@succsoft/succapp 5.0.8 → 5.0.9

package/dist/cli/l10n/bundle.l10n.json

@@ -1,71 +1,38 @@
 {
 	"common.err.unexpected": "Unexpected error.",
-	"err.workspace.required": "No SuccApp workspace is available. Open an existing SuccApp workspace or initialize the current folder first.",
-	"err.workspace.activeFileRequired": "Open a file before {actionName}.",
-	"err.base.cancel": "Cancelled.",
-	"err.net.connectionFailed": "Cannot connect to server: {url}{causeMessage}",
-	"err.net.connectionFailed.desc": "Check the server address and network connection, then retry or log in again.",
-	"err.cluster.nodeUnavailable": "Cluster node {clusterNode} is unavailable.",
-	"err.cluster.nodeUnavailable.desc": "The node may not be running, may have left the current cluster, or may be unreachable. Check its status and network connection, then retry.",
-	"err.server.notReady": "Server is not ready",
-	"err.server.notReady.desc": "The server has not completed startup and initialization.",
-	"err.server.notReady.hint": "Wait a moment and retry. If this persists, check the server status and logs.",
-	"err.server.capabilityUnsupported": "Server {serverUrl} does not support capability {capability}.",
-	"err.server.capabilityUnsupported.desc": "Upgrade the server to a version that provides this Dev Tool capability, then retry.",
-	"err.server.clusterNodeNotFound": "Cluster node {nodeId} is not in the current snapshot.",
-	"err.server.clusterNodeNotFound.desc": "Run 'succapp server cluster list' first to confirm the node ID.",
-	"err.server.threadNotFound": "Thread {threadId} no longer exists.",
-	"err.server.threadNotFound.desc": "Run 'succapp server thread list' again to obtain a current thread snapshot.",
-	"err.server.threadTaskChanged": "The cancelable task on thread {threadId} has changed.",
-	"err.server.threadTaskChanged.desc": "Inspect the thread again and use its current cancel serial.",
-	"err.server.threadNotCancelable": "Thread {threadId} has no cancelable product task.",
-	"err.login.notlogin": "Authentication failed, please log in again",
-	"err.login.notlogin.hint": "Log in again, then retry the command.",
-	"err.login.busy": "The system is busy. Please try later!",
-	"err.login.busy.desc": "Possible causes include license limits on sessions or users, or database connection/query failures.",
-	"err.oauth2.tokenExpired": "OAuth2 access token expired.",
-	"err.login.oauthTimeout": "OAuth2 authorization timed out.",
-	"err.login.oauthTimeout.desc": "Restart login, complete authorization in the browser, or use PAT login in environments without a browser.",
-	"err.login.oauthStateMismatch": "OAuth2 authorization state does not match.",
-	"err.login.oauthStateMismatch.desc": "Restart login and complete authorization from the newly opened browser page.",
-	"err.login.oauthInvalidCallback": "Invalid OAuth2 authorization callback.",
-	"err.login.oauthInvalidCallback.desc": "Restart login and complete authorization in the browser.",
-	"err.login.oauthLoopbackFailed": "Cannot start local OAuth2 callback server.",
-	"err.login.oauthLoopbackFailed.desc": "Check whether local loopback access is blocked, then retry or use PAT login.",
-	"err.login.oauthTokenInvalid": "Invalid OAuth2 token response.",
-	"err.login.oauthTokenInvalid.desc": "Check the server version and OAuth2 configuration, then retry.",
-	"err.sync.conflict": "Remote version has changed: {remotePath}",
-	"err.sync.conflict.desc": "Please pull or diff before pushing. Reason: {reason}",
-	"err.sync.projectUnavailable": "Cannot {actionName} unavailable remote project(s): {paths}",
-	"err.sync.projectUnavailable.desc": "Check the server, user, project permissions, and project name before retrying.",
-	"err.sync.projectUnavailable.hint": "Run 'succapp server project list' to see projects visible to the current login, then retry with an exact project name.",
-	"err.sync.projectNotFound": "Workspace project does not exist: {projectNames}",
-	"err.sync.projectRootRenameUnsupported": "Cannot {actionName} renamed remote project(s): {paths}",
-	"err.sync.projectRootRenameUnsupported.desc": "Applying a project rename is not supported yet. Re-clone the renamed project or rename it locally to match.",
-	"err.sync.pathOutOfScope": "This file is not within the sync scope: {remotePath}",
-	"err.extension.sysdataNotCloned": "Cannot create an extension because the sysdata project is not cloned in this workspace.",
-	"err.extension.sysdataNotCloned.desc": "Clone the sysdata project, then retry.",
-	"err.extension.templateUnavailable": "The connected server has not provided any extension template.",
-	"err.extension.rootUnresolved": "Cannot resolve extension root from input.",
-	"err.extension.rootUnresolved.desc": "Provide an extensionName or a path inside an extension.",
-	"err.extension.rootNotFound": "Extension directory does not exist: {extensionRoot}",
-	"err.workspace.problem": "Workspace sync problem detected.",
-	"err.workspace.problem.desc": "Run 'succapp workspace repair --dry-run' or 'succapp workspace repair' before retrying operations that require a complete local sync baseline.",
-	"err.net.invalidUrl": "Invalid URL: {url}",
-	"err.meta.invalidPath": "Invalid metadata path",
-	"err.meta.invalidPath.desc": "Use a valid absolute metadata path and try again.",
-	"err.meta.invalidPath.relativeSearchQuery": "Relative search paths are not supported: {path}",
-	"err.meta.invalidPath.relativeSearchQuery.hint": "Use an absolute path beginning with '/', or a file name without '/'.",
-	"err.meta.invalidPath.parentDirGlob": "Glob wildcards are not supported in --parent-dir: {path}",
-	"err.meta.invalidPath.parentDirGlob.hint": "--parent-dir already searches recursively. Use --path='/DIR/*' to match direct children or --path for another glob.",
-	"err.meta.invalidPath.parentProjectMismatch": "Parent directory {path} does not belong to project {projectName}.",
-	"err.meta.invalidPath.parentProjectMismatch.hint": "Use a parent directory whose first path segment matches --project.",
-	"err.meta.projectExist": "A project with the same name already exists.",
-	"err.meta.projectname.illegal": "Invalid project name. Use letters, numbers, and underscores only, and keep it within 16 characters.",
-	"err.meta.projectname.reservedwords": "This project name is reserved by the system.",
+	"err.base.invalidParameter": "The parameters are invalid",
+	"err.base.invalidParameter.exactlyOne": "Exactly one component identity is required: --component or --component-type.",
+	"err.base.invalidParameter.exactlyOne.hint": "Use --component=<id> for a component in a server page, or --component-type=<type> for a type query; do not supply both.",
+	"err.base.invalidParameter.unknownMethod": "The current component does not declare method \"{value}\".",
+	"err.base.invalidParameter.unknownMethod.hint": "Run succapp dev component-method list <target> with the same --component or --component-type, then use an exact method ID from the result.",
+	"err.base.invalidParameter.notInUsage": "Property \"{value}\" is not a candidate for usage \"{usage}\".",
+	"err.base.invalidParameter.notInUsage.hint": "Keep the same component identity and add --usage=metadata to check all static properties. If found, inspect it with that usage; otherwise check the property name, component type and matching DTS.",
+	"err.base.invalidParameter.unknownComponentType": "Unknown component type: {value}.",
+	"err.base.invalidParameter.unknownType.hint": "Run succapp dev component list <target> --json to find applicable types. Check the exact type name and, for property queries, the --kind category.",
+	"err.base.invalidParameter.unknownComponent": "Component ID {value} was not found in the saved server page.",
+	"err.base.invalidParameter.unknownComponent.hint": "Inspect the saved server page with succapp server file show <target>. Use the component ID rather than its caption; push local changes before querying new components.",
+	"err.base.invalidParameter.ambiguousComponent": "Component ID {value} matches more than one component in the server page.",
+	"err.base.invalidParameter.ambiguousComponent.hint": "Give components unique IDs, push the corrected page and retry with the intended component ID.",
+	"err.base.invalidParameter.unknownLayout": "Unknown layout type: {value}.",
+	"err.base.invalidParameter.unknownLayout.hint": "Use dev layout list to check layout IDs for the same component. If the server has no definition, check the corresponding layout extension.",
+	"err.base.invalidParameter.unsupportedPageContext": "Component instance queries are not supported for this page or category.",
+	"err.base.invalidParameter.pageContext.hint": "Use --component only for components in saved SPG or dashboard pages. For other supported categories, query by --component-type instead.",
 	"err.file.invalidPath": "Invalid or unsafe file path: {path}",
+	"err.file.invalidPath.empty": "Path must not be empty.",
+	"err.file.invalidPath.empty.hint": "Omit the parameter to use its documented default, or use . for the current directory.",
+	"err.file.noMatch": "No local files matched: {path}",
+	"err.file.noMatch.hint": "Check the execution directory, path and filename case. Quote globs; directories must contain files the command can process. Relative paths use the execution directory after -C. Every supplied expression must match before the command can proceed.",
 	"err.file.notFound": "Path does not exist: {path}",
+	"err.file.notFound.hint": "Check the path and filename case. Relative paths use the execution directory after -C. If the file is elsewhere, use its correct local path or select the execution directory with -C.",
 	"err.file.notDirectory": "Path is not a directory: {path}",
+	"err.workspace.pathOutOfScope": "Local path is outside the metadata scope of workspace {workspace}: {path}",
+	"err.workspace.pathOutOfScope.hint": "Provide a local metadata path within the specified workspace; check the path and its base directory.",
+	"err.workspace.pathOutOfScope.notProject": "Cannot identify the file's metadata project in workspace {workspace}: {path}",
+	"err.workspace.pathOutOfScope.notProject.hint": "Check local projects with workspace project list. A folder containing only downloaded files may lack project-level .meta; see workspace project clone --help --json to prepare its project. If the file belongs to another workspace, select it with -C. Do not fabricate .meta files.",
+	"err.workspace.required": "No SuccApp workspace is available. Open an existing SuccApp workspace or initialize the current folder first.",
+	"err.workspace.activeFileRequired": "Open a file before {actionName}.",
+	"err.workspace.problem": "Workspace sync problem detected.",
+	"err.workspace.problem.desc": "Inspect and repair workspace problems before retrying operations that require a complete local synchronization baseline.",
 	"err.workspace.sameServerUrl": "New server URL must be different from the current URL.",
 	"err.workspace.serverAlreadyExists": "Server already exists: {duplicatedServer}",
 	"err.workspace.issue.E201": "workspace config is missing",
@@ -74,38 +41,45 @@
 	"err.workspace.issue.E204": "workspace active server does not match the requested server",
 	"err.workspace.issue.E205": "active server is required for this workspace maintenance task",
 	"err.workspace.issue.E206": "workspace maintenance task is not implemented",
-	"err.workspace.issue.E301": "local sync baseline resource type does not match .meta",
-	"err.workspace.issue.E302": "local sync baseline records a resource that is missing on disk",
-	"err.workspace.issue.E303": "local sync baseline .meta is missing",
-	"err.workspace.issue.E304": "local sync baseline .meta is unreadable",
-	"err.workspace.issue.E305": "workspace project is missing local sync baseline",
-	"err.workspace.issue.E306": "local sync baseline is still incomplete after fetch",
+	"err.workspace.issue.E301": "local synchronization baseline resource type does not match .meta",
+	"err.workspace.issue.E302": "local synchronization baseline records a resource that is missing on disk",
+	"err.workspace.issue.E303": "local synchronization baseline .meta is missing",
+	"err.workspace.issue.E304": "local synchronization baseline .meta is unreadable",
+	"err.workspace.issue.E305": "workspace project is missing local synchronization baseline",
+	"err.workspace.issue.E306": "local synchronization baseline is still incomplete after fetch",
 	"err.workspace.issue.E307": "current login cannot see matching project on current server",
 	"err.workspace.issue.E401": "recommended workspace settings are missing",
 	"err.workspace.issue.E402": "SuccApp .gitignore rules are missing",
 	"err.workspace.issue.E403": "AI agent workspace files are missing",
 	"err.workspace.issue.E404": "TypeScript support files are missing",
 	"err.workspace.issue.E405": "Metadata validation support files are missing",
-	"err.workspace.issue.E405.hint": "Run 'succapp workspace init --scope dev', then retry the command.",
-	"err.workspace.issue.E407": "SuccApp docs skill files are missing",
-	"err.lock.busy": "Cannot {attemptedCommand}: workspace scope {conflictScope} is held by another process.",
-	"err.lock.busy.desc": "Stop the running process and retry; locks left by crashed processes are cleaned up automatically on the next attempt.",
-	"err.lock.busy.hint": "Wait for the running SuccApp process to finish, then retry.",
-	"err.lock.compromised": "Workspace lock was taken over by another process; the current {attemptedCommand} has been aborted.",
-	"err.lock.compromised.desc": "Run 'succapp workspace status' to verify consistency before retrying.",
-	"err.workspace.activeConnectionRequired": "Cannot {actionName} without an active server connection.",
-	"err.base.operationFailed": "Operation failed",
-	"err.base.operationFailed.desc": "The operation could not be completed. Check the error details or contact the administrator.",
-	"err.net.invalidResponse": "Invalid remote response format",
-	"err.net.invalidResponse.desc": "The remote response does not match the current protocol requirements. Check the service version or contact the administrator.",
-	"err.net.invalidResponse.dbTableDescribeEmpty.hint": "Check whether data source {dataSource} and table {tableName} exist.",
-	"err.db.connectorNotFound": "Database connector is not available: {name}.",
-	"err.db.tableNotFound": "Database table does not exist: {tableName}",
+	"err.workspace.issue.E405.hint": "Initialize development support files, then retry.",
+	"err.workspace.issue.E407": "Official SuccApp documentation Skill files are missing",
+	"err.workspace.activeConnectionRequired": "Cannot {actionName} without an available server connection.",
+	"err.server.templateNotFound": "Template {id} was not found at {path} for type {type}.",
+	"err.server.themeNotFound": "Theme {theme} is not available at {target}.",
+	"err.server.startupFailed": "Server startup failed",
+	"err.server.startupFailed.desc": "Server initialization has failed; waiting alone will not resolve it.",
+	"err.server.startupFailed.hint": "Diagnose and resolve the startup failure before retrying the command.",
+	"err.server.notReady": "Server is not ready",
+	"err.server.notReady.desc": "The server has not completed startup and initialization.",
+	"err.server.notReady.hint": "Wait a moment and retry. If this persists, inspect server status and logs.",
+	"err.server.capabilityUnsupported": "Server {serverUrl} does not support capability {capability}.",
+	"err.server.capabilityUnsupported.desc": "Upgrade the server to a version that supports the required functionality, then retry.",
+	"err.server.clusterNodeNotFound": "Cluster node {nodeId} is not in the current snapshot.",
+	"err.server.clusterNodeNotFound.desc": "Check the current cluster snapshot and confirm the node ID.",
+	"err.server.threadNotFound": "Thread {threadId} no longer exists.",
+	"err.server.threadNotFound.desc": "Obtain a current thread snapshot before retrying.",
+	"err.server.threadTaskChanged": "The cancelable task on thread {threadId} has changed.",
+	"err.server.threadTaskChanged.desc": "Inspect the thread again and use its current cancellation serial.",
+	"err.server.threadNotCancelable": "Thread {threadId} has no cancelable product task.",
+	"err.server.expressionFunctionNotFound": "Expression function {name} was not found in the effective catalog.",
+	"err.cli.httpResourceNotFound": "Server resource not found (HTTP 404): {path}. Check the resource path; for DTS, follow the type index or the help entry.",
 	"err.cli.unknownCommand": "Unknown command: {commandName}",
-	"err.cli.unknownCommand.hint": "Run '{helpCommand}' to view available commands.",
-	"err.cli.unknownCommand.suggestion.hint": "Did you mean:{commands}",
+	"err.cli.unknownCommand.hint": "Check the available commands and their usage.",
 	"err.cli.invalidInvocation": "Found {count} usage issue(s).",
 	"err.cli.invalidInvocation.hint": "Fix the listed usage issues and retry.",
+	"err.cli.duplicateOption": "Option may only be specified once: {option}",
 	"err.cli.unknownOption": "Unknown option: {option}",
 	"err.cli.missingOptionValue": "Option requires a value: {option}",
 	"err.cli.unexpectedOptionValue": "Option does not take a value: {option}",
@@ -133,6 +107,8 @@
 	"err.cli.invalidChoice.hint": "Expected one of: {allowedValues}.",
 	"err.cli.invalidChoice.namedLogger": "Invalid logger name: {value}.",
 	"err.cli.invalidChoice.namedLogger.hint": "Use an exact named logger; root and wildcards are not allowed.",
+	"err.cli.invalidChoice.labelFilter": "Invalid label expression: {value}.",
+	"err.cli.invalidChoice.labelFilter.hint": "Join required labels with &, alternatives with |, and exclude labels with !, for example 'page-full|texture&!map'. Parentheses and missing labels are not supported.",
 	"err.cli.invalidKeyValue": "Invalid key=value for {input}: {value}.",
 	"err.cli.invalidKeyValue.hint": "Use key=value.",
 	"err.cli.invalidNonEmptyKeyValue": "Invalid key=value for {input}: {value}.",
@@ -141,18 +117,20 @@
 	"err.cli.invalidReadableFile": "Input file is not readable: {source}.",
 	"err.cli.invalidRegularFile": "Input path is not a regular file: {source}.",
 	"err.cli.invalidWorkspace": "Not a SuccApp workspace: {source}.",
-	"err.cli.invalidWorkspace.hint": "Run 'succapp workspace init --server <url>' first, or use '-C <workspace>' to choose an existing workspace.",
+	"err.cli.invalidWorkspace.hint": "Initialize the target folder or select an existing SuccApp workspace.",
 	"err.cli.invalidWorkspaceConfigJson": "Workspace config is corrupted: {source}.",
 	"err.cli.unconfiguredServer": "Server is not configured in the current workspace: {value}.",
+	"err.cli.unconfiguredServer.hint": "Check configured servers. Adding a server also makes it the active workspace server.",
 	"err.cli.serverMismatch": "Server does not match the active workspace server: {value}.",
-	"err.cli.serverMismatch.hint": "Expected active server: {expected}.",
-	"err.cli.serverCapabilityUnavailable": "The active server does not provide this capability: {capability}.",
+	"err.cli.serverMismatch.hint": "Expected active server: {expected}. Check configured servers before switching targets.",
+	"err.cli.serverCapabilityUnavailable": "The target server does not provide this capability: {capability}.",
 	"err.cli.serverCapabilityUnavailable.hint": "Upgrade the server to a compatible version, then retry.",
 	"err.cli.unsupportedAuthFlow": "Authentication flow is not implemented yet: {authType}.",
 	"err.cli.unsupportedAuthFlow.hint": "Use 'succapp auth login --pat <url>' and enter the PAT when prompted. Piped stdin is still supported for scripts.",
 	"err.cli.invalidExtensionName": "Invalid extension name: {value}.",
 	"err.cli.invalidExtensionName.hint": "Use <companyName>-<extensionPoint>-<shortName>.",
 	"err.cli.unknownExtensionTemplate": "Extension template is not available: {value}.",
+	"err.cli.unknownExtensionTemplate.hint": "Check available extension points and template names.",
 	"err.cli.confirmationRequired": "This operation requires confirmation.",
 	"err.cli.confirmationRequired.hint": "Pass {flag} after confirming the impact.",
 	"err.cli.confirmationRequired.dbSourceDelete": "Deleting this data source requires confirmation.",
@@ -165,27 +143,131 @@
 	"err.cli.confirmationRequired.outputOverwrite.desc": "Output file: {path}",
 	"err.cli.confirmationRequired.outputOverwrite.hint": "Confirm that overwriting this file is expected, then pass {flag}.",
 	"err.cli.confirmationRequired.threadTaskCancel": "Requesting task cancellation requires confirmation.",
-	"err.cli.confirmationRequired.threadTaskCancel.hint": "Inspect the current thread and cancel serial, then pass {flag}.",
+	"err.cli.confirmationRequired.threadTaskCancel.hint": "Inspect the current thread and cancellation serial, then pass {flag}.",
 	"err.cli.confirmationRequired.logLevel": "Setting {logger} to {level} may produce excessive logs.",
 	"err.cli.confirmationRequired.logLevel.hint": "Review the target logger and impact, then pass {flag}.",
 	"err.cli.confirmationRequired.logCluster": "Applying the Logback configuration will replace the complete configuration on all reachable cluster nodes.",
 	"err.cli.confirmationRequired.logCluster.hint": "Review the source configuration and target cluster, then pass {flag}.",
-	"err.cli.confirmationRequired.cloneOverwrite": "Cloning would overwrite existing local workspace project(s): {projectNames}.",
+	"err.cli.confirmationRequired.cloneOverwrite": "Cloning would overwrite existing local project path(s): {projectNames}.",
 	"err.cli.confirmationRequired.cloneOverwrite.hint": "Confirm the local project can be overwritten, then pass {flag}.",
+	"err.cli.confirmationRequired.cloneIncomplete": "Cloning would overwrite local project paths left by an interrupted clone: {projectNames}.",
+	"err.cli.confirmationRequired.cloneIncomplete.hint": "These files may contain local changes. Inspect and preserve any needed content, then pass {flag} to clone again.",
 	"err.cli.confirmationRequired.projRemove": "Removing local workspace project(s) requires confirmation: {projectNames}.",
-	"err.cli.confirmationRequired.projRemove.hint": "Confirm the local project files and mirror baselines can be removed, then pass {flag}.",
+	"err.cli.confirmationRequired.projRemove.hint": "Confirm the local project files and local synchronization baselines can be removed, then pass {flag}.",
 	"err.cli.confirmationRequired.discardAll": "Discarding all workspace changes requires confirmation.",
 	"err.cli.confirmationRequired.discardAll.hint": "Confirm all local workspace changes can be discarded, then pass {flag}.",
 	"err.cli.confirmationRequired.openLocalChanged": "The local workspace file has unpushed changes: {path}.",
 	"err.cli.confirmationRequired.openLocalChanged.desc": "The browser opens the server version, so it may show old content or 404 for a new file.",
 	"err.cli.confirmationRequired.openLocalChanged.hint": "Run 'succapp workspace push {path}' first, or pass {flag} to open the server page anyway.",
-	"err.db.nonReadOnlySql": "db query only runs read-only SQL. Use db exec for SQL that may change data or schema.",
-	"err.db.nonReadOnlySql.hint": "Review the SQL impact, then run 'succapp db exec {flag}'.",
+	"err.cli.httpGetPath": "Invalid server resource path: {path}",
+	"err.cli.httpGetPath.hint": "Use a deployment-relative path starting with /, without a full URL, fragment or parent segments.",
+	"err.cli.templateTarget": "Use a tpg/dash/rpt/spg server file path without --file-type, or a directory with --file-type. Target: {target}, type: {fileType}.",
+	"err.cli.portalTemplateMissing": "TPG creation content has no valid settings.template; portal properties cannot be queried.",
+	"err.cli.templateShowSelection": "Provide a target with --name, or use --template alone. Do not combine these modes.",
+	"err.cli.resourceUnsupported": "The server does not support the {resource} query. Ask an administrator to check server and CLI version compatibility.",
+	"err.base.sourceInvalid": "Source or configuration content is invalid",
+	"err.base.cancel": "Cancelled.",
+	"err.base.operationFailed": "Operation failed",
+	"err.base.operationFailed.desc": "The operation could not be completed. Check the error details or contact the administrator.",
+	"err.net.connectionFailed": "Cannot connect to server: {url}{causeMessage}",
+	"err.net.connectionFailed.desc": "Check the server address, network connection and service availability, then retry once the server is reachable.",
+	"err.net.invalidUrl": "Invalid URL: {url}",
+	"err.net.invalidResponse": "Invalid remote response format",
+	"err.net.invalidResponse.desc": "The remote response does not match the current protocol requirements. Check the service version or contact the administrator.",
+	"err.net.invalidResponse.dbTableDescribeEmpty.hint": "Check whether data source {dataSource} and table {tableName} exist.",
 	"err.net.httpStatusUnexpected": "Unexpected HTTP response status",
 	"err.net.httpStatusUnexpected.desc": "The remote service returned an HTTP status that the caller cannot classify. Check the error details or contact the administrator.",
+	"err.cluster.nodeUnavailable": "Cluster node {clusterNode} is unavailable.",
+	"err.cluster.nodeUnavailable.desc": "The node may not be running, may have left the current cluster, or may be unreachable. Check its status and network connection, then retry.",
+	"err.login.notlogin": "Authentication failed, please log in again",
+	"err.login.notlogin.hint": "Log in again, then retry the command.",
+	"err.login.busy": "The system is busy and cannot log you in right now. Please try again later!",
+	"err.login.busy.desc": "Possible causes include license limits on sessions or users, or database connection/query failures.",
+	"err.login.oauthTimeout": "OAuth2 authorization timed out.",
+	"err.login.oauthTimeout.desc": "Restart login and complete browser authorization. PAT is an alternative when browser authorization is unavailable.",
+	"err.login.oauthStateMismatch": "OAuth2 authorization state does not match.",
+	"err.login.oauthStateMismatch.desc": "Restart login and complete authorization from the newly opened browser page.",
+	"err.login.oauthInvalidCallback": "Invalid OAuth2 authorization callback.",
+	"err.login.oauthInvalidCallback.desc": "Restart login and complete authorization in the browser.",
+	"err.login.oauthLoopbackFailed": "Cannot start local OAuth2 callback server.",
+	"err.login.oauthLoopbackFailed.desc": "Check whether local loopback access is blocked, then retry or use PAT login.",
+	"err.login.oauthTokenInvalid": "Invalid OAuth2 token response.",
+	"err.login.oauthTokenInvalid.desc": "Check the server version and OAuth2 configuration, then retry.",
+	"err.oauth2.tokenExpired": "OAuth2 access token expired.",
+	"err.sync.conflict": "Remote version has changed: {remotePath}",
+	"err.sync.conflict.desc": "Inspect sync status, including deletions, moves and metadata changes, before deciding how to proceed. An empty content diff does not prove that the conflict is resolved. Reason: {reason}",
+	"err.sync.projectUnavailable": "Cannot {actionName} unavailable remote project(s): {paths}",
+	"err.sync.projectUnavailable.desc": "Check the server, user, project permissions, and project name before retrying.",
+	"err.sync.projectUnavailable.hint": "Check projects visible to the current login, then retry with an exact project name.",
+	"err.sync.projectNotFound": "Workspace project does not exist: {projectNames}",
+	"err.sync.projectNotFound.hint": "Check local projects and projects available to clone from the server.",
+	"err.sync.projectRootRenameUnsupported": "Cannot {actionName} renamed remote project(s): {paths}",
+	"err.sync.projectRootRenameUnsupported.desc": "Applying a project rename is not supported yet. Re-clone the renamed project or rename it locally to match.",
+	"err.sync.pathOutOfScope": "This file is not within the sync scope: {remotePath}",
+	"err.extension.sysdataNotCloned": "Cannot create an extension because the sysdata project is not cloned in this workspace.",
+	"err.extension.sysdataNotCloned.desc": "Clone the sysdata project, then retry.",
+	"err.extension.templateUnavailable": "The connected server has not provided any extension template.",
+	"err.extension.rootUnresolved": "Cannot resolve extension root from input.",
+	"err.extension.rootUnresolved.desc": "Provide an extension name or a path inside an extension directory.",
+	"err.extension.rootNotFound": "Extension directory does not exist: {extensionRoot}",
+	"err.meta.invalidPath": "Invalid metadata path",
+	"err.meta.invalidPath.desc": "Use a valid absolute metadata path and try again.",
+	"err.meta.invalidPath.relativeSearchQuery": "Relative search paths are not supported: {path}",
+	"err.meta.invalidPath.relativeSearchQuery.hint": "Use an absolute path beginning with '/', or a file name without '/'.",
+	"err.meta.invalidPath.parentDirGlob": "Glob wildcards are not supported in --parent-dir: {path}",
+	"err.meta.invalidPath.parentDirGlob.hint": "--parent-dir already searches recursively. Use --path='/DIR/*' to match direct children or --path for another glob.",
+	"err.meta.invalidPath.parentProjectMismatch": "Parent directory {path} does not belong to project {projectName}.",
+	"err.meta.invalidPath.parentProjectMismatch.hint": "Use a parent directory whose first path segment matches --project.",
+	"err.meta.projectExist": "A project with the same name already exists.",
+	"err.meta.projectname.illegal": "Invalid project name. Use letters, numbers, and underscores only, and keep it within 16 characters.",
+	"err.meta.projectname.reservedwords": "This project name is reserved by the system.",
+	"err.lock.busy": "Cannot {attemptedCommand}: workspace scope {conflictScope} is held by another process.",
+	"err.lock.busy.desc": "Stop the running process and retry; locks left by crashed processes are cleaned up automatically on the next attempt.",
+	"err.lock.busy.hint": "Inspect lock holders and wait for the running SuccApp process to finish, then retry.",
+	"err.lock.fileBusy": "A local file lock is held by another process: {lockPath}.",
+	"err.lock.fileBusy.desc": "Wait for the current file operation to finish, then retry.",
+	"err.lock.fileBusy.hint": "Wait for the operation holding the lock to finish; do not delete a lock that is in use.",
+	"err.lock.fileCompromised": "The local file lock was lost and the operation stopped: {lockPath}.",
+	"err.lock.fileCompromised.desc": "Check the local files before retrying.",
+	"err.lock.compromised": "Workspace lock was taken over by another process; the current {attemptedCommand} has been aborted.",
+	"err.lock.compromised.desc": "Inspect workspace sync status before retrying.",
+	"err.db.connectorNotFound": "Database connector is not available: {name}.",
+	"err.db.connectorNotFound.hint": "Check the available database connectors.",
+	"err.db.tableNotFound": "Database table does not exist: {tableName}",
+	"err.db.nonReadOnlySql": "db query only runs read-only SQL. Use db exec for SQL that may change data or schema.",
+	"err.db.nonReadOnlySql.hint": "Review the SQL impact, then run 'succapp db exec {flag}'.",
 	"err.permission.denied": "Permission denied",
 	"err.permission.denied.desc": "The current account does not have permission to perform this operation.",
 	"err.permission.denied.hint": "Ask an administrator to grant the required permission, or retry with an authorized account.",
+	"err.base.invalidParameter.unknownEvent": "Event \"{value}\" is not listed for the current component.",
+	"err.base.invalidParameter.unknownEvent.hint": "Run succapp dev component-event list <target> with the same component identity and use an exact returned event ID; consult extension and type references for other events.",
+	"err.cli.invalidFileName": "Invalid new name: {name}",
+	"err.cli.invalidFileName.hint": "Supply a single file or folder name without path separators; do not use the names \".\" or \"..\".",
+	"err.meta.invalidMoveTarget": "Invalid move destination: {targetPath}",
+	"err.meta.invalidMoveTarget.hint": "Check the destination and retry.",
+	"err.meta.invalidMoveTarget.samePath.hint": "No change is needed; supply a different destination path or name to move or rename.",
+	"err.meta.invalidMoveTarget.selfOrDescendant.hint": "Cannot move a folder into itself or a descendant; select a parent outside the source folder.",
+	"err.meta.fileExists": "The destination resource already exists: {path}",
+	"err.meta.fileExists.hint": "Inspect source and destination paths, then choose another destination name; existing resources are not overwritten.",
+	"err.meta.fileExistsIgnoreCase": "The destination contains a name that differs only in case: {path}",
+	"err.meta.fileExistsIgnoreCase.hint": "Inspect the destination folder and choose another name.",
+	"err.meta.file.notfound": "Server resource not found: {filePath}",
+	"err.meta.file.notfound.hint": "Check the server and resource path using server file info or server file list.",
+	"err.meta.filefolder.notfound": "Parent folder not found: {filePath}",
+	"err.meta.filefolder.notfound.hint": "Create each missing folder with server file create <folder-path> --folder, then retry.",
+	"err.meta.parent.dir.illegal": "The destination parent is not an available folder: {filePath}",
+	"err.meta.parent.dir.illegal.hint": "Inspect the destination parent path and select an existing folder.",
+	"err.meta.saveConcurrent": "The server resource changed; the operation was not applied: {path}",
+	"err.meta.saveConcurrent.hint": "Reread and compare the resource state with server file info before deciding whether to retry.",
+	"err.meta.saveConcurrent.revision.hint": "Expected revision {expectedRevision}, actual revision {actualRevision}. Reread and compare the resource state with server file info before deciding whether to retry.",
+	"err.cli.confirmationRequired.scheduleRemove": "Deleting scheduling objects requires --force.",
+	"err.schedule.notExists": "The schedule does not exist.",
+	"err.task.notExists": "The task does not exist.",
+	"err.base.resourceNotFound": "The requested resource does not exist.",
+	"err.base.invalidParameter.scheduleInput": "Invalid scheduling parameter or field {field}; expected: {expected}.",
+	"err.base.operationFailed.scheduleIncomplete": "The operation did not complete. Inspect object IDs and steps in error properties and verify server state before continuing.",
+	"err.base.invalidParameter.scheduleInput.hint": "Check this command --help for combinations and configuration fields. Use camelCase API fields, e.g. timeout:600, without nested settings or the result envelope.",
+	"err.cli.docsUnavailable": "Reference unavailable: {path}. Check its path, source and completeness. Offline mode does not download; explicit directories are not automatically repaired.",
 	"workspace.compat.connectedServerAppears": "The connected server appears older than this workspace's recorded baseline. You may have connected to the wrong server.",
 	"workspace.compat.serverVersion": "Server version: {0} < {1}",
 	"workspace.extension.progress.create.done": "Created extension {0}.",
@@ -207,7 +289,7 @@
 	"workspace.maintenance.agentDocs.progress.metadata": "writing metadata",
 	"workspace.maint.task.frontendDevelopmentSkill": "frontend development skill",
 	"workspace.maint.task.jsonSchemaSupport": "JSON schema support",
-	"workspace.maint.task.succappDocsSkill": "SuccApp docs skill",
+	"workspace.maint.task.succappDocsSkill": "Official SuccApp documentation Skill",
 	"workspace.maint.task.syncBaseline": "sync baseline",
 	"workspace.maint.task.typescriptSupport": "TypeScript support",
 	"workspace.maint.task.workspaceAgentFiles": "workspace agent files",
@@ -215,14 +297,14 @@
 	"workspace.maint.task.workspaceGitignore": "workspace gitignore",
 	"workspace.maint.task.workspaceSettings": "workspace VS Code settings",
 	"workspace.repair.baseline.invisible": "current login cannot see matching project on current server: {0}",
-	"workspace.repair.baseline.metaMissing": "local sync baseline .meta is missing: {0}",
-	"workspace.repair.baseline.metaUnreadable": "local sync baseline .meta is unreadable: {0}",
-	"workspace.repair.baseline.projectMissing": "workspace project is missing local sync baseline: {0}",
-	"workspace.repair.baseline.resourceMissing": "local sync baseline records a resource that is missing on disk: {0}",
-	"workspace.repair.baseline.stillBroken": "local sync baseline is still incomplete after fetch: {0}",
-	"workspace.repair.baseline.typeMismatch": "local sync baseline resource type does not match .meta: {0}",
+	"workspace.repair.baseline.metaMissing": "local synchronization baseline .meta is missing: {0}",
+	"workspace.repair.baseline.metaUnreadable": "local synchronization baseline .meta is unreadable: {0}",
+	"workspace.repair.baseline.projectMissing": "workspace project is missing local synchronization baseline: {0}",
+	"workspace.repair.baseline.resourceMissing": "local synchronization baseline records a resource that is missing on disk: {0}",
+	"workspace.repair.baseline.stillBroken": "local synchronization baseline is still incomplete after fetch: {0}",
+	"workspace.repair.baseline.typeMismatch": "local synchronization baseline resource type does not match .meta: {0}",
 	"workspace.repair.check.notImpl": "workspace repair check is not implemented: {0}",
-	"workspace.server.serverMirrorExists": "Server mirror already exists: {0}",
+	"workspace.server.serverMirrorExists": "Server local synchronization baseline directory already exists: {0}",
 	"workspace.server.serverNotConfigured": "Server is not configured for this workspace: {0}",
 	"workspace.sync.progress.backupClear.running": "Clearing merge backups",
 	"workspace.sync.progress.backupList.running": "Listing merge backups",
@@ -246,32 +328,37 @@
 	"workspace.sync.progress.upgradeMeta.checked": "Checked {0} metadata file(s): {1} upgradeable.",
 	"workspace.sync.progress.upgradeMeta.done": "Upgraded metadata files: {0} changed, {1} failed, {2} checked.",
 	"workspace.sync.progress.upgradeMeta.scan": "Scanning metadata files",
-	"workspace.sync.push.upgradeRequired": "Metadata file {0} must be upgraded before pushing. Run succapp workspace file upgrade or use Upgrade File in VS Code.",
+	"workspace.sync.push.upgradeRequired": "Metadata file {0} must be upgraded before pushing. Run succapp dev file upgrade or use Upgrade File in VS Code.",
 	"cli.cmd.common.desc": "Common commands.",
 	"cli.cmd.common.summary": "common commands",
 	"cli.cmd.common.title": "Common",
 	"cli.cmd.root.summary": "SuccApp command line interface.",
+	"cli.cmd.root.desc": "Use the command line to connect to and operate SuccApp: query and analyze data, develop and maintain models, reports and business applications, and manage local workspaces and servers.\n\nProvides metadata synchronization, database operations, development resource lookup and runtime diagnostics.",
+	"cli.cmd.root.out": "Structured help is returned in help: description explains purpose and conditions; optional output explains business results; optional references lists local and online sources. children lists direct subcommands, whose helpArgs can be used to read the next level.\n\nCheck both exit status and business results; kind=result can still contain conflicts, skipped items or truncation. --json does not cancel side effects such as opening a browser or writing data. See the guide below for output and exit-code conventions.\n\nLocal paths in text output are relative to the execution directory. JSON localPath is an absolute disk path, remotePath an absolute server metadata path, and inputPath only echoes the input. cwd is the execution directory after -C.",
 	"cli.host.localeFallback": "Locale {0} is not available; using default messages.",
 	"cli.opt.help": "Show this help.",
-	"cli.opt.json": "Write NDJSON for scripts; file content, including text, uses Base64. Diagnostics go to stderr.",
+	"cli.opt.json": "Write NDJSON to stdout, one result or error object per line, including structured diagnostics. Logs go to stderr. See the CLI guide for the common format and this help for result fields.",
+	"cli.opt.json.brief": "Write NDJSON to stdout, one result or error object per line; logs go to stderr.",
 	"cli.opt.locale": "Use the given locale for CLI messages.",
 	"cli.opt.lockTimeout": "Wait for a workspace lock before failing.",
 	"cli.opt.logLevel": "Set log level: trace, debug, info, warn, or error.",
 	"cli.opt.prettyJson": "Write formatted JSON for people; not intended for line-oriented scripts.",
+	"cli.opt.prettyJson.brief": "Write formatted JSON for people; not intended for line-oriented parsing.",
 	"cli.opt.quiet": "Suppress progress and informational output.",
-	"cli.opt.server": "Direct target (below a positional URL, above the active server and SUCCAPP_SERVER); workspace synchronization requires the active server to match.",
+	"cli.opt.server": "Select the target server directly; takes precedence over the active workspace server and SUCCAPP_SERVER. A positional URL takes precedence when supported. Workspace synchronization requires a URL matching the active workspace server.",
 	"cli.opt.verbose": "Enable debug logging.",
 	"cli.opt.version": "Show version information and check for SuccApp CLI updates.",
-	"cli.opt.workspace": "Select the workspace without changing the process working directory; local input/output files remain relative to the launch directory.",
-	"cli.cmd.root.desc": "SuccApp CLI manages local workspaces, accesses servers, queries models, and operates databases.\n\nChoose a command group below, then run succapp <command> --help to continue one level at a time. Before executing a command, check its arguments, input rules, and effects.\n\nScripts and AI agents can use --json for structured help; use --pretty-json when reading JSON manually.\n\nFor first-time use or help choosing a command, read the CLI guide below. Check that it applies to your CLI and server versions; when offline, use an available matching manual.\n\nCheck both exit status and business results; kind=result can still contain conflicts, skipped items or truncation. --json does not cancel side effects such as opening a browser or writing data. See the guide below for output and exit-code conventions.\n\nDocumentation: CLI guide\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/basics/cli.md\nWeb: https://docs.succapp.com/ai-building/basics/cli",
+	"cli.opt.directory": "Run as if started in this directory. Relative local paths use it as their base; find the workspace upwards. Specify -C once; relative directories use the launch directory; repeated or explicitly empty values are invalid; use . for the current directory.",
+	"cli.opt.directory.brief": "Run in this directory; use it as the base for relative local paths and find the workspace upwards.",
 	"cli.cmd.auth.title": "Auth",
 	"cli.cmd.auth.summary": "login, logout, and inspect stored server auth",
-	"cli.cmd.auth.desc": "Login, logout, and inspect stored server auth.\n\nUse login to establish and save authentication, status to inspect local records, and logout to remove them. Specify a server URL explicitly or use the active workspace server. CLI and IDE share these credentials.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Configure authentication\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/configure-auth.md\nWeb: https://docs.succapp.com/ai-building/workspace/configure-auth",
-	"cli.cmd.auth.login.summary": "Login to a server.",
-	"cli.cmd.auth.login.desc": "Login to a SuccApp server with OAuth2 or PAT and save local auth state.\n\nOAuth2 opens a browser by default. In scripts without a browser, use --pat and supply the token through standard input. --oauth and --pat are mutually exclusive. Successful login stores credentials for subsequent commands.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Configure authentication\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/configure-auth.md\nWeb: https://docs.succapp.com/ai-building/workspace/configure-auth",
-	"cli.cmd.auth.login.oauth": "Use OAuth2 login. This is the default.",
-	"cli.cmd.auth.login.pat": "Use Personal Access Token login. Interactive terminals prompt for the token; piped input is read from stdin.",
-	"cli.cmd.auth.login.patPrompt": "Personal Access Token: ",
+	"cli.cmd.auth.desc": "Manage local authentication for SuccApp servers, including login, status inspection and logout.\n\nCLI and IDE share saved authentication records for subsequent server access.",
+	"cli.cmd.auth.login.summary": "Log in to a server.",
+	"cli.cmd.auth.login.desc": "Log in to a SuccApp server to establish reusable authentication for subsequent commands.\n\nSupports browser-based OAuth2 authorization and personal access tokens (PATs), for interactive terminals and unattended scripts.\n\nRequires access to the target server. Successful login saves authentication locally for shared use by the CLI and IDE.",
+	"cli.cmd.auth.login.out": "loggedIn=true and stored=true indicate successful login and saved local credentials; authType identifies the authentication method. token and refreshToken are presence booleans, never token contents. expiresAt is included when available.",
+	"cli.cmd.auth.login.oauth": "Log in through browser OAuth2 authorization (default); cannot be combined with --pat.",
+	"cli.cmd.auth.login.pat": "Log in with a personal access token (PAT); interactive terminals prompt for input, piped input is read from standard input. Cannot be combined with --oauth.",
+	"cli.cmd.auth.login.patPrompt": "Personal access token (PAT): ",
 	"cli.cmd.auth.login.openingBrowser": "Opening browser for OAuth2 authorization...",
 	"cli.cmd.auth.login.waitingForCallback": "Waiting for OAuth2 authorization...",
 	"cli.cmd.auth.login.exchangingToken": "Exchanging OAuth2 authorization code...",
@@ -279,20 +366,22 @@
 	"cli.cmd.auth.login.loggedIn": "Logged in to {0}",
 	"cli.cmd.auth.login.loggedInAs": "Logged in to {0} as {1}",
 	"cli.cmd.auth.logout.summary": "Remove stored auth.",
-	"cli.cmd.auth.logout.desc": "Remove stored authentication information from the local auth settings.\n\nWithout an explicit target, use the current server. --all removes local credentials for every server and cannot be combined with a positional URL. This does not revoke a server-issued PAT or remove workspace server configuration.",
-	"cli.cmd.auth.logout.all": "Remove stored auth for all servers.",
+	"cli.cmd.auth.logout.desc": "Remove server authentication saved on this machine.\n\nCan remove authentication for one server or all servers.\n\nAffects authentication shared by CLI and IDE; it does not revoke server-issued PATs or remove workspace server configuration.",
+	"cli.cmd.auth.logout.out": "For one server, removed is a boolean; false means no local credentials existed. With --all, all=true and removed is the number of credential records deleted.",
+	"cli.cmd.auth.logout.all": "Remove stored auth for all servers.\n\nCannot be combined with a positional URL; omit to remove authentication for the target server.",
 	"cli.cmd.auth.logout.removedAllAuth": "Removed stored auth for all servers: {0}",
 	"cli.cmd.auth.logout.removedAuth": "Removed stored auth for {0}",
 	"cli.cmd.auth.logout.serverUrlTogether": "Do not pass a server URL together with --all.",
 	"cli.cmd.auth.logout.storedAuth": "No stored auth for {0}",
 	"cli.cmd.auth.status.summary": "Show stored auth status.",
-	"cli.cmd.auth.status.desc": "Show local stored authentication information for a server.\n\nThis reads saved local credentials without asking the server to validate them. token and refreshToken indicate presence, not secret values. If a subsequent request fails, check the server URL and sign in again.",
+	"cli.cmd.auth.status.desc": "Inspect authentication saved locally for a server.\n\nOnly checks local records without asking the server to validate authentication.",
+	"cli.cmd.auth.status.out": "storedAuth indicates whether local credentials exist. token and refreshToken are presence booleans, never secret values. expiresAt, lastLoginAt, and updatedAt are optional ISO 8601 date-time strings. A stored record does not establish that the server still accepts it.",
 	"cli.cmd.auth.status.noStoredOutput": "Server: {server}\nStored auth: {storedAuth}",
 	"cli.cmd.auth.status.output": "Server: {server}\nStored auth: {storedAuth}\nAuth type: {authType}\nUsername: {username}\nUser ID: {userId}\nToken: {token}\nRefresh token: {refreshToken}\nExpires at: {expiresAt}\nLast login at: {lastLoginAt}\nUpdated at: {updatedAt}",
 	"cli.cmd.auth.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
 	"cli.cmd.db.title": "Database",
 	"cli.cmd.db.summary": "inspect and operate server databases and data sources",
-	"cli.cmd.db.desc": "Inspect and operate server databases and data sources.\n\nTo connect data, choose a connector under connector, then prepare and manage data sources under source. Use schema and table to inspect database structure. Each group lists only its direct children; run succapp db <group> --help to continue.\n\nUse query for physical tables and export to export data. For semantic model queries, see succapp model --help.\n\nexec, import, and data source write commands can modify server configuration or database data. Read the specific command's help and confirm the server, data source, and effects before executing it.\n\nRead the guide below when preparing a connection, and check that it applies to your server version.\n\nDocumentation: Connect data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/connect-data.md\nWeb: https://docs.succapp.com/ai-building/data/connect-data",
+	"cli.cmd.db.desc": "Inspect and operate server databases and data sources.\n\nSupports connector and data source management, database structure inspection, SQL queries and execution, and CSV import and export. Physical table operations are distinct from SuccApp semantic model queries.\n\nWrite operations may change server configuration, database data or structure.",
 	"cli.cmd.db.dataSource": "Data source",
 	"cli.cmd.db.connection": "Connection",
 	"cli.cmd.db.defaultSchema": "Logical default schema",
@@ -302,10 +391,10 @@
 	"cli.cmd.db.driver": "JDBC driver",
 	"cli.cmd.db.driverVersion": "Driver version",
 	"cli.cmd.db.dryImport": "Dry run import",
-	"cli.cmd.db.dsConfigMust": "Datasource config must be a JSON object: {0}",
+	"cli.cmd.db.dsConfigMust": "Data source config must be a JSON object: {0}",
 	"cli.cmd.db.imported": "Imported",
-	"cli.cmd.db.invalidJsonDs": "Invalid JSON in datasource config: {0}",
-	"cli.cmd.db.missingDsConfig": "Missing datasource config. Pass --config=<json-file> or --config=-.",
+	"cli.cmd.db.invalidJsonDs": "Invalid JSON in data source config: {0}",
+	"cli.cmd.db.missingDsConfig": "Missing data source config. Pass --config=<json-file> or --config=-.",
 	"cli.cmd.db.missingExportTarget": "Missing export target. Pass <table>, --query, or --query-file.",
 	"cli.cmd.db.missingInputFile": "Missing import input. Pass --input=<csv-file> or --input=-.",
 	"cli.cmd.db.missingInputPipe": "Missing import input. Pass --input=<csv-file> or pipe CSV with --input=-.",
@@ -316,17 +405,23 @@
 	"cli.cmd.db.nullable": "Nullable",
 	"cli.cmd.db.pk": "PK",
 	"cli.cmd.db.queryOrQueryFileConflict": "Pass export query either as --query or --query-file, not both.",
-	"cli.cmd.db.readonly": "Readonly",
+	"cli.cmd.db.readonly": "Read-only",
 	"cli.cmd.db.rowsModeDry": "{0} {1} rows into {2}{3} (mode: {4}, dry-run: {5})",
 	"cli.cmd.db.skipped": ", skipped {0}",
 	"cli.cmd.db.sqlExecutedSuccess": "SQL executed successfully.",
 	"cli.cmd.db.sqlOrFileConflict": "Pass SQL either as <sql> or --file, not both.",
 	"cli.cmd.db.sqlUpdateCount": "SQL update count: {0}",
 	"cli.cmd.db.query.empty": "Query succeeded; 0 rows returned.",
+	"cli.cmd.db.query.summary": "Execute a read-only SQL query.",
+	"cli.cmd.db.query.desc": "Execute read-only SQL against a data source to preview query results.\n\nSuitable for physical database queries. Previews are subject to server row limits and do not represent all data or total counts.",
+	"cli.cmd.db.query.out": "Key JSON output example (common result fields omitted; comments explain fields; actual output is strict JSON):\n    {\n      \"dataSource\": \"default\",             // Data source identifier\n      \"schema\": \"public\",                  // Present when --schema is specified\n      \"readOnly\": true,                    // This command runs read-only SQL\n      \"timeoutSeconds\": 30,                // Requested timeout in seconds\n      \"maxRows\": 100,                      // Echoed only when explicitly requested\n      \"result\": {                          // Query result\n        \"fields\": [                        // Field metadata in column order\n          {\n            \"name\": \"id\",                  // Key used in result.rows records\n            \"sqlType\": \"VARCHAR\",          // SQL type; optional\n            \"typeName\": \"varchar\"          // Driver type name; optional. dataType may be absent\n          }\n        ],\n        \"rows\": [                          // Record array; [] when empty\n          {\n            \"id\": \"A001\"                   // Read actual JSON types; distinguish null and \"\"\n          }\n        ],\n        \"rowCount\": 1,                     // Returned rows, not total; if absent, use result.rows.length\n        \"maxRows\": 100,                    // Actual preview cap; optional\n        \"truncated\": false,                // Truncated by the preview cap; optional\n        \"elapsedMs\": 12,                   // Elapsed milliseconds; optional\n        \"timeoutMs\": 30000                 // Timeout in milliseconds; optional\n      }\n    }\n\nAn absent truncated does not mean false; even false does not remove the query's own row limit. Empty results may also include top-level empty.reason=\"noRows\".",
+	"cli.cmd.db.query.maxRows": "Maximum returned row count.\n\nThe matching server defaults to 100 with a maximum of 1000; 0 uses the server default, not unlimited rows.",
+	"cli.cmd.db.query.nonReadOnlySql": "db query only allows read-only SQL. Use db exec for write or schema changes; add --force only after confirming the impact.",
+	"cli.cmd.db.query.sqlOrFileConflict": "Pass SQL either as <sql> or --file, not both.",
 	"cli.cmd.db.tableOrQueryConflict": "Pass either <table> or --query/--query-file, not both.",
 	"cli.cmd.db.connector.title": "Database connector",
 	"cli.cmd.db.connector.summary": "Inspect database connectors and their configuration fields.",
-	"cli.cmd.db.connector.desc": "Discover the database connectors available on the active server and inspect their connector-specific configuration fields.\n\nStart with list to obtain a connector ID, then use show to inspect its fields. Available connectors depend on the target server. Continue with succapp db source template to prepare a data source configuration.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Connect data sources\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/connect-data.md\nWeb: https://docs.succapp.com/ai-building/data/connect-data",
+	"cli.cmd.db.connector.desc": "Inspect available database connectors and their configuration requirements.\n\nProvides shared and connector-specific fields, defaults and JDBC URL templates to help prepare data source connections. Available connectors depend on the target server.",
 	"cli.cmd.db.connector.connector": "Connector",
 	"cli.cmd.db.connector.displayName": "Display name",
 	"cli.cmd.db.connector.dbKind": "Database kind",
@@ -334,132 +429,156 @@
 	"cli.cmd.db.connector.defaultValue": "Default",
 	"cli.cmd.db.connector.secret": "secret",
 	"cli.cmd.db.connector.list.summary": "List database connectors available on the server.",
-	"cli.cmd.db.connector.list.desc": "List the database connectors available for datasource creation on the active server.\n\nUse a returned connector ID with db connector show or db source template. Availability of a connector does not mean a data source has been configured or a database connection has been verified.",
+	"cli.cmd.db.connector.list.desc": "List the database connectors available for data source creation on the target server.",
+	"cli.cmd.db.connector.list.out": "In connectors[], name is the connector ID accepted by db connector show and db source template; displayName is its display name. Available connectors do not establish that data sources are configured or database connections work.",
 	"cli.cmd.db.connector.show.summary": "Show the configuration fields supported by a database connector.",
-	"cli.cmd.db.connector.show.desc": "Show common and connector-specific datasource configuration fields, safe defaults, and the JDBC URL template reported by the active server.\n\nUse an ID returned by list for <connector>. Prepare values according to field types, required fields and secret fields. Replace template examples with real values and verify connectivity with db source test.",
+	"cli.cmd.db.connector.show.desc": "Inspect configuration fields and JDBC URL templates for a database connector.\n\nDescribes field types, required fields, secrets and safe defaults. Template examples are not validated connection configurations.",
+	"cli.cmd.db.connector.show.out": "connector.name is the connector ID. connector.configFields[] describes name, type, required, secret, and optional defaultValue. connector.defaults contains safe defaults; jdbcUrlTemplate is an optional JDBC URL template. Fields marked secret=true require separately supplied values; defaults are not a complete working connection configuration.",
 	"cli.cmd.db.connector.show.connector": "Database connector ID reported by db connector list.",
-	"cli.cmd.db.source.title": "Database source",
+	"cli.cmd.db.source.title": "Data source",
 	"cli.cmd.db.source.summary": "Inspect, test, and manage data sources.",
-	"cli.cmd.db.source.desc": "Inspect, test, and manage data sources on the server.\n\nUse list/show to inspect existing data sources and probe to verify connectivity and inspect the default schema. test accepts an existing data source or an unsaved configuration. Before creating a data source, obtain a template with template and read the input requirements for create.\n\ncreate, update, and remove change server data source configuration. test/probe attempt a real database connection. Read the specific command's help and confirm the target server and data source first.\n\nRead the guide below when preparing a connection, and check that it applies to your server version.\n\nDocumentation: Connect data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/connect-data.md\nWeb: https://docs.succapp.com/ai-building/data/connect-data",
-	"cli.cmd.db.source.*.config": "Read datasource configuration JSON from a file, or use - for stdin.",
-	"cli.cmd.db.source.*.test": "Test the connection before saving.",
+	"cli.cmd.db.source.desc": "Inspect, test and manage server data sources.\n\nSupports configuration inspection, connection probing, configuration templates, and data source creation, updates and removal.\n\nConnection tests access the database; creation, updates and removal change server data source configuration.",
+	"cli.cmd.db.source.*.config": "Full configuration JSON file, or - for standard input; do not submit the CLI result envelope. Fill template values with actual connection details.",
+	"cli.cmd.db.source.*.test": "Test the connection before saving.\n\nA successful test does not verify subsequent model queries or data permissions.",
+	"cli.cmd.db.source.*.datasource": "A data source identifier returned by db source list, not a connector ID.",
 	"cli.cmd.db.source.list.summary": "List visible data sources.",
-	"cli.cmd.db.source.list.desc": "List data sources visible to the active SuccApp server session.\n\nUse the returned data source identifiers with show, probe, schema, table and SQL commands. An empty list only means that the current server session returned no visible data sources.",
+	"cli.cmd.db.source.list.desc": "List data sources visible to the current SuccApp server session.",
+	"cli.cmd.db.source.list.out": "In dataSources[], name is the data source identifier used by show, probe, schema, table, and SQL commands. An empty list means only that the current server session returned no visible data sources, with empty.reason=emptyCollection.",
 	"cli.cmd.db.source.list.empty": "No data sources are available.",
-	"cli.cmd.db.source.show.summary": "Show a datasource configuration.",
-	"cli.cmd.db.source.show.desc": "Show a datasource configuration.\n\nUse an identifier returned by list for <datasource>. The JSON config field contains the configuration; password may be removed. Do not submit the entire result envelope or assume sanitized values form a complete update. This command does not test connectivity.",
-	"cli.cmd.db.source.probe.summary": "Validate an existing datasource and show its logical schema, database, and driver details.",
-	"cli.cmd.db.source.probe.desc": "Open and validate an existing datasource connection, then report its logical default schema, database product, normalized and full versions, and JDBC driver. JSON output also includes the sanitized datasource configuration.\n\nUse list to identify the data source first. Probing actually connects to the database. Success verifies this connection attempt, not permissions for subsequent queries or correctness of model configuration.",
-	"cli.cmd.db.source.probe.datasource": "Name of the existing datasource to probe.",
-	"cli.cmd.db.source.test.summary": "Test connectivity for an existing datasource or an unsaved JSON configuration.",
-	"cli.cmd.db.source.test.desc": "Validate connectivity for an existing datasource, or for a JSON configuration without saving it. Both modes return the logical default schema, database versions, and JDBC driver details.\n\nChoose exactly one of <datasource> and --config. --config reads a JSON file, or standard input when set to -. Submit the configuration object, not a CLI result envelope. Testing does not save configuration; use create or update to save it afterwards.",
-	"cli.cmd.db.source.test.datasource": "Name of the existing datasource to test.",
-	"cli.cmd.db.source.template.summary": "Generate a safe datasource JSON template for a server connector.",
-	"cli.cmd.db.source.template.desc": "Generate a datasource configuration template for a connector on the active server. The template uses the connector's defaults and never contains a password or other secret value.\n\nUse a connector ID returned by db connector list. Human output is the configuration JSON itself; --json places it in config. Fill in real connection details, then test and create. This command does not create a data source.",
+	"cli.cmd.db.source.show.summary": "Show a data source configuration.",
+	"cli.cmd.db.source.show.desc": "Inspect the configuration of an existing server data source.\n\nOnly reads configuration; it does not validate database connectivity.",
+	"cli.cmd.db.source.show.out": "The JSON config field contains the configuration; password may be removed. Do not submit the entire result envelope or assume sanitized values form a complete update. ",
+	"cli.cmd.db.source.probe.summary": "Validate an existing data source connection and show its logical default schema, database and driver details.",
+	"cli.cmd.db.source.probe.desc": "Probe an existing data source connection to inspect its database product, version, driver and logical default schema.\n\nProbing accesses the database. A successful connection does not verify subsequent query permissions or model configuration.",
+	"cli.cmd.db.source.probe.out": "connected reports this connection attempt; defaultSchema is the logical default schema. databaseProductName, databaseVersion, and databaseProductVersion identify the database product, standard version, and full version; driverName/driverVersion identify the JDBC driver. config omits password and should not be used directly as complete update input.",
+	"cli.cmd.db.source.probe.datasource": "Name of the existing data source to probe.",
+	"cli.cmd.db.source.test.summary": "Test connectivity for an existing data source or an unsaved JSON configuration.",
+	"cli.cmd.db.source.test.desc": "Test whether an existing data source or an unsaved configuration can connect to a database.\n\nProvides logical default schema, database and driver information.\n\nTesting accesses the database but does not save configuration.",
+	"cli.cmd.db.source.test.out": "result indicates whether the connection test succeeded. defaultSchema, databaseProductName, databaseVersion, and driverName/driverVersion are returned when available; config omits password. Successful testing does not mean the configuration was saved.",
+	"cli.cmd.db.source.test.datasource": "Name of the existing data source to test.\n\nChoose exactly one of this argument and --config.",
+	"cli.cmd.db.source.test.config": "A UTF-8 strict JSON configuration object file, or - for stdin; choose exactly one of this and <datasource>. The root is a JdbcConfig, not a CLI result or a {\"config\":...} wrapper; no comments or trailing commas. Get fields and a skeleton from db connector show and db source template.\n\nFor JDBC connections, template url already contains example values. Changing host, port or databaseName does not recalculate url. Fill the actual JDBC URL using connector.jdbcUrlTemplate and verify its host, port and database name. Use connectionProperties for extra driver properties; see the configuration type.",
+	"cli.cmd.db.source.template.summary": "Generate a safe data source JSON template for a server connector.",
+	"cli.cmd.db.source.template.desc": "Generate a data source configuration template from a server connector.\n\nUses connector defaults without passwords or other secrets to help prepare a new data source.\n\nDoes not create a data source or test a connection.",
+	"cli.cmd.db.source.template.out": "Plain output is the configuration JSON and can be saved directly as a --config input file. With --json or --pretty-json, extract the config object instead of saving the entire result.\n\nFor JDBC connections, template url already contains example values. Changing host, port or databaseName does not recalculate url. Fill the actual JDBC URL using connector.jdbcUrlTemplate and verify its host, port and database name. Use connectionProperties for extra driver properties; see the configuration type.",
 	"cli.cmd.db.source.template.connector": "Database connector ID reported by db connector list.",
-	"cli.cmd.db.source.create.summary": "Create a datasource.",
-	"cli.cmd.db.source.create.desc": "Create a data source from JSON configuration on the selected server, saving the server's data source configuration.\n\nFirst use succapp db connector list/show to choose a connector and inspect its fields, then obtain a template with succapp db source template. Extract only config from the result, fill in the actual connection parameters, and submit it with --config. The entire result envelope is not valid creation input.\n\n--config is required and accepts a JSON file or - for stdin. --test checks connectivity before saving; it does not prove that later model queries or data permissions are valid.\n\nAfter saving, verify with succapp db source show on the same server and configuration name. An interrupted response does not prove that creation did not occur: inspect the current state before retrying. Returned configuration may omit password.\n\nRead the guide below before preparing a connection. In a SuccApp workspace, you can also read .agents/skills/succapp-docs/SKILL.md to find an applicable offline manual. Check that the documentation matches your server version.\n\nDocumentation: Connect data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/connect-data.md\nWeb: https://docs.succapp.com/ai-building/data/connect-data",
+	"cli.cmd.db.source.create.summary": "Create a data source.",
+	"cli.cmd.db.source.create.desc": "Create a data source on the target server.\n\nCan validate database connectivity before saving to help identify connection configuration problems. Connectivity does not verify subsequent model queries or data permissions.\n\nSaves server data source configuration. Creation may have completed even if the response is interrupted.",
+	"cli.cmd.db.source.create.out": "result reports the save outcome; dataSource is the saved data source identifier. Returned config omits password. Connection details from --test are included when available; a successful save does not establish successful data queries.",
+	"cli.cmd.db.source.create.config": "A UTF-8 strict JSON configuration object file, or - for stdin; comments and trailing commas are not supported.\n\nFields follow succ.meta.dbconnector.JdbcConfig. Creation requires name (the new data source name); it is not inferred from the local filename. Use the connector ID returned by db connector list as dbConnector. Fill url, user, password and connector-specific fields as required by the target connector.\n\nUse db connector show <connector> --json to inspect field names, types, required and secret markers in connector.configFields[], then generate a skeleton with db source template <connector>. Plain template output is the configuration object to save as datasource.json. Templates omit passwords and other secrets; fill in real connection details.\n\nWith --json or --pretty-json template output, save only the config object, not the whole result or an extra config wrapper. Static .jdbc file conventions allowing JSONC or omission of name do not apply to this input.\n\nFor JDBC connections, template url already contains example values. Changing host, port or databaseName does not recalculate url. Fill the actual JDBC URL using connector.jdbcUrlTemplate and verify its host, port and database name. Use connectionProperties for extra driver properties; see the configuration type.",
 	"cli.cmd.db.source.create.created": "Created data source: {0}",
-	"cli.cmd.db.source.update.summary": "Update a datasource.",
-	"cli.cmd.db.source.update.desc": "Update a datasource from a JSON configuration.\n\nInspect the current configuration with show, then submit a configuration object through the required --config (file or - for standard input). Returned values may be sanitized, so check how secret fields must be supplied. --test tests the connection before saving. Updates affect the server directly; verify with show/probe, and inspect current state before retrying an interrupted request.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nSubmit the complete intended configuration, not a field patch. The accompanying server preserves a missing or empty password on update, but other omitted fields are not guaranteed to survive. Do not write a masked placeholder back as a new password.\n\nGuide: Connect data sources\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/connect-data.md\nWeb: https://docs.succapp.com/ai-building/data/connect-data",
+	"cli.cmd.db.source.update.summary": "Update a data source.",
+	"cli.cmd.db.source.update.desc": "Update an existing server data source configuration.\n\nReplaces the full configuration and can test connectivity before saving.\n\nChanges apply directly to the server; an interrupted response does not mean the update failed to occur.",
+	"cli.cmd.db.source.update.out": "result is the save result; dataSource is the target source identifier. originalDataSource, when present, identifies the original source; both identifiers are currently the same because renaming is unsupported. config omits password. Do not submit the whole result as another update input.",
 	"cli.cmd.db.source.update.updated": "Updated data source: {0}",
-	"cli.cmd.db.source.remove.summary": "Delete a datasource.",
-	"cli.cmd.db.source.remove.desc": "Delete a datasource after explicit confirmation.\n\n--force is required to confirm removal of the server data source configuration. Check dependent models and tasks first. Removing the configuration does not delete physical database tables, but access depending on it may fail.",
-	"cli.cmd.db.source.remove.force": "Confirm datasource deletion.",
+	"cli.cmd.db.source.update.config": "A UTF-8 strict JSON configuration object file, or - for stdin. The root is a JdbcConfig, not a CLI result or an extra config wrapper; no comments or trailing commas.\n\nname may be omitted, in which case <datasource> is used. If present, it must equal that positional argument. Renaming is not supported; do not retain another source name or a template example name. Read the target with db source show <datasource> --json and extract only config before editing and submitting.\n\nUpdates are not patches. The current server preserves an omitted or empty password; other omitted fields are not guaranteed to survive. Do not write masked placeholders back as passwords.\n\nFor JDBC connections, template url already contains example values. Changing host, port or databaseName does not recalculate url. Fill the actual JDBC URL using connector.jdbcUrlTemplate and verify its host, port and database name. Use connectionProperties for extra driver properties; see the configuration type.",
+	"cli.cmd.db.source.remove.summary": "Delete a data source.",
+	"cli.cmd.db.source.remove.desc": "Remove a server data source configuration.\n\nDoes not remove physical database tables, but dependent models and tasks may lose data access.",
+	"cli.cmd.db.source.remove.out": "result reports the deletion outcome; dataSource identifies the target. Successful deletion concerns the data source configuration and does not mean dependent models or tasks were removed.",
+	"cli.cmd.db.source.remove.force": "Must be explicitly specified to confirm removal of the server data source configuration.",
 	"cli.cmd.db.source.remove.dbSourceRemove": "Deleting a data source requires --force.",
 	"cli.cmd.db.source.remove.deleted": "Deleted data source: {0}",
 	"cli.cmd.db.schema.title": "Database schema",
 	"cli.cmd.db.schema.summary": "Inspect schemas in a data source.",
-	"cli.cmd.db.schema.desc": "Inspect database schemas.\n\nUse list to inspect schemas for a data source obtained from db source list. Continue with succapp db table --help for physical tables and columns.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Explore database data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/explore-database-data.md\nWeb: https://docs.succapp.com/ai-building/data/explore-database-data",
+	"cli.cmd.db.schema.desc": "Inspect database schemas in a data source to determine the scope of table queries.",
 	"cli.cmd.db.schema.list.summary": "List schemas for a data source.",
-	"cli.cmd.db.schema.list.desc": "List schemas for a data source.\n\nUse a data source identifier from db source list; --catalog narrows the catalog. Use returned schema names for subsequent table inspection. Visibility depends on the connection and its permissions.",
+	"cli.cmd.db.schema.list.desc": "List visible database schemas in a data source.\n\nVisibility depends on the database connection and its permissions.",
+	"cli.cmd.db.schema.list.out": "schemas[] contains each schema name and optional catalog; dataSource identifies the queried data source. No visible schemas produce an empty array and empty.reason=emptyCollection.",
 	"cli.cmd.db.schema.list.catalog": "Catalog",
 	"cli.cmd.db.schema.list.empty": "No schemas found for data source '{0}'.",
+	"cli.cmd.db.schema.list.catalogArg": "Restrict the database catalog; omit to use the data source default scope.",
+	"cli.cmd.db.schema.*.datasource": "A data source identifier returned by db source list, not a connector ID.",
 	"cli.cmd.db.table.title": "Database table",
 	"cli.cmd.db.table.summary": "Inspect database tables and their structure.",
-	"cli.cmd.db.table.desc": "Inspect database tables.\n\nUse list to find physical tables and describe to inspect columns and table metadata. Identify the data source and schema first. These physical tables differ from the .tbl semantic models used by model commands.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Explore database data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/explore-database-data.md\nWeb: https://docs.succapp.com/ai-building/data/explore-database-data",
+	"cli.cmd.db.table.desc": "Inspect physical database tables, their fields and metadata.\n\nHelps understand database structure. Physical tables are distinct from SuccApp .tbl semantic models.",
 	"cli.cmd.db.table.list.summary": "List tables for a data source.",
-	"cli.cmd.db.table.list.desc": "List tables for a data source.\n\nIdentify the scope with db source list and db schema list, then filter table names with --table-name-contains. Before querying data, use describe to inspect column names and types.",
+	"cli.cmd.db.table.list.desc": "List physical tables in a data source to find tables for queries or maintenance.\n\nSupports schema and table-name filtering without reading table data.",
+	"cli.cmd.db.table.list.out": "tables[] contains tableName, schema, tableType, and optional tableComment. tableName is the physical table name for describe/query/export. An empty list can mean no visible tables or no filter matches; empty.reason distinguishes these cases.",
 	"cli.cmd.db.table.list.tableNameContains": "Filter tables by name. Supports * and ? wildcards.",
 	"cli.cmd.db.table.list.empty": "No tables are available.",
 	"cli.cmd.db.table.list.noMatches": "No tables matched the current filters.",
 	"cli.cmd.db.table.describe.summary": "Describe a database table.",
-	"cli.cmd.db.table.describe.desc": "Describe columns and metadata for a database table.\n\nUse a table name returned by table list and specify --schema when needed. This reads structure rather than table rows; use db query to preview data.\n\nA table can be written as schema.table. With explicit --schema, <table> is used as the complete table name; supply an unqualified name to avoid double qualification.",
+	"cli.cmd.db.table.describe.desc": "Inspect database table fields and metadata to identify names and types needed for queries.\n\nReads table structure without returning table data.",
+	"cli.cmd.db.table.describe.out": "table contains table metadata; columns[] contains fields. name is the physical column name, dataType the general type, and dbType the database type. primaryKey, nullable, length, and scale describe constraints and precision. Missing optional metadata does not imply false or 0.",
 	"cli.cmd.db.table.describe.schema": "Schema name.",
-	"cli.cmd.db.*.file": "Read SQL from a file.",
+	"cli.cmd.db.table.*.datasource": "A data source identifier returned by db source list, not a connector ID.",
+	"cli.cmd.db.table.*.schema": "A schema returned by db schema list; omitted scope is resolved by the data source.",
+	"cli.cmd.db.table.*.table": "A table name returned by db table list; schema.table is supported when --schema is omitted.\n\nWith an explicit --schema, the table name is taken literally; provide only the table name to avoid double qualification.",
+	"cli.cmd.db.*.file": "Read SQL from a file.\n\nA UTF-8 file containing raw SQL; mutually exclusive with <sql>. Omit both to read standard input.",
 	"cli.cmd.db.*.schema": "SQL execution schema.",
-	"cli.cmd.db.*.timeout": "SQL timeout in seconds. Defaults to 30.",
-	"cli.cmd.db.query.summary": "Execute a read-only SQL query.",
-	"cli.cmd.db.query.desc": "Execute a read-only SQL query on the specified data source. Use succapp db source list to obtain a visible data source identifier, and succapp db table list/describe to inspect tables.\n\nProvide at most one of the <sql> positional argument and --file. When both are omitted, read SQL from stdin. --timeout is in seconds and defaults to 30.\n\nQueries are for preview: a limited result must not be assumed to contain all data. For a full export, see succapp db export --help.\n\nThis command is not used for data writes. Before writing data, read succapp db exec --help and confirm its effects.\n\nThe accompanying server defaults to a 100-row preview with a 1000-row cap. Actual behavior depends on the target server and returned truncation information. Use the corresponding export command for full data.\n\n--max-rows=0 uses the server default; it does not mean unlimited rows.",
-	"cli.cmd.db.query.maxRows": "Maximum returned row count.",
-	"cli.cmd.db.query.nonReadOnlySql": "db query only allows read-only SQL. Use db exec for write or schema changes; add --force only after confirming the impact.",
-	"cli.cmd.db.query.sqlOrFileConflict": "Pass SQL either as <sql> or --file, not both.",
+	"cli.cmd.db.*.timeout": "SQL timeout in seconds.",
+	"cli.cmd.db.*.datasource": "A data source identifier returned by db source list, not a connector ID.",
+	"cli.cmd.db.*.sql": "SQL text; mutually exclusive with --file. If both are omitted, read standard input.",
+	"cli.cmd.db.*.table": "A table name returned by db table list; schema.table is supported when --schema is omitted.\n\nWith an explicit --schema, the table name is taken literally; provide only the table name to avoid double qualification.",
 	"cli.cmd.db.exec.summary": "Execute any SQL.",
-	"cli.cmd.db.exec.desc": "Execute SQL and return result sets or update counts; this may change database data or structure.\n\nChoose at most one of positional <sql> and --file; if neither is supplied, read standard input. The default timeout is 30 seconds. SQL classified as dangerous by the server requires --force. Absence of that requirement does not mean a statement is read-only. Confirm write effects first and inspect database state before retrying after timeout or disconnection.\n\nThe accompanying server defaults to a 100-row preview with a 1000-row cap. Actual behavior depends on the target server and returned truncation information. Use the corresponding export command for full data.\n\n--max-rows=0 uses the server default; it does not mean unlimited rows.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Modify database data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/modify-database-data.md\nWeb: https://docs.succapp.com/ai-building/data/modify-database-data",
-	"cli.cmd.db.exec.maxRows": "Limit returned rows for result sets.",
-	"cli.cmd.db.exec.force": "Confirm SQL marked dangerous by safety analysis.",
+	"cli.cmd.db.exec.desc": "Execute SQL and obtain result sets or update counts.\n\nSupports queries and data or schema changes. Result sets are subject to server preview limits.\n\nMay modify the database. Dangerous-SQL checks do not cover every write risk; writes may have taken effect even after a timeout or disconnection.",
+	"cli.cmd.db.exec.out": "In JSON, resultType is resultSet, updateCount, empty, or mixed; updateCount sums nonnegative update counts. Result sets use fields[] column names and data[][] row-value arrays matched by column position, unlike the object records in db query result.rows. results[] summarizes individual execution results; sqlInfos[] contains statement analysis.\n\nrowCount counts returned rows, maxRows is the preview limit, and truncated indicates truncation; an absent value does not mean false. elapsedMs/timeoutMs are milliseconds, unlike --timeout input in seconds.",
+	"cli.cmd.db.exec.maxRows": "Limit returned rows for result sets.\n\nThe matching server defaults to 100 with a maximum of 1000; 0 uses the server default, not unlimited rows.",
+	"cli.cmd.db.exec.force": "Confirm SQL marked dangerous by safety analysis.\n\nNot requiring this option does not imply read-only execution. After a timeout or disconnection, check database state before retrying.",
 	"cli.cmd.db.exec.dangerousSql": "Dangerous SQL was blocked. Review the impact before rerunning with --force.{0}",
 	"cli.cmd.db.exec.forceRequired": "Execution stopped. Add --force only after confirming the SQL impact.",
 	"cli.cmd.db.exec.fullTableData": "full-table data mutation",
 	"cli.cmd.db.exec.schemaMutation": "schema mutation",
 	"cli.cmd.db.import.summary": "Import CSV data into a table.",
-	"cli.cmd.db.import.desc": "Import CSV data into a database table.\n\nUse --input for a UTF-8 CSV file or - for standard input, with column names in the first row. append is the default. Both truncate and replace currently clear the target table before importing; they are not primary-key upserts.\n\n--dry-run only parses and counts CSV rows; it does not validate database constraints or perform writes. importedRows counts CSV data rows rather than independently verified inserted rows. Import changes the database; check database state after interruption before appending again.\n\nA table can be written as schema.table. With explicit --schema, <table> is used as the complete table name; supply an unqualified name to avoid double qualification.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Import and export data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/import-export-data.md\nWeb: https://docs.succapp.com/ai-building/data/import-export-data",
-	"cli.cmd.db.import.input": "Read table data CSV from a file, or use - for stdin.",
-	"cli.cmd.db.import.mode": "Import mode. Defaults to append; truncate and replace must be passed explicitly.",
+	"cli.cmd.db.import.desc": "Import CSV data into a database table.\n\nSupports appending, clearing before import, and a dry run that only parses and counts data. Dry runs do not validate database constraints.\n\nActual imports modify the database; repeating an import after an interrupted response may duplicate data.",
+	"cli.cmd.db.import.out": "dryRun identifies a dry run; mode is the applied import mode. importedRows counts CSV data rows, not independently verified rows stored in the database; skippedRows counts skipped rows. elapsedMs/timeoutMs use milliseconds, unlike --timeout input in seconds.",
+	"cli.cmd.db.import.input": "A UTF-8 CSV file, or - for stdin. The target physical table must already exist and the first row is the header. Use db table describe to confirm physical column names and types. Columns are matched by header names, not positions; prefer unique physical names instead of relying on comment or primary-key compatibility matching. The # typed header from whole-table db export is also accepted.\n\nUse comma separators. Quote values containing commas, quotes or newlines with double quotes, doubling embedded quotes. This character-column example requires real table and column names:\n    ID,NOTE\n    1,\"a,b\"\n    2,\n    3,\"\"\nLeading and trailing whitespace in unquoted fields is trimmed. To preserve it, quote the value, for example \" P1 \". Whitespace inside quotes is retained.\nAn unquoted empty field is read as null; a quoted empty field is an empty string for character data, though the target database or field type may convert it to null. Text null and backslash-N are not universal null markers.\n\nPrefer yyyy-MM-dd dates and yyyy-MM-dd HH:mm:ss timestamps; verify conversion against target types. For binary migration retain the typed whole-table export header and Base64 content. Binary length labels from query exports cannot restore bytes. --dry-run only parses and counts: it does not validate column mapping, type conversion or database constraints. Query the target after importing.",
+	"cli.cmd.db.import.mode": "append adds rows; truncate and replace clear the target table before importing. Neither is a primary-key upsert.",
 	"cli.cmd.db.import.dryRun": "Parse and count CSV rows without writing or validating actual database constraints.",
 	"cli.cmd.db.import.schema": "Table schema.",
 	"cli.cmd.db.export.summary": "Export table data or a query result as CSV.",
-	"cli.cmd.db.export.desc": "Export table data or a query result as CSV.\n\nChoose exactly one of <table>, --query and --query-file, and specify a local CSV file with --output. Overwriting an existing file requires --force. Query conditions and server permissions still apply; check the output file and reported size after completion.\n\nA table can be written as schema.table. With explicit --schema, <table> is used as the complete table name; supply an unqualified name to avoid double qualification.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Import and export data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/import-export-data.md\nWeb: https://docs.succapp.com/ai-building/data/import-export-data",
-	"cli.cmd.db.export.query": "Export a query result instead of table data.",
-	"cli.cmd.db.export.queryFile": "Read export query SQL from a file.",
+	"cli.cmd.db.export.desc": "Export database table data or SQL query results to a local CSV file.\n\nThe export scope depends on query conditions and database permissions.\n\nWrites a local file without changing database content.",
+	"cli.cmd.db.export.out": "Key JSON output example (common result fields omitted; comments explain fields; actual output is strict JSON):\n    {\n      \"dataSource\": \"default\",             // Data source identifier\n      \"schema\": \"public\",                  // Present if specified or parsed from the table name\n      \"tableName\": \"orders\",               // Table mode; query mode uses \"query\": true\n      \"timeoutSeconds\": 30,                // Requested timeout in seconds\n      \"output\": \"/work/orders.csv\",        // Absolute local path receiving the CSV content\n      \"size\": 128                          // File size in bytes\n    }\n\nThe current companion server produces UTF-8 CSV without a BOM, using commas and LF. Fields containing commas, quotes or line breaks are quoted, with internal quotes doubled: 中文,\"引号\" becomes \"中文,\"\"引号\"\"\". Null and empty strings may both be empty fields; CSV does not preserve all types.\n\nQuery export uses result field names in the first row and length tags for binary values. Table export starts its header with # and includes field types, lengths and primary keys, e.g. #id(I|10|PK),name(C|256); binary values default to Base64. Use query export for a plain field-name header.",
+	"cli.cmd.db.export.input": "Choose exactly one input: <table>, --query or --query-file. Query input is raw SQL.",
+	"cli.cmd.db.export.query": "Export query results instead of table data; input is raw SQL.",
+	"cli.cmd.db.export.queryFile": "Read raw export SQL from a UTF-8 file.",
 	"cli.cmd.db.export.schema": "Table schema or SQL execution schema.",
-	"cli.cmd.db.export.output": "Write CSV output to a local file.",
-	"cli.cmd.db.export.force": "Overwrite the output file if it already exists.",
+	"cli.cmd.db.export.output": "Local CSV output file; an existing file requires --force.",
+	"cli.cmd.db.export.force": "Allow overwriting an existing local output file.",
 	"cli.cmd.db.export.exportedData": "Exported data to {0}",
-	"cli.cmd.db.*.datasource": "A data source identifier returned by db source list, not a connector ID.",
-	"cli.cmd.db.*.sql": "SQL text; mutually exclusive with --file. If both are omitted, read standard input.",
-	"cli.cmd.db.*.table": "A table name returned by db table list; schema.table is supported when --schema is omitted.",
-	"cli.cmd.db.source.*.datasource": "A data source identifier returned by db source list, not a connector ID.",
-	"cli.cmd.db.schema.*.datasource": "A data source identifier returned by db source list, not a connector ID.",
-	"cli.cmd.db.table.*.datasource": "A data source identifier returned by db source list, not a connector ID.",
-	"cli.cmd.db.table.*.schema": "A schema returned by db schema list; omitted scope is resolved by the data source.",
-	"cli.cmd.db.table.*.table": "A table name returned by db table list; schema.table is supported when --schema is omitted.",
 	"cli.cmd.server.title": "Server",
 	"cli.cmd.server.summary": "inspect and operate the target SuccApp server",
-	"cli.cmd.server.desc": "Inspect and operate the target SuccApp server.\n\nThese commands access the target server directly without cloning a project. Select the target with --server or the active workspace server, and authenticate with auth login. File, settings, script and administrative writes affect the server directly.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: System diagnostics\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/troubleshoot/system-diagnostics.md\nWeb: https://docs.succapp.com/ai-building/troubleshoot/system-diagnostics",
+	"cli.cmd.server.desc": "Access a SuccApp server directly to manage remote resources and diagnose runtime state.\n\nProvides remote project and file operations, settings and recycle bin management, and cache, cluster, thread and technical log tools, without first cloning a project. Use dev to discover development resources and use development tools.\n\nServer access requires appropriate authentication and permissions. Write operations affect the server directly.",
 	"cli.cmd.server.serverNotConfigured": "Server is not configured for this workspace: {0}",
 	"cli.cmd.server.serverReachable": "Server reachable: {0}",
 	"cli.cmd.server.ping.summary": "Check server reachability.",
-	"cli.cmd.server.ping.desc": "Check whether the SuccApp Dev Tool v2 ping endpoint is reachable.\n\nA server URL may be supplied directly. Success means the ping endpoint is reachable, not that authentication, business permissions or database access are valid. Continue with server info for diagnostics.",
+	"cli.cmd.server.ping.desc": "Check whether a SuccApp server is reachable.\n\nSuccess only means the server responded to the connectivity check; it does not verify login, business permissions or database availability.",
+	"cli.cmd.server.ping.out": "--json returns reachable=true when the connectivity check succeeds; request failures produce a standard error and a nonzero exit code.",
 	"cli.cmd.server.info.summary": "Show server information.",
-	"cli.cmd.server.info.desc": "Show server information and metadata versions.\n\nShows main information by default. Select sections with --scope or expand with --all. This confirms the environment and version without upgrading it. Use --json for structured fields in scripts.",
-	"cli.cmd.server.info.scope": "Show only the selected scope. Repeat or use comma-separated values: product, sys, metadata, inspect, jvm, env, all.",
+	"cli.cmd.server.info.desc": "Inspect server information and metadata versions to identify the target environment.\n\nSupports key information and detailed product, system, JVM and other scopes.\n\nOnly reads information without performing upgrades.",
+	"cli.cmd.server.info.out": "--json returns info: productType, version and apiVersion identify product and protocol versions; scopes records the selected sections. productInfo, sysInfo, metadataVersions, sysInspectInfo, jvmInfo and systemEnvirInfo are included by scope. Unselected or unavailable fields are omitted, not zero. --raw preserves original server detail fields inside info.",
+	"cli.cmd.server.info.scope": "Select information scopes; repeat or separate with commas.",
 	"cli.cmd.server.info.all": "Show all information scopes.",
 	"cli.cmd.server.info.raw": "Output the raw server detail response.",
 	"cli.cmd.server.cache.title": "Server cache",
 	"cli.cmd.server.cache.summary": "manage server cache",
-	"cli.cmd.server.cache.desc": "Manage server cache.\n\nInspect names and usage with list before cleaning individual entries with clean. Cleaning affects running server caches; --all covers all system caches.",
+	"cli.cmd.server.cache.desc": "Inspect and clear server system caches.\n\nShows entries, usage and hit rates.\n\nClearing invalidates caches and may cause subsequent requests to reload data.",
 	"cli.cmd.server.cache.list.summary": "List server cache entries.",
-	"cli.cmd.server.cache.list.desc": "List server-side system cache entries (count, disk/memory usage, hit rate).\n\nValues reflect cache state at query time; hit rates and other statistics change during operation. Use returned names when cleaning rather than guessing identifiers.",
+	"cli.cmd.server.cache.list.desc": "List server system caches to inspect entry counts, disk and memory usage, and hit rates.\n\nResults reflect state at query time; statistics may change as the server runs.",
+	"cli.cmd.server.cache.list.out": "--json returns caches[] and summary.caches (entry count). Use cacheName with clean. entitiesCount counts cached entities; diskUsed and memUsed are bytes; hitRate ranges from 0 to 1; lastAccessTime is Unix milliseconds. Unavailable metrics are omitted, not zero. No entries returns caches=[] with empty.",
 	"cli.cmd.server.cache.list.empty": "No server cache entries.",
 	"cli.cmd.server.cache.clean.summary": "Clean server cache.",
-	"cli.cmd.server.cache.clean.desc": "Clean a server-side system cache entry by <name>, or all caches with --all.\n\nChoose exactly one of <name> and --all; no additional --force is required. Cleaning invalidates caches and subsequent access may reload data. Inspect list before and after the operation.",
-	"cli.cmd.server.cache.clean.all": "Clean all server cache entries.",
+	"cli.cmd.server.cache.clean.desc": "Clear selected or all server system caches.\n\nInvalidates caches and may cause subsequent requests to reload data, affecting short-term access performance.",
+	"cli.cmd.server.cache.clean.out": "--json returns cleaned=true and cacheName; cacheName is * when all caches are cleared.",
+	"cli.cmd.server.cache.clean.all": "Clean all server cache entries.\n\nChoose exactly one of --all and <name>; no --force is required.",
 	"cli.cmd.server.cache.clean.cleaned": "Server cache cleaned: {1} ({0})",
+	"cli.cmd.server.cache.clean.name": "Cache name returned by server cache list; choose this or --all.",
+	"cli.cmd.server.cache.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
 	"cli.cmd.server.cluster.title": "Server cluster",
 	"cli.cmd.server.cluster.summary": "inspect server cluster nodes",
-	"cli.cmd.server.cluster.desc": "Inspect cluster membership, health, network state, and runtime diagnostics.\n\nObtain node IDs with list, then inspect a node with show. Membership and diagnostic samples can change as nodes join or leave.",
+	"cli.cmd.server.cluster.desc": "Inspect cluster members, health, network state and runtime diagnostics.\n\nProvides cluster overviews and individual node details; information may change as nodes join or leave.",
 	"cli.cmd.server.cluster.list.summary": "List server cluster nodes.",
-	"cli.cmd.server.cluster.list.desc": "List the same cluster node data used by the server system-settings page.\n\nUse returned node IDs with cluster show. Check availability and health before further diagnostics; an unreachable listed node is not a healthy node.\n\n--watch refreshes continuously until Ctrl+C; --interval requires --watch. --watch does not support --json; scripts should repeat one-shot JSON queries.",
-	"cli.cmd.server.cluster.list.health": "Only include nodes with this health severity: ok, warning, error, or unknown.",
-	"cli.cmd.server.cluster.list.watch": "Continuously refresh the cluster status until interrupted.",
-	"cli.cmd.server.cluster.list.interval": "Set the watch refresh interval in milliseconds (3000 to 60000). Requires --watch.",
+	"cli.cmd.server.cluster.list.desc": "List cluster nodes to inspect membership, availability and health.\n\nSupports one-time queries and continuous observation, using the same data as server system settings. Unreachable nodes must not be treated as healthy.",
+	"cli.cmd.server.cluster.list.out": "--json returns nodes[], generatedAt (Unix milliseconds) and summary. summary.knownNodes counts nodes before filtering; summary.returnedNodes counts returned nodes, not pagination totals. Use id with show and name with commands whose --cluster selects a node name. healthState, status and properties describe health and connectivity. Missing fields are unavailable, not evidence of health or zero load.",
+	"cli.cmd.server.cluster.list.health": "Filter nodes by health level.",
+	"cli.cmd.server.cluster.list.watch": "Continuously refresh the cluster status until interrupted.\n\nStop with Ctrl+C. Does not support --json or --pretty-json; scripts can repeat one-time JSON queries.",
+	"cli.cmd.server.cluster.list.interval": "Watch refresh interval in milliseconds; requires --watch.",
 	"cli.cmd.server.cluster.list.empty": "No cluster nodes match the current filter.",
 	"cli.cmd.server.cluster.list.updatedAt": "Updated: {0}",
 	"cli.cmd.server.cluster.show.summary": "Show one server cluster node.",
-	"cli.cmd.server.cluster.show.desc": "Show an exact cluster node by ID using the same scoped information layout as server info.\n\nUse a node ID returned by cluster list. --scope or --all expands the information requested. A node can go offline between requests; refresh the node list after a failure.",
-	"cli.cmd.server.cluster.show.scope": "Show only the selected human-output details. Repeat or use comma-separated values: product, sys, inspect, jvm, env, all.",
-	"cli.cmd.server.cluster.show.all": "Show all human-output detail scopes.",
+	"cli.cmd.server.cluster.show.desc": "Inspect detailed runtime state for one cluster node.\n\nProvides scoped details consistent with server information queries. A node may go offline between requests.",
+	"cli.cmd.server.cluster.show.out": "--json returns node, retaining its id, name and status. Diagnostics are inside node.properties, selected by --scope or --all. Missing diagnostic fields do not establish health or zero values.",
+	"cli.cmd.server.cluster.show.scope": "Select detail scopes returned in both text and JSON; repeat or separate with commas.",
+	"cli.cmd.server.cluster.show.all": "Return all detail scopes in both text and JSON.",
 	"cli.cmd.server.cluster.out.name": "Name",
 	"cli.cmd.server.cluster.out.role": "Role",
 	"cli.cmd.server.cluster.out.health": "Health",
@@ -486,30 +605,52 @@
 	"cli.cmd.server.cluster.out.deployPath": "Deploy path",
 	"cli.cmd.server.cluster.out.lastReceivedAt": "Last received",
 	"cli.cmd.server.cluster.out.lastSentAt": "Last sent",
+	"cli.cmd.server.cluster.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
+	"cli.cmd.server.cluster.*.nodeId": "Node ID returned by server cluster list.",
 	"cli.cmd.server.thread.title": "Server threads",
 	"cli.cmd.server.thread.summary": "inspect JVM threads",
-	"cli.cmd.server.thread.desc": "Inspect JVM thread snapshots and request cancellation of registered product tasks.\n\nUse list for a quick filter, show for one thread, dump for full stacks, and top for sampled analysis. cancel only requests cooperative cancellation of registered product tasks; it cannot terminate arbitrary JVM threads.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: System diagnostics\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/troubleshoot/system-diagnostics.md\nWeb: https://docs.succapp.com/ai-building/troubleshoot/system-diagnostics",
-	"cli.cmd.server.thread.*.state": "Only include this JVM state: new, runnable, blocked, waiting, timed-waiting, or terminated.",
+	"cli.cmd.server.thread.desc": "Inspect JVM thread snapshots, analyze hotspots, blocking and SQL execution, and request cancellation of registered product tasks.\n\nProvides thread summaries, full stacks and continuous sampling. Cancellation is cooperative for product tasks, not arbitrary JVM thread termination.",
+	"cli.cmd.server.thread.*.state": "Filter by JVM thread state.",
 	"cli.cmd.server.thread.*.working": "Only include threads that are currently doing work.",
 	"cli.cmd.server.thread.*.sql": "Only include threads that are currently executing SQL.",
+	"cli.cmd.server.thread.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
+	"cli.cmd.server.thread.*.threadId": "Thread ID from server thread list on the same node; recheck before use.",
 	"cli.cmd.server.thread.list.summary": "List JVM threads.",
-	"cli.cmd.server.thread.list.desc": "List JVM thread summaries without full stack traces.\n\nFilter by state, registered work or SQL execution, and select a node with --cluster. Thread IDs are meaningful only for the corresponding node and time. Use show or dump for full context.",
-	"cli.cmd.server.thread.list.cluster": "Run the query on one cluster node.",
+	"cli.cmd.server.thread.list.desc": "List JVM thread summaries to find working threads, SQL execution or specific thread states.\n\nDoes not return full stacks. Thread IDs are meaningful only for the corresponding node and time.",
+	"cli.cmd.server.thread.list.out": "--json returns threads[]. threadId, taskSerial and cancelSerial are strings to preserve large integers. state uses uppercase JVM states such as TIMED_WAITING. working, executingSql and cancelable indicate work, SQL execution and cancellation eligibility. Use cancelSerial with cancel; its absence does not authorize cancellation. Lists omit full stacks.",
+	"cli.cmd.server.thread.list.cluster": "Query a node name from server cluster list; defaults to the current HTTP node.",
 	"cli.cmd.server.thread.list.empty": "No JVM threads match the current filter.",
 	"cli.cmd.server.thread.dump.summary": "Capture a JVM thread dump.",
-	"cli.cmd.server.thread.dump.desc": "Capture matching JVM threads with untruncated stack traces.\n\nNarrow the scope with --state, --working or --sql, and select a node with --cluster. Output is a single snapshot. Use top or compare multiple snapshots to investigate sustained activity.",
-	"cli.cmd.server.thread.dump.cluster": "Capture the thread dump from one cluster node.",
+	"cli.cmd.server.thread.dump.desc": "Capture JVM threads and their full call stacks to investigate blocking and execution locations.\n\nSupports filtering by thread state, active work and SQL execution. Results are a sampling snapshot, not evidence of sustained utilization.",
+	"cli.cmd.server.thread.dump.out": "--json returns capturedAt (Unix milliseconds), threads[] and deadlockedThreadIds[]. Each thread has full stacks; thread IDs are strings. deadlockedThreadIds lists deadlocks detected in this snapshot. An empty array only means none were detected at that instant.",
+	"cli.cmd.server.thread.dump.cluster": "Capture from a node name returned by server cluster list; defaults to the current HTTP node.",
 	"cli.cmd.server.thread.dump.deadlocks.none": "Deadlocks: none",
 	"cli.cmd.server.thread.dump.deadlocks.found": "Deadlocks: {0}",
 	"cli.cmd.server.thread.dump.waitingLock": "waiting on {0}",
 	"cli.cmd.server.thread.dump.waitingLockOwned": "waiting on {0}, owned by thread #{1}",
 	"cli.cmd.server.thread.top.summary": "Sample JVM thread hotspots.",
-	"cli.cmd.server.thread.top.desc": "Poll raw CPU, thread, memory, and GC samples, then analyze them locally without retaining a server-side report.\n\n--duration controls total time, --interval the sampling interval, and --refresh progress refresh. Analysis covers only the observation window. Check failed nodes and sample completeness; missing samples are not zero load.",
-	"cli.cmd.server.thread.top.cluster": "Sample one cluster node, or use all to poll every current member concurrently.",
+	"cli.cmd.server.thread.top.desc": "Sample and analyze CPU, threads, memory and GC over time to identify hotspots and suspected stalls.\n\nAnalysis is performed locally; the server does not retain the final report. Results reflect only the observation window, and missing samples do not mean zero load.",
+	"cli.cmd.server.thread.top.out": "--json returns the final report. Single-node reports include status (completed or partial), sampleCount, hotThreads, findings, memory, garbageCollectors and warnings. findings are diagnostic leads, not confirmed faults. --cluster=all returns nodes[], globalHotThreads, globalFindings, requestedNodeCount and sampledNodeCount, retaining errors for failed nodes. partial or warnings indicates incomplete sampling or limitations; missing metrics such as CPU are not zero.",
+	"cli.cmd.server.thread.top.out.node": "Node",
+	"cli.cmd.server.thread.top.out.cpu": "CPU",
+	"cli.cmd.server.thread.top.out.processShare": "Process share",
+	"cli.cmd.server.thread.top.out.location": "Top frame",
+	"cli.cmd.server.thread.top.out.details": "Details",
+	"cli.cmd.server.thread.top.out.reason": "Reason",
+	"cli.cmd.server.thread.top.out.hits": "Hits",
+	"cli.cmd.server.thread.top.out.status": "Status",
+	"cli.cmd.server.thread.top.out.error": "Error",
+	"cli.cmd.server.thread.top.out.samples": "Samples",
+	"cli.cmd.server.thread.top.out.heap": "Heap",
+	"cli.cmd.server.thread.top.out.heapDelta": "Heap delta",
+	"cli.cmd.server.thread.top.out.collector": "Collector",
+	"cli.cmd.server.thread.top.out.gcCount": "Collections",
+	"cli.cmd.server.thread.top.out.gcTime": "GC time",
+	"cli.cmd.server.thread.top.cluster": "Sample a node name from server cluster list; all selects all current members.",
 	"cli.cmd.server.thread.top.duration": "Set the client-side analysis window from 1s to 20s; use an ms or s suffix.",
 	"cli.cmd.server.thread.top.interval": "Set each server sampling window from 200ms to 2s; the analysis window must contain at least two samples.",
 	"cli.cmd.server.thread.top.refresh": "Set how often the live client-side report refreshes from 500ms to 5s.",
-	"cli.cmd.server.thread.top.limit": "Limit hotspot and stall-candidate rows from 1 to 50.",
+	"cli.cmd.server.thread.top.limit": "Limit the number of hotspot threads and suspected stalls.",
 	"cli.cmd.server.thread.top.noProgress": "Suppress the live report and print only the final report.",
 	"cli.cmd.server.thread.top.nodeSummary": "Node {0}: sampled for {1}, {2} samples across {3} observed threads.",
 	"cli.cmd.server.thread.top.cpuSummary": "JVM process CPU: {0}; accounted Java-thread CPU: {1}.",
@@ -532,31 +673,18 @@
 	"cli.cmd.server.thread.top.hotThreads": "Hot threads:",
 	"cli.cmd.server.thread.top.stallCandidates": "Long-running thread findings (diagnostic clues, not confirmed faults):",
 	"cli.cmd.server.thread.top.warnings": "Warnings: {0}",
-	"cli.cmd.server.thread.top.out.node": "Node",
-	"cli.cmd.server.thread.top.out.cpu": "CPU",
-	"cli.cmd.server.thread.top.out.processShare": "Process share",
-	"cli.cmd.server.thread.top.out.location": "Top frame",
-	"cli.cmd.server.thread.top.out.details": "Details",
-	"cli.cmd.server.thread.top.out.reason": "Reason",
-	"cli.cmd.server.thread.top.out.hits": "Hits",
-	"cli.cmd.server.thread.top.out.status": "Status",
-	"cli.cmd.server.thread.top.out.error": "Error",
-	"cli.cmd.server.thread.top.out.samples": "Samples",
-	"cli.cmd.server.thread.top.out.heap": "Heap",
-	"cli.cmd.server.thread.top.out.heapDelta": "Heap delta",
-	"cli.cmd.server.thread.top.out.collector": "Collector",
-	"cli.cmd.server.thread.top.out.gcCount": "Collections",
-	"cli.cmd.server.thread.top.out.gcTime": "GC time",
 	"cli.cmd.server.thread.show.summary": "Show one JVM thread.",
-	"cli.cmd.server.thread.show.desc": "Show the current thread snapshot, authorized SQL details, and full stack trace.\n\nObtain the thread ID from list and keep the same --cluster target. The thread may already have ended or changed tasks. For cancellation, read cancelSerial from a fresh snapshot and check cancel requirements.",
-	"cli.cmd.server.thread.show.cluster": "Read the thread from one cluster node.",
+	"cli.cmd.server.thread.show.desc": "Inspect a thread's current snapshot, authorized SQL information and full stack.\n\nThe thread may have ended or switched tasks. Snapshots and cancellation serials represent only the state at read time.",
+	"cli.cmd.server.thread.show.out": "--json returns thread. threadId, taskSerial and cancelSerial are strings; stacks is an array of stack frames and state is an uppercase JVM state. sql depends on permissions and masking; sqlTruncated indicates truncation and maskedFields identifies masked fields. Missing fields do not prove that no SQL is running. Check cancelable and the latest cancelSerial before requesting cancellation.",
+	"cli.cmd.server.thread.show.cluster": "Read a node name from server cluster list; use the same node as list.",
 	"cli.cmd.server.thread.show.stack": "Stack:",
 	"cli.cmd.server.thread.show.stackEmpty": "  (stack is no longer available)",
 	"cli.cmd.server.thread.cancel.summary": "Request cancellation of a JVM thread task.",
-	"cli.cmd.server.thread.cancel.desc": "Request cooperative cancellation of the registered product task that still matches the cancel serial.\n\nProvide a fresh --cancel-serial and --force, targeting the same node used by show. Success means cancellation was requested, not that the task ended immediately. Recheck state afterwards; do not blindly retry against a new task if the serial changes.",
-	"cli.cmd.server.thread.cancel.cancelSerial": "Require the current cancel serial returned by thread list or show.",
-	"cli.cmd.server.thread.cancel.cluster": "Cancel the task on one cluster node.",
-	"cli.cmd.server.thread.cancel.force": "Confirm the cooperative cancellation request.",
+	"cli.cmd.server.thread.cancel.desc": "Request cooperative cancellation of a registered product task on a JVM thread.\n\nRequests are made only when the current task still matches the cancellation serial; this does not terminate arbitrary JVM threads.\n\nSuccess means cancellation was requested, not that the task ended immediately.",
+	"cli.cmd.server.thread.cancel.out": "--json returns success=true when the cancellation request is accepted, not when the thread or task has finished.",
+	"cli.cmd.server.thread.cancel.cancelSerial": "The current cancellation serial from thread list or show; must match the latest task on the same node as show.",
+	"cli.cmd.server.thread.cancel.cluster": "Cancel on the selected node name; use the same node as show.",
+	"cli.cmd.server.thread.cancel.force": "Confirm the cooperative cancellation request.\n\nRequired.",
 	"cli.cmd.server.thread.cancel.requested": "Cancellation requested for thread {0} on {1}.",
 	"cli.cmd.server.thread.out.id": "ID",
 	"cli.cmd.server.thread.out.working": "Working",
@@ -568,52 +696,62 @@
 	"cli.cmd.server.thread.out.name": "Name",
 	"cli.cmd.server.thread.out.description": "Description",
 	"cli.cmd.server.thread.out.taskSerial": "Task serial",
-	"cli.cmd.server.thread.out.cancelSerial": "Cancel serial",
+	"cli.cmd.server.thread.out.cancelSerial": "Cancellation serial",
 	"cli.cmd.server.thread.out.startedAt": "Started",
-	"cli.cmd.server.thread.out.datasource": "Datasource",
+	"cli.cmd.server.thread.out.datasource": "Data source",
 	"cli.cmd.server.thread.out.logAvailable": "Log available",
 	"cli.cmd.server.techLog.title": "Server technical log",
 	"cli.cmd.server.techLog.summary": "inspect and manage server technical logs",
-	"cli.cmd.server.techLog.desc": "Inspect technical logs and manage runtime logger levels. These commands require access to the system-settings console.\n\nBefore using examples, set NODE to a node ID from server cluster list and LOG_FILE to a file name from tech-log list for that node. Keep variables double-quoted so spaces and shell metacharacters remain part of the argument.\n\nUse list for log files, tail to read or follow the current log, download to save a file, and level to manage logging levels. Select the intended node in a cluster and limit reads to the diagnostic context needed.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: System diagnostics\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/troubleshoot/system-diagnostics.md\nWeb: https://docs.succapp.com/ai-building/troubleshoot/system-diagnostics",
+	"cli.cmd.server.techLog.desc": "Inspect server technical logs and manage runtime logging levels to diagnose runtime issues.\n\nSupports file listing, log reads and following, downloads, and node logging level management.\n\nRequires appropriate system settings console permissions. Logging level changes affect server runtime configuration.",
 	"cli.cmd.server.techLog.*.cluster": "Read from a named cluster node; omit for the current HTTP node. Find node names with 'succapp server cluster list'.",
+	"cli.cmd.server.techLog.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
 	"cli.cmd.server.techLog.list.summary": "List technical log files.",
-	"cli.cmd.server.techLog.list.desc": "List the same .log files shown by the server system-settings console. Requires console view permission.\n\nBefore using examples, set NODE to a node ID from server cluster list and LOG_FILE to a file name from tech-log list for that node. Keep variables double-quoted so spaces and shell metacharacters remain part of the argument.\n\nUse returned filenames with download and keep the same node. This lists server logs, not local CLI logs.",
+	"cli.cmd.server.techLog.list.desc": "List server technical log files to choose logs for reading or downloading.\n\nUses the server log directory, as in the system settings console, rather than local CLI logs.\n\nRequires console view permission.",
+	"cli.cmd.server.techLog.list.out": "--json returns files[], levels[] and warnings[]. Use files[].name with download; size is bytes and modifyTime Unix milliseconds. levels contains logger levels; use level list for focused inspection. warnings describes limitations such as node reads and should be checked. No log files returns files=[].",
 	"cli.cmd.server.techLog.list.empty": "No technical log files are available on this node.",
 	"cli.cmd.server.techLog.tail.summary": "Read the technical log tail.",
-	"cli.cmd.server.techLog.tail.desc": "Read the active technical log using the system-settings cursor protocol. Requires console view permission. One-shot JSON keeps content as plain log text.\n\nSet POSITION and CURSOR_FILE from position and logFile in the same tail response and keep the same target node; these are not arbitrary line numbers or file names.\n\nBefore using examples, set NODE to a node ID from server cluster list and LOG_FILE to a file name from tech-log list for that node. Keep variables double-quoted so spaces and shell metacharacters remain part of the argument.\n\nReads once by default; --follow polls until stopped with Ctrl+C. To resume, pass --from and --log-file from the previous result together. Do not reuse a cursor for another node or a rotated file.\n\n--from and --log-file must be paired and cannot be combined with explicit --lines. --interval requires --follow. --follow does not support --json; scripts can resume using one-shot JSON results.",
-	"cli.cmd.server.techLog.tail.lines": "Keep this many lines from the initial log fragment (1 to 5000, default 200).",
-	"cli.cmd.server.techLog.tail.from": "Continue from a previous one-shot JSON result; requires --log-file.",
-	"cli.cmd.server.techLog.tail.logFile": "Use the log file from a previous one-shot JSON result; requires --from.",
-	"cli.cmd.server.techLog.tail.follow": "Continue polling and append new log content until interrupted with Ctrl+C.",
-	"cli.cmd.server.techLog.tail.interval": "Set the follow polling interval in milliseconds (500 to 60000). Requires --follow.",
+	"cli.cmd.server.techLog.tail.desc": "Read the current technical log to investigate runtime issues. Supports a single read, continuous following and resuming from a previous read position.\n\nRequires console view permission. Only reads logs; it does not modify server log content or logger levels.",
+	"cli.cmd.server.techLog.tail.out": "Text mode writes raw log content. Use --json or --pretty-json to obtain a resume cursor. Key JSON fields:\n\ncontent: log text returned by this read. An empty content with a non-null logFile means no log text was returned, not a read failure. logFile=null means no log file is available for this read; do not construct a resume request from it.\n\nfrom: a non-negative decimal integer cursor returned as a string; pass it back unchanged. It is not a line number and must not be calculated manually. logFile: the file name paired with the cursor. reset=true means the cursor was reset; do not treat this content as a continuous increment from the original file.\n\nThe examples first read JSON, then use from and the non-null logFile from that same response as POSITION and CURSOR_FILE. Resume with the same SERVER and NODE. Query again if no file is available, and do not reuse an old file cursor for another node or file.",
+	"cli.cmd.server.techLog.tail.cluster": "Read from a named cluster node; omit for the current HTTP node. NODE is the node name returned by succapp server cluster list; keep the same node for initial and subsequent reads.",
+	"cli.cmd.server.techLog.tail.lines": "Lines retained from the tail on the initial read; cannot be combined with --from or --log-file.",
+	"cli.cmd.server.techLog.tail.from": "The from cursor from the previous JSON response, a non-negative decimal integer represented as a string; pass it unchanged, not as a line number. Requires --log-file, excludes --lines, and must resume on the same server and node.",
+	"cli.cmd.server.techLog.tail.logFile": "The non-null logFile from the same JSON response as --from; requires --from and cannot be combined with --lines.",
+	"cli.cmd.server.techLog.tail.follow": "Append new log text until stopped with Ctrl+C; omit to read once. Text output only; cannot be combined with --json or --pretty-json.",
+	"cli.cmd.server.techLog.tail.interval": "Follow polling interval in milliseconds. Requires --follow.",
 	"cli.cmd.server.techLog.tail.retry": "Temporary network error; retry {0} in {1} ms.",
 	"cli.cmd.server.techLog.download.summary": "Download a technical log file.",
-	"cli.cmd.server.techLog.download.desc": "Download a file returned by 'succapp server tech-log list'. Requires console log export permission.\n\nBefore using examples, set NODE to a node ID from server cluster list and LOG_FILE to a file name from tech-log list for that node. Keep variables double-quoted so spaces and shell metacharacters remain part of the argument.\n\nUse a filename from tech-log list on the same node. --output specifies the local file; overwriting requires --force. Downloading does not clear or rotate server logs.",
+	"cli.cmd.server.techLog.download.desc": "Download a server technical log file to this machine.\n\nSuitable for offline investigation. Downloads logs from the selected node without clearing or rotating server logs.\n\nRequires console log export permission. Writes a local file.",
+	"cli.cmd.server.techLog.download.out": "--json returns file (server log filename), output (local absolute path) and size (downloaded bytes). The log contents are saved to output, not embedded in JSON.",
 	"cli.cmd.server.techLog.download.cluster": "Download from a named cluster node; omit for the current HTTP node. Find node names with 'succapp server cluster list'.",
-	"cli.cmd.server.techLog.download.file": "Use the exact file name returned by 'succapp server tech-log list'.",
-	"cli.cmd.server.techLog.download.output": "Write the log to this local file.",
-	"cli.cmd.server.techLog.download.force": "Overwrite the local output file if it exists.",
+	"cli.cmd.server.techLog.download.file": "Use the exact file name returned by 'succapp server tech-log list'.\n\nTake LOG_FILE from tech-log list on the same node; NODE is the name from server cluster list. Double-quote shell variables.",
+	"cli.cmd.server.techLog.download.output": "Local log output file; overwriting an existing file requires --force.",
+	"cli.cmd.server.techLog.download.force": "Allow overwriting an existing local output file.",
 	"cli.cmd.server.techLog.download.downloaded": "Downloaded technical log {0} to {1}",
 	"cli.cmd.server.techLog.level.title": "Technical log level",
 	"cli.cmd.server.techLog.level.summary": "inspect and manage logger levels",
-	"cli.cmd.server.techLog.level.desc": "Inspect, persist, hot-apply, and reset logger levels. These commands require system-settings console view permission.\n\nUse list to compare saved and effective levels, set to change a logger, reset to restore inheritance, and apply-to-cluster to distribute the full configuration. Restore appropriate levels after temporary diagnostics.",
+	"cli.cmd.server.techLog.level.desc": "Inspect and manage logging levels on server nodes.\n\nCompare saved and effective levels, change individual loggers or restore inheritance, and submit complete log configuration to the cluster.\n\nRequires console view permission. Changes are persisted and affect runtime logging.",
 	"cli.cmd.server.techLog.level.*.cluster": "Modify a named cluster node; omit for the current HTTP node. Find node names with 'succapp server cluster list'.",
+	"cli.cmd.server.techLog.level.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
 	"cli.cmd.server.techLog.level.list.summary": "List logger levels.",
-	"cli.cmd.server.techLog.level.list.desc": "List persisted and effective logger levels on the target node. Requires console view permission.\n\nBefore using examples, set NODE to a node ID from server cluster list and LOG_FILE to a file name from tech-log list for that node. Keep variables double-quoted so spaces and shell metacharacters remain part of the argument.\n\nCompare explicit configuration with effective levels to understand inheritance. Confirm the target node in a cluster; one node does not establish consistency across the cluster.",
+	"cli.cmd.server.techLog.level.list.desc": "List logging levels on a target node to compare persisted configuration and effective values.\n\nHelps inspect logger inheritance. One node's result does not establish consistency across the cluster.\n\nRequires console view permission.",
+	"cli.cmd.server.techLog.level.list.out": "--json returns levels[]. package is the logger name; configuredLevel is its explicit configuration, effectiveLevel its runtime level, and level the level value supplied by the server. A logger without explicit configuration can inherit from its parent. Missing fields do not mean OFF; inspect effectiveLevel for actual behavior.",
 	"cli.cmd.server.techLog.level.list.cluster": "Read from a named cluster node; omit for the current HTTP node. Find node names with 'succapp server cluster list'.",
 	"cli.cmd.server.techLog.level.set.summary": "Set a logger level.",
-	"cli.cmd.server.techLog.level.set.desc": "Persist and hot-apply one logger level on the target node. Requires console view permission.\n\nBefore using examples, set NODE to a node ID from server cluster list and LOG_FILE to a file name from tech-log list for that node. Keep variables double-quoted so spaces and shell metacharacters remain part of the argument.\n\nTRACE and DEBUG require --force and may increase log volume and runtime overhead. Verify with level list afterwards. Use reset to restore inheritance; cluster distribution is a separate apply-to-cluster operation.",
-	"cli.cmd.server.techLog.level.set.force": "Confirm TRACE or DEBUG after reviewing the operational impact.",
+	"cli.cmd.server.techLog.level.set.desc": "Change and persist one logger level on a target node, applying it at runtime.\n\nRequires console view permission. More detailed logging may increase log volume and runtime overhead. Changes do not automatically propagate to other cluster nodes.",
+	"cli.cmd.server.techLog.level.set.out": "--json returns package (logger name) and the submitted level. Query level list for the actual effective value after the change.",
+	"cli.cmd.server.techLog.level.set.force": "Confirm TRACE or DEBUG after reviewing the operational impact.\n\nRequired for TRACE and DEBUG.",
 	"cli.cmd.server.techLog.level.set.logger": "Use an exact named logger; root and wildcards are not allowed.",
 	"cli.cmd.server.techLog.level.set.level": "Use TRACE, DEBUG, INFO, or ERROR. Values are case-sensitive.",
 	"cli.cmd.server.techLog.level.set.updated": "Updated logger {0} to {1}",
 	"cli.cmd.server.techLog.level.reset.summary": "Reset a named logger level.",
-	"cli.cmd.server.techLog.level.reset.desc": "Remove a logger's explicit level so it inherits from its parent. Requires console view permission.\n\nBefore using examples, set NODE to a node ID from server cluster list and LOG_FILE to a file name from tech-log list for that node. Keep variables double-quoted so spaces and shell metacharacters remain part of the argument.\n\nRemove explicit configuration by logger name. The effective level depends on its parent, so reset does not mean disabling logs. Inspect level list afterwards.",
+	"cli.cmd.server.techLog.level.reset.desc": "Remove an explicit logger level to restore inheritance from its parent.\n\nRequires console view permission. The effective level depends on the parent; restoring inheritance does not disable logging.",
+	"cli.cmd.server.techLog.level.reset.out": "--json returns package (logger name), without the inherited effective level. Query level list to inspect it.",
 	"cli.cmd.server.techLog.level.reset.logger": "Use an exact named logger; root and wildcards are not allowed.",
 	"cli.cmd.server.techLog.level.reset.reset": "Reset logger level: {0}",
 	"cli.cmd.server.techLog.level.apply.summary": "Apply logger levels to the cluster.",
-	"cli.cmd.server.techLog.level.apply.desc": "Submit the current HTTP node's complete Logback configuration to reachable peers. Requires console view permission. Success confirms submission only, not per-node completion.\n\n--force is required. This distributes the current HTTP node's complete Logback configuration, not just the last modified logger. Inspect the source configuration first, then check effective levels on each node after submission.",
-	"cli.cmd.server.techLog.level.apply.force": "Confirm replacing the complete Logback configuration on reachable cluster peers.",
+	"cli.cmd.server.techLog.level.apply.desc": "Submit the current HTTP node's complete log configuration to reachable cluster nodes.\n\nRequires console view permission. Submits the full Logback configuration, not just one logger, and may replace existing configuration on target nodes.\n\nSuccess only indicates submission, not successful processing on every node.",
+	"cli.cmd.server.techLog.level.apply.out": "Success only confirms submission of the complete configuration. No per-node execution results are returned; verify each node with level list.",
+	"cli.cmd.server.techLog.level.apply.force": "Confirm replacing the complete Logback configuration on reachable cluster peers.\n\nRequired.",
 	"cli.cmd.server.techLog.level.apply.applied": "The Logback configuration was submitted to the cluster.",
 	"cli.cmd.server.techLog.out.file": "File",
 	"cli.cmd.server.techLog.out.size": "Size",
@@ -624,19 +762,26 @@
 	"cli.cmd.server.techLog.out.effectiveLevel": "Effective",
 	"cli.cmd.server.proj.title": "Server project",
 	"cli.cmd.server.proj.summary": "inspect server projects",
-	"cli.cmd.server.proj.desc": "Inspect server projects.\n\nUse list to discover visible projects and create to create a server project. Download one locally with workspace project clone.",
+	"cli.cmd.server.proj.desc": "Inspect and create metadata projects on the server.\n\nShows projects visible to the current user to identify resource scopes.\n\nCreation takes effect directly on the server without automatically creating a local workspace copy.",
 	"cli.cmd.server.proj.list.summary": "List server projects.",
-	"cli.cmd.server.proj.list.desc": "List projects visible on a server.\n\nUse returned project names to locate files or clone a project. Visibility depends on the current user; an absent entry does not necessarily mean the project does not exist.",
+	"cli.cmd.server.proj.list.desc": "List server projects visible to the current user.\n\nResults depend on user permissions; an omitted project does not necessarily mean it does not exist.",
+	"cli.cmd.server.proj.list.out": "--json returns projects[]. name is the project name used in subsequent commands, id its identifier, and desc an optional description. No visible projects returns projects=[] with empty.",
 	"cli.cmd.server.proj.list.empty": "No visible projects found.",
 	"cli.cmd.server.proj.create.summary": "Create a server project.",
-	"cli.cmd.server.proj.create.desc": "Create a metadata project on a server.\n\nProvide a new project name and optionally --desc. Creation affects the server directly. Verify with project list, then clone for local development. After an interrupted response, check whether the project was already created.",
+	"cli.cmd.server.proj.create.desc": "Create a metadata project on the server.\n\nAffects the server directly without automatically cloning locally. Creation may already have completed if the response is interrupted.",
+	"cli.cmd.server.proj.create.out": "--json returns project with the new project name, id and optional desc. Use name to clone or query the project.",
 	"cli.cmd.server.proj.create.descOption": "Set the project description.",
 	"cli.cmd.server.proj.create.created": "Created server project: {0}",
+	"cli.cmd.server.proj.create.project": "New project name; inspect existing projects with server project list.",
+	"cli.cmd.server.proj.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
 	"cli.cmd.server.file.title": "Server file",
 	"cli.cmd.server.file.summary": "inspect and operate server metadata files",
-	"cli.cmd.server.file.desc": "Inspect and operate server metadata files.\n\nLocate paths with list/search/locate, then inspect them with info/show/history. create/update/remove change remote metadata directly without updating a local workspace. Obtain the revision before updates or deletion and verify afterwards.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Find metadata files\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/project/find-metafile.md\nWeb: https://docs.succapp.com/ai-building/project/find-metafile",
+	"cli.cmd.server.file.desc": "Inspect and manage server metadata files.\n\nSupports directory browsing, file search, metadata and content reads, version history, downloads, creation, updates, moves, renames and removal.\n\nWrite operations change server resources directly without updating the local workspace.",
 	"cli.cmd.server.file.*.file": "Read content from a local file.",
 	"cli.cmd.server.file.*.stdin": "Read content from stdin.",
+	"cli.cmd.server.file.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
+	"cli.cmd.server.file.*.path": "Server metadata path such as /DEMO/ana/sales.dash, not a local filesystem path.",
+	"cli.cmd.server.file.*.id": "Metadata ID obtainable from file information returned by server file info.",
 	"cli.cmd.server.file.badValue": "Invalid value for {0}: {1}",
 	"cli.cmd.server.file.expectedRevRequired": "{0} requires --expected-revision=<n> unless --force is used.",
 	"cli.cmd.server.file.fileOrStdinConflict": "Use either --file or --stdin, not both.",
@@ -646,23 +791,32 @@
 	"cli.cmd.server.file.missingServerFile": "Missing server file path.",
 	"cli.cmd.server.file.revForceConflict": "{0} accepts either --expected-revision or --force, not both.",
 	"cli.cmd.server.file.success": "{0} succeeded: {1}",
+	"cli.cmd.server.file.success.Create": "Created server file: {0}",
+	"cli.cmd.server.file.success.Put": "Updated server file: {0}",
+	"cli.cmd.server.file.success.Update": "Updated server file: {0}",
+	"cli.cmd.server.file.success.Delete": "Deleted server file: {0}",
+	"cli.cmd.server.file.success.Move": "Moved server file: {0}",
+	"cli.cmd.server.file.success.Rename": "Renamed server file: {0}",
 	"cli.cmd.server.file.unknownServerFile": "Unknown server file error.",
 	"cli.cmd.server.file.list.summary": "List server files.",
-	"cli.cmd.server.file.list.desc": "List direct children of a server metadata directory.\n\nUse a server metadata directory path; results contain direct children. Use file search for recursive discovery or name filtering. Quote paths containing spaces.",
+	"cli.cmd.server.file.list.desc": "List the immediate children of a server metadata directory.\n\nSuitable for browsing one directory; does not recursively list the entire tree.",
+	"cli.cmd.server.file.list.out": "--json returns files[] and summary.files. Entries contain id, name, remotePath, remoteParentPath, isFolder and available metadata; see server file info --help for field details. No children returns files=[] with empty. Counts cover direct children only, not the entire directory tree.",
 	"cli.cmd.server.file.list.empty": "Directory is empty: {0}",
+	"cli.cmd.server.file.list.path": "An absolute server metadata directory path, for example /DEMO/ana, not a local file path. Quote paths containing spaces; only immediate children are returned.\n\nOmit to query the server metadata root directory /.",
 	"cli.cmd.server.file.search.summary": "Search server files.",
-	"cli.cmd.server.file.search.desc": "Search readable server metadata files by full path or by combinable project, parent-directory, and file-name filters.\n\nUse returned full paths with info/show/download. Combining filters narrows the scope, and --limit bounds results. Refine filters when results are empty or reach the limit rather than concluding a resource does not exist.",
+	"cli.cmd.server.file.search.desc": "Search server metadata files readable by the current user.\n\nSupports full-path lookup and combined project, directory, filename and content filters. Results depend on permissions and result limits; empty or capped results do not prove a resource is absent.",
+	"cli.cmd.server.file.search.out": "--json returns results[]: file contains metadata and file.remotePath is the server path; score indicates relevance, matchedOn identifies matches, and warnings describes limits such as skipped content checks. See server file info --help for file fields. summary.returned is the returned count, summary.limit the applied limit, and summary.hasMore indicates additional matches. No total count or offset pagination is provided. No matches returns results=[] with empty.",
 	"cli.cmd.server.file.search.url": "Optional server URL. A lone non-URL argument is treated as <query>.",
 	"cli.cmd.server.file.search.query": "Starts with '/': full path or path glob. Contains '*' or '?': file name glob. Otherwise searches file metadata by keyword.",
 	"cli.cmd.server.file.search.path": "Search by an absolute metadata path glob; a project root searches recursively. Can be combined with a keyword <query>, but not with a path <query>, --project, --parent-dir, or --name.",
 	"cli.cmd.server.file.search.name": "Search by a file name glob; without wildcards, matches exactly. Can be combined with a keyword <query>, --project, and --parent-dir, but not with a glob <query> or --path.",
 	"cli.cmd.server.file.search.parentDir": "Search one absolute directory scope recursively. Glob wildcards are not supported; use --path='/DIR/*' for direct children. With --project, its first path segment must match the project name.",
-	"cli.cmd.server.file.search.project": "Match one project name. Can be combined with --parent-dir and --name.",
+	"cli.cmd.server.file.search.project": "Match one project name exactly. Can be combined with --parent-dir and --name.",
 	"cli.cmd.server.file.search.type": "Limit search to metadata type. Repeat or use comma-separated values.",
 	"cli.cmd.server.file.search.subType": "Limit search to metadata subtype. Repeat or use comma-separated values.",
 	"cli.cmd.server.file.search.minSize": "Minimum original content size in bytes.",
 	"cli.cmd.server.file.search.maxSize": "Maximum original content size in bytes.",
-	"cli.cmd.server.file.search.limit": "Return at most this many most relevant files. Defaults to 50; maximum is 1000.",
+	"cli.cmd.server.file.search.limit": "Maximum most relevant files returned; defaults to 50 when omitted.",
 	"cli.cmd.server.file.search.includeFolders": "Include folders in the result.",
 	"cli.cmd.server.file.search.contentContains": "Require every repeated plain-text or /pattern/flags expression in text-file content. Plain text uses case-insensitive literal contains; regex defaults to multiline without flags. Values are not split on commas.",
 	"cli.cmd.server.file.search.contentContainsAny": "Require at least one repeated plain-text or /pattern/flags expression in text-file content. Plain text uses case-insensitive literal contains; regex defaults to multiline without flags. Values are not split on commas.",
@@ -671,152 +825,220 @@
 	"cli.cmd.server.file.search.nameHint": "File names match exactly without wildcards; wildcards are not added automatically.",
 	"cli.cmd.server.file.search.hasMore": "Only the {0} most relevant files are shown; add a project, directory, type, or more specific keyword to narrow the search.",
 	"cli.cmd.server.file.search.warningDetails": "Content was not checked; use --json for full details.",
-	"cli.cmd.server.recyclebin.title": "Server recycle bin",
-	"cli.cmd.server.recyclebin.summary": "Search files in the server recycle bin",
-	"cli.cmd.server.recyclebin.desc": "Search and inspect deleted files that are visible in server project recycle bins.\n\nUse search within a project to inspect deleted resources, paths and deletion times. This group queries the recycle bin; it does not restore or permanently purge resources.",
-	"cli.cmd.server.recyclebin.search.summary": "Search server recycle bin files.",
-	"cli.cmd.server.recyclebin.search.desc": "Search visible files in a project recycle bin by keyword, path, type, or delete time.\n\nSpecify a project, combine filters as needed, and use --limit to bound results. These are recycle-bin records; their paths do not prove that live files exist. Use the product restoration workflow when recovery is needed.",
-	"cli.cmd.server.recyclebin.search.url": "Optional server URL. A lone non-URL first argument is treated as <project>.",
-	"cli.cmd.server.recyclebin.search.project": "Project name whose recycle bin should be searched.",
-	"cli.cmd.server.recyclebin.search.query": "Search keyword, full metadata path, or path glob.",
-	"cli.cmd.server.recyclebin.search.type": "Limit search to metadata type. Repeat or use comma-separated values.",
-	"cli.cmd.server.recyclebin.search.deletedAfter": "Only return files deleted at or after this time. Accepts epoch millis or ISO-8601.",
-	"cli.cmd.server.recyclebin.search.deletedBefore": "Only return files deleted at or before this time. Accepts epoch millis or ISO-8601.",
-	"cli.cmd.server.recyclebin.search.limit": "Return at most this many files. Defaults to 50; maximum is 1000.",
-	"cli.cmd.server.recyclebin.search.empty": "No matching recycle bin files in project {0}.",
-	"cli.cmd.server.recyclebin.search.hasMore": "Only {0} recycle bin files are shown; add a type, delete time range, or more specific keyword to narrow the search.",
 	"cli.cmd.server.file.locate.summary": "Locate a server file by metadata ID.",
-	"cli.cmd.server.file.locate.desc": "Resolve a metadata ID to the current server file path.\n\n<id> is a server metadata ID, not a filename or local path. --url returns a view or edit page address. Use the resolved path with info/show afterwards.",
+	"cli.cmd.server.file.locate.desc": "Locate a server file by metadata ID.\n\nProvides its current path and view or edit URLs to resolve a resource identifier to a file.",
+	"cli.cmd.server.file.locate.out": "--json returns id, remotePath, viewUrl, editUrl and file metadata; see server file info --help for file fields. --url only changes text output; JSON retains the full lookup result.",
 	"cli.cmd.server.file.locate.url": "Only print the server view or edit URL.",
 	"cli.cmd.server.file.locate.viewUrl": "View URL: {0}",
 	"cli.cmd.server.file.locate.editUrl": "Edit URL: {0}",
 	"cli.cmd.server.file.info.summary": "Show server file information.",
-	"cli.cmd.server.file.info.desc": "Show server-side metadata for a file or directory.\n\nUse a server metadata path. The returned revision can be passed as --expected-revision to update/remove. Prepare changes from current content; reread and compare after a revision conflict.",
+	"cli.cmd.server.file.info.desc": "Inspect metadata for a server file or directory.\n\nShows resource paths, types, descriptions, revisions and modification times to identify a target and its version.",
+	"cli.cmd.server.file.info.out": "JSON business fields (common context omitted; comments explain fields; actual output is strict JSON; optional fields appear only when provided by the server):\n    {\n      \"remotePath\": \"/project/data/table.tbl\",   // Requested server metadata path\n      \"file\": {                                  // Server file or directory metadata\n        \"id\": \"file-id\",                         // Resource ID\n        \"revision\": 3,                           // Optional; content revision for --expected-revision; attribute-only changes do not increment it\n        \"remotePath\": \"/project/data/table.tbl\", // Full resource path\n        \"remoteParentPath\": \"/project/data\",     // Parent directory path\n        \"name\": \"table.tbl\",                     // File or directory name\n        \"projectName\": \"project\",                // Optional; owning project\n        \"isFolder\": false,                       // True for a directory\n        \"type\": \"tbl\",                           // Optional; resource type\n        \"subFileType\": \"DataFlow\",               // Optional; server-detected subtype, only for applicable resources\n        \"icon\": \"icon-file\",                     // Optional; icon class or URL\n        \"desc\": \"Table\",                         // Optional; resource description\n        \"order\": 1,                              // Optional; sort order, omitted or 0 means sort by name\n        \"creator\": \"user-id\",                    // Optional; creator user ID\n        \"createTime\": 1700000000000,             // Optional; creation time in Unix milliseconds\n        \"modifier\": \"user-id\",                   // Optional; last modifier user ID\n        \"modifyTime\": 1700000001000,             // Optional; Unix milliseconds for content or some attributes; directories track subtree changes\n        \"hidden\": true,                          // Optional; hidden flag, false when omitted\n        \"labels\": \"label-a,label-b\",             // Optional; comma-separated label IDs\n        \"size\": 5,                               // Optional; uncompressed file content bytes; directories may return 0, not subtree size\n        \"hash\": \"<SHA-256>\",                     // Optional; 64 hexadecimal digits of the original content SHA-256, absent for directories; placeholder shown\n        \"option\": {},                            // Optional; product attribute object\n        \"customOption\": {}                       // Optional; custom attributes for business extensions\n      }\n    }\n\nThe file metadata DTS uses path/parentDir; CLI responses name them remotePath/remoteParentPath. Follow the fields documented here.",
 	"cli.cmd.server.file.show.summary": "Show server file content.",
-	"cli.cmd.server.file.show.desc": "Write server file content to stdout. Omit --json to inspect readable text; --json wraps content as Base64 for scripts.\n\nReads current content by default; --revision reads a historical version. --upgrade-content requests upgraded response content without saving it back to the server. Use download to save a local file.",
+	"cli.cmd.server.file.show.desc": "Read server file content.\n\nSupports current content, historical versions and upgraded content provided by the server.\n\nOnly reads content; upgraded results are not written back to the server.",
+	"cli.cmd.server.file.show.out": "Human output is raw content. For known text types with valid UTF-8, JSON returns the text in content with encoding=utf8; binary data, unknown types and invalid UTF-8 use Base64 in content with encoding=base64.",
 	"cli.cmd.server.file.show.revision": "Read a server file revision.",
-	"cli.cmd.server.file.show.upgradeContent": "Return upgraded metadata JSON content when supported.",
+	"cli.cmd.server.file.show.upgradeContent": "Return upgraded metadata JSON content when supported.\n\nOnly affects returned content; it is not written back to the server.",
 	"cli.cmd.server.file.download.summary": "Download server file content.",
-	"cli.cmd.server.file.download.desc": "Download server file content to a local file.\n\n--output is required; overwriting an existing file needs --force. --revision selects a version and --upgrade-content affects only downloaded content. Downloading does not create a workspace synchronization baseline.",
+	"cli.cmd.server.file.download.desc": "Download server file content to a local file.\n\nSupports historical versions and upgraded content provided by the server.\n\nWrites a local file without changing server content or creating a workspace synchronization baseline.",
+	"cli.cmd.server.file.download.out": "JSON business fields (common context omitted; comments explain fields; actual output is strict JSON):\n    {\n      \"remotePath\": \"/project/app/example.app/page.ftl\",  // Server resource path\n      \"output\": \"/work/page.ftl\",                         // Absolute local path receiving the content\n      \"revision\": 3,                                      // Revision; present when supplied by the server\n      \"modifyTime\": 1792195200000                         // Modified time, epoch milliseconds; if supplied\n    }",
 	"cli.cmd.server.file.download.revision": "Download a server file revision.",
 	"cli.cmd.server.file.download.upgradeContent": "Download upgraded metadata JSON content when supported.",
-	"cli.cmd.server.file.download.output": "Write content to a local file.",
-	"cli.cmd.server.file.download.force": "Overwrite the local output file if it exists.",
+	"cli.cmd.server.file.download.output": "Local content output file; overwriting an existing file requires --force.",
+	"cli.cmd.server.file.download.force": "Allow overwriting an existing local output file.",
 	"cli.cmd.server.file.download.downloaded": "Downloaded {0} to {1}",
 	"cli.cmd.server.file.open.summary": "Open the server file page.",
-	"cli.cmd.server.file.open.desc": "Open the server view or edit page in the system browser, or return its URL without opening the browser.\n\nOpens a view page by default; --edit selects editing. Use --no-open in scripts or headless environments to return only the URL. This command does not upload content.",
+	"cli.cmd.server.file.open.desc": "Open a server resource page in the system browser.\n\nSupports viewing, editing and URL-only lookup, using the appropriate editor for visual or code files.\n\nOnly opens a page or constructs its URL; it does not upload content or check resource existence.",
+	"cli.cmd.server.file.open.out": "--json returns remotePath, url, edit and opened. edit indicates the edit URL; opened records whether opening in the system browser was requested. --no-open sets opened=false. Neither value confirms that the resource exists.",
 	"cli.cmd.server.file.open.edit": "Open the server edit page instead of the view page.",
 	"cli.cmd.server.file.open.noOpen": "Return the page URL without launching the system browser.",
 	"cli.cmd.server.file.open.path": "Absolute server metadata path. The URL is constructed without checking whether the file exists.",
 	"cli.cmd.server.file.open.openedEdit": "Opened server edit page: {0}",
 	"cli.cmd.server.file.open.openedView": "Opened server view page: {0}",
 	"cli.cmd.server.file.history.summary": "Show server file history.",
-	"cli.cmd.server.file.history.desc": "Show server-side file history for a server file path.\n\nUse a server path; --limit bounds the number of entries. Results are versions saved by the server, and their revisions can be used with show/download. This is not local Git history.",
+	"cli.cmd.server.file.history.desc": "Inspect version history for a server file.\n\nRecords come from the server rather than local Git history, helping review changes and select historical content versions.",
+	"cli.cmd.server.file.history.out": "--json returns histories[] and summary.histories. revision is the historical content version, remotePath the server path, action the change operation, and modifyTime Unix milliseconds. message, detail and other optional fields appear when supplied. No records returns histories=[] with empty. --limit bounds the count; it is not a total history count.",
 	"cli.cmd.server.file.history.limit": "Limit the number of history records.",
-	"cli.cmd.server.file.create.summary": "Create a server file.",
-	"cli.cmd.server.file.create.desc": "Create a server file and fail if it already exists.\n\nChoose exactly one of --file and --stdin. Content is written directly to the server path. create cannot overwrite an existing target; use update with revision protection. After interruption, check info/show before retrying.",
+	"cli.cmd.server.file.create.summary": "Create a server file or folder.",
+	"cli.cmd.server.file.create.desc": "Create a metadata file or folder on the server without a local workspace.\n\nFile creation never overwrites existing resources. Folder creation succeeds if the folder already exists, but fails on a same-name file. The server decides whether missing parent folders can be created based on permissions.\n\nWrites directly to the server without updating the local workspace. Creation may have completed after an interrupted response; inspect the target before retrying.",
+	"cli.cmd.server.file.create.out": "JSON returns remotePath (the target server path) and result. File creation also returns source (file, stdin or template); local file input includes sourceFilePath. Folder creation has no content source.\n\nresult.metaInfo contains target attributes; isFolder identifies folders. result.modifyTime is Unix milliseconds. result.contentMutation=created means newly created, while an existing folder returns none with result.metaInfoChanged=false. result.createdFiles lists resources created by this operation. Fields appear when supplied by the server; see server file info --help for attributes.",
+	"cli.cmd.server.file.create.input": "Choose at most one of --folder, --file, --stdin and --template. --folder explicitly creates a folder. Otherwise a file is created; an extensionless name or trailing slash does not select folder creation.\n\nExplicit content may be empty; --template selects a creation template. With all these options omitted, the server tries a script content template, then a default template, and otherwise creates an empty file. Content must follow the target type declarations without a CLI result envelope. Replace /TEST_CLI with the target project; new.rpt is a prepared local body file.",
+	"cli.cmd.server.file.create.folder": "Create a folder without content or a template; an existing same-name folder succeeds.",
+	"cli.cmd.server.file.create.file": "Local content file.",
+	"cli.cmd.server.file.create.stdin": "Read body from standard input.",
+	"cli.cmd.server.file.create.template": "Creation template ID, available from dev template list.",
 	"cli.cmd.server.file.update.summary": "Update a server file.",
-	"cli.cmd.server.file.update.desc": "Update an existing server file with revision protection by default.\n\nChoose exactly one of --file and --stdin, and exactly one of --expected-revision and --force. Prefer the revision returned by info; reread and compare after conflicts. --force bypasses revision protection. Verify with show after writing.",
-	"cli.cmd.server.file.update.expectedRevision": "Only update when the server revision still matches.",
-	"cli.cmd.server.file.update.force": "Overwrite the current server content without revision protection.",
-	"cli.cmd.server.file.remove.summary": "Delete a server file.",
-	"cli.cmd.server.file.remove.desc": "Delete an existing server file with revision protection by default.\n\nChoose exactly one of --expected-revision and --force. Confirm the target and revision with info first; --force bypasses revision protection. This deletes the server resource rather than a local copy, so check dependencies and impact first.",
-	"cli.cmd.server.file.remove.expectedRevision": "Only delete when the server revision still matches.",
-	"cli.cmd.server.file.remove.force": "Delete the current server file without revision protection.",
-	"cli.cmd.server.ext.title": "Server extension",
-	"cli.cmd.server.ext.summary": "inspect server extension assets",
-	"cli.cmd.server.ext.desc": "Inspect server extension assets.\n\nUse template to inspect server-provided extension templates. Create and publish locally through workspace extension.",
-	"cli.cmd.server.ext.template.title": "Server extension template",
-	"cli.cmd.server.ext.template.summary": "inspect server extension templates",
-	"cli.cmd.server.ext.template.desc": "Inspect server extension templates.\n\nlist returns extension points and templates for local extension creation. Templates come from the target server; use the same active server when creating the extension.",
-	"cli.cmd.server.ext.template.list.summary": "List extension templates.",
-	"cli.cmd.server.ext.template.list.desc": "List extension templates available on a server.\n\nUse --extension-point to narrow the extension point. Returned extension points and template names are inputs to workspace extension create. Listing does not create or install an extension.",
-	"cli.cmd.server.ext.template.list.extensionPoint": "Only list templates for the given extension point.",
-	"cli.cmd.server.script.title": "Server script",
-	"cli.cmd.server.script.summary": "execute and check server scripts",
-	"cli.cmd.server.script.desc": "Execute and check server scripts.\n\nCheck a local script with check before executing it on the server with exec. A successful check does not imply side-effect-free execution. Scripts may access and modify server resources; inspect the script and target environment first.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Implement business logic\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/app/implement-business-logic.md\nWeb: https://docs.succapp.com/ai-building/app/implement-business-logic#cli-script",
-	"cli.cmd.server.script.done": "Script command completed.",
-	"cli.cmd.server.script.invalidJsonInput": "Invalid JSON input file: {0}",
-	"cli.cmd.server.script.exec.summary": "Execute a local script on the server.",
-	"cli.cmd.server.script.exec.desc": "Read a local script file and execute it through Dev Tool v2 when the server supports this capability.\n\n<file> selects a local script, --input supplies a JSON input file, and repeatable --param accepts key=value parameters. This executes a real server script; its effects depend on its content. After interruption, inspect actual results before repeating a write.\n\nThe script entry point is function main(args). Read --input JSON from args.input and --param string values from args.params. For example, main(args) can return {mode: args.params.mode, input: args.input}. Validate with check first.",
-	"cli.cmd.server.script.exec.input": "Read script input from a file.",
-	"cli.cmd.server.script.exec.param": "Pass a script parameter. Repeatable.",
-	"cli.cmd.server.script.check.summary": "Check a local script on the server.",
-	"cli.cmd.server.script.check.desc": "Read a local script file and compile it through Dev Tool v2 when the server supports this capability.\n\n<file> selects a local script. The target server must support the compilation endpoint. This does not execute script business logic; a successful check does not validate runtime data, permissions or inputs.",
+	"cli.cmd.server.file.update.desc": "Update the content of an existing server metadata file.\n\nSupports concurrency protection using a previously read revision to avoid overwriting others' changes.\n\nChanges server files directly without updating the local workspace. Bypassing revision protection may overwrite remote changes.",
+	"cli.cmd.server.file.update.out": "JSON returns remotePath, source (file or stdin) and result. File input also includes the absolute local sourceFilePath.\n\nresult contains server-confirmed changes such as metaInfo, modifyTime and warnings when supplied. metaInfo.revision is the content revision; modifyTime is the modification time in Unix milliseconds. See server file info --help for file attributes.",
+	"cli.cmd.server.file.update.revisionInput": "Choose exactly one of --expected-revision and --force: protect the update with a previously read revision, or explicitly bypass revision protection.",
+	"cli.cmd.server.file.update.expectedRevision": "Update only if the current server content revision matches this value, taken from server file info. Read and compare again after a conflict.",
+	"cli.cmd.server.file.update.force": "Overwrite current server content without revision protection.",
+	"cli.cmd.server.file.update.input": "Choose exactly one of --file and --stdin. Content must follow the target file type declarations, such as rpt.d.ts, dash.d.ts or tbl.d.ts, not a CLI result envelope.",
+	"cli.cmd.server.file.update.file": "Local content file.",
+	"cli.cmd.server.file.update.stdin": "Read content from standard input.",
+	"cli.cmd.server.file.move.summary": "Move a server file or folder.",
+	"cli.cmd.server.file.move.desc": "Move a server metadata file or folder, optionally changing its name. The target parent must exist and must not be the source folder or one of its descendants. Supply the full destination path including the name, not a receiving directory.\n\nA same-name target causes a conflict. Equal source and destination paths report that no change is needed without writing. Folder operations change descendant paths. References in other resources are not rewritten automatically; check affected pages and tasks afterward.\n\nChanges the server directly without updating the local workspace. After an interrupted response, inspect both source and target paths before retrying. Replace example projects, paths and revisions with actual resources.",
+	"cli.cmd.server.file.move.out": "JSON returns remotePath (the full resulting path) and result. result.oldRemotePath is the original path; result.pathMutation is renamed, moved or renamedAndMoved. result.metaInfo contains resulting attributes and result.modifyTime is Unix milliseconds. Reuse remotePath with server file info to verify the result. Fields appear when supplied by the server.",
+	"cli.cmd.server.file.move.expectedRevision": "Execute only if the source revision still matches. Choose exactly one of --expected-revision and --force. Obtain the revision from server file info; reread and compare after a conflict. revision protects content revisions, not all folder descendant or property changes.",
+	"cli.cmd.server.file.move.force": "Bypass source revision protection; choose exactly one of --force and --expected-revision. Does not overwrite a same-name target or bypass permissions.",
+	"cli.cmd.server.file.move.targetPath": "Full server metadata destination path including the name; parent must exist.",
+	"cli.cmd.server.file.rename.summary": "Rename a server file or folder.",
+	"cli.cmd.server.file.rename.desc": "Rename a server metadata file or folder within its current parent. The new name must be a single path segment; use server file move to change its location.\n\nA same-name target causes a conflict. Equal source and destination paths report that no change is needed without writing. Folder operations change descendant paths. References in other resources are not rewritten automatically; check affected pages and tasks afterward.\n\nChanges the server directly without updating the local workspace. After an interrupted response, inspect both source and target paths before retrying. Replace example projects, paths and revisions with actual resources.",
+	"cli.cmd.server.file.rename.out": "JSON returns remotePath (the full resulting path) and result. result.oldRemotePath is the original path; result.pathMutation is renamed. result.metaInfo contains resulting attributes and result.modifyTime is Unix milliseconds. Reuse remotePath with server file info to verify the result. Fields appear when supplied by the server.",
+	"cli.cmd.server.file.rename.expectedRevision": "Execute only if the source revision still matches. Choose exactly one of --expected-revision and --force. Obtain the revision from server file info; reread and compare after a conflict. revision protects content revisions, not all folder descendant or property changes.",
+	"cli.cmd.server.file.rename.force": "Bypass source revision protection; choose exactly one of --force and --expected-revision. Does not overwrite a same-name target or bypass permissions.",
+	"cli.cmd.server.file.rename.name": "New name including the file extension; no directories, slashes, or the names \".\" and \"..\".",
+	"cli.cmd.server.file.remove.summary": "Delete a server file or folder.",
+	"cli.cmd.server.file.remove.desc": "Delete an existing metadata file or folder on the server. Deleting a folder also removes its contents.\n\nChecks only the content revision of the resource being deleted. A folder revision is not a subtree snapshot: descendant changes do not invalidate it or prevent deletion of the entire folder.\n\nDirectly removes a server resource and may affect dependent pages and tasks. Bypassing protection may delete a file changed by someone else.",
+	"cli.cmd.server.file.remove.out": "--json returns remotePath and result. result contains server-confirmed changes and may include metaInfo, modifyTime and warnings. metaInfo.revision is the content revision supplied by the server; property-only changes may not increment it. Missing fields are not fabricated; see server file info --help for metadata fields.",
+	"cli.cmd.server.file.remove.expectedRevision": "Only delete when the resource revision still matches; a folder revision does not protect descendant changes.\n\nChoose exactly one of --expected-revision and --force. Use the latest revision from server file info; reread and compare after a conflict.",
+	"cli.cmd.server.file.remove.force": "Delete the current server file without revision protection.\n\nBypass revision protection; choose exactly one of --force and --expected-revision.",
+	"cli.cmd.server.recyclebin.title": "Server recycle bin",
+	"cli.cmd.server.recyclebin.summary": "Search files in the server recycle bin",
+	"cli.cmd.server.recyclebin.desc": "Inspect deleted files in server project recycle bins.\n\nShows original paths and deletion times. Only queries records; it does not restore or permanently remove files.",
+	"cli.cmd.server.recyclebin.search.summary": "Search server recycle bin files.",
+	"cli.cmd.server.recyclebin.search.desc": "Search deleted files visible to the current user in a project recycle bin.\n\nSupports keyword, path, type and deletion-time filters. Results are recycle bin records, not evidence that a file still exists at its original path.\n\nOnly reads records; it does not restore or clear files.",
+	"cli.cmd.server.recyclebin.search.out": "--json returns results[]. file.recyclebinId identifies the recycle-bin record; file.id identifies the original resource; file.remotePath is its former server path; file.deleteTime is Unix milliseconds. score, matchedOn and warnings describe matching and query limits. summary.returned, summary.limit and summary.hasMore give the count, limit and whether more matches exist; no total count or offset pagination is provided. No matches returns results=[] with empty.",
+	"cli.cmd.server.recyclebin.search.url": "Optional server URL. The first non-URL argument is treated as <project>.",
+	"cli.cmd.server.recyclebin.search.project": "Project name whose recycle bin should be searched.",
+	"cli.cmd.server.recyclebin.search.query": "Search keyword, full metadata path, or path glob.",
+	"cli.cmd.server.recyclebin.search.type": "Limit search to metadata type. Repeat or use comma-separated values.",
+	"cli.cmd.server.recyclebin.search.deletedAfter": "Only return files deleted at or after this time. Accepts epoch millis or ISO-8601.",
+	"cli.cmd.server.recyclebin.search.deletedBefore": "Only return files deleted at or before this time. Accepts epoch millis or ISO-8601.",
+	"cli.cmd.server.recyclebin.search.limit": "Maximum files returned; defaults to 50 when omitted.",
+	"cli.cmd.server.recyclebin.search.empty": "No matching recycle bin files in project {0}.",
+	"cli.cmd.server.recyclebin.search.hasMore": "Only {0} recycle bin files are shown; add a type, delete time range, or more specific keyword to narrow the search.",
 	"cli.cmd.server.settings.title": "Server settings",
 	"cli.cmd.server.settings.summary": "get and edit server settings",
-	"cli.cmd.server.settings.desc": "Read or change settings directly on the remote server; writes do not need workspace push and do not update local files. To review local changes first, clone the project, edit its settings JSON, then use workspace file diff and push. See each subcommand with --help.\n\nUse get to read values, set to modify top-level keys, and add/update/remove for entries in supported settings lists. See child parameters for system, project and app target syntax. Read before writing and verify with get afterwards.\n\nFor a workflow with local review, use workspace file diff and workspace push.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: System settings fields and secret handling\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/basics/system-settings.md\nWeb: https://docs.succapp.com/ai-building/basics/system-settings",
-	"cli.cmd.server.settings.target.system": "system",
-	"cli.cmd.server.settings.url": "Remote server URL; alternatively use --server or the active workspace server.",
-	"cli.cmd.server.settings.target": "system for system settings; a project name such as DEMO; or an absolute metadata app path such as /DEMO/app/demo.app, not a local file path.",
+	"cli.cmd.server.settings.desc": "Read and change server system, project or application settings.\n\nSupports reading and changing top-level keys, and adding, replacing or removing list entries.\n\nWrites take effect directly on the server without a workspace push or updating local files.",
+	"cli.cmd.server.settings.target": "Use system for system settings, a project name such as DEMO for project settings, or an absolute metadata path such as /DEMO/app/demo.app for application settings, not a local path. Only get may omit the target to read system settings; set requires an explicit target.",
+	"cli.cmd.server.settings.target.system": "System-level",
+	"cli.cmd.server.settings.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
 	"cli.cmd.server.settings.itemTarget": "System list alias: llms, sso, credentials, messagers, message-templates, encryption, or masking. For a project name or absolute app metadata path, also provide --key.",
-	"cli.cmd.server.settings.add.item": "One complete item JSON object, including id; do not wrap it in an array.",
-	"cli.cmd.server.settings.update.item": "One complete item JSON object, including id; do not wrap it in an array.",
-	"cli.cmd.server.settings.add.file": "Read one complete item JSON object, including id, from a local file.",
-	"cli.cmd.server.settings.update.file": "Read one complete item JSON object, including id, from a local file.",
-	"cli.cmd.server.settings.add.stdin": "Read one complete item JSON object, including id, from stdin.",
-	"cli.cmd.server.settings.update.stdin": "Read one complete item JSON object, including id, from stdin.",
-	"cli.cmd.server.settings.remove.item": "Item ID, or a JSON object containing only id, such as '{\"id\":\"service-1\"}'.",
-	"cli.cmd.server.settings.remove.file": "Read an item ID or a JSON object containing only id from a local file.",
-	"cli.cmd.server.settings.remove.stdin": "Read an item ID or a JSON object containing only id from stdin.",
 	"cli.cmd.server.settings.get.summary": "Get server settings.",
-	"cli.cmd.server.settings.get.desc": "Read remote system, project, or app settings. Omit <target> or pass system for system settings. --key matches a complete top-level key; dots are part of the key, not a nested path.\n\nUse results to inspect current configuration. Secret fields may be sanitized; do not write masked placeholders back unchanged. Before editing a list entry, identify its id and full content.\n\nSystem list keys: llms→llm.services, sso→sso.providers, credentials→service.credentials, messagers→messaging.services, message-templates→messaging.templates, encryption→security.encryption.algorithms, masking→security.masking.rules. For example: get system --key security.masking.rules. Do not use masking as a project target for get.",
-	"cli.cmd.server.settings.get.key": "Only return the given top-level key. Repeatable.",
+	"cli.cmd.server.settings.get.desc": "Read server system, project or application settings to inspect current configuration.\n\nCan select specific keys. Secrets may be masked, so returned values may not be suitable as complete write input.\n\nOnly reads settings without changing configuration.",
+	"cli.cmd.server.settings.get.out": "--json returns settings keyed by full top-level names, even when only one --key is selected; it does not unwrap that value. Missing keys are not populated with defaults. Secrets may be masked, so the response is not a complete write template.",
+	"cli.cmd.server.settings.get.key": "Repeatable full top-level key names; dots are part of a key, not a nested path.\n\nSystem list keys: llm.services, sso.providers, service.credentials, messaging.services, messaging.templates, security.encryption.algorithms and security.masking.rules. Use system as the target for reading these lists, not entry-operation aliases such as llms or masking.",
 	"cli.cmd.server.settings.get.header": "Settings of {0}:",
 	"cli.cmd.server.settings.set.summary": "Change remote settings.",
-	"cli.cmd.server.settings.set.desc": "Write directly to the remote server without updating local files; no workspace push is needed. Only submitted top-level keys change. Objects and arrays are replaced in full, not merged recursively; null or --unset removes a key.\n\nChoose one JSON input: --set, --file, or --stdin; --unset may be used alone or with an input. Use complete settings keys (for example system.name), not nested JSON. Read the current value before changing an object or array, and use get again to verify the saved value.\n\nUse --expected-revision for concurrency protection. After a conflict, reread and reconcile the required top-level changes before submitting. After interruption, inspect with get rather than assuming nothing was saved.\n\nget does not return a settings revision from the same snapshot for concurrency protection. Do not substitute a file revision or another version number. Entry add/update/remove also expose no caller-supplied revision parameter.",
+	"cli.cmd.server.settings.set.desc": "Change top-level server setting entries.\n\nOnly submitted keys change. Objects and arrays are replaced as a whole without recursive merging; keys can also be removed.\n\nWrites take effect directly on the server without updating local files. Saving may have completed after an interrupted response.",
+	"cli.cmd.server.settings.set.out": "--json returns keys (submitted top-level keys), success and optional warnings. success=false produces a nonzero exit code; inspect warnings as well. The result does not contain complete settings; use get to verify current values.",
+	"cli.cmd.server.settings.set.input": "Use at most one of --set, --file and --stdin; may be combined with --unset.\n\nBy default, input is a top-level settings patch: use full keys such as system.name rather than nested JSON. With --key, treat the input object as that key's complete value.",
 	"cli.cmd.server.settings.set.set": "Inline JSON object with complete values for the keys to change.",
 	"cli.cmd.server.settings.set.file": "Read a JSON object from a local file and submit it to the remote server; does not edit or sync that file.",
 	"cli.cmd.server.settings.set.stdin": "Read settings JSON from stdin.",
-	"cli.cmd.server.settings.set.unset": "Delete the given top-level key. Repeatable.",
+	"cli.cmd.server.settings.set.unset": "Delete the given top-level key. Repeatable.\n\nCan be used alone; null input values also remove their keys.",
 	"cli.cmd.server.settings.set.key": "Treat the input object as this key's complete value, instead of a settings patch. Cannot combine with --unset.",
-	"cli.cmd.server.settings.set.expectedRevision": "Only set when the server settings revision still matches.",
+	"cli.cmd.server.settings.set.expectedRevision": "Optional; omission skips checking the caller-read version. Only accepts the content revision of the target settings.json, not an arbitrary file revision.\n\nFor concurrency protection, obtain revision=R with server file info, then read that version using server file show --revision=R --json. Prepare changes from that content and submit the same R. The system file is /sysdata/settings/settings.json, the project file /<project>/settings/settings.json, and the application file <application-root>/settings/settings.json.\n\nRequires an existing file and permission to read it. settings get does not return a paired revision. If no trusted revision is available, omit this option rather than guessing. Reread and compare after a conflict.",
 	"cli.cmd.server.settings.set.success": "Updated settings of {0}: {1}",
 	"cli.cmd.server.settings.set.noKeys": "(no keys)",
 	"cli.cmd.server.settings.add.summary": "Add a settings item.",
+	"cli.cmd.server.settings.add.input": "Choose exactly one of --item, --file and --stdin. Input is one complete item JSON object including id; do not wrap it in an array. Include a new id and all fields required by the entry type.\n\nDiscover field definitions from the target server before creating or changing an extension type:\n    succapp server http-get /api/catalog/llm-connectors --json\n    succapp server http-get /api/catalog/sso-providers --json\n    succapp server http-get /api/resources/extension-points/serviceCredential.json --json\n    succapp server http-get /api/resources/extension-points/messager.json --json\n    succapp server http-get /api/resources/extension-points/encryptAlgorithm.json --json\nLLM and SSO return candidate arrays; read contribution definitions from serviceCredential[], messager[] and encryptAlgorithm[] for the other responses. HTTP JSON output content may contain JSON text; parse it according to http-get output help.\n\nUse LLM item name as connectorId; extName is the extension package name. Place confItems fields at entry top level and choose supportedModels for the actual deployment. For SSO use name as type and follow settingsForm; script follows the script SSO rules.\n\nFor service credentials use contribution name as type; credentialType is a platform category, not a substitute for type. For message services use contribution name as messager; for encryption use it as algorithm. For these three types, place fields from the selected contribution's confItems at entry top level without copying internal settings-form field prefixes.\n\nConfigured-instance catalogs are not extension configuration forms. LLM catalog queries require data source view permission; SSO catalog queries require SSO settings view permission. Reading definitions does not grant permission to write configuration. If definitions are missing, check permissions, installed extensions and server version, then obtain extension documentation rather than guessing fields.",
+	"cli.cmd.server.settings.add.item": "Pass the item JSON object directly.",
+	"cli.cmd.server.settings.add.file": "Read the item JSON object from a local file.",
+	"cli.cmd.server.settings.add.stdin": "Read the item JSON object from stdin.",
 	"cli.cmd.server.settings.add.key": "Complete top-level key of the item list; required unless <target> is a system list alias.",
-	"cli.cmd.server.settings.add.desc": "Add one complete item directly to a remote settings list. Provide exactly one of --item, --file, or --stdin. The JSON object must include a new id and all required fields for its type; no workspace push is needed.\n\nRead the list and existing IDs with get first to avoid duplicates. Read again after submission. After an interrupted response, check whether the entry was added before retrying.\n\nConsult the corresponding system settings documentation using the list keys described by get. Existing entries of the same type can illustrate structure, but a new entry must have a new id.\n\nGuide: System settings fields and secret handling\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/basics/system-settings.md\nWeb: https://docs.succapp.com/ai-building/basics/system-settings",
+	"cli.cmd.server.settings.add.desc": "Add an entry to a server settings list.\n\nRequires a new identifier and fields required by the entry type.\n\nDirectly changes server configuration without updating local files. The entry may have been added after an interrupted response.",
+	"cli.cmd.server.settings.add.out": "--json returns target, key (the resolved list key), action, id, success and optional warnings. success=false produces a nonzero exit code. Complete entries are not echoed; use get to verify their contents.",
 	"cli.cmd.server.settings.add.success": "Added item {1} to {0}.",
+	"cli.cmd.server.settings.add.failed": "Could not add item {1} to {0}.",
 	"cli.cmd.server.settings.update.summary": "Update a settings item.",
+	"cli.cmd.server.settings.update.input": "Choose exactly one of --item, --file and --stdin. Input is one complete entry object with its original id, not an array. Omitted ordinary fields are not retained.\n\nFor an existing LLM with the same ID, omitted, null or \"******\" apiKey preserves the stored secret. Submit a new value to replace it; omission does not clear it. Script SSO top-level params is stored separately: omission preserves it and explicit null deletes it; this does not apply to other providers. Follow each module type and guide for other preservation rules, then read ordinary fields and verify behavior.\n\nDiscover field definitions from the target server before creating or changing an extension type:\n    succapp server http-get /api/catalog/llm-connectors --json\n    succapp server http-get /api/catalog/sso-providers --json\n    succapp server http-get /api/resources/extension-points/serviceCredential.json --json\n    succapp server http-get /api/resources/extension-points/messager.json --json\n    succapp server http-get /api/resources/extension-points/encryptAlgorithm.json --json\nLLM and SSO return candidate arrays; read contribution definitions from serviceCredential[], messager[] and encryptAlgorithm[] for the other responses. HTTP JSON output content may contain JSON text; parse it according to http-get output help.\n\nUse LLM item name as connectorId; extName is the extension package name. Place confItems fields at entry top level and choose supportedModels for the actual deployment. For SSO use name as type and follow settingsForm; script follows the script SSO rules.\n\nFor service credentials use contribution name as type; credentialType is a platform category, not a substitute for type. For message services use contribution name as messager; for encryption use it as algorithm. For these three types, place fields from the selected contribution's confItems at entry top level without copying internal settings-form field prefixes.\n\nConfigured-instance catalogs are not extension configuration forms. LLM catalog queries require data source view permission; SSO catalog queries require SSO settings view permission. Reading definitions does not grant permission to write configuration. If definitions are missing, check permissions, installed extensions and server version, then obtain extension documentation rather than guessing fields.",
+	"cli.cmd.server.settings.update.item": "Pass the item JSON object directly.",
+	"cli.cmd.server.settings.update.file": "Read the item JSON object from a local file.",
+	"cli.cmd.server.settings.update.stdin": "Read the item JSON object from stdin.",
 	"cli.cmd.server.settings.update.key": "Complete top-level key of the item list; required unless <target> is a system list alias.",
-	"cli.cmd.server.settings.update.desc": "Replace one item directly in a remote settings list; no workspace push is needed. Read the list first, for example with server settings get system --key security.masking.rules, then supply one complete item with its existing id using --item, --file, or --stdin. Omitted item fields are not preserved.\n\nPreserve every field still needed in the complete entry, especially objects and arrays. Reread after saving. If the response is interrupted, inspect the current entry before retrying.\n\nGuide: System settings fields and secret handling\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/basics/system-settings.md\nWeb: https://docs.succapp.com/ai-building/basics/system-settings",
+	"cli.cmd.server.settings.update.desc": "Replace an entry in a server settings list.\n\nOrdinary fields use complete-entry replacement without recursive merging. Module-specific rules for preserving secrets and separately stored parameters still apply.\n\nDirectly changes server configuration without updating local files; an update may have taken effect after an interrupted response.",
+	"cli.cmd.server.settings.update.out": "--json returns target, key (the resolved list key), action, id, success and optional warnings. success=false produces a nonzero exit code. Complete entries are not echoed; use get to verify their contents.",
 	"cli.cmd.server.settings.update.success": "Updated item {1} in {0}.",
+	"cli.cmd.server.settings.update.failed": "Could not update item {1} in {0}.",
 	"cli.cmd.server.settings.remove.summary": "Remove a settings item.",
+	"cli.cmd.server.settings.remove.input": "Choose exactly one of --item, --file and --stdin.",
+	"cli.cmd.server.settings.remove.item": "Item ID, or a JSON object containing only id, such as '{\"id\":\"service-1\"}'.",
+	"cli.cmd.server.settings.remove.file": "Read an item ID or a JSON object containing only id from a local file.",
+	"cli.cmd.server.settings.remove.stdin": "Read an item ID or a JSON object containing only id from stdin.",
 	"cli.cmd.server.settings.remove.key": "Complete top-level key of the item list; required unless <target> is a system list alias.",
-	"cli.cmd.server.settings.remove.desc": "Remove one item directly from a remote settings list; no workspace push is needed. Provide exactly one of --item, --file, or --stdin, containing the item id or a JSON object with only id.\n\nInspect the entry ID and purpose with get first; removal directly affects server configuration. Reread afterwards to verify. Use set --unset to delete an entire top-level settings key.",
+	"cli.cmd.server.settings.remove.desc": "Remove an entry from a server settings list.\n\nOnly removes the selected entry, not the entire top-level configuration key.\n\nDirectly changes server configuration and may affect features that depend on the entry. Removal may have completed after an interrupted response.",
+	"cli.cmd.server.settings.remove.out": "--json returns target, key (the resolved list key), action, id, success and optional warnings. success=false produces a nonzero exit code. Complete entries are not echoed; use get to verify their contents.",
 	"cli.cmd.server.settings.remove.success": "Removed item {1} from {0}.",
+	"cli.cmd.server.settings.remove.failed": "Could not remove item {1} from {0}.",
 	"cli.cmd.server.settings.*.module": "System settings list module.",
 	"cli.cmd.server.settings.*.item": "Inline complete item JSON, or an ID for remove.",
 	"cli.cmd.server.settings.*.file": "Read item JSON or ID from a local file.",
 	"cli.cmd.server.settings.*.stdin": "Read item JSON or ID from stdin.",
 	"cli.cmd.server.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
-	"cli.cmd.server.file.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
-	"cli.cmd.server.file.*.path": "Server metadata path such as /DEMO/ana/sales.dash, not a local filesystem path.",
-	"cli.cmd.server.file.*.id": "Metadata ID obtainable from file information returned by server file info.",
-	"cli.cmd.server.cache.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
-	"cli.cmd.server.cache.clean.name": "Cache name returned by server cache list; choose this or --all.",
-	"cli.cmd.server.cluster.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
-	"cli.cmd.server.cluster.*.nodeId": "Node ID returned by server cluster list.",
-	"cli.cmd.server.thread.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
-	"cli.cmd.server.thread.*.threadId": "Thread ID from server thread list on the same node; recheck before use.",
-	"cli.cmd.server.techLog.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
-	"cli.cmd.server.proj.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
-	"cli.cmd.server.script.*.file": "Local script file; relative paths use the CLI launch directory, unaffected by -C.",
-	"cli.cmd.server.techLog.level.*.url": "Target server URL; takes precedence over --server, the active workspace server and SUCCAPP_SERVER.",
-	"cli.cmd.server.proj.create.project": "New project name; inspect existing projects with server project list.",
+	"cli.cmd.server.httpGet.summary": "Read a server HTTP resource.",
+	"cli.cmd.server.httpGet.desc": "Read DTS, JSON, text or other dynamic resources from a server.\n\nFetches raw resources at known addresses without initializing a workspace. Requests reuse saved authentication and do not automatically follow redirects.\n\nResponses can be saved to local files; the actual effect of a GET request depends on the target endpoint.",
+	"cli.cmd.server.httpGet.out": "By default, stdout contains the raw response body bytes with no added newline. Redirect with > to a file or process it through a pipe.\n\n--json or --pretty-json uses the common result object, with the body in the content string and encoding set to utf8 or base64. For example, a server response of {\"name\":\"demo\"} becomes content: \"{\\\"name\\\":\\\"demo\\\"}\" in the JSON result; decode according to encoding to recover the body. Known text with no NUL bytes and lossless UTF-8 decoding uses utf8; otherwise base64.\n\nThe JSON result also includes resourcePath, url, status, contentType (if supplied by the server) and size in bytes.\n\nWith --output, raw bytes are saved to the file. By default, stdout is empty and the saved-file message goes to stderr. JSON mode returns output as the absolute file path and omits content and encoding.",
+	"cli.cmd.server.httpGet.path": "Resource path under the server deployment address; query parameters are allowed, full URLs are not.\n\nStart with /, relative to the server deployment URL. For example, https://example.com/bi and /api/resources/themes/system.json resolve to /bi/api/resources/themes/system.json. Quote paths containing query parameters.",
+	"cli.cmd.server.httpGet.output": "Save to a local file; relative paths use the execution directory after -C.\n\nSaves raw bytes; an existing file requires --force.",
+	"cli.cmd.server.httpGet.force": "Allow overwriting the existing --output file.",
+	"cli.cmd.server.httpGet.saved": "Saved to {0}",
+	"cli.cmd.expFunc.name": "Complete function name, case-insensitive.\n\nReturns an error when no function matches.",
+	"cli.cmd.expFunc.contains": "Case-insensitive literal substring in function names or descriptions.",
+	"cli.cmd.expFunc.extension": "Exact extension name of the effective source; excludes shadowed declarations.",
+	"cli.cmd.expFunc.group": "Exact catalog group, not an aggregation type.",
+	"cli.cmd.resource.label": "A case-sensitive label ID or expression. & requires all labels, | joins alternatives, and ! excludes a label. & takes precedence over |; parentheses are not supported. Unlabeled resources never match, including exclusion-only expressions.\nQuote expressions in the shell, for example --label='input|chart' or --label='input&!chart'. Repeat to intersect conditions. Also intersects with --keyword, --contains and other filters; paginated commands filter before pagination. Omit to leave labels unrestricted; no matches never broadens the query automatically.",
+	"cli.cmd.resource.keyword": "Search names, descriptions, label IDs, titles and synonyms.\nResource names and descriptions match the complete input; label IDs, titles and synonyms split on whitespace or English/Chinese commas, requiring all terms to match. All filters combine with AND. Keyword results sort by relevance, retaining original order for ties; omitting keywords preserves returned order.",
+	"cli.cmd.resource.contains": "Case-insensitive literal substring in resource text and label IDs or titles.\nCombines with labels, keywords and other filters using AND.",
+	"cli.out.theme.token": "Variable name",
+	"cli.out.theme.source": "Theme: {0}  Source: {1}",
+	"cli.out.theme.title": "Title",
+	"cli.out.uiResource.unrestricted": "unrestricted",
+	"cli.out.uiResource.id": "ID",
+	"cli.out.uiResource.styleType": "Style type",
+	"cli.out.uiResource.source": "Source",
+	"cli.out.uiResource.components": "Component types",
+	"cli.out.uiResource.theme": "Theme",
+	"cli.out.uiResource.module": "Page module",
+	"cli.out.uiResource.name": "Name",
+	"cli.out.uiResource.description": "Description",
+	"cli.out.uiResource.location": "Location",
+	"cli.out.component.empty": "No component templates match this page type.",
+	"cli.out.component.name": "Name",
+	"cli.out.component.labels": "Labels",
+	"cli.out.component.description": "Description",
+	"cli.out.component.group.component": "Page components",
+	"cli.out.component.group.cellType": "Cell types",
+	"cli.out.component.group.actionComponent": "Program flow nodes",
+	"cli.out.style.notApplicable": "This type exists but is not available for this page type. Use dev component list <target> to discover candidates.",
+	"cli.out.style.unsupported": "This type has no selectable styles; program flow nodes do not use visual styles.",
+	"cli.out.style.noMatches": "No styles match the type, page and theme; this does not mean the type is unknown.",
+	"cli.out.style.emptyCollection": "No styles are available.",
+	"cli.out.template.empty": "No matching file templates at this location.",
+	"cli.out.displayFormat.empty": "No display formats available.",
+	"cli.out.displayFormat.pattern": "Pattern",
+	"cli.out.displayFormat.system": "System",
+	"cli.out.displayFormat.project": "Project",
+	"cli.out.displayFormat.app": "Application",
+	"cli.out.displayFormat.page": "Page",
+	"cli.out.media.empty": "No selectable entries match the query.",
+	"cli.out.media.more": "More results: continue with --offset={0}, or use --limit=0 for all.",
+	"cli.out.font.name": "Font name",
+	"cli.out.font.value": "Value",
+	"cli.out.font.source": "Source",
+	"cli.out.font.preset": "System preset",
+	"cli.out.font.auto": "Automatic (theme)",
+	"cli.out.font.extension": "Extension: {0}",
+	"cli.out.resource.labels": "Labels",
+	"cli.out.expFunc.registered": "Registration",
+	"cli.out.expFunc.registered.yes": "Registered",
+	"cli.out.expFunc.registered.no": "Docs only",
+	"cli.cmd.server.file.folderExists": "Folder already exists: {0}",
 	"cli.cmd.workspace.title": "Workspace",
 	"cli.cmd.workspace.summary": "work with a local SuccApp workspace",
-	"cli.cmd.workspace.desc": "Work with a local SuccApp workspace.\n\nRun inside an initialized workspace or select one with -C. Confirm the active server with remote, then obtain projects with project clone. After editing, use status, file diff and push to inspect and submit changes.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Initialize a workspace\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/init-workspace.md\nWeb: https://docs.succapp.com/ai-building/workspace/init-workspace",
+	"cli.cmd.workspace.desc": "Manage local SuccApp workspaces and metadata synchronization with servers.\n\nProvides workspace initialization, remote connections, local project management, synchronization status, pull, push and discard operations, and repair, upgrade, lock and backup tools.\n\nUse dev file for file inspection, compilation and metadata upgrades, and dev extension for extension development.",
 	"cli.cmd.workspace.init.summary": "Initialize a SuccApp workspace.",
-	"cli.cmd.workspace.init.desc": "Initialize .succapp/config.json, recommended workspace support files, and the optional offline SuccApp docs skill.\n\nThe target directory must already exist. Use --scope to choose initialization tasks. Re-running respects existing configuration and is not a clean reset. Server access and offline-document downloads may need network access and authentication; inspect updated, skipped and document status in the result.\n\nscope defaults to all: base maintains workspace configuration, editor settings, ignore rules and Agent files; dev maintains local types and JSON Schema; agent-docs installs or updates the official documentation skill.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Initialize a workspace\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/init-workspace.md\nWeb: https://docs.succapp.com/ai-building/workspace/init-workspace",
-	"cli.cmd.workspace.init.server": "Initialize the workspace with this active server.",
-	"cli.cmd.workspace.init.scope": "Limit initialization scope. Values: base, dev, agent-docs, all.",
+	"cli.cmd.workspace.init.desc": "Prepare a local SuccApp development workspace.\n\nIncludes workspace configuration, development support files, type declarations, JSON Schemas and the official offline documentation Skill. Within an existing workspace, updates that workspace; otherwise creates one in the execution directory.\n\nThe target directory must exist; downloading server references requires network access and authentication. Writes local support files while preserving existing workspace configuration.",
+	"cli.cmd.workspace.init.out": "With --json, check the exit code and result: supportFiles.updatedCount counts updated support items, supportFiles.skipped lists skipped items and reasons, and supportFiles.agentDocs.status reports offline-document status. Skipped or unavailable content is not ready for use; address the reported reasons before relying on it.\n\nType declarations are saved under .agents/skills/succapp-docs/dev-types/ and JSON Schemas under .agents/skills/succapp-docs/json-schemas/.",
+	"cli.cmd.workspace.init.server": "Select the initialization server and obtain its type declarations and JSON Schemas. The first initialization can register this URL; an existing active server must match it.",
+	"cli.cmd.workspace.init.scope": "Initialize only the selected content; defaults to all. base: workspace configuration, editor settings, ignore rules and agent files; dev: type declarations and JSON Schemas; agent-docs: the official offline documentation Skill.",
 	"cli.cmd.workspace.init.force": "Force the offline SuccApp docs skill to check local files even when the index is unchanged.",
 	"cli.cmd.workspace.init.active": "Active server: {0}",
-	"cli.cmd.workspace.init.agentDocsSummary": "SuccApp docs skill: {0} files, {1} added, {2} changed, {3} removed, {4} unchanged.",
-	"cli.cmd.workspace.init.agentDocsFileSkipped": "SuccApp docs skill: {0} markdown files skipped. See logs for details.",
-	"cli.cmd.workspace.init.agentDocsResourceSkipped": "SuccApp docs skill: {0} linked resources skipped. See logs for details.",
-	"cli.cmd.workspace.init.agentDocsUnavailable": "SuccApp docs skill: skipped because the docs index is unavailable. Set SUCCAPP_DOCS_BASE_URL to a local or staging docs site, or copy .agents/skills/succapp-docs/ from the delivery package or team repository.",
+	"cli.cmd.workspace.init.agentDocsSummary": "Official SuccApp documentation Skill: {0} files, {1} added, {2} changed, {3} removed, {4} unchanged.",
+	"cli.cmd.workspace.init.agentDocsFileSkipped": "Official SuccApp documentation Skill: {0} markdown files skipped. See logs for details.",
+	"cli.cmd.workspace.init.agentDocsResourceSkipped": "Official SuccApp documentation Skill: {0} linked resources skipped. See logs for details.",
+	"cli.cmd.workspace.init.agentDocsUnavailable": "Official SuccApp documentation Skill: skipped because the docs index is unavailable. Set SUCCAPP_DOCS_BASE_URL to a local or staging docs site, or copy .agents/skills/succapp-docs/ from the delivery package or team repository.",
 	"cli.cmd.workspace.init.alreadyActive": "Workspace is already initialized with active server: {0}. Use 'succapp workspace remote add <url>' or 'succapp workspace remote use <url>' to change servers.",
 	"cli.cmd.workspace.init.configBad": "Workspace config is corrupted: {0}",
 	"cli.cmd.workspace.init.initWorkspace": "Initialized workspace: {0}",
@@ -825,25 +1047,31 @@
 	"cli.cmd.workspace.init.supportFiles": "Workspace support files: {0} updated, {1} skipped.",
 	"cli.cmd.workspace.init.workspaceInit": "Workspace already initialized: {0}",
 	"cli.cmd.workspace.status.summary": "Show workspace sync status.",
-	"cli.cmd.workspace.status.desc": "Show workspace sync status.\n\nInspect local and remote changes by default. --local-only checks local state; --force-refresh recalibrates remote caches. Check the exit code, remoteCheck and warnings before interpreting changes. remoteCheck=complete means this remote check completed; skipped means it was intentionally omitted. failed/cancelled means incomplete checking and a nonzero exit code. A failed check may retain previous remote changes; empty results do not prove the remote is unchanged.\n\nFor authentication failures, run auth login. For connection failures, verify the target and network, then rerun workspace status --force-refresh. Do not treat incomplete results as a complete pre-push check.",
+	"cli.cmd.workspace.status.desc": "Inspect synchronization status between the local workspace and active server.\n\nShows local changes, remote changes and conflicts, with a local-only inspection mode.\n\nRemote inspection requires valid authentication and connectivity. An incomplete check is not a complete pre-push assessment.",
+	"cli.cmd.workspace.status.out": "Check the exit code, remoteCheck and warnings before interpreting changes. remoteCheck=complete means this remote check completed; skipped means it was intentionally omitted. failed/cancelled means incomplete checking and a nonzero exit code. A failed check may retain previous remote changes; empty results do not prove the remote is unchanged.\n\nchanges[].type gives direction: added/modified/deleted/renamed are local changes awaiting synchronization; remoteAdded/remoteModified/remoteDeleted/remoteRenamed are server changes; conflict needs comparison of both sides; remoteProjectUnavailable means current project visibility cannot be confirmed, not that the project was deleted. Classification uses workspace content, synchronization baselines and obtained remote state, not file timestamps.\n\nlocalPath is a local absolute path and remotePath a server metadata path. For renames inspect oldLocalPath/oldRemotePath. contentChanged and metaChanged mark body and metadata changes; either may be absent, which does not imply false. Partial example:\n    {\"changes\":[{\"type\":\"modified\",\"localPath\":\"/work/DEMO/page.dash\",\"remotePath\":\"/DEMO/page.dash\",\"contentChanged\":true},{\"type\":\"remoteModified\",\"localPath\":\"/work/DEMO/other.dash\",\"remotePath\":\"/DEMO/other.dash\"}]}\nInspect differences before choosing pull, push or conflict handling; status is not authorization to overwrite or delete.",
 	"cli.cmd.workspace.status.forceRefresh": "Recheck server changes instead of using cached status.",
 	"cli.cmd.workspace.status.localOnly": "Show only local workspace changes; do not check the server.",
 	"cli.cmd.workspace.status.remoteAuthRequired": "You are not logged in, so only local changes are shown. Run 'succapp auth login', then retry to include server changes.",
+	"cli.cmd.workspace.status.incomplete": "Remote check incomplete ({0}); remote changes may be from a previous check. Inspect warnings and check again.",
 	"cli.cmd.workspace.upgrade.summary": "Plan workspace structure migrations.",
-	"cli.cmd.workspace.upgrade.desc": "Plan SuccApp workspace structure migrations. The current implementation has no migrations.\n\nThis concerns workspace structure, not metadata file versions. Use workspace file upgrade for old metadata files and succapp --version for the CLI version.",
+	"cli.cmd.workspace.upgrade.desc": "Plan SuccApp workspace structure migrations.\n\nCovers workspace organization; use dev file upgrade to upgrade metadata file versions.\n\nNo executable migrations are currently available, so running this command does not change the workspace.",
 	"cli.cmd.workspace.upgrade.targetVersion": "Plan migration to the target workspace structure version.",
 	"cli.cmd.workspace.upgrade.dryRun": "Preview the migration plan without changing files.",
 	"cli.cmd.workspace.upgrade.actions": "Workspace upgrade: {0} action(s). current={1}, target={2}.",
 	"cli.cmd.workspace.upgrade.noActions": "Workspace upgrade: no actions. current={0}, target={1}.",
 	"cli.cmd.workspace.pull.summary": "Pull server changes into the workspace.",
-	"cli.cmd.workspace.pull.desc": "Apply changes from the active server into the current workspace.\n\nUse paths to narrow the scope; omitted paths use the current synchronization scope. Pull changes local files and may merge changes. Inspect status and file diff first; examine reported conflicts before resolving them, rather than treating --force as an ordinary retry.\n\nOmitting paths processes all corresponding changes. A kind=result response still exits with 6 when conflicts exist. Inspect updated, deleted, conflicts and oldFiles, and use backup list to inspect saved local versions.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Synchronize changes\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/sync-changes.md\nWeb: https://docs.succapp.com/ai-building/workspace/sync-changes",
+	"cli.cmd.workspace.pull.desc": "Synchronize metadata changes from the active server to the local workspace.\n\nRequires an active server binding. Limit synchronization to selected files or directories; changes on both sides are merged when possible.\n\nPull modifies local files and may produce merge conflicts.",
+	"cli.cmd.workspace.pull.out": "A kind=result response still exits with 6 when conflicts exist. Inspect updated, deleted, conflicts and summary.oldFiles, and use backup list to inspect saved local versions. Older-format files are summarized by count. Suggested upgrade previews cover their projects; specify directories or files with dev file upgrade --dry-run to inspect a narrower scope.\n\nconflicts[].outcome=conflictMarkersWritten means text conflict markers were written locally; localPreserved means local content was kept in place. An absent outcome implies neither state; inspect differences and diagnostics. updated lists files actually written and may overlap conflicts; it does not mean those conflicts are resolved.\n\nResolve markers or compare preserved local content, then recheck status and validate before deciding next steps. Do not treat remoteProjectUnavailable as deletion; inspect partial results and exit codes.",
 	"cli.cmd.workspace.pull.force": "Allow server changes to overwrite local changes.",
 	"cli.cmd.workspace.pull.conflicts": "Conflicts: {0}",
-	"cli.cmd.workspace.pull.oldMeta": "Old metadata files: {0}",
 	"cli.cmd.workspace.pull.pullResultUpdated": "Pull result: {0} updated, {1} deleted, {2} conflict(s)",
 	"cli.cmd.workspace.pull.upDate": "Already up to date",
+	"cli.cmd.workspace.pull.conflictMarkersWritten": "Unresolved conflict; conflict markers were written: {0}",
+	"cli.cmd.workspace.pull.localPreserved": "Conflict blocked; local content was preserved: {0}",
+	"cli.cmd.workspace.pull.path": "Limit the pull to a workspace file or directory, such as PROJECT/data/tables/example.tbl; omit to process all corresponding changes. Paths are relative to the execution directory after -C, or absolute disk paths within the workspace.",
 	"cli.cmd.workspace.push.summary": "Push workspace changes to the server.",
-	"cli.cmd.workspace.push.desc": "Submit local workspace changes to the active server.\n\nUse paths to narrow the scope. Inspect status and file diff to confirm local changes and the active server. Push writes remote metadata; --force bypasses some conflict protection. After failure or disconnection, refresh state before retrying.\n\nOmitting paths processes all corresponding local changes. Recheck status afterwards; a result object does not override failed items or a nonzero exit code.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Synchronize changes\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/sync-changes.md\nWeb: https://docs.succapp.com/ai-building/workspace/sync-changes",
+	"cli.cmd.workspace.push.desc": "Submit local workspace metadata changes to the active server.\n\nSupports limiting the path scope and checking for conflicts with remote changes.\n\nPushes write server metadata. Some operations may have completed even after a failure or disconnection.",
+	"cli.cmd.workspace.push.out": "In JSON, pushed[] lists submitted items, rejected[] lists conflict rejections, failures[] lists other failures, and metadataVersionSuggestions[] gives file-version guidance. Partial success is possible: rejected items cause exit 6; otherwise failures cause exit 1. kind=result does not mean every item succeeded. Recheck status afterwards.",
 	"cli.cmd.workspace.push.force": "Allow local changes to overwrite remote changes.",
 	"cli.cmd.workspace.push.failed": "Failed files: {0}",
 	"cli.cmd.workspace.push.kind": "Kind",
@@ -854,16 +1082,19 @@
 	"cli.cmd.workspace.push.pushResultPushed": "Push result: {0} pushed, {1} rejected, {2} failed",
 	"cli.cmd.workspace.push.targetVersion": "Target version",
 	"cli.cmd.workspace.push.version": "Current version",
+	"cli.cmd.workspace.push.path": "Workspace local path, relative to the execution directory after -C, or an absolute disk path within the workspace. Omit to process all corresponding changes.",
 	"cli.cmd.workspace.discard.summary": "Discard local workspace changes.",
-	"cli.cmd.workspace.discard.desc": "Restore workspace files from the local mirror baseline and discard local changes.\n\nExplicit paths discard local changes in that scope. Without paths, --force is required to confirm the full scope. The mirror is a local synchronization baseline and may not be the latest server version. Review differences and save any work you need first.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Synchronize changes\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/sync-changes.md\nWeb: https://docs.succapp.com/ai-building/workspace/sync-changes",
+	"cli.cmd.workspace.discard.desc": "Restore workspace files from the local synchronization baseline, discarding local changes.\n\nThe baseline is a locally saved version and may differ from the latest server content.\n\nOverwrites or removes local changes in the selected scope. Save anything that must be retained beforehand.",
+	"cli.cmd.workspace.discard.out": "JSON updated[] lists files restored from the baseline, and deleted[] lists files removed to undo local additions; summary.updated/summary.deleted count these entries. Each entry uses an absolute localPath and a server resource remotePath.",
 	"cli.cmd.workspace.discard.force": "Confirm discarding all workspace changes when no path is given.",
 	"cli.cmd.workspace.discard.deletedFiles": "Deleted files: {0}",
 	"cli.cmd.workspace.discard.noLocalChanges": "No local changes to discard",
 	"cli.cmd.workspace.discard.restoredFiles": "Restored files: {0}",
 	"cli.cmd.workspace.discard.result": "Discard result: {0} restored, {1} deleted",
 	"cli.cmd.workspace.repair.summary": "Check or repair workspace consistency issues.",
-	"cli.cmd.workspace.repair.desc": "Check or repair workspace structure and sync state issues that can be fixed automatically.\n\nStart with --dry-run to inspect findings and use --only to narrow checks before repairing. Repair may update support files or synchronization state. It does not replace business-file conflict resolution; inspect status afterwards.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Validate metadata\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/troubleshoot/metadata-validation.md\nWeb: https://docs.succapp.com/ai-building/troubleshoot/metadata-validation",
-	"cli.cmd.workspace.repair.only": "Run only the named workspace repair check.",
+	"cli.cmd.workspace.repair.desc": "Inspect and repair workspace structure and synchronization state issues that can be handled automatically.\n\nSupports inspection without changes and selecting specific checks. Does not resolve business file conflicts.\n\nRepairs may update local support files and synchronization state.",
+	"cli.cmd.workspace.repair.out": "JSON groups issues[] by problem code; remotePaths/localPaths locate affected resources, and summary.byCode supplies explanations and counts. --dry-run exits 1 when issues are found; it has not repaired them. After actual repair, inspect repaired[], unresolved[] and skipped[]. Unresolved issues cause exit 1; use reason to decide how to handle skipped items.",
+	"cli.cmd.workspace.repair.only": "Run selected checks; repeat the option for multiple checks. workspace-support selects editor settings, ignore rules, Agent files, type declarations and JSON Schema; sync-baseline checks synchronization baselines.",
 	"cli.cmd.workspace.repair.dryRun": "Preview repairable workspace issues without changing files.",
 	"cli.cmd.workspace.repair.badCheck": "Invalid workspace repair check: {0}",
 	"cli.cmd.workspace.repair.checkColumn": "Check",
@@ -875,165 +1106,101 @@
 	"cli.cmd.workspace.repair.repairable": "Repairable",
 	"cli.cmd.workspace.repair.repaired": "Workspace repair: {0} repaired, {1} unresolved.",
 	"cli.cmd.workspace.repair.repairedIssues": "Repaired issues:",
+	"cli.cmd.workspace.repair.byCode": "Summary by code:",
+	"cli.cmd.workspace.repair.issues": "Issues:",
 	"cli.cmd.workspace.repair.strategy": "Strategy",
 	"cli.cmd.workspace.repair.unresolved": "Unresolved issues:",
 	"cli.cmd.workspace.proj.title": "Workspace project",
 	"cli.cmd.workspace.proj.summary": "manage workspace projects",
-	"cli.cmd.workspace.proj.desc": "Manage workspace projects.\n\nUse list for local projects, clone to download from the active server, and remove to delete local projects and baselines. Use succapp server project list to discover server projects.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Connect and clone projects\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/connect-and-clone.md\nWeb: https://docs.succapp.com/ai-building/workspace/connect-and-clone",
+	"cli.cmd.workspace.proj.desc": "Manage local workspace projects, including listing, cloning and removal.\n\nCloning downloads projects from the active server; removal affects only local project files and their synchronization baselines.",
 	"cli.cmd.workspace.proj.list.summary": "List workspace projects.",
-	"cli.cmd.workspace.proj.list.desc": "List workspace projects.\n\nShows projects found in both the working directory and mirror baseline, helping identify a missing side. This is not the server project list; use server project list for that.",
+	"cli.cmd.workspace.proj.list.desc": "List local workspace projects.\n\nIncludes projects found in working directories and local synchronization baselines to identify a missing side. It is not a complete list of server projects.",
+	"cli.cmd.workspace.proj.list.out": "JSON projects[] contains name, workspace and baseline. workspace/baseline are booleans indicating presence in the working directory and local synchronization baseline respectively; a missing side does not establish that the server project was deleted.",
 	"cli.cmd.workspace.proj.list.empty": "No projects are tracked in this workspace.",
 	"cli.cmd.workspace.proj.clone.summary": "Clone server projects into the workspace.",
-	"cli.cmd.workspace.proj.clone.desc": "Clone projects from the active server into the current workspace.\n\nConfirm the active server and project names first. Existing local projects or baselines require --force to confirm replacement. Clone writes the working directory and baseline; preserve local changes first. Check any old-metadata notices afterwards.\n\nOmitting project names clones all visible projects. If no active server is configured, --server can select and register the initial target. Once an active server exists, --server must match it.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Connect and clone projects\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/connect-and-clone.md\nWeb: https://docs.succapp.com/ai-building/workspace/connect-and-clone",
-	"cli.cmd.workspace.proj.clone.force": "Allow clone to overwrite existing local workspace projects.",
+	"cli.cmd.workspace.proj.clone.desc": "Clone projects from the active server into the local workspace.\n\nSupports one, multiple or all visible projects.\n\nRequires access to the target server; an existing active server must match the clone target. Writes project files and synchronization baselines; overwriting existing directories may lose local changes.",
+	"cli.cmd.workspace.proj.clone.out": "Check any old-metadata notices afterwards. JSON returns the older-format file count in summary.oldFiles and optional upgrade guidance; use dev file upgrade --dry-run to inspect details.",
+	"cli.cmd.workspace.proj.clone.force": "Allow clone to overwrite existing local project paths, including files left by an interrupted clone.\n\nA synchronization cache alone, without a local project path, can be retried without overwrite confirmation.",
 	"cli.cmd.workspace.proj.clone.configuredActive": "Active server configured: {0}",
 	"cli.cmd.workspace.proj.clone.cloned": "Cloned projects: {0}",
-	"cli.cmd.workspace.proj.clone.oldMetaNotice": "Note: {count} metadata file(s) use an older format.\nOptional: run '{command}' to modernize them.\nThis may update many files; run with `--dry-run` first to review the scope.\nSkip this if you only want to inspect the project.",
+	"cli.cmd.workspace.proj.clone.project": "Server project names from server project list; omitting names clones all visible projects.\n\nIf no server is active, --server can register the first clone target; otherwise it must match the active server.",
 	"cli.cmd.workspace.proj.remove.summary": "Remove workspace projects.",
-	"cli.cmd.workspace.proj.remove.desc": "Remove local workspace projects and mirror baselines without deleting server projects.\n\n--force is required, and multiple projects can be specified. Unpushed local changes and the project synchronization baseline are removed. Save anything you need first; projects can later be cloned again from the server.",
-	"cli.cmd.workspace.proj.remove.force": "Confirm removal of local project files and mirror baselines.",
+	"cli.cmd.workspace.proj.remove.desc": "Remove local workspace projects and their synchronization baselines.\n\nAlso deletes unpushed local changes; server projects are unaffected.",
+	"cli.cmd.workspace.proj.remove.out": "JSON projectNames[] is an array of removed local project-name strings; it does not indicate deletion of server projects.",
+	"cli.cmd.workspace.proj.remove.force": "Confirm removal of local project files and local synchronization baselines.\n\nRequired; unpushed local changes are also deleted.",
 	"cli.cmd.workspace.proj.remove.removed": "Removed workspace projects: {0}",
-	"cli.cmd.workspace.remote.title": "Workspace remote",
-	"cli.cmd.workspace.remote.summary": "manage workspace remotes",
-	"cli.cmd.workspace.remote.desc": "Manage workspace remotes.\n\nThese commands manage local workspace configuration; use auth for credentials. Confirm server identity before switching or changing a URL, since subsequent synchronization uses the active server.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Connect and clone projects\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/connect-and-clone.md\nWeb: https://docs.succapp.com/ai-building/workspace/connect-and-clone",
+	"cli.cmd.workspace.proj.remove.project": "Local project names from workspace project list; multiple names are accepted.",
+	"cli.cmd.workspace.remote.title": "Workspace remote servers",
+	"cli.cmd.workspace.remote.summary": "manage workspace remote servers",
+	"cli.cmd.workspace.remote.desc": "Manage workspace remote server configuration.\n\nSupports inspection, adding, switching, URL changes and removal. Configuration determines subsequent synchronization targets; authentication is managed separately.\n\nChanges local workspace configuration without changing server content.",
 	"cli.cmd.workspace.remote.list.summary": "List configured servers.",
-	"cli.cmd.workspace.remote.list.desc": "List configured servers for the current workspace.\n\nCheck the active marker to confirm the target for subsequent synchronization. Entries come from local configuration and do not prove reachability or valid authentication.",
+	"cli.cmd.workspace.remote.list.desc": "List configured servers in the current workspace to identify synchronization targets.\n\nReads local configuration without verifying server availability or authentication validity.",
+	"cli.cmd.workspace.remote.list.out": "JSON servers[] contains url and the boolean active. activeServer is the current active server URL and is omitted when none is selected. An empty servers array includes empty.reason=emptyCollection. These fields describe local configuration only.",
 	"cli.cmd.workspace.remote.add.summary": "Add a server and make it active.",
-	"cli.cmd.workspace.remote.add.desc": "Add a server to the current SuccApp workspace and make it the active server.\n\n<url> is the server address. Adding it changes the current synchronization target. Configure credentials with auth login; adding a server does not clone projects.",
+	"cli.cmd.workspace.remote.add.desc": "Add a server to the current workspace and make it active.\n\nChanges local configuration and the target for subsequent synchronization. Does not clone projects or establish login authentication.",
+	"cli.cmd.workspace.remote.add.out": "JSON activeServer is the active server URL after the operation. added is a boolean; false means the URL was already configured and has still been selected as active.",
 	"cli.cmd.workspace.remote.add.active": "Active server: {0}",
 	"cli.cmd.workspace.remote.use.summary": "Switch the active server.",
-	"cli.cmd.workspace.remote.use.desc": "Switch the active server for the current workspace.\n\n<url> must identify a configured server. Check remote list and status afterwards. Switching does not automatically replace the working directory with files from the new server.",
+	"cli.cmd.workspace.remote.use.desc": "Switch the active server for the current workspace.\n\nThe target must be a configured server.\n\nChanges the target of subsequent synchronization without automatically replacing working files with content from the new server.",
+	"cli.cmd.workspace.remote.use.out": "JSON activeServer is the selected active server URL. It confirms the workspace configuration change, not server connectivity or successful authentication.",
 	"cli.cmd.workspace.remote.use.active": "Active server: {0}",
 	"cli.cmd.workspace.remote.setUrl.summary": "Change a configured server URL.",
-	"cli.cmd.workspace.remote.setUrl.desc": "Change a configured server URL and migrate the local mirror key.\n\nProvide old and new URLs when the same server changes address. This changes local configuration and baseline indexing; it is not a project migration to an unrelated server. Check remote list and authentication afterwards.",
+	"cli.cmd.workspace.remote.setUrl.desc": "Update the access URL of the same server in a workspace.\n\nIntended for server address changes; existing project synchronization records follow the updated URL.\n\nChanges local configuration and synchronization records without migrating server projects.",
+	"cli.cmd.workspace.remote.setUrl.out": "JSON oldServer is the previous URL and server is the updated URL. activeServer is the active URL after the operation and is omitted when none is selected. Changing an inactive server URL does not automatically make it active.",
 	"cli.cmd.workspace.remote.setUrl.changed": "Server URL changed: {0} -> {1}",
 	"cli.cmd.workspace.remote.remove.summary": "Remove a configured server.",
-	"cli.cmd.workspace.remote.remove.desc": "Remove a server from the current workspace configuration.\n\n<url> must be configured. Check remote list afterwards to confirm the remaining active target. This does not delete the remote server or its projects; use auth logout to remove local credentials.",
+	"cli.cmd.workspace.remote.remove.desc": "Remove a server from the current workspace configuration.\n\nOnly changes local server configuration; it does not delete the remote server, projects or local authentication records.",
+	"cli.cmd.workspace.remote.remove.out": "JSON server is the removed URL. removedActive is a boolean indicating whether that URL was previously active. activeServer is the active URL after removal and is omitted when none remains selected.",
 	"cli.cmd.workspace.remote.remove.active": "Server removed: {0}\nActive server: {1}",
 	"cli.cmd.workspace.remote.remove.removed": "Server removed: {0}",
-	"cli.cmd.workspace.file.title": "Workspace file",
-	"cli.cmd.workspace.file.summary": "inspect workspace files",
-	"cli.cmd.workspace.file.desc": "Inspect workspace files.\n\nUse resolve for path mapping, show/history for server or baseline content, diff to compare local and server content, compile/upgrade to validate or upgrade local metadata, and open for server pages. Local file edits still require push to synchronize.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Synchronize changes\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/workspace/sync-changes.md\nWeb: https://docs.succapp.com/ai-building/workspace/sync-changes",
-	"cli.cmd.workspace.file.resolve.summary": "Resolve a workspace file path.",
-	"cli.cmd.workspace.file.resolve.desc": "Resolve local, remote, and browser URLs for a workspace file.\n\nPass a workspace file path and inspect the resolved localPath and remotePath. --url selects a view or edit link. This resolves the target without uploading files or opening a browser.",
-	"cli.cmd.workspace.file.resolve.url": "Only print the view or edit URL in human mode.",
-	"cli.cmd.workspace.file.resolve.badUrl": "Invalid value for --url: {0}",
-	"cli.cmd.workspace.file.resolve.editUrl": "Edit URL: {0}",
-	"cli.cmd.workspace.file.resolve.localPath": "Local path: {0}",
-	"cli.cmd.workspace.file.resolve.path": "Path: {0}",
-	"cli.cmd.workspace.file.resolve.remote": "Remote path: {0}",
-	"cli.cmd.workspace.file.resolve.viewUrl": "View URL: {0}",
-	"cli.cmd.workspace.file.open.summary": "Open the server file page.",
-	"cli.cmd.workspace.file.open.desc": "Open the server view or edit page for a workspace file, or return its URL without opening the browser.\n\nThe default opens a view page; --edit selects editing and --no-open returns only the URL. Pages use server content. Local changes require --force confirmation, which does not push those changes.",
-	"cli.cmd.workspace.file.open.edit": "Open the server edit page instead of the view page.",
-	"cli.cmd.workspace.file.open.noOpen": "Return the page URL without launching the system browser.",
-	"cli.cmd.workspace.file.open.path": "Workspace-relative file path or absolute server metadata path.",
-	"cli.cmd.workspace.file.open.force": "Open the server page even when the local file has unpushed changes.",
-	"cli.cmd.workspace.file.open.localChangedForce": "The local file has unpushed changes. The browser opens the server version of {0}.",
-	"cli.cmd.workspace.file.open.openedEdit": "Opened server edit page: {0}",
-	"cli.cmd.workspace.file.open.openedView": "Opened server view page: {0}",
-	"cli.cmd.workspace.file.show.summary": "Show file content.",
-	"cli.cmd.workspace.file.show.desc": "Read file content from the server or local mirror baseline.\n\nReads server content by default; --source=mirror reads the local baseline. --revision applies only to the server source. Human output is raw content and JSON content is Base64. This does not directly read the current working file.",
-	"cli.cmd.workspace.file.show.source": "Read from mirror or server.",
-	"cli.cmd.workspace.file.show.revision": "Read a server revision.",
-	"cli.cmd.workspace.file.show.badRev": "Invalid value for --revision: {0}",
-	"cli.cmd.workspace.file.show.badSource": "Invalid value for --source: {0}",
-	"cli.cmd.workspace.file.show.revSource": "--revision is only supported with --source=server.",
-	"cli.cmd.workspace.file.diff.summary": "Show workspace diff against server.",
-	"cli.cmd.workspace.file.diff.desc": "Compare local workspace metadata files with server content. Inputs may be files, directories (recursively including all files), or globs.\n\nQuote globs so the CLI can expand them. Output is for reviewing differences and does not change local or server files. Combine it with workspace status to inspect conflicts across the synchronization scope.",
-	"cli.cmd.workspace.file.diff.source": "Compare against server content.",
-	"cli.cmd.workspace.file.diff.badSource": "Invalid value for --source: {0}",
-	"cli.cmd.workspace.file.history.summary": "Show server file history.",
-	"cli.cmd.workspace.file.history.desc": "Show server-side file history for a workspace file.\n\nResolves a workspace path to a file on the active server; --limit bounds the number of entries. This is server history, not local Git history. Read a version with file show --revision.",
-	"cli.cmd.workspace.file.history.limit": "Limit the number of history records.",
-	"cli.cmd.workspace.file.compile.summary": "Validate workspace metadata files.",
-	"cli.cmd.workspace.file.compile.desc": "Validate local workspace metadata files. Inputs may be files, directories (recursively including all files), or globs.\n\nQuote globs. Validation may contact the server for version information or compilation checks, but does not push local changes. Inspect failed and skipped items; successful validation does not verify business behavior.\n\nExit 0 may still include skipped items. Inspect skipped/skipReason rather than treating skipped files as validated.",
-	"cli.cmd.workspace.file.compile.compiler": "Compiler",
-	"cli.cmd.workspace.file.compile.done": "Validated {0} workspace metadata file(s).",
-	"cli.cmd.workspace.file.compile.failed": "Failed files: {0}",
-	"cli.cmd.workspace.file.compile.newerVersion": "{0} file(s) are newer than the active server and were skipped. Connect to a matching server, then validate again.",
-	"cli.cmd.workspace.file.compile.result": "Metadata validation result: {0} file(s), {1} passed, {2} failed",
-	"cli.cmd.workspace.file.compile.running": "Validating workspace metadata files",
-	"cli.cmd.workspace.file.compile.schemaFailed": "Metadata validation failed.",
-	"cli.cmd.workspace.file.compile.schemaFailedMsg": "Metadata validation failed: {0}",
-	"cli.cmd.workspace.file.compile.skipped": "Skipped files: {0}",
-	"cli.cmd.workspace.file.compile.upgradeRequired": "{0} file(s) require a metadata upgrade. Run `{1}` with the same pathspec, then validate again.",
-	"cli.cmd.workspace.file.upgrade.summary": "Upgrade old SuccApp metadata files.",
-	"cli.cmd.workspace.file.upgrade.desc": "Preview or upgrade old SuccApp metadata files in the local workspace. Inputs may be files, directories (recursively including all files), or globs; with no input, all local projects are processed.\n\nUse --dry-run to inspect candidates and failures before upgrading. Actual execution changes local files. Review diff and validate afterwards before deciding to push.",
-	"cli.cmd.workspace.file.upgrade.dryRun": "Preview upgrade candidates without changing files.",
-	"cli.cmd.workspace.file.upgrade.cands": "Upgrade candidates: {0}",
-	"cli.cmd.workspace.file.upgrade.dryRunRes": "Metadata upgrade dry-run: {0} checked, {1} candidate(s), {2} skipped, {3} failed",
-	"cli.cmd.workspace.file.upgrade.failed": "Failed files: {0}",
-	"cli.cmd.workspace.file.upgrade.reason": "Reason",
-	"cli.cmd.workspace.file.upgrade.result": "Metadata upgrade result: {0} checked, {1} changed, {2} skipped, {3} failed",
-	"cli.cmd.workspace.file.upgrade.skipped": "Skipped files: {0}",
-	"cli.cmd.workspace.file.upgrade.upgraded": "Upgraded files: {0}",
+	"cli.cmd.workspace.remote.*.url": "Configured or new server URL, such as https://bi.example.com.",
+	"cli.cmd.workspace.remote.*.oldUrl": "Configured old server URL.",
+	"cli.cmd.workspace.remote.*.newUrl": "New access URL for the same server.",
 	"cli.cmd.workspace.lock.title": "Workspace lock",
 	"cli.cmd.workspace.lock.summary": "inspect workspace locks",
-	"cli.cmd.workspace.lock.desc": "Inspect workspace locks.\n\nlist shows occupied scopes, status inspects selected scopes, and wait waits for release. These commands diagnose concurrent work; they do not forcibly remove locks or terminate holders.",
+	"cli.cmd.workspace.lock.desc": "Inspect workspace locks to diagnose concurrent operations.\n\nSupports scope lists, holder details and waiting for idle scopes. Does not forcibly delete locks or terminate holders.",
 	"cli.cmd.workspace.lock.badScope": "Invalid workspace lock scope: {0}",
 	"cli.cmd.workspace.lock.list.summary": "List locked workspace scopes.",
-	"cli.cmd.workspace.lock.list.desc": "List scopes currently locked in the SuccApp workspace.\n\nUse output to identify holders and scopes. An empty list means no valid holders were observed. Other processes may change this state; it does not reserve a lock for the next write.",
+	"cli.cmd.workspace.lock.list.desc": "List locked scopes in the current workspace.\n\nState may change as other processes run; the list does not guarantee that subsequent operations can acquire a lock immediately.",
+	"cli.cmd.workspace.lock.list.out": "JSON scopes[] lists occupied scopes without holder details. An empty list means no valid holders were observed; occupied scopes alone still exit 0.",
 	"cli.cmd.workspace.lock.list.scope": "Scope",
 	"cli.cmd.workspace.lock.list.empty": "No active workspace locks.",
 	"cli.cmd.workspace.lock.status.summary": "Show workspace lock holders.",
-	"cli.cmd.workspace.lock.status.desc": "Inspect workspace lock scopes and their holders.\n\nSpecify one or more scopes, or omit them to inspect all scopes. free/busy reflects the instant inspected. Use lock wait to wait for availability; subsequent operations must still acquire their own locks.",
+	"cli.cmd.workspace.lock.status.desc": "Inspect workspace lock scopes and their holders to diagnose concurrent operations.\n\nState may change as other processes run; inspection does not guarantee that subsequent operations can acquire a lock immediately.",
+	"cli.cmd.workspace.lock.status.out": "In JSON scopes[], status=free means available and status=busy means occupied. A busy entry includes holder details such as PID, hostname, source, command and heartbeat time. Observing busy still exits 0 and does not acquire the lock.",
 	"cli.cmd.workspace.lock.status.heartbeat": "Last heartbeat",
 	"cli.cmd.workspace.lock.status.pid": "PID",
 	"cli.cmd.workspace.lock.status.scope": "Scope",
+	"cli.cmd.workspace.lock.status.scopeArg": "One or more workspace lock scopes, such as config and sync; omit to inspect all scopes.",
 	"cli.cmd.workspace.lock.wait.summary": "Wait until workspace locks are free.",
-	"cli.cmd.workspace.lock.wait.desc": "Wait until the requested workspace lock scopes are free.\n\nWith no scopes, waits for config and sync. --timeout is in seconds; omitting it waits indefinitely. Success means the scopes were free when inspected and does not acquire them. Timeout returns a nonzero exit code that scripts should handle.\n\nThe timeout exit code is 124.",
-	"cli.cmd.workspace.lock.wait.timeout": "Stop waiting after the given number of seconds.",
+	"cli.cmd.workspace.lock.wait.desc": "Wait for workspace lock scopes to become idle before subsequent operations.\n\nSupports indefinite waiting or a time limit.\n\nSuccess only indicates the scopes were idle when checked; it does not hold locks. Timeout produces a nonzero exit code.",
+	"cli.cmd.workspace.lock.wait.out": "The timeout exit code is 124.",
+	"cli.cmd.workspace.lock.wait.timeout": "Stop waiting after the given number of seconds.\n\nIn seconds; omit to wait indefinitely.",
 	"cli.cmd.workspace.lock.wait.badTimeout": "Invalid value for --timeout: {0}",
 	"cli.cmd.workspace.lock.wait.locksBusy": "Workspace locks still busy after {0}s: {1}",
 	"cli.cmd.workspace.lock.wait.locksFree": "Workspace locks are free: {0}",
+	"cli.cmd.workspace.lock.wait.scope": "One or more workspace lock scopes, such as config and sync; defaults to config and sync.",
+	"cli.cmd.workspace.lock.*.scope": "Workspace lock scopes such as config and sync; see the description for defaults.",
 	"cli.cmd.workspace.backup.title": "Workspace backup",
 	"cli.cmd.workspace.backup.summary": "inspect and clear workspace backups",
-	"cli.cmd.workspace.backup.desc": "Inspect and clear workspace backups.\n\nUse list to inspect local versions saved before pull conflict handling and clear to remove them. These are not complete backups of every workspace file and do not replace Git history.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Recover lost changes\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/troubleshoot/recover-lost-changes.md\nWeb: https://docs.succapp.com/ai-building/troubleshoot/recover-lost-changes",
+	"cli.cmd.workspace.backup.desc": "Inspect and clear workspace merge backups.\n\nBackups contain local versions saved before pull conflict handling. They do not cover all workspace files or replace Git history.",
 	"cli.cmd.workspace.backup.backupPath": "Backup path",
 	"cli.cmd.workspace.backup.cleared": "Merge backup clear: {0} cleared, {1} remaining.",
 	"cli.cmd.workspace.backup.list.summary": "List saved merge backups.",
-	"cli.cmd.workspace.backup.list.desc": "List local versions saved before pull conflict handling.\n\nUse paths to limit the scope. Identify the original file and saved location before restoring or cleaning backups. Listing does not restore files automatically.",
+	"cli.cmd.workspace.backup.list.desc": "List local versions saved before resolving pull conflicts to find content that can be recovered.\n\nDoes not restore files automatically; these backups do not cover every workspace file.",
+	"cli.cmd.workspace.backup.list.out": "In JSON entries[], localPath/remotePath identify the original resource, backupPath is the absolute path to the saved local copy, and size is in bytes. summary.entries counts returned backup entries.",
 	"cli.cmd.workspace.backup.list.empty": "No merge backups found.",
 	"cli.cmd.workspace.backup.clear.summary": "Clear saved merge backups.",
-	"cli.cmd.workspace.backup.clear.desc": "Clear local versions saved before pull conflict handling.\n\nUse paths to limit the scope. Omitting paths clears all such backups without an additional --force. Inspect list and preserve anything needed for recovery first. Cleanup does not modify current working files or remote files.",
-	"cli.cmd.workspace.ext.title": "Workspace extension",
-	"cli.cmd.workspace.ext.summary": "create and publish workspace extensions",
-	"cli.cmd.workspace.ext.desc": "Create and publish workspace extensions.\n\nUse list for local extensions, create to generate a local directory from a template, and push to publish to the active server. Discover templates with server extension template list first.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nGuide: Develop extensions\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/extension/extension.md\nWeb: https://docs.succapp.com/ai-building/extension/extension",
-	"cli.cmd.workspace.ext.dirNamedSame": "A directory named the same already exists under sysdata/extensions/.",
-	"cli.cmd.workspace.ext.extNameMust": "Extension name must follow the pattern {0}.",
-	"cli.cmd.workspace.ext.extNameRequired": "Extension name is required.",
-	"cli.cmd.workspace.ext.invalidExtName": "Invalid extension name.",
-	"cli.cmd.workspace.ext.middleSegmentMust": "The middle segment must equal \"{0}\" (current: \"{1}\").",
-	"cli.cmd.workspace.ext.list.summary": "List local extensions.",
-	"cli.cmd.workspace.ext.list.desc": "List local extensions under the workspace sysdata project.\n\nLists extension directories under sysdata in the current workspace, not extensions installed on the server. Use a confirmed name with extension push.",
-	"cli.cmd.workspace.ext.create.summary": "Create a local extension.",
-	"cli.cmd.workspace.ext.create.desc": "Create a local extension directory from a server template.\n\nRequires an extension point, template and new name. Discover valid combinations with server extension template list. This writes a local directory; inspect generated files before publishing with extension push.\n\nAn active server and a cloned sysdata project are required. Templates are fetched over the network; JSON execution.server=none does not mean this operation can run offline.\n\nConsult the guide below for related instructions and confirm it applies to your CLI and server version.\n\nNames use lowercase letters, digits and hyphens, with at least three segments. The second segment must match the extension point, e.g. succ-component-card. The destination directory must not already exist.\n\nGuide: Develop extensions\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/extension/extension.md\nWeb: https://docs.succapp.com/ai-building/extension/extension",
-	"cli.cmd.workspace.ext.create.extTemplate": "Extension template not found: {0}/{1}",
-	"cli.cmd.workspace.ext.push.summary": "Push a local extension.",
-	"cli.cmd.workspace.ext.push.desc": "Push a local extension directory to the active server.\n\nChoose exactly one of an extension name and --path. This uploads the extension and affects the server. Confirm its content and the active server first; see --force when replacing an existing target.",
-	"cli.cmd.workspace.ext.push.path": "Resolve the extension from a local path under sysdata/extensions.",
-	"cli.cmd.workspace.ext.push.force": "Allow local extension files to overwrite remote changes.",
-	"cli.cmd.workspace.ext.push.needNamePath": "Pass an extension name or --path=<path>.",
-	"cli.cmd.workspace.ext.push.onlyOne": "Use either <name> or --path=<path>, not both.",
-	"cli.cmd.workspace.*.path": "Workspace resource path: a local path or /PROJECT/... metadata path. See the description for omitted-path scope.",
-	"cli.cmd.workspace.file.*.pathspec": "Relative paths and globs are expanded from the workspace root, not the launch subdirectory. Directories are recursive; quote globs. Workspace-local absolute paths and /PROJECT/... metadata paths are supported.",
-	"cli.cmd.workspace.file.*.path": "Workspace resource path: a local path or /PROJECT/... metadata path. See the description for omitted-path scope.",
-	"cli.cmd.workspace.remote.*.url": "Configured or new server URL, such as https://bi.example.com.",
-	"cli.cmd.workspace.remote.*.oldUrl": "Configured old server URL.",
-	"cli.cmd.workspace.remote.*.newUrl": "New access URL for the same server.",
-	"cli.cmd.workspace.lock.*.scope": "Workspace lock scopes such as config and sync; see the description for defaults.",
-	"cli.cmd.workspace.backup.*.path": "Workspace resource path: a local path or /PROJECT/... metadata path. See the description for omitted-path scope.",
-	"cli.cmd.workspace.ext.*.extensionPoint": "Extension point returned by server extension template list.",
-	"cli.cmd.workspace.ext.*.template": "Template name within the selected extension point, from server extension template list.",
-	"cli.cmd.workspace.ext.create.name": "New extension name following the selected extension point naming requirements.",
-	"cli.cmd.workspace.ext.push.name": "Extension name returned by workspace extension list; choose this or --path.",
-	"cli.cmd.workspace.proj.clone.project": "Project names from server project list (remote) or workspace project list (local).",
-	"cli.cmd.workspace.proj.remove.project": "Project names from server project list (remote) or workspace project list (local).",
-	"cli.cmd.workspace.status.incomplete": "Remote check incomplete ({0}); remote changes may be from a previous check. Inspect warnings and check again.",
-	"cli.out.search.score": "Score",
+	"cli.cmd.workspace.backup.clear.desc": "Clear local versions saved before resolving pull conflicts.\n\nDeletes backups in the selected scope without changing current working or remote files. Save any content needed for recovery before clearing.",
+	"cli.cmd.workspace.backup.clear.out": "JSON cleared[] lists backups deleted by this operation; remaining[] lists all backups retained afterwards. summary.cleared/summary.remaining count these entries. Each entry uses an absolute backupPath for the backup and localPath/remotePath for the original resource. An empty cleared array can mean no backups matched.",
+	"cli.cmd.workspace.backup.clear.path": "Workspace local path, relative to the execution directory after -C or an absolute disk path within the workspace. Omit to clear all merge backups; no --force is required.",
+	"cli.cmd.workspace.backup.*.path": "Local workspace path, relative to the execution directory after -C, or an absolute disk path within the workspace.",
+	"cli.cmd.workspace.*.path": "Local workspace path, relative to the execution directory after -C, or an absolute disk path within the workspace.",
+	"cli.json.syntax": "Invalid JSON",
+	"cli.compile.utf8": "The file contains invalid UTF-8 bytes. Decode it using its original encoding, save it as UTF-8, and compile again; do not replace or delete garbled characters.",
+	"cli.out.search.score": "Relevance",
 	"cli.out.common.active": "Active",
-	"cli.out.common.api": "Dev Tool API",
+	"cli.out.common.api": "SuccApp API version",
 	"cli.out.common.baseline": "Baseline",
 	"cli.out.common.changes": "No changes.",
 	"cli.out.common.changesLocalRemote": "Changes: {0} (local {1}, remote {2}, conflicts {3})",
@@ -1051,8 +1218,10 @@
 	"cli.out.common.targetVersion": "Target version",
 	"cli.out.common.version": "Current version",
 	"cli.out.common.workspace": "Workspace",
+	"cli.out.common.localOnlyChanges": "Local changes: {0} (remote not checked)",
+	"cli.out.common.noLocalChanges": "No local changes.",
 	"cli.out.db.exists": "Output file already exists: {0}. Use --force to overwrite.",
-	"cli.out.file.createTime": "Create time",
+	"cli.out.file.createTime": "Creation time",
 	"cli.out.file.creator": "Creator",
 	"cli.out.file.description": "Description",
 	"cli.out.file.file": "file",
@@ -1060,11 +1229,11 @@
 	"cli.out.file.hash": "Hash",
 	"cli.out.file.hidden": "Hidden",
 	"cli.out.file.icon": "Icon",
-	"cli.out.file.id": "ID",
+	"cli.out.file.id": "File ID",
 	"cli.out.file.kind": "Kind",
 	"cli.out.file.labels": "Labels",
 	"cli.out.file.modifier": "Modifier",
-	"cli.out.file.modifyTime": "Modify time",
+	"cli.out.file.modifyTime": "Modification time",
 	"cli.out.file.name": "Name",
 	"cli.out.file.order": "Order",
 	"cli.out.file.parentDir": "Parent dir",
@@ -1074,24 +1243,25 @@
 	"cli.out.file.size": "Size",
 	"cli.out.file.subFileType": "Subfile type",
 	"cli.out.file.type": "Type",
+	"cli.out.file.sizeBytes": "Size (bytes)",
 	"cli.out.model.businessKeys": "Business keys",
 	"cli.out.model.dataType": "Data type",
-	"cli.out.model.dbField": "DB field",
-	"cli.out.model.dim": "Dim",
+	"cli.out.model.dbField": "Physical field",
+	"cli.out.model.dim": "Dimension key",
 	"cli.out.model.enabled": "Enabled",
 	"cli.out.model.extracted": "Extracted",
 	"cli.out.model.extractMode": "Extract mode",
-	"cli.out.model.fields": "Fields",
+	"cli.out.model.fields": "Field count",
 	"cli.out.model.kind": "Kind",
 	"cli.out.model.matchedFields": "Matched fields",
-	"cli.out.model.primary": "Primary",
+	"cli.out.model.primary": "Primary key",
 	"cli.out.model.primaryKeys": "Primary keys",
 	"cli.out.model.profile": "Data profile",
-	"cli.out.model.profile.profiledRowCount": "Rows",
+	"cli.out.model.profile.profiledRowCount": "Profiled rows",
 	"cli.out.model.profile.sampled": "Sampled",
 	"cli.out.model.profile.nullCount": "Nulls",
 	"cli.out.model.profile.nullRate": "Null rate",
-	"cli.out.model.profile.distinctCount": "Distinct",
+	"cli.out.model.profile.distinctCount": "Distinct values",
 	"cli.out.model.profile.minValue": "Min",
 	"cli.out.model.profile.maxValue": "Max",
 	"cli.out.model.profile.sum": "Sum",
@@ -1102,10 +1272,10 @@
 	"cli.out.model.profile.zeroCount": "Zeros",
 	"cli.out.model.profile.negativeCount": "Negatives",
 	"cli.out.model.profile.topValues": "Top values",
-	"cli.out.model.profile.sampleValues": "Samples",
-	"cli.out.model.profile.estimatedProperties": "Estimated",
-	"cli.out.model.profile.unavailableProperties": "Unavailable",
-	"cli.out.model.role": "Role",
+	"cli.out.model.profile.sampleValues": "Sample values",
+	"cli.out.model.profile.estimatedProperties": "Estimated properties",
+	"cli.out.model.profile.unavailableProperties": "Unavailable properties",
+	"cli.out.model.role": "Analytical role",
 	"cli.out.model.rowCount": "Row count",
 	"cli.out.model.targetTable": "Target table",
 	"cli.out.model.title": "Title",
@@ -1122,7 +1292,7 @@
 	"cli.out.header.command": "Command",
 	"cli.out.header.comment": "Comment",
 	"cli.out.header.default": "Default",
-	"cli.out.header.deleted": "Deleted",
+	"cli.out.header.deleted": "Deletion time",
 	"cli.out.header.deletedBy": "Deleted by",
 	"cli.out.header.description": "Description",
 	"cli.out.header.error": "Error",
@@ -1136,7 +1306,7 @@
 	"cli.out.header.metaType": "Metadata type",
 	"cli.out.header.modified": "Modified",
 	"cli.out.header.modifier": "Modifier",
-	"cli.out.header.null": "Null",
+	"cli.out.header.null": "Nullable",
 	"cli.out.header.path": "Path",
 	"cli.out.header.project": "Project",
 	"cli.out.header.recyclebinId": "Recycle bin ID",
@@ -1151,10 +1321,21 @@
 	"cli.out.header.upgrade": "Upgradeable",
 	"cli.out.header.value": "Value",
 	"cli.out.header.version": "Version",
+	"cli.out.header.localPath": "Local path",
+	"cli.out.header.modifiedTime": "Modification time",
 	"cli.out.help.commandHelpRead": "Run 'succapp {0} <command> --help' to see the next level.",
 	"cli.out.help.commandHelpSee": "Run 'succapp <command> --help' to see command help.",
 	"cli.out.help.commands": "Commands:",
 	"cli.out.help.arguments": "arguments:",
+	"cli.out.help.paramRequired": "[required]",
+	"cli.out.help.paramDefault": "Default: {0}",
+	"cli.out.help.paramRange": "Range: {0}–{1}",
+	"cli.out.help.paramMin": "Minimum: {0}",
+	"cli.out.help.paramMax": "Maximum: {0}",
+	"cli.out.help.paramChoices": "Choices: {0}",
+	"cli.out.help.paramSep": "; ",
+	"cli.out.help.relatedCommands": "related commands:",
+	"cli.out.help.relatedNote": "Related usage; replace angle-bracket placeholders with actual values.",
 	"cli.out.help.examples": "examples:",
 	"cli.out.help.group.content": "content options:",
 	"cli.out.help.group.field": "field options:",
@@ -1166,6 +1347,13 @@
 	"cli.out.help.group.search": "search options:",
 	"cli.out.help.usageHeader": "usage: ",
 	"cli.out.help.usageLine": "usage: succapp {command} {usageArgs}",
+	"cli.out.help.commandGroups": "Command groups:",
+	"cli.out.help.rootUsage": "succapp [global options] <command> [<args>]",
+	"cli.out.help.output": "output:",
+	"cli.out.help.references": "references:",
+	"cli.out.help.refNote": "Read references using the commands below. For server references, use the same target server as your business operation.",
+	"cli.out.help.refLocal": "Local: {0}",
+	"cli.out.help.globalNote": "See succapp --help for complete global option rules.",
 	"cli.out.human.error": "error: {0}",
 	"cli.out.human.hint": "hint: {0}",
 	"cli.out.human.info": "info: {0}",
@@ -1194,6 +1382,7 @@
 	"cli.out.value.unknown": "UNKNOWN",
 	"cli.out.value.updated": "updated",
 	"cli.out.value.yes": "yes",
+	"cli.out.value.upToDate": "up to date",
 	"cli.out.workspace.ext.createdExt": "Created extension {0}: {1}",
 	"cli.out.workspace.ext.ext": "No extensions found under {0}.",
 	"cli.out.workspace.ext.extPoint": "Extension point",
@@ -1210,8 +1399,185 @@
 	"cli.out.workspace.ext.version": "Current version",
 	"cli.out.workspace.file.hist.empty": "No server history records",
 	"cli.out.workspace.file.history.badLimit": "Invalid value for --limit: {0}",
-	"cli.out.help.commandGroups": "Command groups:",
-	"cli.out.help.rootUsage": "succapp [global options] <command> [<args>]",
+	"cli.out.suggest.correction": "correction: {0}",
+	"cli.out.suggest.prerequisite": "prerequisite: {0}",
+	"cli.out.suggest.diagnostic": "diagnostic: {0}",
+	"cli.out.suggest.cwd": "Working directory: {0}",
+	"cli.out.check.summary": "Check results: {0} file(s), {1} passed, {2} failed, {3} skipped",
+	"cli.out.check.summaryWithExecutionFailures": "Check results: {0} file(s), {1} passed, {2} source error(s), {3} skipped, {4} execution failure(s)",
+	"cli.out.check.fixedCount": "Fixed {0} problem(s)",
+	"cli.out.check.written": "Written to file",
+	"cli.out.check.nothingToFix": "Nothing to fix",
+	"cli.out.check.fixFailed": "Fix failed: {0}",
+	"cli.out.check.remotePath": "Metadata path: {0}",
+	"cli.out.check.passed": "Passed",
+	"cli.out.check.failed": "Failed",
+	"cli.out.check.skipped": "Skipped: no check was performed.",
+	"cli.out.check.executionFailed": "Execution failed: the check could not complete.",
+	"cli.out.check.compilerFile": "Compiler file identifier: {0}",
+	"cli.out.check.unknownFailure": "Failed: failure kind is unknown; inspect the original cause.",
+	"cli.out.check.jsonDetails": "Use --json for additional diagnostic details.",
+	"cli.out.check.context": "Source context",
+	"cli.out.check.code": "Compiler diagnostic code",
+	"cli.out.check.severity": "Severity",
+	"cli.out.check.type": "Type",
+	"cli.out.check.location": "Location",
+	"cli.out.check.related": "Related diagnostic:",
+	"cli.out.check.suppressed": "Suppressed error:",
+	"cli.out.check.errorCode": "Error code",
+	"cli.out.check.propertyLocation": "Component or property",
+	"cli.out.check.endPosition": "End position (line:column, 1-based)",
+	"cli.out.check.start": "Character offset (UTF-16, 0-based)",
+	"cli.out.check.length": "Character length (UTF-16)",
+	"cli.out.check.expression": "Expression",
+	"cli.out.check.token": "Error token",
+	"cli.out.check.tokenOffset": "Expression character offset (0-based)",
+	"cli.out.check.tokenIndex": "Token identifier",
+	"cli.out.check.tokenType": "Token type",
+	"cli.out.check.errorType": "Expression error type",
+	"cli.out.check.locationValue": "Location value",
+	"cli.out.check.contextPosition": "Original context position (not file coordinates; coordinate base unspecified)",
+	"cli.out.check.mergeReferenceResources": "Merge these entries into the root referenceResources, preserving other entries. Keep component type and layoutType unchanged:",
+	"cli.out.check.referenceCandidates": "Registered data reference IDs to check; use an ID, not the resource path:",
+	"cli.out.check.noReferenceCandidates": "No registered data references are available. Register the intended data resource before using its reference ID.",
+	"cli.out.check.datasetCandidates": "Datasets defined in the current scope; check the referenced ID:",
+	"cli.out.check.noDatasetCandidates": "No datasets are defined in the current scope. Define a dataset before referencing its ID.",
+	"cli.out.check.propertyCandidates": "Possible property names supported by the current configuration; verify before renaming:",
+	"cli.out.check.propertyDisabled": "This property is disabled by the current configuration. Remove it if unnecessary, or adjust its enabling conditions.",
+	"cli.out.check.enableCondition": "Enabling condition:",
+	"cli.out.check.enableDependencies": "Enabling condition depends on:",
+	"cli.out.check.nativePosition": "Additional native position (coordinate base unspecified)",
+	"cli.out.check.nativeIndex": "Native index (compiler value)",
+	"cli.out.sync.oldMetaNotice": "Found {0} metadata file(s) in an older format; no automatic upgrade was performed.",
+	"cli.out.mutation.created": "Created",
+	"cli.out.mutation.modified": "Modified",
+	"cli.out.mutation.deleted": "Deleted",
+	"cli.out.mutation.renamed": "Renamed",
+	"cli.out.mutation.moved": "Moved",
+	"cli.out.mutation.renamedAndMoved": "Renamed and moved",
+	"cli.out.mutation.metadataUpdated": "Metadata updated",
+	"cli.out.mutation.accepted": "Accepted",
+	"cli.out.conflictMarkers": "Conflict markers written",
+	"cli.suggest.command.candidate": "Inspect the usage of this possible command.",
+	"cli.suggest.command.help": "Check command usage and correct the input.",
+	"cli.suggest.auth.login": "Sign in to the target server in a browser, or choose the PAT option below.",
+	"cli.suggest.auth.pat": "Sign in with a PAT: enter it at the terminal prompt, or provide it through stdin in scripts.",
+	"cli.suggest.workspace.init": "Initialize the target folder as a SuccApp workspace.",
+	"cli.suggest.workspace.status": "Inspect sync status, including deletions, moves and metadata changes; this does not resolve conflicts.",
+	"cli.suggest.workspace.repair": "Preview workspace repair without applying changes.",
+	"cli.suggest.workspace.dev": "Initialize workspace development support files.",
+	"cli.suggest.remote.list": "Inspect servers configured in this workspace.",
+	"cli.suggest.remote.add": "Add this server and make it the active workspace server.",
+	"cli.suggest.remote.use": "Check how to switch the active workspace server.",
+	"cli.suggest.lock.status": "Inspect lock holders and wait for the running process to finish.",
+	"cli.suggest.project.sysdata": "Clone the sysdata project into the local workspace.",
+	"cli.suggest.project.localList": "Inspect projects in the local workspace.",
+	"cli.suggest.project.cloneHelp": "Inspect how to prepare the file's project locally and what will be downloaded.",
+	"cli.suggest.project.list": "Inspect projects visible to the current login.",
+	"cli.suggest.extension.templates": "Inspect available extension points and template names.",
+	"cli.suggest.db.connectors": "Inspect available database connectors.",
+	"cli.suggest.server.info": "Inspect target server information.",
+	"cli.suggest.server.startupLogs": "Inspect the target server’s startup logs, resolve the reported cause, and restart the server. Ask its administrator if you cannot access the logs.",
+	"cli.suggest.thread.show": "Inspect the current thread and cancellation serial.",
+	"cli.suggest.thread.list": "Obtain a current thread snapshot.",
+	"cli.suggest.cluster.list": "Inspect the current cluster snapshot.",
+	"cli.suggest.logger.list": "Inspect current logger names and levels.",
+	"cli.suggest.metadata.upgradePreview": "Before editing an older-format file, upgrade that file first. You may also upgrade the whole project as needed. The following command only previews the upgrade scope; it does not modify files.",
+	"cli.suggest.metadata.dts": "Read the DTS for the reported error and location, then correct and recompile.",
+	"cli.err.workspacePathOutOfScope": "Provide a local metadata path within the current workspace; relative paths use the execution directory. If the file belongs to another workspace, use -C to select that workspace or a subdirectory. Do not use a server metadata path as a local disk path.",
+	"cli.ref.recoverChanges": "Recover lost changes",
+	"cli.ref.compileMetadata": "Compile and validate metadata",
+	"cli.ref.cloneProjects": "Connect and clone projects",
+	"cli.ref.metadataChecks": "Static metadata checks",
+	"cli.ref.syncChanges": "Edit, compare, pull and push",
+	"cli.ref.initWorkspace": "Initialize a workspace",
+	"cli.ref.displayFormats": "Manage display formats",
+	"cli.ref.portalGuide": "Build application pages",
+	"cli.ref.portalTypes": "Portal page types",
+	"cli.ref.actionNodes": "Program flow node types",
+	"cli.ref.cellTypes": "Cell types",
+	"cli.ref.components": "Page component types",
+	"cli.ref.systemSettingTypes": "System setting types",
+	"cli.ref.systemSettings": "System settings",
+	"cli.ref.dynamicSettingFields": "Dynamic settings types and fields",
+	"cli.ref.settingsSecrets": "Secrets and update preservation rules",
+	"cli.ref.businessLogic": "Implement business logic",
+	"cli.ref.backendApi": "Backend API index",
+	"cli.ref.metadataApi": "Backend metadata API",
+	"cli.ref.rptTypes": "Report metadata type",
+	"cli.ref.dashTypes": "Dashboard metadata type",
+	"cli.ref.spgTypes": "SuperPage metadata type",
+	"cli.ref.backendScripts": "Backend scripts and APIs",
+	"cli.ref.extensions": "Extension development",
+	"cli.ref.metadataTypes": "Metadata file type index",
+	"cli.ref.fileOptions": "File option types",
+	"cli.ref.fileInfo": "File metadata types",
+	"cli.ref.typeReferences": "Obtain type and configuration references",
+	"cli.ref.findResources": "Find metadata resources",
+	"cli.ref.diagnostics": "System diagnostics",
+	"cli.ref.styleValues": "Style value types",
+	"cli.ref.componentStyle": "Component style types",
+	"cli.ref.appearance": "Themes, styles and page appearance",
+	"cli.ref.themeTypes": "Theme types and variables",
+	"cli.ref.queryTypes": "Model query types",
+	"cli.ref.dataSourceConfig": "Data source connection configuration type",
+	"cli.ref.modelAnalysis": "Explore model data",
+	"cli.ref.dataTransfer": "Import and export data",
+	"cli.ref.databaseChanges": "Execute database changes",
+	"cli.ref.databaseAnalysis": "Explore database data",
+	"cli.ref.connectData": "Connect data",
+	"cli.ref.taskIndex": "Use AI Agent",
+	"cli.ref.cliGuide": "CLI guide",
+	"cli.ref.authentication": "Authentication configuration",
+	"cli.ref.projectSettingTypes": "Project setting types",
+	"cli.ref.appSettingTypes": "Application setting types",
+	"cli.ref.resourceReferences": "Page resource references",
+	"cli.ref.imageFill": "Image fill types",
+	"cli.ref.iconValue": "Icon value types",
+	"cli.ref.mediaGuide": "Choose resources for pages",
+	"cli.ref.modelTypes": "Model metadata types",
+	"cli.ref.pageTemplates": "Choose page templates and resources",
+	"cli.ref.techLogs": "Troubleshoot with technical logs",
+	"cli.ref.componentCommands": "Component command declarations",
+	"cli.ref.componentCommandArgs": "Command argument declarations",
+	"cli.ref.executeComponentCommand": "Execute-command action metadata",
+	"cli.ref.componentEvents": "Component event declarations",
+	"cli.ref.componentEventMetadata": "Component interaction event metadata",
+	"cli.ref.componentCapabilities": "Component capabilities and subcomponents",
+	"cli.ref.commonRunEnv": "Execution environments",
+	"cli.ref.layoutMetadata": "Layout metadata",
+	"cli.ref.layoutCapabilities": "Layout capabilities and property definitions",
+	"cli.out.resContext.group": "Recommendation",
+	"cli.out.resContext.recommended": "Recommended",
+	"cli.out.resContext.additional": "Additional",
+	"cli.out.resContext.persist": "Save the value using the persistence type of {0}; recommended labels do not exclude other assets.",
+	"cli.ref.imageValue": "Image property persistence type",
+	"cli.out.dts.metadata": "Metadata assignment",
+	"cli.out.dts.declaration": "Query declaration",
+	"cli.out.dts.owner": "Owning component metadata",
+	"cli.out.dts.member": "Find member: {0}",
+	"cli.out.dts.note": "This query only checks local references. The read commands below retain the target server and prepare missing packages in Home. Declaration types are not metadata assignment schemas; locate local parts through their owning component catalog.",
+	"cli.ref.themeMetadata": "Theme metadata",
+	"cli.ref.displayFormatValue": "Display format reference value",
+	"cli.ref.fontFamilyValue": "Font reference value",
+	"cli.out.dts.component": "Component metadata",
+	"cli.ref.directoryMetadata": "Directory resource metadata",
+	"cli.ref.knowledgeBaseTypes": "Knowledge base configuration types",
+	"cli.ref.fillValue": "Persisted fill property value",
+	"cli.ref.imageSliceFill": "Persisted image slice fill value",
+	"cli.out.scope.system": "Only system default resources are queried; project/application custom resources and overrides are not considered.",
+	"cli.out.scope.systemWithTheme": "Only system default resources and media from the specified system theme are queried; project/application custom resources and overrides are not considered.",
+	"cli.out.scope.systemThemeOnly": "Only media from the specified system theme is queried; project/application custom resources and overrides are not considered.",
+	"cli.out.scope.specify": "To query effective resources at a specific location, specify a target path:",
+	"cli.out.scope.global": "This is the global designer font catalog. The final font of a page and font installation in the runtime environment are not checked.",
+	"cli.out.scope.next": "Replace <target> to query resources at a specific location on the same server with the current filters.",
+	"cli.out.scope.path": "Replace with an actual server location supported by this command, not a local path.",
+	"cli.out.scope.pageFontNotResolved": "The automatic option follows the theme; it does not identify the final font of a page.",
+	"cli.out.scope.fontInstallationNotChecked": "Font installation in the browser, operating system and export environment is not checked.",
+	"cli.out.scope.targetOverridesNotApplied": "Project/application custom resources and overrides are not considered.",
+	"cli.out.scope.target": "Resources are queried at the specified server location; sources, overrides and applicability follow this command and individual entries.",
+	"cli.out.scope.targetFilenameNotApplied": "Script content templates have not been matched against a target filename.",
+	"cli.out.scope.themeMediaNotRequested": "No theme was requested; theme media is not included.",
 	"cli.err.context.exampleCommandServer": "succapp --server=<url> {commandName}",
 	"cli.err.context.exampleCommandUrl": "succapp {commandName} <url>",
 	"cli.err.context.exampleEnvUrl": "{envName}=<url> succapp {commandName}",
@@ -1240,7 +1606,7 @@
 	"cli.input.server": "server",
 	"cli.input.clusterNode": "cluster node",
 	"cli.input.threadId": "thread ID",
-	"cli.input.cancelSerial": "cancel serial",
+	"cli.input.cancelSerial": "cancellation serial",
 	"cli.input.techLogFile": "technical log file",
 	"cli.input.logger": "logger",
 	"cli.input.logLevel": "log level",
@@ -1290,7 +1656,7 @@
 	"vs.cmd.server.changeUrl.prompt": "Change server URL {0}?",
 	"vs.cmd.server.changeUrl.serverExists": "Server already exists",
 	"vs.cmd.server.changeUrl.serverUrlChanged": "Server URL changed: {0}",
-	"vs.cmd.server.changeUrl.succAppWill": "SuccApp will only update the server configuration and move the local mirror under .succapp/remote. Workspace project files and remote server projects will not be changed. You can change it back later if needed.",
+	"vs.cmd.server.changeUrl.succAppWill": "SuccApp will only update the server configuration and move the local server synchronization baseline under .succapp/remote. Workspace project files and remote server projects will not be changed. You can change it back later if needed.",
 	"vs.cmd.server.connected": "Connected to {0}",
 	"vs.cmd.server.disconnect.disconnected": "Already disconnected",
 	"vs.cmd.server.disconnect.done": "Disconnected from server",
@@ -1363,6 +1729,7 @@
 	"vs.cmd.sync.push.serverHasNewer": "The server has newer changes. Return to the Changes view or command palette to pull or compare before pushing again.",
 	"vs.cmd.sync.push.showLogs": "Show Logs",
 	"vs.cmd.sync.push.successPushedFile": "Successfully pushed {0} file(s)",
+	"vs.cmd.sync.push.upgradeRequired": "Upgrade {0} old metadata file(s) before pushing? Cancelling will stop this push.",
 	"vs.cmd.sync.removeProject.confirm": "Remove local project(s)?",
 	"vs.cmd.sync.removeProject.empty": "No local projects to remove",
 	"vs.cmd.sync.removeProject.localProjectS": "{0} local project(s) removed",
@@ -1372,11 +1739,11 @@
 	"vs.cmd.sync.repair.cannotRepairWorkspace": "Cannot repair workspace before connecting to the server. Connect or re-login to the server, then run Repair Workspace again.",
 	"vs.cmd.sync.repair.complete": "Workspace repair complete: {0} issue(s) repaired.",
 	"vs.cmd.sync.repair.completeClean": "Workspace repair complete: no changes needed.",
-	"vs.cmd.sync.repair.fetched": "Workspace repair fetched from the current server, but local sync baselines are still incomplete. See logs for details.",
+	"vs.cmd.sync.repair.fetched": "Workspace repair fetched from the current server, but local synchronization baselines are still incomplete. See logs for details.",
 	"vs.cmd.sync.repair.finished": "Workspace repair finished: {0} repaired, {1} unresolved. See logs for details.",
 	"vs.cmd.sync.repair.ifServerConnected": "If the server is not connected, connect or re-login first, then repair again.",
 	"vs.cmd.sync.repair.moreFiles": "...and {0} more issue(s).",
-	"vs.cmd.sync.repair.repairRefreshesLocal": "Current repair only refreshes local sync baselines and does not overwrite workspace files.",
+	"vs.cmd.sync.repair.repairRefreshesLocal": "Current repair only refreshes local synchronization baselines and does not overwrite workspace files.",
 	"vs.cmd.sync.repair.repairWorkspace": "Repair Workspace",
 	"vs.cmd.sync.repair.repairWorkspaceIssue": "Repair {0} workspace issue(s)?",
 	"vs.cmd.sync.repair.showLogs": "Show Logs",
@@ -1398,7 +1765,6 @@
 	"vs.cmd.sync.upgradeMeta.result": "Metadata upgrade finished: {0} changed, {1} checked.",
 	"vs.cmd.sync.upgradeMeta.upgrade": "Upgrade",
 	"vs.cmd.sync.upgradeMeta.upgradeMetaFile": "Upgrade {0} metadata file(s) under this folder?",
-	"vs.cmd.sync.push.upgradeRequired": "Upgrade {0} old metadata file(s) before pushing? Cancelling will stop this push.",
 	"vs.cmd.ext.create.cannotCreateExt": "Cannot create an extension because the sysdata project is not cloned in this workspace.",
 	"vs.cmd.ext.create.createdExt": "Created extension {0}.",
 	"vs.cmd.ext.create.dirNamedSame": "A directory named the same already exists under sysdata/extensions/.",
@@ -1481,17 +1847,17 @@
 	"vs.ui.error.retry": "Retry",
 	"vs.ui.error.showLogs": "Show Logs",
 	"vs.ui.error.unknownErrorOccurred": "An unknown error occurred",
-	"vs.ui.login.login": "Login to {0}",
+	"vs.ui.login.login": "Log in to {0}",
 	"vs.ui.login.method": "Choose a login method",
-	"vs.ui.login.oauth": "OAuth2",
+	"vs.ui.login.oauth": "OAuth2 authorization",
 	"vs.ui.login.oauthDesc": "Open the browser and authorize SuccApp.",
 	"vs.ui.login.openingBrowser": "Opening browser",
 	"vs.ui.login.waitingForCallback": "Waiting for authorization",
 	"vs.ui.login.exchangingToken": "Signing in",
 	"vs.ui.login.oauthManualUrl": "Open this URL in your browser: {0}",
-	"vs.ui.login.pat": "Personal Access Token",
+	"vs.ui.login.pat": "Personal access token (PAT)",
 	"vs.ui.login.patDesc": "Paste a PAT manually.",
-	"vs.ui.login.patRequired": "Enter a Personal Access Token.",
+	"vs.ui.login.patRequired": "Enter a personal access token (PAT).",
 	"vs.ui.remote.remoteServerFiles": "Remote server files are read-only in the Servers view. Use sync commands to edit local workspace files.",
 	"vs.ui.status.clickReconnectOr": "Click to reconnect or switch servers",
 	"vs.ui.status.clickSwitchServers": "Click to switch servers",
@@ -1506,81 +1872,866 @@
 	"vs.ui.vfs.serverProvideVersioned": "The server does not provide a versioned delete API. Please delete files in sync mode.",
 	"vs.ui.vfs.workspaceBaselineAvailable": "No workspace baseline is available for {0}/{1}.",
 	"vs.ui.vfs.workspaceConfigRemote": "No workspace is configured for remote server {0}.",
-	"vs.ui.workspaceProblem.baseline": "SuccApp detected an incomplete local sync baseline. Some changes may be hidden or inaccurate.",
-	"vs.ui.workspaceProblem.missingBaseline": "SuccApp detected a missing local sync baseline. Some changes may be hidden or inaccurate.",
+	"vs.ui.workspaceProblem.baseline": "SuccApp detected an incomplete local synchronization baseline. Some changes may be hidden or inaccurate.",
+	"vs.ui.workspaceProblem.missingBaseline": "SuccApp detected a missing local synchronization baseline. Some changes may be hidden or inaccurate.",
 	"vs.ui.workspaceProblem.showLogs": "Show Logs",
-	"vs.ui.workspaceProblem.staleBaseline": "SuccApp detected a stale local sync baseline. See logs for details before changing the workspace.",
+	"vs.ui.workspaceProblem.staleBaseline": "SuccApp detected a stale local synchronization baseline. See logs for details before changing the workspace.",
 	"vs.ui.workspaceProblem.syncProblem": "SuccApp detected a workspace sync problem. See logs for details.",
+	"cli.cmd.dev.dataflow.title": "Dataflow",
+	"cli.cmd.dev.dataflow.summary": "Debug model dataflow node output.",
+	"cli.cmd.dev.dataflow.desc": "Compile a model dataflow and inspect a node's data and SQL during development.",
+	"cli.cmd.dev.dataflow.preview.summary": "Compile and preview a dataflow node's data and SQL.",
+	"cli.cmd.dev.dataflow.preview.desc": "Preview data and SQL at a node in a .tbl dataflow to locate where processing results diverge from expectations.\n\nThe model source is checked before preview. Referenced models, companion scripts and connection settings use server versions; synchronize those dependencies first. Embedded dataflows and FetchData models are not supported.\n\nPreview does not save model definitions or update the synchronization baseline. It does execute the upstream processing needed by the node, which may run scripts, execute non-query SQL or create intermediate tables. Use Ctrl+C or SIGTERM to request cancellation of a running data preview.",
+	"cli.cmd.dev.dataflow.preview.source": "Choose exactly one server model path or local file. Replace the model path and node ID in the examples with actual values.",
+	"cli.cmd.dev.dataflow.preview.model": "Absolute server metadata path to a .tbl model, for example /DEMO/data/tables/sales.tbl. Reads the source currently saved on the server and requires model view permission. Outside a workspace, use the global --server option to select a connection.",
+	"cli.cmd.dev.dataflow.preview.file": "One .tbl file within a SuccApp workspace, relative to the execution directory after -C or given as an absolute local path. Submits the current source for temporary preview without pushing it. Requires model view permission on the target path and access to referenced resources.",
+	"cli.cmd.dev.dataflow.preview.node": "Case-sensitive node id from the model's dataFlow array; use the id, not its display name.",
+	"cli.cmd.dev.dataflow.preview.step": "Zero-based index in a Select node's steps array, inclusive; -1 previews before the steps. Omit for final node output. Other node types do not accept this option.",
+	"cli.cmd.dev.dataflow.preview.paramsSource": "Runtime parameter JSON object keyed by model parameter ID, with JSON values. Choose at most one of the three input sources; omitting them uses model defaults. Example: {\"startDate\":\"2026-01-01\",\"quantity\":10}.\n\nRuntime parameters apply to both node data and static SQL preview. When connecting to an older server, verify the actual records against the supplied values; a successful request or generated SQL alone does not confirm parameter application.",
+	"cli.cmd.dev.dataflow.preview.params": "Inline runtime parameter JSON object.",
+	"cli.cmd.dev.dataflow.preview.paramsFile": "Read the runtime parameter object from a UTF-8 JSON file.",
+	"cli.cmd.dev.dataflow.preview.stdin": "Read the runtime parameter JSON object from standard input.",
+	"cli.cmd.dev.dataflow.preview.maxRows": "Maximum number of rows to return. This is not the model total and does not bound upstream computation cost.",
+	"cli.cmd.dev.dataflow.preview.offset": "Number of result rows to skip. Changing data or unstable ordering can change results between pages.",
+	"cli.cmd.dev.dataflow.preview.dryRun": "Check the model source and generate statically available SQL only, without querying data, executing upstream scripts or creating intermediate tables. Reports a reason when static SQL is unavailable; does not simulate data.",
+	"cli.cmd.dev.dataflow.preview.out": "Human output presents node information, a data table and SQL. --json emits one final result; task logs and progress are separate.\n\nOn success, model is the server model path and localPath appears only for local input. node and optional step identify the preview location; dryRun indicates SQL-only preview. Data previews include taskId to correlate the backend task.\n\nresult uses the same structure as model select/query and db query: fields is an array of field objects, currently providing name; rows is an array of objects keyed by field name. rowCount counts returned rows, maxRows is the return limit, truncated=true means more data exists, and optional elapsedMs is measured in milliseconds. Empty results retain fields and return empty rows; dry-run omits result.\n\nsqlInfos is an array of SQL info objects preserving sql text and available datasource/schema information. When SQL is unavailable, the array is empty and sqlUnavailable.reason explains why: requiresExecution (runtime dependency), requiresIntermediateTable (materialization), requiresDynamicSplit (dynamic splitting), or noSql (no query SQL). Unavailable SQL does not indicate compilation failure or invalidate returned data.\n\nCompilation failures use the same diagnostic structure as dev file compile: kind=result with validationComplete, summary and items[]. Failed items provide source diagnostics in error.properties.diagnostics, and the exit code is nonzero. Network, permission and execution errors use kind=error.",
+	"cli.cmd.dev.dataflow.preview.heading": "Node: {0}",
+	"cli.cmd.dev.dataflow.preview.notExecuted": "Mode: dry-run; data was not queried",
+	"cli.out.dataflow.sql.runtime": "This flow depends on runtime results; static SQL is unavailable.",
+	"cli.out.dataflow.sql.materialized": "This flow needs an intermediate table; static SQL is unavailable.",
+	"cli.out.dataflow.sql.dynamicSplit": "This flow contains a split step requiring runtime data; static SQL is unavailable.",
+	"cli.out.dataflow.sql.none": "This node has no query SQL to display.",
+	"cli.ref.dataflowMetadata": "Dataflow nodes and steps",
+	"cli.ref.dataflowVerification": "Verify dataflow results",
+	"cli.cmd.dev.dataflow.preview.stepRequiresSelect": "Node {0} is not a Select node; --step is not supported.",
+	"cli.cmd.dev.dataflow.preview.nodeNotFound": "Node {0} does not exist in the dataflow. Use a node id from the model content.",
+	"cli.cmd.dev.dataflow.preview.stepOutOfRange": "--step for node {0} must be between -1 and {1}.",
+	"cli.out.dataflow.datasource": "Data source: {0}",
+	"cli.out.dataflow.schema": "Schema: {0}",
+	"cli.out.dataflow.rows": "Data · {0} rows",
+	"cli.out.dataflow.rowsTruncated": "Data · first {0} rows; more data is available",
+	"cli.cmd.dev.title": "Development",
+	"cli.cmd.dev.summary": "Discover resources and use low-code development tools.",
+	"cli.cmd.dev.desc": "Discover low-code development resources, check files, develop extensions and execute backend scripts.\n\nSupports discovery of page components, layouts, appearance resources and expression functions, as well as workspace file inspection, metadata upgrades, extension development and backend script operations.\n\nResource queries use the selected server. Workspace-related commands use local context; consult each command for its requirements. Some operations write local files, upload extensions or execute server scripts.",
+	"cli.cmd.dev.component.list.componentType": "List only the specified component, cell or node type, preserving its properties and templates.",
+	"cli.cmd.dev.component.list.summary": "List component templates available for a page.",
+	"cli.cmd.dev.component.list.target": "Server page path ending in rpt, dash, spg, fapp or afl; the page need not exist.",
+	"cli.cmd.dev.component.list.desc": "List components available for a page type to choose page elements and creation templates.\n\nReports and form applications include page components and cell types; standalone program flows include nodes that can run on the server. Supports type, label and keyword filters.\n\nThe page need not exist. Container compatibility also depends on page configuration; reference declaration indexes do not replace these availability results.",
+	"cli.cmd.dev.component.list.out": "Text lists creation templates beneath their component. JSON groups entries under components, cellTypes and actionComponents. Each type is identified by name; creation templates are in templates. Template content can provide initial configuration; add layout, data bindings and interactions for your page.\n\nEach resource has a JSON labels array such as [{\"id\":\"texture\",\"name\":\"Texture\"}]. name follows --locale, falling back to English and then the ID; resources without labels have [].\n\nComponents and entries in templates[] each carry labels.\n\nA component is retained when it or its creation templates match. If only templates match, only matching templates are retained. Initial configuration such as template content keeps its original format. Consult extension documentation when third-party extensions provide no DTS.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.",
+	"cli.cmd.dev.component.title": "Components",
+	"cli.cmd.dev.component.summary": "Discover available page components",
+	"cli.cmd.dev.component.desc": "Inspect components, cell types and program flow nodes available for pages.\n\nShows creation templates, basic capabilities and subcomponent catalogs to help choose page elements.\n\nOnly reads server resources without changing page files.",
+	"cli.cmd.dev.component.show.summary": "Show component capabilities and subcomponent catalogs.",
+	"cli.cmd.dev.component.show.desc": "Inspect component capabilities and configurable subcomponents to plan page structure and further configuration.\n\nQuery a type before creating a page, or inspect an existing component in a saved server SPG or dashboard. Cell types and action nodes support type queries only.\n\nQueries use server component definitions and saved pages, without reading unpushed local changes, creating components or executing interactions.",
+	"cli.cmd.dev.component.show.out": "Default text shows the component name, basic capabilities and subcomponent catalogs. JSON component contains type, caption and kind; description is provided when available. For page components only, component.capabilities.input, children and events indicate type support for input, ordinary children and interactions, without guaranteeing availability in the current page state. Catalog-specific parts do not imply support for ordinary children.\n\ncomponent.subcomponents[] groups parts by catalog. Each types[] item contains the metadata type for that catalog, caption, multiple, supportsAdd and optional maxCount. multiple=false disallows multiple parts of that type. supportsAdd indicates whether the designer offers an add operation; maxCount still limits the number of parts of that type. Consult the DTS to determine whether a catalog uses an object or array. definitionName identifies the component definition; local parts cannot be queried as global types. An empty list does not prove the component has no subcomponents.\n\ncomponent.layoutProperties lists layout selection properties and available defaults, not current values or selectable layouts. component.categories identifies data, style and layout categories. For action types, component.runEnv describes the environment in the type definition: 1 for server, 2 for database and 4 for browser. It does not determine the final environment of an action instance. Consult the matching types for combinations and environments that depend on configuration.\n\nPass queries[].argv as the argument array to succapp. Each query retains the server and component identity and includes --json. Query properties, methods, events or layouts before editing metadata; do not write the overview object into a page. Non-page components only provide a property query.\n\ncoverage.status is partial; coverage.limitations identifies gaps involving extension parts, data bindings or page state. source.content is server for instance queries and none for type queries. Current property values are not returned; compile and verify the edited page.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.",
+	"cli.cmd.dev.component.show.identity": "Specify exactly one of --component or --component-type to query by component ID or component type.",
+	"cli.cmd.dev.component.show.component": "Component ID in a saved server SPG or dashboard.",
+	"cli.cmd.dev.component.show.componentType": "Type returned by dev component list for the selected --kind.",
+	"cli.cmd.dev.component.show.kind": "Type category; cellType and actionComponent support type queries only.",
+	"cli.cmd.dev.component.show.target": "Server page path ending in spg, dash, rpt, fapp or afl; type queries allow a nonexistent page. Replace /PROJECT/page.spg and componentId in instance examples with an existing page path and component ID.",
+	"cli.out.component.type": "Type",
+	"cli.out.component.cap.input": "Supports input",
+	"cli.out.component.cap.children": "Supports ordinary children",
+	"cli.out.component.cap.events": "Supports interactions",
+	"cli.out.component.layoutProps": "Layout properties",
+	"cli.out.component.subs": "Subcomponent catalogs",
+	"cli.out.component.catalog": "Catalog",
+	"cli.out.component.multiple": "Multiple parts of the same type",
+	"cli.out.component.showNote": "Some parts and page-dependent configurations may be missing. Add --json for further queries and limits; consult the matching DTS before editing.",
+	"cli.out.component.runEnv": "Execution environment",
+	"cli.out.component.env.server": "Server",
+	"cli.out.component.env.database": "Database",
+	"cli.out.component.env.browser": "Browser",
+	"cli.out.component.env.serverOrBrowser": "Server or browser",
+	"cli.out.component.env.all": "Server, database or browser",
+	"cli.out.component.env.cooperative": "Cooperative browser and server execution",
+	"cli.out.component.env.other": "Other ({0}); consult the matching types",
+	"cli.cmd.dev.theme.show.summary": "Show theme variables, palettes and icon sets.",
+	"cli.cmd.dev.theme.show.desc": "Inspect resolved theme configuration to understand effective appearance values.\n\nIncludes colors, fonts, size variables, palettes and icon sets. Application themes take precedence over project themes, then system themes with the same name.",
+	"cli.cmd.dev.theme.show.out": "Human output lists token names and values; objects and arrays use single-line JSON. Use --json for complete compiled information in the theme object. Variables are in theme.tokens.\n\nTheme variables are not the final style of a component: also consider component defaults, selected styles and page overrides. Keep variable references when applying styles. Metadata used to create or edit themes differs from this compiled information.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.",
+	"cli.cmd.dev.theme.show.theme": "Theme name, taken from name returned by dev theme list.",
+	"cli.cmd.dev.theme.show.target": "Server target path of the file you plan to create, or a project name, application path or existing page path; not a local path.\nWhen omitted, shows the system default configuration of the specified theme.",
+	"cli.cmd.dev.theme.title": "Theme",
+	"cli.cmd.dev.theme.summary": "query available themes",
+	"cli.cmd.dev.theme.desc": "Inspect available page themes and their resolved configuration.\n\nCompare themes and inspect resolved colors, fonts, size variables, palettes and icon sets to configure page appearance.\n\nOnly reads theme data without changing pages.",
+	"cli.cmd.dev.theme.list.summary": "List available themes.",
+	"cli.cmd.dev.theme.list.target": "Server target path of the file you plan to create, or a project name, application path or existing page path; not a local path.\nWhen omitted, lists system default themes.",
+	"cli.cmd.dev.theme.list.empty": "No matching themes.",
+	"cli.cmd.dev.theme.list.desc": "List themes available at a location to choose page color and sizing schemes.\n\nApplication themes take precedence over project themes, then system themes with the same name.",
+	"cli.cmd.dev.theme.list.out": "Human output shows theme names, titles, descriptions and sources. Use --json for themes[]: name identifies the theme, desc is its title, description explains its use, location is its source and thumbnail is its preview URL. An absent location means a system theme. Descriptions and previews may be absent.\n\nInspect complete compiled information, including resolved variables and palettes:\n    succapp dev theme show <target> --theme=<name> --json\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.",
+	"cli.cmd.dev.style.list.summaryOutput": "Keep style IDs, captions, descriptions, theme and page restrictions in JSON; omit style properties and resource references. Does not reduce server downloads.",
+	"cli.cmd.dev.style.list.summary": "List available styles.",
+	"cli.cmd.dev.style.list.target": "Server target path of the file you plan to create, or a project name, application path or existing page path; not a local path.\nWhen omitted, lists system default styles.",
+	"cli.cmd.dev.style.list.empty": "No styles match the type, page and theme; this does not mean the type is unknown.",
+	"cli.cmd.dev.style.list.desc": "List styles available at a location to help choose the appearance of components, cells or default subcomponents.\n\nInspect full style properties and filter by page type, component type, style type and theme. System and project styles are merged; project definitions take precedence for the same ID within the same style type and category.\n\nComponent ID queries read saved server SPG or dashboard pages, excluding local unpushed changes. Catalog and type queries do not require an existing page. Only reads resources; does not modify pages.",
+	"cli.cmd.dev.style.list.out": "The default table lists style IDs, captions, descriptions, types, sources and applicability. --json returns full style definitions; --summary omits style properties and resource references.\n\nIn JSON, componentStyle, cellTypeStyle and conditionStyle map categories to style arrays, such as componentStyle.button[]; tooltipStyle is a flat array. Each entry's id identifies the style and content contains its properties. Style IDs are unique only within their style type and category.\n\nFor property queries, selection.property is the resolved property path and selection.rootProperty is its top-level property. selection.styleType and selection.styleCategory identify the candidate style type and category; selection.source identifies the effective property declaration origin, such as components:tree or cellTypes:buttonGroup. Candidates are in componentStyle[selection.styleCategory]. Use the selected entry's id as the property value, following the relevant type documentation for the assignment structure; do not write the entire result to a page. Subcomponents inside cells may also use component styles.\n\nInstance queries, property queries and type queries with --kind also return context and source. context identifies the actual component type, style category, scene and theme used for this query; theme is present only when theme filtering applies. source identifies the query data origin; source.content is server for instances and none for types, distinct from the property declaration origin in selection.source. For property queries, coverage.limitations describes extension capabilities not loaded and dynamic conditions not evaluated.\n\nWhen no candidates are available, empty.reason is notApplicable (not applicable to the target page), unsupported (the type does not support the requested styles), noMatches (no entries match the query) or emptyCollection (the catalog is empty). A resolved property with no matching styles still returns selection; this does not mean the property is invalid.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.",
+	"cli.cmd.dev.style.list.property": "Default subcomponent style property name or dot-separated path, such as buttonCompStyle. Requires --component or --component-type and a property of type defaultCompStyle; inspect declarations with dev component-property show. Filters component styles using the effective property category after inheritance and local overrides. Only --scene=componentStyle is compatible. Omit to query the component or cell itself.",
+	"cli.cmd.dev.style.list.componentType": "Component or cell metadata type, such as button or number; discover types with dev component list <target>.",
+	"cli.cmd.dev.style.list.kind": "Query object category. Component ID queries support component only; specify cellType for cell property queries. With --property, defaults to component; other type queries retain component and same-name cell-type style categories when omitted.",
+	"cli.cmd.dev.style.list.scene": "Style type. With --property, only componentStyle is supported. Otherwise, when omitted, instance queries and type queries with --kind=component use componentStyle; type queries with --kind=cellType use cellTypeStyle. Type queries without --kind and catalog queries retain all style types. conditionStyle is for conditional styles; tooltipStyle is for tooltip styles.",
+	"cli.cmd.dev.style.list.theme": "Theme ID. Keeps unthemed styles and styles for this theme. Instance queries default to the saved page theme, or default when unset; an explicit value overrides this query. Catalog and type queries do not filter by theme when omitted.",
+	"cli.cmd.dev.style.title": "Style",
+	"cli.cmd.dev.style.summary": "query available styles",
+	"cli.cmd.dev.style.desc": "Inspect visual styles available for page creation.\n\nShows style properties, applicable components and sources to help choose component or cell appearance.",
+	"cli.cmd.dev.ext.template.title": "Server extension template",
+	"cli.cmd.dev.ext.template.summary": "inspect server extension templates",
+	"cli.cmd.dev.ext.template.desc": "Inspect server extension templates.\n\nTemplates provide extension points and initial content and should match the server used for subsequent extension development.",
+	"cli.cmd.dev.ext.template.list.summary": "List extension templates.",
+	"cli.cmd.dev.ext.template.list.desc": "List available server extension templates to choose initial extension content.\n\nSupports extension-point, label and keyword filters.\n\nOnly reads template information; it does not create or install extensions.",
+	"cli.cmd.dev.ext.template.list.out": "In JSON templates[], extensionPoint identifies the extension point and templateName identifies the template to use when creating an extension. name, desc and version are optional descriptive fields.\n\nEach resource has a JSON labels array such as [{\"id\":\"texture\",\"name\":\"Texture\"}]. name follows --locale, falling back to English and then the ID; resources without labels have [].",
+	"cli.cmd.dev.ext.template.list.extensionPoint": "Only list templates for the given extension point.",
+	"cli.cmd.dev.script.title": "Temporary backend scripts",
+	"cli.cmd.dev.script.summary": "complete one-off server tasks with temporary scripts",
+	"cli.cmd.dev.script.desc": "Use temporary backend scripts for one-off queries, calculations, changes, or other server operations not yet covered by the CLI.\n\nScripts are anonymous and are not saved as server metadata. Execution and compilation checks require administrator privileges. Execution may modify server resources; after interruption, inspect actual effects before retrying.\n\nFor business logic that must be maintained and published, use project backend scripts (.action.ts).",
+	"cli.cmd.dev.script.done": "Script command completed.",
+	"cli.cmd.dev.script.invalidJsonInput": "Invalid JSON input file: {0}",
+	"cli.cmd.dev.script.exec.summary": "Execute a temporary backend script to complete a one-off server task.",
+	"cli.cmd.dev.script.exec.desc": "Execute a temporary backend TypeScript script for a server query, calculation, or change without creating a dev script resource.\n\nCompilation is followed by execution by default. Compilation-only mode checks the source without running user code; it does not simulate business results or verify runtime dependencies, resource permissions, or business effects.\n\nAdministrator privileges are required. The script can access and modify server resources within its permissions. After a timeout or disconnection, inspect actual effects before retrying.",
+	"cli.cmd.dev.script.exec.out": "With --json, source is file or stdin, and dryRun indicates compilation-only mode. File input includes inputPath (the original path) and localPath (the local absolute path); stdin omits both.\n\nSuccessful execution returns main's value in result, submitted string parameters in params ({} when none were supplied), and server execution time in elapsedMs (milliseconds) when supplied. The script defines result's business structure; text output reports completion, so use --json to reuse the return value.\n\nCompilation-only mode or a submitted-source compilation failure returns summary and items[]. Each item has compiler=typescript and status=passed or failed; a passed item has no error. Failed-item diagnostics are at items[].error.properties.diagnostics. Lines and columns are 1-based and refer to the original TypeScript; when a diagnostic omits file, use the item's localPath or stdin. relatedInformation retains related locations. Original stacks are available in debug logs.\n\nSource failures return exit code 1; missing or conflicting sources and blank scripts return 2. Connection, file access, internal compiler failures and runtime business failures use standard CLI errors. Verify both the return value and actual effects; compilation success alone does not establish business success.",
+	"cli.cmd.dev.script.exec.source": "Supply UTF-8 script text through exactly one of <file> and explicit --stdin. Plain JavaScript is accepted; file extensions do not determine language or create a metadata resource. Empty or whitespace-only files and stdin are rejected as invalid input.\nUse a top-level synchronous ordinary function main(args) or export function main(args); its return value becomes result. Async functions, generators, and default exports are unsupported; Promise results are not awaited. request_main is a project HTTP entry point and does not apply here.\nScripts have no server file name or base directory. Neighboring local files do not become server modules. Import system modules by name; use absolute server paths for project modules and file or metadata APIs. Consult the target server's API declarations; Node.js fs, fetch and arbitrary npm packages are not assumed available.",
+	"cli.cmd.dev.script.exec.stdin": "Read complete script text from stdin. Reads the script only; business input is supplied separately with --input.",
+	"cli.cmd.dev.script.exec.dryRun": "Check TypeScript syntax, transpilation, a static main declaration and engine parsing without executing top-level code or main. Supports type annotations, import/export and const enums; still reads --input and checks file readability and JSON syntax. Does not perform full type checking, load runtime dependencies, validate business input semantics or simulate effects.",
+	"cli.cmd.dev.script.exec.file": "A UTF-8 local temporary backend script, relative to the execution directory after -C. The file only supplies script text and is not uploaded as a dev script resource.\nRead-only API example (save as inspect.js; project count depends on the environment; result resembles {\"projectCount\":3}):\n    var metadata = require(\"svr-api/metadata\");\n    function main(args) {\n      return { projectCount: metadata.getAllProjects().length };\n    }\nRead the return value with dev script exec inspect.js --json. Follow the API index and server-matched DTS references for modules, permissions and result structures.",
+	"cli.cmd.dev.script.exec.input": "A local UTF-8 input file, passed to main(args) as args.input. If trimmed content starts with { or [, parse it as a JSON object or array and reject invalid JSON. All other content remains the original string, including whitespace, 42, true, null and quoted strings. The file extension does not determine the type.\nFor file content {\"count\":2}, args.input.count is number 2; for true, args.input is string \"true\". --param=mode=preview supplies args.params.mode=\"preview\"; parameter values are always strings.\nEcho script and returned-value illustration:\n    function main(args) { return { input: args.input, params: args.params }; }\n    {\"result\":{\"input\":{\"count\":2},\"params\":{\"mode\":\"preview\"}}}",
+	"cli.cmd.dev.script.exec.param": "Repeatable key=value string parameters passed as args.params, for example --param=mode=preview. Only the first equals sign separates key and value; values retain their text and whitespace.",
+	"cli.cmd.dev.template.title": "File templates",
+	"cli.cmd.dev.template.summary": "Inspect available file templates.",
+	"cli.cmd.dev.template.desc": "Inspect file creation templates, content and related configuration descriptions at a target location.\n\nSupported types and sources depend on the server.",
+	"cli.cmd.dev.template.list.summary": "List available file creation templates.",
+	"cli.cmd.dev.template.list.desc": "List creation templates available at a location to compare purposes, labels and previews.\n\nSupports label and text filters.",
+	"cli.cmd.dev.template.list.out": "JSON returns templates[]. id is the template identifier accepted by show --name, not its displayName; type is the file type. Source location, owning application template ownerTemplate, thumbnail, screenshots and other server summary fields are preserved.\n\ntemplates[].labels[] contains label id and localized name, falling back to the ID; unlabeled templates have []. Use label IDs in --label expressions. Repeated --label conditions use AND.\n\ntemplates=[] means no results. empty.reason=noMatches means the filters matched nothing; emptyCollection means the server returned no templates of that type. Server order is preserved by default.\n\nRead a selected template using the same server and query scope. For system queries, keep the file type used by list (SPG in this example) and replace $TEMPLATE_ID with an actual id returned by that list:\n    succapp dev template show --file-type=spg --name=\"$TEMPLATE_ID\" --json\n\nFor location queries, replace <target> with the full server target filename used by list. Directory queries must also keep the same --file-type:\n    succapp dev template show \"<target>\" --name=\"$TEMPLATE_ID\" --json\n\nYou can also create a file directly from the selected template; see:\n    succapp server file create --help\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.\n\nSystem template queries do not match script content templates against a target filename; provide a full target path when that initial content is needed.",
+	"cli.cmd.dev.template.list.fileType": "Explicit file type, usually for a directory target, such as rpt, tbl, app or d.docx; validated by the server.\nRequired when the target is omitted or system.",
+	"cli.cmd.dev.template.list.target": "Full absolute server path of the file you plan to create, or its parent directory with --file-type; not a local path. The full filename is forwarded for content-template matching; a file target uses its suffix by default.\nThe target file need not exist; a successful query does not prove that its directory exists or is writable. When omitted, lists system default creation templates.",
+	"cli.cmd.dev.template.list.keyword": "Search template IDs, names, descriptions and labels without case sensitivity. Template text matches the complete input; label IDs, names and synonyms split on whitespace or English/Chinese commas, requiring all terms to match. Combine with other filters using AND.\nSort by relevance, preserving original order for ties; omit to keep server order.",
+	"cli.cmd.dev.template.show.summary": "Read template content and complete details.",
+	"cli.cmd.dev.template.show.desc": "Read a creation template and its configuration descriptions at a target location.",
+	"cli.cmd.dev.template.show.out": "Plain output contains only the main body: text is written verbatim and objects as indented JSON. Directory templates display a file manifest; read each file's body separately.\n\nJSON returns template details including id, type, displayName, description, labels, location, ownerTemplate, thumbnail, screenshots, content and definitions. labels is a comma-separated list of label IDs; localized names are available from list templates[].labels[].\n\ncontent.kind distinguishes file, component and directory. The main body is content.value: write strings verbatim or serialize objects as JSON, rather than saving the whole result object.\n\ncontent.others maps related source subtypes to text or JSON objects. For monthly.dash, both ts and dash.ts identify monthly.dash.ts; remove an existing main-type prefix before appending, avoiding monthly.dash.dash.ts. Save associated sources with the main file.\n\nFor directory templates, content.files[] contains root-relative path, kind (file or directory), and the url for reading each file. Empty directories are retained; directory entries have no url. Read files with server http-get; see its help for usage.\n\ndefinitions[] contains configuration descriptions needed to edit the body, or [] when none apply. Entries contain id, kind, typeDescription and content; typeDescription points to the DTS for that description. portal describes supported portal nodes and properties as reference information, not content to save into the page.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nFor directory resources, references[].contentPath identifies the applicable configuration path or pattern relative to the queried resource directory: application settings use settings/settings.json and knowledge bases use settings.json. ../.meta refers to the resource entry in its parent directory. Special types without dedicated declarations provide a type index or resource-metadata reference; this does not mean their body can be edited as JSON.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.\n\nIn human mode, scope and target navigation are written to stderr, including with --quiet; stdout remains the template body only.\n\nSystem template queries do not match script content templates against a target filename; provide a full target path when that initial content is needed.",
+	"cli.cmd.dev.template.show.name": "Template ID from dev template list at the same location; omit to let the server select the default template.",
+	"cli.cmd.dev.template.target": "Full absolute server path of the file you plan to create, or its parent directory with --file-type; not a local path.\nWhen omitted, reads a system default creation template.",
+	"cli.cmd.dev.template.fileType": "Explicit file type, usually for directory queries; validated by the server.\nRequired when the target is omitted or system.",
+	"cli.cmd.dev.displayFormat.title": "Display formats",
+	"cli.cmd.dev.displayFormat.summary": "Query available server display formats",
+	"cli.cmd.dev.displayFormat.desc": "Inspect available display formats to choose how pages present amounts, percentages, dates and other values.\n\nShows effective formats and their sources at a location; only reads resources without changing pages.",
+	"cli.cmd.dev.displayFormat.list.summary": "List display formats merged by ID.",
+	"cli.cmd.dev.displayFormat.list.target": "Server project name, application root or absolute path of an existing page containing the file context; not a local path. For a new file, specify its project or application instead of a page that does not exist yet.\nSupported pages: .rpt, .dash, .spg and .fapp. Directories cannot be page scopes. When omitted, lists system default display formats; nested applications use only the nearest application and its project.",
+	"cli.cmd.dev.displayFormat.list.desc": "List available display formats to choose format identifiers.\n\nCombines applicable system, project, nearest application and page definitions. For identical IDs, precedence is page, application, project, then system. A component query adds its format property and recommended and additional formats; additional formats remain usable.\n\nPage-scoped queries read the saved server page, including for type queries, and exclude local unpushed content. Recommendations depending on bound fields or dynamic types may be unresolved. Only queries formats without changing pages.",
+	"cli.cmd.dev.displayFormat.list.out": "Human output shows ID, caption, pattern, source scope and server location; component queries add the recommendation group. JSON returns language and displayFormats[]. Entries contain name, format, source (system/project/app/page), location and optional caption and desc. Reference formats by name; format is an Excel-style pattern. --locale selects system messages and custom format i18ns, falling back to base values without a nonempty override.\n\nComponent queries also return source, context, selection and recommendation. selection.property is the selector property path; type is the editor type. rootProperty and rootType identify the owning top-level property and its editor type. currentValue is its raw saved server value, not a decoded child-property value. currentSource is server or none; defaultValue is a declaration default and does not imply it is saved in the page. recommendation.recommended and recommendation.additional contain IDs from displayFormats; additional formats are not excluded. recommendation.status is available, noFeature or partial. With noFeature there is no targeted preference: system formats appear in recommended. This does not imply a bound field type; recommendation.limitations identifies complex formats and unsupported conditions. coverage.status is partial: some extension properties and page-state-dependent recommendations are not calculated.\n\nauto is not a fixed format definition. recommendation.automatic.value is auto; recommendation.automatic.suggestedFormat is a reference ID based on declared features, not the final automatic format after executing the page. Without features, recommendation.automatic.status is unresolved and suggestedFormat is absent. Save the format ID as required by the property persistence type, not the recommendation object.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.",
+	"cli.cmd.dev.icon.title": "Icons",
+	"cli.cmd.dev.icon.summary": "Query icons",
+	"cli.cmd.dev.icon.list.summary": "List icons.",
+	"cli.cmd.dev.icon.list.desc": "List icons available at a location to choose page assets.\n\nSearch by label, keyword, source or theme, or inspect label recommendations for a component property. Recommendations guide selection without excluding other assets.\n\nThe scope includes system, project and applicable application assets, excluding page-private attachments. ID queries use saved server SPG or dashboard pages, excluding local unpushed changes. Only queries resources without downloading assets or changing pages.",
+	"cli.cmd.dev.icon.list.out": "--json returns icons[] and summary. Items contain name, source location (sys/project/app/theme), optional extensionName and labels[]. Label id is used for filtering; name follows the current locale, falling back to English or the ID. Unlabeled items have [].\n\nrefValue identifies an image resource. Register it as targetPath in a page referenceResources entry, then assign its resource key. previewUrl is for preview only. Optional width and height are pixel dimensions and may be strings; pictureFillInfo provides fill configuration hints.\n\nThis example registers a project image as bg. Replace targetPath with the selected resource's refValue:\n    {\"referenceResources\":{\"bg\":{\"targetPath\":\"$PROJECTIMG:/images/bg.svg\",\"targetType\":\"PROJECT\",\"refType\":\"link\"}}}\n\nFor font icons, save the returned $ICON: value directly. For image icons, save the IconValueString \"bg\". A static image-fill property uses ImageFillPersistValue {\"sourceType\":\"static\",\"image\":{\"path\":\"bg\"}}. Assign fragments to the appropriate component properties, not as complete pages.\n\nComponent queries also provide source, context, selection, recommendation and coverage. source.content is server for instances or none for types; coverage.status=partial indicates incomplete dynamic-property coverage. selection.property/type/typeArgs describe the selector; rootProperty/rootType identify the top-level property. currentValue is its saved server value, currentSource is server or none, and defaultValue is the declaration default.\n\nrecommendation.label is the recommended label expression, with status available or none. Item available=true only indicates a category match; recommended indicates a recommendation match and is omitted when there is no rule.\n\nsummary.matched, summary.returned and summary.hasMore indicate total matches, returned items and further results. empty.reason is noMatches, emptyCollection or notApplicable. Failure to read any source fails the whole query.\n\nreferences[] provides readDocument commands and symbol names for assignment DTS. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.",
+	"cli.cmd.dev.icon.desc": "Inspect server icon choices to select page assets.\n\nSupports lookup across sources, locations and labels. Font icons and image icons have different reference formats.\n\nOnly queries resources without changing pages.",
+	"cli.cmd.dev.image.title": "Images",
+	"cli.cmd.dev.image.summary": "Query images",
+	"cli.cmd.dev.image.list.summary": "List images.",
+	"cli.cmd.dev.image.list.desc": "List image assets available at a location to choose page assets.\n\nSearch by label, keyword, source or theme, or inspect label recommendations for a component property. Recommendations guide selection without excluding other assets.\n\nThe scope includes system, project and applicable application assets, excluding page-private attachments. ID queries use saved server SPG or dashboard pages, excluding local unpushed changes. Only queries resources without downloading assets or changing pages.",
+	"cli.cmd.dev.image.list.out": "--json returns images[] and summary. Items contain name, source location (sys/project/app/theme), optional extensionName and labels[]. Label id is used for filtering; name follows the current locale, falling back to English or the ID. Unlabeled items have [].\n\nrefValue identifies an image resource. Register it as targetPath in a page referenceResources entry, then assign its resource key. previewUrl is for preview only. Optional width and height are pixel dimensions and may be strings; pictureFillInfo provides fill configuration hints.\n\nThis example registers a project image as bg. Replace targetPath with the selected resource's refValue:\n    {\"referenceResources\":{\"bg\":{\"targetPath\":\"$PROJECTIMG:/images/bg.svg\",\"targetType\":\"PROJECT\",\"refType\":\"link\"}}}\n\nChoose the persisted value by selection.rootType and write it to selection.rootProperty:\n    image → ImageString: \"url(bg)\"\n    imageFill → ImageFillPersistValue: {\"sourceType\":\"static\",\"image\":{\"path\":\"bg\"}}\n    imageSliceFill → ImageSliceFillPersistValue: {\"image\":\"bg\"}\n    fill → FillPersistValue: {\"type\":\"image\",\"image\":{\"path\":\"bg\"}}\nFor panel fill.image, rootProperty=fill and rootType=fill: assign the FillPersistValue to panel.fill. These are property-value fragments, not complete pages.\n\nComponent queries also provide source, context, selection, recommendation and coverage. source.content is server for instances or none for types; coverage.status=partial indicates incomplete dynamic-property coverage. selection.property/type/typeArgs describe the selector; rootProperty/rootType identify the top-level property. currentValue is its saved server value, currentSource is server or none, and defaultValue is the declaration default.\n\nrecommendation.label is the recommended label expression, with status available or none. Item available=true only indicates a category match; recommended indicates a recommendation match and is omitted when there is no rule.\n\nsummary.matched, summary.returned and summary.hasMore indicate total matches, returned items and further results. empty.reason is noMatches, emptyCollection or notApplicable. Failure to read any source fails the whole query.\n\nreferences[] provides readDocument commands and symbol names for assignment DTS. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.",
+	"cli.cmd.dev.image.desc": "Inspect server image assets to choose pictures for pages.\n\nSupports lookup across sources, locations and labels. Preview URLs serve a different purpose from saved page resource references.\n\nOnly queries resources without uploading files or changing pages.",
+	"cli.cmd.dev.font.title": "Fonts",
+	"cli.cmd.dev.font.summary": "Query fonts",
+	"cli.cmd.dev.font.list.summary": "List designer font options.",
+	"cli.cmd.dev.font.list.desc": "List designer font choices to help select fonts for page text.\n\nIncludes presets for the current language, the automatic theme-based option and fonts from enabled extensions. Supports filtering by font value or name; identical values are merged while retaining all sources.\n\nDoes not verify font installation in browsers, operating systems or PDF export environments, or resolve the final font used by a page theme.",
+	"cli.cmd.dev.font.list.out": "Human output shows font name, value and source. --json returns fonts[] with value, caption, kind, extensionName and sources. kind is preset (system preset), extension or themeVariable (Automatic). The Automatic value is fontFamily, meaning follow the page theme. sources retains every origin; extension origins include extensionName.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.\n\nqueryScope.kind=global describes the global font catalog and its limitations. Fonts have no location override semantics and do not return targetQuery. --pretty-json changes formatting only.",
+	"cli.cmd.dev.font.list.contains": "Case-insensitive literal substring in font values and captions.",
+	"cli.cmd.dev.font.desc": "Inspect designer font options to choose page fonts.\n\nIncludes current-language presets, the automatic theme-based option and fonts from enabled extensions.\n\nDoes not verify font installation in browsers, operating systems or PDF rendering environments.",
+	"cli.cmd.dev.expression.title": "Expressions",
+	"cli.cmd.dev.expression.summary": "Query expressions",
+	"cli.cmd.dev.expression.function.title": "Expression functions",
+	"cli.cmd.dev.expression.function.summary": "Query expression functions",
+	"cli.cmd.dev.expression.function.list.summary": "List expression functions.",
+	"cli.cmd.dev.expression.function.list.desc": "Inspect server expression functions to find functions for writing expressions.\n\nCombines active registration information with the server-provided manual to show names, categories, descriptions and sources, with filtering and pagination. Does not enumerate all page- or model-context functions.\n\nRequires server support for this query; if unavailable, confirm that CLI and server versions are compatible.",
+	"cli.cmd.dev.expression.function.list.out": "The default table shows names, descriptions, groups, sources, registration status and execution environments. --json returns functions[], coverage and summary. Entries contain name, source, registered and available description, group, extensionName, argument and return type information. For complete argument field meanings, see dev expression function show --help.\n\nsource is global (globally registered), extension (effective extension) or documentation (manual only). registered=false means no registration information was found, not that the function is unavailable; argument, return type and environment metadata are then omitted. Global functions take priority over effective extensions with the same name; shadowedSources lists overridden extension sources. Manuals do not override registration metadata or attach another implementation's same-name documentation to an extension function.\n\nreturnType and argument type use int, number, string, boolean, date, any, array, json or geo; any is a variant type and unknown types are omitted. evalEnv is an array of svr (server), db (database) and browser; a single environment is still an array. [] means no executable environment is declared; unrecognized environments cause the field to be omitted. A database flag does not guarantee support in a particular database; validate expressions where they will be used.\n\ncoverage.registeredFunctions indicates registration coverage, coverage.documentationIndex indicates a retrieved manual index, and coverage.contextSpecific=false means context functions are not exhaustively listed. Missing manual indexes still allow registered results; permission, network and parse errors fail the query.\n\nsummary.matched, summary.returned and summary.hasMore give the match count, returned count and whether more results exist. empty.reason is noMatches or emptyCollection.",
+	"cli.cmd.dev.expression.function.show.summary": "Show function parameters, return types and help.",
+	"cli.cmd.dev.expression.function.show.desc": "Inspect expression function parameters, return types, execution environments and help.\n\nHelps confirm signatures and usage boundaries. The catalog does not establish availability in a specific page or model context.\n\nRequires server support for this query; if unavailable, confirm that CLI and server versions are compatible.",
+	"cli.cmd.dev.expression.function.show.out": "--json returns function, coverage and documentation. function.name identifies the function; source is global (globally registered), extension (effective extension) or documentation (manual only), and registered indicates whether registration information was found. Available fields also include description, group, extensionName and shadowedSources. Manual-only entries do not invent argument, return type or environment metadata and do not imply the function is unavailable.\n\nfunction.arguments[] describes parameters: name may be absent, type is the parameter type, and optional and repeatable indicate optional and repeated parameters. A nonnegative argumentsCount is the maximum argument count; -1 means variable arity. minArgumentsCount is the minimum count. returnType is the static return type; when present, returnArgType identifies the argument used to determine the return type, counting from 0. constrained=true means evaluation depends on backend constraints and API support. anaFuncType names an analysis function type, not a usage scenario.\n\nreturnType and argument type use int, number, string, boolean, date, any, array, json or geo; any is a variant type and unknown types are omitted. evalEnv is an array of svr (server), db (database) and browser; a single environment is still an array. [] means no executable environment is declared; unrecognized environments cause the field to be omitted. Validate actual types and availability with the arguments, current page or model, and specific database.\n\ncoverage.registeredFunctions indicates registration coverage, coverage.documentationIndex indicates a retrieved manual index, and coverage.contextSpecific=false means context functions are not exhaustively listed. When documentation.status is available, content is the help text and path is its address. unavailable means no readable help; existing function information remains usable. Permission and other read errors fail the query.",
+	"cli.cmd.dev.expression.function.desc": "Find expression functions and inspect their usage information.\n\nSupports filtering by name, description, group and extension, and inspecting parameters, return types, execution environments and help.",
+	"cli.cmd.dev.expression.desc": "Inspect server expression functions to help write expressions.\n\nSupports function lookup and inspection of signatures, execution environments and help. Actual use also depends on fields, variables and data types in the page or model.",
+	"cli.cmd.media.target": "Full absolute server path of the file you plan to create, or an existing page or directory path; not a local path. The parent directory of a new page must exist.\nOmitting the target or using system queries system default media; other locations merge system, project and applicable application media by default.",
+	"cli.cmd.media.keyword": "Search names, descriptions, label IDs, titles and synonyms. Names and descriptions match the whole input; labels split on spaces or commas and require all terms. Sort by relevance; omission preserves source order.",
+	"cli.cmd.media.contains": "Case-insensitive literal substring in names, descriptions or label titles.",
+	"cli.cmd.media.location": "Filter by source category; theme requires --theme.",
+	"cli.cmd.media.extension": "Filter by extension name; queries system assets only and cannot combine with --theme.",
+	"cli.cmd.media.theme": "Explicit theme name, resolved nearest to target without inferring the current page theme. Adds theme resources; theme resources are not queried by default.\n\nWith --theme, --location must be omitted or theme; sys, project and app are incompatible, as is --extension.",
+	"cli.cmd.media.offset": "Starting offset after sorting, counted from 0; add the returned count to read the next page.",
+	"cli.cmd.media.limit": "Maximum results; 0 returns all remaining matches.",
+	"cli.cmd.media.label": "Case-sensitive label ID or expression: & means all, | means either, and ! excludes. & precedes |; parentheses are unsupported and unlabeled assets do not match.\nProtect expressions with shell quotes, for example --label='input&!chart'; repeatable. All --label, --keyword, --contains and other filters intersect before pagination. Omission leaves labels unrestricted; no match does not relax filters.\nFor component properties, recommendations come from recommendation.label or @mediaLabelFilter in matching DTS; they do not restrict which assets can be saved.",
+	"cli.cmd.dev.file.title": "Workspace file",
+	"cli.cmd.dev.file.summary": "inspect workspace files",
+	"cli.cmd.dev.file.desc": "Inspect, validate and handle workspace metadata files.\n\nProvides path resolution, content and history inspection, comparisons, compilation checks, version upgrades and browser access.\n\nLocal edits and upgrades are not automatically synchronized to the server.",
+	"cli.cmd.dev.file.resolve.summary": "Resolve a workspace file path.",
+	"cli.cmd.dev.file.resolve.desc": "Resolve local paths, server paths and browser URLs for workspace files.\n\nHelps identify the corresponding server resource.\n\nOnly resolves the target; it does not upload files, open a browser or verify page accessibility.",
+	"cli.cmd.dev.file.resolve.out": "Key JSON fields: inputPath preserves the original path input, localPath is an absolute local path, and remotePath is the server resource path. viewUrl/editUrl are the view and edit links. --url affects text output only and does not remove JSON fields.",
+	"cli.cmd.dev.file.resolve.url": "Only print the view or edit URL in human mode.",
+	"cli.cmd.dev.file.resolve.badUrl": "Invalid value for --url: {0}",
+	"cli.cmd.dev.file.resolve.editUrl": "Edit URL: {0}",
+	"cli.cmd.dev.file.resolve.localPath": "Local path: {0}",
+	"cli.cmd.dev.file.resolve.path": "Path: {0}",
+	"cli.cmd.dev.file.resolve.remote": "Remote path: {0}",
+	"cli.cmd.dev.file.resolve.viewUrl": "View URL: {0}",
+	"cli.cmd.dev.file.open.summary": "Open the server file page.",
+	"cli.cmd.dev.file.open.desc": "Open the server page corresponding to a workspace file in the system browser.\n\nSupports viewing, editing and URL-only lookup, with the appropriate editor for visual and code files.\n\nUses server content without pushing local changes. Local change checks cover only the target file, not referenced templates, scripts or other dependencies.",
+	"cli.cmd.dev.file.open.out": "In JSON, url is the selected server page, edit indicates edit mode, and opened indicates that browser launch was requested; opened=true does not establish that the page loaded successfully. localChanged indicates unpushed changes to the local target. --no-open returns url with opened=false.",
+	"cli.cmd.dev.file.open.edit": "Open the server edit page instead of the view page.",
+	"cli.cmd.dev.file.open.noOpen": "Return the page URL without launching the system browser.",
+	"cli.cmd.dev.file.open.path": "Local workspace path, relative to the execution directory after -C, or an absolute disk path within the workspace.\n\nThe local target must exist and be a regular file.",
+	"cli.cmd.dev.file.open.force": "Open the server page even when the local file has unpushed changes.\n\nThis option does not push local changes.",
+	"cli.cmd.dev.file.open.localChangedForce": "The local file has unpushed changes. This link points to the server version of {0} and does not include unpushed local changes.",
+	"cli.cmd.dev.file.open.openedEdit": "Opened server edit page: {0}",
+	"cli.cmd.dev.file.open.openedView": "Opened server view page: {0}",
+	"cli.cmd.dev.file.show.summary": "Show file content.",
+	"cli.cmd.dev.file.show.desc": "Read workspace file content saved on the server or in the local synchronization baseline.\n\nSupports current server content, historical server versions and local synchronization baseline content. Does not read the current working file.",
+	"cli.cmd.dev.file.show.out": "Human output is raw content. For known text types with valid UTF-8, JSON returns the text in content with encoding=utf8; binary data, unknown types and invalid UTF-8 use Base64 in content with encoding=base64.",
+	"cli.cmd.dev.file.show.source": "Content source: server for the current server, mirror for the local synchronization baseline; --revision applies only to server.",
+	"cli.cmd.dev.file.show.revision": "Read a historical server version.",
+	"cli.cmd.dev.file.show.badRev": "Invalid value for --revision: {0}",
+	"cli.cmd.dev.file.show.badSource": "Invalid value for --source: {0}",
+	"cli.cmd.dev.file.show.revSource": "--revision is only supported with --source=server.",
+	"cli.cmd.dev.file.diff.summary": "Show workspace diff against server.",
+	"cli.cmd.dev.file.diff.desc": "Compare local workspace metadata with server content to review changes.\n\nSupports individual and batch comparisons, including files deleted locally that still exist on the server.\n\nDoes not modify local or server files. Files missing on both sides are reported as errors.",
+	"cli.cmd.dev.file.diff.out": "JSON patches[] contains per-file results: changed indicates differences, workspaceExists distinguishes a missing local file from an empty one, binary identifies binary content, and patch contains displayable diff text. For binary=true, an empty patch does not imply identical files. Differences alone still exit 0; scripts should inspect summary.changed or patches[].changed.",
+	"cli.cmd.dev.file.diff.source": "Compare against server content.",
+	"cli.cmd.dev.file.diff.badSource": "Invalid value for --source: {0}",
+	"cli.cmd.dev.file.history.summary": "Show server file history.",
+	"cli.cmd.dev.file.history.desc": "Inspect the version history of a workspace file on the active server.\n\nRecords come from the server and are distinct from local Git history.",
+	"cli.cmd.dev.file.history.out": "JSON histories[] contains server history records. Pass revision to dev file show --revision=<n>; modifyTime is a Unix timestamp in milliseconds, and remotePath is the server resource path. When no history can be returned, histories is empty and empty.reason=emptyCollection is present.",
+	"cli.cmd.dev.file.history.limit": "Limit the number of history records.",
+	"cli.cmd.dev.file.check.rootObject": "Metadata file must be a JSON object.",
+	"cli.cmd.dev.file.check.versionRequired": "Metadata file is missing the version field.",
+	"cli.cmd.dev.file.check.versionOlder": "File version is older than the target server’s required version “{0}”. Upgrade the metadata and check again.",
+	"cli.cmd.dev.file.check.versionNewer": "File version is newer than the target server’s supported version “{0}”. Connect to a matching server or upgrade the server, then check again.",
+	"cli.cmd.dev.file.check.versionUnrecognized": "Cannot determine how the file version compares with the target server. Expected version is “{0}”. Consult the metadata DTS and verify the file’s origin and target server.",
+	"cli.cmd.dev.file.check.upgradeHint": "Preview the upgrade for these files, review the changes, then upgrade and check again. This preview does not modify files.",
+	"cli.cmd.dev.file.check.summary": "Validate workspace metadata and source files.",
+	"cli.cmd.dev.file.check.desc": "Validate local workspace metadata and source files to find problems before pushing.\n\nCheck metadata format, versions, fields and expressions, and find syntax or compilation errors in FTL, TypeScript and Less. Metadata versions must match the target server's requirements. TypeScript checks do not include full type checking.\n\nValidation requires a connection to the target server. Other resources and settings the file depends on are read from the server. Push any pending local changes to those dependencies before compiling; the file being checked does not need to be pushed first.\n\nDoes not execute templates or scripts and never modifies server resources; local files are only written when auto-fix is on. Passing validation does not establish that referenced resources, data, permissions or business behavior are correct.",
+	"cli.cmd.dev.file.check.out": "Text shows per-file results and error locations; AI agents should use --json. This excerpt shows an SPG expression error, omitting other fields. Comments explain the example; actual output is strict JSON:\n    {\n      \"kind\": \"result\",                         // Invalid source still produces result with a nonzero exit code\n      \"validationComplete\": true,               // All targets were checked; this does not mean they passed\n      \"summary\": { \"total\": 1, \"passed\": 0, \"failed\": 1, \"skipped\": 0 },\n      \"items\": [{\n        \"localPath\": \"/work/DEMO/app/page.spg\",   // Absolute local path\n        \"status\": \"failed\",                     // This file has a source error\n        \"error\": {\n          \"errorCode\": \"err.base.sourceInvalid\",\n          \"properties\": {\n            \"diagnostics\": [{                   // Detailed diagnostics\n              \"code\": \"err.exp.operandMissing\",\n              \"message\": \"An operand is missing\",\n              \"jsonPath\": \"$.body.canvas.children[0].visibleExp\"\n            }]\n          }\n        }\n      }]\n    }\n\nRead the summary and file statuses first, then error.properties.diagnostics for failed files. status is passed, failed (invalid source), skipped, or executionFailed (the check could not complete). Inspect skipReason for skipped items: exit 0 does not mean every file passed. summary.failed includes execution failures. kind=error indicates a failure of the checking process; handle connection, file access, or compiler service problems first. properties.partialResults, when present, retains file results already obtained.\n\nLocate issues using diagnostic reasons, jsonPath, or available file positions. Use expected values and related locations to repair, then check again. line/column are 1-based; a diagnostic without file inherits its file item. Interpret other position fields only according to their explicitly declared coordinate bases. Native warn severity also indicates a problem and produces a nonzero exit code. For version mismatches, follow the guidance to upgrade older files or resolve server compatibility; do not just change the version declaration.\n\nWith --autofix, every item carries fixStatus: fixed means problems were fixed and the content was written back to the local file, unchanged means there was nothing to fix or the file type does not support fixing, and failed means fixing or writing the file failed, with the reason in fixErrorMessage. A fixed item also carries fixedProblems (what this call fixed, with code, message and properties.jsonPath); the content is either re-serialized the way the designer saves it or the original text with reference entries added, and is not checked a second time. An item whose problems remain is still status failed and the exit code rule is unchanged; a failed write is status executionFailed. No backup is kept: use version control to roll back.",
+	"cli.cmd.dev.file.check.done": "Validated {0} workspace metadata file(s).",
+	"cli.cmd.dev.file.check.autofix": "After checking, fix problems whose fix is already determined and write the content back to the local file; metadata file types only, source errors are not fixed.",
+	"cli.cmd.dev.file.check.writeFailed": "Failed to write the local file: {0}",
+	"cli.cmd.dev.file.check.running": "Validating workspace metadata files",
+	"cli.cmd.dev.file.check.schemaFailed": "Metadata validation failed.",
+	"cli.cmd.dev.file.check.schemaFailedMsg": "Metadata validation failed: {0}",
+	"cli.cmd.dev.file.check.upgradeRequired": "{0} file(s) require a metadata upgrade. Run `{1}` with the same pathspec, then validate again.",
+	"cli.cmd.dev.file.check.pathspec": "Workspace local paths: files, recursive directories or quoted globs, relative to the execution directory after -C or absolute disk paths within the workspace. Every input must match; filenames and suffixes are case-sensitive.\nText must be UTF-8. JSON metadata uses strict JSON without comments or trailing commas, including .jsonc. FTL, .action.ts, frontend .ts and Less use source checks; .d.ts is not compiled as a runtime script.",
+	"cli.cmd.dev.file.upgrade.summary": "Upgrade old SuccApp metadata files.",
+	"cli.cmd.dev.file.upgrade.desc": "Preview or upgrade older SuccApp metadata files in a local workspace.\n\nSupports individual files and batch processing; previews identify candidates and failures.\n\nActual upgrades modify local files without automatically pushing to the server.",
+	"cli.cmd.dev.file.upgrade.out": "JSON candidates[] lists upgrade candidates, changed[] lists actual updates, and skipped[]/failures[] list skipped and failed items. --dry-run reports candidates without updating files. Failures cause exit 1; candidates and skipped items alone do not. Inspect summary and item reasons before choosing the next action.",
+	"cli.cmd.dev.file.upgrade.dryRun": "Preview upgrade candidates without changing files.",
+	"cli.cmd.dev.file.upgrade.cands": "Upgrade candidates: {0}",
+	"cli.cmd.dev.file.upgrade.dryRunRes": "Metadata upgrade dry-run: {0} checked, {1} candidate(s), {2} skipped, {3} failed",
+	"cli.cmd.dev.file.upgrade.failed": "Failed files: {0}",
+	"cli.cmd.dev.file.upgrade.reason": "Reason",
+	"cli.cmd.dev.file.upgrade.result": "Metadata upgrade result: {0} checked, {1} changed, {2} skipped, {3} failed",
+	"cli.cmd.dev.file.upgrade.skipped": "Skipped files: {0}",
+	"cli.cmd.dev.file.upgrade.upgraded": "Upgraded files: {0}",
+	"cli.cmd.dev.file.upgrade.pathspec": "Workspace local paths: files, recursive directories or quoted globs, relative to the execution directory after -C or absolute disk paths within the workspace. Omit to process all local projects.",
+	"cli.cmd.dev.file.*.pathspec": "Local workspace path, relative to the execution directory after -C, or an absolute disk path within the workspace. Directories recurse; quote globs. Globs also use the execution directory as their base.",
+	"cli.cmd.dev.file.*.path": "Local workspace path, relative to the execution directory after -C, or an absolute disk path within the workspace.",
+	"cli.cmd.dev.ext.title": "Workspace extension",
+	"cli.cmd.dev.ext.summary": "create and publish workspace extensions",
+	"cli.cmd.dev.ext.desc": "Create and publish workspace extensions.\n\nSupports inspecting local extensions, creating extension directories from server templates, and uploading to the active server.\n\nCreation writes local files; publishing affects server extensions.",
+	"cli.cmd.dev.ext.dirNamedSame": "A directory named the same already exists under sysdata/extensions/.",
+	"cli.cmd.dev.ext.extNameMust": "Extension name must follow the pattern {0}.",
+	"cli.cmd.dev.ext.extNameRequired": "Extension name is required.",
+	"cli.cmd.dev.ext.invalidExtName": "Invalid extension name.",
+	"cli.cmd.dev.ext.middleSegmentMust": "The middle segment must equal \"{0}\" (current: \"{1}\").",
+	"cli.cmd.dev.ext.list.summary": "List local extensions.",
+	"cli.cmd.dev.ext.list.desc": "List local extensions in the workspace sysdata project.\n\nUses local extension directories, not the server installed-extension list.",
+	"cli.cmd.dev.ext.list.out": "JSON extensions[] is an array of extension-name strings, not extension-description objects. Pass a name directly to dev extension push. With no local extensions, the array is empty and empty.reason=emptyCollection is present.",
+	"cli.cmd.dev.ext.create.summary": "Create a local extension.",
+	"cli.cmd.dev.ext.create.desc": "Create a local extension directory from a server template.\n\nRequires an active server, a cloned sysdata project and server connectivity. The target extension directory must not exist.\n\nGenerates local files without automatically publishing to the server.",
+	"cli.cmd.dev.ext.create.out": "JSON returns extensionName, extensionPoint and templateName, plus absolute local paths extensionRoot and packageJsonPath. Successful creation prepares local files; it does not mean the extension has been published or activated on the server.",
+	"cli.cmd.dev.ext.create.extTemplate": "Extension template not found: {0}/{1}",
+	"cli.cmd.dev.ext.create.name": "New extension name: lowercase letters, digits and hyphens, at least three segments; the second must match the extension point, for example succ-component-card.",
+	"cli.cmd.dev.ext.push.summary": "Push a local extension.",
+	"cli.cmd.dev.ext.push.desc": "Upload a local extension to the active server.\n\nWrites to the server and affects the extension. Overwriting an existing extension may replace remote changes.",
+	"cli.cmd.dev.ext.push.out": "JSON pushed[], rejected[] and failures[] list submitted files, conflict rejections and other failures; metadataVersionSuggestions[] provides version guidance. Partial success is possible: rejected items cause exit 6; otherwise failures cause exit 1. kind=result does not mean every file was uploaded successfully.",
+	"cli.cmd.dev.ext.push.path": "Resolve the extension from a local path under sysdata/extensions; relative paths use the execution directory after -C.\n\nChoose exactly one of --path and <name>.",
+	"cli.cmd.dev.ext.push.force": "Allow local extension files to overwrite remote changes.",
+	"cli.cmd.dev.ext.push.needNamePath": "Pass an extension name or --path=<path>.",
+	"cli.cmd.dev.ext.push.onlyOne": "Use either <name> or --path=<path>, not both.",
+	"cli.cmd.dev.ext.push.name": "Extension name returned by dev extension list; choose this or --path.",
+	"cli.cmd.dev.ext.*.extensionPoint": "Extension point returned by dev extension template list.",
+	"cli.cmd.dev.ext.*.template": "Template name within the selected extension point, from dev extension template list.",
+	"cli.cmd.dev.componentProperty.title": "Component properties",
+	"cli.cmd.dev.componentProperty.summary": "Find configurable and readable component properties",
+	"cli.cmd.dev.componentProperty.desc": "Find properties to set in interactions, use in metadata or read in expressions.\n\nQueries use server component definitions and saved pages, without reading unpushed local pages.",
+	"cli.cmd.dev.componentProperty.list.summary": "List component properties for a usage.",
+	"cli.cmd.dev.componentProperty.list.desc": "Find component properties for interaction assignments, metadata or expressions.\n\nQueries use server component definitions and saved pages without reading unpushed local changes.",
+	"cli.cmd.dev.componentProperty.list.out": "Default text shows a property overview. JSON properties[] contains name, caption, editor type, source, readonly and declaration flags. Queries by component ID also return declarations, not current instance property values. Use a returned name with component-property show, keeping the same component identity and usage.\n\ncoverage.status is partial: some extension properties and properties that depend on page state may be missing; conditions and dynamic candidate values are not evaluated. coverage.limitations lists specific limits, and data-* custom properties are outside this finite list. An empty filtered list does not prove that a property is illegal. summary.hasMore=false means there are no further pages.\n\nsource.content is server for instance queries and none for type queries. Editor type is not a persisted JSON value schema; consult the matching DTS before writing a value.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.",
+	"cli.cmd.dev.componentProperty.show.summary": "Show the type and options of a component property.",
+	"cli.cmd.dev.componentProperty.show.desc": "Show a property type, default value and options to help assign a value.\n\nQueries use server component definitions and saved pages without reading unpushed local changes.",
+	"cli.cmd.dev.componentProperty.show.out": "Human output shows basic property details, static options and child properties. Use --json for complete structured values.\n\nJSON property contains the declared name, caption, editor type, typeArgs, source, readonly and conditional flags. Queries by component ID do not return current instance property values. defaultValue is a declaration default, not a value that must be written. property.options preserves static string, number and boolean values; property.valueProvider retains a dynamic candidate definition without evaluating its values.\n\nNested properties are listed recursively in property.subProperties. For example, show fill and read image from subProperties. Editor type does not define the persisted representation; consult the matching DTS before assigning a value.\n\ncoverage.status is partial; coverage.limitations lists missing extensions, page context and other limits. Conditions and dynamic candidate values are not evaluated. source.content is server for instance queries and none for type queries.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references. member is a field to look up, not a guarantee that it can be persisted; verify expression and runtime properties against the relevant runtime interface.",
+	"cli.cmd.dev.componentProperty.target": "Server page path ending in spg, dash, rpt, fapp or afl; type queries allow a nonexistent page. Replace /PROJECT/page.spg and componentId in instance examples with an existing page path and component ID.",
+	"cli.cmd.dev.componentProperty.identity": "Specify exactly one of --component or --component-type to query by component ID or component type.",
+	"cli.cmd.dev.componentProperty.component": "Component ID in an existing server SPG or dashboard.",
+	"cli.cmd.dev.componentProperty.componentType": "Type matching kind from dev component list. Only reads type definitions, not page content.",
+	"cli.cmd.dev.componentProperty.kind": "Type category; cellType and actionComponent currently support type queries only.",
+	"cli.cmd.dev.componentProperty.usage": "set-property returns non-readonly and explicitly disabled properties regardless of property-editor visibility; metadata includes readonly declarations; expression selects properties readable by expressions.",
+	"cli.cmd.dev.componentProperty.contains": "Literal substring of a property name or localized caption.",
+	"cli.cmd.dev.componentProperty.property": "Exact top-level property name from component-property list for the same component and usage; nested paths such as fill.image are not accepted. Show fill to inspect its image child property.",
+	"cli.out.property.coverage": "Some properties may be missing, and conditions or dynamic candidates are not evaluated. Add --json to this command to inspect source and coverage.limitations; consult the matching DTS for assignments.",
+	"cli.out.property.name": "Name",
+	"cli.out.property.type": "Editor type",
+	"cli.out.property.source": "Source",
+	"cli.cmd.dev.componentMethod.title": "Component methods",
+	"cli.cmd.dev.componentMethod.summary": "Find methods callable in component interactions",
+	"cli.cmd.dev.componentMethod.desc": "Find component methods for execute-command interactions and learn their purpose and arguments.\n\nUses server component definitions without reading unpushed local pages. Queries by component ID use the saved server page; type queries do not read page content. Queries do not execute methods.",
+	"cli.cmd.dev.componentMethod.list.summary": "List methods callable in component interactions.",
+	"cli.cmd.dev.componentMethod.list.desc": "Find component methods for execute-command interactions to choose an operation. Other script methods on component objects are not included.\n\nQueries use server component definitions and saved pages without reading unpushed local changes. Queries do not execute methods.",
+	"cli.cmd.dev.componentMethod.list.out": "System commands whose IDs start with _ are excluded.\n\nDefault text shows a method overview; use component-method show for argument details. JSON methods[] contains method and argument declarations. Use methods[].id as the command value of an execute-command action; do not write the entire result object into the page.\n\nmethods[].source identifies the method source to help locate the corresponding component definition. Top-level source identifies the server and page used by this query.\n\nWhen methods[].parameters.status is declared, methods[].parameters.items preserves argument declarations and any required flags or static options. An empty array explicitly declares zero arguments; undeclared does not mean zero arguments. methods[].availability.status is notEvaluated and only retains enable conditions; methods[].returns.status is undeclared, which does not mean void.\n\ncoverage.status is partial; coverage.limitations lists gaps that may involve extensions, cell methods or embedded-page commands. Current browser state is not checked: finding a declaration does not guarantee current availability, and an empty filtered list does not prove a method cannot be called. source.content is server for instance queries and none for type queries. summary.hasMore=false means there are no further pages.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.",
+	"cli.cmd.dev.componentMethod.show.summary": "Show a component method purpose and arguments.",
+	"cli.cmd.dev.componentMethod.show.desc": "Show the purpose and arguments of an execute-command component method to help configure an action. Other script methods on component objects are not included.\n\nQueries use server component definitions and saved pages without reading unpushed local changes. Queries do not execute methods.",
+	"cli.cmd.dev.componentMethod.show.out": "Default text shows method information and an itemized argument list. Use JSON method.id as the command value of an execute-command action. Follow the Execute-command action metadata reference for argument assignments; do not write the entire method or parameters object into the page.\n\nWhen method.parameters.status is declared, method.parameters.items contains argument names, captions, descriptions and available optionCaptions. Each argument retains string, number and boolean options; multiple marks multiselect. An empty items array explicitly declares zero arguments; undeclared does not mean zero arguments. An editor control type is not an argument data type.\n\nmethod.source identifies the method source. Top-level source identifies the server and page used by this query; source.content is server for instance queries and none for type queries.\n\ncoverage.status is partial and coverage.limitations lists gaps. method.availability.status is notEvaluated; method.availability.condition retains an enable condition when present, without guaranteeing current availability. method.returns.status is undeclared, which does not mean void.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.",
+	"cli.cmd.dev.componentMethod.target": "Server page path ending in spg, dash, rpt, fapp or afl; type queries allow a nonexistent page. Replace /PROJECT/page.spg and componentId in instance examples with an existing page path and component ID.",
+	"cli.cmd.dev.componentMethod.identity": "Specify exactly one of --component or --component-type to query by component ID or component type.",
+	"cli.cmd.dev.componentMethod.component": "Component ID in an existing server SPG or dashboard.",
+	"cli.cmd.dev.componentMethod.componentType": "Page component type from dev component list. Only reads type definitions, not page content.",
+	"cli.cmd.dev.componentMethod.contains": "Literal substring of a command ID or localized caption.",
+	"cli.cmd.dev.componentMethod.method": "Exact command ID returned by component-method list for the same component; system commands whose IDs start with _ are not supported.",
+	"cli.out.method.id": "Method ID",
+	"cli.out.method.coverage": "Queries do not execute methods. Argument information may be incomplete; consult the matching DTS for argument assignments.",
+	"cli.out.method.undeclared": "Undeclared",
+	"cli.out.method.condition": "Enable condition",
+	"cli.out.method.argsUndeclared": "Parameters undeclared; this does not imply zero parameters.",
+	"cli.out.method.noArgs": "Explicitly declared with no parameters.",
+	"cli.out.method.parameters": "Parameters",
+	"cli.out.method.required": "Required",
+	"cli.out.method.yes": "Yes",
+	"cli.out.method.no": "No",
+	"cli.out.method.description": "Description",
+	"cli.out.property.querySource": "Query source: server component declarations; target: {target}; page content: {content}",
+	"cli.out.property.serverContent": "saved server content",
+	"cli.out.property.typeContent": "not read (type query)",
+	"cli.cmd.dev.componentEvent.title": "Component events",
+	"cli.cmd.dev.componentEvent.summary": "Discover configurable component interaction events",
+	"cli.cmd.dev.componentEvent.desc": "Find configurable component events to choose when an interaction runs.\n\nQueries use server component definitions and saved pages, without reading unpushed local pages. Queries do not trigger events or execute interactions.",
+	"cli.cmd.dev.componentEvent.list.summary": "List configurable component events.",
+	"cli.cmd.dev.componentEvent.list.desc": "Find configurable component events, such as clicks and value changes, to choose when an interaction runs.\n\nQueries use server component definitions and saved pages without reading unpushed local changes. Queries do not trigger events or execute interactions.",
+	"cli.cmd.dev.componentEvent.list.out": "Default text shows an event overview. JSON events[] contains declarations and bindingTemplate; write events[].id to the event field of a component events[] item. Use component-event show with the same component identity for details.\n\nsupportsEvents=false means the component does not support interactions and events[] is empty. events[].source identifies the event source to help locate the corresponding component definition.\n\nFor instance queries, configuredEvents.status is read and items preserves all existing server component events and actions, including events outside the candidates. --contains does not filter these items. Type queries use notRead, which does not mean no events are configured. Preserve existing configuration and merge the intended event; do not replace component events[] with a candidate list.\n\ncoverage.status is partial and coverage.limitations lists gaps. Some extension and cell events may be missing; the query does not check whether an event can trigger in the current page state. Undeclared event parameter types do not mean zero parameters; consult matching event and action types. source.content is server for instance queries and none for type queries. summary.hasMore=false means there are no further pages; an empty filtered list does not prove an event is illegal.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.",
+	"cli.cmd.dev.componentEvent.show.summary": "Show an event description and configuration template.",
+	"cli.cmd.dev.componentEvent.show.desc": "Show an event description and configuration template to add or edit a component interaction.\n\nQueries use server component definitions and saved pages without reading unpushed local changes. Queries do not trigger events or execute interactions.",
+	"cli.cmd.dev.componentEvent.show.out": "Default text shows event information and the configuration location. JSON event.id maps to the event field in component events[]. event.bindingTemplate has the form {\"event\":\"<event ID>\",\"actions\":[]}. Fill actions using the action type references and merge into the target component. Do not write the whole query result into the page or overwrite existing actions with an empty array.\n\nFor instance queries, configuredEvents.status is read and items contains only existing configurations of this event in the saved server page. Type queries use notRead. Start from items when editing existing interactions and preserve other fields. event.originEvent, repeating, repeatingStrategy, startEvent and endEvent are returned only when declared. repeatingStrategy is a recommendation from the event declaration, not the effective instance execution strategy.\n\nevent.parameters.status is undeclared when event parameter types are not provided; this does not mean zero parameters. Consult the corresponding event and action type references when configuring an interaction. coverage.status is partial and coverage.limitations explains possible missing events and limits on trigger checks. source.content is server for instance queries and none for type queries. A declaration does not guarantee browser triggering; compile the edited page and verify its behavior.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.",
+	"cli.cmd.dev.componentEvent.target": "Server page path ending in spg, dash, rpt, fapp or afl; type queries allow a nonexistent page. Replace /PROJECT/page.spg and componentId in instance examples with an existing page path and component ID.",
+	"cli.cmd.dev.componentEvent.identity": "Specify exactly one of --component or --component-type to query by component ID or component type.",
+	"cli.cmd.dev.componentEvent.component": "Component ID in a saved server SPG or dashboard.",
+	"cli.cmd.dev.componentEvent.componentType": "Page component type from dev component list. Only reads type definitions, not page content.",
+	"cli.cmd.dev.componentEvent.contains": "Case-insensitive literal substring of an event ID or localized caption; does not filter existing page configurations.",
+	"cli.cmd.dev.componentEvent.event": "Exact event ID returned by component-event list for the same component.",
+	"cli.out.event.id": "Event ID",
+	"cli.out.event.binding": "New configuration: component events[]; event={0}, configure actions in actions[].",
+	"cli.out.event.parameters": "Event parameter types are undeclared; consult the matching event and action type references.",
+	"cli.out.event.configured": "Existing server event configurations: {0} (use --json to inspect).",
+	"cli.out.event.notRead": "Type query: existing page event configurations were not read.",
+	"cli.out.event.coverage": "Queries do not trigger events. Add --json to view the configuration template and limits.",
+	"cli.cmd.dev.layout.title": "Layouts",
+	"cli.cmd.dev.layout.summary": "Query component layouts and layout properties",
+	"cli.cmd.dev.layout.desc": "Find component layouts and their properties to arrange containers and child components.\n\nQuery a component type or an existing component in a server SPG or dashboard. Queries use server definitions and saved pages without reading unpushed local changes.\n\nQueries do not switch layouts or modify pages.",
+	"cli.cmd.dev.layout.list.summary": "List layouts available for a component.",
+	"cli.cmd.dev.layout.list.desc": "Find layouts available to a component to choose how its children are arranged.\n\nChoices depend on the component and page type; explicitly restricted component choices take precedence. By default, SPG canvases offer flex, dashboard canvases offer tile, ppt and gravity, and ordinary containers offer layouts available on the server.\n\nQueries use server definitions and saved pages without reading unpushed local changes, switching layouts or modifying pages.",
+	"cli.cmd.dev.layout.list.out": "Default text lists layout IDs, names and whether details are available. JSON layouts[] contains id, caption, definitionAvailable and optional description. Run dev layout show with the same component identity, layout property and a returned id. definitionAvailable=false means the server has not provided a layout definition; check the corresponding extension before relying on that layout.\n\nselection.property names the layout property to write. selection.currentValue comes from the saved server instance or a definition default; currentSource is server, default or none, with currentValue omitted for none. defaultValue is not mandatory to write. Type queries cannot determine the current layout of an instance. context.isCanvas indicates canvas rules: type canvas represents the target page canvas; instance queries use the actual page position.\n\nselection.status=available means candidates can be queried for the property; unsupported means the component has no layout selection property; unresolved means its dynamic candidates cannot be determined. Empty results use empty.reason=noLayoutProperty, unresolvedOptions, noMatches or emptyCollection. summary.hasMore=false means there are no further pages.\n\ncoverage.status is partial; coverage.limitations describes gaps involving extensions or page-dependent configuration. Conditions and custom dynamic candidates are not evaluated. source.content is server for instance queries and none for type queries. Candidates do not guarantee a suitable result; compile and verify the edited page.\n\nreferences[] provides DTS readDocument commands and symbol names. purpose=metadata identifies metadata assignment references; declaration identifies query declarations, which are not interchangeable. Commands use the server selected for this query. This query does not download references; when local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references.",
+	"cli.cmd.dev.layout.show.summary": "Show container and child properties for a layout.",
+	"cli.cmd.dev.layout.show.desc": "Inspect layout properties and where to write them to configure container and child sizes, spacing and positions.\n\nQueries use server definitions and saved pages without reading unpushed local changes. Queries do not switch layouts or convert existing component positions and sizes.",
+	"cli.cmd.dev.layout.show.out": "Default text lists container and child properties separately. JSON layout.id is the layout ID. Write layout.properties[] fields on the container itself and layout.childProperties[] fields on its direct children. Both arrays provide name, caption and editor type; defaults, static options and nested properties are returned when defined. options preserves original value types; valueProvider identifies a dynamic option source without computed results. An empty array means no corresponding properties were provided. Editor types do not define persisted JSON value formats.\n\nlayout.assignment is a minimal layout assignment, such as {\"layoutType\":\"flex\"}. Merge it into the target container while preserving existing content; do not write the entire layout or query result into a page. layout.capabilities.drag, drop and group indicate support for dragging, adding by drag-and-drop and grouping, without guaranteeing availability in the current page state.\n\nselection.property identifies the layout property. currentValue and currentSource distinguish saved server configuration, definition defaults and missing values; currentValue is omitted when currentSource=none. Type queries do not return current instance values. Defaults are reference information, not values that must all be written.\n\ncoverage.status is partial. Conditions and dynamic options are not evaluated, and size constraints of specific children are not checked. Query existing children by ID with component-property list --usage=metadata to inspect properties under the saved server layout; this does not reflect a new layout in unpushed local changes. Absolutely positioned children may use different layout properties. When switching an existing layout, check container properties and child positions and sizes rather than treating a changed layout ID as completion. source.content is server for instance queries and none for type queries. Compile and verify the actual arrangement after editing.\nreferences[] provides readDocument commands and symbol names for the layout and common DTS; commands use the server selected for this query. This query does not download references. When local.available=true, read local.path directly or search local.root; otherwise, run readDocument to obtain and read the references. TypeMap[layout ID] identifies container properties; ChildTypeMap[layout ID] identifies direct-child properties.",
+	"cli.cmd.dev.layout.identity": "Specify exactly one of --component or --component-type to query by component ID or component type.",
+	"cli.cmd.dev.layout.component": "Container component ID in a saved server SPG or dashboard; the canvas can also be queried by ID.",
+	"cli.cmd.dev.layout.componentType": "Page component type confirmed through dev component list or dev component show; canvas represents the target page canvas. Only reads type definitions, not page content.",
+	"cli.cmd.dev.layout.property": "Layout property name from dev component show layoutProperties. Selected automatically when there is exactly one; required when there are multiple.",
+	"cli.cmd.dev.layout.contains": "Case-insensitive literal substring of a layout ID or localized caption.",
+	"cli.cmd.dev.layout.layout": "Exact layout ID from dev layout list for the same component and layout property.",
+	"cli.cmd.dev.layout.target": "Server page path ending in spg, dash, rpt, fapp or afl; type queries allow a nonexistent page. Replace /PROJECT/page.spg and componentId in instance examples with an existing page path and container component ID.",
+	"cli.out.layout.id": "Layout ID",
+	"cli.out.layout.definition": "Details available",
+	"cli.out.layout.default": "Default",
+	"cli.out.layout.properties": "Properties on the container",
+	"cli.out.layout.childProperties": "Properties on direct children",
+	"cli.out.layout.noProperties": "No properties provided.",
+	"cli.out.layout.assignment": "Layout assignment: {0}={1}, written on the target container.",
+	"cli.out.layout.containerType": "Container property type",
+	"cli.out.layout.childType": "Direct-child property type",
+	"cli.out.layout.referenceNote": "This query only checks local references. The read commands below retain the target server and prepare missing packages in Home.",
+	"cli.out.layout.showNote": "Queries do not convert existing positions or sizes. Configure using the matching types, then compile and verify the arrangement. Add --json for complete options and limits.",
+	"cli.out.layout.listNote": "Add --json for the layout property, current configuration source and limits; use dev layout show for the selected layout properties.",
+	"cli.out.layout.empty.noLayoutProperty": "The component has no layout selection property.",
+	"cli.out.layout.empty.unresolvedOptions": "Dynamic candidates cannot be determined for this layout property; consult the matching types and designer.",
+	"cli.out.layout.empty.noMatches": "No matching layouts.",
+	"cli.out.layout.empty.emptyCollection": "The property has no layout candidates.",
+	"cli.cmd.resContext.component": "Component ID in a saved server SPG or dashboard. Local unpushed changes are not read.",
+	"cli.cmd.resContext.componentType": "Component or cell type at the target page location. --kind selects its category.",
+	"cli.cmd.resContext.kind": "Type category, component when omitted. cellType supports type queries only.",
+	"cli.cmd.resContext.property": "Selector property path matching the resource category. Omit to select the sole matching position; choose explicitly when several positions match. Child paths locate selectors; save values according to the owning top-level property persistence type.",
+	"cli.cmd.resContext.identity": "Omit identities to query the resource catalog. Component queries use a server page path. --property and --kind require a component identity. Replace /PROJECT/page.spg and componentId in examples with an existing page and component ID.",
+	"cli.cmd.resContext.styleIdentity": "Omit component identities to query the style catalog. --property and --kind require --component or --component-type. Component ID queries require a server page path. Replace /PROJECT/page.spg and componentId in examples with an existing page path and component ID.",
+	"cli.out.property.readonly": "Read-only",
+	"cli.out.property.expressionAccessible": "Readable in expressions",
+	"cli.out.property.enable": "Enabled",
+	"cli.out.property.visible": "Visible in property panel",
+	"cli.out.property.options": "Static options",
+	"cli.out.property.value": "Value",
+	"cli.out.property.noOptions": "No static options are declared.",
+	"cli.out.property.children": "Child properties",
+	"cli.out.property.conditions": "Enablement or visibility conditions are not evaluated; actual state depends on the page.",
+	"cli.out.property.dynamic": "Dynamic options are not evaluated; add --json to inspect the declaration.",
+	"cli.out.property.composite": "Structured value; add --json to inspect.",
+	"cli.out.property.default": "Default value",
+	"cli.cmd.dev.color.title": "Colors",
+	"cli.cmd.dev.color.summary": "Query available colors and theme references",
+	"cli.cmd.dev.color.desc": "List theme solid colors, gradients and standard colors with references for page metadata.",
+	"cli.cmd.dev.color.list.summary": "List available colors and their theme references.",
+	"cli.cmd.dev.color.list.desc": "List theme solid colors, gradients and standard colors grouped by purpose to choose text, fill, border and series colors for pages.\n\nReads saved server pages and themes without changing pages. Returns preset colors without enumerating arbitrary custom values or reflecting runtime external theme overrides. Gradient support depends on the target property. Missing themes and read permission errors fail the command.",
+	"cli.cmd.dev.color.list.target": "Server project name, absolute application path or absolute path of an existing page (spg, dash, rpt or fapp); not a local path. For a new file, you may specify its project or application.\nWhen omitted, queries default colors from the specified system theme. Replace /PROJECT/home.spg with an existing page and /PROJECT/app/demo.app with an actual application.",
+	"cli.cmd.dev.color.list.theme": "Theme name from name in dev theme list. For pages, omission reads settings.theme and uses default when unset. Required for system, project and application targets. An explicit theme avoids reading page content.\nAlso required when the target location is omitted.",
+	"cli.cmd.dev.color.list.type": "Return only solid colors or gradients; omission returns both types.",
+	"cli.cmd.dev.color.list.group": "Return one color group; colorPrimary is brand, gradient is theme gradients, standard is fixed standard colors. Combined with --type, returns their intersection.",
+	"cli.cmd.dev.color.list.out": "--json returns theme (name, location, selection), colors[], missingTokens[] and filters. theme.selection is explicit, page or default (page theme unset). location is the actual theme source; system means a system theme. Human output shows group, type, name, reference value and resolved value.\n\ncolors[] includes group, groupCaption, caption, type (pure/gradient), source (theme/standard), value and resolvedValue; theme colors also have themeVar. value is a persisted ColorString such as colorPrimary, gradientColor1 or #C00400, suitable for properties declared as ColorString in DTS. resolvedValue is a compiled CSS solid color or gradient definition for preview; preserve theme references when assigning. Consult the target DTS for other property structures.\n\nmissingTokens[] lists variables missing from the theme within the selected filters; these colors are omitted. Empty results return colors=[] and empty.reason=noMatches with exit code 0. Successful JSON output does not verify the resulting page appearance.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.",
+	"cli.out.color.group": "Group",
+	"cli.out.color.type": "Type",
+	"cli.out.color.name": "Name",
+	"cli.out.color.value": "Reference value",
+	"cli.out.color.resolved": "Resolved value",
+	"cli.ref.colorValue": "Persisted color value type",
+	"cli.out.color.missing": "Missing theme variables (omitted): {0}",
+	"cli.cmd.dev.colorPalette.title": "Color palettes",
+	"cli.cmd.dev.colorPalette.summary": "Query available theme palettes",
+	"cli.cmd.dev.colorPalette.desc": "List theme palettes and ordered colors to choose chart series color combinations.",
+	"cli.cmd.dev.colorPalette.list.summary": "List palette IDs, names and ordered colors.",
+	"cli.cmd.dev.colorPalette.list.desc": "List theme palettes available at the specified location to choose chart series color schemes. Each palette contains ordered colors and can combine solid colors and gradients.\n\nOnly reads saved server pages and themes without changing pages. Local unpushed changes, runtime external theme overrides and final colors assigned to dynamic data are excluded. Missing themes, read permission errors and invalid catalogs fail the command.",
+	"cli.cmd.dev.colorPalette.list.target": "Server project name, absolute application path or absolute path of an existing page (spg, dash, rpt or fapp); not a local path. For a new file, you may specify its project or application.\nWhen omitted, queries default color palettes from the specified system theme. Replace /PROJECT/home.spg with an existing page and PROJECT with an actual project name.",
+	"cli.cmd.dev.colorPalette.list.theme": "Theme name from name in dev theme list. For pages, omission reads settings.theme and uses default when unset. Required for system, project and application targets. An explicit theme avoids reading page content. Application themes take precedence over project and system themes with the same name.\nAlso required when the target location is omitted.",
+	"cli.cmd.dev.colorPalette.list.out": "Human output shows the theme source, palette IDs, names and ordered colors; gradients use JSON definitions. --json returns theme (name, location, selection) and colorPalettes[]. theme.selection is explicit, page or default (page theme unset). location is the actual theme source; system means a system theme.\n\ncolorPalettes[] includes id, caption and paletteData. Names prefer configured captions, then current-language names, then IDs. paletteData preserves server-compiled CSS solid color strings and gradient objects in palette definition order. Gradients contain type, deg (optional linear gradient angle) and value stops; each stop is [color string, position from 0 to 1].\n\nAssign the id string to properties declared as ColorPaletteString in DTS, for example \"colorPalette\": \"default1\". Do not assign caption, the entire palette object or paletteData to such properties. Consult the target DTS for other structures. Palette colors are already resolved for comparison; retaining palette IDs follows theme changes. Components and data determine actual color assignment, so verify the resulting appearance.\n\nWhen the theme provides no palettes, returns colorPalettes=[] and empty.reason=emptyCollection with exit code 0. Errors do not fall back to partial catalogs.\n\nqueryScope.kind is system, target or global. message describes the scope; limitations[] provides stable code and localized message values. For system queries, targetQuery.argvTemplate is an invocation template without the executable name; placeholders identifies <target>, which must be replaced before execution. Scope remains available for empty results; system queries also retain target navigation. --pretty-json changes formatting only.",
+	"cli.cmd.dev.colorPalette.list.empty": "The current theme has no color palettes.",
+	"cli.out.colorPalette.id": "Palette ID",
+	"cli.out.colorPalette.name": "Name",
+	"cli.out.colorPalette.colors": "Ordered colors",
+	"cli.ref.colorPaletteValue": "Persisted palette property type",
+	"cli.cmd.docs.title": "References",
+	"cli.cmd.docs.summary": "Discover, read and manage manuals and server references.",
+	"cli.cmd.docs.desc": "Manage SuccApp manuals, type declarations (DTS) and JSON Schema for local reading and AI Agents.\n\nManuals come from the official documentation site; type declarations and JSON Schema match the target application server. No workspace initialization or project cloning is required.",
+	"cli.cmd.docs.install.summary": "Install the official documentation Skill into a specified directory for an AI client to load.",
+	"cli.cmd.docs.install.desc": "Install the succapp-docs official documentation Skill with Markdown, indexes, attachments and examples for AI Agents.\n\nNo server, login or workspace is required. Reinstallation updates managed references and preserves unrelated files.",
+	"cli.cmd.docs.install.out": "output is the installation directory and entrypoint is SKILL.md, both absolute local paths. complete=true means installation is complete according to the indexes, excluding images and videos. status is installed, updated or up-to-date. Installation does not mean the Agent has loaded the Skill.\n\nAfter success, read entrypoint. To read this installation with docs read/locate, pass output as --directory; default reads do not discover arbitrary installation directories. Obtain server DTS and JSON Schema separately with docs download.",
+	"cli.cmd.docs.install.done": "Skill {0}: {1}",
+	"cli.cmd.docs.install.name": "Official Skill name; currently succapp-docs.",
+	"cli.cmd.docs.install.output": "Final Skill directory containing SKILL.md; relative to the execution directory after -C, or an absolute path. Choose it according to your agent directory conventions.",
+	"cli.cmd.docs.install.force": "Allow overwriting local modifications or conflicting files with the same name; preserve unrelated files.",
+	"cli.cmd.docs.list.summary": "Find indexed manual, DTS and JSON Schema files by path prefix.",
+	"cli.cmd.docs.list.desc": "List the local reference index to discover manuals, type declarations and JSON Schema.",
+	"cli.cmd.docs.locate.summary": "Return a reference file’s absolute local path for editors or local tools.",
+	"cli.cmd.docs.locate.desc": "Find a reference file’s local location and source for further reading and searching with an editor or local tools.",
+	"cli.cmd.docs.read.summary": "Output reference text; automatically download missing packages to Home.",
+	"cli.cmd.docs.read.desc": "Output a reference file’s text for people or AI Agents.\n\nSupports UTF-8 text; binary attachments can be located and opened with an appropriate tool.",
+	"cli.cmd.docs.download.summary": "Download manuals or server references to ~/.succapp/ or a specified directory.",
+	"cli.cmd.docs.download.desc": "Download manuals, type declarations and JSON Schema for local and offline reading.",
+	"cli.cmd.docs.update.summary": "Refresh downloaded references in Home or a specified directory.",
+	"cli.cmd.docs.update.desc": "Refresh downloaded references with the latest content from their site or server, preserving unrelated files and checking local modification conflicts.",
+	"cli.cmd.docs.list.path": "Path prefix within a package, such as guide/ai/analysis/. Omit for manuals; dev-types/ and json-schemas/ select declarations and Schema from the target server.",
+	"cli.cmd.docs.*.path": "POSIX path within a reference package, such as guide/ai/README.md or dev-types/types/meta/file-types/query.d.ts. Absolute paths, URLs and .. are rejected. Reading dev-types/ or json-schemas/ requires a target server.",
+	"cli.cmd.docs.*.directory": "Read only this reference root, without preparation or fallback. Server packages are under dev-types/ or json-schemas/. Relative local paths use the execution directory after -C.",
+	"cli.cmd.docs.*.offline": "Disable networking and fail if references are missing. When omitted, reuse available matching workspace references, then Home copies; download missing packages to Home without modifying the workspace.",
+	"cli.cmd.docs.*.symbol": "Include the DTS type or member to consult; does not extract its body.",
+	"cli.cmd.docs.*.anchor": "Include a section anchor without #; does not extract the section.",
+	"cli.cmd.docs.read.maxChars": "Maximum text length (JavaScript UTF-16 units). Longer text is marked truncated with the full local file location.",
+	"cli.cmd.docs.*.scope": "Select packages repeatedly or comma-separated. manual contains website text manuals, attachments and examples, excluding images and videos; server contains the target server’s complete DTS and JSON Schema, downloaded and updated together. all selects both packages and cannot be combined with other values.",
+	"cli.cmd.docs.*.output": "Reference root. Defaults: ~/.succapp/docs/manual for manuals and ~/.succapp/servers/<server>/support for server references. Relative paths use the execution directory after -C.",
+	"cli.cmd.docs.update.scope": "Select packages repeatedly or comma-separated: manual for website manuals, server for the target server’s complete DTS and Schema, or all for both, which cannot be combined with other values. Omit to check both, skipping server references without a selected server. Explicit server scope requires a target server. Skip packages not downloaded; fail if none can be updated.",
+	"cli.cmd.docs.update.output": "Reference root to update. Defaults to Home references only, without automatically selecting a workspace: ~/.succapp/docs/manual for manuals and ~/.succapp/servers/<server>/support for server references. Relative paths use the execution directory after -C.",
+	"cli.cmd.docs.*.force": "Allow overwriting local changes, without rebinding a directory to another source.",
+	"cli.cmd.docs.list.out": "Lists the local index without inspecting each file; entries[] contains logical relativePath and absolute local path; count is the number of matches, including zero. root is the local reference root and source identifies the origin. Continue reading with local tools after locating the directory.",
+	"cli.cmd.docs.locate.out": "relativePath is the logical path; path is the absolute local file; root is the reference root. source.kind is manual or server and source.url identifies the origin. source.version records the version of a completely downloaded server bundle and is omitted for legacy caches without a confirmed complete version. Reads do not check remote updates. symbol and anchor are reading hints. Read path directly or search root.",
+	"cli.cmd.docs.read.out": "Default text output includes the body followed by local locations; --quiet hides these hints. JSON includes relativePath, path, root and source, plus content, truncated and totalChars. source identifies the origin and the version of the completed server bundle, omitted for legacy caches without a confirmed complete version. Reads do not check remote updates.\n\ntruncated=true requires reading the full local path; totalChars is the full UTF-16 length. symbol and anchor are hints, not extracted sections. Continue reading within root using local tools.",
+	"cli.cmd.docs.download.out": "results[] lists preparation results for each reference package with absolute output roots. Manual results include entrypoint; server results include the matching serverVersion, the absolute local bundle statePath, and both scopes[].path. completedScopes lists finished scopes; complete=true means the selected packages are complete according to their indexes. Website materials exclude images and videos.\n\nFor custom directories, pass the corresponding result output as --directory to docs read/locate. Server references still require the same target server.\n\nmanual and server are processed independently. Within server, DTS and JSON Schema are prepared together, and the new version is recorded only after the complete bundle succeeds. Failure returns a nonzero exit code with completedScopes, failedScopes, pendingScopes and results in error properties; previously completed reference scopes are not rolled back.",
+	"cli.cmd.docs.update.out": "results[] and completedScopes list packages actually updated; skippedScopes lists uninitialized scopes or scopes skipped without a target server. Server results include the matching serverVersion and the absolute local bundle statePath. complete=true means all selected initialized packages were processed, excluding skipped scopes.\n\nUpdating Home does not change workspace references or default read priority. To read the updated copy, pass the corresponding results[] output as --directory to docs read/locate.\n\nmanual and server are processed independently. Within server, DTS and JSON Schema are updated together, and the new version is recorded only after the complete bundle succeeds. Failure returns a nonzero exit code with completedScopes, failedScopes, pendingScopes, skippedScopes and results in error properties; previously completed reference scopes are not rolled back.",
+	"cli.docs.empty": "No matching references.",
+	"cli.docs.preparing": "Preparing local references: {0}",
+	"cli.docs.truncated": "Text truncated. Read the full local file: {0}",
+	"cli.docs.localRoot": "Local reference directory: {0}. Search and read files directly in this directory.",
+	"cli.docs.localFile": "Local file:\n  {0}\nReference directory:\n  {1}\n\nRead the file directly or search within the reference directory.",
+	"cli.docs.referenceLocal": "Local file: {1}; reference directory: {0}. Read or search directly.",
+	"cli.docs.referenceMissing": "Default reference directory for this server: {0}. No usable local copy of the target file; this query did not download references. Use the read command to obtain them.",
 	"cli.cmd.model.title": "Model",
 	"cli.cmd.model.summary": "inspect and query semantic data models",
-	"cli.cmd.model.desc": "Inspect and query SuccApp semantic data models.\n\nFind models with search, then inspect structure with show, fields, indexes or profile. Use select for a single-model preview, query for aggregation and joins, export for CSV files, and field-profile for field statistics.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Explore model data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/explore-model-data.md\nWeb: https://docs.succapp.com/ai-building/data/explore-model-data",
+	"cli.cmd.model.desc": "Inspect and query SuccApp semantic data models.\n\nProvides model search, metadata and field structure, index declarations, model and field profiles, data previews and CSV exports. Supports single-model filtering, aggregation and multi-model joins.",
 	"cli.cmd.model.search.summary": "Search semantic models.",
-	"cli.cmd.model.search.desc": "Search visible .tbl semantic models by full path or by combinable location, model-property, and field-property filters.\n\nUse returned .tbl paths with subsequent model commands. See the parameters below for exact-path lookup and combined filters. Results contain only visible models; reaching the limit does not mean no other models exist.",
-	"cli.cmd.model.search.query": "Starts with '/': full model path or path glob. Contains '*' or '?': model file name glob. Otherwise broadly searches model metadata or visible field metadata by keyword.",
+	"cli.cmd.model.search.desc": "Search .tbl semantic models visible to the current user to find data for an analysis task.\n\nSupports exact path lookup and combined location, model-property and field-property filters. Results are limited by user permissions and result limits.",
+	"cli.cmd.model.search.out": "results[] is ordered by relevance. Each item contains a model summary, matched fields[], score, and matchedOn evidence. Use results[].model.path in subsequent commands; fields[] is not the full model field list.\n\nsummary.returned counts returned models; summary.hasMore indicates more matching models; summary.matchedFields counts only returned matched fields. No matches produce results=[] and empty.reason=noMatches.",
+	"cli.cmd.model.search.query": "Starts with '/': full model path or path glob. Contains '*' or '?': model file name glob. Otherwise uses the keyword to broadly search model metadata or metadata of fields visible by default.",
 	"cli.cmd.model.search.path": "Search by an absolute model metadata path glob; a project root searches recursively. Can be combined with a keyword <query>, but not with a path <query>, --project, --parent-dir, or --name.",
 	"cli.cmd.model.search.name": "Search by a model file name glob; without wildcards, matches exactly. Can be combined with a keyword <query>, --project, and --parent-dir, but not with a glob <query> or --path.",
 	"cli.cmd.model.search.parentDir": "Search one absolute directory scope recursively. Glob wildcards are not supported; use --path='/DIR/*' for direct children. With --project, its first path segment must match the project name.",
-	"cli.cmd.model.search.project": "Match one project name. Can be combined with --parent-dir and --name.",
+	"cli.cmd.model.search.project": "Match one project name exactly. Can be combined with --parent-dir and --name.",
 	"cli.cmd.model.search.type": "Match Table.tableType values. Repeat or use comma-separated values; values are ORed.",
-	"cli.cmd.model.search.contains": "Require every value to match a model name, description, or physical table name (AND). Plain text uses case-insensitive contains; /pattern/flags uses regex with i (case-insensitive), m (multiline), and g (compatibility only; no effect).",
-	"cli.cmd.model.search.containsAny": "Match when any value matches a model name, description, or physical table name (OR). Plain text uses case-insensitive contains; /pattern/flags uses regex with i, m, and g (compatibility only; no effect).",
-	"cli.cmd.model.search.fieldContains": "Require every value to match a field name, description, physical name, or keyword (AND). Plain text uses case-insensitive contains; /pattern/flags uses regex with i (case-insensitive), m (multiline), and g (compatibility only; no effect).",
-	"cli.cmd.model.search.fieldContainsAny": "Match when any value matches a field name, description, physical name, or keyword (OR). Plain text uses case-insensitive contains; /pattern/flags uses regex with i, m, and g (compatibility only; no effect).",
-	"cli.cmd.model.search.fieldMatch": "Limit field-text matching to dim, measure, or all fields. Defaults to all.",
+	"cli.cmd.model.search.contains": "Require every value to match a model name, description, or physical table name (AND). Plain text uses case-insensitive contains; /pattern/flags uses regex with i (case-insensitive), m (multiline), and g (compatibility only; no effect). Repeat the option for multiple values; commas within a value are literal text.",
+	"cli.cmd.model.search.containsAny": "Match when any value matches a model name, description, or physical table name (OR). Plain text uses case-insensitive contains; /pattern/flags uses regex with i, m, and g (compatibility only; no effect). Repeat the option for multiple values; commas within a value are literal text.",
+	"cli.cmd.model.search.fieldContains": "Require every value to match a field name, description, physical name, or keyword (AND). Plain text uses case-insensitive contains; /pattern/flags uses regex with i (case-insensitive), m (multiline), and g (compatibility only; no effect). Repeat the option for multiple values; commas within a value are literal text.",
+	"cli.cmd.model.search.fieldContainsAny": "Match when any value matches a field name, description, physical name, or keyword (OR). Plain text uses case-insensitive contains; /pattern/flags uses regex with i, m, and g (compatibility only; no effect). Repeat the option for multiple values; commas within a value are literal text.",
+	"cli.cmd.model.search.fieldMatch": "Restrict the field roles searched: dim for dimensions, measure for measures, all for all roles (default).",
 	"cli.cmd.model.search.allFields": "Include hidden and extended fields in field-text matching.",
-	"cli.cmd.model.search.fieldLimit": "Maximum matched fields returned per model. Defaults to 5; valid range is 1 to 50.",
-	"cli.cmd.model.search.limit": "Return at most this many most relevant models. Defaults to 50; valid range is 1 to 200.",
+	"cli.cmd.model.search.fieldLimit": "Maximum matching fields per model; defaults to 5 when omitted.",
+	"cli.cmd.model.search.limit": "Maximum number of most relevant models; defaults to 50 when omitted.",
 	"cli.cmd.model.search.empty": "No matching models.",
 	"cli.cmd.model.search.pathHint": "'{0}' is an exact model path. Use '{1}' to search recursively.",
 	"cli.cmd.model.search.nameHint": "Model names match exactly without wildcards; wildcards and the .tbl suffix are not added automatically.",
 	"cli.cmd.model.search.hasMore": "Only the {0} most relevant models are shown; add a project, directory, type, or more specific keyword to narrow the search.",
 	"cli.cmd.model.show.summary": "Show model metadata summary.",
-	"cli.cmd.model.show.desc": "Show semantic model metadata summary.\n\nUse a .tbl path returned by search for <model>. Use fields for columns and profile --json for full metadata and row counts. This command does not query model rows.",
+	"cli.cmd.model.show.desc": "Inspect a semantic model metadata summary, including its type, field count and key declarations.\n\nDoes not query model data rows.",
+	"cli.cmd.model.show.out": "model is a summary object containing path, tableType, fieldCount, primaryKeys, and businessKeys, rather than a model path string. Key and index metadata does not establish data uniqueness.",
 	"cli.cmd.model.profile.summary": "Profile one semantic model.",
-	"cli.cmd.model.profile.desc": "Return the model summary, current full metadata, and physical table row count. Human output is concise; use --json for the full metadata.\n\nRow counting accesses the data source and may be affected by permissions or connectivity. Check dataRowCount.value or errorInfo; missing or failed statistics are not zero. Use field-profile for field-level statistics.",
+	"cli.cmd.model.profile.desc": "Inspect a model summary, full current-version metadata and actual physical table row count.\n\nProvides an overview of model structure and data volume, without field-level statistical distributions.\n\nCounting rows accesses the data source and may be affected by permissions or connectivity.",
+	"cli.cmd.model.profile.out": "model contains the summary; fullMetadata contains the complete current-version metadata (succ.meta.dw.Table). Use --json for full metadata. dataRowCount.value is the actual row count; dataRowCount.errorInfo explains counting failures. Missing or failed counts do not mean 0.",
 	"cli.cmd.model.fieldProfile.summary": "Profile selected model fields.",
-	"cli.cmd.model.fieldProfile.desc": "Inspect selected fields, inferred analytical roles, dimension attributes, and optional data statistics. Select 1 to 20 fields; aliases resolving to the same fieldPath are deduplicated.\n\nCapability depends on field type, data source, data volume, permissions, and masking. nullCount/nullRate apply to queryable fields. Numeric fields can use distinctCount, minValue, maxValue, sum, avg, zeroCount, negativeCount, topValues, and sampleValues. String/date fields can use distinctCount, minValue, maxValue, topValues, and sampleValues; boolean fields can use distinctCount, topValues, and sampleValues. median, p90, and p95 are accepted for protocol compatibility but currently return unsupported. Check dataProfile.unavailableProperties for the actual result. For unknown-size models, distinctCount/topValues run only after the visible row count is confirmed at 100,000 or less; million-scale models return costLimit. JSON sum/avg values are decimal strings to preserve precision.\n\nUse model fields to identify field paths first. For structure only, use --no-data, which cannot be combined with --data-property. Request only the statistics needed to reduce query cost.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Explore model data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/explore-model-data.md\nWeb: https://docs.succapp.com/ai-building/data/explore-model-data",
-	"cli.cmd.model.fieldProfile.field": "Field physical name, business name, or fieldPath. Repeat to select up to 20 fields; equivalent names are deduplicated by fieldPath.",
-	"cli.cmd.model.fieldProfile.dataProperty": "Data statistic to calculate. Repeat or use comma-separated values. Values: nullCount, nullRate, distinctCount, minValue, maxValue, sum, avg, median, p90, p95, zeroCount, negativeCount, topValues, sampleValues. Without this option, calculates nullCount, nullRate, distinctCount, minValue, and maxValue.",
-	"cli.cmd.model.fieldProfile.noData": "Do not scan field data; return semantic and dimension information only. Cannot be combined with --data-property.",
-	"cli.cmd.model.fieldProfile.topN": "Maximum topValues entries. Defaults to 20; valid range is 1 to 50.",
-	"cli.cmd.model.fieldProfile.sampleLimit": "Maximum sampleValues entries. Defaults to 10; valid range is 1 to 50.",
-	"cli.cmd.model.fieldProfile.dimensionAttributeDepth": "Dimension-attribute expansion depth. Defaults to 1; valid range is 0 to 3.",
+	"cli.cmd.model.fieldProfile.desc": "Inspect model field profiles to understand field semantics, analytical roles, dimension attributes and data distributions.\n\nSupports structure-only inspection and on-demand statistics. Available capabilities depend on field types, data sources, data volume, permissions and masking settings.\n\nData statistics may scan the data source and incur query costs.",
+	"cli.cmd.model.fieldProfile.out": "fields[] contains the selected field profiles, identified by fieldPath. role/inferredRole describe analytical roles; dataProfile holds requested statistics. Missing statistics do not mean 0; unavailable calculations are listed in fields[].dataProfile.unavailableProperties. The dimension, dimensionAttributes, and dataProfile properties below belong to each fields[] item.\n\ndimension describes the associated dimension table and display field; dimensionAttributes[].fieldPath provides queryable attribute paths. topValues returns raw values and does not guarantee display labels.\n\nCapability depends on field type, data source, data volume, permissions, and masking. nullCount/nullRate apply to queryable fields. Numeric fields can use distinctCount, minValue, maxValue, sum, avg, zeroCount, negativeCount, topValues, and sampleValues. String/date fields can use distinctCount, minValue, maxValue, topValues, and sampleValues; boolean fields can use distinctCount, topValues, and sampleValues. median, p90, and p95 are accepted for protocol compatibility but currently return unsupported. Check dataProfile.unavailableProperties for the actual result. For unknown-size models, distinctCount/topValues run only after the visible row count is confirmed at 100,000 or less; million-scale models return costLimit. JSON sum/avg values are decimal strings to preserve precision.",
+	"cli.cmd.model.fieldProfile.field": "Field physical name, business name, or fieldPath. Repeat to select up to 20 fields; equivalent names are deduplicated by fieldPath.\n\nSelect at least one field.",
+	"cli.cmd.model.fieldProfile.dataProperty": "Statistics to compute; repeat or separate with commas. Omit to calculate nullCount, nullRate, distinctCount, minValue and maxValue.",
+	"cli.cmd.model.fieldProfile.noData": "Do not scan field data; return field semantics and dimension attributes only. Cannot be combined with --data-property.",
+	"cli.cmd.model.fieldProfile.topN": "Maximum topValues entries; defaults to 20 when omitted.",
+	"cli.cmd.model.fieldProfile.sampleLimit": "Maximum sampleValues entries; defaults to 10 when omitted.",
+	"cli.cmd.model.fieldProfile.dimensionAttributeDepth": "Dimension attribute expansion depth; defaults to 1 when omitted.",
 	"cli.cmd.model.fields.summary": "List model fields.",
-	"cli.cmd.model.fields.desc": "List semantic model fields.\n\nUse a .tbl path returned by search. Base query field names on the returned field metadata; use field-profile when you need value distributions or statistics.",
+	"cli.cmd.model.fields.desc": "List semantic model fields to identify query fields and their types.\n\nSupports field-property and name filtering without calculating statistical distributions.",
+	"cli.cmd.model.fields.out": "fields[] describes model fields. name is the stable model field name, not a guarantee of a physical column with the same name; computed and linked fields require their model definitions. Use expVarName for expression references, falling back to name when absent. dataType is the type, dim marks dimension keys and hidden marks hidden fields. Confirm physical SQL column names against the actual table instead of copying every model field. No matches returns fields=[] and empty.reason=noMatches.",
 	"cli.cmd.model.fields.all": "Include hidden fields and extended properties.",
-	"cli.cmd.model.fields.contains": "Match fields by name, title, or database field. Plain text uses case-insensitive contains; /pattern/flags uses regex with i, m, and g (compatibility only; no effect).",
+	"cli.cmd.model.fields.contains": "Match model fields by name, title, description, or keywords. Plain text uses case-insensitive contains; /pattern/flags uses regex with i, m, and g (compatibility only; no effect).",
 	"cli.cmd.model.fields.dim": "Only list dimension-key fields.",
 	"cli.cmd.model.fields.measure": "Only list measure fields.",
 	"cli.cmd.model.fields.empty": "No matching fields found.",
 	"cli.cmd.model.indexes.summary": "List model indexes.",
-	"cli.cmd.model.indexes.desc": "List primary keys, business keys, and model indexes.\n\nUse a .tbl path returned by search. Results describe model key and index declarations; they do not verify data uniqueness. This command does not create or rebuild database indexes.",
+	"cli.cmd.model.indexes.desc": "List primary keys, business keys and index declarations for a semantic model.\n\nDeclarations do not verify data uniqueness; the command does not create or rebuild database indexes.",
+	"cli.cmd.model.indexes.out": "indexes[] contains index declarations. kind identifies the key or index category; fields[] lists its fields; unique and enabled describe declared uniqueness and enabled state. No indexes produce indexes=[] and empty.reason=emptyCollection.",
 	"cli.cmd.model.indexes.empty": "This model has no indexes.",
 	"cli.cmd.model.*.select": "Select fields, separated by commas. Can be repeated.",
-	"cli.cmd.model.*.maxRows": "Maximum preview row count.",
-	"cli.cmd.model.*.query": "Query DSL JSON.",
-	"cli.cmd.model.*.queryFile": "Read Query DSL JSON from a file.",
-	"cli.cmd.model.*.stdin": "Read Query DSL JSON from stdin.",
-	"cli.cmd.model.select.summary": "Select rows from one model.",
-	"cli.cmd.model.select.desc": "Select rows from one .tbl model with SuccApp expression filters.\n\nInspect fields first. --where accepts a SuccApp expression, not a complete SQL statement. --max-rows limits preview rows. Use query for aggregation or joins, and export to save CSV.\n\nThe accompanying server defaults to a 100-row preview with a 1000-row cap. Actual behavior depends on the target server and returned truncation information. Use the corresponding export command for full data.",
-	"cli.cmd.model.select.where": "Filter expression, for example STATUS='ACTIVE'.",
+	"cli.cmd.model.*.maxRows": "Maximum preview rows. The matching server defaults to 100 with a maximum of 1000; actual limits depend on the target server.",
+	"cli.cmd.model.*.model": "A .tbl model path returned by model search, e.g. /DEMO/data/tables/customer.tbl.",
+	"cli.cmd.model.select.summary": "Query data from one model on the server.",
+	"cli.cmd.model.select.desc": "Query data from one .tbl model on the server to inspect detail records and check sample data.\n\nUse SuccApp expressions for filtering and sorting. Queries use the model definition saved on the server; they do not read or upload unsynchronized local .tbl content.\n\nReturned results are subject to the target server's preview row limit and cannot establish the complete data set or total counts.",
+	"cli.cmd.model.select.out": "Key JSON output example (common result fields omitted; comments explain fields; actual output is strict JSON):\n    {\n      \"model\": \"/project/data/orders.tbl\",  // Target model path\n      \"result\": {                           // Query result\n        \"fields\": [                         // Field metadata in column order\n          {\n            \"name\": \"id\",                   // Key used in result.rows records\n            \"dataType\": \"string\",           // Data type\n            \"sqlType\": \"VARCHAR\"            // SQL type; optional\n          }\n        ],\n        \"rows\": [                           // Record array; [] when empty\n          {\n            \"id\": \"A001\"                    // Read actual JSON types; distinguish null and \"\"\n          }\n        ],\n        \"rowCount\": 1,                      // Returned rows, not total; if absent, use result.rows.length\n        \"maxRows\": 100,                     // Actual preview cap; optional\n        \"truncated\": false,                 // Truncated by the preview cap; optional\n        \"elapsedMs\": 12,                    // Elapsed milliseconds; optional\n        \"timeoutMs\": 30000                  // Timeout in milliseconds; optional\n      }\n    }\n\nAn absent truncated does not mean false; even false does not remove the query's own row limit.",
+	"cli.cmd.model.select.where": "Filter expression, for example STATUS='ACTIVE'.\n\nUse a SuccApp expression, not a SQL statement. This filters query results; it does not assign model parameters. Use source parameter assignments in model query for parameterized queries.",
 	"cli.cmd.model.select.order": "Sort expression, for example CREATE_TIME desc.",
-	"cli.cmd.model.select.limit": "Maximum returned row count.",
-	"cli.cmd.model.query.summary": "Query models with Query DSL.",
-	"cli.cmd.model.query.desc": "Query one or more .tbl models with Query DSL JSON for aggregation or multi-model joins. This command runs a model query on the target server; it is not used to write model data.\n\nProvide exactly one of --query, --query-file, or --stdin. --max-rows must be an integer of at least 1. Results may be limited in row count and must not be assumed to contain all data.\n\nThe query JSON type is succ.meta.dw.Query in query.d.ts. Before writing a complex query, read the aggregation, multi-model query, and export sections in the guide below and consult the type definition. Check that these resources apply to your CLI and server versions; when offline, use an available matching manual.\n\nThe accompanying server defaults to a 100-row preview with a 1000-row cap. Actual behavior depends on the target server and returned truncation information. Use the corresponding export command for full data.\n\nDocumentation: Explore model data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/explore-model-data.md\nWeb: https://docs.succapp.com/ai-building/data/explore-model-data\n\nType definition: succ.meta.dw.Query\nOnline: https://docs.succapp.com/dev-types/types/meta/file-types/query.d.ts\nLocal: .agents/skills/succapp-docs/dev-types/types/meta/file-types/query.d.ts",
+	"cli.cmd.model.query.summary": "Run complex semantic-layer queries on the server.",
+	"cli.cmd.model.query.desc": "Run complex semantic-layer queries on the server against one or more .tbl models.\n\nSupports detail queries, calculated fields, filtering, sorting, grouping and aggregation, multi-model joins, and source model parameter assignments. Use Query DSL to organize the required query logic, with SuccApp expressions for field calculations and conditions.\n\nModels referenced by path or ID use definitions saved on the server; a query file describes a request, not a local .tbl file to execute.\n\nQueries do not write model data. Returned results are subject to the target server's preview row limit.",
+	"cli.cmd.model.query.out": "Key JSON output example (common result fields omitted; comments explain fields; actual output is strict JSON):\n    {\n      \"result\": {                          // Query result\n        \"fields\": [                        // Field metadata in column order\n          {\n            \"name\": \"id\",                  // Output key; uses alias when specified\n            \"dataType\": \"string\",          // Data type\n            \"sqlType\": \"VARCHAR\"           // SQL type; optional\n          }\n        ],\n        \"rows\": [                          // Record array; [] when empty\n          {\n            \"id\": \"A001\"                   // Read actual JSON types; distinguish null and \"\"\n          }\n        ],\n        \"rowCount\": 1,                     // Returned rows, not total; if absent, use result.rows.length\n        \"maxRows\": 100,                    // Actual preview cap; optional\n        \"truncated\": false,                // Truncated by the preview cap; optional\n        \"elapsedMs\": 12,                   // Elapsed milliseconds; optional\n        \"timeoutMs\": 30000                 // Timeout in milliseconds; optional\n      }\n    }\n\nAn absent truncated does not mean false; even false does not remove the query's own row limit.",
 	"cli.cmd.model.query.empty": "Query succeeded; 0 rows returned.",
+	"cli.cmd.model.query.maxRows": "Maximum preview rows; the matching server defaults to 100 with a maximum of 1000.",
+	"cli.cmd.model.query.input": "Choose exactly one of --query, --query-file and --stdin.\n\nInput uses succ.meta.dw.Query as strict JSON: double-quoted keys and strings, no comments or trailing commas. Field and condition expressions use SuccApp expressions; see the references for guidance. Prefer a file or standard input for complex content.\n\nSee the referenced Query DTS for the full structure, source model parameter assignments and query parameter declarations.\n\nOmitting groupFields with no field marked group:true requests detail rows; setting it to [] requests an overall aggregate.\n\nMinimal input example (replace the model path and ID field with confirmed, accessible values; save as query.json):\n    {\n      \"sources\": [\"/DEMO/data/tables/customer.tbl\"],\n      \"fields\": [{ \"alias\": \"id\", \"exp\": \"ID\" }],\n      \"options\": { \"limit\": 10 }\n    }",
+	"cli.cmd.model.query.query": "Pass a Query DSL JSON object directly.",
+	"cli.cmd.model.query.queryFile": "A UTF-8 Query DSL JSON file.",
+	"cli.cmd.model.query.stdin": "Read Query DSL JSON from standard input.",
 	"cli.cmd.model.export.summary": "Export model query results as CSV.",
-	"cli.cmd.model.export.desc": "Export one model or Query DSL result as CSV.\n\nChoose <model> or one Query DSL input (--query, --query-file, --stdin), and specify a local CSV with --output. --select, --where and --order apply to single-model mode. Overwriting an existing file requires --force. Query conditions, DSL limits and access permissions still apply.\n\nFor the full workflow, consult the guide below and confirm it applies to your CLI and server version.\n\nGuide: Explore model data\nMarkdown: https://docs.succapp.com/guide/dev/ai-building/data/explore-model-data.md\nWeb: https://docs.succapp.com/ai-building/data/explore-model-data",
-	"cli.cmd.model.export.where": "Filter expression for single-model export.",
+	"cli.cmd.model.export.desc": "Export single-model or Query DSL query results to a local CSV file.\n\nSupports single-model field selection, filtering and ordering, as well as aggregate and join queries. Results are subject to query conditions, DSL capabilities and access permissions.\n\nWrites a local file without modifying model data.",
+	"cli.cmd.model.export.out": "Key JSON output example (common result fields omitted; comments explain fields; actual output is strict JSON):\n    {\n      \"model\": \"/project/data/orders.tbl\",  // Single-model mode; DSL mode uses \"query\": true\n      \"output\": \"/work/orders.csv\",         // Absolute local path receiving the CSV content\n      \"size\": 128                           // File size in bytes\n    }\n\nThe current companion server produces UTF-8 CSV without a BOM, using commas and LF. Fields containing commas, quotes or line breaks are quoted, with internal quotes doubled: 中文,\"引号\" becomes \"中文,\"\"引号\"\"\". Null and empty strings may both be empty fields; CSV does not preserve all types. The first row contains result field names. Binary values are length tags, not raw content.",
+	"cli.cmd.model.export.where": "A SuccApp filter expression for single-model exports, not a SQL statement; has no effect in Query DSL mode.",
 	"cli.cmd.model.export.order": "Sort expression for single-model export.",
-	"cli.cmd.model.export.output": "Write CSV output to a local file.",
-	"cli.cmd.model.export.force": "Overwrite the output file if it already exists.",
+	"cli.cmd.model.export.output": "Local CSV output file; overwriting an existing file requires --force.",
+	"cli.cmd.model.export.force": "Allow overwriting an existing local output file.",
 	"cli.cmd.model.export.exportedData": "Exported data to {0}",
-	"cli.cmd.model.*.model": "A .tbl model path returned by model search, e.g. /DEMO/data/tables/customer.tbl.",
+	"cli.cmd.model.export.input": "Choose exactly one input: <model>, --query, --query-file or --stdin. --select, --where and --order apply only in single-model mode.\n\nQuery DSL input uses succ.meta.dw.Query as strict JSON: double-quoted keys and strings, no comments or trailing commas. Prefer a file or standard input for complex content.\nMinimal input example (replace the model path and ID field with confirmed, accessible values; save as query.json):\n    {\n      \"sources\": [\"/DEMO/data/tables/customer.tbl\"],\n      \"fields\": [{ \"alias\": \"id\", \"exp\": \"ID\" }],\n      \"options\": { \"limit\": 10 }\n    }",
+	"cli.cmd.model.export.query": "Pass a Query DSL JSON object directly.",
+	"cli.cmd.model.export.queryFile": "A UTF-8 Query DSL JSON file.",
+	"cli.cmd.model.export.stdin": "Read Query DSL JSON from standard input.",
+	"cli.cmd.model.export.model": "A .tbl model path returned by model search, for example /DEMO/data/tables/customer.tbl.",
+	"cli.cmd.server.schedule.title": "System schedules",
+	"cli.cmd.server.schedule.summary": "Manage system schedules and categories.",
+	"cli.cmd.server.schedule.desc": "Manage system scheduling on the selected server without a local workspace or project argument.",
+	"cli.cmd.server.schedule.*.name": "Match names containing this text.",
+	"cli.cmd.server.schedule.*.enabled": "Only enabled schedules; mutually exclusive with --disabled.",
+	"cli.cmd.server.schedule.*.disabled": "Only disabled schedules; mutually exclusive with --enabled.",
+	"cli.cmd.server.schedule.*.categoryId": "Filter by category id, without selecting category management mode.",
+	"cli.cmd.server.schedule.*.resource": "Absolute path of an existing server resource, resolved to its metadata id.",
+	"cli.cmd.server.schedule.*.state": "Comma-separated states, trimming whitespace and duplicates; do not repeat this flag. UNKNOWN, WAITING, RUNNING, SUCCESS, ERROR, TIMEOUT, SKIP, BLOCK, CANCEL.",
+	"cli.cmd.server.schedule.*.offset": "Offset within matching records.",
+	"cli.cmd.server.schedule.*.limit": "Page size for matching records.",
+	"cli.cmd.server.schedule.*.force": "Confirm deletion; does not bypass server permissions or running-state restrictions.",
+	"cli.cmd.server.schedule.*.retry": "Historical schedule run id; retry failed or blocked tasks.",
+	"cli.cmd.server.schedule.*.ignoreTaskCondition": "Explicitly bypass task conditions, which are honored by default.",
+	"cli.cmd.server.schedule.*.run": "Exact schedule run id, exclusive with --latest.",
+	"cli.cmd.server.schedule.*.latest": "Resolve the latest run once; it is not proof of correlation with the last run request.",
+	"cli.cmd.server.schedule.*.startTime": "startTime >= the specified date-time (for example 2026-10-23 12:34:56.789; milliseconds also accepted). Unzoned strings use the server time zone.",
+	"cli.cmd.server.schedule.*.endTime": "endTime < the specified date-time (for example 2026-10-23 12:34:56.789; milliseconds also accepted); unfinished records are excluded. Unzoned strings use the server time zone.",
+	"cli.cmd.server.schedule.*.minDuration": "Seconds: >= when alone; both min/max use inclusive BETWEEN.",
+	"cli.cmd.server.schedule.*.maxDuration": "Seconds: < when alone; both min/max use inclusive BETWEEN.",
+	"cli.cmd.server.schedule.list.summary": "List system schedules or categories.",
+	"cli.cmd.server.schedule.list.desc": "Find schedules by name, enabled state, category or referenced resource for inspection and execution.\n\nRequires login and system schedule view permission; resource filtering also requires access to the referenced resource.",
+	"cli.cmd.server.schedule.list.out": "schedules contains ScheduleQueryInfo records: current configuration and query metadata, with fields from the latest associated run; categories contains ScheduleCategory records. Configuration may have changed since that run. totalCount is the matching count.\n\nHuman output is a summary; use --json or --pretty-json for all fields. See the complete query and runtime references for identities, counters, result states and time units. Accurate filtering may read all matching data; changing data has no snapshot guarantee. Date-time strings include the server offset.",
+	"cli.cmd.server.schedule.list.category": "Boolean switch to list categories, not a category id. Lists schedules by default; this switch returns the full category list and rejects schedule filters.",
+	"cli.cmd.server.schedule.show.summary": "Inspect a schedule or category.",
+	"cli.cmd.server.schedule.show.desc": "Read the configuration of a schedule or category to inspect or prepare an update.\n\nReading does not run the schedule. Query task configurations with server task list and run records with server schedule history.\n\nRequires login and permission to view the target schedule or its categories.",
+	"cli.cmd.server.schedule.show.out": "schedule is a ScheduleQueryInfo record combining current configuration and the latest associated run; category is a ScheduleCategory record. The configuration is not an execution-time snapshot. Extract it into a JSON file for update; do not submit the result envelope. Missing targets fail. See the extraction example; edit schedule-patch.json and submit it with server schedule update --schedule=./schedule-patch.json --json.\n\nHuman output shows business settings and available task counts, creation/modification information and state. Use --json or --pretty-json for all fields. Date-time strings include the server offset; preserve them when resubmitting.",
+	"cli.cmd.server.schedule.show.schedule": "Schedule id; mutually exclusive with --category. Specify once.",
+	"cli.cmd.server.schedule.show.category": "Schedule category id; mutually exclusive with --schedule.",
+	"cli.cmd.server.schedule.create.summary": "Create a schedule or schedule category.",
+	"cli.cmd.server.schedule.create.desc": "Create one system schedule or schedule category. Add tasks with server task create.\n\nRequires login and system schedule management permission.",
+	"cli.cmd.server.schedule.create.out": "id identifies the saved object; schedule or category contains the complete API object read back after saving. Failures retain confirmed effects, without automatic retries. If enabling fails, the created schedule and confirmed steps are retained.",
+	"cli.cmd.server.schedule.create.input": "UTF-8 JSON object file or - for stdin; choose exactly one of --schedule and --category. Object fields use camelCase API names; enableRetry accepts only true/false or numeric 0/1. Other booleans follow server conversion rules. See the DTS references for fields, types and units.",
+	"cli.cmd.server.schedule.create.schedule": "Requires scheduleName; omit scheduleId. scheduleType supports common/data/sub and defaults to common; enabled defaults to false. For a recurring schedule also configure its scheduleType, cron and other business settings; see ScheduleInfo in the DTS. Add tasks separately with server task create. Set enabled to choose the initial enabled state.",
+	"cli.cmd.server.schedule.create.category": "Requires caption; id is optional (max 32 characters).",
+	"cli.cmd.server.schedule.update.summary": "Patch a schedule or category from JSON.",
+	"cli.cmd.server.schedule.update.desc": "Change scheduling, enabled state and classification, or rename a schedule category.\n\nRequires login and management permission for the target schedule.",
+	"cli.cmd.server.schedule.update.out": "Single results return id and a complete schedule or category. Batch results contain id/status/schedule per target. Confirmed business rejections continue; connection, authentication or uncertain submissions stop processing, leaving remaining targets notStarted. Partial business failure exits 1, invalid input 2, network/authentication 5. There is no cross-schedule transaction or automatic retry.",
+	"cli.cmd.server.schedule.update.input": "UTF-8 JSON object file or - for stdin; choose exactly one of --schedule and --category. Omitted fields stay unchanged. Submit a API-field patch or a complete API object extracted from show/list; do not submit the result envelope. See the DTS references for field definitions. Read/merge/write has no concurrency protection.",
+	"cli.cmd.server.schedule.update.schedule": "A single patch requires scheduleId; also accepts a {\"schedules\":[...]} batch root. IDs must be unique; all targets are checked for existence before per-request server validation and writes. enabled:false disables the schedule rather than toggling its state. Set scheduleStartTime/scheduleEndTime to null to clear the date; omission preserves it.",
+	"cli.cmd.server.schedule.update.category": "Requires id and caption; supports renaming only.",
+	"cli.cmd.server.schedule.run.summary": "Run a complete schedule or retry a run.",
+	"cli.cmd.server.schedule.run.desc": "Execute a complete schedule or retry failed or blocked tasks from a historical run. Use server task run to execute selected tasks.\n\nExecution can change business data. Manual runs bypass schedule timing and conditions but honor task conditions by default. Requests are not retried; success means acceptance only.\n\nRequires login and permission to use the target schedule.",
+	"cli.cmd.server.schedule.run.out": "accepted:true only confirms acceptance; mode is schedule/retry. No new run id is returned. Use history to verify actual runs; --wait is not supported.",
+	"cli.cmd.server.schedule.run.schedule": "Exact schedule id. group schedules and schedules containing workflow/sub/check/schedule task types are unsupported.",
+	"cli.cmd.server.schedule.stop.summary": "Stop a running schedule.",
+	"cli.cmd.server.schedule.stop.desc": "Request cancellation of a running schedule without changing its enabled state.\n\nCompleted task effects are not rolled back, and acceptance does not mean every task has already exited.\n\nRequires login and permission to use the target schedule.",
+	"cli.cmd.server.schedule.stop.out": "accepted confirms cancellation acceptance, not a terminal state.",
+	"cli.cmd.server.schedule.stop.schedule": "Exact schedule id.",
+	"cli.cmd.server.schedule.history.summary": "Query schedule run records.",
+	"cli.cmd.server.schedule.history.desc": "Query schedule run records or select one exact run. Use server task history for task results and server schedule dependencies for dependency snapshots, and server schedule logs/server task logs for logs.\n\nRequires login and permission to view the target schedule.",
+	"cli.cmd.server.schedule.history.out": "runs is an array of ScheduleQueryInfo records; totalCount is the matching total. Each scheduleRunId identifies the selected historical run. Associated current configuration is only available while that run is still the schedule's latest run; older runs may omit it. It is never a historical configuration snapshot. taskCount counts current configured tasks; taskRunCount and result counts belong to that run.\n\n--run/--latest returns at most one record without page metadata. See the complete query and runtime references for all fields and states. Accurate totals may scan all matching pages; live data has no snapshot guarantee. Date-time strings include the server offset.",
+	"cli.cmd.server.schedule.history.run": "Schedule run id, mutually exclusive with --latest. Either run selector rejects --state, --failed, --start-time, --end-time, --min-duration, --max-duration, --offset, --limit and --all.",
+	"cli.cmd.server.schedule.history.latest": "Resolve the latest run once; the same filter and pagination restrictions as --run apply. This does not prove correlation with the last execution request.",
+	"cli.cmd.server.schedule.history.schedule": "Exact schedule id.",
+	"cli.cmd.server.schedule.history.offset": "Record offset in the schedule run list; exclusive with --run/--latest.",
+	"cli.cmd.server.schedule.history.limit": "Page size in the schedule run list; exclusive with --run/--latest.",
+	"cli.cmd.server.schedule.remove.summary": "Delete schedules or schedule categories.",
+	"cli.cmd.server.schedule.remove.desc": "Delete selected system schedules and their tasks, or schedule categories.\n\nExplicit confirmation is required. Child category handling follows server rules. Referenced scripts and models are not deleted.\n\nRequires login and management permission for the target schedules or system schedule categories.",
+	"cli.cmd.server.schedule.remove.out": "ids identifies the requested targets; success and results report removal verification for each target.",
+	"cli.cmd.server.schedule.remove.schedule": "Schedule id; choose exactly one object type. Repeatable for deletion.",
+	"cli.cmd.server.schedule.remove.category": "Schedule category IDs to delete; repeat for multiple categories. Mutually exclusive with --schedule.",
+	"cli.cmd.server.task.title": "Schedule tasks",
+	"cli.cmd.server.task.summary": "Manage tasks and categories within schedules.",
+	"cli.cmd.server.task.desc": "Manage system scheduling on the selected server without a local workspace or project argument.",
+	"cli.cmd.server.task.*.name": "Contains match on associated resource NAME or desc, not task IDs.",
+	"cli.cmd.server.task.*.categoryId": "Match current tasks in this category and its descendants; does not select category directory mode.",
+	"cli.cmd.server.task.*.resource": "Absolute path of an existing server resource, resolved to its metadata id.",
+	"cli.cmd.server.task.*.type": "Task type such as script, etl, afl or kdb. Queries may use the raw type of an existing record.",
+	"cli.cmd.server.task.*.creator": "Creator id.",
+	"cli.cmd.server.task.*.state": "Comma-separated states, trimming whitespace and duplicates; do not repeat this flag. UNKNOWN, WAITING, RUNNING, SUCCESS, ERROR, TIMEOUT, SKIP, BLOCK, CANCEL.",
+	"cli.cmd.server.task.*.priority": "Filter current tasks by effective priority, including category and schedule inheritance.",
+	"cli.cmd.server.task.*.offset": "Record offset within matching tasks or task runs.",
+	"cli.cmd.server.task.*.limit": "Page size for matching tasks or task runs.",
+	"cli.cmd.server.task.*.force": "Confirm deletion; does not bypass server permissions or running-state restrictions.",
+	"cli.cmd.server.task.list.summary": "List system tasks or task categories within a schedule.",
+	"cli.cmd.server.task.list.desc": "Find current tasks or categories.\n\nAccurate totals, filtering and stable sorting may scan all matching pages, using network, CPU and memory; changing data has no snapshot guarantee.\n\nRequires login and view permission.",
+	"cli.cmd.server.task.list.out": "tasks contains TaskQueryInfo records: own configuration, latest run fields and current resource information; categories contains TaskCategory records. Missing inheritable settings do not mean no effective setting exists. schedules contains current ScheduleQueryInfo records associated with this page, deduplicated by scheduleId. totalCount is the matching count.\n\nHuman output is a summary; use --json or --pretty-json for all fields and full paths. See the complete query and runtime references for field meanings. Accurate filtering may read all matching pages; changing data has no snapshot guarantee. Date-time strings include the server offset.",
+	"cli.cmd.server.task.list.schedule": "Exact schedule id; optional for cross-schedule task listing, required in category mode.",
+	"cli.cmd.server.task.list.category": "Boolean switch to list categories, not a category id. Requires --schedule; returns the complete category directory and rejects task filters and pagination.",
+	"cli.cmd.server.task.create.summary": "Add tasks to a schedule or create a category.",
+	"cli.cmd.server.task.create.desc": "Add existing server resources as tasks to one system schedule, or create a task category within it.\n\nThis command does not upload resources or enable the schedule. Adding a resource already in the schedule may reuse its task and update submitted configuration. Read back the task before retrying; verified does not prove a new task was created.\n\nRequires login and permission to use the target schedule, plus access to referenced resources.",
+	"cli.cmd.server.task.create.out": "tasks contains complete task objects read back after saving; categories return id and a complete category. results reports per-task verification; verified confirms a matching target, not necessarily a newly created one. Failures retain confirmed effects, without automatic retry.",
+	"cli.cmd.server.task.create.schedule": "Exact parent schedule id, required.",
+	"cli.cmd.server.task.create.input": "UTF-8 JSON object file or - for stdin; choose exactly one of --task and --category. Object fields use camelCase API names; use true/false or 0/1 for booleans; other values follow server conversion rules. See the DTS references for fields, types and units.",
+	"cli.cmd.server.task.create.task": "Requires a nonempty {\"tasks\":[...]} root. Each item requires taskType and exactly one of resid or resPath (an existing absolute server path); omit taskId. An optional scheduleId must match --schedule. enabled defaults to true. Ordinary resource types are script/etl/afl/kdb; see TASK_TYPE for internal business tasks and system tasks. workflow/sub/check/schedule task types are unsupported.",
+	"cli.cmd.server.task.create.category": "Requires caption; id is optional (max 32 characters). enableTaskConfs defaults to false on create, inheriting ancestor category or schedule settings; true enables this category's own defaults. See the reference for inheritance rules.",
+	"cli.cmd.server.task.update.summary": "Patch tasks or a task category.",
+	"cli.cmd.server.task.update.desc": "Update tasks in one schedule, or change a task category name, parent, ordering and default execution settings.\n\nRequires login and permission to use the target schedule.",
+	"cli.cmd.server.task.update.out": "tasks contains complete task objects read back after saving, with per-task verification in results; category updates return id and a complete category. Failures retain confirmed effects, without automatic retry.",
+	"cli.cmd.server.task.update.schedule": "Exact parent schedule id, required.",
+	"cli.cmd.server.task.update.input": "UTF-8 JSON object file or - for stdin; choose exactly one of --task and --category. Omitted fields stay unchanged. Submit a API-field patch or a complete API object extracted from show/list; do not submit the result envelope. Read/merge/write has no version protection. See the DTS references for field definitions.",
+	"cli.cmd.server.task.update.task": "Requires a nonempty {\"tasks\":[...]} root. Each item requires taskId. Resource, taskType and parent schedule are immutable; workflow/sub/check/schedule task types cannot be updated. priority:null and timeout:null restore inheritance.",
+	"cli.cmd.server.task.update.category": "Requires id; omitted fields stay unchanged. Clear priority/timeout with null, conditions and execution time restrictions with empty strings, and retryStrategies with an empty array. Category updates maintain inheritance sources for affected descendants. See the reference for inheritance rules.",
+	"cli.cmd.server.task.remove.summary": "Remove tasks or categories from a schedule.",
+	"cli.cmd.server.task.remove.desc": "Remove selected tasks, or delete task categories and descendants according to server rules.\n\nExplicit confirmation is required. All targets must belong to the schedule. Referenced resources are not deleted.\n\nRequires login and permission to use the target schedule.",
+	"cli.cmd.server.task.remove.out": "ids identifies the requested targets; success and results report removal verification for each target.",
+	"cli.cmd.server.task.remove.schedule": "Exact schedule id.",
+	"cli.cmd.server.task.remove.category": "Task category IDs to delete; repeat for multiple categories. Must belong to --schedule and are mutually exclusive with --task.",
+	"cli.cmd.server.task.remove.task": "Task IDs to remove from the schedule; repeat for multiple tasks. Mutually exclusive with --category; referenced resources are retained.",
+	"cli.out.schedule.schedules": "Schedules",
+	"cli.out.schedule.tasks": "Tasks",
+	"cli.out.schedule.categories": "Categories",
+	"cli.out.schedule.config": "Configuration",
+	"cli.out.schedule.runs": "Runs",
+	"cli.out.schedule.id": "id",
+	"cli.out.schedule.ids": "Target IDs",
+	"cli.out.schedule.objectType": "Object type",
+	"cli.out.schedule.accepted": "Request accepted",
+	"cli.out.schedule.mode": "Execution mode",
+	"cli.out.schedule.success": "Operation confirmed",
+	"cli.out.schedule.scheduleId": "Schedule",
+	"cli.out.schedule.offset": "Offset",
+	"cli.out.schedule.limit": "Page size",
+	"cli.out.schedule.totalCount": "Total count",
+	"cli.out.schedule.counts": "Counts",
+	"cli.out.schedule.taskPage": "Task page scope",
+	"cli.out.schedule.taskRun": "Task run state",
+	"cli.out.schedule.logs": "Schedule logs",
+	"cli.out.schedule.dependencies": "Dependency graph",
+	"cli.out.schedule.field": "Field",
+	"cli.out.schedule.value": "Value",
+	"cli.out.schedule.empty": "No matching records, 0 total",
+	"cli.ref.scheduleConfig": "Schedule configuration fields",
+	"cli.ref.scheduleTaskConfig": "Task configuration fields",
+	"cli.ref.scheduleTaskCategory": "Native task category fields",
+	"cli.out.schedule.name": "Name",
+	"cli.out.schedule.type": "Type",
+	"cli.out.schedule.enabled": "Enabled",
+	"cli.out.schedule.priority": "Priority",
+	"cli.out.schedule.categoryId": "Category",
+	"cli.out.schedule.parentId": "Parent category",
+	"cli.out.schedule.order": "Order",
+	"cli.out.schedule.independent": "Independent task defaults",
+	"cli.out.schedule.resourceId": "Resource id",
+	"cli.out.schedule.scheduleRunId": "Schedule run id",
+	"cli.out.schedule.scheduleName": "Schedule name",
+	"cli.out.schedule.taskId": "Task id",
+	"cli.out.schedule.taskRunId": "Task run id",
+	"cli.out.schedule.runState": "Run state",
+	"cli.out.schedule.startTime": "Start time",
+	"cli.out.schedule.endTime": "End time",
+	"cli.out.schedule.step": "Step",
+	"cli.out.schedule.status": "Confirmation",
+	"cli.out.schedule.status.success": "Confirmed",
+	"cli.out.schedule.status.failed": "Failed",
+	"cli.out.schedule.status.unknown": "Result unknown",
+	"cli.input.scheduleConfig": "scheduling JSON configuration",
+	"cli.input.scheduleObject": "scheduling target",
+	"cli.ref.scheduleCategory": "Native schedule category fields",
+	"cli.cmd.server.schedule.*.failed": "Equivalent to --state=ERROR,TIMEOUT; mutually exclusive with --state. BLOCK is separate.",
+	"cli.cmd.server.schedule.*.all": "Traverse all matching pages; exclusive with explicit --offset/--limit.",
+	"cli.cmd.server.schedule.*.toTime": "Log upper bound in Date-time string or milliseconds, logTime <; filtered by the server, which interprets unzoned strings in its own time zone.",
+	"cli.cmd.server.schedule.*.keyword": "Match log body or separate details locally; human output still shows the body only.",
+	"cli.cmd.server.schedule.*.level": "Exact log level: OFF=0, FATAL=1, ERROR=2, WARN=3, IMPT=4, INFO=5, DEBUG=6, TRACE=7. Filtered locally.",
+	"cli.cmd.server.schedule.*.logType": "Exact numeric log type, filtered locally. First query without --log-type using --json, inspect logs[].logType, then reuse the desired value. This is a log category, not the severity selected by --level.",
+	"cli.cmd.server.schedule.*.tail": "Keep the last N matching logs after reading all logs from the lower bound; not server pagination.",
+	"cli.cmd.server.schedule.*.groupBy": "One explicit grouping field. Totals and groups cover the same filtered set; see output for supported modes.",
+	"cli.cmd.server.task.*.failed": "Equivalent to --state=ERROR,TIMEOUT; mutually exclusive with --state. BLOCK is separate.",
+	"cli.cmd.server.task.*.all": "Traverse all matching pages; exclusive with explicit --offset/--limit.",
+	"cli.cmd.server.task.*.startTime": "startTime >= the specified date-time (for example 2026-10-23 12:34:56.789; milliseconds also accepted). Unzoned strings use the server time zone.",
+	"cli.cmd.server.task.*.endTime": "endTime < the specified date-time (for example 2026-10-23 12:34:56.789; milliseconds also accepted); unfinished records are excluded. Unzoned strings use the server time zone.",
+	"cli.cmd.server.task.*.minDuration": "Seconds: >= when alone; both min/max use inclusive BETWEEN.",
+	"cli.cmd.server.task.*.maxDuration": "Seconds: < when alone; both min/max use inclusive BETWEEN.",
+	"cli.cmd.server.task.*.fromTime": "Date-time string or milliseconds; lastUpdateTime strictly > this value. Zero means no update lower bound.",
+	"cli.cmd.server.task.*.toTime": "Log upper bound in Date-time string or milliseconds, logTime <; filtered by the server, which interprets unzoned strings in its own time zone.",
+	"cli.cmd.server.task.*.keyword": "Match log body or separate details locally; human output still shows the body only.",
+	"cli.cmd.server.task.*.level": "Exact log level: OFF=0, FATAL=1, ERROR=2, WARN=3, IMPT=4, INFO=5, DEBUG=6, TRACE=7. Filtered locally.",
+	"cli.cmd.server.task.*.logType": "Exact numeric log type, filtered locally. First query without --log-type using --json, inspect logs[].logType, then reuse the desired value. This is a log category, not the severity selected by --level.",
+	"cli.cmd.server.task.*.tail": "Keep the last N matching logs after reading all logs from the lower bound; not server pagination.",
+	"cli.cmd.server.task.*.groupBy": "One explicit grouping field. Totals and groups cover the same filtered set; see output for supported modes.",
+	"cli.cmd.server.task.*.run": "Exact schedule run id, exclusive with --latest.",
+	"cli.cmd.server.task.*.latest": "Resolve the latest run once; it is not proof of correlation with the last run request.",
+	"cli.cmd.server.task.*.schedule": "Parent schedule id; required for categories and run/latest scope.",
+	"cli.cmd.server.task.*.task": "Task configuration IDs; repeat to select multiple tasks.",
+	"cli.cmd.server.task.*.parentDir": "Match the exact resource parent directory.",
+	"cli.cmd.server.task.*.rootDir": "Resource directory prefix, including descendants using server prefix rules.",
+	"cli.cmd.server.task.*.order": "Sort direction, requires --order-by.",
+	"cli.cmd.server.task.*.orderBy": "Sort tasks by taskId, createTime, modifiedTime, priority, resName, taskType, startTime, endTime or runState; unique id breaks ties.",
+	"cli.cmd.server.task.*.taskRun": "Exact task run id, not a task configuration id.",
+	"cli.cmd.server.task.*.withInherited": "Merge effective defaults into task and return sources; resubmission freezes inherited values.",
+	"cli.cmd.server.schedule.enable.summary": "Enable automatic scheduling.",
+	"cli.cmd.server.schedule.enable.desc": "Enable future automatic scheduling for selected schedules without running them immediately. Prechecks all targets, submits one batch, then verifies state by reading back; no cross-schedule transaction.\n\nRequires login and permissions for the target scope.",
+	"cli.cmd.server.schedule.disable.summary": "Disable automatic scheduling.",
+	"cli.cmd.server.schedule.disable.desc": "Disable future automatic scheduling for selected schedules; existing runs continue.\n\nRequires login and permissions for the target scope.",
+	"cli.cmd.server.schedule.count.summary": "Count schedules, categories or historical runs.",
+	"cli.cmd.server.schedule.count.desc": "Count schedules by default, or count the category directory or run history of one schedule.\n\nRequires login and permissions for the target scope.\n\nAccurate totals, filtering and stable sorting may scan all matching pages, using network, CPU and memory; changing data has no snapshot guarantee.",
+	"cli.cmd.server.task.count.summary": "Count current tasks, categories or task runs.",
+	"cli.cmd.server.task.count.desc": "Count current tasks, categories or tasks in one schedule run. For cross-run history, use totalCount from task history.\n\nRequires login and permissions for the target scope.\n\nAccurate totals, filtering and stable sorting may scan all matching pages, using network, CPU and memory; changing data has no snapshot guarantee.",
+	"cli.cmd.server.task.show.summary": "Inspect own or inherited task settings.",
+	"cli.cmd.server.task.show.desc": "Read own task settings and read-only server information for inspection and update preparation, optionally merging category and schedule defaults with their sources.\n\nRequires login and permissions for the target scope.",
+	"cli.cmd.server.task.history.summary": "Query task results from selected or bounded multiple runs.",
+	"cli.cmd.server.task.history.desc": "Query task results in a selected run or bounded cross-run history for specified tasks.\n\nRequires login and permissions for the target scope.\n\nAccurate totals, filtering and stable sorting may scan all matching pages, using network, CPU and memory; changing data has no snapshot guarantee.",
+	"cli.cmd.server.schedule.logs.summary": "Read logs of one schedule run.",
+	"cli.cmd.server.schedule.logs.desc": "Read logs of a selected schedule run.\n\nRequires login and permissions for the target scope.",
+	"cli.cmd.server.task.logs.summary": "Read logs of one task run.",
+	"cli.cmd.server.task.logs.desc": "Read logs of a selected task run.\n\nRequires login and permissions for the target scope.",
+	"cli.cmd.server.schedule.enable.schedule": "Schedule IDs; repeat for multiple targets. Deduplicated; all targets must exist before any write.",
+	"cli.cmd.server.schedule.enable.out": "ids, enabled, success and per-target results; status=verified means read-back state is correct, not proof of a new transition. Unknown results are not retried.",
+	"cli.cmd.server.schedule.disable.schedule": "Schedule IDs; repeat for multiple targets. Deduplicated; all targets must exist before any write.",
+	"cli.cmd.server.schedule.disable.out": "ids, enabled, success and per-target results; status=verified means read-back state is correct, not proof of a new transition. Unknown results are not retried.",
+	"cli.cmd.server.schedule.count.history": "Explicitly count run history; requires --schedule and rejects configuration-only filters.",
+	"cli.cmd.server.schedule.count.category": "Count schedule categories only; incompatible with other filters.",
+	"cli.cmd.server.task.count.schedule": "Parent schedule id; current task counts may omit it to span schedules. Required with --run/--latest to count that run, or with --category. Time and duration filters apply only to run counts; --resource/--type/--creator apply only to current task counts. Category counts reject task and run filters.",
+	"cli.cmd.server.task.count.priority": "Filter current tasks by effective priority; run counts use the priority saved on each run record.",
+	"cli.cmd.server.task.count.categoryId": "For current tasks, match this category and descendants. Run counts match the category saved on each run record, without recalculating current category ancestry.",
+	"cli.cmd.server.task.count.category": "Count task categories; requires --schedule and rejects task/run filters.",
+	"cli.cmd.server.schedule.count.out": "totalCount counts all matches. --group-by: configuration category/type/enabled; history state; categories cannot be grouped. groups is an array of {value,count}; null is the unassigned group.",
+	"cli.cmd.server.task.count.out": "totalCount counts all matches; --group-by=category/priority/state groups the same set. Current-task priority groups use effective priority; run groups use saved values. Category directory counts cannot be grouped. Null groups retain unset values.",
+	"cli.cmd.server.task.show.out": "task is a TaskQueryInfo record combining own settings, latest run fields and current resource information; schedules contains associated ScheduleQueryInfo records. For updates, wrap task in {\"tasks\":[task]} and pass it to task update --task with --schedule set to the parent schedule. Read-only query fields are ignored when saving.\n\nOrdinary show returns own settings. --with-inherited includes effective values and sources; resubmitting these values turns inherited settings into explicit overrides. Retry times are in seconds. Human output shows the task name, identity, path and business settings; use --json or --pretty-json for all fields. Date-time strings include the server offset.",
+	"cli.cmd.server.task.show.schedule": "Optional parent schedule id; validates task membership when supplied. Otherwise finds the task by its id.",
+	"cli.cmd.server.task.show.task": "One exact task configuration id, not a task run id.",
+	"cli.cmd.server.task.history.out": "runs is always an array of TaskQueryInfo records with totalCount; each item includes scheduleId/scheduleRunId/taskId/taskRunId and available task names and resource paths. --task-run returns one item without runPage. List queries return scheduleId and runPage (offset/limit/truncated), including empty --latest results.\n\nCross-run and empty results omit the root scheduleRunId; use each item's scheduleRunId. schedules contains the current schedule information associated with this page, deduplicated by scheduleId, or [] when empty; it is not an execution-time snapshot. Human output shows task names, state and elapsed seconds. Date-time strings include the server offset.",
+	"cli.cmd.server.schedule.logs.out": "A single query returns logs (an array), totalCount (matches before --tail) and truncated (whether --tail omitted rows). Each log is a ScheduleLog record preserving all fields, including logContent2; logTime is a Unix timestamp in milliseconds. Human output shows UTC time, level and the original body; use --json or --pretty-json for separate details. No logs does not imply success.\n\nWith --follow --json, stdout contains one JSON object per line with kind=result and event=snapshot/log/end. State is in snapshot (plan run information); each log event carries one entry in log, not a logs array. Events include an increasing sequence and fixed scheduleId/scheduleRunId. The end event includes the final snapshot, reason=terminal/timeout/interrupted and logCompleteness=unknown. Terminal observation exits 0, timeout 124 and interruption 130; request failures produce kind=error. --quiet preserves these result events.",
+	"cli.cmd.server.task.logs.out": "A single query returns logs (an array), totalCount (matches before --tail) and truncated (whether --tail omitted rows). Each log is a ScheduleTaskLog record preserving all fields, including logContent2; logTime is a Unix timestamp in milliseconds. Human output shows UTC time, level and the original body; use --json or --pretty-json for separate details. No logs does not imply success.\n\nWith --follow --json, stdout contains one JSON object per line with kind=result and event=snapshot/log/end. Task state is in snapshot.run (TaskRunStateInfo), with snapshot.terminal indicating completion; each log event carries one entry in log, not a logs array. Events include an increasing sequence and fixed scheduleId/scheduleRunId/taskRunId. The end event includes the final snapshot, reason=terminal/timeout/interrupted and logCompleteness=unknown. Terminal observation exits 0, timeout 124 and interruption 130; request failures produce kind=error. --quiet preserves these result events.",
+	"cli.cmd.server.task.logs.schedule": "Parent schedule id; locating logs by task configuration requires --task and --run/--latest together. Mutually exclusive with --task-run.",
+	"cli.cmd.server.task.logs.run": "Schedule run id; without --task-run, specify exactly one of --run and --latest.",
+	"cli.cmd.server.task.logs.task": "One task configuration id within the selected schedule run.",
+	"cli.cmd.server.task.logs.taskRun": "Task run id alone, exclusive with schedule/run/latest/task; parent identities are resolved automatically.",
+	"cli.out.schedule.noLogs": "No logs yet",
+	"cli.out.schedule.logDetails": "Separate details: --pretty-json",
+	"cli.out.schedule.fullValues": "Full values: --pretty-json",
+	"cli.out.schedule.unknown": "Unknown",
+	"cli.out.schedule.source": "Source",
+	"cli.out.schedule.runPage": "Run page",
+	"cli.out.schedule.results": "Results",
+	"cli.out.schedule.groups": "Groups",
+	"cli.out.schedule.count": "Count",
+	"cli.out.schedule.resourcePath": "Resource path",
+	"cli.out.schedule.elapsedMs": "Duration",
+	"cli.out.schedule.pageSummary": "{count} records on this page, {total} matching records.",
+	"cli.out.schedule.status.verified": "Verified",
+	"cli.cmd.server.schedule.count.schedule": "Schedule id for --history counts; configuration counts do not accept this flag.",
+	"cli.cmd.server.schedule.logs.run": "Schedule run id; specify exactly one of --run and --latest.",
+	"cli.cmd.server.schedule.logs.latest": "Resolve the latest run once, instead of --run. A one-time read without a run returns empty logs; this does not prove correlation with the last execution request.",
+	"cli.cmd.server.schedule.logs.schedule": "Parent schedule id for these logs, required.",
+	"cli.out.schedule.default": "Default",
+	"cli.cmd.server.task.run.summary": "Submit selected schedule tasks.",
+	"cli.cmd.server.task.run.desc": "Submit one or more existing tasks within a schedule.\n\nExecution can modify business data, ignores schedule conditions and honors task conditions by default. Requests are not retried.\n\nRequires login, schedule use permission and applicable resource permissions.",
+	"cli.cmd.server.task.run.out": "accepted confirms acceptance only; mode=tasks and taskIds identify the request. No new run id is returned; use history to locate a run before status/logs. latest cannot prove correlation.",
+	"cli.cmd.server.task.run.schedule": "Exact parent schedule id, required. group schedules and schedules containing workflow/sub/check/schedule task types are unsupported.",
+	"cli.cmd.server.task.run.task": "Task configuration IDs; repeat to select multiple tasks. All tasks must belong to the selected schedule.",
+	"cli.cmd.server.task.run.includeDepends": "Include dependencies of the selected tasks.",
+	"cli.cmd.server.task.run.includeImpacts": "Include tasks impacted by the selected tasks.",
+	"cli.cmd.server.task.run.excludeSelected": "Exclude selected tasks themselves; requires dependencies or impacts.",
+	"cli.cmd.server.task.run.ignoreTaskCondition": "Explicitly bypass task conditions, which are honored by default.",
+	"cli.cmd.server.schedule.status.summary": "Inspect the latest or a selected run of one schedule.",
+	"cli.cmd.server.schedule.status.desc": "Inspect the latest or a selected schedule run, including state, server duration and task counts.\n\nRequires login and schedule view permission.",
+	"cli.cmd.server.schedule.status.out": "A single query returns run (a ScheduleQueryInfo record), counts.total/byState, elapsedMs and terminal. See the query, runtime and result-state references for all nested fields. counts describes observed task records; when no run exists, run/counts/elapsedMs are null. elapsedMs is milliseconds calculated from server timestamps, or null when unavailable; human output shows seconds with an s suffix.\n\nWith --watch --json, stdout contains one JSON object per line with kind=result and event=snapshot/end. Snapshot events carry the status in snapshot. Events have an increasing sequence and fixed scheduleId/scheduleRunId. The end event includes the final snapshot and reason=terminal/timeout/interrupted. Terminal observation exits 0 even for a failed business run; timeout exits 124, interruption 130. Request failures produce kind=error. Date-time strings in run include the server offset.",
+	"cli.cmd.server.schedule.*.follow": "Follow a fixed run; conflicts with --pretty-json. Re-read the original time range, deduplicating logId; this costs network and memory. After terminal, perform two quiet reads; no EOF guarantee, logCompleteness=unknown.",
+	"cli.cmd.server.schedule.*.interval": "Observation interval in milliseconds; --follow only.",
+	"cli.cmd.server.schedule.*.timeout": "Observation deadline in milliseconds; 0 means unlimited. Includes requests and final reads; --follow only. Timeout exits 124; interruption exits 130.",
+	"cli.cmd.server.task.*.follow": "Follow a fixed run; conflicts with --pretty-json. Re-read the original time range, deduplicating logId; this costs network and memory. After terminal, perform two quiet reads; no EOF guarantee, logCompleteness=unknown. Task follow conservatively waits for the parent run to end to avoid treating a retry as terminal.",
+	"cli.cmd.server.task.*.interval": "Observation interval in milliseconds; --follow only.",
+	"cli.cmd.server.task.*.timeout": "Observation deadline in milliseconds; 0 means unlimited. Includes requests and final reads; --follow only. Timeout exits 124; interruption exits 130.",
+	"cli.cmd.server.schedule.status.interval": "Observation interval in milliseconds; --watch only.",
+	"cli.cmd.server.schedule.status.timeout": "Observation deadline in milliseconds; 0 means unlimited. Includes requests and final reads; --watch only. Timeout exits 124; interruption exits 130.",
+	"cli.cmd.server.schedule.status.watch": "Observe a fixed run; conflicts with --pretty-json. JSON emits NDJSON business events on stdout. Requires an existing run, fixes the first resolved identity and finishes when terminal state is confirmed. Counts scan all task-run pages on each refresh.",
+	"cli.out.schedule.observationEnd": "Observation ended: {reason}",
+	"cli.out.schedule.run": "Run",
+	"cli.out.schedule.snapshot": "Snapshot",
+	"cli.out.schedule.terminal": "Confirmed terminal",
+	"cli.cmd.server.schedule.status.schedule": "Exact parent schedule id, required. By default, reads the last run recorded on the schedule; schedules without run records have empty state.",
+	"cli.cmd.server.task.history.orderBy": "Sort task runs by taskRunId, taskRunOrder, startTime, endTime, priority, runState, resName, errorTimes or taskId; unique id breaks ties.",
+	"cli.cmd.server.task.history.priority": "Match the priority saved on each task run record; current configuration and inheritance are not recalculated.",
+	"cli.cmd.server.task.history.categoryId": "Exact category id saved on each run record; includes deleted categories, does not recalculate current category ancestry.",
+	"cli.out.schedule.status.notStarted": "Not started",
+	"cli.cmd.server.task.history.schedule": "Parent schedule id; required for run/latest and bounded cross-run queries. Optional with exact task-run; when supplied it must match run membership.\nModes: single-run lists require --schedule and --run/--latest. Bounded cross-run queries omit run/latest and require --schedule, at least one --task, and both --start-time/--end-time with end greater than start. Exact --task-run only accepts optional --schedule and --run to check membership; filters, pagination and --latest are rejected.",
+	"cli.cmd.server.schedule.logs.fromTime": "Inclusive log time lower bound as a standard date-time string or milliseconds: logTime >=. Time bounds are applied by the server; unzoned strings use its time zone. Other filters are applied locally, and --tail does not reduce server reads.",
+	"cli.cmd.server.task.logs.fromTime": "Inclusive log time lower bound as a standard date-time string or milliseconds: logTime >=. Time bounds are applied by the server; unzoned strings use its time zone. Other filters are applied locally, and --tail does not reduce server reads.",
+	"cli.cmd.server.schedule.dependencies.summary": "Query current task dependencies or a historical snapshot.",
+	"cli.cmd.server.schedule.dependencies.desc": "Query the complete task dependency graph of one schedule, using current configuration or a snapshot saved during execution.\n\nRead-only; requires login and schedule view permission. Historical relationships come from the saved snapshot; task descriptions are joined from the same run records, as in the WebUI. Reading and displaying large graphs requires additional network and memory.",
+	"cli.cmd.server.schedule.dependencies.schedule": "Exact parent schedule id, required. Reads current configuration when --run/--latest is omitted; use --run or --latest for a historical snapshot.",
+	"cli.cmd.server.schedule.dependencies.run": "Exact historical schedule run id; must belong to the selected schedule. Exclusive with --latest.",
+	"cli.cmd.server.schedule.dependencies.latest": "Read the snapshot saved for the latest run. Fails when no run exists; never falls back to the current graph.",
+	"cli.cmd.server.schedule.dependencies.out": "scheduleId identifies the schedule; dependencySource is current/historical. Historical results also include scheduleRunId. dependencies is always an array of taskId, dependsOn, resourceId and resourcePath, with name and removedDependsOn when available. Current graphs include resource IDs and full resource paths. Historical graphs join task records from the same run by taskId: resourceId comes from the run record; name and resourcePath use the returned task descriptions. Names and paths are joined from current resources, may change after renaming or moving, and are not execution-time snapshots. Snapshot nodes remain even when run records or resources are missing; unavailable resource fields are null, and human output falls back to task IDs when names are missing. Tasks in dependsOn must finish first.\nname resolves captions using server language bundles and custom overrides; captions without a translation stay unchanged, and system backup tasks without a caption use the default title. Human output starts at downstream endpoints and recursively expands prerequisites, including isolated tasks. (*) marks a repeated subtree, not repeated execution; (cycle) marks a cycle and (missing) a referenced task absent from the graph. Removed dependencies are listed separately; JSON preserves the full relationships.\nAn empty historical array cannot distinguish no tasks from an unavailable snapshot. It does not establish snapshot completeness and never causes fallback to current configuration. Task filtering, pagination and cross-run merging are not supported.",
+	"cli.out.schedule.dependencySource": "Dependency source",
+	"cli.out.schedule.dependenciesCurrent": "Current configuration",
+	"cli.out.schedule.dependenciesHistorical": "Historical snapshot",
+	"cli.out.schedule.dependenciesEmpty": "No dependency records returned.",
+	"cli.out.schedule.dependenciesDirection": "Direction: children are prerequisites of their parent task and must finish first.",
+	"cli.out.schedule.dependenciesRepeated": "(*) This dependency subtree was expanded above; it does not mean repeated execution.",
+	"cli.out.schedule.dependenciesCycle": "(cycle) A cycle in the current path was not expanded.",
+	"cli.out.schedule.dependenciesMissing": "(missing) The referenced task is absent from the returned graph.",
+	"cli.out.schedule.dependenciesRemoved": "Removed dependencies (not active relationships):",
+	"cli.out.schedule.schedule": "Schedule",
+	"cli.out.schedule.task": "Task",
+	"cli.out.schedule.category": "Category",
+	"cli.out.schedule.scheduleStartTime": "Active from",
+	"cli.out.schedule.scheduleEndTime": "Active until",
+	"cli.ref.scheduleOperations": "Schedule workflows: creation, updates and verification",
+	"cli.ref.scheduleQuery": "Complete schedule query record",
+	"cli.ref.taskQuery": "Complete task query record",
+	"cli.ref.scheduleRuntime": "Schedule runtime, counts and times",
+	"cli.ref.taskRuntime": "Task runtime and dependencies",
+	"cli.ref.scheduleRunState": "Schedule and task result states",
+	"cli.ref.scheduleLog": "Schedule log fields",
+	"cli.ref.taskLog": "Task log fields",
+	"cli.ref.taskRunState": "Task run state record",
 	"vs.cmd.title.addServer": "Add Server",
 	"vs.cmd.title.useServer": "Use Server",
-	"vs.cmd.title.loginServer": "Login Server",
-	"vs.cmd.title.disconnectServer": "Disconnect Server",
+	"vs.cmd.title.loginServer": "Log in to Server",
+	"vs.cmd.title.disconnectServer": "Disconnect from Server",
 	"vs.cmd.title.removeServer": "Remove Server",
 	"vs.cmd.title.setServerUrl": "Set Server URL",
 	"vs.cmd.title.openServerConfig": "Open Server Config",
@@ -1629,7 +2780,7 @@
 	"vs.cmd.title.views.mergeChange": "Merge Changes",
 	"vs.cmd.title.views.acceptServerChange": "Use Server Version",
 	"vs.cmd.title.views.restoreLocalChange": "Restore Local Version",
+	"vs.cmd.title.views.resetProjectFromServer": "Reset Local Project from Server",
 	"vs.cmd.title.openServerSource": "Open Server Source",
-	"vs.cmd.title.showServerFileHistory": "Show Server File History",
-	"vs.cmd.title.views.resetProjectFromServer": "Reset Local Project from Server"
+	"vs.cmd.title.showServerFileHistory": "Show Server File History"
 }