@starci/cli 1.0.0 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.1.0 - 2026-10-08
+
+- Changed: the catalog, help and shell completions follow the runtime of 1.0.0-alpha.7 (the release cut refuses early on host prerequisites, `starci release env-test`, the plan of `starci release publish` names every blocker in its json result), and the package depends on `@starci/hfs` 4.1.0.
+
 ## 1.0.0
 
 - Introduce the catalog-driven `starci` dispatcher, generated help and shell completions.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) StarCi contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -4,5 +4,8 @@
 `starci app ...`; runtime operations use the `workflow`, `kernel`, `runtime`, `supervisor`, and
 `debug` groups.
 
+Use Node.js 22.22.3 or later within the 22 branch, or 24.15.0 or later within the 24 branch, as
+`package.json` `engines.node` declares. Runtime SQLite capability checks remain required.
+
 Install the package as an exact development dependency, then run `starci help`. Runtime commands
 locate an installed StarCi tree automatically. If none exists, run `starci runtime install`.

package/completions/_starci

@@ -34,7 +34,7 @@ _starci() {
     'workflow:workflow lifecycle — define a goal, start its kernel, status, stop'
     'help:show top-level help'
     'completion:print a shell completion script'
-    'explain:show a verb contract and the spellings it replaces'
+    'explain:show a verb contract'
   )
   if (( CURRENT == 2 )); then
     _describe 'group' groups
@@ -43,31 +43,31 @@ _starci() {
       app) _values 'verbs' 'add[add one canonical backend capability and register its patterns]' 'check[judge the app tree, managed output, contracts, formatting and architecture]' 'emit[emit backend GraphQL, operation and event contract snapshots]' 'explain[explain which HFS slot owns one app-relative path]' 'hygiene[judge staged worktree metadata, stack files and plaintext secrets]' 'lint[lint both app sides and report repository, ESLint and stylelint findings together]' 'new[create a canonical service, unit spec or app image definition]' 'scaffold[create a full or lite StarCi app, including an empty unborn main Git repository]' 'secret[list, read, seal or generate an encrypted app secret]' 'stack[start, stop or inspect the shared local test-world infrastructure]' 'sync[compare or write every managed app file from its canonical template]' 'upgrade[upgrade a lite app to the full edition (--edition full); a full app is already current]' ;;
       check) _values 'verbs' 'run[run changed-scope checks or the full structural check set]' ;;
       connect) _values 'verbs' 'ask-gateway[operate the local owner-ask HTTP gateway]' 'telegram[deliver and maintain owner Telegram notifications]' 'telegram-media[deliver settled operation media through Telegram]' 'tunnel[operate the Cloudflare owner-ask tunnel]' ;;
-      debug) _values 'verbs' 'pass[inspect core health and maintain diagnostic custody in the machine ledger]' 'run[run one allowlisted read-only runtime inspector]' ;;
+      debug) _values 'verbs' 'digest[print the read-only debug digest, with its problems ordered by blocked work]' 'run[run one allowlisted read-only runtime inspector]' ;;
       docker) _values 'verbs' 'build[build one declared application image from the application root]' 'down[remove only the labelled resources owned by one application stack]' 'ps[list StarCi-labelled containers with ports and health]' 'up[start one application stack and wait for its declared healthchecks]' ;;
-      gate) _values 'verbs' 'canon-scan[measure canon conformance debt and plan its disjoint slices]' 'custody-exec[decrypt one custody document for a command or a bounded read]' 'env-health[inspect and manage the served environment used by verification]' 'hfs-sync[check an app'\''s generated files and custody trees for drift]' 'read[build the recorded READ digest for an operation]' 'reference-conventions[probe the installed backend reference rules of a reference root]' 'repo-presentation[check repository presentation rules for a product or runtime tree]' 'run[run the measured product or document gate]' 'sonar[inspect, provision and run the local Sonar quality gate]' 'starcistacks[check a repository'\''s stack declaration and custody layout]' 'test-world[run and judge one managed test-world project]' 'unit[run unit tests and judge per-subject coverage and test-kit use]' ;;
+      gate) _values 'verbs' 'canon-scan[measure canon conformance debt and plan its disjoint slices]' 'custody-exec[decrypt one custody document for a command or a bounded read]' 'env-health[inspect and manage the served environment used by verification]' 'hfs-sync[check an app'\''s generated files and custody trees for drift]' 'install-sandbox[prove the packed runtime tarball installs and runs in an empty home]' 'read[build the recorded READ digest for an operation]' 'reference-conventions[probe the installed backend reference rules of a reference root]' 'repo-presentation[check repository presentation rules for a product or runtime tree]' 'run[run the measured product or document gate]' 'runtime-artifact[describe the packed runtime archive and refuse forbidden material in it]' 'runtime-coverage[run the runtime spec suite under Node coverage and write coverage/lcov.info]' 'sonar[inspect, provision and run the local Sonar quality gate]' 'starcistacks[check a repository'\''s stack declaration and custody layout]' 'test-world[run and judge one managed test-world project]' 'unit[run unit tests and judge per-subject coverage and test-kit use]' ;;
       git) _values 'verbs' 'backup[push local branch tips only to dated backup refs]' 'commit[commit staged work with the message convention and trailers]' 'land[verify a lane and fast-forward it onto local main without pushing]' 'sync[merge local main into a clean lane with rerere enabled]' ;;
       guard) _values 'verbs' 'command[judge one shell PreToolUse request from JSON on stdin]' 'footprint-scan[scan for fresh cross-repository links and linked worktrees]' 'raw[apply command policy and run the real host tool behind a PATH wrapper]' 'seat-tools[deny tools forbidden for the bound seat from JSON on stdin]' 'verify-commit[verify a protected-branch update carries only worker-owned paths]' ;;
       harness) _values 'verbs' 'open[open the local harness URL in the default browser]' 'start[start the harness API and UI or its named tunnel]' 'status[report whether the harness health endpoint is up]' 'stop[stop only harness processes recorded by harness start]' ;;
-      kernel) _values 'verbs' 'archive[archive a workflow that will not finish: drop open jobs, retire asks, close Kernel and Tasks]' 'artifacts[list the indexed proof files of the workflow'\''s jobs, per job (read-only)]' 'autopilot[show or drive a workflow'\''s autopilot: switch it, sweep, bundle, defer to handover, release, extend]' 'consume-report[integrate the report a job filed; the Kernel must consume it before settle]' 'contract-release[release a frozen op family at the Supervisor release point (contract-freeze.yaml)]' 'coverage[show every FR, shape and proof case of the workflow'\''s scope as proven, stale or missing]' 'cut-seam[publish a cut seam'\''s interface, release its siblings on a stub, or reconcile a stub sibling]' 'decide[open, list or close an entry of the Kernel decision log (hypothesis, action, metric)]' 'decisions[list, open, claim, resolve or escalate Decision Items; the Kernel reads them first every wake]' 'dispatch[admit a routed job and launch its worker with --spawn; without it print the launch plan]' 'dispatch-ready[route and dispatch queued-ready jobs up to the workflow allowed parallelism]' 'enqueue[enqueue a work-unit job with its op, owned paths, records and retry lineage]' 'estimate[compute the size class and agent count of a slice from runtimes.yaml allocation.slicing]' 'extensions[list the file-based kernel extensions: verbs, status fields, boolean flags, load problems]' 'finish[finish an owner-approved workflow and release its kernel seat]' 'foundation[claim, land or declare a shared foundation (or none) for a workflow]' 'foundations[list the ledger'\''s shared foundations: owner, state, dependents, waits]' 'graph-edit[apply a logged, reversible light edit to the workflow'\''s unit jobs (drop, widen, wire, ...)]' 'hierarchy[project the agent hierarchy (starci/agent-hierarchy@1) of a workflow]' 'inbox[list the workflow'\''s pending inbox items, or acknowledge one with a disposition]' 'incident[raise, resolve or attach typed release conditions to a workflow incident]' 'kernel-ack-rev[record the runtime rev whose kernel files this Kernel has read]' 'kernel-proposal[file a tier-2 shared runtime change proposal for the Supervisor, or list proposals]' 'lifecycle[pause, stop or resume a workflow; only the owner or supervisor resumes or stops]' 'log[append one typed log row to the ledger'\''s logs table]' 'logs[list the workflow'\''s typed log rows, oldest first]' 'messages[drain the workflow Runs into the ledger and list every orchestration message]' 'notify[send a typed notice to one peer workflow or all peers]' 'nudge[wake a running job'\''s worker at its exact terminal so it files its report]' 'observe[read the exact op terminal screen of a job (reasoning context, never evidence)]' 'op-contract[read the contract row dispatch wrote for a job or an op+attempt]' 'op-override[store an additive override of one op for this workflow]' 'peers[the workflow'\''s peer workflows of the same ledger]' 'plan[write the workflow'\''s derived plan into the ledger]' 'provider-backoff[open the provider circuit a persisting rate limit calls for (idempotent)]' 'provider-health[the ledger provider-health row; --recover clears an open circuit (Kernel terminal only)]' 'questions[list the pending worker questions of a workflow, draining its Runs into the ledger first]' 'reconcile[recover a fenced launch, drop a queued job, recover a dead worker or cancel orphan kernel jobs]' 'record-change[the record'\''s OWNER declares its committed change breaking (peers owe ONE follow-up leg) or advisory]' 'record-checks[record independent checks against a filed worker report]' 'redesign[dispatch the owning op with the RCA as its brief (strong reasoning pool)]' 'rename[set a workflow'\''s display name and rename its live Kernel and Op terminal tabs]' 'reply[answer a pending worker question, or route it to the owner with --to-owner]' 'report[a worker files its job report (the durable op to kernel IPC)]' 'retire-ask[close an ask the owner should no longer answer (ask-superseded)]' 'route[resolve and persist the model decision of a job]' 'run-deferred-tests[re-queue the test legs the owner'\''s specs switch deferred (see status testsDeferred)]' 'serve-ask[park an owner ask: Telegram notice first, the answer form served on demand]' 'settle[settle a consumed report: pass, fail or blocked verdict]' 'settle-tail[run the async tail of a settled job (artifact index, evidence, retention)]' 'status[the live status projection of a workflow (frontier, progress, waits)]' 'survey[the read projection a Kernel scans each wake (jobs, inbox, signals, drift)]' 'unit[the work units and their try budgets; only the owner or Supervisor raises one]' 'usage[measured tokens by op, model and Kernel of one workflow, or per workflow]' 'verify-proofs[re-hash every indexed proof file and walk the events digest chain; exit 1 on tampering]' ;;
+      kernel) _values 'verbs' 'archive[archive a workflow that will not finish: drop open jobs, retire asks, close Kernel and Tasks]' 'artifacts[list the indexed proof files of the workflow'\''s jobs, per job (read-only)]' 'autopilot[show or drive a workflow'\''s autopilot: switch it, sweep, bundle, defer to handover, release, extend]' 'consume-report[integrate the report a job filed; the Kernel must consume it before settle]' 'coverage[show every FR, shape and proof case of the workflow'\''s scope as proven, stale or missing]' 'cut-seam[publish a cut seam'\''s interface, release its siblings on a stub, or reconcile a stub sibling]' 'decide[open, list or close an entry of the Kernel decision log (hypothesis, action, metric)]' 'decisions[list, open, claim, resolve or escalate Decision Items; the Kernel reads them first every wake]' 'dispatch[admit a routed job and launch its worker with --spawn; without it print the launch plan]' 'dispatch-ready[route and dispatch queued-ready jobs up to the workflow allowed parallelism]' 'enqueue[enqueue a work-unit job with its op, owned paths, records and retry lineage]' 'estimate[compute the size class and agent count of a slice from runtimes.yaml allocation.slicing]' 'extensions[list the file-based kernel extensions: verbs, status fields, boolean flags, load problems]' 'finish[finish an owner-approved workflow and release its kernel seat]' 'foundation[claim, land or declare a shared foundation (or none) for a workflow]' 'foundations[list the ledger'\''s shared foundations: owner, state, dependents, waits]' 'graph-edit[apply a logged, reversible light edit to the workflow'\''s unit jobs (drop, widen, wire, ...)]' 'hierarchy[project the agent hierarchy (starci/agent-hierarchy@1) of a workflow]' 'inbox[list the workflow'\''s pending inbox items, or acknowledge one with a disposition]' 'incident[raise, resolve or attach typed release conditions to a workflow incident]' 'kernel-ack-rev[project or attest the complete current Kernel READ manifest]' 'kernel-proposal[file a tier-2 shared runtime change proposal for the Supervisor, or list proposals]' 'lifecycle[pause, stop or resume a workflow; only the owner or supervisor resumes or stops]' 'log[append one typed log row to the ledger'\''s logs table]' 'logs[list the workflow'\''s typed log rows, oldest first]' 'messages[drain the workflow Runs into the ledger and list every orchestration message]' 'notify[send a typed notice to one peer workflow or all peers]' 'nudge[wake a running job'\''s worker at its exact terminal so it files its report]' 'observe[read the exact op terminal screen of a job (reasoning context, never evidence)]' 'op-contract[read the contract row dispatch wrote for a job or an op+attempt]' 'op-override[store an additive override of one op for this workflow]' 'peers[the workflow'\''s peer workflows of the same ledger]' 'plan[write the workflow'\''s derived plan into the ledger]' 'provider-backoff[open the provider circuit a persisting rate limit calls for (idempotent)]' 'provider-health[the ledger provider-health row; --recover clears an open circuit (Kernel terminal only)]' 'questions[list the pending worker questions of a workflow, draining its Runs into the ledger first]' 'reconcile[recover a fenced launch, drop a queued job, recover a dead worker or cancel orphan kernel jobs]' 'record-change[the record'\''s OWNER declares its committed change breaking (peers owe ONE follow-up leg) or advisory]' 'record-checks[record independent checks against a filed worker report]' 'redesign[dispatch the owning op with the RCA as its brief (strong reasoning pool)]' 'rename[set a workflow'\''s display name and rename its live Kernel and Op terminal tabs]' 'reply[answer a pending worker question, or route it to the owner with --to-owner]' 'report[a worker files its job report (the durable op to kernel IPC)]' 'retire-ask[close an ask the owner should no longer answer (ask-superseded)]' 'route[resolve and persist the model decision of a job]' 'run-deferred-tests[re-queue the test legs the owner'\''s specs switch deferred (see status testsDeferred)]' 'serve-ask[park an owner ask: Telegram notice first, the answer form served on demand]' 'settle[settle a consumed report: pass, fail or blocked verdict]' 'settle-tail[run the async tail of a settled job (artifact index, evidence, retention)]' 'status[the live status projection of a workflow (frontier, progress, waits)]' 'survey[the read projection a Kernel scans each wake (jobs, inbox, signals, drift)]' 'unit[the work units and their try budgets; only the owner or Supervisor raises one]' 'usage[measured tokens by op, model and Kernel of one workflow, or per workflow]' 'verify-proofs[re-hash every indexed proof file and walk the events digest chain; exit 1 on tampering]' ;;
       lint) _values 'verbs' 'run[lint changed files or the release-scoped whole repository]' ;;
       machine) _values 'verbs' 'decisions[inspect and act on runtime and Supervisor decision items]' 'kernel-watchdog[inspect or repair one running workflow Kernel seat]' 'lessons[inspect and update Supervisor learning records]' 'op-metrics[report operation health metrics across managed ledgers]' 'seam-policy[plan canon cuts or redispatch a blocked canon slice]' 'worktrees[inspect, collect or resume runtime worktrees]' 'worktrees-clean[remove clean lane worktrees already merged into local main]' ;;
       npm) _values 'verbs' 'ci[install a clean lockfile into this worktree under the host lock]' 'install[add exact dependencies from canon pins under the host lock]' ;;
       orca) _values 'verbs' 'terminal-read[read an Orca terminal screen and staged draft]' 'terminal-send[send text or Enter to an Orca terminal]' ;;
-      reconciler) _values 'verbs' 'once[run one reconcile pass of the controllers in memory, shadow unless --apply]' 'restart[stop the reconciler engine and ensure a new leader]' 'start[ensure the reconciler engine has a healthy leader]' 'status[print reconciler leader, queue, mode and violation status]' 'stop[stop the current reconciler engine leader]' 'up[bring the runtime host services and live seats up and print one checklist]' ;;
-      release) _values 'verbs' 'app-installs[verify a scaffolded app against fresh registry installs]' 'check[run the one read-only release readiness gate]' 'clean-test[test published packages from fresh isolated installs]' 'cut[cut the release, the only push of main with its annotated release tag]' 'images[build, run, health-check and tear down the shipped application images]' 'launch-smoke[prove live nested-agent launch paths on an Orca host]' 'proof[build the release proof attached before publish or deploy effects]' 'publish[plan or perform the owner-run package publication sequence]' 'sync-runtime[refresh or check package runtime copies and optionally prepare grammar]' ;;
+      reconciler) _values 'verbs' 'once[run one reconcile pass of the controllers in memory, shadow unless --apply]' 'restart[stop the reconciler engine and ensure a new leader]' 'start[ensure the reconciler engine has a healthy leader]' 'status[print reconciler leader, queue, mode and violation status]' 'stop[stop the current reconciler engine leader]' 'up[bring the host services and seats up, or check them read-only, and print the checklist]' ;;
+      release) _values 'verbs' 'app-installs[verify a scaffolded app against fresh registry installs]' 'check[run the one read-only release readiness gate]' 'clean-test[test published packages from fresh isolated installs]' 'cut[cut the release, the only way the runtime'\''s remote main and a release tag move]' 'env-test[run the runtime spec suite under the release cut'\''s own conditions]' 'images[build, run, health-check and tear down the shipped application images]' 'launch-smoke[prove live nested-agent launch paths on an Orca host]' 'notes[print or write the release notes of a tag, its CHANGELOG section]' 'proof[build the release proof attached before publish or deploy effects]' 'publish[plan or perform the owner-run package publication sequence]' 'sync-runtime[refresh or check package runtime copies and optionally prepare grammar]' ;;
       route) _values 'verbs' 'op[resolve the operation that serves a structured routing request]' ;;
-      runtime) _values 'verbs' 'architecture[check one repository against the runtime architecture rules]' 'benchmark-snapshot[append one model-pool snapshot file under benchmark/snapshots]' 'check[judge the runtime tree — node --check, the runtime HFS check, the retained self-checks]' 'derived-fields[regenerate or check the derived fields of the knowledge pattern files]' 'doctor[run the installed tree'\''s own specs and report drift against the install manifest]' 'gen-catalog[write or check the generated CLI catalog outputs, docs and shell completions]' 'gen-ops[regenerate or check the generated operation registry]' 'housekeeping[inspect or apply the host housekeeping sweeps]' 'install[install the StarCi runtime — fetch the pinned package, then init or update <cwd>/.claude]' 'ledger-hygiene[report orphan ledgers and legacy repository-local ledger stores]' 'link[point the per-user StarCi launcher at a live runtime checkout]' 'machine-db[inspect or maintain the host machine database]' 'owner-claims-audit[audit owner-decision claims and owner-gates in runtime ledgers]' 'readme-blocks[regenerate or check the generated blocks of knowledge/hfs/README.md]' 'status[the runtime'\''s version, tree root and manifest drift — a read-only summary]' 'update[bring an installed .claude tree to this package'\''s payload version]' 'validate[read-only Work record/tree validation — structure, consistency, artifacts, schemas]' 'version[print the runtime package version]' ;;
+      runtime) _values 'verbs' 'architecture[check one repository against the runtime architecture rules]' 'benchmark-snapshot[append one model-pool snapshot file under benchmark/snapshots]' 'check[judge the runtime tree — node --check, the runtime HFS check, the retained self-checks]' 'derived-fields[regenerate or check the derived fields of the knowledge pattern files]' 'doctor[verify installed payload, public entry custody and local runtime capabilities]' 'gen-catalog[write or check the generated CLI catalog outputs, docs and shell completions]' 'gen-ops[regenerate or check the generated operation registry]' 'housekeeping[inspect or apply the host housekeeping sweeps]' 'install[install the StarCi runtime — fetch the pinned package, then init or update <cwd>/.claude]' 'ledger-hygiene[report orphan ledgers]' 'link[point the per-user StarCi launcher at a live runtime checkout]' 'machine-db[inspect or maintain the host machine database]' 'owner-claims-audit[audit owner-decision claims and owner-gates in runtime ledgers]' 'readme-blocks[regenerate or check the generated blocks of knowledge/hfs/README.md]' 'status[the runtime'\''s version, tree root and manifest drift — a read-only summary]' 'update[bring an installed .claude tree to this package'\''s payload version]' 'validate[read-only Work record/tree validation — structure, consistency, artifacts, schemas]' 'version[print the runtime package version]' ;;
       smoke) _values 'verbs' 'scaffold[scaffold and prove one full or lite app in an isolated scratch directory]' ;;
       supabase) _values 'verbs' 'start[start the app'\''s Supabase stack after enforcing its isolated port block]' 'status[show the app'\''s Supabase endpoints and key names without secret values]' 'stop[stop only the app'\''s configured Supabase project]' ;;
-      supervisor) _values 'verbs' 'actions[list, record, or preview the Supervisor'\''s owed-action audit trail]' 'bridge[inspect and govern cross-workflow dependencies and shared ownership]' 'channel[register, inspect, and answer the Supervisor owner-message channel]' 'direct-commits[find runtime main commits that bypassed the exclusive land gate]' 'gate-stability[compare frozen gate behavior against accepted work in live workflows]' 'gc[inspect or collect leftover workers, shells, lanes, temp data, leases, and logs]' 'land[run the in-runtime land gate; external land-to-main.sh remains external]' 'lesson-actions[land, revert, or propose changes from the Supervisor self-learning loop]' 'notify[deliver a durable Supervisor ruling to one workflow Kernel]' 'owed[inspect and acknowledge work that running workflows owe the Supervisor]' 'poll[stream or print a read-only Supervisor digest of workflow progress and blockers]' 'push[run full repository suites and push clean main branches]' 'push-mains[scan and push main for the runtime and configured product repositories]' 'ram-cap[inspect or override RAM-aware workflow dispatch priorities]' 'report[render or send the owner'\''s detailed workflow progress report]' 'start[enable and start the one long-lived Supervisor seat]' 'status[print whether the Supervisor seat is enabled and healthy]' 'stop[disable the Supervisor seat, stop its worker and release it]' 'telegram-bridge[start, run, inspect, or stop the Supervisor Telegram bridge]' 'tell[send a desktop message to the Supervisor or read its recent replies]' 'watchdog[run one reconciler-owned Supervisor seat liveness pass]' 'workers[create, launch, inspect, report, and clean up Supervisor repair workers]' ;;
+      supervisor) _values 'verbs' 'actions[list, record, or preview the Supervisor'\''s owed-action audit trail]' 'bridge[inspect and govern cross-workflow dependencies and shared ownership]' 'channel[register, inspect, and answer the Supervisor owner-message channel]' 'direct-commits[find runtime main commits that bypassed the exclusive land gate]' 'gate-stability[compare explicitly selected current gates against accepted work in live workflows]' 'gc[inspect or collect leftover workers, shells, lanes, temp data, leases, and logs]' 'land[run the in-runtime land gate; it fast-forwards local main and never pushes]' 'lesson-actions[land, revert, or propose changes from the Supervisor self-learning loop]' 'notify[deliver a durable Supervisor ruling to one workflow Kernel]' 'owed[inspect and acknowledge work that running workflows owe the Supervisor]' 'poll[stream or print a read-only Supervisor digest of workflow progress and blockers]' 'push[run full repository suites and push clean main branches]' 'push-mains[scan and push main for the configured product repositories (not the runtime)]' 'ram-cap[inspect or override RAM-aware workflow dispatch priorities]' 'report[render or send the owner'\''s detailed workflow progress report]' 'start[enable and start the one long-lived Supervisor seat]' 'status[print whether the Supervisor seat is enabled and healthy]' 'stop[disable the Supervisor seat, stop its worker and release it]' 'telegram-bridge[start, run, inspect, or stop the Supervisor Telegram bridge]' 'tell[send a desktop message to the Supervisor or read its recent replies]' 'watchdog[run one reconciler-owned Supervisor seat liveness pass]' 'workers[create, launch, inspect, report, and clean up Supervisor repair workers]' ;;
       task) _values 'verbs' 'list[list state, runs, results and actions for registered runtime tasks]' 'register[print or apply one runtime scheduled-task registration]' 'show[show state, runs, result and action for one runtime scheduled task]' ;;
       test) _values 'verbs' 'run[run the specs selected for one local ladder level]' ;;
       typecheck) _values 'verbs' 'run[check changed runtime modules or affected TypeScript projects]' ;;
       uat) _values 'verbs' 'assisted-runner[inspect and run a prepared assisted UAT request]' 'slots[inspect UAT slots or run a command while holding one]' ;;
-      work) _values 'verbs' 'asset-slot[list or check asset slots in Work records]' 'brand[derive or verify the canonical brand Work record]' 'brand-direction[inspect, ask for, or apply owner review of a brand direction]' 'brand-palette[emit a brand palette prompt or check rendered images against it]' 'check-example-work[check the layout, ids, refs and evidence of every example Work tree]' 'compose-direction[place drawn content into its measured page or overlay shell]' 'draw-acceptance[verify that drawn assets are accepted render shapes]' 'draw-dna[compare a rendered drawing with grammar DNA]' 'draw-feedback[build, inspect, check, or classify drawing feedback]' 'draw-gates[run machine and owner gates for a drawn UI record]' 'draw-grammar[resolve the grammar package used by a drawing]' 'draw-layer[verify that drawings are isolated content layers]' 'draw-loop[render, score, inspect, finish, or verify an iterative drawing loop]' 'draw-rationale[verify the rationale bound to a rendered drawing]' 'draw-render[render HTML or a drawing component at declared viewports]' 'draw-review[inspect, ask for, or apply owner review of a drawing]' 'draw-source[validate a drawing source and its fixture bindings]' 'draw-taste[check a rendered drawing against visual taste rules]' 'evidence-binding[prove that every done leaf'\''s evidence still binds to the source it claims]' 'example-critique[derive example critique records from a Work tree]' 'example-derive[derive example catalog artifacts from a Work tree]' 'example-evidence[collect evidence for one example Work record]' 'example-verify[replay and verify evidence for one example Work record]' 'grammar-geometry[emit grammar geometry guidance or check captured geometry]' 'grammar-knowledge[compare or refresh measured grammar knowledge]' 'grammar-proposal[list or check grammar proposals in Work records]' 'grammar-registry-pin[check a frontend grammar dependency against the registry pin]' 'graph[inspect, validate, diff or propose a workflow work graph]' 'hygiene[parse, scope-validate and secret-check Work and stack files before they are committed]' 'layout-tree[scan, capture, plan, lock, or inspect a product layout tree]' 'render-proof[render a proof document for one Work record]' 'shell-conformance[check Work and implementation records against the measured frontend shell]' 'ui-proof-brief[emit a UI proof brief or score a rendered surface]' ;;
+      work) _values 'verbs' 'asset-slot[list or check asset slots in Work records]' 'brand[derive or verify the canonical brand Work record]' 'brand-direction[inspect, ask for, or apply owner review of a brand direction]' 'brand-palette[emit a brand palette prompt or check rendered images against it]' 'check-example-work[check the layout, ids, refs and evidence of every example Work tree]' 'compose-direction[place drawn content into its measured page or overlay shell]' 'draw-acceptance[verify that drawn assets are accepted render shapes]' 'draw-dna[compare a rendered drawing with grammar DNA]' 'draw-feedback[build, inspect, check, or classify drawing feedback]' 'draw-gates[run machine and owner gates for a drawn UI record]' 'draw-grammar[resolve the grammar package used by a drawing]' 'draw-layer[verify that drawings are isolated content layers]' 'draw-loop[render, score, inspect, finish, or verify an iterative drawing loop]' 'draw-rationale[verify the rationale bound to a rendered drawing]' 'draw-render[render HTML or a drawing component at declared viewports]' 'draw-review[inspect, ask for, or apply owner review of a drawing]' 'draw-source[validate a drawing source and its fixture bindings]' 'draw-taste[check a rendered drawing against visual taste rules]' 'evidence-binding[prove that every done leaf'\''s evidence still binds to the source it claims]' 'example-critique[derive example critique records from a Work tree]' 'example-derive[derive example catalog artifacts from a Work tree]' 'example-evidence[collect evidence for one example Work record]' 'example-verify[replay and verify evidence for one example Work record]' 'grammar-geometry[emit grammar geometry guidance or check captured geometry]' 'grammar-knowledge[compare or refresh measured grammar knowledge]' 'grammar-proposal[list or check grammar proposals in Work records]' 'grammar-registry-pin[check a frontend grammar dependency against the registry pin]' 'graph[inspect, validate, diff or propose a workflow work graph]' 'hygiene[parse, scope-validate and secret-check Work and stack files before they are committed]' 'imagegen[generate images headlessly on the imagegen call tier and write them with a receipt]' 'layout-tree[scan, capture, plan, lock, or inspect a product layout tree]' 'render-proof[render a proof document for one Work record]' 'shell-conformance[check Work and implementation records against the measured frontend shell]' 'ui-proof-brief[emit a UI proof brief or score a rendered surface]' ;;
       worker) _values 'verbs' 'close[release a worker, close its terminal and prove its process tree is gone]' 'list[list supervised workers or working-agent counts by worktree lane]' 'read[read a bounded tail of one supervised worker'\''s output]' 'release[release settled Orca worker accounting without claiming full cleanup]' 'show[show one supervised worker and Orca'\''s exact liveness observation]' 'start[start one supervised agent in a registered worktree in an Orca run]' 'stop[stop a supervised worker that Orca still reports as working]' ;;
-      workflow) _values 'verbs' 'assess[cold-scan repositories for goal-definition evidence]' 'bias[normalize a routing bias or extract one from the owner'\''s text]' 'define[define a goal — assess the prompt, plan the op chain, queue it in the ledger inbox]' 'start[ensure the host and optional core maintenance, then claim an approved goal and boot its Kernel]' 'status[the workflow projection — phase, frontier, leases and pending owner asks]' 'stop[stop a workflow — archive it, drop open jobs and retire its asks (the owner stop)]' ;;
+      workflow) _values 'verbs' 'assess[cold-scan repositories for goal-definition evidence]' 'bias[normalize a routing bias or extract one from the owner'\''s text]' 'custody[show a workflow tree against its branch and preserved work; --apply moves it onto them]' 'define[define a goal — assess the prompt, plan the op chain, queue it in the ledger inbox]' 'start[ensure the host, then claim an approved goal and boot its Kernel]' 'status[the workflow projection — phase, frontier, leases and pending owner asks]' 'stop[stop a workflow — archive it, drop open jobs and retire its asks (the owner stop)]' ;;
       completion) _values 'shells' 'bash' 'zsh' 'fish' 'powershell' ;;
       help) return 0 ;;
       explain) _values 'groups' 'app' 'check' 'connect' 'debug' 'docker' 'gate' 'git' 'guard' 'harness' 'kernel' 'lint' 'machine' 'npm' 'orca' 'reconciler' 'release' 'route' 'runtime' 'smoke' 'supabase' 'supervisor' 'task' 'test' 'typecheck' 'uat' 'work' 'worker' 'workflow' ;;
@@ -116,14 +116,9 @@ _starci() {
     'connect:telegram-media:--verdict') _values 'values' 'pass' 'fail' 'blocked'; return 0 ;;
     'connect:telegram-media:--dispatch') return 0 ;;
     'connect:tunnel:--port') return 0 ;;
-    'debug:pass:--dispatch') return 0 ;;
-    'debug:pass:--snapshot') return 0 ;;
-    'debug:pass:--child-timeout') return 0 ;;
-    'debug:pass:--token-window') return 0 ;;
-    'debug:pass:--token-spike') return 0 ;;
-    'debug:pass:--key') return 0 ;;
-    'debug:pass:--lane') return 0 ;;
-    'debug:pass:--reason') return 0 ;;
+    'debug:digest:--repo') return 0 ;;
+    'debug:digest:--workflow') return 0 ;;
+    'debug:digest:--child-timeout') return 0 ;;
     'debug:run:--repo') return 0 ;;
     'debug:run:--since-hours') return 0 ;;
     'debug:run:--child-timeout') return 0 ;;
@@ -150,6 +145,9 @@ _starci() {
     'gate:env-health:--service') return 0 ;;
     'gate:env-health:--url') return 0 ;;
     'gate:hfs-sync:--repo') return 0 ;;
+    'gate:install-sandbox:--tarball') return 0 ;;
+    'gate:install-sandbox:--tools') return 0 ;;
+    'gate:install-sandbox:--out') return 0 ;;
     'gate:read:--root') return 0 ;;
     'gate:read:--touch') return 0 ;;
     'gate:read:--read') return 0 ;;
@@ -164,10 +162,15 @@ _starci() {
     'gate:run:--out') return 0 ;;
     'gate:run:--scope') _values 'values' 'code' 'docs'; return 0 ;;
     'gate:run:--tree') return 0 ;;
+    'gate:runtime-artifact:--pack') return 0 ;;
+    'gate:runtime-artifact:--dir') return 0 ;;
+    'gate:runtime-artifact:--out') return 0 ;;
+    'gate:runtime-artifact:--root') return 0 ;;
     'gate:sonar:--key') return 0 ;;
     'gate:sonar:--name') return 0 ;;
     'gate:sonar:--base') return 0 ;;
     'gate:sonar:--paths') return 0 ;;
+    'gate:sonar:--branch') return 0 ;;
     'gate:sonar:--out') return 0 ;;
     'gate:sonar:--log') return 0 ;;
     'gate:sonar:--token-ref') return 0 ;;
@@ -176,8 +179,6 @@ _starci() {
     'gate:sonar:--declaration') return 0 ;;
     'gate:sonar:--host') return 0 ;;
     'gate:sonar:--stack') return 0 ;;
-    'gate:starcistacks:--admitted-at') return 0 ;;
-    'gate:starcistacks:--op') return 0 ;;
     'gate:test-world:--root') return 0 ;;
     'gate:test-world:--project') _values 'values' 'e2e' 'integration' 'contract'; return 0 ;;
     'gate:test-world:--tests') return 0 ;;
@@ -229,12 +230,6 @@ _starci() {
     'kernel:autopilot:--by') _values 'values' 'supervisor' 'kernel' 'autopilot'; return 0 ;;
     'kernel:consume-report:--repo') return 0 ;;
     'kernel:consume-report:--job') return 0 ;;
-    'kernel:contract-release:--repo') return 0 ;;
-    'kernel:contract-release:--family') return 0 ;;
-    'kernel:contract-release:--workflow') return 0 ;;
-    'kernel:contract-release:--batch') return 0 ;;
-    'kernel:contract-release:--reason') return 0 ;;
-    'kernel:contract-release:--by') _values 'values' 'supervisor' 'owner'; return 0 ;;
     'kernel:coverage:--repo') return 0 ;;
     'kernel:coverage:--workflow') return 0 ;;
     'kernel:cut-seam:--repo') return 0 ;;
@@ -303,8 +298,6 @@ _starci() {
     'kernel:enqueue:--cut-total') return 0 ;;
     'kernel:enqueue:--after') return 0 ;;
     'kernel:enqueue:--foundation') return 0 ;;
-    'kernel:enqueue:--contract-change') return 0 ;;
-    'kernel:enqueue:--follow-up-of') return 0 ;;
     'kernel:enqueue:--new-module') return 0 ;;
     'kernel:enqueue:--retry-of') return 0 ;;
     'kernel:enqueue:--reopen') return 0 ;;
@@ -367,6 +360,14 @@ _starci() {
     'kernel:incident:--detail') return 0 ;;
     'kernel:incident:--op') return 0 ;;
     'kernel:incident:--holds') return 0 ;;
+    'kernel:incident:--cause') return 0 ;;
+    'kernel:incident:--workaround') return 0 ;;
+    'kernel:incident:--no-workaround') return 0 ;;
+    'kernel:incident:--because') return 0 ;;
+    'kernel:incident:--evidence') return 0 ;;
+    'kernel:incident:--resolution') _values 'values' 'fixed' 'workaround' 'not-runtime-fault'; return 0 ;;
+    'kernel:incident:--commit') return 0 ;;
+    'kernel:incident:--route') return 0 ;;
     'kernel:incident:--peer') return 0 ;;
     'kernel:incident:--refs') return 0 ;;
     'kernel:incident:--resolve') return 0 ;;
@@ -383,10 +384,14 @@ _starci() {
     'kernel:incident:--until-incident') return 0 ;;
     'kernel:incident:--until-foundation') return 0 ;;
     'kernel:incident:--until-landed') return 0 ;;
+    'kernel:incident:--until-runtime-has') return 0 ;;
+    'kernel:incident:--until-admission') return 0 ;;
+    'kernel:incident:--until-check') return 0 ;;
     'kernel:kernel-ack-rev:--repo') return 0 ;;
     'kernel:kernel-ack-rev:--workflow') return 0 ;;
     'kernel:kernel-ack-rev:--rev') return 0 ;;
-    'kernel:kernel-ack-rev:--files') return 0 ;;
+    'kernel:kernel-ack-rev:--read-manifest') return 0 ;;
+    'kernel:kernel-ack-rev:--op') return 0 ;;
     'kernel:kernel-proposal:--repo') return 0 ;;
     'kernel:kernel-proposal:--workflow') return 0 ;;
     'kernel:kernel-proposal:--title') return 0 ;;
@@ -572,9 +577,6 @@ _starci() {
     'reconciler:once:--key') return 0 ;;
     'reconciler:up:--wait') return 0 ;;
     'reconciler:up:--set-profile') _values 'values' 'operational' 'observe'; return 0 ;;
-    'reconciler:up:--caller-agent') _values 'values' 'codex' 'claude' 'devin'; return 0 ;;
-    'reconciler:up:--caller-model') return 0 ;;
-    'reconciler:up:--caller-effort') return 0 ;;
     'release:check:--only') return 0 ;;
     'release:clean-test:--changed') return 0 ;;
     'release:clean-test:--base') return 0 ;;
@@ -591,6 +593,9 @@ _starci() {
     'release:launch-smoke:--timeout-ms') return 0 ;;
     'release:launch-smoke:--out') return 0 ;;
     'release:launch-smoke:--as') _values 'values' 'supervisor' 'worker' 'kernel' 'op' 'opFe' 'opFail' 'critic'; return 0 ;;
+    'release:notes:--tag') return 0 ;;
+    'release:notes:--repo') return 0 ;;
+    'release:notes:--out') return 0 ;;
     'release:proof:--repo') return 0 ;;
     'release:proof:--base') return 0 ;;
     'release:proof:--main') return 0 ;;
@@ -863,6 +868,13 @@ _starci() {
     'work:graph:--reason') return 0 ;;
     'work:graph:--slice') return 0 ;;
     'work:hygiene:--repo') return 0 ;;
+    'work:imagegen:--prompt') return 0 ;;
+    'work:imagegen:--out') return 0 ;;
+    'work:imagegen:--reference') return 0 ;;
+    'work:imagegen:--count') return 0 ;;
+    'work:imagegen:--size') return 0 ;;
+    'work:imagegen:--name') return 0 ;;
+    'work:imagegen:--stage') return 0 ;;
     'work:layout-tree:--work') return 0 ;;
     'work:layout-tree:--app-dir') return 0 ;;
     'work:layout-tree:--app') return 0 ;;
@@ -885,8 +897,6 @@ _starci() {
     'work:layout-tree:--tolerance') return 0 ;;
     'work:render-proof:--work') return 0 ;;
     'work:render-proof:--record') return 0 ;;
-    'work:shell-conformance:--admitted-at') return 0 ;;
-    'work:shell-conformance:--op') return 0 ;;
     'work:ui-proof-brief:--surface') return 0 ;;
     'work:ui-proof-brief:--repo') return 0 ;;
     'work:ui-proof-brief:--family') return 0 ;;
@@ -909,6 +919,8 @@ _starci() {
     'worker:stop:--dispatch') return 0 ;;
     'workflow:assess:--repo') return 0 ;;
     'workflow:bias:--normalize') return 0 ;;
+    'workflow:custody:--repo') return 0 ;;
+    'workflow:custody:--workflow') return 0 ;;
     'workflow:define:--repo') return 0 ;;
     'workflow:define:--project') return 0 ;;
     'workflow:define:--text') return 0 ;;
@@ -925,9 +937,6 @@ _starci() {
     'workflow:start:--repo') return 0 ;;
     'workflow:start:--goal') return 0 ;;
     'workflow:start:--agent') return 0 ;;
-    'workflow:start:--caller-agent') _values 'values' 'codex' 'claude' 'devin'; return 0 ;;
-    'workflow:start:--caller-model') return 0 ;;
-    'workflow:start:--caller-effort') return 0 ;;
     'workflow:start:--launched-by') _values 'values' 'watchdog' 'supervisor'; return 0 ;;
     'workflow:status:--repo') return 0 ;;
     'workflow:status:--workflow') return 0 ;;
@@ -954,7 +963,7 @@ _starci() {
     'connect:telegram') _values 'flags' '--discover-chat' '--ledger' '--repo' '--workflow' '--dispatch' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'connect:telegram-media') _values 'flags' '--ledger' '--repo' '--workflow' '--job' '--attempt' '--op' '--verdict' '--dispatch' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'connect:tunnel') _values 'flags' '--port' '--fast' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'debug:pass') _values 'flags' '--dispatch' '--snapshot' '--child-timeout' '--token-window' '--token-spike' '--key' '--lane' '--reason' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'debug:digest') _values 'flags' '--repo' '--workflow' '--child-timeout' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'debug:run') _values 'flags' '--repo' '--since-hours' '--child-timeout' '--token-window' '--token-spike' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'docker:build') _values 'flags' '--tag' '--no-cache' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'docker:down') _values 'flags' '--env' '--volumes' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -964,12 +973,15 @@ _starci() {
     'gate:custody-exec') _values 'flags' '--get' '--keys' '--input-type' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:env-health') _values 'flags' '--repo' '--env' '--paths' '--restart' '--probe-timeout-ms' '--ready-timeout-ms' '--service' '--url' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:hfs-sync') _values 'flags' '--repo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'gate:install-sandbox') _values 'flags' '--tarball' '--keep' '--docker' '--tools' '--out' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:read') _values 'flags' '--root' '--touch' '--read' '--knowledge' '--out' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:reference-conventions') _values 'flags' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:repo-presentation') _values 'flags' '--root' '--runtime' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:run') _values 'flags' '--root' '--base' '--main' '--changed' '--tests' '--out' '--scope' '--tree' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'gate:sonar') _values 'flags' '--key' '--name' '--with-token' '--wait' '--base' '--paths' '--project-gate' '--out' '--blob' '--log' '--token-ref' '--no-ensure' '--timeout' '--wait-timeout' '--isolate' '--keep-slice-project' '--declaration' '--host' '--stack' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'gate:starcistacks') _values 'flags' '--new' '--admitted-at' '--op' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'gate:runtime-artifact') _values 'flags' '--pack' '--dir' '--out' '--root' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'gate:runtime-coverage') _values 'flags' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'gate:sonar') _values 'flags' '--key' '--name' '--with-token' '--wait' '--base' '--paths' '--project-gate' '--branch' '--out' '--blob' '--log' '--token-ref' '--no-ensure' '--timeout' '--wait-timeout' '--isolate' '--keep-slice-project' '--declaration' '--host' '--stack' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'gate:starcistacks') _values 'flags' '--new' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:test-world') _values 'flags' '--root' '--project' '--tests' '--out' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'gate:unit') _values 'flags' '--root' '--out' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'git:backup') _values 'flags' '--remote' '--branches' '--dry-run' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -989,14 +1001,13 @@ _starci() {
     'kernel:artifacts') _values 'flags' '--repo' '--workflow' '--job' '--kind' '--subkind' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:autopilot') _values 'flags' '--repo' '--workflow' '--sweep' '--bundle' '--checklist' '--lang' '--set' '--reason' '--defer-to-handover' '--op' '--class' '--detail' '--fields' '--stub' '--job' '--release' '--defer-leg' '--reopen' '--handover-answer' '--note' '--extend-budget' '--by' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:consume-report') _values 'flags' '--repo' '--job' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'kernel:contract-release') _values 'flags' '--repo' '--family' '--workflow' '--batch' '--reason' '--by' '--dry-run' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:coverage') _values 'flags' '--repo' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:cut-seam') _values 'flags' '--repo' '--publish-interface' '--release' '--reconcile' '--job' '--files' '--summary' '--workflow' '--op' '--cut-id' '--reason' '--exit-code' '--command' '--evidence' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:decide') _values 'flags' '--repo' '--workflow' '--hypothesis' '--action-key' '--metric' '--command' '--close' '--result' '--observed' '--list' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:decisions') _values 'flags' '--repo' '--workflow' '--list' '--all' '--next' '--open' '--kind' '--summary' '--by' '--entity-type' '--entity-id' '--decider' '--due-ms' '--key' '--evidence-file' '--evidence' '--evidence-json' '--allowed-verbs' '--options-json' '--severity' '--item' '--claim' '--resolve' '--verb' '--decision' '--note' '--escalate' '--to' '--reason' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:dispatch') _values 'flags' '--repo' '--job' '--spawn' '--model' '--worktree' '--lease-ttl' '--env-gate' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:dispatch-ready') _values 'flags' '--repo' '--workflow' '--max' '--dry-run' '--foreground' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'kernel:enqueue') _values 'flags' '--repo' '--workflow' '--op' '--paths' '--records' '--params' '--repository' '--cut-id' '--cut-ordinal' '--cut-total' '--after' '--foundation' '--contract-change' '--follow-up-of' '--new-module' '--retry-of' '--reopen' '--derived-from' '--canon-scan' '--resolves' '--what' '--title' '--risk' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'kernel:enqueue') _values 'flags' '--repo' '--workflow' '--op' '--paths' '--records' '--params' '--repository' '--cut-id' '--cut-ordinal' '--cut-total' '--after' '--foundation' '--new-module' '--retry-of' '--reopen' '--derived-from' '--canon-scan' '--resolves' '--what' '--title' '--risk' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:estimate') _values 'flags' '--repo' '--files' '--assertions' '--components' '--records' '--paths' '--gear' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:extensions') _values 'flags' '--repo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:finish') _values 'flags' '--repo' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -1005,8 +1016,8 @@ _starci() {
     'kernel:graph-edit') _values 'flags' '--repo' '--workflow' '--edit' '--decision' '--jobs' '--job' '--add-paths' '--paths' '--op' '--before' '--after' '--parts' '--set' '--cut-id' '--from-scan' '--path-prefix' '--exclude' '--reason' '--undo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:hierarchy') _values 'flags' '--repo' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:inbox') _values 'flags' '--repo' '--workflow' '--ack' '--disposition' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'kernel:incident') _values 'flags' '--repo' '--workflow' '--kind' '--detail' '--op' '--holds' '--peer' '--refs' '--resolve' '--by' '--owner-answer' '--introduced-by' '--introducer' '--fix' '--attach' '--until-record' '--until-job' '--until-message' '--until-commit' '--until-incident' '--until-foundation' '--until-landed' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'kernel:kernel-ack-rev') _values 'flags' '--repo' '--workflow' '--rev' '--files' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'kernel:incident') _values 'flags' '--repo' '--workflow' '--kind' '--detail' '--op' '--holds' '--cause' '--workaround' '--no-workaround' '--because' '--evidence' '--resolution' '--commit' '--route' '--peer' '--refs' '--resolve' '--by' '--owner-answer' '--introduced-by' '--introducer' '--fix' '--attach' '--until-record' '--until-job' '--until-message' '--until-commit' '--until-incident' '--until-foundation' '--until-landed' '--until-runtime-has' '--until-admission' '--until-check' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'kernel:kernel-ack-rev') _values 'flags' '--repo' '--workflow' '--rev' '--plan' '--read-manifest' '--op' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:kernel-proposal') _values 'flags' '--repo' '--workflow' '--title' '--evidence' '--patch' '--files' '--decision' '--list' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:lifecycle') _values 'flags' '--repo' '--workflow' '--pause' '--stop' '--resume' '--by' '--reason' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:log') _values 'flags' '--repo' '--workflow' '--job' '--kind' '--msg' '--data' '--refs' '--level' '--node' '--actor' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -1022,7 +1033,7 @@ _starci() {
     'kernel:provider-backoff') _values 'flags' '--repo' '--provider' '--open-circuit' '--kind' '--reason' '--by' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:provider-health') _values 'flags' '--repo' '--provider' '--recover' '--reason' '--probe' '--quota-probe' '--force' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:questions') _values 'flags' '--repo' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'kernel:reconcile') _values 'flags' '--repo' '--job' '--drop' '--reason' '--dead-worker' '--settle-failed' '--no-salvage' '--release-worker' '--orphan-kernel-jobs' '--workflow' '--dry-run' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'kernel:reconcile') _values 'flags' '--repo' '--job' '--drop' '--reason' '--dead-worker' '--settle-failed' '--no-salvage' '--release-worker' '--route-failure' '--orphan-kernel-jobs' '--workflow' '--dry-run' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:record-change') _values 'flags' '--repo' '--workflow' '--record' '--reach' '--reason' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:record-checks') _values 'flags' '--repo' '--job' '--checks' '--checks-file' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'kernel:redesign') _values 'flags' '--repo' '--workflow' '--op' '--paths' '--decision' '--brief' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -1057,13 +1068,15 @@ _starci() {
     'reconciler:start') _values 'flags' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'reconciler:status') _values 'flags' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'reconciler:stop') _values 'flags' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'reconciler:up') _values 'flags' '--check' '--wait' '--no-build' '--retire-stale-ledgers' '--set-profile' '--caller-agent' '--caller-model' '--caller-effort' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'reconciler:up') _values 'flags' '--check' '--services' '--brief' '--wait' '--no-build' '--retire-stale-ledgers' '--set-profile' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'release:app-installs') _values 'flags' '--keep' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'release:check') _values 'flags' '--final' '--only' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'release:clean-test') _values 'flags' '--changed' '--base' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'release:cut') _values 'flags' '--repo' '--remote' '--branch' '--tag' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'release:cut') _values 'flags' '--repo' '--remote' '--branch' '--plan' '--tag' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'release:env-test') _values 'flags' '--lane' '--reuse-installs' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'release:images') _values 'flags' '--app' '--sides' '--only' '--wait-seconds' '--remove-images' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'release:launch-smoke') _values 'flags' '--app-repo' '--entry' '--timeout-ms' '--out' '--as' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'release:notes') _values 'flags' '--tag' '--repo' '--out' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'release:proof') _values 'flags' '--repo' '--base' '--main' '--out' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'release:publish') _values 'flags' '--publish' '--runtime-package' '--npm-user' '--poll-minutes' '--pre-land-ref' '--expect-sha' '--examples' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'release:sync-runtime') _values 'flags' '--check' '--prepare-grammar' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -1096,7 +1109,7 @@ _starci() {
     'supervisor:direct-commits') _values 'flags' '--repo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'supervisor:gate-stability') _values 'flags' '--family' '--tree' '--base' '--head' '--ledger' '--gate' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'supervisor:gc') _values 'flags' '--dry-run' '--apply' '--only' '--plan' '--holder' '--trigger' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'supervisor:land') _values 'flags' '--job' '--commit' '--specs' '--reason' '--full-by-push-git' '--lane' '--no-push' '--notify' '--status' '--wait-ms' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'supervisor:land') _values 'flags' '--job' '--commit' '--specs' '--reason' '--full-by-push-git' '--lane' '--notify' '--status' '--wait-ms' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'supervisor:lesson-actions') _values 'flags' '--signature' '--commit' '--lane' '--specs' '--wrongly-blocked' '--reason' '--wait-ms' '--experiment' '--apply' '--title' '--evidence' '--options' '--recommendation' '--send' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'supervisor:notify') _values 'flags' '--repo' '--workflow' '--text' '--text-file' '--item' '--entity' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'supervisor:owed') _values 'flags' '--repo' '--workflow' '--all' '--item' '--commits' '--reason' '--force' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -1148,9 +1161,10 @@ _starci() {
     'work:grammar-registry-pin') _values 'flags' '--repo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'work:graph') _values 'flags' '--repo' '--workflow' '--version' '--file' '--from' '--to' '--job' '--reason' '--slice' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'work:hygiene') _values 'flags' '--repo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'work:imagegen') _values 'flags' '--prompt' '--out' '--reference' '--count' '--size' '--name' '--stage' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'work:layout-tree') _values 'flags' '--work' '--app-dir' '--write' '--app' '--repo-root' '--node' '--breakpoint' '--theme' '--file' '--url' '--provenance' '--destination' '--route' '--locale' '--from' '--rect' '--active-nav' '--design' '--files' '--key' '--tolerance' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'work:render-proof') _values 'flags' '--work' '--record' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'work:shell-conformance') _values 'flags' '--admitted-at' '--op' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'work:shell-conformance') _values 'flags' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'work:ui-proof-brief') _values 'flags' '--surface' '--repo' '--family' '--elements' '--score' '--viewport' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'worker:close') _values 'flags' '--dispatch' '--stop-first' '--retry-release' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'worker:list') _values 'flags' '--run' '--by-lane' '--active' '--worktree' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
@@ -1161,8 +1175,9 @@ _starci() {
     'worker:stop') _values 'flags' '--dispatch' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'workflow:assess') _values 'flags' '--repo' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'workflow:bias') _values 'flags' '--normalize' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'workflow:custody') _values 'flags' '--repo' '--workflow' '--apply' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'workflow:define') _values 'flags' '--repo' '--project' '--text' '--title' '--display-name' '--params' '--plan' '--revise' '--reason' '--approve-revision' '--defined-by' '--approved-by' '--bridge-id' '--routing-bias' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
-    'workflow:start') _values 'flags' '--repo' '--goal' '--agent' '--caller-agent' '--caller-model' '--caller-effort' '--launched-by' '--plan' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
+    'workflow:start') _values 'flags' '--repo' '--goal' '--agent' '--launched-by' '--plan' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'workflow:status') _values 'flags' '--repo' '--workflow' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     'workflow:stop') _values 'flags' '--repo' '--workflow' '--reason' '--by' '--json' '--cwd' '--quiet' '--help' '--edition' ;;
     esac