@starci/cli 1.1.0 → 1.2.0

package/src/catalog.generated.mjs

@@ -1,7 +1,7 @@
 // GENERATED by scripts/cli/gen-catalog.mjs — do not edit
 export const CATALOG = {
   "schema": "starci/cli-catalog@1",
-  "hash": "9a38df90fe9551b2abc6dc5877b67a8cc877a95655d5caf83a90469def18d7e2",
+  "hash": "ac30c2db454befe4660ea95245b4e02237a90f3565944da76b327e3a3aedeac5",
   "global": [
     {
       "name": "json",
@@ -128,7 +128,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "check": {
           "summary": "judge the app tree, managed output, contracts, formatting and architecture",
@@ -160,7 +161,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "emit": {
           "summary": "emit backend GraphQL, operation and event contract snapshots",
@@ -178,7 +180,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "explain": {
           "summary": "explain which HFS slot owns one app-relative path",
@@ -204,7 +207,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "hygiene": {
           "summary": "judge staged worktree metadata, stack files and plaintext secrets",
@@ -223,7 +227,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "lint": {
           "summary": "lint both app sides and report repository, ESLint and stylelint findings together",
@@ -275,7 +280,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "new": {
           "summary": "create a canonical service, unit spec or app image definition",
@@ -317,7 +323,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "scaffold": {
           "summary": "create a full or lite StarCi app, including an empty unborn main Git repository",
@@ -353,7 +360,8 @@ export const CATALOG = {
           "conventions": [
             "packages/hfs/scaffold/app.mjs accepts a new path or a plain .git-only repository with unborn main, no refs and an empty index.",
             "Scaffold preserves Git metadata and configuration. Failure unlinks its own entries; replaced or occupied entries remain with a visible cleanup message."
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "secret": {
           "summary": "list, read, seal or generate an encrypted app secret",
@@ -411,7 +419,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "stack": {
           "summary": "start, stop or inspect the shared local test-world infrastructure",
@@ -464,7 +473,8 @@ export const CATALOG = {
           "editions": [
             "full"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "sync": {
           "summary": "compare or write every managed app file from its canonical template",
@@ -495,7 +505,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         },
         "upgrade": {
           "summary": "upgrade a lite app to the full edition (--edition full); a full app is already current",
@@ -520,7 +531,8 @@ export const CATALOG = {
             "full",
             "lite"
           ],
-          "impl": null
+          "impl": null,
+          "runtimeSide": "host"
         }
       }
     },
@@ -581,7 +593,8 @@ export const CATALOG = {
             "Use L1 while working, L2 before asking for a land, and L3 when an IO slot changed.",
             "Runtime L1 selects only manifest self-checks whose implementation path changed; L2 and above run the full check.",
             "App L1 uses starci app check --fast; L2 and above use the full app check, with every example added at L4."
-          ]
+          ],
+          "runtimeSide": "tree"
         }
       }
     },
@@ -632,7 +645,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/connectors/ask-gateway.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "telegram": {
           "summary": "deliver and maintain owner Telegram notifications",
@@ -692,7 +706,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/connectors/telegram.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "telegram-media": {
           "summary": "deliver settled operation media through Telegram",
@@ -773,7 +788,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/connectors/telegram-media.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "tunnel": {
           "summary": "operate the Cloudflare owner-ask tunnel",
@@ -819,7 +835,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/connectors/tunnel.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -828,7 +845,7 @@ export const CATALOG = {
       "owner": "runtime",
       "verbs": {
         "digest": {
-          "summary": "print the read-only debug digest, with its problems ordered by blocked work",
+          "summary": "print the read-only debug digest with a verdict per role (no error, happy error, BUG)",
           "owner": "runtime",
           "flags": [
             {
@@ -841,6 +858,11 @@ export const CATALOG = {
               "type": "list",
               "summary": "workflow id to include (default every running workflow)"
             },
+            {
+              "name": "questions",
+              "type": "boolean",
+              "summary": "list every debug question with its answer or the signal it still needs"
+            },
             {
               "name": "child-timeout",
               "type": "number",
@@ -856,6 +878,7 @@ export const CATALOG = {
           "examples": [
             "starci debug digest",
             "starci debug digest --json",
+            "starci debug digest --questions",
             "starci debug digest --repo <path> --workflow <id>"
           ],
           "editions": [
@@ -863,7 +886,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/reconciler/debug-digest.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "run": {
           "summary": "run one allowlisted read-only runtime inspector",
@@ -927,7 +951,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/cli/lib/debug-run.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -988,7 +1013,8 @@ export const CATALOG = {
             "published ports come from the project's 41000-44999 block",
             "never touch containers of another project (the protected local installation) or ports 3000 and 3100",
             "clean up with `starci docker down`"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "down": {
           "summary": "remove only the labelled resources owned by one application stack",
@@ -1043,7 +1069,8 @@ export const CATALOG = {
             "published ports come from the project's 41000-44999 block",
             "never touch containers of another project (the protected local installation) or ports 3000 and 3100",
             "clean up with `starci docker down`"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "ps": {
           "summary": "list StarCi-labelled containers with ports and health",
@@ -1086,7 +1113,8 @@ export const CATALOG = {
             "published ports come from the project's 41000-44999 block",
             "never touch containers of another project (the protected local installation) or ports 3000 and 3100",
             "clean up with `starci docker down`"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "up": {
           "summary": "start one application stack and wait for its declared healthchecks",
@@ -1146,7 +1174,8 @@ export const CATALOG = {
             "published ports come from the project's 41000-44999 block and never use 3000, 3100, 54320-54329 or 55321-55327",
             "never touch containers of another project (the protected local installation) or ports 3000 and 3100",
             "clean up with `starci docker down`"
-          ]
+          ],
+          "runtimeSide": "host"
         }
       }
     },
@@ -1225,7 +1254,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/canon-scan.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "custody-exec": {
           "summary": "decrypt one custody document for a command or a bounded read",
@@ -1279,7 +1309,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/custody-exec.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "env-health": {
           "summary": "inspect and manage the served environment used by verification",
@@ -1359,7 +1390,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/uat/env-health.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "hfs-sync": {
           "summary": "check an app's generated files and custody trees for drift",
@@ -1387,7 +1419,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/hfs-sync.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "install-sandbox": {
           "summary": "prove the packed runtime tarball installs and runs in an empty home",
@@ -1427,14 +1460,15 @@ export const CATALOG = {
           },
           "json": "none",
           "examples": [
-            "starci gate install-sandbox --tarball starci-1.0.0-alpha.7.tgz"
+            "starci gate install-sandbox --tarball starci-1.0.0-alpha.9.tgz"
           ],
           "editions": [
             "full"
           ],
           "impl": {
             "script": "scripts/gates/install-sandbox.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "read": {
           "summary": "build the recorded READ digest for an operation",
@@ -1480,7 +1514,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/cli/gate-read.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "reference-conventions": {
           "summary": "probe the installed backend reference rules of a reference root",
@@ -1507,7 +1542,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/probe-reference-conventions.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "repo-presentation": {
           "summary": "check repository presentation rules for a product or runtime tree",
@@ -1539,7 +1575,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/repo-presentation.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "run": {
           "summary": "run the measured product or document gate",
@@ -1606,7 +1643,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/cli/gate-run.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "runtime-artifact": {
           "summary": "describe the packed runtime archive and refuse forbidden material in it",
@@ -1650,7 +1688,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/runtime-artifact.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "runtime-coverage": {
           "summary": "run the runtime spec suite under Node coverage and write coverage/lcov.info",
@@ -1678,10 +1717,11 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/runtime-coverage.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "sonar": {
-          "summary": "inspect, provision and run the local Sonar quality gate",
+          "summary": "inspect, provision, run and start the local Sonar quality gate",
           "owner": "runtime",
           "positional": [
             {
@@ -1691,7 +1731,9 @@ export const CATALOG = {
                 "ensure-project",
                 "token",
                 "scan",
-                "dashboard"
+                "dashboard",
+                "up",
+                "stop"
               ],
               "required": true,
               "variadic": false
@@ -1802,6 +1844,11 @@ export const CATALOG = {
               "name": "stack",
               "type": "string",
               "summary": "custody stack directory"
+            },
+            {
+              "name": "public",
+              "type": "boolean",
+              "summary": "up or stop: include the public Cloudflare tunnel (needs CLOUDFLARE_TUNNEL_TOKEN)"
             }
           ],
           "exit": {
@@ -1813,14 +1860,17 @@ export const CATALOG = {
           "examples": [
             "starci gate sonar status",
             "starci gate sonar scan --cwd <repo> --base <rev> --paths src --wait",
-            "starci gate sonar dashboard --cwd <repo>"
+            "starci gate sonar dashboard --cwd <repo>",
+            "starci gate sonar up",
+            "starci gate sonar up --public"
           ],
           "editions": [
             "full"
           ],
           "impl": {
             "script": "scripts/gates/sonar-local.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "starcistacks": {
           "summary": "check a repository's stack declaration and custody layout",
@@ -1854,7 +1904,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/starcistacks.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "test-world": {
           "summary": "run and judge one managed test-world project",
@@ -1901,7 +1952,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/test-world-run.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "unit": {
           "summary": "run unit tests and judge per-subject coverage and test-kit use",
@@ -1932,7 +1984,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/unit-run.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         }
       }
     },
@@ -1988,7 +2041,8 @@ export const CATALOG = {
             "backup writes only refs/backup/<yyyy-mm-dd>/<branch>, never branches or tags",
             "backup refs trigger no workflow and are the only push a coordinator may make",
             "pushes are never forced and the pre-push hook is never bypassed"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "commit": {
           "summary": "commit staged work with the message convention and trailers",
@@ -2076,7 +2130,8 @@ export const CATALOG = {
             "subjects use `type(scope): summary`; types are feat, fix, refactor, test, docs, chore, land and release",
             "keep one logical change in each commit and pass explicit paths instead of staging unrelated work",
             "hooks run the L0 checks; never bypass them and never amend a pushed or landed commit"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "land": {
           "summary": "verify a lane and fast-forward it onto local main without pushing",
@@ -2114,6 +2169,11 @@ export const CATALOG = {
               "type": "string",
               "summary": "the workflow or lane id recorded in the human result"
             },
+            {
+              "name": "kernel-note",
+              "type": "string",
+              "summary": "one line, what a Kernel must do differently after this land; the land record carries it and the runtime delivers it verbatim with the Kernels' next wake (absent: no line)"
+            },
             {
               "name": "concurrency",
               "type": "number",
@@ -2130,7 +2190,8 @@ export const CATALOG = {
           "examples": [
             "starci git land <worktree> <ref>",
             "starci git land <worktree> <ref> --verified <sha> --verified-log <file> --concurrency 2",
-            "starci git land <worktree> <ref> --dry-run --json"
+            "starci git land <worktree> <ref> --dry-run --json",
+            "starci git land <worktree> <ref> --kernel-note \"settle needs --evidence now\""
           ],
           "editions": [
             "full"
@@ -2149,7 +2210,8 @@ export const CATALOG = {
             "lands are serial and hold the host land lock through the gate, check, specs and local merge",
             "local main is the only destination; a land never pushes, tags or touches origin",
             "delta lands use --verified with the matching --verified-log and always rerun prior-red spec files"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "sync": {
           "summary": "merge local main into a clean lane with rerere enabled",
@@ -2201,7 +2263,8 @@ export const CATALOG = {
             "lanes merge the LOCAL main, never origin/main",
             "the tracked worktree must be clean; untracked files are left alone",
             "rerere records conflict resolutions so the same resolution can be replayed"
-          ]
+          ],
+          "runtimeSide": "host"
         }
       }
     },
@@ -2226,7 +2289,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/guards/command-guard.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "footprint-scan": {
           "summary": "scan for fresh cross-repository links and linked worktrees",
@@ -2257,7 +2321,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/guards/footprint-scan.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "raw": {
           "summary": "apply command policy and run the real host tool behind a PATH wrapper",
@@ -2303,7 +2368,8 @@ export const CATALOG = {
             "the shared command policy decides every invocation before the real tool starts",
             "resolution skips the per-user StarCi shim directory so a wrapper never calls itself",
             "policy refusals exit 2; allowed commands return the real tool's exit code unchanged"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "seat-tools": {
           "summary": "deny tools forbidden for the bound seat from JSON on stdin",
@@ -2321,7 +2387,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/guards/seat-tools.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "verify-commit": {
           "summary": "verify a protected-branch update carries only worker-owned paths",
@@ -2352,7 +2419,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/guards/verify-commit.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -2389,7 +2457,8 @@ export const CATALOG = {
           ],
           "conventions": [
             "open uses the local harness URL derived from the runtime statusApp port"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "start": {
           "summary": "start the harness API and UI or its named tunnel",
@@ -2429,7 +2498,8 @@ export const CATALOG = {
             "the API binds 127.0.0.1 at STARCI_STATUS_PORT when set, otherwise the runtime statusApp port",
             "the named tunnel reads %USERPROFILE%/.cloudflared/harness.yml and never accepts a token",
             "the local API stays in the verb process and Vite is its only child process"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "status": {
           "summary": "report whether the harness health endpoint is up",
@@ -2463,7 +2533,8 @@ export const CATALOG = {
           ],
           "conventions": [
             "status probes /healthz at the local harness URL derived from the runtime statusApp port"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "stop": {
           "summary": "stop only harness processes recorded by harness start",
@@ -2496,7 +2567,8 @@ export const CATALOG = {
           "conventions": [
             "stop acts only when the recorded PID, creation time and harness start command all match",
             "a missing PID clears a stale record while an identity mismatch is retained and refused"
-          ]
+          ],
+          "runtimeSide": "host"
         }
       }
     },
@@ -2554,7 +2626,8 @@ export const CATALOG = {
             "args": [
               "archive"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "artifacts": {
           "summary": "list the indexed proof files of the workflow's jobs, per job (read-only)",
@@ -2636,7 +2709,8 @@ export const CATALOG = {
             "args": [
               "artifacts"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "autopilot": {
           "summary": "show or drive a workflow's autopilot: switch it, sweep, bundle, defer to handover, release, extend",
@@ -2794,7 +2868,8 @@ export const CATALOG = {
             "args": [
               "autopilot"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "consume-report": {
           "summary": "integrate the report a job filed; the Kernel must consume it before settle",
@@ -2829,7 +2904,8 @@ export const CATALOG = {
             "args": [
               "consume-report"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "coverage": {
           "summary": "show every FR, shape and proof case of the workflow's scope as proven, stale or missing",
@@ -2864,7 +2940,8 @@ export const CATALOG = {
             "args": [
               "coverage"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "cut-seam": {
           "summary": "publish a cut seam's interface, release its siblings on a stub, or reconcile a stub sibling",
@@ -2960,10 +3037,11 @@ export const CATALOG = {
             "args": [
               "cut-seam"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "decide": {
-          "summary": "open, list or close an entry of the Kernel decision log (hypothesis, action, metric)",
+          "summary": "answer one item of the Kernel menu with a typed choice, or keep the decision log",
           "owner": "runtime",
           "flags": [
             {
@@ -3020,15 +3098,41 @@ export const CATALOG = {
               "name": "list",
               "type": "boolean",
               "summary": "list the decisions of the workflow"
+            },
+            {
+              "name": "item",
+              "type": "string",
+              "summary": "id of the menu item to answer (starci kernel status menu[].id)"
+            },
+            {
+              "name": "choice",
+              "type": "string",
+              "summary": "the option of that item to take (menu[].options[].choice, or none-fits)"
+            },
+            {
+              "name": "reason",
+              "type": "string",
+              "summary": "why this choice; recorded in the decision log (required with --item)"
+            },
+            {
+              "name": "text",
+              "type": "string",
+              "summary": "the free-text input the chosen option names (its text field), e.g. the answer to a worker question"
+            },
+            {
+              "name": "evidence",
+              "type": "string",
+              "summary": "comma list of refs (ledger rows, events, files) the choice rests on"
             }
           ],
           "exit": {
-            "0": "listed or recorded",
-            "1": "refused (incomplete, action already open or reverted, unknown or closed decision)",
+            "0": "listed, recorded or executed",
+            "1": "refused (an item or choice not on the menu, incomplete, action already open or reverted, unknown or closed decision) or a step of the choice failed",
             "2": "bad usage: a required flag is missing or a flag has no value"
           },
           "json": "flag",
           "examples": [
+            "starci kernel decide --repo <path> --workflow <workflow> --item <item> --choice <choice> --reason <why>",
             "starci kernel decide --repo <path> --workflow <workflow> --list",
             "starci kernel decide --repo <path> --workflow <workflow> --hypothesis <hypothesis> --action-key <key> --metric <metric>",
             "starci kernel decide --repo <path> --workflow <workflow> --close <decision> --result keep --observed <observed>"
@@ -3041,12 +3145,18 @@ export const CATALOG = {
             "args": [
               "decide"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "decisions": {
           "summary": "list, open, claim, resolve or escalate Decision Items; the Kernel reads them first every wake",
           "owner": "runtime",
           "flags": [
+            {
+              "name": "field",
+              "type": "string",
+              "summary": "comma list of dotted paths of the answer; prints only those fields as JSON"
+            },
             {
               "name": "repo",
               "type": "string",
@@ -3221,7 +3331,8 @@ export const CATALOG = {
             "args": [
               "decisions"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "dispatch": {
           "summary": "admit a routed job and launch its worker with --spawn; without it print the launch plan",
@@ -3285,7 +3396,8 @@ export const CATALOG = {
             "args": [
               "dispatch"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "dispatch-ready": {
           "summary": "route and dispatch queued-ready jobs up to the workflow allowed parallelism",
@@ -3336,7 +3448,8 @@ export const CATALOG = {
             "args": [
               "dispatch-ready"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "enqueue": {
           "summary": "enqueue a work-unit job with its op, owned paths, records and retry lineage",
@@ -3415,6 +3528,11 @@ export const CATALOG = {
               "type": "string",
               "summary": "job this one retries"
             },
+            {
+              "name": "switch-agent",
+              "type": "boolean",
+              "summary": "with --retry-of, the agent pool of the attempt being retried is demoted for this retry (the route table runs it on another eligible pool); a Kernel's choice to replace the agent"
+            },
             {
               "name": "reopen",
               "type": "string",
@@ -3470,7 +3588,8 @@ export const CATALOG = {
             "args": [
               "enqueue"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "estimate": {
           "summary": "compute the size class and agent count of a slice from runtimes.yaml allocation.slicing",
@@ -3530,7 +3649,8 @@ export const CATALOG = {
             "args": [
               "estimate"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "extensions": {
           "summary": "list the file-based kernel extensions: verbs, status fields, boolean flags, load problems",
@@ -3559,7 +3679,8 @@ export const CATALOG = {
             "args": [
               "extensions"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "finish": {
           "summary": "finish an owner-approved workflow and release its kernel seat",
@@ -3594,7 +3715,8 @@ export const CATALOG = {
             "args": [
               "finish"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "foundation": {
           "summary": "claim, land or declare a shared foundation (or none) for a workflow",
@@ -3687,7 +3809,8 @@ export const CATALOG = {
             "args": [
               "foundation"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "foundations": {
           "summary": "list the ledger's shared foundations: owner, state, dependents, waits",
@@ -3722,7 +3845,8 @@ export const CATALOG = {
             "args": [
               "foundations"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "graph-edit": {
           "summary": "apply a logged, reversible light edit to the workflow's unit jobs (drop, widen, wire, ...)",
@@ -3859,7 +3983,8 @@ export const CATALOG = {
             "args": [
               "graph-edit"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "hierarchy": {
           "summary": "project the agent hierarchy (starci/agent-hierarchy@1) of a workflow",
@@ -3894,7 +4019,8 @@ export const CATALOG = {
             "args": [
               "hierarchy"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "inbox": {
           "summary": "list the workflow's pending inbox items, or acknowledge one with a disposition",
@@ -3940,7 +4066,8 @@ export const CATALOG = {
             "args": [
               "inbox"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "incident": {
           "summary": "raise, resolve or attach typed release conditions to a workflow incident",
@@ -4142,10 +4269,11 @@ export const CATALOG = {
             "args": [
               "incident"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "kernel-ack-rev": {
-          "summary": "project or attest the complete current Kernel READ manifest",
+          "summary": "project or attest the Kernel READ manifest (also spelled revision-ack)",
           "owner": "runtime",
           "flags": [
             {
@@ -4169,6 +4297,11 @@ export const CATALOG = {
               "type": "boolean",
               "summary": "return the current server-derived required manifest without acknowledgement"
             },
+            {
+              "name": "digest",
+              "type": "string",
+              "summary": "the readToken --plan returned, after every path it lists was read (no file needed)"
+            },
             {
               "name": "read-manifest",
               "type": "string",
@@ -4188,6 +4321,7 @@ export const CATALOG = {
           "json": "flag",
           "examples": [
             "starci kernel kernel-ack-rev --repo <path> --workflow <workflow> --plan",
+            "starci kernel kernel-ack-rev --repo <path> --workflow <workflow> --rev <rev> --digest <readToken>",
             "starci kernel kernel-ack-rev --repo <path> --workflow <workflow> --rev <rev> --read-manifest <file>"
           ],
           "editions": [
@@ -4198,7 +4332,8 @@ export const CATALOG = {
             "args": [
               "kernel-ack-rev"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "kernel-proposal": {
           "summary": "file a tier-2 shared runtime change proposal for the Supervisor, or list proposals",
@@ -4264,7 +4399,8 @@ export const CATALOG = {
             "args": [
               "kernel-proposal"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "lifecycle": {
           "summary": "pause, stop or resume a workflow; only the owner or supervisor resumes or stops",
@@ -4332,7 +4468,8 @@ export const CATALOG = {
             "args": [
               "lifecycle"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "log": {
           "summary": "append one typed log row to the ledger's logs table",
@@ -4453,12 +4590,18 @@ export const CATALOG = {
             "args": [
               "log"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "logs": {
           "summary": "list the workflow's typed log rows, oldest first",
           "owner": "runtime",
           "flags": [
+            {
+              "name": "field",
+              "type": "string",
+              "summary": "comma list of dotted paths of the answer; prints only those fields as JSON"
+            },
             {
               "name": "repo",
               "type": "string",
@@ -4509,7 +4652,8 @@ export const CATALOG = {
             "args": [
               "logs"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "messages": {
           "summary": "drain the workflow Runs into the ledger and list every orchestration message",
@@ -4544,7 +4688,8 @@ export const CATALOG = {
             "args": [
               "messages"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "notify": {
           "summary": "send a typed notice to one peer workflow or all peers",
@@ -4613,7 +4758,8 @@ export const CATALOG = {
             "args": [
               "notify"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "nudge": {
           "summary": "wake a running job's worker at its exact terminal so it files its report",
@@ -4647,7 +4793,8 @@ export const CATALOG = {
             "args": [
               "nudge"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "observe": {
           "summary": "read the exact op terminal screen of a job (reasoning context, never evidence)",
@@ -4687,7 +4834,8 @@ export const CATALOG = {
             "args": [
               "observe"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "op-contract": {
           "summary": "read the contract row dispatch wrote for a job or an op+attempt",
@@ -4737,7 +4885,8 @@ export const CATALOG = {
             "args": [
               "op-contract"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "op-override": {
           "summary": "store an additive override of one op for this workflow",
@@ -4793,7 +4942,8 @@ export const CATALOG = {
             "args": [
               "op-override"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "peers": {
           "summary": "the workflow's peer workflows of the same ledger",
@@ -4827,7 +4977,8 @@ export const CATALOG = {
             "args": [
               "peers"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "plan": {
           "summary": "write the workflow's derived plan into the ledger",
@@ -4888,7 +5039,8 @@ export const CATALOG = {
             "args": [
               "plan"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "provider-backoff": {
           "summary": "open the provider circuit a persisting rate limit calls for (idempotent)",
@@ -4951,7 +5103,8 @@ export const CATALOG = {
             "args": [
               "provider-backoff"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "provider-health": {
           "summary": "the ledger provider-health row; --recover clears an open circuit (Kernel terminal only)",
@@ -5017,7 +5170,8 @@ export const CATALOG = {
             "args": [
               "provider-health"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "questions": {
           "summary": "list the pending worker questions of a workflow, draining its Runs into the ledger first",
@@ -5051,7 +5205,8 @@ export const CATALOG = {
             "args": [
               "questions"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "reconcile": {
           "summary": "recover a fenced launch, drop a queued job, recover a dead worker or cancel orphan kernel jobs",
@@ -5138,7 +5293,8 @@ export const CATALOG = {
             "args": [
               "reconcile"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "record-change": {
           "summary": "the record's OWNER declares its committed change breaking (peers owe ONE follow-up leg) or advisory",
@@ -5195,7 +5351,8 @@ export const CATALOG = {
             "args": [
               "record-change"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "record-checks": {
           "summary": "record independent checks against a filed worker report",
@@ -5241,7 +5398,8 @@ export const CATALOG = {
             "args": [
               "record-checks"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "redesign": {
           "summary": "dispatch the owning op with the RCA as its brief (strong reasoning pool)",
@@ -5299,7 +5457,8 @@ export const CATALOG = {
             "args": [
               "redesign"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "rename": {
           "summary": "set a workflow's display name and rename its live [Kernel] and [Op] terminal tabs",
@@ -5361,7 +5520,8 @@ export const CATALOG = {
             "args": [
               "rename"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "reply": {
           "summary": "answer a pending worker question, or route it to the owner with --to-owner",
@@ -5412,7 +5572,8 @@ export const CATALOG = {
             "args": [
               "reply"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "report": {
           "summary": "a worker files its job report (the durable op to kernel IPC)",
@@ -5455,7 +5616,7 @@ export const CATALOG = {
             {
               "name": "dispatch-capability",
               "type": "string",
-              "summary": "the dispatch capability from the Orca preamble, authenticating the worker_done message"
+              "summary": "the dispatch capability of the Orca preamble when it carries one, forwarded with the worker_done message"
             }
           ],
           "exit": {
@@ -5476,7 +5637,8 @@ export const CATALOG = {
             "args": [
               "report"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "retire-ask": {
           "summary": "close an ask the owner should no longer answer (ask-superseded)",
@@ -5523,7 +5685,71 @@ export const CATALOG = {
             "args": [
               "retire-ask"
             ]
-          }
+          },
+          "runtimeSide": "host"
+        },
+        "revision-ack": {
+          "summary": "the same verb as kernel-ack-rev: project or attest the Kernel READ manifest",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "repo",
+              "type": "string",
+              "summary": "managed repository whose .starciwork ledger the command uses"
+            },
+            {
+              "name": "workflow",
+              "type": "string",
+              "required": true,
+              "summary": "workflow id"
+            },
+            {
+              "name": "rev",
+              "type": "string",
+              "summary": "exact current Git SHA or installed required-byte revision returned by --plan"
+            },
+            {
+              "name": "plan",
+              "type": "boolean",
+              "summary": "return the current server-derived required manifest without acknowledgement"
+            },
+            {
+              "name": "digest",
+              "type": "string",
+              "summary": "the readToken --plan returned, after every path it lists was read (no file needed)"
+            },
+            {
+              "name": "read-manifest",
+              "type": "string",
+              "summary": "regular JSON file containing the exact complete manifest read by this Kernel"
+            },
+            {
+              "name": "op",
+              "type": "string",
+              "summary": "include this declared upcoming op contract in the required READ set"
+            }
+          ],
+          "exit": {
+            "0": "planned or acknowledged",
+            "1": "refused or unavailable current identity/READ inputs",
+            "2": "bad usage: a required flag is missing or a flag has no value"
+          },
+          "json": "flag",
+          "examples": [
+            "starci kernel revision-ack --repo <path> --workflow <workflow> --plan",
+            "starci kernel revision-ack --repo <path> --workflow <workflow> --rev <rev> --digest <readToken>",
+            "starci kernel revision-ack --repo <path> --workflow <workflow> --rev <rev> --read-manifest <file>"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/kernel/cli.mjs",
+            "args": [
+              "revision-ack"
+            ]
+          },
+          "runtimeSide": "host"
         },
         "route": {
           "summary": "resolve and persist the model decision of a job",
@@ -5570,7 +5796,8 @@ export const CATALOG = {
             "args": [
               "route"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "run-deferred-tests": {
           "summary": "re-queue the test legs the owner's specs switch deferred (see status testsDeferred)",
@@ -5625,7 +5852,8 @@ export const CATALOG = {
             "args": [
               "run-deferred-tests"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "serve-ask": {
           "summary": "park an owner ask: Telegram notice first, the answer form served on demand",
@@ -5676,7 +5904,8 @@ export const CATALOG = {
             "args": [
               "serve-ask"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "settle": {
           "summary": "settle a consumed report: pass, fail or blocked verdict",
@@ -5738,7 +5967,8 @@ export const CATALOG = {
             "args": [
               "settle"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "settle-tail": {
           "summary": "run the async tail of a settled job (artifact index, evidence, retention)",
@@ -5774,12 +6004,23 @@ export const CATALOG = {
             "args": [
               "settle-tail"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "status": {
           "summary": "the live status projection of a workflow (frontier, progress, waits)",
           "owner": "runtime",
           "flags": [
+            {
+              "name": "field",
+              "type": "string",
+              "summary": "comma list of dotted paths of the answer; prints only those fields as JSON"
+            },
+            {
+              "name": "full",
+              "type": "boolean",
+              "summary": "the whole text view (every section; the legs line tags each leg [judge:...] with who judges its product, the judge field of its op contract); the Kernel seat's own call prints its one-line state and its Decide section by default"
+            },
             {
               "name": "repo",
               "type": "string",
@@ -5809,12 +6050,18 @@ export const CATALOG = {
             "args": [
               "status"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "survey": {
           "summary": "the read projection a Kernel scans each wake (jobs, inbox, signals, drift)",
           "owner": "runtime",
           "flags": [
+            {
+              "name": "field",
+              "type": "string",
+              "summary": "comma list of dotted paths of the answer; prints only those fields as JSON"
+            },
             {
               "name": "repo",
               "type": "string",
@@ -5850,7 +6097,8 @@ export const CATALOG = {
             "args": [
               "survey"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "unit": {
           "summary": "the work units and their try budgets; only the owner or Supervisor raises one",
@@ -5909,7 +6157,8 @@ export const CATALOG = {
             "args": [
               "unit"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "usage": {
           "summary": "measured tokens by op, model and Kernel of one workflow, or per workflow",
@@ -5949,7 +6198,8 @@ export const CATALOG = {
             "args": [
               "usage"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "verify-proofs": {
           "summary": "re-hash every indexed proof file and walk the events digest chain; exit 1 on tampering",
@@ -5984,7 +6234,8 @@ export const CATALOG = {
             "args": [
               "verify-proofs"
             ]
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -6055,7 +6306,8 @@ export const CATALOG = {
             "Use L1 while working, L2 before asking for a land, and L3 when an IO slot changed.",
             "L0 and L1 stay on changed files; L4 is the only whole-repository lint scope.",
             "Product apps go through starci app lint; the runtime uses its structural lint self-check family."
-          ]
+          ],
+          "runtimeSide": "tree"
         }
       }
     },
@@ -6155,7 +6407,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/machine/decisions.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "kernel-watchdog": {
           "summary": "inspect or repair one running workflow Kernel seat",
@@ -6209,7 +6462,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/kernel/kernel-watchdog.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "lessons": {
           "summary": "inspect and update Supervisor learning records",
@@ -6307,7 +6561,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/machine/lessons.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "op-metrics": {
           "summary": "report operation health metrics across managed ledgers",
@@ -6354,7 +6609,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/machine/op-metrics.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "seam-policy": {
           "summary": "plan canon cuts or redispatch a blocked canon slice",
@@ -6417,7 +6673,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/kernel/seam-policy.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "worktrees": {
           "summary": "inspect, collect or resume runtime worktrees",
@@ -6456,7 +6713,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/machine/worktrees.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "worktrees-clean": {
           "summary": "remove clean lane worktrees already merged into local main",
@@ -6502,7 +6760,8 @@ export const CATALOG = {
             "a candidate branch must be merged into local main and have no uncommitted tracked change",
             "every path is inspected with lstat and links are removed as links before Git or Orca removes the worktree",
             "--dry-run prints the exact selected worktrees and changes nothing"
-          ]
+          ],
+          "runtimeSide": "host"
         }
       }
     },
@@ -6550,7 +6809,8 @@ export const CATALOG = {
             "npm ci installs the lockfile into this worktree's real node_modules and never uses a junction or symbolic link",
             "package.json and package-lock.json must be clean before the run",
             "dependency installs run one at a time under the host lock and never use npm install"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "install": {
           "summary": "add exact dependencies from canon pins under the host lock",
@@ -6595,7 +6855,8 @@ export const CATALOG = {
             "bare package names resolve only from knowledge/hfs/canon-pins.yaml and never through a registry lookup",
             "explicit versions use exact x.y.z form and must agree with the canon pin when one exists",
             "installs always use --save-exact and report the package.json and package-lock.json diff stat"
-          ]
+          ],
+          "runtimeSide": "host"
         }
       }
     },
@@ -6639,7 +6900,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/api/orca/terminal-read.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "terminal-send": {
           "summary": "send text or Enter to an Orca terminal",
@@ -6687,7 +6949,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/api/orca/terminal-send.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -6741,7 +7004,44 @@ export const CATALOG = {
             "args": [
               "--once"
             ]
-          }
+          },
+          "runtimeSide": "host"
+        },
+        "reopen": {
+          "summary": "put a quarantined service or seat back to declared with a clean restart history",
+          "owner": "runtime",
+          "positional": [
+            {
+              "name": "name",
+              "required": true,
+              "variadic": false
+            }
+          ],
+          "flags": [],
+          "exit": {
+            "0": "the row is declared again",
+            "1": "no such row",
+            "2": "bad usage"
+          },
+          "json": "flag",
+          "examples": [
+            "starci reconciler reopen seat:kernel:<ledger-id>:<workflow-id>",
+            "starci reconciler reopen <service-name>"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/reconciler/services.mjs",
+            "args": [
+              "--reopen"
+            ]
+          },
+          "roles": [
+            "lead",
+            "owner"
+          ],
+          "runtimeSide": "host"
         },
         "restart": {
           "summary": "stop the reconciler engine and ensure a new leader",
@@ -6764,7 +7064,8 @@ export const CATALOG = {
             "args": [
               "--restart"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "start": {
           "summary": "ensure the reconciler engine has a healthy leader",
@@ -6788,7 +7089,8 @@ export const CATALOG = {
             "args": [
               "ensure"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "status": {
           "summary": "print reconciler leader, queue, mode and violation status",
@@ -6811,7 +7113,8 @@ export const CATALOG = {
             "args": [
               "--status"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "stop": {
           "summary": "stop the current reconciler engine leader",
@@ -6834,7 +7137,8 @@ export const CATALOG = {
             "args": [
               "--stop"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "up": {
           "summary": "bring the host services and seats up, or check them read-only, and print the checklist",
@@ -6897,7 +7201,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/reconciler/start.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -6930,7 +7235,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/release-app-installs.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "check": {
           "summary": "run the one read-only release readiness gate",
@@ -6963,7 +7269,51 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/release-check.mjs"
-          }
+          },
+          "runtimeSide": "tree"
+        },
+        "ci-status": {
+          "summary": "the verdict of the GitHub ci workflow, Codecov and Sonar for a release; red is recorded for Debug",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "repo",
+              "type": "string",
+              "summary": "the repository released (default is the current directory)"
+            },
+            {
+              "name": "tag",
+              "type": "string",
+              "summary": "the release tag v* whose commit is read (default is the newest release tag merged in HEAD)"
+            },
+            {
+              "name": "wait",
+              "type": "boolean",
+              "summary": "poll until the run ends (modules/supervisor/release-cut.yaml suite.ci pollSeconds, waitMinutes)"
+            }
+          ],
+          "exit": {
+            "0": "the ci workflow of the release commit is green",
+            "1": "it is red (for a release cut under suite ci: recorded once as runtime-defect:release-ci-red-<tag>)",
+            "2": "bad usage",
+            "3": "no verdict yet - no run, still running, or GitHub could not be read"
+          },
+          "json": "flag",
+          "examples": [
+            "starci release ci-status --tag v1.0.0-alpha.9 --wait",
+            "starci release ci-status --json"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/supervisor/release-ci-status-cli.mjs"
+          },
+          "conventions": [
+            "Under suite ci the full test suite runs only in this workflow, after the push; this verb is how its verdict comes back.",
+            "The state is left beside the release record (starci-release/<sha>.ci.json); starci debug digest and starci reconciler up --check show the last release CI."
+          ],
+          "runtimeSide": "tree"
         },
         "clean-test": {
           "summary": "test published packages from fresh isolated installs",
@@ -6996,7 +7346,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/package-clean-test.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "cut": {
           "summary": "cut the release, the only way the runtime's remote main and a release tag move",
@@ -7005,7 +7356,7 @@ export const CATALOG = {
             {
               "name": "repo",
               "type": "string",
-              "summary": "the repository to release (default is the current directory)"
+              "summary": "the repository to release (default: the runtime this command runs from, not the directory it is started in)"
             },
             {
               "name": "remote",
@@ -7026,6 +7377,16 @@ export const CATALOG = {
               "name": "tag",
               "type": "string",
               "summary": "the release tag v* to push (default is the one new annotated v* tag on HEAD)"
+            },
+            {
+              "name": "rows",
+              "type": "string",
+              "summary": "re-run only these rows (comma separated, names as --plan lists them) on the SAME commit and complete the record when every other row is already green on it; a row that is not green there refuses the cut"
+            },
+            {
+              "name": "no-reuse",
+              "type": "boolean",
+              "summary": "run every row; stand in for none from an earlier commit or an earlier cut of this one"
             }
           ],
           "exit": {
@@ -7036,15 +7397,17 @@ export const CATALOG = {
           "json": "flag",
           "examples": [
             "starci release cut",
-            "starci release cut --plan --tag v1.0.0-alpha.7",
-            "starci release cut --repo <path> --tag v1.0.0-alpha.7 --json"
+            "starci release cut --plan --tag v1.0.0-alpha.9",
+            "starci release cut --tag v1.0.0-alpha.9 --rows \"npm test,linux-parity\"",
+            "starci release cut --repo <path> --tag v1.0.0-alpha.9 --json"
           ],
           "editions": [
             "full"
           ],
           "impl": {
             "script": "scripts/supervisor/release-cut-cli.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "env-test": {
           "summary": "run the runtime spec suite under the release cut's own conditions",
@@ -7080,7 +7443,8 @@ export const CATALOG = {
           "conventions": [
             "the suite is the cut's own spec leg, so a red the cut would find shows here first; it takes minutes to an hour and writes each step to a log",
             "without --lane it refuses (exit 2) unless the host has an Orca terminal, a reachable Orca and a Docker daemon, the same prerequisites the cut refuses on"
-          ]
+          ],
+          "runtimeSide": "tree"
         },
         "images": {
           "summary": "build, run, health-check and tear down the shipped application images",
@@ -7141,7 +7505,8 @@ export const CATALOG = {
             "proof containers publish no ports and carry the exact starci.project label",
             "healthy containers pass; an image without HEALTHCHECK must remain running for ten seconds",
             "teardown always removes the exact proof container id and never touches a protected installation or protected port"
-          ]
+          ],
+          "runtimeSide": "tree"
         },
         "launch-smoke": {
           "summary": "prove live nested-agent launch paths on an Orca host",
@@ -7209,7 +7574,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/kernel/launch-smoke.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "notes": {
           "summary": "print or write the release notes of a tag, its CHANGELOG section",
@@ -7223,7 +7589,7 @@ export const CATALOG = {
             {
               "name": "repo",
               "type": "string",
-              "summary": "the repository holding CHANGELOG.md (default is the current directory)"
+              "summary": "the repository holding CHANGELOG.md (default: the runtime this command runs from, not the directory it is started in)"
             },
             {
               "name": "out",
@@ -7238,8 +7604,8 @@ export const CATALOG = {
           },
           "json": "starci/release-notes@1",
           "examples": [
-            "starci release notes --tag v1.0.0-alpha.7",
-            "starci release notes --tag v1.0.0-alpha.7 --out notes.md --json"
+            "starci release notes --tag v1.0.0-alpha.9",
+            "starci release notes --tag v1.0.0-alpha.9 --out notes.md --json"
           ],
           "editions": [
             "full"
@@ -7258,7 +7624,8 @@ export const CATALOG = {
           ],
           "conventions": [
             "the text is the CHANGELOG section the annotated tag message is made of, and --out writes only the named file"
-          ]
+          ],
+          "runtimeSide": "tree"
         },
         "proof": {
           "summary": "build the release proof attached before publish or deploy effects",
@@ -7301,13 +7668,19 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/gates/release-proof.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "publish": {
           "summary": "plan or perform the owner-run package publication sequence",
           "owner": "runtime",
           "positional": [],
           "flags": [
+            {
+              "name": "plan",
+              "type": "boolean",
+              "summary": "explicitly print the read-only publication plan (the default)"
+            },
             {
               "name": "publish",
               "type": "boolean",
@@ -7353,6 +7726,7 @@ export const CATALOG = {
           "json": "starci/release-publish-flow@1",
           "examples": [
             "starci release publish",
+            "starci release publish --plan --npm-user <name>",
             "starci release publish --publish --npm-user <name> --expect-sha <sha>",
             "starci release publish --runtime-package --publish --npm-user <name> --expect-sha <sha>"
           ],
@@ -7376,7 +7750,8 @@ export const CATALOG = {
             "runtime-package publishes root package.json after package publication, committed bindings and finished notes; it proves the real archive and private install",
             "runtime-package refuses changed inputs or registry state after its cold proof and never performs rebind or example writes",
             "publication never commits, pushes or tags; release cut owns those effects"
-          ]
+          ],
+          "runtimeSide": "tree"
         },
         "sync-runtime": {
           "summary": "refresh or check package runtime copies and optionally prepare grammar",
@@ -7423,7 +7798,9 @@ export const CATALOG = {
             "ordinary sync and check retain their existing copy behavior",
             "prepare-grammar installs and builds ignored grammar output and refreshes knowledge under the host lock before syncing copies",
             "check and prepare-grammar cannot be combined"
-          ]
+          ],
+          "writesRuntimeTree": "!check",
+          "runtimeSide": "tree"
         }
       }
     },
@@ -7476,7 +7853,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/route/route-op.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -7516,7 +7894,50 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/hfs/architecture.mjs"
-          }
+          },
+          "runtimeSide": "tree"
+        },
+        "artefacts": {
+          "summary": "judge or migrate the artefacts the runtime installs outside its tree",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "migrate",
+              "type": "boolean",
+              "summary": "rewrite every stale artefact to the revision of this tree and verify the stamp"
+            }
+          ],
+          "exit": {
+            "0": "every artefact is current, or was migrated and verified",
+            "1": "an artefact is stale in check mode, or a migration was refused",
+            "2": "bad usage"
+          },
+          "json": "starci/runtime-artefacts@1",
+          "examples": [
+            "starci runtime artefacts",
+            "starci runtime artefacts --migrate --json"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "module": "scripts/reconciler/artefacts-verb.mjs",
+            "export": "runtimeArtefacts"
+          },
+          "effect": "local-write",
+          "roles": [
+            "worker",
+            "lead",
+            "coordinator",
+            "release",
+            "owner"
+          ],
+          "conventions": [
+            "without --migrate it only reads; with --migrate it rewrites hooks and generated copies of the live workflows and the host tree",
+            "it never touches product content, only artefacts listed in modules/kernel/installed-artefacts.yaml",
+            "a deploy runs it from the new tree after the fast-forward; the engine runs the same migration when it starts"
+          ],
+          "runtimeSide": "tree"
         },
         "benchmark-snapshot": {
           "summary": "append one model-pool snapshot file under benchmark/snapshots",
@@ -7559,7 +7980,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/agent/benchmark-snapshot.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "check": {
           "summary": "judge the runtime tree — node --check, the runtime HFS check, the retained self-checks",
@@ -7593,7 +8015,55 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/checks/check-runtime.mjs"
-          }
+          },
+          "runtimeSide": "tree"
+        },
+        "deploy": {
+          "summary": "carry a checked runtime revision onto the running host and verify the engine on it",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "from",
+              "type": "string",
+              "summary": "a clone directory (its HEAD is the revision) or a ref of the host repository"
+            },
+            {
+              "name": "plan",
+              "type": "boolean",
+              "summary": "print every step and every refusal without changing anything"
+            }
+          ],
+          "exit": {
+            "0": "the host runs the new revision, verified, and the deploy event is journalled (or the plan has no refusal)",
+            "1": "refused before any change, or failed after the fast-forward with the host state named",
+            "2": "bad usage"
+          },
+          "json": "starci/runtime-deploy@1",
+          "examples": [
+            "starci runtime deploy --from <clone> --plan",
+            "starci runtime deploy --from <clone> --json",
+            "starci runtime deploy --from main"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "module": "scripts/reconciler/runtime-deploy.mjs",
+            "export": "runtimeDeploy"
+          },
+          "effect": "host",
+          "roles": [
+            "coordinator",
+            "owner"
+          ],
+          "conventions": [
+            "refuses unless the source is clean, a fast-forward of the host and its check and affected specs are proven by a receipt on that commit",
+            "refuses while a release cut holds the host lock; waits for settles, Critic runs and prepared decisions in flight, stops none",
+            "several commits are one revision change, with one fast-forward, installed artefacts migrated, one engine restart, then verified",
+            "journals one runtime-deployed event; --plan prints every step and refusal and changes nothing",
+            "a failed verification names the host state and the non-destructive way back (git revert of the range), never a reset"
+          ],
+          "runtimeSide": "host"
         },
         "derived-fields": {
           "summary": "regenerate or check the derived fields of the knowledge pattern files",
@@ -7625,7 +8095,9 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/hfs/derived-fields.mjs"
-          }
+          },
+          "writesRuntimeTree": "write",
+          "runtimeSide": "tree"
         },
         "doctor": {
           "summary": "verify installed payload, public entry custody and local runtime capabilities",
@@ -7654,7 +8126,8 @@ export const CATALOG = {
             "args": [
               "doctor"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "gen-catalog": {
           "summary": "write or check the generated CLI catalog outputs, docs and shell completions",
@@ -7679,7 +8152,7 @@ export const CATALOG = {
           "exit": {
             "0": "outputs in sync or written",
             "1": "drift listed or a catalog error",
-            "2": "neither --write nor --check given or bad usage"
+            "2": "neither --write nor --check given, bad usage, or [RUNTIME_TREE_TARGET_FOREIGN]: the located runtime is not the tree that owns this CLI (set STARCI_RUNTIME or --root)"
           },
           "json": "none",
           "examples": [
@@ -7691,7 +8164,9 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/cli/gen-catalog.mjs"
-          }
+          },
+          "writesRuntimeTree": "write",
+          "runtimeSide": "tree"
         },
         "gen-ops": {
           "summary": "regenerate or check the generated operation registry",
@@ -7729,7 +8204,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/route/build-ops-registry.mjs"
-          }
+          },
+          "runtimeSide": "tree"
         },
         "housekeeping": {
           "summary": "inspect or apply the host housekeeping sweeps",
@@ -7766,7 +8242,40 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/housekeeping/housekeeping.mjs"
-          }
+          },
+          "runtimeSide": "host"
+        },
+        "import-held-secret": {
+          "summary": "move one sealed member of the old tracked custody from git history into secret.env",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "member",
+              "type": "string",
+              "summary": "the old tracked path of the member (the table of docs/host-secrets.md)"
+            },
+            {
+              "name": "rev",
+              "type": "string",
+              "summary": "the revision that still holds the member; default the parent of the commit that deleted it"
+            }
+          ],
+          "exit": {
+            "0": "the variable was appended to secret.env",
+            "1": "refused and nothing written",
+            "2": "bad usage"
+          },
+          "json": "flag",
+          "examples": [
+            "starci runtime import-held-secret --member <member-path>"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/gates/import-held-secret.mjs"
+          },
+          "runtimeSide": "host"
         },
         "install": {
           "summary": "install the StarCi runtime — fetch the pinned package, then init or update <cwd>/.claude",
@@ -7806,7 +8315,8 @@ export const CATALOG = {
             "args": [
               "init"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "ledger-hygiene": {
           "summary": "report orphan ledgers",
@@ -7833,7 +8343,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/housekeeping/ledger-hygiene.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "link": {
           "summary": "point the per-user StarCi launcher at a live runtime checkout",
@@ -7860,7 +8371,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "packages/cli/src/runtime-link.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "machine-db": {
           "summary": "inspect or maintain the host machine database",
@@ -7935,7 +8447,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "engine/db/machine.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "owner-claims-audit": {
           "summary": "audit owner-decision claims and owner-gates in runtime ledgers",
@@ -7968,7 +8481,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/housekeeping/owner-claims-audit.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "readme-blocks": {
           "summary": "regenerate or check the generated blocks of knowledge/hfs/README.md",
@@ -8000,7 +8514,47 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/hfs/readme-blocks.mjs"
-          }
+          },
+          "writesRuntimeTree": "write",
+          "runtimeSide": "tree"
+        },
+        "revision-scope": {
+          "summary": "show what a deploy of the runtime tree asks of each role between two revisions",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "from",
+              "type": "string",
+              "required": true,
+              "summary": "the revision the seats stand at"
+            },
+            {
+              "name": "to",
+              "type": "string",
+              "summary": "the revision to deploy; the HEAD of the runtime tree by default"
+            },
+            {
+              "name": "root",
+              "type": "string",
+              "summary": "the runtime tree to read"
+            }
+          ],
+          "exit": {
+            "0": "scope printed",
+            "2": "bad usage"
+          },
+          "json": "flag",
+          "examples": [
+            "starci runtime revision-scope --from <sha>",
+            "starci runtime revision-scope --from <sha> --to <sha> --json"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/reconciler/revision-scope-cli.mjs"
+          },
+          "runtimeSide": "tree"
         },
         "status": {
           "summary": "the runtime's version, tree root and manifest drift — a read-only summary",
@@ -8020,7 +8574,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/cli/lib/runtime-status.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "update": {
           "summary": "bring an installed .claude tree to this package's payload version",
@@ -8059,7 +8614,8 @@ export const CATALOG = {
             "args": [
               "update"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "validate": {
           "summary": "read-only Work record/tree validation — structure, consistency, artifacts, schemas",
@@ -8097,7 +8653,59 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/validate/work-validate.mjs"
-          }
+          },
+          "runtimeSide": "tree"
+        },
+        "verify": {
+          "summary": "verify a committed revision - the check AND the affected specs on one commit, one receipt",
+          "owner": "runtime",
+          "positional": [],
+          "flags": [
+            {
+              "name": "base",
+              "type": "string",
+              "summary": "ref to diff against (default: the merge-base with main, else origin/main)"
+            },
+            {
+              "name": "root",
+              "type": "string",
+              "summary": "repository root (default: the command cwd)"
+            }
+          ],
+          "exit": {
+            "0": "verified: check and every affected spec passed on the exact commit, receipt written",
+            "1": "NOT VERIFIED: dirty tree, no base, red check, or a red spec file",
+            "2": "bad usage",
+            "3": "PARTIAL: nothing red, the lane's own specs ran, some were not started inside the budget (fit to land, not to deploy)"
+          },
+          "json": "starci/runtime-verify@1",
+          "examples": [
+            "starci runtime verify --base <tip>",
+            "starci runtime verify --json"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "module": "scripts/reconciler/runtime-verify.mjs",
+            "export": "runtimeVerify"
+          },
+          "effect": "host",
+          "roles": [
+            "worker",
+            "lead",
+            "coordinator",
+            "release",
+            "owner"
+          ],
+          "conventions": [
+            "A branch is verified only by this receipt: check N of N and affected specs N of N for base..tip, on the exact commit.",
+            "A fix lane reports the last line of this verb, not the line of starci runtime check (which never runs a spec).",
+            "Refuses a tree with uncommitted or untracked changes; the receipt binds a commit.",
+            "starci git land accepts a partial receipt (0 failed, the lane's changed specs ran, not-started counted); deploy and release need all of them.",
+            "A spec whose inputs are unchanged since a proven green run is reused; the receipt counts the reused files."
+          ],
+          "runtimeSide": "tree"
         },
         "version": {
           "summary": "print the runtime package version",
@@ -8119,7 +8727,8 @@ export const CATALOG = {
             "args": [
               "version"
             ]
-          }
+          },
+          "runtimeSide": "tree"
         }
       }
     },
@@ -8173,7 +8782,8 @@ export const CATALOG = {
             "scaffold, install, lint, typecheck, build and app check run sequentially under the host lock",
             "scratch output is link-safely removed unless --keep is given",
             "the smoke never starts Docker or Supabase and never opens port 3100"
-          ]
+          ],
+          "runtimeSide": "tree"
         }
       }
     },
@@ -8214,7 +8824,8 @@ export const CATALOG = {
             "never start a protected foreign stack or use ports 3000, 3100, 54320-54329 or 55321-55327",
             "secrets stay in sops and never appear in command output",
             "stop the project's stack when the work that needs it is done"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "status": {
           "summary": "show the app's Supabase endpoints and key names without secret values",
@@ -8249,7 +8860,8 @@ export const CATALOG = {
           "conventions": [
             "status reads only the project rooted at supabase/config.toml and never a protected foreign stack",
             "secret key names may be listed but their values never appear in text or JSON"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "stop": {
           "summary": "stop only the app's configured Supabase project",
@@ -8291,7 +8903,8 @@ export const CATALOG = {
             "never stop a protected foreign stack or another project's stack",
             "secrets stay in sops and never appear in command output",
             "stop the project's stack when the work that needs it is done"
-          ]
+          ],
+          "runtimeSide": "host"
         }
       }
     },
@@ -8372,7 +8985,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/actions.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "bridge": {
           "summary": "inspect and govern cross-workflow dependencies and shared ownership",
@@ -8547,7 +9161,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/bridge.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "channel": {
           "summary": "register, inspect, and answer the Supervisor owner-message channel",
@@ -8636,7 +9251,51 @@ export const CATALOG = {
             "lead",
             "coordinator",
             "owner"
-          ]
+          ],
+          "runtimeSide": "host"
+        },
+        "decide": {
+          "summary": "answer one item of the Supervisor's menu with one typed choice",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "item",
+              "type": "string",
+              "summary": "id of the open menu item, as starci supervisor status prints it"
+            },
+            {
+              "name": "choice",
+              "type": "string",
+              "summary": "the choice of that item to take"
+            },
+            {
+              "name": "reason",
+              "type": "string",
+              "summary": "why this choice, with the evidence: it is the record and the notice"
+            },
+            {
+              "name": "text",
+              "type": "string",
+              "summary": "the input the choice names: a commit, a pool, a ruling, a workflow or a cause slug"
+            }
+          ],
+          "exit": {
+            "0": "the choice was executed and the item closed",
+            "1": "the choice is not on the menu, an input is missing, or a step failed",
+            "2": "bad usage"
+          },
+          "json": "flag",
+          "examples": [
+            "starci supervisor decide --item gate-ruling:<id> --choice not-runtime-fault --reason <evidence>",
+            "starci supervisor decide --item workflow-conflict:<id> --choice rule --text <ruling> --reason <why>"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/supervisor/decide.mjs"
+          },
+          "runtimeSide": "host"
         },
         "direct-commits": {
           "summary": "find runtime main commits that bypassed the exclusive land gate",
@@ -8663,7 +9322,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/direct-commits.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "gate-stability": {
           "summary": "compare explicitly selected current gates against accepted work in live workflows",
@@ -8716,7 +9376,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/gate-stability.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "gc": {
           "summary": "inspect or collect leftover workers, shells, lanes, temp data, leases, and logs",
@@ -8769,7 +9430,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/gc.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "land": {
           "summary": "run the in-runtime land gate; it fast-forwards local main and never pushes",
@@ -8810,6 +9472,11 @@ export const CATALOG = {
               "type": "boolean",
               "summary": "file the land outcome in the Supervisor inbox"
             },
+            {
+              "name": "foreground",
+              "type": "boolean",
+              "summary": "wait for the land in this process; without it the land runs in a detached child that outlives the caller's command window"
+            },
             {
               "name": "status",
               "type": "boolean",
@@ -8842,7 +9509,8 @@ export const CATALOG = {
             "coordinator",
             "owner",
             "release"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "lesson-actions": {
           "summary": "land, revert, or propose changes from the Supervisor self-learning loop",
@@ -8947,7 +9615,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/lesson-actions.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "notify": {
           "summary": "deliver a durable Supervisor ruling to one workflow Kernel",
@@ -9001,7 +9670,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/notify.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "owed": {
           "summary": "inspect and acknowledge work that running workflows owe the Supervisor",
@@ -9071,7 +9741,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/owed.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "poll": {
           "summary": "stream or print a read-only Supervisor digest of workflow progress and blockers",
@@ -9118,7 +9789,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/poll.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "push": {
           "summary": "run full repository suites and push clean main branches",
@@ -9151,7 +9823,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/push-git.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "push-mains": {
           "summary": "scan and push main for the configured product repositories (not the runtime)",
@@ -9189,7 +9862,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/push-mains.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "ram-cap": {
           "summary": "inspect or override RAM-aware workflow dispatch priorities",
@@ -9244,7 +9918,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/ram-cap.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "report": {
           "summary": "render or send the owner's detailed workflow progress report",
@@ -9277,7 +9952,51 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/progress-report.mjs"
-          }
+          },
+          "runtimeSide": "host"
+        },
+        "revision-ack": {
+          "summary": "read the files a runtime revision change sends to the Supervisor and attest them",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "plan",
+              "type": "boolean",
+              "summary": "return the files this revision change sends to the Supervisor, with their hashes, without acknowledging"
+            },
+            {
+              "name": "rev",
+              "type": "string",
+              "summary": "exact current Git SHA of the runtime revision the plan names"
+            },
+            {
+              "name": "digest",
+              "type": "string",
+              "summary": "the readToken --plan returned, after every file it lists was read (no file needed)"
+            },
+            {
+              "name": "read-manifest",
+              "type": "string",
+              "summary": "regular JSON file holding the exact manifest --plan returned, after every file in it was read"
+            }
+          ],
+          "exit": {
+            "0": "planned or acknowledged",
+            "1": "refused",
+            "2": "bad usage: --plan, or --rev with --read-manifest"
+          },
+          "json": "flag",
+          "examples": [
+            "starci supervisor revision-ack --plan",
+            "starci supervisor revision-ack --rev <rev> --read-manifest <file>"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/supervisor/revision-ack.mjs"
+          },
+          "runtimeSide": "host"
         },
         "start": {
           "summary": "enable and start the one long-lived Supervisor seat",
@@ -9310,29 +10029,49 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/start-supervisor.mjs"
-          }
+          },
+          "internalFlags": [
+            {
+              "name": "replace",
+              "pointer": "the watchdog replaces a dead seat itself; to reload the standing prompt run starci supervisor stop, then starci supervisor start"
+            },
+            {
+              "name": "rotate",
+              "pointer": "the watchdog rotates an idle Supervisor itself (scripts/supervisor/supervisor-rotation.mjs); to reload the standing prompt run starci supervisor stop, then starci supervisor start"
+            },
+            {
+              "name": "restart",
+              "pointer": "run starci supervisor stop, then starci supervisor start"
+            }
+          ],
+          "runtimeSide": "host"
         },
         "status": {
-          "summary": "print whether the Supervisor seat is enabled and healthy",
+          "summary": "print the Supervisor seat status and its menu of open judgment points",
           "owner": "runtime",
-          "flags": [],
+          "flags": [
+            {
+              "name": "menu",
+              "type": "boolean",
+              "summary": "print only the menu of open items and the spelling of the decision verb"
+            }
+          ],
           "exit": {
             "0": "status printed",
             "2": "bad usage"
           },
           "json": "flag",
           "examples": [
-            "starci supervisor status"
+            "starci supervisor status",
+            "starci supervisor status --json"
           ],
           "editions": [
             "full"
           ],
           "impl": {
-            "script": "scripts/supervisor/start-supervisor.mjs",
-            "args": [
-              "--status"
-            ]
-          }
+            "script": "scripts/supervisor/status.mjs"
+          },
+          "runtimeSide": "host"
         },
         "stop": {
           "summary": "disable the Supervisor seat, stop its worker and release it",
@@ -9355,7 +10094,8 @@ export const CATALOG = {
             "args": [
               "--stop"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "telegram-bridge": {
           "summary": "start, run, inspect, or stop the Supervisor Telegram bridge",
@@ -9390,7 +10130,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/telegram-bridge.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "tell": {
           "summary": "send a desktop message to the Supervisor or read its recent replies",
@@ -9450,7 +10191,8 @@ export const CATALOG = {
             "lead",
             "coordinator",
             "owner"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "watchdog": {
           "summary": "run one reconciler-owned Supervisor seat liveness pass",
@@ -9478,7 +10220,18 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/supervisor-watchdog.mjs"
-          }
+          },
+          "internalFlags": [
+            {
+              "name": "replace",
+              "pointer": "the pass replaces a dead seat itself; to reload the standing prompt run starci supervisor stop, then starci supervisor start"
+            },
+            {
+              "name": "restart",
+              "pointer": "run starci supervisor stop, then starci supervisor start"
+            }
+          ],
+          "runtimeSide": "host"
         },
         "workers": {
           "summary": "create, launch, inspect, report, and clean up Supervisor repair workers",
@@ -9621,7 +10374,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/supervisor/workers.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -9661,7 +10415,8 @@ export const CATALOG = {
           ],
           "conventions": [
             "only the runtime-owned harness app, harness tunnel and reconciler tasks are listed"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "register": {
           "summary": "print or apply one runtime scheduled-task registration",
@@ -9714,42 +10469,131 @@ export const CATALOG = {
             "registration is idempotent, per-user and limited-privilege; it never needs administrator rights",
             "task actions invoke starci through the current user's .starci/bin shim (starci runtime link writes it)",
             "harness-app runs starci harness start; its Windows task name is statusApp.task of modules/models/runtimes.yaml, the name the reconciler restarts"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "show": {
           "summary": "show state, runs, result and action for one runtime scheduled task",
           "owner": "runtime",
           "positional": [
             {
-              "name": "name",
-              "enum": [
-                "harness-app",
-                "harness-tunnel",
-                "reconciler"
-              ],
-              "required": true,
-              "variadic": false
+              "name": "name",
+              "enum": [
+                "harness-app",
+                "harness-tunnel",
+                "reconciler"
+              ],
+              "required": true,
+              "variadic": false
+            }
+          ],
+          "flags": [],
+          "exit": {
+            "0": "task details listed",
+            "1": "Task Scheduler could not be read",
+            "2": "bad usage or unknown task name"
+          },
+          "json": "starci/task-show@1",
+          "examples": [
+            "starci task show reconciler",
+            "starci task show harness-tunnel --json"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "module": "scripts/machine/task-verbs.mjs",
+            "export": "taskShow"
+          },
+          "effect": "read",
+          "roles": [
+            "worker",
+            "lead",
+            "coordinator",
+            "release",
+            "owner"
+          ],
+          "conventions": [
+            "names select only the runtime-owned harness app, harness tunnel and reconciler tasks"
+          ],
+          "runtimeSide": "host"
+        }
+      }
+    },
+    "test": {
+      "summary": "run the bounded L1-L4 test ladder without accidental whole-suite work",
+      "owner": "runtime",
+      "verbs": {
+        "affected": {
+          "summary": "the specs related to the changed functions (--by file: every importer); --run runs each once",
+          "owner": "runtime",
+          "positional": [],
+          "flags": [
+            {
+              "name": "base",
+              "type": "string",
+              "summary": "ref to diff against (default: the merge-base with main, else origin/main)"
+            },
+            {
+              "name": "changed",
+              "type": "list",
+              "summary": "explicit changed repository paths instead of the diff"
+            },
+            {
+              "name": "by",
+              "type": "string",
+              "summary": "symbol (default: the specs related to the changed functions) or file (every spec importing a changed file)"
+            },
+            {
+              "name": "run",
+              "type": "boolean",
+              "summary": "run the selected spec files, one per process, inside the time budget"
+            },
+            {
+              "name": "plan",
+              "type": "boolean",
+              "summary": "print the selected files with the reason each is in the set; run nothing"
+            },
+            {
+              "name": "receipt-file",
+              "type": "string",
+              "summary": "with --run, write the receipt to this file; the answer carries its path (a gate reads the file, not the output)"
+            },
+            {
+              "name": "no-cache",
+              "type": "boolean",
+              "summary": "run every selected file; ignore the per-spec result cache"
+            },
+            {
+              "name": "concurrency",
+              "type": "number",
+              "summary": "override automatic file concurrency with a positive integer"
+            },
+            {
+              "name": "root",
+              "type": "string",
+              "summary": "repository root (default: the command cwd)"
             }
           ],
-          "flags": [],
           "exit": {
-            "0": "task details listed",
-            "1": "Task Scheduler could not be read",
-            "2": "bad usage or unknown task name"
+            "0": "selection printed, or every selected file passed",
+            "1": "a selected spec file was red",
+            "2": "no base to diff against, or the time budget ended before every selected file started"
           },
-          "json": "starci/task-show@1",
+          "json": "starci/test-affected@1",
           "examples": [
-            "starci task show reconciler",
-            "starci task show harness-tunnel --json"
+            "starci test affected",
+            "starci test affected --run",
+            "starci test affected --changed scripts/machine/ladder-test.mjs --run"
           ],
           "editions": [
             "full"
           ],
           "impl": {
-            "module": "scripts/machine/task-verbs.mjs",
-            "export": "taskShow"
+            "module": "scripts/supervisor/affected-test.mjs",
+            "export": "testAffected"
           },
-          "effect": "read",
+          "effect": "host",
           "roles": [
             "worker",
             "lead",
@@ -9758,15 +10602,20 @@ export const CATALOG = {
             "owner"
           ],
           "conventions": [
-            "names select only the runtime-owned harness app, harness tunnel and reconciler tasks"
-          ]
-        }
-      }
-    },
-    "test": {
-      "summary": "run the bounded L1-L4 test ladder without accidental whole-suite work",
-      "owner": "runtime",
-      "verbs": {
+            "Everyday verification after npm run check; the whole suite is the merged-tree run and the release cut.",
+            "The set is computed - each changed .mjs symbol is followed by name through its importers, callers and CLI verbs.",
+            "What cannot be followed by name (yaml, templates, load-time statements, no base, the depth bound) keeps the file-level rule, named in the report.",
+            "Selection and --plan JSON carry every symbol, its specs and reasons, and file-level fallbacks; the set is never larger than --by file.",
+            "A --run machine answer carries the complete selected set, every result and the receipt; the diagnostic graph remains available through --plan.",
+            "A large set is never refused; it runs in parallel shards inside the printed time budget, and files not started when it ends are listed.",
+            "The --plan flag prints each selected file with the reason it is in the set; a --run answer carries a receipt (base, tip, passed, total) a gate can require.",
+            "A generated output maps to its generator's specs; an append-only change to a data file to the specs that name it or its readers.",
+            "A red file is fixed and run again, then the affected set once; never the whole suite.",
+            "A spec whose key (import closure, data it names, runner) is unchanged since a green run is reused; the receipt counts reused files; --no-cache runs all.",
+            "Each file is its own low-priority node process with the four preloads, at the concurrency of test-concurrency.yaml."
+          ],
+          "runtimeSide": "tree"
+        },
         "run": {
           "summary": "run the specs selected for one local ladder level",
           "owner": "runtime",
@@ -9849,7 +10698,8 @@ export const CATALOG = {
             "A red L2 or L3 selection is re-run once serially; a green re-run is recorded as a flake, never skipped.",
             "File concurrency uses fresh idle CPU and free RAM under modules/supervisor/test-concurrency.yaml; --concurrency overrides it.",
             "The result and spec log retain the concurrency decision and host measurements."
-          ]
+          ],
+          "runtimeSide": "tree"
         }
       }
     },
@@ -9915,7 +10765,8 @@ export const CATALOG = {
             "Use L1 while working, L2 before asking for a land, and L3 when an IO slot changed.",
             "L1 checks projects holding changed files, L2 and L3 check affected projects, and L4 checks every project.",
             "Runtime JavaScript uses node --check; product TypeScript always uses tsc --noEmit through the Node API owner."
-          ]
+          ],
+          "runtimeSide": "tree"
         }
       }
     },
@@ -9990,16 +10841,18 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/uat/assisted-runner.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "slots": {
-          "summary": "inspect UAT slots or run a command while holding one",
+          "summary": "inspect UAT slots, end the ones whose lessee is gone, or run a command while holding one",
           "owner": "runtime",
           "positional": [
             {
               "name": "action",
               "enum": [
                 "status",
+                "collect",
                 "run"
               ],
               "required": true,
@@ -10012,6 +10865,11 @@ export const CATALOG = {
             }
           ],
           "flags": [
+            {
+              "name": "dry-run",
+              "type": "boolean",
+              "summary": "collect only lists the slots it would end"
+            },
             {
               "name": "record-dir",
               "type": "string",
@@ -10027,6 +10885,7 @@ export const CATALOG = {
           "json": "none",
           "examples": [
             "starci uat slots status",
+            "starci uat slots collect --dry-run",
             "starci uat slots run --record-dir <dir> -- npm test"
           ],
           "editions": [
@@ -10034,7 +10893,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/uat/uat-slots.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -10077,7 +10937,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/asset-slot.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "brand": {
           "summary": "derive or verify the canonical brand Work record",
@@ -10125,7 +10986,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/brand/brand.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "brand-direction": {
           "summary": "inspect, ask for, or apply owner review of a brand direction",
@@ -10189,7 +11051,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/brand-direction.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "brand-palette": {
           "summary": "emit a brand palette prompt or check rendered images against it",
@@ -10230,7 +11093,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/brand/brand-palette.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "check-example-work": {
           "summary": "check the layout, ids, refs and evidence of every example Work tree",
@@ -10250,7 +11114,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/validate/check-example-work.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "compose-direction": {
           "summary": "place drawn content into its measured page or overlay shell",
@@ -10351,7 +11216,74 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/compose-direction.mjs"
-          }
+          },
+          "runtimeSide": "host"
+        },
+        "decision-critic": {
+          "summary": "judge a decision leg with the Critic and write a verdict (debug aid; settle ignores it)",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "kind",
+              "type": "enum",
+              "enum": [
+                "scope.define",
+                "business.decide",
+                "architecture.decide"
+              ],
+              "required": true,
+              "summary": "the decision leg whose records are judged"
+            },
+            {
+              "name": "root",
+              "type": "string",
+              "required": true,
+              "summary": "the work root (.starciwork) or the repository that holds it"
+            },
+            {
+              "name": "out",
+              "type": "string",
+              "required": true,
+              "summary": "the verdict file to write (for a person to read; the settle never reads it)"
+            },
+            {
+              "name": "records",
+              "type": "string",
+              "summary": "comma-separated decision record files or directories to judge; default every decision record of the kind under the work root"
+            },
+            {
+              "name": "input",
+              "type": "string",
+              "summary": "comma-separated extra input files the decision rests on, such as the goal or request text"
+            },
+            {
+              "name": "maker",
+              "type": "string",
+              "summary": "provider that made the records; default the provider of the op running this verb"
+            },
+            {
+              "name": "json",
+              "type": "boolean",
+              "summary": "print the outcome as JSON"
+            }
+          ],
+          "exit": {
+            "0": "judged and the verdict passes",
+            "1": "judged and the verdict fails - fix every failed check and run it again",
+            "2": "bad usage",
+            "3": "no verdict - a Critic hold; report blocked with the CRITIC_ code"
+          },
+          "json": "flag",
+          "examples": [
+            "starci work decision-critic --kind scope.define --root <app> --out <STARCI_JOB_SCRATCH>/critic-verdict.json"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/work/decision-critic.mjs"
+          },
+          "runtimeSide": "host"
         },
         "draw-acceptance": {
           "summary": "verify that drawn assets are accepted render shapes",
@@ -10388,7 +11320,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw/draw-acceptance.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-dna": {
           "summary": "compare a rendered drawing with grammar DNA",
@@ -10427,7 +11360,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw/draw-dna.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-feedback": {
           "summary": "build, inspect, check, or classify drawing feedback",
@@ -10518,7 +11452,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw-feedback.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-gates": {
           "summary": "run machine and owner gates for a drawn UI record",
@@ -10566,7 +11501,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw-gates.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-grammar": {
           "summary": "resolve the grammar package used by a drawing",
@@ -10614,7 +11550,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw-grammar.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-layer": {
           "summary": "verify that drawings are isolated content layers",
@@ -10647,7 +11584,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw/draw-layer.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-loop": {
           "summary": "render, score, inspect, finish, or verify an iterative drawing loop",
@@ -10787,7 +11725,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw-loop.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-rationale": {
           "summary": "verify the rationale bound to a rendered drawing",
@@ -10830,7 +11769,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw/draw-rationale.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-render": {
           "summary": "render HTML or a drawing component at declared viewports",
@@ -10954,7 +11894,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw-render.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-review": {
           "summary": "inspect, ask for, or apply owner review of a drawing",
@@ -11023,7 +11964,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw-review.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-source": {
           "summary": "validate a drawing source and its fixture bindings",
@@ -11082,7 +12024,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw/draw-source.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "draw-taste": {
           "summary": "check a rendered drawing against visual taste rules",
@@ -11114,7 +12057,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/draw/draw-taste.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "evidence-binding": {
           "summary": "prove that every done leaf's evidence still binds to the source it claims",
@@ -11141,7 +12085,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/validate/check-evidence-binding.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "example-critique": {
           "summary": "derive example critique records from a Work tree",
@@ -11173,7 +12118,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/example/example-critique.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "example-derive": {
           "summary": "derive example catalog artifacts from a Work tree",
@@ -11205,7 +12151,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/example/example-derive.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "example-evidence": {
           "summary": "collect evidence for one example Work record",
@@ -11250,7 +12197,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/example/example-evidence.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "example-verify": {
           "summary": "replay and verify evidence for one example Work record",
@@ -11289,7 +12237,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/example/example-verify.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "grammar-geometry": {
           "summary": "emit grammar geometry guidance or check captured geometry",
@@ -11337,7 +12286,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/ui/grammar-geometry.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "grammar-knowledge": {
           "summary": "compare or refresh measured grammar knowledge",
@@ -11363,7 +12313,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/ui/grammar-knowledge.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "grammar-proposal": {
           "summary": "list or check grammar proposals in Work records",
@@ -11400,7 +12351,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/grammar-proposal.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "grammar-registry-pin": {
           "summary": "check a frontend grammar dependency against the registry pin",
@@ -11427,7 +12379,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/ui/grammar-registry-pin.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "graph": {
           "summary": "inspect, validate, diff or propose a workflow work graph",
@@ -11508,7 +12461,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/work-graph.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "hygiene": {
           "summary": "parse, scope-validate and secret-check Work and stack files before they are committed",
@@ -11551,7 +12505,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/validate/work-hygiene.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "imagegen": {
           "summary": "generate images headlessly on the imagegen call tier and write them with a receipt",
@@ -11611,7 +12566,80 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/imagegen.mjs"
-          }
+          },
+          "runtimeSide": "host"
+        },
+        "layout-render": {
+          "summary": "serve the product app and capture one layout in a real browser with its page slot keyed",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "work",
+              "type": "string",
+              "summary": "the .starciwork root that holds the shell record"
+            },
+            {
+              "name": "node",
+              "type": "string",
+              "summary": "layout node id to render"
+            },
+            {
+              "name": "breakpoint",
+              "type": "string",
+              "summary": "breakpoint of the capture"
+            },
+            {
+              "name": "theme",
+              "type": "string",
+              "summary": "theme of the capture"
+            },
+            {
+              "name": "app",
+              "type": "string",
+              "summary": "app name when the shell has several apps"
+            },
+            {
+              "name": "route",
+              "type": "string",
+              "summary": "path to load; default the node's url with the locale filled by the product locale"
+            },
+            {
+              "name": "locale",
+              "type": "string",
+              "summary": "locale that fills the locale segment of the route"
+            },
+            {
+              "name": "slot",
+              "type": "string",
+              "summary": "CSS selector of the page slot, exactly one match; default main"
+            },
+            {
+              "name": "out",
+              "type": "string",
+              "summary": "directory for the capture and the server log; default a temp directory"
+            },
+            {
+              "name": "write",
+              "type": "boolean",
+              "summary": "record the capture in the layout tree as layout-tree capture does"
+            }
+          ],
+          "exit": {
+            "0": "rendered",
+            "1": "no render could be produced: code SHELL_RENDER_UNAVAILABLE with a typed cause, the failing URL and the redirect chain",
+            "2": "bad usage"
+          },
+          "json": "flag",
+          "examples": [
+            "starci work layout-render --work .starciwork --node \"/[locale]\" --breakpoint desktop --theme light --write --json"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "script": "scripts/work/layout-render.mjs"
+          },
+          "runtimeSide": "host"
         },
         "layout-tree": {
           "summary": "scan, capture, plan, lock, or inspect a product layout tree",
@@ -11759,7 +12787,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/layout-tree.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "render-proof": {
           "summary": "render a proof document for one Work record",
@@ -11792,7 +12821,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/render-proof.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "shell-conformance": {
           "summary": "check Work and implementation records against the measured frontend shell",
@@ -11819,7 +12849,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/ui/shell-conformance.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "ui-proof-brief": {
           "summary": "emit a UI proof brief or score a rendered surface",
@@ -11872,7 +12903,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/work/ui/ui-proof-brief.mjs"
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     },
@@ -11929,7 +12961,8 @@ export const CATALOG = {
             "always finish a worker with starci worker close; release alone is not complete cleanup",
             "--stop-first requires positive caller knowledge that the Dispatch is still working",
             "success requires release, terminal-close and process-exit proof"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "list": {
           "summary": "list supervised workers or working-agent counts by worktree lane",
@@ -11985,7 +13018,8 @@ export const CATALOG = {
           ],
           "conventions": [
             "use --by-lane to see how many agents of each type work in each worktree"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "read": {
           "summary": "read a bounded tail of one supervised worker's output",
@@ -12032,7 +13066,8 @@ export const CATALOG = {
           ],
           "conventions": [
             "read by Dispatch id so Orca can use the exact transcript or its labelled terminal fallback"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "release": {
           "summary": "release settled Orca worker accounting without claiming full cleanup",
@@ -12071,7 +13106,8 @@ export const CATALOG = {
           "conventions": [
             "release is retained for lifecycle recovery; normal completion always uses starci worker close",
             "release alone can leave an agent terminal and process running"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "show": {
           "summary": "show one supervised worker and Orca's exact liveness observation",
@@ -12111,7 +13147,8 @@ export const CATALOG = {
           ],
           "conventions": [
             "address a worker by Dispatch id, never by its terminal title"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "start": {
           "summary": "start one supervised agent in a registered worktree in an Orca run",
@@ -12188,7 +13225,8 @@ export const CATALOG = {
             "stagger starts by about 30 seconds and assign one Codex worker to each disjoint chunk",
             "create the caller Run in this same terminal before starting its workers",
             "always finish the worker with starci worker close; release alone is not complete cleanup"
-          ]
+          ],
+          "runtimeSide": "host"
         },
         "stop": {
           "summary": "stop a supervised worker that Orca still reports as working",
@@ -12226,7 +13264,8 @@ export const CATALOG = {
           ],
           "conventions": [
             "stop only a working Dispatch; finish cleanup with starci worker close"
-          ]
+          ],
+          "runtimeSide": "host"
         }
       }
     },
@@ -12257,7 +13296,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/goal/assess.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "bias": {
           "summary": "normalize a routing bias or extract one from the owner's text",
@@ -12290,7 +13330,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/agent/bias.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "custody": {
           "summary": "show a workflow tree against its branch and preserved work; --apply moves it onto them",
@@ -12310,7 +13351,7 @@ export const CATALOG = {
             {
               "name": "apply",
               "type": "boolean",
-              "summary": "move a tree that is behind its branch onto it (its own work preserved), or make a missing one at the branch; refused while an op is in flight"
+              "summary": "move a tree that is behind its branch onto it (its own work preserved), or make a missing one at the branch; refused while an op has a live worker; the admitted attempts whose tree path was lost are rebound to the tree or ended placement-lost"
             }
           ],
           "exit": {
@@ -12328,7 +13369,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/kernel/workflow-custody-cli.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "define": {
           "summary": "define a goal — assess the prompt, plan the op chain, queue it in the ledger inbox",
@@ -12426,7 +13468,75 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/goal/define-goal.mjs"
-          }
+          },
+          "runtimeSide": "host"
+        },
+        "purge": {
+          "summary": "remove what an archived workflow left on the host (plan by default)",
+          "owner": "runtime",
+          "flags": [
+            {
+              "name": "repo",
+              "type": "string",
+              "summary": "repository whose .starciwork ledger holds the workflow (default: the working directory)"
+            },
+            {
+              "name": "workflow",
+              "type": "string",
+              "required": true,
+              "summary": "the workflow_id of an archived workflow"
+            },
+            {
+              "name": "plan",
+              "type": "boolean",
+              "summary": "print what would be removed and change nothing (the default)"
+            },
+            {
+              "name": "apply",
+              "type": "boolean",
+              "summary": "remove the planned set"
+            },
+            {
+              "name": "ledger",
+              "type": "boolean",
+              "summary": "also archive the workflow's ledger rows to a verified zip and drop them"
+            },
+            {
+              "name": "expect",
+              "type": "string",
+              "summary": "with --apply, refuse unless the plan still starts with this sha (12 characters or more)"
+            }
+          ],
+          "exit": {
+            "0": "plan printed, or the purge finished (or was already done)",
+            "1": "a precondition refused it, or a step failed and the purge can be resumed",
+            "2": "bad usage"
+          },
+          "json": "flag",
+          "examples": [
+            "starci workflow purge --repo <repo> --workflow <id>",
+            "starci workflow purge --repo <repo> --workflow <id> --apply --expect <sha>"
+          ],
+          "editions": [
+            "full"
+          ],
+          "impl": {
+            "module": "scripts/kernel/workflow-purge.mjs",
+            "export": "workflowPurge"
+          },
+          "effect": "host",
+          "roles": [
+            "owner"
+          ],
+          "conventions": [
+            "the plan is the default and changes nothing; --apply acts, under the host lock and the gc lock",
+            "only an archived workflow with no live job, lease, seat or worker is purged; Orca must answer",
+            "trees, refs, workers and terminals go through the worktree home, the git api and worker-close; never a raw recursive delete",
+            "a branch is deleted only with its proof (registry row, or name grammar with a tip in main or on the workflow's checkpoint chain); the plan prints every tip",
+            "what the ledger or Orca cannot tie to the workflow by evidence is listed and never touched",
+            "the ledger rows are kept unless --ledger archives them to a verified zip and drops them"
+          ],
+          "runtimeSide": "host"
         },
         "start": {
           "summary": "ensure the host, then claim an approved goal and boot its Kernel",
@@ -12480,7 +13590,8 @@ export const CATALOG = {
           ],
           "impl": {
             "script": "scripts/kernel/start-workflow.mjs"
-          }
+          },
+          "runtimeSide": "host"
         },
         "status": {
           "summary": "the workflow projection — phase, frontier, leases and pending owner asks",
@@ -12515,7 +13626,8 @@ export const CATALOG = {
             "args": [
               "status"
             ]
-          }
+          },
+          "runtimeSide": "host"
         },
         "stop": {
           "summary": "stop a workflow — archive it, drop open jobs and retire its asks (the owner stop)",
@@ -12566,7 +13678,8 @@ export const CATALOG = {
             "args": [
               "archive"
             ]
-          }
+          },
+          "runtimeSide": "host"
         }
       }
     }