show.js"
       ]
     },
     "projects:docs:attach": {
@@ -79869,7 +79971,7 @@
         "tabs.js"
       ]
     },
-    "spaces:room:ensure": {
+    "spaces:skills:add": {
       "aliases": [],
       "args": {
         "id": {
@@ -79878,10 +79980,10 @@
           "required": true
         }
       },
-      "description": "Create a space's Room if it does not exist, and sync its members from the space",
+      "description": "Add a skill to a space",
       "examples": [
-        "<%= config.bin %> spaces room ensure <space-id>",
-        "<%= config.bin %> spaces room ensure <space-id> --json"
+        "<%= config.bin %> spaces skills add <space-id> --skill <skill-id>",
+        "<%= config.bin %> spaces skills add <space-id> --skill <skill-id> --json"
       ],
       "flags": {
         "bare": {
@@ -79916,25 +80018,35 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
+        },
+        "skill": {
+          "description": "Skill ID",
+          "name": "skill",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "spaces:room:ensure",
+      "id": "spaces:skills:add",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
       "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
       "isESM": false,
       "relativePath": [
         "dist",
         "commands",
         "spaces",
-        "room",
-        "ensure.js"
+        "skills",
+        "add.js"
       ]
     },
-    "spaces:room:messages": {
+    "spaces:skills:list": {
       "aliases": [],
       "args": {
         "id": {
@@ -79943,13 +80055,10 @@
           "required": true
         }
       },
-      "description": "List messages in a space's Room",
+      "description": "List skills for a space",
       "examples": [
-        "<%= config.bin %> spaces room messages <space-id>",
-        "<%= config.bin %> spaces room messages <space-id> --limit 50",
-        "<%= config.bin %> spaces room messages <space-id> --cursor <cursor>",
-        "<%= config.bin %> spaces room messages <space-id> --thread <message-id>",
-        "<%= config.bin %> spaces room messages <space-id> --json"
+        "<%= config.bin %> spaces skills list <space-id>",
+        "<%= config.bin %> spaces skills list <space-id> --json"
       ],
       "flags": {
         "bare": {
@@ -79984,47 +80093,27 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
-        },
-        "limit": {
-          "description": "Maximum number of messages to return",
-          "name": "limit",
-          "default": 20,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "cursor": {
-          "description": "Pagination cursor from a previous page",
-          "name": "cursor",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "thread": {
-          "description": "Only return replies in this thread (the root message ID)",
-          "name": "thread",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "spaces:room:messages",
+      "id": "spaces:skills:list",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
       "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
       "isESM": false,
       "relativePath": [
         "dist",
         "commands",
         "spaces",
-        "room",
-        "messages.js"
+        "skills",
+        "list.js"
       ]
     },
-    "spaces:room:send": {
+    "spaces:skills:pin": {
       "aliases": [],
       "args": {
         "id": {
@@ -80033,13 +80122,11 @@
           "required": true
         }
       },
-      "description": "Send a message to a space's Room",
+      "description": "Pin or unpin a skill in a space",
       "examples": [
-        "<%= config.bin %> spaces room send <space-id> --message \"Standup in 5\"",
-        "<%= config.bin %> spaces room send <space-id> -m \"Take a look?\" --mention agent:<agent-id>",
-        "<%= config.bin %> spaces room send <space-id> -m \"Shipped\" --mention all",
-        "<%= config.bin %> spaces room send <space-id> -m \"On it\" --thread <message-id>",
-        "<%= config.bin %> spaces room send <space-id> -m \"Kickoff\" --ensure"
+        "<%= config.bin %> spaces skills pin <space-id> --skill <skill-id> --pinned true",
+        "<%= config.bin %> spaces skills pin <space-id> --skill <skill-id> --pinned false",
+        "<%= config.bin %> spaces skills pin <space-id> --skill <skill-id> --pinned true --json"
       ],
       "flags": {
         "bare": {
@@ -80070,72 +80157,126 @@
           "type": "option"
         },
         "json": {
-          "description": "Output the sent message as JSON",
+          "description": "Output as JSON",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
         },
-        "message": {
-          "char": "m",
-          "description": "Message text to send",
-          "name": "message",
+        "skill": {
+          "description": "Skill ID",
+          "name": "skill",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "mention": {
-          "description": "Mention a participant: agent:<id>, user:<id>, or all. Repeatable. Agents whose trigger mode is \"mention\" only respond when mentioned.",
-          "name": "mention",
+        "pinned": {
+          "description": "Whether to pin the skill",
+          "name": "pinned",
+          "required": true,
           "hasDynamicHelp": false,
-          "multiple": true,
+          "multiple": false,
+          "options": [
+            "true",
+            "false"
+          ],
           "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "spaces:skills:pin",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "spaces",
+        "skills",
+        "pin.js"
+      ]
+    },
+    "spaces:skills:remove": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Space ID",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Remove a skill from a space",
+      "examples": [
+        "<%= config.bin %> spaces skills remove <space-id> --skill <skill-id>",
+        "<%= config.bin %> spaces skills remove <space-id> --skill <skill-id> --json"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
         },
-        "thread": {
-          "description": "Post as a reply in this thread (the root message ID)",
-          "name": "thread",
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "embed": {
-          "description": "Embed an entity reference as <kind>:<ref>[@<space>]. Kinds: task, agent, view, space_view, space, project, goal, wiki_page, folder. <ref> accepts an id, a ref (OSK-2423), or a title. These kinds are space-scoped and need @<space> (or --space): space_view, project, wiki_page, folder.",
-          "name": "embed",
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
           "hasDynamicHelp": false,
-          "multiple": true,
+          "multiple": false,
           "type": "option"
         },
-        "reply-to": {
-          "description": "Message ID this message replies to",
-          "name": "reply-to",
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "ensure": {
-          "description": "Create the Room first if the space does not have one yet",
-          "name": "ensure",
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
           "allowNo": false,
           "type": "boolean"
+        },
+        "skill": {
+          "description": "Skill ID",
+          "name": "skill",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "spaces:room:send",
+      "id": "spaces:skills:remove",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
       "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
       "isESM": false,
       "relativePath": [
         "dist",
         "commands",
         "spaces",
-        "room",
-        "send.js"
+        "skills",
+        "remove.js"
       ]
     },
-    "spaces:room:show": {
+    "spaces:room:ensure": {
       "aliases": [],
       "args": {
         "id": {
@@ -80144,10 +80285,10 @@
           "required": true
         }
       },
-      "description": "Show a space's Room — the group chat behind the space detail page's Room tab",
+      "description": "Create a space's Room if it does not exist, and sync its members from the space",
       "examples": [
-        "<%= config.bin %> spaces room show <space-id>",
-        "<%= config.bin %> spaces room show <space-id> --json"
+        "<%= config.bin %> spaces room ensure <space-id>",
+        "<%= config.bin %> spaces room ensure <space-id> --json"
       ],
       "flags": {
         "bare": {
@@ -80186,7 +80327,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "spaces:room:show",
+      "id": "spaces:room:ensure",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -80197,10 +80338,10 @@
         "commands",
         "spaces",
         "room",
-        "show.js"
+        "ensure.js"
       ]
     },
-    "spaces:skills:add": {
+    "spaces:room:messages": {
       "aliases": [],
       "args": {
         "id": {
@@ -80209,10 +80350,13 @@
           "required": true
         }
       },
-      "description": "Add a skill to a space",
+      "description": "List messages in a space's Room",
       "examples": [
-        "<%= config.bin %> spaces skills add <space-id> --skill <skill-id>",
-        "<%= config.bin %> spaces skills add <space-id> --skill <skill-id> --json"
+        "<%= config.bin %> spaces room messages <space-id>",
+        "<%= config.bin %> spaces room messages <space-id> --limit 50",
+        "<%= config.bin %> spaces room messages <space-id> --cursor <cursor>",
+        "<%= config.bin %> spaces room messages <space-id> --thread <message-id>",
+        "<%= config.bin %> spaces room messages <space-id> --json"
       ],
       "flags": {
         "bare": {
@@ -80248,10 +80392,24 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "skill": {
-          "description": "Skill ID",
-          "name": "skill",
-          "required": true,
+        "limit": {
+          "description": "Maximum number of messages to return",
+          "name": "limit",
+          "default": 20,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "cursor": {
+          "description": "Pagination cursor from a previous page",
+          "name": "cursor",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "thread": {
+          "description": "Only return replies in this thread (the root message ID)",
+          "name": "thread",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -80259,23 +80417,21 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "spaces:skills:add",
+      "id": "spaces:room:messages",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
       "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
       "isESM": false,
       "relativePath": [
         "dist",
         "commands",
         "spaces",
-        "skills",
-        "add.js"
+        "room",
+        "messages.js"
       ]
     },
-    "spaces:skills:list": {
+    "spaces:room:send": {
       "aliases": [],
       "args": {
         "id": {
@@ -80284,10 +80440,13 @@
           "required": true
         }
       },
-      "description": "List skills for a space",
+      "description": "Send a message to a space's Room",
       "examples": [
-        "<%= config.bin %> spaces skills list <space-id>",
-        "<%= config.bin %> spaces skills list <space-id> --json"
+        "<%= config.bin %> spaces room send <space-id> --message \"Standup in 5\"",
+        "<%= config.bin %> spaces room send <space-id> -m \"Take a look?\" --mention agent:<agent-id>",
+        "<%= config.bin %> spaces room send <space-id> -m \"Shipped\" --mention all",
+        "<%= config.bin %> spaces room send <space-id> -m \"On it\" --thread <message-id>",
+        "<%= config.bin %> spaces room send <space-id> -m \"Kickoff\" --ensure"
       ],
       "flags": {
         "bare": {
@@ -80318,119 +80477,72 @@
           "type": "option"
         },
         "json": {
-          "description": "Output as JSON",
+          "description": "Output the sent message as JSON",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "spaces:skills:list",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "spaces",
-        "skills",
-        "list.js"
-      ]
-    },
-    "spaces:skills:pin": {
-      "aliases": [],
-      "args": {
-        "id": {
-          "description": "Space ID",
-          "name": "id",
-          "required": true
-        }
-      },
-      "description": "Pin or unpin a skill in a space",
-      "examples": [
-        "<%= config.bin %> spaces skills pin <space-id> --skill <skill-id> --pinned true",
-        "<%= config.bin %> spaces skills pin <space-id> --skill <skill-id> --pinned false",
-        "<%= config.bin %> spaces skills pin <space-id> --skill <skill-id> --pinned true --json"
-      ],
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
         },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
+        "message": {
+          "char": "m",
+          "description": "Message text to send",
+          "name": "message",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
+        "mention": {
+          "description": "Mention a participant: agent:<id>, user:<id>, or all. Repeatable. Agents whose trigger mode is \"mention\" only respond when mentioned.",
+          "name": "mention",
           "hasDynamicHelp": false,
-          "multiple": false,
+          "multiple": true,
           "type": "option"
         },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
+        "thread": {
+          "description": "Post as a reply in this thread (the root message ID)",
+          "name": "thread",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "json": {
-          "description": "Output as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "skill": {
-          "description": "Skill ID",
-          "name": "skill",
-          "required": true,
+        "embed": {
+          "description": "Embed an entity reference as <kind>:<ref>[@<space>]. Kinds: task, agent, view, space_view, space, project, goal, wiki_page, folder. <ref> accepts an id, a ref (OSK-2423), or a title. These kinds are space-scoped and need @<space> (or --space): space_view, project, wiki_page, folder.",
+          "name": "embed",
           "hasDynamicHelp": false,
-          "multiple": false,
+          "multiple": true,
           "type": "option"
         },
-        "pinned": {
-          "description": "Whether to pin the skill",
-          "name": "pinned",
-          "required": true,
+        "reply-to": {
+          "description": "Message ID this message replies to",
+          "name": "reply-to",
           "hasDynamicHelp": false,
           "multiple": false,
-          "options": [
-            "true",
-            "false"
-          ],
           "type": "option"
+        },
+        "ensure": {
+          "description": "Create the Room first if the space does not have one yet",
+          "name": "ensure",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "spaces:skills:pin",
+      "id": "spaces:room:send",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
       "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
       "isESM": false,
       "relativePath": [
         "dist",
         "commands",
         "spaces",
-        "skills",
-        "pin.js"
+        "room",
+        "send.js"
       ]
     },
-    "spaces:skills:remove": {
+    "spaces:room:show": {
       "aliases": [],
       "args": {
         "id": {
@@ -80439,10 +80551,10 @@
           "required": true
         }
       },
-      "description": "Remove a skill from a space",
+      "description": "Show a space's Room — the group chat behind the space detail page's Room tab",
       "examples": [
-        "<%= config.bin %> spaces skills remove <space-id> --skill <skill-id>",
-        "<%= config.bin %> spaces skills remove <space-id> --skill <skill-id> --json"
+        "<%= config.bin %> spaces room show <space-id>",
+        "<%= config.bin %> spaces room show <space-id> --json"
       ],
       "flags": {
         "bare": {
@@ -80477,32 +80589,22 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
-        },
-        "skill": {
-          "description": "Skill ID",
-          "name": "skill",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "spaces:skills:remove",
+      "id": "spaces:room:show",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
       "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
       "isESM": false,
       "relativePath": [
         "dist",
         "commands",
         "spaces",
-        "skills",
-        "remove.js"
+        "room",
+        "show.js"
       ]
     },
     "spaces:states:archive": {
@@ -90092,9 +90194,141 @@
           "multiple": false,
           "type": "option"
         },
-        "start-identity": {
-          "description": "Idempotency identity for this logical start",
-          "name": "start-identity",
+        "start-identity": {
+          "description": "Idempotency identity for this logical start",
+          "name": "start-identity",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tasks:plan:start",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tasks",
+        "plan",
+        "start.js"
+      ]
+    },
+    "tasks:plan:sync": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Reconcile a Task's direct subtasks into its Implementation Plan",
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "json": {
+          "description": "Output JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tasks:plan:sync",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tasks",
+        "plan",
+        "sync.js"
+      ]
+    },
+    "tasks:plan:update": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Replace a Task Implementation Plan draft with revision guards",
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "from-json": {
+          "description": "JSON file, inline JSON, or - for stdin; contains draft and revisions",
+          "name": "from-json",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -90108,7 +90342,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "tasks:plan:start",
+      "id": "tasks:plan:update",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -90121,18 +90355,19 @@
         "commands",
         "tasks",
         "plan",
-        "start.js"
+        "update.js"
       ]
     },
-    "tasks:plan:sync": {
+    "tasks:resume:save": {
       "aliases": [],
       "args": {
-        "id": {
-          "name": "id",
-          "required": true
+        "task": {
+          "description": "Task id or ref",
+          "name": "task",
+          "required": false
         }
       },
-      "description": "Reconcile a Task's direct subtasks into its Implementation Plan",
+      "description": "Save recovery state without publishing a visible Task Update",
       "flags": {
         "bare": {
           "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
@@ -90161,6 +90396,43 @@
           "multiple": false,
           "type": "option"
         },
+        "task": {
+          "description": "Task id; overrides runtime context",
+          "name": "task",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "run-id": {
+          "description": "Canonical Task Run",
+          "name": "run-id",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "snapshot": {
+          "description": "Resume Point JSON snapshot. Every field is optional. `completed`, `nextActions` and `currentFocus` accept either a plain sentence or {summary,sourceRefs} — the object form is canonical and a bare string is lifted into it, so the same sentence you put in an Update’s nextActions works here unchanged. Shape: {completed:[], currentFocus, nextActions:[], openQuestions:[{question,sourceRef?}], relevantUpdateIds:[], evidenceRefs:[], deliverableRefs:[], childHeads:[{runId,resumePointId,status}], workspaceStateRef}. Never put a credential, token or lease in a snapshot — the server refuses one.",
+          "name": "snapshot",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "spec-version": {
+          "description": "Task specification version",
+          "name": "spec-version",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "idempotency-key": {
+          "description": "Stable retry key",
+          "name": "idempotency-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
         "json": {
           "description": "Output JSON",
           "name": "json",
@@ -90170,7 +90442,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "tasks:plan:sync",
+      "id": "tasks:resume:save",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -90182,19 +90454,20 @@
         "dist",
         "commands",
         "tasks",
-        "plan",
-        "sync.js"
+        "resume",
+        "save.js"
       ]
     },
-    "tasks:plan:update": {
+    "tasks:resume:show": {
       "aliases": [],
       "args": {
-        "id": {
-          "name": "id",
-          "required": true
+        "task": {
+          "description": "Task id or ref",
+          "name": "task",
+          "required": false
         }
       },
-      "description": "Replace a Task Implementation Plan draft with revision guards",
+      "description": "Build the bounded context needed to resume one Task Run",
       "flags": {
         "bare": {
           "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
@@ -90223,16 +90496,23 @@
           "multiple": false,
           "type": "option"
         },
-        "from-json": {
-          "description": "JSON file, inline JSON, or - for stdin; contains draft and revisions",
-          "name": "from-json",
+        "task": {
+          "description": "Task id; overrides runtime context",
+          "name": "task",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "run-id": {
+          "description": "Canonical Task Run",
+          "name": "run-id",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
         "json": {
-          "description": "Output JSON",
+          "description": "Output the Resume Context as JSON",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
@@ -90240,7 +90520,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "tasks:plan:update",
+      "id": "tasks:resume:show",
       "pluginAlias": "@skrr-ai/cli",
       "pluginName": "@skrr-ai/cli",
       "pluginType": "core",
@@ -90252,8 +90532,8 @@
         "dist",
         "commands",
         "tasks",
-        "plan",
-        "update.js"
+        "resume",
+        "show.js"
       ]
     },
     "tasks:resource:add": {
@@ -90736,184 +91016,6 @@
         "submit.js"
       ]
     },
-    "tasks:resume:save": {
-      "aliases": [],
-      "args": {
-        "task": {
-          "description": "Task id or ref",
-          "name": "task",
-          "required": false
-        }
-      },
-      "description": "Save recovery state without publishing a visible Task Update",
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "task": {
-          "description": "Task id; overrides runtime context",
-          "name": "task",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "run-id": {
-          "description": "Canonical Task Run",
-          "name": "run-id",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "snapshot": {
-          "description": "Resume Point JSON snapshot. Every field is optional. `completed`, `nextActions` and `currentFocus` accept either a plain sentence or {summary,sourceRefs} — the object form is canonical and a bare string is lifted into it, so the same sentence you put in an Update’s nextActions works here unchanged. Shape: {completed:[], currentFocus, nextActions:[], openQuestions:[{question,sourceRef?}], relevantUpdateIds:[], evidenceRefs:[], deliverableRefs:[], childHeads:[{runId,resumePointId,status}], workspaceStateRef}. Never put a credential, token or lease in a snapshot — the server refuses one.",
-          "name": "snapshot",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "spec-version": {
-          "description": "Task specification version",
-          "name": "spec-version",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "idempotency-key": {
-          "description": "Stable retry key",
-          "name": "idempotency-key",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "tasks:resume:save",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "tasks",
-        "resume",
-        "save.js"
-      ]
-    },
-    "tasks:resume:show": {
-      "aliases": [],
-      "args": {
-        "task": {
-          "description": "Task id or ref",
-          "name": "task",
-          "required": false
-        }
-      },
-      "description": "Build the bounded context needed to resume one Task Run",
-      "flags": {
-        "bare": {
-          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
-          "name": "bare",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
-          "name": "token",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "workspace": {
-          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
-          "name": "workspace",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "profile": {
-          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE.",
-          "name": "profile",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "task": {
-          "description": "Task id; overrides runtime context",
-          "name": "task",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "run-id": {
-          "description": "Canonical Task Run",
-          "name": "run-id",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "json": {
-          "description": "Output the Resume Context as JSON",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "tasks:resume:show",
-      "pluginAlias": "@skrr-ai/cli",
-      "pluginName": "@skrr-ai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "resolveSpaceFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "tasks",
-        "resume",
-        "show.js"
-      ]
-    },
     "tasks:skills:pin": {
       "aliases": [],
       "args": {
@@ -94686,5 +94788,5 @@
       ]
     }
   },
-  "version": "0.1.28"
+  "version": "0.1.30"
 }