@starci/cli 1.0.1 → 1.1.0

package/completions/starci.fish

@@ -44,7 +44,7 @@ complete -c starci -n '__starci_needs_group' -a 'worker' -d 'start, inspect and
 complete -c starci -n '__starci_needs_group' -a 'workflow' -d 'workflow lifecycle — define a goal, start its kernel, status, stop'
 complete -c starci -n '__starci_needs_group' -a 'help' -d 'show top-level help'
 complete -c starci -n '__starci_needs_group' -a 'completion' -d 'print a shell completion script'
-complete -c starci -n '__starci_needs_group' -a 'explain' -d 'show a verb contract and the spellings it replaces'
+complete -c starci -n '__starci_needs_group' -a 'explain' -d 'show a verb contract'
 complete -c starci -n '__starci_needs_verb app' -a 'add' -d 'add one canonical backend capability and register its patterns'
 complete -c starci -n '__starci_needs_verb app' -a 'check' -d 'judge the app tree, managed output, contracts, formatting and architecture'
 complete -c starci -n '__starci_needs_verb app' -a 'emit' -d 'emit backend GraphQL, operation and event contract snapshots'
@@ -62,7 +62,7 @@ complete -c starci -n '__starci_needs_verb connect' -a 'ask-gateway' -d 'operate
 complete -c starci -n '__starci_needs_verb connect' -a 'telegram' -d 'deliver and maintain owner Telegram notifications'
 complete -c starci -n '__starci_needs_verb connect' -a 'telegram-media' -d 'deliver settled operation media through Telegram'
 complete -c starci -n '__starci_needs_verb connect' -a 'tunnel' -d 'operate the Cloudflare owner-ask tunnel'
-complete -c starci -n '__starci_needs_verb debug' -a 'pass' -d 'inspect core health and maintain diagnostic custody in the machine ledger'
+complete -c starci -n '__starci_needs_verb debug' -a 'digest' -d 'print the read-only debug digest, with its problems ordered by blocked work'
 complete -c starci -n '__starci_needs_verb debug' -a 'run' -d 'run one allowlisted read-only runtime inspector'
 complete -c starci -n '__starci_needs_verb docker' -a 'build' -d 'build one declared application image from the application root'
 complete -c starci -n '__starci_needs_verb docker' -a 'down' -d 'remove only the labelled resources owned by one application stack'
@@ -72,10 +72,13 @@ complete -c starci -n '__starci_needs_verb gate' -a 'canon-scan' -d 'measure can
 complete -c starci -n '__starci_needs_verb gate' -a 'custody-exec' -d 'decrypt one custody document for a command or a bounded read'
 complete -c starci -n '__starci_needs_verb gate' -a 'env-health' -d 'inspect and manage the served environment used by verification'
 complete -c starci -n '__starci_needs_verb gate' -a 'hfs-sync' -d 'check an app'\''s generated files and custody trees for drift'
+complete -c starci -n '__starci_needs_verb gate' -a 'install-sandbox' -d 'prove the packed runtime tarball installs and runs in an empty home'
 complete -c starci -n '__starci_needs_verb gate' -a 'read' -d 'build the recorded READ digest for an operation'
 complete -c starci -n '__starci_needs_verb gate' -a 'reference-conventions' -d 'probe the installed backend reference rules of a reference root'
 complete -c starci -n '__starci_needs_verb gate' -a 'repo-presentation' -d 'check repository presentation rules for a product or runtime tree'
 complete -c starci -n '__starci_needs_verb gate' -a 'run' -d 'run the measured product or document gate'
+complete -c starci -n '__starci_needs_verb gate' -a 'runtime-artifact' -d 'describe the packed runtime archive and refuse forbidden material in it'
+complete -c starci -n '__starci_needs_verb gate' -a 'runtime-coverage' -d 'run the runtime spec suite under Node coverage and write coverage/lcov.info'
 complete -c starci -n '__starci_needs_verb gate' -a 'sonar' -d 'inspect, provision and run the local Sonar quality gate'
 complete -c starci -n '__starci_needs_verb gate' -a 'starcistacks' -d 'check a repository'\''s stack declaration and custody layout'
 complete -c starci -n '__starci_needs_verb gate' -a 'test-world' -d 'run and judge one managed test-world project'
@@ -164,13 +167,15 @@ complete -c starci -n '__starci_needs_verb reconciler' -a 'restart' -d 'stop the
 complete -c starci -n '__starci_needs_verb reconciler' -a 'start' -d 'ensure the reconciler engine has a healthy leader'
 complete -c starci -n '__starci_needs_verb reconciler' -a 'status' -d 'print reconciler leader, queue, mode and violation status'
 complete -c starci -n '__starci_needs_verb reconciler' -a 'stop' -d 'stop the current reconciler engine leader'
-complete -c starci -n '__starci_needs_verb reconciler' -a 'up' -d 'bring the runtime host services and live seats up and print one checklist'
+complete -c starci -n '__starci_needs_verb reconciler' -a 'up' -d 'bring the host services and seats up, or check them read-only, and print the checklist'
 complete -c starci -n '__starci_needs_verb release' -a 'app-installs' -d 'verify a scaffolded app against fresh registry installs'
 complete -c starci -n '__starci_needs_verb release' -a 'check' -d 'run the one read-only release readiness gate'
 complete -c starci -n '__starci_needs_verb release' -a 'clean-test' -d 'test published packages from fresh isolated installs'
-complete -c starci -n '__starci_needs_verb release' -a 'cut' -d 'cut the release, the only push of main with its annotated release tag'
+complete -c starci -n '__starci_needs_verb release' -a 'cut' -d 'cut the release, the only way the runtime'\''s remote main and a release tag move'
+complete -c starci -n '__starci_needs_verb release' -a 'env-test' -d 'run the runtime spec suite under the release cut'\''s own conditions'
 complete -c starci -n '__starci_needs_verb release' -a 'images' -d 'build, run, health-check and tear down the shipped application images'
 complete -c starci -n '__starci_needs_verb release' -a 'launch-smoke' -d 'prove live nested-agent launch paths on an Orca host'
+complete -c starci -n '__starci_needs_verb release' -a 'notes' -d 'print or write the release notes of a tag, its CHANGELOG section'
 complete -c starci -n '__starci_needs_verb release' -a 'proof' -d 'build the release proof attached before publish or deploy effects'
 complete -c starci -n '__starci_needs_verb release' -a 'publish' -d 'plan or perform the owner-run package publication sequence'
 complete -c starci -n '__starci_needs_verb release' -a 'sync-runtime' -d 'refresh or check package runtime copies and optionally prepare grammar'
@@ -184,7 +189,7 @@ complete -c starci -n '__starci_needs_verb runtime' -a 'gen-catalog' -d 'write o
 complete -c starci -n '__starci_needs_verb runtime' -a 'gen-ops' -d 'regenerate or check the generated operation registry'
 complete -c starci -n '__starci_needs_verb runtime' -a 'housekeeping' -d 'inspect or apply the host housekeeping sweeps'
 complete -c starci -n '__starci_needs_verb runtime' -a 'install' -d 'install the StarCi runtime — fetch the pinned package, then init or update <cwd>/.claude'
-complete -c starci -n '__starci_needs_verb runtime' -a 'ledger-hygiene' -d 'report orphan ledgers and legacy repository-local ledger stores'
+complete -c starci -n '__starci_needs_verb runtime' -a 'ledger-hygiene' -d 'report orphan ledgers'
 complete -c starci -n '__starci_needs_verb runtime' -a 'link' -d 'point the per-user StarCi launcher at a live runtime checkout'
 complete -c starci -n '__starci_needs_verb runtime' -a 'machine-db' -d 'inspect or maintain the host machine database'
 complete -c starci -n '__starci_needs_verb runtime' -a 'owner-claims-audit' -d 'audit owner-decision claims and owner-gates in runtime ledgers'
@@ -203,13 +208,13 @@ complete -c starci -n '__starci_needs_verb supervisor' -a 'channel' -d 'register
 complete -c starci -n '__starci_needs_verb supervisor' -a 'direct-commits' -d 'find runtime main commits that bypassed the exclusive land gate'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'gate-stability' -d 'compare explicitly selected current gates against accepted work in live workflows'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'gc' -d 'inspect or collect leftover workers, shells, lanes, temp data, leases, and logs'
-complete -c starci -n '__starci_needs_verb supervisor' -a 'land' -d 'run the in-runtime land gate; external land-to-main.sh remains external'
+complete -c starci -n '__starci_needs_verb supervisor' -a 'land' -d 'run the in-runtime land gate; it fast-forwards local main and never pushes'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'lesson-actions' -d 'land, revert, or propose changes from the Supervisor self-learning loop'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'notify' -d 'deliver a durable Supervisor ruling to one workflow Kernel'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'owed' -d 'inspect and acknowledge work that running workflows owe the Supervisor'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'poll' -d 'stream or print a read-only Supervisor digest of workflow progress and blockers'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'push' -d 'run full repository suites and push clean main branches'
-complete -c starci -n '__starci_needs_verb supervisor' -a 'push-mains' -d 'scan and push main for the runtime and configured product repositories'
+complete -c starci -n '__starci_needs_verb supervisor' -a 'push-mains' -d 'scan and push main for the configured product repositories (not the runtime)'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'ram-cap' -d 'inspect or override RAM-aware workflow dispatch priorities'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'report' -d 'render or send the owner'\''s detailed workflow progress report'
 complete -c starci -n '__starci_needs_verb supervisor' -a 'start' -d 'enable and start the one long-lived Supervisor seat'
@@ -255,6 +260,7 @@ complete -c starci -n '__starci_needs_verb work' -a 'grammar-proposal' -d 'list
 complete -c starci -n '__starci_needs_verb work' -a 'grammar-registry-pin' -d 'check a frontend grammar dependency against the registry pin'
 complete -c starci -n '__starci_needs_verb work' -a 'graph' -d 'inspect, validate, diff or propose a workflow work graph'
 complete -c starci -n '__starci_needs_verb work' -a 'hygiene' -d 'parse, scope-validate and secret-check Work and stack files before they are committed'
+complete -c starci -n '__starci_needs_verb work' -a 'imagegen' -d 'generate images headlessly on the imagegen call tier and write them with a receipt'
 complete -c starci -n '__starci_needs_verb work' -a 'layout-tree' -d 'scan, capture, plan, lock, or inspect a product layout tree'
 complete -c starci -n '__starci_needs_verb work' -a 'render-proof' -d 'render a proof document for one Work record'
 complete -c starci -n '__starci_needs_verb work' -a 'shell-conformance' -d 'check Work and implementation records against the measured frontend shell'
@@ -268,8 +274,9 @@ complete -c starci -n '__starci_needs_verb worker' -a 'start' -d 'start one supe
 complete -c starci -n '__starci_needs_verb worker' -a 'stop' -d 'stop a supervised worker that Orca still reports as working'
 complete -c starci -n '__starci_needs_verb workflow' -a 'assess' -d 'cold-scan repositories for goal-definition evidence'
 complete -c starci -n '__starci_needs_verb workflow' -a 'bias' -d 'normalize a routing bias or extract one from the owner'\''s text'
+complete -c starci -n '__starci_needs_verb workflow' -a 'custody' -d 'show a workflow tree against its branch and preserved work; --apply moves it onto them'
 complete -c starci -n '__starci_needs_verb workflow' -a 'define' -d 'define a goal — assess the prompt, plan the op chain, queue it in the ledger inbox'
-complete -c starci -n '__starci_needs_verb workflow' -a 'start' -d 'ensure the host and optional core maintenance, then claim an approved goal and boot its Kernel'
+complete -c starci -n '__starci_needs_verb workflow' -a 'start' -d 'ensure the host, then claim an approved goal and boot its Kernel'
 complete -c starci -n '__starci_needs_verb workflow' -a 'status' -d 'the workflow projection — phase, frontier, leases and pending owner asks'
 complete -c starci -n '__starci_needs_verb workflow' -a 'stop' -d 'stop a workflow — archive it, drop open jobs and retire its asks (the owner stop)'
 complete -c starci -n '__starci_needs_verb completion' -a 'bash'
@@ -352,14 +359,9 @@ complete -c starci -n '__starci_using_command connect telegram-media' -l verdict
 complete -c starci -n '__starci_using_command connect telegram-media' -l dispatch -r -d 'dispatch id of the job attempt'
 complete -c starci -n '__starci_using_command connect tunnel' -l port -r -d 'gateway port the tunnel forwards to (default: connectors.gateway.port)'
 complete -c starci -n '__starci_using_command connect tunnel' -l fast -d 'status only - skip the process-table scan for extra tunnel managers'
-complete -c starci -n '__starci_using_command debug pass' -l dispatch -r -d 'immutable native maintenance Dispatch that fences a worker pass'
-complete -c starci -n '__starci_using_command debug pass' -l snapshot -r -d 'saved core-watch snapshot for a pass'
-complete -c starci -n '__starci_using_command debug pass' -l child-timeout -r -d 'child call timeout in seconds'
-complete -c starci -n '__starci_using_command debug pass' -l token-window -r -d 'token-spike window in minutes'
-complete -c starci -n '__starci_using_command debug pass' -l token-spike -r -d 'token count that raises an alert'
-complete -c starci -n '__starci_using_command debug pass' -l key -r -d 'debug alert key'
-complete -c starci -n '__starci_using_command debug pass' -l lane -r -d 'lane fixing the alert'
-complete -c starci -n '__starci_using_command debug pass' -l reason -r -d 'reason no core fix is owed'
+complete -c starci -n '__starci_using_command debug digest' -l repo -r -d 'ledger-owner repository path to include (default every active ledger)'
+complete -c starci -n '__starci_using_command debug digest' -l workflow -r -d 'workflow id to include (default every running workflow)'
+complete -c starci -n '__starci_using_command debug digest' -l child-timeout -r -d 'timeout in seconds of each read verb the digest calls'
 complete -c starci -n '__starci_using_command debug run' -l repo -r -d 'product ledger owner path for model-scorecard'
 complete -c starci -n '__starci_using_command debug run' -l since-hours -r -d 'positive model-scorecard window in hours'
 complete -c starci -n '__starci_using_command debug run' -l child-timeout -r -d 'core-watch child call timeout in seconds'
@@ -394,6 +396,11 @@ complete -c starci -n '__starci_using_command gate env-health' -l ready-timeout-
 complete -c starci -n '__starci_using_command gate env-health' -l service -r -d 'service name to register and start'
 complete -c starci -n '__starci_using_command gate env-health' -l url -r -d 'health probe URL for the service'
 complete -c starci -n '__starci_using_command gate hfs-sync' -l repo -r -d 'product repository to check'
+complete -c starci -n '__starci_using_command gate install-sandbox' -l tarball -r -d 'the npm pack tarball of the root package'
+complete -c starci -n '__starci_using_command gate install-sandbox' -l keep -d 'keep the sandbox directory after the run'
+complete -c starci -n '__starci_using_command gate install-sandbox' -l docker -d 'run the proof inside a throwaway Linux container'
+complete -c starci -n '__starci_using_command gate install-sandbox' -l tools -r -d 'directory holding a Linux age-keygen for the container run'
+complete -c starci -n '__starci_using_command gate install-sandbox' -l out -r -d 'write the JSON summary to this file'
 complete -c starci -n '__starci_using_command gate read' -l root -r -d 'application root'
 complete -c starci -n '__starci_using_command gate read' -l touch -r -d 'files the operation will touch'
 complete -c starci -n '__starci_using_command gate read' -l read -r -d 'additional application files read'
@@ -409,6 +416,10 @@ complete -c starci -n '__starci_using_command gate run' -l tests -r -d 'test pat
 complete -c starci -n '__starci_using_command gate run' -l out -r -d 'write the gate report to this file'
 complete -c starci -n '__starci_using_command gate run' -l scope -r -a 'code docs' -d 'gate scope'
 complete -c starci -n '__starci_using_command gate run' -l tree -r -d 'work tree read by the document profile'
+complete -c starci -n '__starci_using_command gate runtime-artifact' -l pack -r -d 'the npm pack --json output file'
+complete -c starci -n '__starci_using_command gate runtime-artifact' -l dir -r -d 'directory holding the tarball'
+complete -c starci -n '__starci_using_command gate runtime-artifact' -l out -r -d 'directory that receives the metadata, inventory and checksum files'
+complete -c starci -n '__starci_using_command gate runtime-artifact' -l root -r -d 'runtime root to read the package identity from'
 complete -c starci -n '__starci_using_command gate sonar' -l key -r -d 'Sonar project key'
 complete -c starci -n '__starci_using_command gate sonar' -l name -r -d 'Sonar project display name'
 complete -c starci -n '__starci_using_command gate sonar' -l with-token -d 'ensure the project token is in custody'
@@ -416,6 +427,7 @@ complete -c starci -n '__starci_using_command gate sonar' -l wait -d 'wait for t
 complete -c starci -n '__starci_using_command gate sonar' -l base -r -d 'base revision for changed-line analysis'
 complete -c starci -n '__starci_using_command gate sonar' -l paths -r -d 'repository paths in the slice'
 complete -c starci -n '__starci_using_command gate sonar' -l project-gate -d 'judge the whole-project quality gate'
+complete -c starci -n '__starci_using_command gate sonar' -l branch -r -d 'read the dashboard of this branch instead of the main branch'
 complete -c starci -n '__starci_using_command gate sonar' -l out -r -d 'write the summary to this file'
 complete -c starci -n '__starci_using_command gate sonar' -l blob -d 'store the summary as a blob'
 complete -c starci -n '__starci_using_command gate sonar' -l log -r -d 'write scanner output to this file'
@@ -632,6 +644,14 @@ complete -c starci -n '__starci_using_command kernel incident' -l kind -r -d 'in
 complete -c starci -n '__starci_using_command kernel incident' -l detail -r -d 'what happened (raise; optional on resolve and attach)'
 complete -c starci -n '__starci_using_command kernel incident' -l op -r -d 'op the incident concerns'
 complete -c starci -n '__starci_using_command kernel incident' -l holds -r -d 'comma list of op or job ids the incident holds'
+complete -c starci -n '__starci_using_command kernel incident' -l cause -r -d 'the cause class of a supervisor-gate (op-incident-policy gateCauses): no-eligible-agent, plan-divergence, runtime-defect, retry-cap or budget'
+complete -c starci -n '__starci_using_command kernel incident' -l workaround -r -d 'a supervisor-gate: the workaround of its cause class that you tried, and what came of it'
+complete -c starci -n '__starci_using_command kernel incident' -l no-workaround -r -d 'a supervisor-gate: the typed reason from the cause class'\''s list that there is no workaround (chain-spent, answer-not-reversible, no-route-avoids-defect, ...)'
+complete -c starci -n '__starci_using_command kernel incident' -l because -r -d 'a supervisor-gate: the evidence behind --no-workaround'
+complete -c starci -n '__starci_using_command kernel incident' -l evidence -r -d 'a supervisor-gate raised again for a cause the Supervisor answered not-runtime-fault: the new evidence'
+complete -c starci -n '__starci_using_command kernel incident' -l resolution -r -a 'fixed workaround not-runtime-fault' -d 'the Supervisor'\''s typed answer to a supervisor-gate with --resolve --by supervisor'
+complete -c starci -n '__starci_using_command kernel incident' -l commit -r -d '--resolution fixed: the runtime fix commit; the gate resolves when the live runtime contains it'
+complete -c starci -n '__starci_using_command kernel incident' -l route -r -d '--resolution workaround: the pool the Kernel dispatches the held job with'
 complete -c starci -n '__starci_using_command kernel incident' -l peer -r -d 'workflow waited on (--kind peer-wait)'
 complete -c starci -n '__starci_using_command kernel incident' -l refs -r -d 'comma list of refs of the wait (--kind peer-wait)'
 complete -c starci -n '__starci_using_command kernel incident' -l resolve -r -d 'id of the incident to resolve'
@@ -648,6 +668,9 @@ complete -c starci -n '__starci_using_command kernel incident' -l until-commit -
 complete -c starci -n '__starci_using_command kernel incident' -l until-incident -r -d 'release when the incident resolves: <id>[:resolved]'
 complete -c starci -n '__starci_using_command kernel incident' -l until-foundation -r -d 'release when the foundation lands: <name>'
 complete -c starci -n '__starci_using_command kernel incident' -l until-landed -r -d 'release when the workflow lands its product: <workflowId>@<repository>'
+complete -c starci -n '__starci_using_command kernel incident' -l until-runtime-has -r -d 'release when the live runtime contains the fix commit: <commit>'
+complete -c starci -n '__starci_using_command kernel incident' -l until-admission -r -d 'release when no provider receipt of the job'\''s attempt scope holds a slot: <jobId>'
+complete -c starci -n '__starci_using_command kernel incident' -l until-check -r -d 'release when the Kernel-recorded run of the check is green: <jobId>:<checkName>'
 complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l repo -r -d 'managed repository whose .starciwork ledger the command uses'
 complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l workflow -r -d 'workflow id'
 complete -c starci -n '__starci_using_command kernel kernel-ack-rev' -l rev -r -d 'exact current Git SHA or installed required-byte revision returned by --plan'
@@ -744,6 +767,7 @@ complete -c starci -n '__starci_using_command kernel reconcile' -l dead-worker -
 complete -c starci -n '__starci_using_command kernel reconcile' -l settle-failed -d 'with --dead-worker, settle the job failed instead of requeueing it'
 complete -c starci -n '__starci_using_command kernel reconcile' -l no-salvage -d 'with --dead-worker, skip filing a report the dead worker wrote but never filed'
 complete -c starci -n '__starci_using_command kernel reconcile' -l release-worker -d 'release the worker of a job whose settle is held, keeping the job for its settle'
+complete -c starci -n '__starci_using_command kernel reconcile' -l route-failure -d 'take the next step of a failed or blocked job that nothing follows (the Job controller runs it)'
 complete -c starci -n '__starci_using_command kernel reconcile' -l orphan-kernel-jobs -d 'cancel the kernel jobs of finished or archived workflows'
 complete -c starci -n '__starci_using_command kernel reconcile' -l workflow -r -d 'with --orphan-kernel-jobs, limit to one workflow'
 complete -c starci -n '__starci_using_command kernel reconcile' -l dry-run -d 'with --orphan-kernel-jobs, list what would be cancelled without writing'
@@ -879,13 +903,12 @@ complete -c starci -n '__starci_using_command reconciler once' -l controller -r
 complete -c starci -n '__starci_using_command reconciler once' -l key -r -d 'reconcile only this key'
 complete -c starci -n '__starci_using_command reconciler once' -l apply -d 'take the lead and apply the actions instead of planning them; refused while another leader is live'
 complete -c starci -n '__starci_using_command reconciler up' -l check -d 'run one read-only checklist pass'
+complete -c starci -n '__starci_using_command reconciler up' -l services -d 'heal only the no-quota host services (launcher shim, the three Windows tasks, UI build, engine, harness UI and tunnel, ask gateway and tunnel) and never launch an agent seat'
+complete -c starci -n '__starci_using_command reconciler up' -l brief -d 'print the compact status (one line per row that is not green, or one all-green line) instead of the full checklist'
 complete -c starci -n '__starci_using_command reconciler up' -l wait -r -d 'seconds to wait for the checklist to become green'
 complete -c starci -n '__starci_using_command reconciler up' -l no-build -d 'do not rebuild a stale harness UI'
 complete -c starci -n '__starci_using_command reconciler up' -l retire-stale-ledgers -d 'retire registered ledgers that point at temporary test paths'
 complete -c starci -n '__starci_using_command reconciler up' -l set-profile -r -a 'operational observe' -d 'update the reconciler profile before bringing services up'
-complete -c starci -n '__starci_using_command reconciler up' -l caller-agent -r -a 'codex claude devin' -d 'declared ingress agent for optional core maintenance; does not change the Supervisor pin'
-complete -c starci -n '__starci_using_command reconciler up' -l caller-model -r -d 'declared concrete ingress model for optional core maintenance; actual worker attestation is required'
-complete -c starci -n '__starci_using_command reconciler up' -l caller-effort -r -d 'declared ingress effort for optional core maintenance'
 complete -c starci -n '__starci_using_command release app-installs' -l keep -d 'keep and print the temporary application path'
 complete -c starci -n '__starci_using_command release check' -l final -d 'include final identity and main-branch proofs'
 complete -c starci -n '__starci_using_command release check' -l only -r -d 'comma-separated proof ids to run'
@@ -894,7 +917,10 @@ complete -c starci -n '__starci_using_command release clean-test' -l base -r -d
 complete -c starci -n '__starci_using_command release cut' -l repo -r -d 'the repository to release (default is the current directory)'
 complete -c starci -n '__starci_using_command release cut' -l remote -r -d 'the remote to push to (default origin)'
 complete -c starci -n '__starci_using_command release cut' -l branch -r -d 'the release branch (default main)'
+complete -c starci -n '__starci_using_command release cut' -l plan -d 'report what the cut would run and require, and stop; it runs nothing'
 complete -c starci -n '__starci_using_command release cut' -l tag -r -d 'the release tag v* to push (default is the one new annotated v* tag on HEAD)'
+complete -c starci -n '__starci_using_command release env-test' -l lane -d 'a lane clone is no Orca terminal: leave out STARCI_REQUIRE_ORCA_LIVE and the host check, keep everything else of the cut'
+complete -c starci -n '__starci_using_command release env-test' -l reuse-installs -d 'keep an example app whose node_modules exists instead of a fresh npm ci'
 complete -c starci -n '__starci_using_command release images' -l app -r -d 'app root to prove (default is the current directory)'
 complete -c starci -n '__starci_using_command release images' -l sides -r -d 'selected sides, each be or fe (default both)'
 complete -c starci -n '__starci_using_command release images' -l only -r -d 'selected application names'
@@ -905,6 +931,9 @@ complete -c starci -n '__starci_using_command release launch-smoke' -l entry -r
 complete -c starci -n '__starci_using_command release launch-smoke' -l timeout-ms -r -d 'smoke deadline in milliseconds'
 complete -c starci -n '__starci_using_command release launch-smoke' -l out -r -d 'write the smoke result to this file'
 complete -c starci -n '__starci_using_command release launch-smoke' -l as -r -a 'supervisor worker kernel op opFe opFail critic' -d 'internal smoke role for stage or mark'
+complete -c starci -n '__starci_using_command release notes' -l tag -r -d 'the release tag v<version> whose CHANGELOG section is read'
+complete -c starci -n '__starci_using_command release notes' -l repo -r -d 'the repository holding CHANGELOG.md (default is the current directory)'
+complete -c starci -n '__starci_using_command release notes' -l out -r -d 'write the notes to this file instead of printing them'
 complete -c starci -n '__starci_using_command release proof' -l repo -r -d 'released repository'
 complete -c starci -n '__starci_using_command release proof' -l base -r -d 'first commit of the release range'
 complete -c starci -n '__starci_using_command release proof' -l main -r -d 'main reference used by the merge guard'
@@ -1027,7 +1056,6 @@ complete -c starci -n '__starci_using_command supervisor land' -l specs -r -d 's
 complete -c starci -n '__starci_using_command supervisor land' -l reason -r -d 'reason required when no spec applies'
 complete -c starci -n '__starci_using_command supervisor land' -l full-by-push-git -d 'authorize the full suite from the push flow'
 complete -c starci -n '__starci_using_command supervisor land' -l lane -r -d 'source lane name'
-complete -c starci -n '__starci_using_command supervisor land' -l no-push -d 'leave landed main unpushed'
 complete -c starci -n '__starci_using_command supervisor land' -l notify -d 'file the land outcome in the Supervisor inbox'
 complete -c starci -n '__starci_using_command supervisor land' -l status -d 'inspect the land queue without landing'
 complete -c starci -n '__starci_using_command supervisor land' -l wait-ms -r -d 'maximum land-queue wait in milliseconds'
@@ -1247,6 +1275,13 @@ complete -c starci -n '__starci_using_command work graph' -l job -r -d 'op job i
 complete -c starci -n '__starci_using_command work graph' -l reason -r -d 'why the graph changes; propose needs it'
 complete -c starci -n '__starci_using_command work graph' -l slice -r -d 'slice id a cutting job changes'
 complete -c starci -n '__starci_using_command work hygiene' -l repo -r -d 'the product repository (default is the current directory)'
+complete -c starci -n '__starci_using_command work imagegen' -l prompt -r -d 'file holding the image brief, sent verbatim'
+complete -c starci -n '__starci_using_command work imagegen' -l out -r -d 'output directory inside the op'\''s worktree (a record'\''s assets directory)'
+complete -c starci -n '__starci_using_command work imagegen' -l reference -r -d 'reference image (png, jpg or webp); repeatable'
+complete -c starci -n '__starci_using_command work imagegen' -l count -r -d 'number of images, 1 to the call'\''s maxImages (default 1)'
+complete -c starci -n '__starci_using_command work imagegen' -l size -r -d 'requested size WxH, a request the tool may not honour (the receipt records the real size)'
+complete -c starci -n '__starci_using_command work imagegen' -l name -r -d 'file stem of the images (default: the prompt file'\''s name); an existing target is refused'
+complete -c starci -n '__starci_using_command work imagegen' -l stage -r -d 'label of the receipt entries (default final)'
 complete -c starci -n '__starci_using_command work layout-tree' -l work -r -d 'the .starciwork root that holds the shell record'
 complete -c starci -n '__starci_using_command work layout-tree' -l app-dir -r -d 'frontend app directory to scan; repeatable'
 complete -c starci -n '__starci_using_command work layout-tree' -l write -d 'write the record; without it the command only reports'
@@ -1295,7 +1330,10 @@ complete -c starci -n '__starci_using_command worker start' -l task-title -r -d
 complete -c starci -n '__starci_using_command worker start' -l run -r -d 'Orca Run id (default is the Run bound to this terminal)'
 complete -c starci -n '__starci_using_command worker stop' -l dispatch -r -d 'authoritative Orca Dispatch id'
 complete -c starci -n '__starci_using_command workflow assess' -l repo -r -d 'repository to scan; repeat for several (without --json at least one is required)'
-complete -c starci -n '__starci_using_command workflow bias' -l normalize -r -d 'owner bias JSON: prefer/avoid, role-scoped concrete require and explicit attempt reserveOverride; invalid hard constraints are refused'
+complete -c starci -n '__starci_using_command workflow bias' -l normalize -r -d 'owner bias JSON: prefer/avoid/only member lists (a pool, an agent or agent/model), roles and an explicit attempt reserveOverride; an only list that avoid empties is refused'
+complete -c starci -n '__starci_using_command workflow custody' -l repo -r -d 'repository whose registered project ledger holds the workflow (default: the working directory)'
+complete -c starci -n '__starci_using_command workflow custody' -l workflow -r -d 'the workflow_id'
+complete -c starci -n '__starci_using_command workflow custody' -l apply -d 'move a tree that is behind its branch onto it (its own work preserved), or make a missing one at the branch; refused while an op is in flight'
 complete -c starci -n '__starci_using_command workflow define' -l repo -r -d 'repository whose .starciwork ledger owns the goal (default: the working directory)'
 complete -c starci -n '__starci_using_command workflow define' -l project -r -d 'registered project name; resolves the work.json binding (mutually exclusive with --repo)'
 complete -c starci -n '__starci_using_command workflow define' -l text -r -d 'the owner prompt the goal is defined from'
@@ -1313,9 +1351,6 @@ complete -c starci -n '__starci_using_command workflow define' -l routing-bias -
 complete -c starci -n '__starci_using_command workflow start' -l repo -r -d 'repository whose registered project ledger holds the goal queue (default: the working directory)'
 complete -c starci -n '__starci_using_command workflow start' -l goal -r -d 'explicit workflow_id to boot instead of the oldest queued'
 complete -c starci -n '__starci_using_command workflow start' -l agent -r -d 'override the routed kernel agent'
-complete -c starci -n '__starci_using_command workflow start' -l caller-agent -r -a 'codex claude devin' -d 'declared ingress agent for core maintenance; separate from the Kernel agent override'
-complete -c starci -n '__starci_using_command workflow start' -l caller-model -r -d 'declared concrete ingress model for core maintenance; the actual worker must attest it'
-complete -c starci -n '__starci_using_command workflow start' -l caller-effort -r -d 'declared ingress effort for core maintenance; does not override Kernel effort'
 complete -c starci -n '__starci_using_command workflow start' -l launched-by -r -a 'watchdog supervisor' -d 'provenance of an automated start'
 complete -c starci -n '__starci_using_command workflow start' -l plan -d 'resolve and report the launch without starting anything'
 complete -c starci -n '__starci_using_command workflow status' -l repo -r -d 'repository whose .starciwork ledger holds the workflow (default: the working directory)'

package/completions/starci.ps1

@@ -6,9 +6,9 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'app' = @('add','check','emit','explain','hygiene','lint','new','scaffold','secret','stack','sync','upgrade')
         'check' = @('run')
         'connect' = @('ask-gateway','telegram','telegram-media','tunnel')
-        'debug' = @('pass','run')
+        'debug' = @('digest','run')
         'docker' = @('build','down','ps','up')
-        'gate' = @('canon-scan','custody-exec','env-health','hfs-sync','read','reference-conventions','repo-presentation','run','sonar','starcistacks','test-world','unit')
+        'gate' = @('canon-scan','custody-exec','env-health','hfs-sync','install-sandbox','read','reference-conventions','repo-presentation','run','runtime-artifact','runtime-coverage','sonar','starcistacks','test-world','unit')
         'git' = @('backup','commit','land','sync')
         'guard' = @('command','footprint-scan','raw','seat-tools','verify-commit')
         'harness' = @('open','start','status','stop')
@@ -18,7 +18,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'npm' = @('ci','install')
         'orca' = @('terminal-read','terminal-send')
         'reconciler' = @('once','restart','start','status','stop','up')
-        'release' = @('app-installs','check','clean-test','cut','images','launch-smoke','proof','publish','sync-runtime')
+        'release' = @('app-installs','check','clean-test','cut','env-test','images','launch-smoke','notes','proof','publish','sync-runtime')
         'route' = @('op')
         'runtime' = @('architecture','benchmark-snapshot','check','derived-fields','doctor','gen-catalog','gen-ops','housekeeping','install','ledger-hygiene','link','machine-db','owner-claims-audit','readme-blocks','status','update','validate','version')
         'smoke' = @('scaffold')
@@ -28,9 +28,9 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'test' = @('run')
         'typecheck' = @('run')
         'uat' = @('assisted-runner','slots')
-        'work' = @('asset-slot','brand','brand-direction','brand-palette','check-example-work','compose-direction','draw-acceptance','draw-dna','draw-feedback','draw-gates','draw-grammar','draw-layer','draw-loop','draw-rationale','draw-render','draw-review','draw-source','draw-taste','evidence-binding','example-critique','example-derive','example-evidence','example-verify','grammar-geometry','grammar-knowledge','grammar-proposal','grammar-registry-pin','graph','hygiene','layout-tree','render-proof','shell-conformance','ui-proof-brief')
+        'work' = @('asset-slot','brand','brand-direction','brand-palette','check-example-work','compose-direction','draw-acceptance','draw-dna','draw-feedback','draw-gates','draw-grammar','draw-layer','draw-loop','draw-rationale','draw-render','draw-review','draw-source','draw-taste','evidence-binding','example-critique','example-derive','example-evidence','example-verify','grammar-geometry','grammar-knowledge','grammar-proposal','grammar-registry-pin','graph','hygiene','imagegen','layout-tree','render-proof','shell-conformance','ui-proof-brief')
         'worker' = @('close','list','read','release','show','start','stop')
-        'workflow' = @('assess','bias','define','start','status','stop')
+        'workflow' = @('assess','bias','custody','define','start','status','stop')
         'completion' = @('bash','zsh','fish','powershell')
         'help' = @()
         'explain' = @('app','check','connect','debug','docker','gate','git','guard','harness','kernel','lint','machine','npm','orca','reconciler','release','route','runtime','smoke','supabase','supervisor','task','test','typecheck','uat','work','worker','workflow')
@@ -53,7 +53,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'connect telegram' = @('--discover-chat','--ledger','--repo','--workflow','--dispatch','--json','--cwd','--quiet','--help','--edition')
         'connect telegram-media' = @('--ledger','--repo','--workflow','--job','--attempt','--op','--verdict','--dispatch','--json','--cwd','--quiet','--help','--edition')
         'connect tunnel' = @('--port','--fast','--json','--cwd','--quiet','--help','--edition')
-        'debug pass' = @('--dispatch','--snapshot','--child-timeout','--token-window','--token-spike','--key','--lane','--reason','--json','--cwd','--quiet','--help','--edition')
+        'debug digest' = @('--repo','--workflow','--child-timeout','--json','--cwd','--quiet','--help','--edition')
         'debug run' = @('--repo','--since-hours','--child-timeout','--token-window','--token-spike','--json','--cwd','--quiet','--help','--edition')
         'docker build' = @('--tag','--no-cache','--json','--cwd','--quiet','--help','--edition')
         'docker down' = @('--env','--volumes','--json','--cwd','--quiet','--help','--edition')
@@ -63,11 +63,14 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'gate custody-exec' = @('--get','--keys','--input-type','--json','--cwd','--quiet','--help','--edition')
         'gate env-health' = @('--repo','--env','--paths','--restart','--probe-timeout-ms','--ready-timeout-ms','--service','--url','--json','--cwd','--quiet','--help','--edition')
         'gate hfs-sync' = @('--repo','--json','--cwd','--quiet','--help','--edition')
+        'gate install-sandbox' = @('--tarball','--keep','--docker','--tools','--out','--json','--cwd','--quiet','--help','--edition')
         'gate read' = @('--root','--touch','--read','--knowledge','--out','--json','--cwd','--quiet','--help','--edition')
         'gate reference-conventions' = @('--json','--cwd','--quiet','--help','--edition')
         'gate repo-presentation' = @('--root','--runtime','--json','--cwd','--quiet','--help','--edition')
         'gate run' = @('--root','--base','--main','--changed','--tests','--out','--scope','--tree','--json','--cwd','--quiet','--help','--edition')
-        'gate sonar' = @('--key','--name','--with-token','--wait','--base','--paths','--project-gate','--out','--blob','--log','--token-ref','--no-ensure','--timeout','--wait-timeout','--isolate','--keep-slice-project','--declaration','--host','--stack','--json','--cwd','--quiet','--help','--edition')
+        'gate runtime-artifact' = @('--pack','--dir','--out','--root','--json','--cwd','--quiet','--help','--edition')
+        'gate runtime-coverage' = @('--json','--cwd','--quiet','--help','--edition')
+        'gate sonar' = @('--key','--name','--with-token','--wait','--base','--paths','--project-gate','--branch','--out','--blob','--log','--token-ref','--no-ensure','--timeout','--wait-timeout','--isolate','--keep-slice-project','--declaration','--host','--stack','--json','--cwd','--quiet','--help','--edition')
         'gate starcistacks' = @('--new','--json','--cwd','--quiet','--help','--edition')
         'gate test-world' = @('--root','--project','--tests','--out','--json','--cwd','--quiet','--help','--edition')
         'gate unit' = @('--root','--out','--json','--cwd','--quiet','--help','--edition')
@@ -103,7 +106,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel graph-edit' = @('--repo','--workflow','--edit','--decision','--jobs','--job','--add-paths','--paths','--op','--before','--after','--parts','--set','--cut-id','--from-scan','--path-prefix','--exclude','--reason','--undo','--json','--cwd','--quiet','--help','--edition')
         'kernel hierarchy' = @('--repo','--workflow','--json','--cwd','--quiet','--help','--edition')
         'kernel inbox' = @('--repo','--workflow','--ack','--disposition','--json','--cwd','--quiet','--help','--edition')
-        'kernel incident' = @('--repo','--workflow','--kind','--detail','--op','--holds','--peer','--refs','--resolve','--by','--owner-answer','--introduced-by','--introducer','--fix','--attach','--until-record','--until-job','--until-message','--until-commit','--until-incident','--until-foundation','--until-landed','--json','--cwd','--quiet','--help','--edition')
+        'kernel incident' = @('--repo','--workflow','--kind','--detail','--op','--holds','--cause','--workaround','--no-workaround','--because','--evidence','--resolution','--commit','--route','--peer','--refs','--resolve','--by','--owner-answer','--introduced-by','--introducer','--fix','--attach','--until-record','--until-job','--until-message','--until-commit','--until-incident','--until-foundation','--until-landed','--until-runtime-has','--until-admission','--until-check','--json','--cwd','--quiet','--help','--edition')
         'kernel kernel-ack-rev' = @('--repo','--workflow','--rev','--plan','--read-manifest','--op','--json','--cwd','--quiet','--help','--edition')
         'kernel kernel-proposal' = @('--repo','--workflow','--title','--evidence','--patch','--files','--decision','--list','--json','--cwd','--quiet','--help','--edition')
         'kernel lifecycle' = @('--repo','--workflow','--pause','--stop','--resume','--by','--reason','--json','--cwd','--quiet','--help','--edition')
@@ -120,7 +123,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel provider-backoff' = @('--repo','--provider','--open-circuit','--kind','--reason','--by','--json','--cwd','--quiet','--help','--edition')
         'kernel provider-health' = @('--repo','--provider','--recover','--reason','--probe','--quota-probe','--force','--workflow','--json','--cwd','--quiet','--help','--edition')
         'kernel questions' = @('--repo','--workflow','--json','--cwd','--quiet','--help','--edition')
-        'kernel reconcile' = @('--repo','--job','--drop','--reason','--dead-worker','--settle-failed','--no-salvage','--release-worker','--orphan-kernel-jobs','--workflow','--dry-run','--json','--cwd','--quiet','--help','--edition')
+        'kernel reconcile' = @('--repo','--job','--drop','--reason','--dead-worker','--settle-failed','--no-salvage','--release-worker','--route-failure','--orphan-kernel-jobs','--workflow','--dry-run','--json','--cwd','--quiet','--help','--edition')
         'kernel record-change' = @('--repo','--workflow','--record','--reach','--reason','--json','--cwd','--quiet','--help','--edition')
         'kernel record-checks' = @('--repo','--job','--checks','--checks-file','--json','--cwd','--quiet','--help','--edition')
         'kernel redesign' = @('--repo','--workflow','--op','--paths','--decision','--brief','--json','--cwd','--quiet','--help','--edition')
@@ -155,13 +158,15 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'reconciler start' = @('--json','--cwd','--quiet','--help','--edition')
         'reconciler status' = @('--json','--cwd','--quiet','--help','--edition')
         'reconciler stop' = @('--json','--cwd','--quiet','--help','--edition')
-        'reconciler up' = @('--check','--wait','--no-build','--retire-stale-ledgers','--set-profile','--caller-agent','--caller-model','--caller-effort','--json','--cwd','--quiet','--help','--edition')
+        'reconciler up' = @('--check','--services','--brief','--wait','--no-build','--retire-stale-ledgers','--set-profile','--json','--cwd','--quiet','--help','--edition')
         'release app-installs' = @('--keep','--json','--cwd','--quiet','--help','--edition')
         'release check' = @('--final','--only','--json','--cwd','--quiet','--help','--edition')
         'release clean-test' = @('--changed','--base','--json','--cwd','--quiet','--help','--edition')
-        'release cut' = @('--repo','--remote','--branch','--tag','--json','--cwd','--quiet','--help','--edition')
+        'release cut' = @('--repo','--remote','--branch','--plan','--tag','--json','--cwd','--quiet','--help','--edition')
+        'release env-test' = @('--lane','--reuse-installs','--json','--cwd','--quiet','--help','--edition')
         'release images' = @('--app','--sides','--only','--wait-seconds','--remove-images','--json','--cwd','--quiet','--help','--edition')
         'release launch-smoke' = @('--app-repo','--entry','--timeout-ms','--out','--as','--json','--cwd','--quiet','--help','--edition')
+        'release notes' = @('--tag','--repo','--out','--json','--cwd','--quiet','--help','--edition')
         'release proof' = @('--repo','--base','--main','--out','--json','--cwd','--quiet','--help','--edition')
         'release publish' = @('--publish','--runtime-package','--npm-user','--poll-minutes','--pre-land-ref','--expect-sha','--examples','--json','--cwd','--quiet','--help','--edition')
         'release sync-runtime' = @('--check','--prepare-grammar','--json','--cwd','--quiet','--help','--edition')
@@ -194,7 +199,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'supervisor direct-commits' = @('--repo','--json','--cwd','--quiet','--help','--edition')
         'supervisor gate-stability' = @('--family','--tree','--base','--head','--ledger','--gate','--json','--cwd','--quiet','--help','--edition')
         'supervisor gc' = @('--dry-run','--apply','--only','--plan','--holder','--trigger','--json','--cwd','--quiet','--help','--edition')
-        'supervisor land' = @('--job','--commit','--specs','--reason','--full-by-push-git','--lane','--no-push','--notify','--status','--wait-ms','--json','--cwd','--quiet','--help','--edition')
+        'supervisor land' = @('--job','--commit','--specs','--reason','--full-by-push-git','--lane','--notify','--status','--wait-ms','--json','--cwd','--quiet','--help','--edition')
         'supervisor lesson-actions' = @('--signature','--commit','--lane','--specs','--wrongly-blocked','--reason','--wait-ms','--experiment','--apply','--title','--evidence','--options','--recommendation','--send','--json','--cwd','--quiet','--help','--edition')
         'supervisor notify' = @('--repo','--workflow','--text','--text-file','--item','--entity','--json','--cwd','--quiet','--help','--edition')
         'supervisor owed' = @('--repo','--workflow','--all','--item','--commits','--reason','--force','--json','--cwd','--quiet','--help','--edition')
@@ -246,6 +251,7 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'work grammar-registry-pin' = @('--repo','--json','--cwd','--quiet','--help','--edition')
         'work graph' = @('--repo','--workflow','--version','--file','--from','--to','--job','--reason','--slice','--json','--cwd','--quiet','--help','--edition')
         'work hygiene' = @('--repo','--json','--cwd','--quiet','--help','--edition')
+        'work imagegen' = @('--prompt','--out','--reference','--count','--size','--name','--stage','--json','--cwd','--quiet','--help','--edition')
         'work layout-tree' = @('--work','--app-dir','--write','--app','--repo-root','--node','--breakpoint','--theme','--file','--url','--provenance','--destination','--route','--locale','--from','--rect','--active-nav','--design','--files','--key','--tolerance','--json','--cwd','--quiet','--help','--edition')
         'work render-proof' = @('--work','--record','--json','--cwd','--quiet','--help','--edition')
         'work shell-conformance' = @('--json','--cwd','--quiet','--help','--edition')
@@ -259,8 +265,9 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'worker stop' = @('--dispatch','--json','--cwd','--quiet','--help','--edition')
         'workflow assess' = @('--repo','--json','--cwd','--quiet','--help','--edition')
         'workflow bias' = @('--normalize','--json','--cwd','--quiet','--help','--edition')
+        'workflow custody' = @('--repo','--workflow','--apply','--json','--cwd','--quiet','--help','--edition')
         'workflow define' = @('--repo','--project','--text','--title','--display-name','--params','--plan','--revise','--reason','--approve-revision','--defined-by','--approved-by','--bridge-id','--routing-bias','--json','--cwd','--quiet','--help','--edition')
-        'workflow start' = @('--repo','--goal','--agent','--caller-agent','--caller-model','--caller-effort','--launched-by','--plan','--json','--cwd','--quiet','--help','--edition')
+        'workflow start' = @('--repo','--goal','--agent','--launched-by','--plan','--json','--cwd','--quiet','--help','--edition')
         'workflow status' = @('--repo','--workflow','--json','--cwd','--quiet','--help','--edition')
         'workflow stop' = @('--repo','--workflow','--reason','--by','--json','--cwd','--quiet','--help','--edition')
     }
@@ -306,14 +313,9 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'connect telegram-media --verdict' = @('pass','fail','blocked')
         'connect telegram-media --dispatch' = @()
         'connect tunnel --port' = @()
-        'debug pass --dispatch' = @()
-        'debug pass --snapshot' = @()
-        'debug pass --child-timeout' = @()
-        'debug pass --token-window' = @()
-        'debug pass --token-spike' = @()
-        'debug pass --key' = @()
-        'debug pass --lane' = @()
-        'debug pass --reason' = @()
+        'debug digest --repo' = @()
+        'debug digest --workflow' = @()
+        'debug digest --child-timeout' = @()
         'debug run --repo' = @()
         'debug run --since-hours' = @()
         'debug run --child-timeout' = @()
@@ -340,6 +342,9 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'gate env-health --service' = @()
         'gate env-health --url' = @()
         'gate hfs-sync --repo' = @()
+        'gate install-sandbox --tarball' = @()
+        'gate install-sandbox --tools' = @()
+        'gate install-sandbox --out' = @()
         'gate read --root' = @()
         'gate read --touch' = @()
         'gate read --read' = @()
@@ -354,10 +359,15 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'gate run --out' = @()
         'gate run --scope' = @('code','docs')
         'gate run --tree' = @()
+        'gate runtime-artifact --pack' = @()
+        'gate runtime-artifact --dir' = @()
+        'gate runtime-artifact --out' = @()
+        'gate runtime-artifact --root' = @()
         'gate sonar --key' = @()
         'gate sonar --name' = @()
         'gate sonar --base' = @()
         'gate sonar --paths' = @()
+        'gate sonar --branch' = @()
         'gate sonar --out' = @()
         'gate sonar --log' = @()
         'gate sonar --token-ref' = @()
@@ -547,6 +557,14 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel incident --detail' = @()
         'kernel incident --op' = @()
         'kernel incident --holds' = @()
+        'kernel incident --cause' = @()
+        'kernel incident --workaround' = @()
+        'kernel incident --no-workaround' = @()
+        'kernel incident --because' = @()
+        'kernel incident --evidence' = @()
+        'kernel incident --resolution' = @('fixed','workaround','not-runtime-fault')
+        'kernel incident --commit' = @()
+        'kernel incident --route' = @()
         'kernel incident --peer' = @()
         'kernel incident --refs' = @()
         'kernel incident --resolve' = @()
@@ -563,6 +581,9 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'kernel incident --until-incident' = @()
         'kernel incident --until-foundation' = @()
         'kernel incident --until-landed' = @()
+        'kernel incident --until-runtime-has' = @()
+        'kernel incident --until-admission' = @()
+        'kernel incident --until-check' = @()
         'kernel kernel-ack-rev --repo' = @()
         'kernel kernel-ack-rev --workflow' = @()
         'kernel kernel-ack-rev --rev' = @()
@@ -753,9 +774,6 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'reconciler once --key' = @()
         'reconciler up --wait' = @()
         'reconciler up --set-profile' = @('operational','observe')
-        'reconciler up --caller-agent' = @('codex','claude','devin')
-        'reconciler up --caller-model' = @()
-        'reconciler up --caller-effort' = @()
         'release check --only' = @()
         'release clean-test --changed' = @()
         'release clean-test --base' = @()
@@ -772,6 +790,9 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'release launch-smoke --timeout-ms' = @()
         'release launch-smoke --out' = @()
         'release launch-smoke --as' = @('supervisor','worker','kernel','op','opFe','opFail','critic')
+        'release notes --tag' = @()
+        'release notes --repo' = @()
+        'release notes --out' = @()
         'release proof --repo' = @()
         'release proof --base' = @()
         'release proof --main' = @()
@@ -1044,6 +1065,13 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'work graph --reason' = @()
         'work graph --slice' = @()
         'work hygiene --repo' = @()
+        'work imagegen --prompt' = @()
+        'work imagegen --out' = @()
+        'work imagegen --reference' = @()
+        'work imagegen --count' = @()
+        'work imagegen --size' = @()
+        'work imagegen --name' = @()
+        'work imagegen --stage' = @()
         'work layout-tree --work' = @()
         'work layout-tree --app-dir' = @()
         'work layout-tree --app' = @()
@@ -1088,6 +1116,8 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'worker stop --dispatch' = @()
         'workflow assess --repo' = @()
         'workflow bias --normalize' = @()
+        'workflow custody --repo' = @()
+        'workflow custody --workflow' = @()
         'workflow define --repo' = @()
         'workflow define --project' = @()
         'workflow define --text' = @()
@@ -1104,9 +1134,6 @@ Register-ArgumentCompleter -Native -CommandName starci -ScriptBlock {
         'workflow start --repo' = @()
         'workflow start --goal' = @()
         'workflow start --agent' = @()
-        'workflow start --caller-agent' = @('codex','claude','devin')
-        'workflow start --caller-model' = @()
-        'workflow start --caller-effort' = @()
         'workflow start --launched-by' = @('watchdog','supervisor')
         'workflow status --repo' = @()
         'workflow status --workflow' = @()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/cli",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "The single catalog-driven command line for StarCi apps and runtimes.",
   "type": "module",
   "license": "MIT",
@@ -12,7 +12,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@starci/hfs": "4.0.10"
+    "@starci/hfs": "4.1.0"
   },
   "scripts": {
     "test": "node --test src/*.spec.mjs"