@starci/cli 1.0.0 → 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) StarCi contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -4,5 +4,8 @@
 `starci app ...`; runtime operations use the `workflow`, `kernel`, `runtime`, `supervisor`, and
 `debug` groups.
 
+Use Node.js 22.22.3 or later within the 22 branch, or 24.15.0 or later within the 24 branch, as
+`package.json` `engines.node` declares. Runtime SQLite capability checks remain required.
+
 Install the package as an exact development dependency, then run `starci help`. Runtime commands
 locate an installed StarCi tree automatically. If none exists, run `starci runtime install`.

package/completions/_starci

@@ -49,7 +49,7 @@ _starci() {
       git) _values 'verbs' 'backup[push local branch tips only to dated backup refs]' 'commit[commit staged work with the message convention and trailers]' 'land[verify a lane and fast-forward it onto local main without pushing]' 'sync[merge local main into a clean lane with rerere enabled]' ;;
       guard) _values 'verbs' 'command[judge one shell PreToolUse request from JSON on stdin]' 'footprint-scan[scan for fresh cross-repository links and linked worktrees]' 'raw[apply command policy and run the real host tool behind a PATH wrapper]' 'seat-tools[deny tools forbidden for the bound seat from JSON on stdin]' 'verify-commit[verify a protected-branch update carries only worker-owned paths]' ;;
       harness) _values 'verbs' 'open[open the local harness URL in the default browser]' 'start[start the harness API and UI or its named tunnel]' 'status[report whether the harness health endpoint is up]' 'stop[stop only harness processes recorded by harness start]' ;;
-      kernel) _values 'verbs' 'archive[archive a workflow that will not finish: drop open jobs, retire asks, close Kernel and Tasks]' 'artifacts[list the indexed proof files of the workflow'\''s jobs, per job (read-only)]' 'autopilot[show or drive a workflow'\''s autopilot: switch it, sweep, bundle, defer to handover, release, extend]' 'consume-report[integrate the report a job filed; the Kernel must consume it before settle]' 'contract-release[release a frozen op family at the Supervisor release point (contract-freeze.yaml)]' 'coverage[show every FR, shape and proof case of the workflow'\''s scope as proven, stale or missing]' 'cut-seam[publish a cut seam'\''s interface, release its siblings on a stub, or reconcile a stub sibling]' 'decide[open, list or close an entry of the Kernel decision log (hypothesis, action, metric)]' 'decisions[list, open, claim, resolve or escalate Decision Items; the Kernel reads them first every wake]' 'dispatch[admit a routed job and launch its worker with --spawn; without it print the launch plan]' 'dispatch-ready[route and dispatch queued-ready jobs up to the workflow allowed parallelism]' 'enqueue[enqueue a work-unit job with its op, owned paths, records and retry lineage]' 'estimate[compute the size class and agent count of a slice from runtimes.yaml allocation.slicing]' 'extensions[list the file-based kernel extensions: verbs, status fields, boolean flags, load problems]' 'finish[finish an owner-approved workflow and release its kernel seat]' 'foundation[claim, land or declare a shared foundation (or none) for a workflow]' 'foundations[list the ledger'\''s shared foundations: owner, state, dependents, waits]' 'graph-edit[apply a logged, reversible light edit to the workflow'\''s unit jobs (drop, widen, wire, ...)]' 'hierarchy[project the agent hierarchy (starci/agent-hierarchy@1) of a workflow]' 'inbox[list the workflow'\''s pending inbox items, or acknowledge one with a disposition]' 'incident[raise, resolve or attach typed release conditions to a workflow incident]' 'kernel-ack-rev[record the runtime rev whose kernel files this Kernel has read]' 'kernel-proposal[file a tier-2 shared runtime change proposal for the Supervisor, or list proposals]' 'lifecycle[pause, stop or resume a workflow; only the owner or supervisor resumes or stops]' 'log[append one typed log row to the ledger'\''s logs table]' 'logs[list the workflow'\''s typed log rows, oldest first]' 'messages[drain the workflow Runs into the ledger and list every orchestration message]' 'notify[send a typed notice to one peer workflow or all peers]' 'nudge[wake a running job'\''s worker at its exact terminal so it files its report]' 'observe[read the exact op terminal screen of a job (reasoning context, never evidence)]' 'op-contract[read the contract row dispatch wrote for a job or an op+attempt]' 'op-override[store an additive override of one op for this workflow]' 'peers[the workflow'\''s peer workflows of the same ledger]' 'plan[write the workflow'\''s derived plan into the ledger]' 'provider-backoff[open the provider circuit a persisting rate limit calls for (idempotent)]' 'provider-health[the ledger provider-health row; --recover clears an open circuit (Kernel terminal only)]' 'questions[list the pending worker questions of a workflow, draining its Runs into the ledger first]' 'reconcile[recover a fenced launch, drop a queued job, recover a dead worker or cancel orphan kernel jobs]' 'record-change[the record'\''s OWNER declares its committed change breaking (peers owe ONE follow-up leg) or advisory]' 'record-checks[record independent checks against a filed worker report]' 'redesign[dispatch the owning op with the RCA as its brief (strong reasoning pool)]' 'rename[set a workflow'\''s display name and rename its live Kernel and Op terminal tabs]' 'reply[answer a pending worker question, or route it to the owner with --to-owner]' 'report[a worker files its job report (the durable op to kernel IPC)]' 'retire-ask[close an ask the owner should no longer answer (ask-superseded)]' 'route[resolve and persist the model decision of a job]' 'run-deferred-tests[re-queue the test legs the owner'\''s specs switch deferred (see status testsDeferred)]' 'serve-ask[park an owner ask: Telegram notice first, the answer form served on demand]' 'settle[settle a consumed report: pass, fail or blocked verdict]' 'settle-tail[run the async tail of a settled job (artifact index, evidence, retention)]' 'status[the live status projection of a workflow (frontier, progress, waits)]' 'survey[the read projection a Kernel scans each wake (jobs, inbox, signals, drift)]' 'unit[the work units and their try budgets; only the owner or Supervisor raises one]' 'usage[measured tokens by op, model and Kernel of one workflow, or per workflow]' 'verify-proofs[re-hash every indexed proof file and walk the events digest chain; exit 1 on tampering]' ;;
+      kernel) _values 'verbs' 'archive[archive a workflow that will not finish: drop open jobs, retire asks, close Kernel and Tasks]' 'artifacts[list the indexed proof files of the workflow'\''s jobs, per job (read-only)]' 'autopilot[show or drive a workflow'\''s autopilot: switch it, sweep, bundle, defer to handover, release, extend]' 'consume-report[integrate the report a job filed; the Kernel must consume it before settle]' 'coverage[show every FR, shape and proof case of the workflow'\''s scope as proven, stale or missing]' 'cut-seam[publish a cut seam'\''s interface, release its siblings on a stub, or reconcile a stub sibling]' 'decide[open, list or close an entry of the Kernel decision log (hypothesis, action, metric)]' 'decisions[list, open, claim, resolve or escalate Decision Items; the Kernel reads them first every wake]' 'dispatch[admit a routed job and launch its worker with --spawn; without it print the launch plan]' 'dispatch-ready[route and dispatch queued-ready jobs up to the workflow allowed parallelism]' 'enqueue[enqueue a work-unit job with its op, owned paths, records and retry lineage]' 'estimate[compute the size class and agent count of a slice from runtimes.yaml allocation.slicing]' 'extensions[list the file-based kernel extensions: verbs, status fields, boolean flags, load problems]' 'finish[finish an owner-approved workflow and release its kernel seat]' 'foundation[claim, land or declare a shared foundation (or none) for a workflow]' 'foundations[list the ledger'\''s shared foundations: owner, state, dependents, waits]' 'graph-edit[apply a logged, reversible light edit to the workflow'\''s unit jobs (drop, widen, wire, ...)]' 'hierarchy[project the agent hierarchy (starci/agent-hierarchy@1) of a workflow]' 'inbox[list the workflow'\''s pending inbox items, or acknowledge one with a disposition]' 'incident[raise, resolve or attach typed release conditions to a workflow incident]' 'kernel-ack-rev[project or attest the complete current Kernel READ manifest]' 'kernel-proposal[file a tier-2 shared runtime change proposal for the Supervisor, or list proposals]' 'lifecycle[pause, stop or resume a workflow; only the owner or supervisor resumes or stops]' 'log[append one typed log row to the ledger'\''s logs table]' 'logs[list the workflow'\''s typed log rows, oldest first]' 'messages[drain the workflow Runs into the ledger and list every orchestration message]' 'notify[send a typed notice to one peer workflow or all peers]' 'nudge[wake a running job'\''s worker at its exact terminal so it files its report]' 'observe[read the exact op terminal screen of a job (reasoning context, never evidence)]' 'op-contract[read the contract row dispatch wrote for a job or an op+attempt]' 'op-override[store an additive override of one op for this workflow]' 'peers[the workflow'\''s peer workflows of the same ledger]' 'plan[write the workflow'\''s derived plan into the ledger]' 'provider-backoff[open the provider circuit a persisting rate limit calls for (idempotent)]' 'provider-health[the ledger provider-health row; --recover clears an open circuit (Kernel terminal only)]' 'questions[list the pending worker questions of a workflow, draining its Runs into the ledger first]' 'reconcile[recover a fenced launch, drop a queued job, recover a dead worker or cancel orphan kernel jobs]' 'record-change[the record'\''s OWNER declares its committed change breaking (peers owe ONE follow-up leg) or advisory]' 'record-checks[record independent checks against a filed worker report]' 'redesign[dispatch the owning op with the RCA as its brief (strong reasoning pool)]' 'rename[set a workflow'\''s display name and rename its live Kernel and Op terminal tabs]' 'reply[answer a pending worker question, or route it to the owner with --to-owner]' 'report[a worker files its job report (the durable op to kernel IPC)]' 'retire-ask[close an ask the owner should no longer answer (ask-superseded)]' 'route[resolve and persist the model decision of a job]' 'run-deferred-tests[re-queue the test legs the owner'\''s specs switch deferred (see status testsDeferred)]' 'serve-ask[park an owner ask: Telegram notice first, the answer form served on demand]' 'settle[settle a consumed report: pass, fail or blocked verdict]' 'settle-tail[run the async tail of a settled job (artifact index, evidence, retention)]' 'status[the live status projection of a workflow (frontier, progress, waits)]' 'survey[the read projection a Kernel scans each wake (jobs, inbox, signals, drift)]' 'unit[the work units and their try budgets; only the owner or Supervisor raises one]' 'usage[measured tokens by op, model and Kernel of one workflow, or per workflow]' 'verify-proofs[re-hash every indexed proof file and walk the events digest chain; exit 1 on tampering]' ;;
       lint) _values 'verbs' 'run[lint changed files or the release-scoped whole repository]' ;;
       machine) _values 'verbs' 'decisions[inspect and act on runtime and Supervisor decision items]' 'kernel-watchdog[inspect or repair one running workflow Kernel seat]' 'lessons[inspect and update Supervisor learning records]' 'op-metrics[report operation health metrics across managed ledgers]' 'seam-policy[plan canon cuts or redispatch a blocked canon slice]' 'worktrees[inspect, collect or resume runtime worktrees]' 'worktrees-clean[remove clean lane worktrees already merged into local main]' ;;
       npm) _values 'verbs' 'ci[install a clean lockfile into this worktree under the host lock]' 'install[add exact dependencies from canon pins under the host lock]' ;;
@@ -57,10 +57,10 @@ _starci() {
       reconciler) _values 'verbs' 'once[run one reconcile pass of the controllers in memory, shadow unless --apply]' 'restart[stop the reconciler engine and ensure a new leader]' 'start[ensure the reconciler engine has a healthy leader]' 'status[print reconciler leader, queue, mode and violation status]' 'stop[stop the current reconciler engine leader]' 'up[bring the runtime host services and live seats up and print one checklist]' ;;
       release) _values 'verbs' 'app-installs[verify a scaffolded app against fresh registry installs]' 'check[run the one read-only release readiness gate]' 'clean-test[test published packages from fresh isolated installs]' 'cut[cut the release, the only push of main with its annotated release tag]' 'images[build, run, health-check and tear down the shipped application images]' 'launch-smoke[prove live nested-agent launch paths on an Orca host]' 'proof[build the release proof attached before publish or deploy effects]' 'publish[plan or perform the owner-run package publication sequence]' 'sync-runtime[refresh or check package runtime copies and optionally prepare grammar]' ;;
       route) _values 'verbs' 'op[resolve the operation that serves a structured routing request]' ;;
-      runtime) _values 'verbs' 'architecture[check one repository against the runtime architecture rules]' 'benchmark-snapshot[append one model-pool snapshot file under benchmark/snapshots]' 'check[judge the runtime tree — node --check, the runtime HFS check, the retained self-checks]' 'derived-fields[regenerate or check the derived fields of the knowledge pattern files]' 'doctor[run the installed tree'\''s own specs and report drift against the install manifest]' 'gen-catalog[write or check the generated CLI catalog outputs, docs and shell completions]' 'gen-ops[regenerate or check the generated operation registry]' 'housekeeping[inspect or apply the host housekeeping sweeps]' 'install[install the StarCi runtime — fetch the pinned package, then init or update <cwd>/.claude]' 'ledger-hygiene[report orphan ledgers and legacy repository-local ledger stores]' 'link[point the per-user StarCi launcher at a live runtime checkout]' 'machine-db[inspect or maintain the host machine database]' 'owner-claims-audit[audit owner-decision claims and owner-gates in runtime ledgers]' 'readme-blocks[regenerate or check the generated blocks of knowledge/hfs/README.md]' 'status[the runtime'\''s version, tree root and manifest drift — a read-only summary]' 'update[bring an installed .claude tree to this package'\''s payload version]' 'validate[read-only Work record/tree validation — structure, consistency, artifacts, schemas]' 'version[print the runtime package version]' ;;
+      runtime) _values 'verbs' 'architecture[check one repository against the runtime architecture rules]' 'benchmark-snapshot[append one model-pool snapshot file under benchmark/snapshots]' 'check[judge the runtime tree — node --check, the runtime HFS check, the retained self-checks]' 'derived-fields[regenerate or check the derived fields of the knowledge pattern files]' 'doctor[verify installed payload, public entry custody and local runtime capabilities]' 'gen-catalog[write or check the generated CLI catalog outputs, docs and shell completions]' 'gen-ops[regenerate or check the generated operation registry]' 'housekeeping[inspect or apply the host housekeeping sweeps]' 'install[install the StarCi runtime — fetch the pinned package, then init or update <cwd>/.claude]' 'ledger-hygiene[report orphan ledgers and legacy repository-local ledger stores]' 'link[point the per-user StarCi launcher at a live runtime checkout]' 'machine-db[inspect or maintain the host machine database]' 'owner-claims-audit[audit owner-decision claims and owner-gates in runtime ledgers]' 'readme-blocks[regenerate or check the generated blocks of knowledge/hfs/README.md]' 'status[the runtime'\''s version, tree root and manifest drift — a read-only summary]' 'update[bring an installed .claude tree to this package'\''s payload version]' 'validate[read-only Work record/tree validation — structure, consistency, artifacts, schemas]' 'version[print the runtime package version]' ;;
       smoke) _values 'verbs' 'scaffold[scaffold and prove one full or lite app in an isolated scratch directory]' ;;
       supabase) _values 'verbs' 'start[start the app'\''s Supabase stack after enforcing its isolated port block]' 'status[show the app'\''s Supabase endpoints and key names without secret values]' 'stop[stop only the app'\''s configured Supabase project]' ;;
-      supervisor) _values 'verbs' 'actions[list, record, or preview the Supervisor'\''s owed-action audit trail]' 'bridge[inspect and govern cross-workflow dependencies and shared ownership]' 'channel[register, inspect, and answer the Supervisor owner-message channel]' 'direct-commits[find runtime main commits that bypassed the exclusive land gate]' 'gate-stability[compare frozen gate behavior against accepted work in live workflows]' 'gc[inspect or collect leftover workers, shells, lanes, temp data, leases, and logs]' 'land[run the in-runtime land gate; external land-to-main.sh remains external]' 'lesson-actions[land, revert, or propose changes from the Supervisor self-learning loop]' 'notify[deliver a durable Supervisor ruling to one workflow Kernel]' 'owed[inspect and acknowledge work that running workflows owe the Supervisor]' 'poll[stream or print a read-only Supervisor digest of workflow progress and blockers]' 'push[run full repository suites and push clean main branches]' 'push-mains[scan and push main for the runtime and configured product repositories]' 'ram-cap[inspect or override RAM-aware workflow dispatch priorities]' 'report[render or send the owner'\''s detailed workflow progress report]' 'start[enable and start the one long-lived Supervisor seat]' 'status[print whether the Supervisor seat is enabled and healthy]' 'stop[disable the Supervisor seat, stop its worker and release it]' 'telegram-bridge[start, run, inspect, or stop the Supervisor Telegram bridge]' 'tell[send a desktop message to the Supervisor or read its recent replies]' 'watchdog[run one reconciler-owned Supervisor seat liveness pass]' 'workers[create, launch, inspect, report, and clean up Supervisor repair workers]' ;;
+      supervisor) _values 'verbs' 'actions[list, record, or preview the Supervisor'\''s owed-action audit trail]' 'bridge[inspect and govern cross-workflow dependencies and shared ownership]' 'channel[register, inspect, and answer the Supervisor owner-message channel]' 'direct-commits[find runtime main commits that bypassed the exclusive land gate]' 'gate-stability[compare explicitly selected current gates against accepted work in live workflows]' 'gc[inspect or collect leftover workers, shells, lanes, temp data, leases, and logs]' 'land[run the in-runtime land gate; external land-to-main.sh remains external]' 'lesson-actions[land, revert, or propose changes from the Supervisor self-learning loop]' 'notify[deliver a durable Supervisor ruling to one workflow Kernel]' 'owed[inspect and acknowledge work that running workflows owe the Supervisor]' 'poll[stream or print a read-only Supervisor digest of workflow progress and blockers]' 'push[run full repository suites and push clean main branches]' 'push-mains[scan and push main for the runtime and configured product repositories]' 'ram-cap[inspect or override RAM-aware workflow dispatch priorities]' 'report[render or send the owner'\''s detailed workflow progress report]' 'start[enable and start the one long-lived Supervisor seat]' 'status[print whether the Supervisor seat is enabled and healthy]' 'stop[disable the Supervisor seat, stop its worker and release it]' 'telegram-bridge[start, run, inspect, or stop the Supervisor Telegram bridge]' 'tell[send a desktop message to the Supervisor or read its recent replies]' 'watchdog[run one reconciler-owned Supervisor seat liveness pass]' 'workers[create, launch, inspect, report, and clean up Supervisor repair workers]' ;;
       task) _values 'verbs' 'list[list state, runs, results and actions for registered runtime tasks]' 'register[print or apply one runtime scheduled-task registration]' 'show[show state, runs, result and action for one runtime scheduled task]' ;;
       test) _values 'verbs' 'run[run the specs selected for one local ladder level]' ;;
       typecheck) _values 'verbs' 'run[check changed runtime modules or affected TypeScript projects]' ;;
@@ -176,8 +176,6 @@ _starci() {
     'gate:sonar:--declaration') return 0 ;;
     'gate:sonar:--host') return 0 ;;
     'gate:sonar:--stack') return 0 ;;
-    'gate:starcistacks:--admitted-at') return 0 ;;
-    'gate:starcistacks:--op') return 0 ;;
     'gate:test-world:--root') return 0 ;;
     'gate:test-world:--project') _values 'values' 'e2e' 'integration' 'contract'; return 0 ;;
     'gate:test-world:--tests') return 0 ;;
@@ -229,12 +227,6 @@ _starci() {
     'kernel:autopilot:--by') _values 'values' 'supervisor' 'kernel' 'autopilot'; return 0 ;;
     'kernel:consume-report:--repo') return 0 ;;
     'kernel:consume-report:--job') return 0 ;;
-    'kernel:contract-release:--repo') return 0 ;;
-    'kernel:contract-release:--family') return 0 ;;
-    'kernel:contract-release:--workflow') return 0 ;;
-    'kernel:contract-release:--batch') return 0 ;;
-    'kernel:contract-release:--reason') return 0 ;;
-    'kernel:contract-release:--by') _values 'values' 'supervisor' 'owner'; return 0 ;;
     'kernel:coverage:--repo') return 0 ;;
     'kernel:coverage:--workflow') return 0 ;;
     'kernel:cut-seam:--repo') return 0 ;;
@@ -303,8 +295,6 @@ _starci() {
     'kernel:enqueue:--cut-total') return 0 ;;
     'kernel:enqueue:--after') return 0 ;;
     'kernel:enqueue:--foundation') return 0 ;;
-    'kernel:enqueue:--contract-change') return 0 ;;
-    'kernel:enqueue:--follow-up-of') return 0 ;;
     'kernel:enqueue:--new-module') return 0 ;;
     'kernel:enqueue:--retry-of') return 0 ;;
     'kernel:enqueue:--reopen') return 0 ;;
@@ -386,7 +376,8 @@ _starci() {
     'kernel:kernel-ack-rev:--repo') return 0 ;;
     'kernel:kernel-ack-rev:--workflow') return 0 ;;
     'kernel:kernel-ack-rev:--rev') return 0 ;;
-    'kernel:kernel-ack-rev:--files') return 0 ;;
+    'kernel:kernel-ack-rev:--read-manifest') return 0 ;;
+    'kernel:kernel-ack-rev:--op') return 0 ;;
     'kernel:kernel-proposal:--repo') return 0 ;;
     'kernel:kernel-proposal:--workflow') return 0 ;;
     'kernel:kernel-proposal:--title') return 0 ;;
@@ -885,8 +876,6 @@ _starci() {
     'work:layout-tree:--tolerance') return 0 ;;
     'work:render-proof:--work') return 0 ;;
     'work:render-proof:--record') return 0 ;;
-    'work:shell-conformance:--admitted-at') return 0 ;;
-    'work:shell-conformance:--op') return 0 ;;
     'work:ui-proof-brief:--surface') return 0 ;;
     'work:ui-proof-brief:--repo') return 0 ;;
     'work:ui-proof-brief:--family') return 0 ;;
@@ -969,7 +958,7 @@ _starci() {
     'gate:repo-presentation') _values 'flags' '--root' '--runtime' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:run') _values 'flags' '--root' '--base' '--main' '--changed' '--tests' '--out' '--scope' '--tree' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:sonar') _values 'flags' '--key' '--name' '--with-token' '--wait' '--base' '--paths' '--project-gate' '--out' '--blob' '--log' '--token-ref' '--no-ensure' '--timeout' '--wait-timeout' '--isolate' '--keep-slice-project' '--declaration' '--host' '--stack' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'gate:starcistacks') _values 'flags' '--new' '--admitted-at' '--op' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'gate:starcistacks') _values 'flags' '--new' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:test-world') _values 'flags' '--root' '--project' '--tests' '--out' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:unit') _values 'flags' '--root' '--out' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'git:backup') _values 'flags' '--remote' '--branches' '--dry-run' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -989,14 +978,13 @@ _starci() {
     'kernel:artifacts') _values 'flags' '--repo' '--workflow' '--job' '--kind' '--subkind' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:autopilot') _values 'flags' '--repo' '--workflow' '--sweep' '--bundle' '--checklist' '--lang' '--set' '--reason' '--defer-to-handover' '--op' '--class' '--detail' '--fields' '--stub' '--job' '--release' '--defer-leg' '--reopen' '--handover-answer' '--note' '--extend-budget' '--by' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:consume-report') _values 'flags' '--repo' '--job' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'kernel:contract-release') _values 'flags' '--repo' '--family' '--workflow' '--batch' '--reason' '--by' '--dry-run' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:coverage') _values 'flags' '--repo' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:cut-seam') _values 'flags' '--repo' '--publish-interface' '--release' '--reconcile' '--job' '--files' '--summary' '--workflow' '--op' '--cut-id' '--reason' '--exit-code' '--command' '--evidence' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:decide') _values 'flags' '--repo' '--workflow' '--hypothesis' '--action-key' '--metric' '--command' '--close' '--result' '--observed' '--list' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:decisions') _values 'flags' '--repo' '--workflow' '--list' '--all' '--next' '--open' '--kind' '--summary' '--by' '--entity-type' '--entity-id' '--decider' '--due-ms' '--key' '--evidence-file' '--evidence' '--evidence-json' '--allowed-verbs' '--options-json' '--severity' '--item' '--claim' '--resolve' '--verb' '--decision' '--note' '--escalate' '--to' '--reason' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:dispatch') _values 'flags' '--repo' '--job' '--spawn' '--model' '--worktree' '--lease-ttl' '--env-gate' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:dispatch-ready') _values 'flags' '--repo' '--workflow' '--max' '--dry-run' '--foreground' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'kernel:enqueue') _values 'flags' '--repo' '--workflow' '--op' '--paths' '--records' '--params' '--repository' '--cut-id' '--cut-ordinal' '--cut-total' '--after' '--foundation' '--contract-change' '--follow-up-of' '--new-module' '--retry-of' '--reopen' '--derived-from' '--canon-scan' '--resolves' '--what' '--title' '--risk' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'kernel:enqueue') _values 'flags' '--repo' '--workflow' '--op' '--paths' '--records' '--params' '--repository' '--cut-id' '--cut-ordinal' '--cut-total' '--after' '--foundation' '--new-module' '--retry-of' '--reopen' '--derived-from' '--canon-scan' '--resolves' '--what' '--title' '--risk' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:estimate') _values 'flags' '--repo' '--files' '--assertions' '--components' '--records' '--paths' '--gear' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:extensions') _values 'flags' '--repo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:finish') _values 'flags' '--repo' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -1006,7 +994,7 @@ _starci() {
     'kernel:hierarchy') _values 'flags' '--repo' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:inbox') _values 'flags' '--repo' '--workflow' '--ack' '--disposition' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:incident') _values 'flags' '--repo' '--workflow' '--kind' '--detail' '--op' '--holds' '--peer' '--refs' '--resolve' '--by' '--owner-answer' '--introduced-by' '--introducer' '--fix' '--attach' '--until-record' '--until-job' '--until-message' '--until-commit' '--until-incident' '--until-foundation' '--until-landed' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'kernel:kernel-ack-rev') _values 'flags' '--repo' '--workflow' '--rev' '--files' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'kernel:kernel-ack-rev') _values 'flags' '--repo' '--workflow' '--rev' '--plan' '--read-manifest' '--op' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:kernel-proposal') _values 'flags' '--repo' '--workflow' '--title' '--evidence' '--patch' '--files' '--decision' '--list' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:lifecycle') _values 'flags' '--repo' '--workflow' '--pause' '--stop' '--resume' '--by' '--reason' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:log') _values 'flags' '--repo' '--workflow' '--job' '--kind' '--msg' '--data' '--refs' '--level' '--node' '--actor' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -1150,7 +1138,7 @@ _starci() {
     'work:hygiene') _values 'flags' '--repo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'work:layout-tree') _values 'flags' '--work' '--app-dir' '--write' '--app' '--repo-root' '--node' '--breakpoint' '--theme' '--file' '--url' '--provenance' '--destination' '--route' '--locale' '--from' '--rect' '--active-nav' '--design' '--files' '--key' '--tolerance' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'work:render-proof') _values 'flags' '--work' '--record' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'work:shell-conformance') _values 'flags' '--admitted-at' '--op' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'work:shell-conformance') _values 'flags' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'work:ui-proof-brief') _values 'flags' '--surface' '--repo' '--family' '--elements' '--score' '--viewport' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'worker:close') _values 'flags' '--dispatch' '--stop-first' '--retry-release' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'worker:list') _values 'flags' '--run' '--by-lane' '--active' '--worktree' '--json' '--cwd' '--quiet' '--help' '--edition' ;;

package/completions/starci.bash

@@ -22,7 +22,7 @@ _starci() {
         git) COMPREPLY=( $(compgen -W "backup commit land sync" -- "$cur") );;
         guard) COMPREPLY=( $(compgen -W "command footprint-scan raw seat-tools verify-commit" -- "$cur") );;
         harness) COMPREPLY=( $(compgen -W "open start status stop" -- "$cur") );;
-        kernel) COMPREPLY=( $(compgen -W "archive artifacts autopilot consume-report contract-release coverage cut-seam decide decisions dispatch dispatch-ready enqueue estimate extensions finish foundation foundations graph-edit hierarchy inbox incident kernel-ack-rev kernel-proposal lifecycle log logs messages notify nudge observe op-contract op-override peers plan provider-backoff provider-health questions reconcile record-change record-checks redesign rename reply report retire-ask route run-deferred-tests serve-ask settle settle-tail status survey unit usage verify-proofs" -- "$cur") );;
+        kernel) COMPREPLY=( $(compgen -W "archive artifacts autopilot consume-report coverage cut-seam decide decisions dispatch dispatch-ready enqueue estimate extensions finish foundation foundations graph-edit hierarchy inbox incident kernel-ack-rev kernel-proposal lifecycle log logs messages notify nudge observe op-contract op-override peers plan provider-backoff provider-health questions reconcile record-change record-checks redesign rename reply report retire-ask route run-deferred-tests serve-ask settle settle-tail status survey unit usage verify-proofs" -- "$cur") );;
         lint) COMPREPLY=( $(compgen -W "run" -- "$cur") );;
         machine) COMPREPLY=( $(compgen -W "decisions kernel-watchdog lessons op-metrics seam-policy worktrees worktrees-clean" -- "$cur") );;
         npm) COMPREPLY=( $(compgen -W "ci install" -- "$cur") );;
@@ -149,8 +149,6 @@ _starci() {
         gate:sonar:--declaration) return 0;;
         gate:sonar:--host) return 0;;
         gate:sonar:--stack) return 0;;
-        gate:starcistacks:--admitted-at) return 0;;
-        gate:starcistacks:--op) return 0;;
         gate:test-world:--root) return 0;;
         gate:test-world:--project) COMPREPLY=( $(compgen -W "e2e integration contract" -- "$cur") ); return 0;;
         gate:test-world:--tests) return 0;;
@@ -202,12 +200,6 @@ _starci() {
         kernel:autopilot:--by) COMPREPLY=( $(compgen -W "supervisor kernel autopilot" -- "$cur") ); return 0;;
         kernel:consume-report:--repo) return 0;;
         kernel:consume-report:--job) return 0;;
-        kernel:contract-release:--repo) return 0;;
-        kernel:contract-release:--family) return 0;;
-        kernel:contract-release:--workflow) return 0;;
-        kernel:contract-release:--batch) return 0;;
-        kernel:contract-release:--reason) return 0;;
-        kernel:contract-release:--by) COMPREPLY=( $(compgen -W "supervisor owner" -- "$cur") ); return 0;;
         kernel:coverage:--repo) return 0;;
         kernel:coverage:--workflow) return 0;;
         kernel:cut-seam:--repo) return 0;;
@@ -276,8 +268,6 @@ _starci() {
         kernel:enqueue:--cut-total) return 0;;
         kernel:enqueue:--after) return 0;;
         kernel:enqueue:--foundation) return 0;;
-        kernel:enqueue:--contract-change) return 0;;
-        kernel:enqueue:--follow-up-of) return 0;;
         kernel:enqueue:--new-module) return 0;;
         kernel:enqueue:--retry-of) return 0;;
         kernel:enqueue:--reopen) return 0;;
@@ -359,7 +349,8 @@ _starci() {
         kernel:kernel-ack-rev:--repo) return 0;;
         kernel:kernel-ack-rev:--workflow) return 0;;
         kernel:kernel-ack-rev:--rev) return 0;;
-        kernel:kernel-ack-rev:--files) return 0;;
+        kernel:kernel-ack-rev:--read-manifest) return 0;;
+        kernel:kernel-ack-rev:--op) return 0;;
         kernel:kernel-proposal:--repo) return 0;;
         kernel:kernel-proposal:--workflow) return 0;;
         kernel:kernel-proposal:--title) return 0;;
@@ -858,8 +849,6 @@ _starci() {
         work:layout-tree:--tolerance) return 0;;
         work:render-proof:--work) return 0;;
         work:render-proof:--record) return 0;;
-        work:shell-conformance:--admitted-at) return 0;;
-        work:shell-conformance:--op) return 0;;
         work:ui-proof-brief:--surface) return 0;;
         work:ui-proof-brief:--repo) return 0;;
         work:ui-proof-brief:--family) return 0;;
@@ -942,7 +931,7 @@ _starci() {
         gate:repo-presentation) COMPREPLY=( $(compgen -W "--root --runtime --json --cwd --quiet --help --edition" -- "$cur") );;
         gate:run) COMPREPLY=( $(compgen -W "--root --base --main --changed --tests --out --scope --tree --json --cwd --quiet --help --edition" -- "$cur") );;
         gate:sonar) COMPREPLY=( $(compgen -W "--key --name --with-token --wait --base --paths --project-gate --out --blob --log --token-ref --no-ensure --timeout --wait-timeout --isolate --keep-slice-project --declaration --host --stack --json --cwd --quiet --help --edition" -- "$cur") );;
-        gate:starcistacks) COMPREPLY=( $(compgen -W "--new --admitted-at --op --json --cwd --quiet --help --edition" -- "$cur") );;
+        gate:starcistacks) COMPREPLY=( $(compgen -W "--new --json --cwd --quiet --help --edition" -- "$cur") );;
         gate:test-world) COMPREPLY=( $(compgen -W "--root --project --tests --out --json --cwd --quiet --help --edition" -- "$cur") );;
         gate:unit) COMPREPLY=( $(compgen -W "--root --out --json --cwd --quiet --help --edition" -- "$cur") );;
         git:backup) COMPREPLY=( $(compgen -W "--remote --branches --dry-run --json --cwd --quiet --help --edition" -- "$cur") );;
@@ -962,14 +951,13 @@ _starci() {
         kernel:artifacts) COMPREPLY=( $(compgen -W "--repo --workflow --job --kind --subkind --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:autopilot) COMPREPLY=( $(compgen -W "--repo --workflow --sweep --bundle --checklist --lang --set --reason --defer-to-handover --op --class --detail --fields --stub --job --release --defer-leg --reopen --handover-answer --note --extend-budget --by --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:consume-report) COMPREPLY=( $(compgen -W "--repo --job --json --cwd --quiet --help --edition" -- "$cur") );;
-        kernel:contract-release) COMPREPLY=( $(compgen -W "--repo --family --workflow --batch --reason --by --dry-run --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:coverage) COMPREPLY=( $(compgen -W "--repo --workflow --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:cut-seam) COMPREPLY=( $(compgen -W "--repo --publish-interface --release --reconcile --job --files --summary --workflow --op --cut-id --reason --exit-code --command --evidence --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:decide) COMPREPLY=( $(compgen -W "--repo --workflow --hypothesis --action-key --metric --command --close --result --observed --list --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:decisions) COMPREPLY=( $(compgen -W "--repo --workflow --list --all --next --open --kind --summary --by --entity-type --entity-id --decider --due-ms --key --evidence-file --evidence --evidence-json --allowed-verbs --options-json --severity --item --claim --resolve --verb --decision --note --escalate --to --reason --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:dispatch) COMPREPLY=( $(compgen -W "--repo --job --spawn --model --worktree --lease-ttl --env-gate --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:dispatch-ready) COMPREPLY=( $(compgen -W "--repo --workflow --max --dry-run --foreground --json --cwd --quiet --help --edition" -- "$cur") );;
-        kernel:enqueue) COMPREPLY=( $(compgen -W "--repo --workflow --op --paths --records --params --repository --cut-id --cut-ordinal --cut-total --after --foundation --contract-change --follow-up-of --new-module --retry-of --reopen --derived-from --canon-scan --resolves --what --title --risk --json --cwd --quiet --help --edition" -- "$cur") );;
+        kernel:enqueue) COMPREPLY=( $(compgen -W "--repo --workflow --op --paths --records --params --repository --cut-id --cut-ordinal --cut-total --after --foundation --new-module --retry-of --reopen --derived-from --canon-scan --resolves --what --title --risk --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:estimate) COMPREPLY=( $(compgen -W "--repo --files --assertions --components --records --paths --gear --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:extensions) COMPREPLY=( $(compgen -W "--repo --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:finish) COMPREPLY=( $(compgen -W "--repo --workflow --json --cwd --quiet --help --edition" -- "$cur") );;
@@ -979,7 +967,7 @@ _starci() {
         kernel:hierarchy) COMPREPLY=( $(compgen -W "--repo --workflow --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:inbox) COMPREPLY=( $(compgen -W "--repo --workflow --ack --disposition --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:incident) COMPREPLY=( $(compgen -W "--repo --workflow --kind --detail --op --holds --peer --refs --resolve --by --owner-answer --introduced-by --introducer --fix --attach --until-record --until-job --until-message --until-commit --until-incident --until-foundation --until-landed --json --cwd --quiet --help --edition" -- "$cur") );;
-        kernel:kernel-ack-rev) COMPREPLY=( $(compgen -W "--repo --workflow --rev --files --json --cwd --quiet --help --edition" -- "$cur") );;
+        kernel:kernel-ack-rev) COMPREPLY=( $(compgen -W "--repo --workflow --rev --plan --read-manifest --op --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:kernel-proposal) COMPREPLY=( $(compgen -W "--repo --workflow --title --evidence --patch --files --decision --list --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:lifecycle) COMPREPLY=( $(compgen -W "--repo --workflow --pause --stop --resume --by --reason --json --cwd --quiet --help --edition" -- "$cur") );;
         kernel:log) COMPREPLY=( $(compgen -W "--repo --workflow --job --kind --msg --data --refs --level --node --actor --json --cwd --quiet --help --edition" -- "$cur") );;
@@ -1123,7 +1111,7 @@ _starci() {
         work:hygiene) COMPREPLY=( $(compgen -W "--repo --json --cwd --quiet --help --edition" -- "$cur") );;
         work:layout-tree) COMPREPLY=( $(compgen -W "--work --app-dir --write --app --repo-root --node --breakpoint --theme --file --url --provenance --destination --route --locale --from --rect --active-nav --design --files --key --tolerance --json --cwd --quiet --help --edition" -- "$cur") );;
         work:render-proof) COMPREPLY=( $(compgen -W "--work --record --json --cwd --quiet --help --edition" -- "$cur") );;
-        work:shell-conformance) COMPREPLY=( $(compgen -W "--admitted-at --op --json --cwd --quiet --help --edition" -- "$cur") );;
+        work:shell-conformance) COMPREPLY=( $(compgen -W "--json --cwd --quiet --help --edition" -- "$cur") );;
         work:ui-proof-brief) COMPREPLY=( $(compgen -W "--surface --repo --family --elements --score --viewport --json --cwd --quiet --help --edition" -- "$cur") );;
         worker:close) COMPREPLY=( $(compgen -W "--dispatch --stop-first --retry-release --json --cwd --quiet --help --edition" -- "$cur") );;
         worker:list) COMPREPLY=( $(compgen -W "--run --by-lane --active --worktree --json --cwd --quiet --help --edition" -- "$cur") );;

package/completions/starci.fish

@@ -97,7 +97,6 @@ complete -c starci -n '__starci_needs_verb kernel' -a 'archive' -d 'archive a wo
 complete -c starci -n '__starci_needs_verb kernel' -a 'artifacts' -d 'list the indexed proof files of the workflow'\''s jobs, per job (read-only)'
 complete -c starci -n '__starci_needs_verb kernel' -a 'autopilot' -d 'show or drive a workflow'\''s autopilot: switch it, sweep, bundle, defer to handover, release, extend'
 complete -c starci -n '__starci_needs_verb kernel' -a 'consume-report' -d 'integrate the report a job filed; the Kernel must consume it before settle'
-complete -c starci -n '__starci_needs_verb kernel' -a 'contract-release' -d 'release a frozen op family at the Supervisor release point (contract-freeze.yaml)'
 complete -c starci -n '__starci_needs_verb kernel' -a 'coverage' -d 'show every FR, shape and proof case of the workflow'\''s scope as proven, stale or missing'
 complete -c starci -n '__starci_needs_verb kernel' -a 'cut-seam' -d 'publish a cut seam'\''s interface, release its siblings on a stub, or reconcile a stub sibling'
 complete -c starci -n '__starci_needs_verb kernel' -a 'decide' -d 'open, list or close an entry of the Kernel decision log (hypothesis, action, metric)'
@@ -114,7 +113,7 @@ complete -c starci -n '__starci_needs_verb kernel' -a 'graph-edit' -d 'apply a l
 complete -c starci -n '__starci_needs_verb kernel' -a 'hierarchy' -d 'project the agent hierarchy (starci/agent-hierarchy@1) of a workflow'
 complete -c starci -n '__starci_needs_verb kernel' -a 'inbox' -d 'list the workflow'\''s pending inbox items, or acknowledge one with a disposition'
 complete -c starci -n '__starci_needs_verb kernel' -a 'incident' -d 'raise, resolve or attach typed release conditions to a workflow incident'
-complete -c starci -n '__starci_needs_verb kernel' -a 'kernel-ack-rev' -d 'record the runtime rev whose kernel files this Kernel has read'
+complete -c starci -n '__starci_needs_verb kernel' -a 'kernel-ack-rev' -d 'project or attest the complete current Kernel READ manifest'
 complete -c starci -n '__starci_needs_verb kernel' -a 'kernel-proposal' -d 'file a tier-2 shared runtime change proposal for the Supervisor, or list proposals'
 complete -c starci -n '__starci_needs_verb kernel' -a 'lifecycle' -d 'pause, stop or resume a workflow; only the owner or supervisor resumes or stops'
 complete -c starci -n '__starci_needs_verb kernel' -a 'log' -d 'append one typed log row to the ledger'\''s logs table'
@@ -180,7 +179,7 @@ complete -c starci -n '__starci_needs_verb runtime' -a 'architecture' -d 'check
 complete -c starci -n '__starci_needs_verb runtime' -a 'benchmark-snapshot' -d 'append one model-pool snapshot file under benchmark/snapshots'
 complete -c starci -n '__starci_needs_verb runtime' -a 'check' -d 'judge the runtime tree — node --check, the runtime HFS check, the retained self-checks'
 complete -c starci -n '__starci_needs_verb runtime' -a 'derived-fields' -d 'regenerate or check the derived fields of the knowledge pattern files'
-complete -c starci -n '__starci_needs_verb runtime' -a 'doctor' -d 'run the installed tree'\''s own specs and report drift against the install manifest'
+complete -c starci -n '__starci_needs_verb runtime' -a 'doctor' -d 'verify installed payload, public entry custody and local runtime capabilities'
 complete -c starci -n '__starci_needs_verb runtime' -a 'gen-catalog' -d 'write or check the generated CLI catalog outputs, docs and shell completions'
 complete -c starci -n '__starci_needs_verb runtime' -a 'gen-ops' -d 'regenerate or check the generated operation registry'
 complete -c starci -n '__starci_needs_verb runtime' -a 'housekeeping' -d 'inspect or apply the host housekeeping sweeps'
@@ -202,7 +201,7 @@ complete -c starci -n '__starci_needs_verb supervisor' -a 'actions' -d 'list, re
 complete -c starci -n '__starci_needs_verb supervisor' -a 'bridge' -d 'inspect and govern cross-workflow dependencies and shared ownership'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'channel' -d 'register, inspect, and answer the Supervisor owner-message channel'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'direct-commits' -d 'find runtime main commits that bypassed the exclusive land gate'
-complete -c starci -n '__starci_needs_verb supervisor' -a 'gate-stability' -d 'compare frozen gate behavior against accepted work in live workflows'
+complete -c starci -n '__starci_needs_verb supervisor' -a 'gate-stability' -d 'compare explicitly selected current gates against accepted work in live workflows'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'gc' -d 'inspect or collect leftover workers, shells, lanes, temp data, leases, and logs'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'land' -d 'run the in-runtime land gate; external land-to-main.sh remains external'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'lesson-actions' -d 'land, revert, or propose changes from the Supervisor self-learning loop'
@@ -430,8 +429,6 @@ complete -c starci -n '__starci_using_command gate sonar' -l declaration -r -d '
 complete -c starci -n '__starci_using_command gate sonar' -l host -r -d 'Sonar server URL'
 complete -c starci -n '__starci_using_command gate sonar' -l stack -r -d 'custody stack directory'
 complete -c starci -n '__starci_using_command gate starcistacks' -l new -d 'check a repository being created by this leg'
-complete -c starci -n '__starci_using_command gate starcistacks' -l admitted-at -r -d 'admission time for contract-change advice'
-complete -c starci -n '__starci_using_command gate starcistacks' -l op -r -d 'admitted operation for contract-change advice'
 complete -c starci -n '__starci_using_command gate test-world' -l root -r -d 'application root'
 complete -c starci -n '__starci_using_command gate test-world' -l project -r -a 'e2e integration contract' -d 'test-world project'
 complete -c starci -n '__starci_using_command gate test-world' -l tests -r -d 'path pattern narrowing the selected specs'
@@ -493,13 +490,6 @@ complete -c starci -n '__starci_using_command kernel autopilot' -l extend-budget
 complete -c starci -n '__starci_using_command kernel autopilot' -l by -r -a 'supervisor kernel autopilot' -d 'who acts (default supervisor)'
 complete -c starci -n '__starci_using_command kernel consume-report' -l repo -r -d 'managed repository whose .starciwork ledger the command uses'
 complete -c starci -n '__starci_using_command kernel consume-report' -l job -r -d 'job whose filed report is consumed'
-complete -c starci -n '__starci_using_command kernel contract-release' -l repo -r -d 'managed repository whose .starciwork ledger the command uses'
-complete -c starci -n '__starci_using_command kernel contract-release' -l family -r -d 'op family to release'
-complete -c starci -n '__starci_using_command kernel contract-release' -l workflow -r -d 'workflow id'
-complete -c starci -n '__starci_using_command kernel contract-release' -l batch -r -d 'name of the release batch'
-complete -c starci -n '__starci_using_command kernel contract-release' -l reason -r -d 'why the family is released'
-complete -c starci -n '__starci_using_command kernel contract-release' -l by -r -a 'supervisor owner' -d 'who releases it'
-complete -c starci -n '__starci_using_command kernel contract-release' -l dry-run -d 'report what would be released without recording it'
 complete -c starci -n '__starci_using_command kernel coverage' -l repo -r -d 'managed repository whose .starciwork ledger the command uses'
 complete -c starci -n '__starci_using_command kernel coverage' -l workflow -r -d 'workflow id'
 complete -c starci -n '__starci_using_command kernel cut-seam' -l repo -r -d 'managed repository whose .starciwork ledger the command uses'
@@ -579,8 +569,6 @@ complete -c starci -n '__starci_using_command kernel enqueue' -l cut-ordinal -r
 complete -c starci -n '__starci_using_command kernel enqueue' -l cut-total -r -d 'number of units in the cut'
 complete -c starci -n '__starci_using_command kernel enqueue' -l after -r -d 'comma list of job ids this job waits for'
 complete -c starci -n '__starci_using_command kernel enqueue' -l foundation -r -d 'shared foundation this unit builds'
-complete -c starci -n '__starci_using_command kernel enqueue' -l contract-change -r -d 'registered follow-up change id in contract-changes.yaml'
-complete -c starci -n '__starci_using_command kernel enqueue' -l follow-up-of -r -d 'job of this workflow the follow-up leg answers'
 complete -c starci -n '__starci_using_command kernel enqueue' -l new-module -r -d 'comma list of module root dirs the grant creates'
 complete -c starci -n '__starci_using_command kernel enqueue' -l retry-of -r -d 'job this one retries'
 complete -c starci -n '__starci_using_command kernel enqueue' -l reopen -r -d 'reason a settled unit is reopened'
@@ -662,8 +650,10 @@ complete -c starci -n '__starci_using_command kernel incident' -l until-foundati
 complete -c starci -n '__starci_using_command kernel incident' -l until-landed -r -d 'release when the workflow lands its product: <workflowId>@<repository>'
 complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l repo -r -d 'managed repository whose .starciwork ledger the command uses'
 complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l workflow -r -d 'workflow id'
-complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l rev -r -d 'runtime commit (sha or ref) that was read'
-complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l files -r -d 'comma list of the kernel files read at that rev'
+complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l rev -r -d 'exact current Git SHA or installed required-byte revision returned by --plan'
+complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l plan -d 'return the current server-derived required manifest without acknowledgement'
+complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l read-manifest -r -d 'regular JSON file containing the exact complete manifest read by this Kernel'
+complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l op -r -d 'include this declared upcoming op contract in the required READ set'
 complete -c starci -n '__starci_using_command kernel kernel-proposal' -l repo -r -d 'managed repository whose .starciwork ledger the command uses'
 complete -c starci -n '__starci_using_command kernel kernel-proposal' -l workflow -r -d 'workflow id'
 complete -c starci -n '__starci_using_command kernel kernel-proposal' -l title -r -d 'one-line title of the proposal (required unless --list)'
@@ -941,7 +931,7 @@ complete -c starci -n '__starci_using_command runtime benchmark-snapshot' -l dir
 complete -c starci -n '__starci_using_command runtime check' -l only -r -d 'run one named check; arguments after -- pass through unchanged'
 complete -c starci -n '__starci_using_command runtime derived-fields' -l write -d 'rewrite the stale output in place'
 complete -c starci -n '__starci_using_command runtime derived-fields' -l check -d 'list the stale output (the default)'
-complete -c starci -n '__starci_using_command runtime doctor' -l quick -d 'only the core kernel/ledger spec subset'
+complete -c starci -n '__starci_using_command runtime doctor' -l quick -d 'check install integrity without runtime capability checks'
 complete -c starci -n '__starci_using_command runtime gen-catalog' -l write -d 'rewrite every generated output from modules/cli/commands'
 complete -c starci -n '__starci_using_command runtime gen-catalog' -l check -d 'exit 1 listing each output that differs'
 complete -c starci -n '__starci_using_command runtime gen-catalog' -l root -r -d 'the runtime tree to read and write'
@@ -1019,7 +1009,7 @@ complete -c starci -n '__starci_using_command supervisor channel' -l text-file -
 complete -c starci -n '__starci_using_command supervisor channel' -l to -r -d 'inbox message id to answer'
 complete -c starci -n '__starci_using_command supervisor channel' -l timeout-ms -r -d 'maximum inbox wait in milliseconds'
 complete -c starci -n '__starci_using_command supervisor direct-commits' -l repo -r -d 'runtime repository to inspect'
-complete -c starci -n '__starci_using_command supervisor gate-stability' -l family -r -d 'frozen operation family to inspect'
+complete -c starci -n '__starci_using_command supervisor gate-stability' -l family -r -d 'operation family to inspect'
 complete -c starci -n '__starci_using_command supervisor gate-stability' -l tree -r -d 'tree whose gates should run for one side'
 complete -c starci -n '__starci_using_command supervisor gate-stability' -l base -r -d 'baseline tree for a two-sided comparison'
 complete -c starci -n '__starci_using_command supervisor gate-stability' -l head -r -d 'candidate tree for a two-sided comparison'
@@ -1280,8 +1270,6 @@ complete -c starci -n '__starci_using_command work layout-tree' -l key -r -d 'sl
 complete -c starci -n '__starci_using_command work layout-tree' -l tolerance -r -d 'colour tolerance when finding the slot'
 complete -c starci -n '__starci_using_command work render-proof' -l work -r -d 'the .starciwork tree that holds the record'
 complete -c starci -n '__starci_using_command work render-proof' -l record -r -d 'record id to render'
-complete -c starci -n '__starci_using_command work shell-conformance' -l admitted-at -r -d 'ISO time or epoch ms the work was admitted at'
-complete -c starci -n '__starci_using_command work shell-conformance' -l op -r -d 'op id whose contract changes count (needs --admitted-at)'
 complete -c starci -n '__starci_using_command work ui-proof-brief' -l surface -r -d 'ui record path the brief is for'
 complete -c starci -n '__starci_using_command work ui-proof-brief' -l repo -r -d 'product repository root'
 complete -c starci -n '__starci_using_command work ui-proof-brief' -l family -r -d 'grammar family to use instead of the detected one (a registered grammar family id)'

package/completions/starci.ps1

@@ -12,7 +12,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'git' = @('backup','commit','land','sync')
         'guard' = @('command','footprint-scan','raw','seat-tools','verify-commit')
         'harness' = @('open','start','status','stop')
-        'kernel' = @('archive','artifacts','autopilot','consume-report','contract-release','coverage','cut-seam','decide','decisions','dispatch','dispatch-ready','enqueue','estimate','extensions','finish','foundation','foundations','graph-edit','hierarchy','inbox','incident','kernel-ack-rev','kernel-proposal','lifecycle','log','logs','messages','notify','nudge','observe','op-contract','op-override','peers','plan','provider-backoff','provider-health','questions','reconcile','record-change','record-checks','redesign','rename','reply','report','retire-ask','route','run-deferred-tests','serve-ask','settle','settle-tail','status','survey','unit','usage','verify-proofs')
+        'kernel' = @('archive','artifacts','autopilot','consume-report','coverage','cut-seam','decide','decisions','dispatch','dispatch-ready','enqueue','estimate','extensions','finish','foundation','foundations','graph-edit','hierarchy','inbox','incident','kernel-ack-rev','kernel-proposal','lifecycle','log','logs','messages','notify','nudge','observe','op-contract','op-override','peers','plan','provider-backoff','provider-health','questions','reconcile','record-change','record-checks','redesign','rename','reply','report','retire-ask','route','run-deferred-tests','serve-ask','settle','settle-tail','status','survey','unit','usage','verify-proofs')
         'lint' = @('run')
         'machine' = @('decisions','kernel-watchdog','lessons','op-metrics','seam-policy','worktrees','worktrees-clean')
         'npm' = @('ci','install')
@@ -68,7 +68,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'gate repo-presentation' = @('--root','--runtime','--json','--cwd','--quiet','--help','--edition')
         'gate run' = @('--root','--base','--main','--changed','--tests','--out','--scope','--tree','--json','--cwd','--quiet','--help','--edition')
         'gate sonar' = @('--key','--name','--with-token','--wait','--base','--paths','--project-gate','--out','--blob','--log','--token-ref','--no-ensure','--timeout','--wait-timeout','--isolate','--keep-slice-project','--declaration','--host','--stack','--json','--cwd','--quiet','--help','--edition')
-        'gate starcistacks' = @('--new','--admitted-at','--op','--json','--cwd','--quiet','--help','--edition')
+        'gate starcistacks' = @('--new','--json','--cwd','--quiet','--help','--edition')
         'gate test-world' = @('--root','--project','--tests','--out','--json','--cwd','--quiet','--help','--edition')
         'gate unit' = @('--root','--out','--json','--cwd','--quiet','--help','--edition')
         'git backup' = @('--remote','--branches','--dry-run','--json','--cwd','--quiet','--help','--edition')
@@ -88,14 +88,13 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel artifacts' = @('--repo','--workflow','--job','--kind','--subkind','--json','--cwd','--quiet','--help','--edition')
         'kernel autopilot' = @('--repo','--workflow','--sweep','--bundle','--checklist','--lang','--set','--reason','--defer-to-handover','--op','--class','--detail','--fields','--stub','--job','--release','--defer-leg','--reopen','--handover-answer','--note','--extend-budget','--by','--json','--cwd','--quiet','--help','--edition')
         'kernel consume-report' = @('--repo','--job','--json','--cwd','--quiet','--help','--edition')
-        'kernel contract-release' = @('--repo','--family','--workflow','--batch','--reason','--by','--dry-run','--json','--cwd','--quiet','--help','--edition')
         'kernel coverage' = @('--repo','--workflow','--json','--cwd','--quiet','--help','--edition')
         'kernel cut-seam' = @('--repo','--publish-interface','--release','--reconcile','--job','--files','--summary','--workflow','--op','--cut-id','--reason','--exit-code','--command','--evidence','--json','--cwd','--quiet','--help','--edition')
         'kernel decide' = @('--repo','--workflow','--hypothesis','--action-key','--metric','--command','--close','--result','--observed','--list','--json','--cwd','--quiet','--help','--edition')
         'kernel decisions' = @('--repo','--workflow','--list','--all','--next','--open','--kind','--summary','--by','--entity-type','--entity-id','--decider','--due-ms','--key','--evidence-file','--evidence','--evidence-json','--allowed-verbs','--options-json','--severity','--item','--claim','--resolve','--verb','--decision','--note','--escalate','--to','--reason','--json','--cwd','--quiet','--help','--edition')
         'kernel dispatch' = @('--repo','--job','--spawn','--model','--worktree','--lease-ttl','--env-gate','--json','--cwd','--quiet','--help','--edition')
         'kernel dispatch-ready' = @('--repo','--workflow','--max','--dry-run','--foreground','--json','--cwd','--quiet','--help','--edition')
-        'kernel enqueue' = @('--repo','--workflow','--op','--paths','--records','--params','--repository','--cut-id','--cut-ordinal','--cut-total','--after','--foundation','--contract-change','--follow-up-of','--new-module','--retry-of','--reopen','--derived-from','--canon-scan','--resolves','--what','--title','--risk','--json','--cwd','--quiet','--help','--edition')
+        'kernel enqueue' = @('--repo','--workflow','--op','--paths','--records','--params','--repository','--cut-id','--cut-ordinal','--cut-total','--after','--foundation','--new-module','--retry-of','--reopen','--derived-from','--canon-scan','--resolves','--what','--title','--risk','--json','--cwd','--quiet','--help','--edition')
         'kernel estimate' = @('--repo','--files','--assertions','--components','--records','--paths','--gear','--json','--cwd','--quiet','--help','--edition')
         'kernel extensions' = @('--repo','--json','--cwd','--quiet','--help','--edition')
         'kernel finish' = @('--repo','--workflow','--json','--cwd','--quiet','--help','--edition')
@@ -105,7 +104,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel hierarchy' = @('--repo','--workflow','--json','--cwd','--quiet','--help','--edition')
         'kernel inbox' = @('--repo','--workflow','--ack','--disposition','--json','--cwd','--quiet','--help','--edition')
         'kernel incident' = @('--repo','--workflow','--kind','--detail','--op','--holds','--peer','--refs','--resolve','--by','--owner-answer','--introduced-by','--introducer','--fix','--attach','--until-record','--until-job','--until-message','--until-commit','--until-incident','--until-foundation','--until-landed','--json','--cwd','--quiet','--help','--edition')
-        'kernel kernel-ack-rev' = @('--repo','--workflow','--rev','--files','--json','--cwd','--quiet','--help','--edition')
+        'kernel kernel-ack-rev' = @('--repo','--workflow','--rev','--plan','--read-manifest','--op','--json','--cwd','--quiet','--help','--edition')
         'kernel kernel-proposal' = @('--repo','--workflow','--title','--evidence','--patch','--files','--decision','--list','--json','--cwd','--quiet','--help','--edition')
         'kernel lifecycle' = @('--repo','--workflow','--pause','--stop','--resume','--by','--reason','--json','--cwd','--quiet','--help','--edition')
         'kernel log' = @('--repo','--workflow','--job','--kind','--msg','--data','--refs','--level','--node','--actor','--json','--cwd','--quiet','--help','--edition')
@@ -249,7 +248,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'work hygiene' = @('--repo','--json','--cwd','--quiet','--help','--edition')
         'work layout-tree' = @('--work','--app-dir','--write','--app','--repo-root','--node','--breakpoint','--theme','--file','--url','--provenance','--destination','--route','--locale','--from','--rect','--active-nav','--design','--files','--key','--tolerance','--json','--cwd','--quiet','--help','--edition')
         'work render-proof' = @('--work','--record','--json','--cwd','--quiet','--help','--edition')
-        'work shell-conformance' = @('--admitted-at','--op','--json','--cwd','--quiet','--help','--edition')
+        'work shell-conformance' = @('--json','--cwd','--quiet','--help','--edition')
         'work ui-proof-brief' = @('--surface','--repo','--family','--elements','--score','--viewport','--json','--cwd','--quiet','--help','--edition')
         'worker close' = @('--dispatch','--stop-first','--retry-release','--json','--cwd','--quiet','--help','--edition')
         'worker list' = @('--run','--by-lane','--active','--worktree','--json','--cwd','--quiet','--help','--edition')
@@ -367,8 +366,6 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'gate sonar --declaration' = @()
         'gate sonar --host' = @()
         'gate sonar --stack' = @()
-        'gate starcistacks --admitted-at' = @()
-        'gate starcistacks --op' = @()
         'gate test-world --root' = @()
         'gate test-world --project' = @('e2e','integration','contract')
         'gate test-world --tests' = @()
@@ -420,12 +417,6 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel autopilot --by' = @('supervisor','kernel','autopilot')
         'kernel consume-report --repo' = @()
         'kernel consume-report --job' = @()
-        'kernel contract-release --repo' = @()
-        'kernel contract-release --family' = @()
-        'kernel contract-release --workflow' = @()
-        'kernel contract-release --batch' = @()
-        'kernel contract-release --reason' = @()
-        'kernel contract-release --by' = @('supervisor','owner')
         'kernel coverage --repo' = @()
         'kernel coverage --workflow' = @()
         'kernel cut-seam --repo' = @()
@@ -494,8 +485,6 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel enqueue --cut-total' = @()
         'kernel enqueue --after' = @()
         'kernel enqueue --foundation' = @()
-        'kernel enqueue --contract-change' = @()
-        'kernel enqueue --follow-up-of' = @()
         'kernel enqueue --new-module' = @()
         'kernel enqueue --retry-of' = @()
         'kernel enqueue --reopen' = @()
@@ -577,7 +566,8 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel kernel-ack-rev --repo' = @()
         'kernel kernel-ack-rev --workflow' = @()
         'kernel kernel-ack-rev --rev' = @()
-        'kernel kernel-ack-rev --files' = @()
+        'kernel kernel-ack-rev --read-manifest' = @()
+        'kernel kernel-ack-rev --op' = @()
         'kernel kernel-proposal --repo' = @()
         'kernel kernel-proposal --workflow' = @()
         'kernel kernel-proposal --title' = @()
@@ -1076,8 +1066,6 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'work layout-tree --tolerance' = @()
         'work render-proof --work' = @()
         'work render-proof --record' = @()
-        'work shell-conformance --admitted-at' = @()
-        'work shell-conformance --op' = @()
         'work ui-proof-brief --surface' = @()
         'work ui-proof-brief --repo' = @()
         'work ui-proof-brief --family' = @()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/cli",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "The single catalog-driven command line for StarCi apps and runtimes.",
   "type": "module",
   "license": "MIT",
@@ -12,20 +12,22 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@starci/hfs": "4.0.9"
+    "@starci/hfs": "4.0.10"
   },
   "scripts": {
     "test": "node --test src/*.spec.mjs"
   },
   "files": [
+    "LICENSE",
     "bin/",
     "src/",
+    "!src/**/*.spec.mjs",
     "completions/",
     "README.md",
     "CHANGELOG.md"
   ],
   "engines": {
-    "node": ">=22.13.0"
+    "node": "^22.22.3 || ^24.15.0"
   },
   "publishConfig": {
     "access": "public"

package/src/catalog.generated.mjs

@@ -1,7 +1,7 @@
 // GENERATED by scripts/cli/gen-catalog.mjs — do not edit
 export const CATALOG = {
   "schema": "starci/cli-catalog@1",
-  "hash": "59cf4483d2aaf6832810722f454616ca58e4f9e7e833d93f139ba91e1f04f4e6",
+  "hash": "b224e67e193ec794b7f5a090ba31e76f9a9f72255a0db6326b8c37d256ab3441",
   "global": [
     {
       "name": "json",
@@ -681,7 +681,7 @@ export const CATALOG = {
           ],
           "exit": {
             "0": "action completed",
-            "1": "another gateway owns the state or the port cannot be bound",
+            "1": "another gateway owns the state, the port cannot be bound, or stop custody is unverified",
             "2": "bad usage or configuration"
           },
           "json": "always",
@@ -883,7 +883,7 @@ export const CATALOG = {
           ],
           "exit": {
             "0": "action completed",
-            "1": "another tunnel manager owns the tunnel state",
+            "1": "another tunnel manager owns the state or exact manager/child stop custody is unverified",
             "2": "bad usage or configuration"
           },
           "json": "always",
@@ -1898,16 +1898,6 @@ export const CATALOG = {
               "name": "new",
               "type": "boolean",
               "summary": "check a repository being created by this leg"
-            },
-            {
-              "name": "admitted-at",
-              "type": "string",
-              "summary": "admission time for contract-change advice"
-            },
-            {
-              "name": "op",
-              "type": "string",
-              "summary": "admitted operation for contract-change advice"
             }
           ],
           "exit": {
@@ -2984,76 +2974,6 @@ export const CATALOG = {
             ]
           }
         },
-        "contract-release": {
-          "summary": "release a frozen op family at the Supervisor release point (contract-freeze.yaml)",
-          "owner": "runtime",
-          "flags": [
-            {
-              "name": "repo",
-              "type": "string",
-              "summary": "managed repository whose .starciwork ledger the command uses"
-            },
-            {
-              "name": "family",
-              "type": "string",
-              "required": true,
-              "summary": "op family to release"
-            },
-            {
-              "name": "workflow",
-              "type": "string",
-              "summary": "workflow id"
-            },
-            {
-              "name": "batch",
-              "type": "string",
-              "summary": "name of the release batch"
-            },
-            {
-              "name": "reason",
-              "type": "string",
-              "summary": "why the family is released"
-            },
-            {
-              "name": "by",
-              "type": "enum",
-              "summary": "who releases it",
-              "enum": [
-                "supervisor",
-                "owner"
-              ]
-            },
-            {
-              "name": "dry-run",
-              "type": "boolean",
-              "summary": "report what would be released without recording it"
-            }
-          ],
-          "exit": {
-            "0": "released, or the dry-run plan shown",
-            "1": "refused or failed",
-            "2": "bad usage: a required flag is missing or a flag has no value"
-          },
-          "json": "flag",
-          "examples": [
-            "starci kernel contract-release --repo <path> --family <family>",
-            "starci kernel contract-release --repo <path> --family <family> --workflow <workflow> --batch <batch> --reason <reason> --dry-run"
-          ],
-          "editions": [
-            "full"
-          ],
-          "since": "1.0.0-alpha.4",
-          "removed": [
-            "starci api contract-release",
-            "node scripts/kernel/cli.mjs contract-release"
-          ],
-          "impl": {
-            "script": "scripts/kernel/cli.mjs",
-            "args": [
-              "contract-release"
-            ]
-          }
-        },
         "coverage": {
           "summary": "show every FR, shape and proof case of the workflow's scope as proven, stale or missing",
           "owner": "runtime",
@@ -3658,16 +3578,6 @@ export const CATALOG = {
               "type": "string",
               "summary": "shared foundation this unit builds"
             },
-            {
-              "name": "contract-change",
-              "type": "string",
-              "summary": "registered follow-up change id in contract-changes.yaml"
-            },
-            {
-              "name": "follow-up-of",
-              "type": "string",
-              "summary": "job of this workflow the follow-up leg answers"
-            },
             {
               "name": "new-module",
               "type": "string",
@@ -4398,7 +4308,7 @@ export const CATALOG = {
           }
         },
         "kernel-ack-rev": {
-          "summary": "record the runtime rev whose kernel files this Kernel has read",
+          "summary": "project or attest the complete current Kernel READ manifest",
           "owner": "runtime",
           "flags": [
             {
@@ -4415,23 +4325,33 @@ export const CATALOG = {
             {
               "name": "rev",
               "type": "string",
-              "required": true,
-              "summary": "runtime commit (sha or ref) that was read"
+              "summary": "exact current Git SHA or installed required-byte revision returned by --plan"
             },
             {
-              "name": "files",
+              "name": "plan",
+              "type": "boolean",
+              "summary": "return the current server-derived required manifest without acknowledgement"
+            },
+            {
+              "name": "read-manifest",
+              "type": "string",
+              "summary": "regular JSON file containing the exact complete manifest read by this Kernel"
+            },
+            {
+              "name": "op",
               "type": "string",
-              "summary": "comma list of the kernel files read at that rev"
+              "summary": "include this declared upcoming op contract in the required READ set"
             }
           ],
           "exit": {
-            "0": "acked",
-            "1": "refused or failed (rev is no commit of the runtime)",
+            "0": "planned or acknowledged",
+            "1": "refused or unavailable current identity/READ inputs",
             "2": "bad usage: a required flag is missing or a flag has no value"
           },
           "json": "flag",
           "examples": [
-            "starci kernel kernel-ack-rev --repo <path> --workflow <workflow> --rev <rev>"
+            "starci kernel kernel-ack-rev --repo <path> --workflow <workflow> --plan",
+            "starci kernel kernel-ack-rev --repo <path> --workflow <workflow> --rev <rev> --read-manifest <file>"
           ],
           "editions": [
             "full"
@@ -8104,18 +8024,18 @@ export const CATALOG = {
           }
         },
         "doctor": {
-          "summary": "run the installed tree's own specs and report drift against the install manifest",
+          "summary": "verify installed payload, public entry custody and local runtime capabilities",
           "owner": "runtime",
           "flags": [
             {
               "name": "quick",
               "type": "boolean",
-              "summary": "only the core kernel/ledger spec subset"
+              "summary": "check install integrity without runtime capability checks"
             }
           ],
           "exit": {
-            "0": "every spec passed",
-            "1": "a spec failed or the tree drifted",
+            "0": "the selected local diagnostic checks passed",
+            "1": "installed integrity or a selected runtime capability failed",
             "2": "bad usage"
           },
           "json": "none",
@@ -9227,14 +9147,14 @@ export const CATALOG = {
           }
         },
         "gate-stability": {
-          "summary": "compare frozen gate behavior against accepted work in live workflows",
+          "summary": "compare explicitly selected current gates against accepted work in live workflows",
           "owner": "runtime",
           "flags": [
             {
               "name": "family",
               "type": "string",
               "required": true,
-              "summary": "frozen operation family to inspect"
+              "summary": "operation family to inspect"
             },
             {
               "name": "tree",
@@ -9259,6 +9179,7 @@ export const CATALOG = {
             {
               "name": "gate",
               "type": "list",
+              "required": true,
               "summary": "gate module and export as module#name"
             }
           ],
@@ -9268,8 +9189,8 @@ export const CATALOG = {
           },
           "json": "flag",
           "examples": [
-            "starci supervisor gate-stability --family <op> --tree <dir>",
-            "starci supervisor gate-stability --family <op> --base <dir> --head <dir> --json"
+            "starci supervisor gate-stability --family <op> --gate <module#export> --tree <dir>",
+            "starci supervisor gate-stability --family <op> --gate <module#export> --base <dir> --head <dir> --json"
           ],
           "editions": [
             "full"
@@ -12525,18 +12446,7 @@ export const CATALOG = {
               "variadic": false
             }
           ],
-          "flags": [
-            {
-              "name": "admitted-at",
-              "type": "string",
-              "summary": "ISO time or epoch ms the work was admitted at"
-            },
-            {
-              "name": "op",
-              "type": "string",
-              "summary": "op id whose contract changes count (needs --admitted-at)"
-            }
-          ],
+          "flags": [],
           "exit": {
             "0": "conformant",
             "1": "refused or suspect records",
@@ -13669,14 +13579,6 @@ export const RETIRED = [
     "spelling": "node scripts/kernel/cli.mjs consume-report",
     "use": "starci kernel consume-report"
   },
-  {
-    "spelling": "starci api contract-release",
-    "use": "starci kernel contract-release"
-  },
-  {
-    "spelling": "node scripts/kernel/cli.mjs contract-release",
-    "use": "starci kernel contract-release"
-  },
   {
     "spelling": "starci api coverage",
     "use": "starci kernel coverage"

package/src/runtime-install.generated.mjs

@@ -0,0 +1,2 @@
+// GENERATED by scripts/cli/gen-catalog.mjs — do not edit
+export const RUNTIME_VERSION = "1.0.0-alpha.4";

package/src/runtime-install.mjs

@@ -6,7 +6,8 @@ import { fileURLToPath } from 'node:url';
 import { spawnSync } from 'node:child_process';
 import { writeRuntimeShim } from './shim.mjs';
 
-export const RUNTIME_VERSION = '1.0.0-alpha.4';
+import { RUNTIME_VERSION } from './runtime-install.generated.mjs';
+export { RUNTIME_VERSION };
 
 const writeTo = (target, text) => {
   if (typeof target === 'function') target(text);
@@ -105,6 +106,7 @@ export function installRuntime({ cwd = process.cwd(), home = os.homedir(), force
   const installStatus = statusOf(installed, 'runtime installer', report);
   if (installStatus !== 0) return installStatus;
 
-  writeRuntimeShim({ root: runtimeRoot, home, cli: fileURLToPath(new URL('../bin/starci.mjs', import.meta.url)) }, deps);
+  // The download cache supplies the installer; runtime commands must read the installed host's config and bindings.
+  writeRuntimeShim({ root: path.resolve(cwd, '.claude'), home, cli: fileURLToPath(new URL('../bin/starci.mjs', import.meta.url)) }, deps);
   return 0;
 }

package/src/package-entry.spec.mjs

@@ -1,83 +0,0 @@
-import assert from 'node:assert/strict';
-import { spawnSync } from 'node:child_process';
-import { lstatSync, mkdtempSync, readFileSync, readdirSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import test from 'node:test';
-import { fileURLToPath } from 'node:url';
-import { main } from './main.mjs';
-
-const bin = fileURLToPath(new URL('../bin/starci.mjs', import.meta.url));
-const manifest = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
-const run = (...args) => spawnSync(process.execPath, [bin, ...args], { encoding: 'utf8', windowsHide: true, timeout: 30_000 });
-
-test('the exact installed HFS dependency loads its real published module graph', async () => {
-  const file = fileURLToPath(import.meta.resolve('@starci/hfs/package.json'));
-  const installed = JSON.parse(readFileSync(file, 'utf8'));
-  assert.equal(installed.name, '@starci/hfs');
-  const declared = manifest.dependencies[installed.name];
-  if (declared.startsWith('file:')) {
-    const archive = path.resolve(fileURLToPath(new URL('../', import.meta.url)), declared.slice('file:'.length));
-    assert.equal(path.extname(archive), '.tgz');
-    assert.equal(lstatSync(archive).isFile(), true);
-    // The clean-package owner verifies the original exact version and archive identity in preparePackedDependencies,
-    // then every installed archive byte in verifyPackedDependencies, before running this spec with its scratch alias.
-  } else assert.equal(installed.version, declared);
-  const root = path.dirname(file);
-  assert.equal(lstatSync(root).isDirectory(), true);
-  assert.equal(realpathSync.native(root), path.join(realpathSync.native(fileURLToPath(new URL('../', import.meta.url))), 'node_modules', '@starci', 'hfs'));
-  const hfs = await import('@starci/hfs');
-  assert.equal(typeof hfs.main, 'function');
-});
-
-test('the real binary dispatches finite app explanations through installed HFS', (t) => {
-  const cwd = mkdtempSync(path.join(os.tmpdir(), 'starci-app-main-'));
-  t.after(() => rmSync(cwd, { recursive: true, force: true }));
-  const declaration = JSON.stringify({ hfs: 2, kind: 'app', project: 'package-entry', sides: {
-    be: { apps: [{ name: 'api', kind: 'api' }] },
-    fe: { apps: [{ name: 'web', kind: 'next' }], reads: ['be/contracts/'] },
-  } });
-  writeFileSync(path.join(cwd, 'hfs.json'), declaration);
-  const owned = run('app', 'explain', 'hfs.json', '--cwd', cwd, '--json');
-  assert.equal(owned.status, 0, owned.stderr || String(owned.error ?? ''));
-  const explained = JSON.parse(owned.stdout);
-  assert.deepEqual([explained.path, explained.status, explained.slot], ['hfs.json', 'owned', 'app.declaration']);
-  const unowned = run('app', 'explain', 'unowned.fixture', '--cwd', cwd, '--json');
-  assert.equal(unowned.status, 1, unowned.stderr || String(unowned.error ?? ''));
-  const refused = JSON.parse(unowned.stdout);
-  assert.deepEqual([refused.path, refused.status, refused.code], ['unowned.fixture', 'no-slot', 'HFS_SLOT_UNDECLARED']);
-  assert.equal(readFileSync(path.join(cwd, 'hfs.json'), 'utf8'), declaration);
-  assert.deepEqual(readdirSync(cwd), ['hfs.json']);
-});
-
-test('the published binary serves its own version and catalog help', () => {
-  const version = run('--version');
-  assert.equal(version.status, 0, version.stderr);
-  assert.equal(version.stdout.trim(), manifest.version);
-  const help = run('--help');
-  assert.equal(help.status, 0, help.stderr);
-  assert.match(help.stdout, /Usage: starci <group> <verb>/);
-  assert.match(help.stdout, /Groups:/);
-  const appHelp = run('app', 'check', '--help');
-  assert.equal(appHelp.status, 0, appHelp.stderr);
-  assert.match(appHelp.stdout, /starci app check/);
-});
-
-test('the published binary refuses unknown commands and invalid flags', () => {
-  const unknown = run('package-entry-unknown');
-  assert.equal(unknown.status, 2);
-  assert.match(unknown.stderr, /unknown group/);
-  const invalid = run('app', 'check', '--package-entry-unknown');
-  assert.equal(invalid.status, 2);
-  assert.match(invalid.stderr, /unknown (?:flag|option)/);
-});
-
-test('the package dispatcher preserves app arguments, cwd and owner exit status', async () => {
-  let called;
-  const code = await main(['--cwd', 'selected-app', 'app', 'check', '--json'], {
-    cwd: path.resolve('package-entry-base'), stdout: () => {}, stderr: () => {},
-    importHfs: async () => ({ main: async (argv, io) => { called = { argv, cwd: io.cwd }; return 1; } }),
-  });
-  assert.equal(code, 1);
-  assert.deepEqual(called, { argv: ['check', '--json'], cwd: path.resolve('package-entry-base', 'selected-app') });
-});