@withbuddi/buddi 0.1.0-pre.27 → 0.1.0-pre.29

package/node_modules/@buddi/cli/dist/commands.js

@@ -60,6 +60,7 @@ export const COMMANDS = [
         exitCodes: [
             { code: 3, meaning: 'The run stopped for an approval, the agent does not exist or cannot run, or the database is not reachable.' },
         ],
+        next: 'When the run stops for an approval: approve it on the dashboard or Telegram, then `buddi ask --resume <conversation id>` finishes it.',
         applies: 'both',
         json: '{ text, runId, conversationId, artifacts: [{ id, filename }] }, plus pendingActionId when the run stopped for an approval. ' +
             'With no question as an argument and stdin not a terminal, stdin is the question.',
@@ -83,14 +84,17 @@ export const COMMANDS = [
         name: 'dashboard',
         group: 'Everyday',
         summary: 'Open the dashboard with a sign-in link that is good for five minutes.',
-        usage: 'buddi dashboard [--token | --off | --install-app | --uninstall-app]',
+        usage: 'buddi dashboard [--token | --off | --install-app | --uninstall-app | --unlock | --remove-pin]',
         flags: [
             { flag: '--token', meaning: 'Print only the five-minute ticket.' },
             { flag: '--off', meaning: 'Say how to turn the dashboard off.' },
             { flag: '--install-app', meaning: 'Put a double-clickable Buddi Dashboard in ~/Applications.' },
             { flag: '--uninstall-app', meaning: 'Remove it.' },
+            { flag: '--unlock', meaning: 'Forgot the lock screen PIN: open the dashboard past it once, with a five-minute link (and one for your other devices when the tailnet address is set).' },
+            { flag: '--remove-pin', meaning: 'Remove the lock screen PIN on every device. Set a new one in Settings → Lock screen.' },
         ],
         example: 'buddi dashboard --token',
+        next: 'With --off: put `BUDDI_WEB=0` in .env, then `buddi service restart`.',
         applies: 'both',
     },
     /* ------------------------------------------------------------------ Agents */
@@ -120,19 +124,47 @@ export const COMMANDS = [
     {
         name: 'agents set',
         group: 'Agents',
-        summary: "Change an agent's account, model, turn budget or language.",
-        usage: 'buddi agents set <handle> [--account <id>] [--model <id>] [--max-turns <n>] [--language mirror|en|fr]',
+        summary: "Change an agent's account, model, step budget, language or when its chats start fresh.",
+        usage: 'buddi agents set <handle> [--account <id>] [--model <id>] [--max-turns <n>] [--language mirror|en|fr] [--idle-rollover 3h|1d|1w|never]',
         flags: [
-            { flag: '--account <id>', meaning: 'Run it on this provider account, from the dashboard\'s Providers page.' },
+            { flag: '--account <id>', meaning: 'Run it on this model account, added on the dashboard under Settings → Model accounts. buddi accounts prints every account with its id.' },
             { flag: '--provider anthropic|openai', meaning: 'Where its conversations go, on an agent without an account.' },
             { flag: '--model <id>', meaning: "Checked against that provider's models." },
             { flag: '--max-turns <n>', meaning: 'How many steps one run may take.' },
             { flag: '--language mirror|en|fr', meaning: 'Which language it answers in.' },
+            { flag: '--idle-rollover 3h|1d|1w|never', meaning: 'How long a chat may sit idle before your next message starts a fresh one.' },
         ],
         example: 'buddi agents set ledger --max-turns 20',
         exitCodes: [{ code: 3, meaning: 'No agent has that handle or id.' }],
+        next: '`buddi service restart`, so the running service, Telegram and the scheduler load the change; then `buddi agents test <handle>` to check it.',
         applies: 'both',
     },
+    {
+        name: 'accounts',
+        group: 'Agents',
+        summary: 'List the model accounts: id, provider, default model, whether each can run now, and the agents on it.',
+        usage: 'buddi accounts [list] [--json]',
+        flags: [JSON_FLAG],
+        example: 'buddi accounts',
+        exitCodes: [NEEDS_DATABASE],
+        next: 'To put an agent on one: `buddi agents set <handle> --account <id>`.',
+        applies: 'both',
+        json: '[{ id, label, kind, provider, auth, defaultModel, enabled, configured, state, ' +
+            'rateLimit: { scope, until, limit, unit, freeTier, provider, model } | null, agents: [{ id, handle, model }] }]. ' +
+            'state is ready, rate-limited, needs-credential, needs-sign-in or disabled; rateLimit is set only while rate-limited, and scope is day (a daily quota used up) or burst. Never a key or a token.',
+    },
+    {
+        name: 'accounts show',
+        group: 'Agents',
+        summary: 'Show one model account in full: its address, default model, state, agents and last connection test.',
+        usage: 'buddi accounts show <id> [--json]',
+        flags: [JSON_FLAG],
+        example: 'buddi accounts show 6b2f9c1e-0d4a-4f7e-9a51-3c8e2d7b4a10',
+        exitCodes: [{ code: 3, meaning: 'No account has that id or label, or the database is not reachable.' }],
+        next: 'To put an agent on it: `buddi agents set <handle> --account <id>`.',
+        applies: 'both',
+        json: 'The fields of buddi accounts list, plus { baseUrl, contextWindowTokens, detectedContextWindowTokens, test: { state, message, checkedAt } | null }. The account may be named by its id or its label.',
+    },
     {
         name: 'agents models',
         group: 'Agents',
@@ -160,6 +192,7 @@ export const COMMANDS = [
         usage: 'buddi agents migrate [--dry-run]',
         flags: [{ flag: '--dry-run', meaning: 'Say what would move, and move nothing.' }],
         example: 'buddi agents migrate --dry-run',
+        next: '`buddi service restart`, so the service reloads the files from their new place.',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('agents migrate', 'A packaged install keeps its agents in its data directory already.'),
     },
@@ -182,6 +215,7 @@ export const COMMANDS = [
         usage: 'buddi missions add-defaults',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi missions add-defaults',
         applies: 'both',
     },
     {
@@ -191,6 +225,7 @@ export const COMMANDS = [
         usage: 'buddi missions add-recap',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi missions add-recap',
         applies: 'both',
     },
     {
@@ -200,6 +235,7 @@ export const COMMANDS = [
         usage: 'buddi missions add-friday-recap',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi missions add-friday-recap',
         applies: 'both',
     },
     {
@@ -219,6 +255,7 @@ export const COMMANDS = [
         usage: 'buddi missions enable <id>',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi missions enable recap',
         applies: 'both',
     },
     {
@@ -228,6 +265,7 @@ export const COMMANDS = [
         usage: 'buddi missions disable <id>',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi missions disable recap',
         applies: 'both',
     },
     {
@@ -252,6 +290,7 @@ export const COMMANDS = [
         usage: 'buddi reminders cancel <id>',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi reminders cancel 3f2a9c1e',
         applies: 'both',
     },
     {
@@ -261,6 +300,7 @@ export const COMMANDS = [
         usage: 'buddi nudges [status]',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi nudges',
         applies: 'both',
     },
     {
@@ -270,6 +310,7 @@ export const COMMANDS = [
         usage: 'buddi nudges stop',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi nudges stop',
         applies: 'both',
     },
     {
@@ -279,6 +320,7 @@ export const COMMANDS = [
         usage: 'buddi nudges resume',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi nudges resume',
         applies: 'both',
     },
     {
@@ -288,8 +330,10 @@ export const COMMANDS = [
         usage: 'buddi plugins list [--json]',
         flags: [JSON_FLAG],
         example: 'buddi plugins list',
+        exitCodes: [{ code: 1, meaning: 'An installed plugin did not load. The rest of the list is still printed.' }],
         applies: 'both',
-        json: '[{ name, version, origin, health, detail }]. origin is built-in or installed; health is ok, warn or fail.',
+        json: '[{ name, version, installedAs?, origin, health, detail }]. origin is built-in or installed; health is ok, warn, fail or off. ' +
+            "For a plugin installed from a folder, version is the folder's package.json now and installedAs the version recorded at install, when they differ.",
     },
     {
         name: 'plugins describe',
@@ -307,6 +351,8 @@ export const COMMANDS = [
         summary: 'Show what a plugin is, what it brought, and what it proposes.',
         usage: 'buddi plugins info <name>',
         flags: [],
+        example: 'buddi plugins info finance',
+        exitCodes: [{ code: 1, meaning: 'No plugin has that name here, or it did not load.' }],
         applies: 'both',
     },
     {
@@ -320,19 +366,23 @@ export const COMMANDS = [
             { flag: '--registry <url>', meaning: 'Fetch from this npm registry.' },
         ],
         example: 'buddi plugins install @you/buddi-plugin-finance',
-        exitCodes: [{ code: 3, meaning: 'Staged, not installed: approve it with --yes --integrity <hash>.' }],
+        exitCodes: [{ code: 3, meaning: '--yes came without --integrity for a package from npm or a .tgz: staged, not installed. Without --yes it stages and exits 0.' }],
+        next: 'Without --yes: `buddi plugins approve <id> --integrity <hash>` (a folder needs no hash). Once it is installed: `buddi service restart`, which registers its tools.',
         applies: 'both',
     },
     {
         name: 'plugins update',
         group: 'Agents',
-        summary: 'Stage the next version of a plugin; --yes --integrity approves it.',
+        summary: 'Stage the next version of a plugin (a folder install is reread, the same version too); --yes --integrity approves it.',
         usage: 'buddi plugins update <name> [--version <v>] [--yes --integrity <hash>]',
         flags: [
             { flag: '--version <v>', meaning: 'This version instead of the newest.' },
             { flag: '--yes', meaning: 'Approve it.' },
             { flag: '--integrity <hash>', meaning: 'The hash the staged card printed.' },
         ],
+        example: 'buddi plugins update weather',
+        exitCodes: [{ code: 3, meaning: '--yes came without --integrity: staged, not installed.' }],
+        next: 'Without --yes: `buddi plugins approve <id> --integrity <hash>`. Once it is installed: `buddi service restart`, which loads the new version.',
         applies: 'both',
     },
     {
@@ -341,6 +391,7 @@ export const COMMANDS = [
         summary: 'List what is staged and waiting for you.',
         usage: 'buddi plugins staged',
         flags: [],
+        example: 'buddi plugins staged',
         applies: 'both',
     },
     {
@@ -352,6 +403,9 @@ export const COMMANDS = [
             { flag: '--integrity <hash>', meaning: 'The hash the staged card printed.' },
             { flag: '--acknowledge-drift', meaning: 'Approve it although what is on disk changed since it was staged.' },
         ],
+        example: 'buddi plugins approve 7c1e2a90',
+        exitCodes: [{ code: 1, meaning: 'Its files changed since it was staged: nothing was installed. --acknowledge-drift approves it anyway.' }],
+        next: '`buddi service restart`, which registers its tools. When its files changed since it was staged: `buddi plugins approve <id> --acknowledge-drift`.',
         applies: 'both',
     },
     {
@@ -360,6 +414,7 @@ export const COMMANDS = [
         summary: 'Delete a stage and everything it fetched.',
         usage: 'buddi plugins reject <id>',
         flags: [],
+        example: 'buddi plugins reject 7c1e2a90',
         applies: 'both',
     },
     {
@@ -369,6 +424,7 @@ export const COMMANDS = [
         usage: 'buddi plugins disable <name>',
         flags: [],
         example: 'buddi plugins disable finance',
+        next: 'When the running buddi could not take the change: `buddi service restart`.',
         applies: 'both',
     },
     {
@@ -378,6 +434,7 @@ export const COMMANDS = [
         usage: 'buddi plugins enable <name>',
         flags: [],
         example: 'buddi plugins enable finance',
+        next: 'When the running buddi could not take the change: `buddi service restart`.',
         applies: 'both',
     },
     {
@@ -390,6 +447,8 @@ export const COMMANDS = [
             { flag: '--detach-agents', meaning: 'Also take its tools out of the agents that were given them.' },
             { flag: '--purge --confirm <name>', meaning: 'Also drop its schema and everything in it. This cannot be undone.' },
         ],
+        example: 'buddi plugins uninstall weather --yes',
+        next: 'With --yes: `buddi service restart`, so no running process keeps registering its tools.',
         applies: 'both',
     },
     {
@@ -403,6 +462,7 @@ export const COMMANDS = [
             { flag: '--author <name>', meaning: 'Who made it, shown on the install card. Asked otherwise, with git config user.name as the default.' },
         ],
         example: 'buddi plugins init weather',
+        next: '`cd <name>`, `pnpm install && pnpm build && pnpm test`, `buddi plugins install . --yes`, then `buddi service restart`.',
         applies: 'both',
     },
     {
@@ -444,7 +504,8 @@ export const COMMANDS = [
             { flag: '--to <agent,agent>', meaning: 'Give the tools to these agents without asking. --to nobody keeps the connection waiting.' },
         ],
         example: 'buddi connections add github --to buddi',
-        exitCodes: [NOT_RUNNING],
+        exitCodes: [{ code: 2, meaning: 'Not typed right, or no card has that name.' }, NOT_RUNNING],
+        next: 'When the tools were not kept: `buddi connections review <name> --keep` once you have read them.',
         applies: 'both',
         jsonTakesValue: true,
     },
@@ -460,6 +521,7 @@ export const COMMANDS = [
         ],
         example: 'buddi connections review github',
         exitCodes: [NOT_RUNNING],
+        next: 'Without --keep: `buddi connections review <name> --keep` once you have read them.',
         applies: 'both',
         json: '{ connection, slug, slugEditable, host, hash, tools: [{ name, fullName, description, tier, destructive, annotated, problem, change }], annotatedNothing, changes }. tier is auto or gated.',
     },
@@ -491,6 +553,8 @@ export const COMMANDS = [
         usage: 'buddi telegram pair',
         flags: [],
         exitCodes: [{ code: 3, meaning: 'The database is not reachable, or no Telegram bot is configured.' }],
+        example: 'buddi telegram pair',
+        next: 'Scan the code or open the link on the phone within ten minutes. The service must be running to receive it.',
         applies: 'both',
     },
     {
@@ -500,6 +564,8 @@ export const COMMANDS = [
         usage: 'buddi telegram devices [--json]',
         flags: [JSON_FLAG],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi telegram devices',
+        next: 'With no device paired: `buddi telegram pair`.',
         applies: 'both',
         json: '[{ id, surface, label, externalUserId, externalChatId, pairedAt, lastSeenAt }]',
     },
@@ -509,7 +575,8 @@ export const COMMANDS = [
         summary: 'Unpair a device, so it can no longer reach your agents.',
         usage: 'buddi telegram unpair <id>',
         flags: [],
-        exitCodes: [NEEDS_DATABASE],
+        exitCodes: [{ code: 1, meaning: 'No paired device has that id.' }, NEEDS_DATABASE],
+        example: 'buddi telegram unpair 12',
         applies: 'both',
     },
     {
@@ -529,15 +596,21 @@ export const COMMANDS = [
         usage: 'buddi doctor',
         flags: [],
         example: 'buddi doctor',
+        exitCodes: [{ code: 1, meaning: 'A critical check failed. Warnings alone exit 0.' }],
         applies: 'both',
     },
     {
         name: 'upgrade',
         group: 'Operate',
         summary: 'Back up, move to the new version, migrate, and restart.',
-        usage: 'buddi upgrade [--no-backup]',
-        flags: [{ flag: '--no-backup', meaning: 'In a source checkout, skip the archive it takes first. A packaged upgrade always takes one.' }],
+        usage: 'buddi upgrade [<version>] [--no-backup]',
+        flags: [
+            { flag: '<version>', meaning: 'In a packaged install, move to this version instead of the newest.' },
+            { flag: '--no-backup', meaning: 'In a source checkout, skip the archive it takes first. A packaged upgrade always takes one.' },
+        ],
         example: 'buddi upgrade',
+        exitCodes: [{ code: 1, meaning: 'A step failed, or buddi doctor found something afterwards. The backup taken first is kept.' }],
+        next: 'When it fails: `buddi doctor`, which says what is wrong and, in a packaged install, which archive to restore from and how.',
         applies: 'both',
     },
     {
@@ -546,6 +619,7 @@ export const COMMANDS = [
         summary: 'Print the version, with the commit in a source checkout.',
         usage: 'buddi version',
         flags: [],
+        example: 'buddi version',
         applies: 'both',
     },
     {
@@ -555,6 +629,7 @@ export const COMMANDS = [
         usage: 'buddi service status [--json]',
         flags: [JSON_FLAG],
         exitCodes: [{ code: 1, meaning: 'It is not running.' }],
+        example: 'buddi service status',
         applies: 'both',
         json: "The service's state. Packaged: { phase, supervisorPid, installRoot, nodePath, database, databasePid, gateway, gatewayPid, current?, upgrading? }. " +
             'Source checkout: { installed, running, pid?, unitPath, detail }.',
@@ -565,6 +640,7 @@ export const COMMANDS = [
         summary: 'Start the background service.',
         usage: 'buddi service start [--json]',
         flags: [JSON_FLAG],
+        example: 'buddi service start',
         applies: 'both',
         json: "The service's state. Packaged: { phase, supervisorPid, installRoot, nodePath, database, databasePid, gateway, gatewayPid, current?, upgrading? }. " +
             'Source checkout: { installed, running, pid?, unitPath, detail }.',
@@ -575,6 +651,7 @@ export const COMMANDS = [
         summary: 'Stop the background service. Running work finishes first.',
         usage: 'buddi service stop [--json]',
         flags: [JSON_FLAG],
+        example: 'buddi service stop',
         applies: 'both',
         json: "The service's state. Packaged: { phase, supervisorPid, installRoot, nodePath, database, databasePid, gateway, gatewayPid, current?, upgrading? }. " +
             'Source checkout: { installed, running, pid?, unitPath, detail }.',
@@ -585,6 +662,7 @@ export const COMMANDS = [
         summary: 'Restart the background service, to load a change.',
         usage: 'buddi service restart [--json]',
         flags: [JSON_FLAG],
+        example: 'buddi service restart',
         applies: 'both',
         json: "The service's state. Packaged: { phase, supervisorPid, installRoot, nodePath, database, databasePid, gateway, gatewayPid, current?, upgrading? }. " +
             'Source checkout: { installed, running, pid?, unitPath, detail }.',
@@ -595,6 +673,7 @@ export const COMMANDS = [
         summary: "Follow the service's log. Ctrl-C stops following.",
         usage: 'buddi service logs',
         flags: [],
+        example: 'buddi service logs',
         applies: 'both',
     },
     {
@@ -603,6 +682,7 @@ export const COMMANDS = [
         summary: 'Install the background service, started at login.',
         usage: 'buddi service install',
         flags: [],
+        example: 'buddi service install',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('service install', 'A packaged install sets up its service the first time you run buddi.'),
     },
@@ -612,6 +692,7 @@ export const COMMANDS = [
         summary: 'Remove the background service. Your data stays.',
         usage: 'buddi service uninstall',
         flags: [],
+        example: 'buddi service uninstall',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('service uninstall', 'A packaged install stops with buddi service stop, and buddi uninstall removes it.'),
     },
@@ -642,6 +723,7 @@ export const COMMANDS = [
         ],
         example: 'buddi backup create --encrypt',
         exitCodes: [NEEDS_DATABASE],
+        next: '`buddi backup verify <archive>`, to check what it wrote.',
         applies: 'both',
     },
     {
@@ -661,6 +743,7 @@ export const COMMANDS = [
         usage: 'buddi backup verify <archive> [--passphrase "<words>"]',
         flags: [{ flag: '--passphrase "<words>"', meaning: 'For an encrypted archive from another machine.' }],
         example: 'buddi backup verify buddi-backup-20260914-033000.tar.gz.age',
+        exitCodes: [{ code: 1, meaning: 'The archive is not there, or is not whole: do not rely on it.' }],
         applies: 'both',
     },
     {
@@ -675,6 +758,8 @@ export const COMMANDS = [
             { flag: '--force', meaning: 'Restore over a database that has data in it.' },
             { flag: '--passphrase "<words>"', meaning: 'For an encrypted archive. Without it: the vault, then a prompt.' },
         ],
+        example: 'buddi backup restore buddi-backup-20260914-033000.tar.gz.age --files',
+        next: 'Packaged: `buddi doctor`, then open the dashboard, which opens in recovery. Source checkout: it lists what to do in order, ending with `buddi doctor` and `buddi service restart`.',
         applies: 'both',
     },
     {
@@ -683,6 +768,7 @@ export const COMMANDS = [
         summary: 'Delete old archives and keep the newest ones.',
         usage: 'buddi backup prune [--keep <n>]',
         flags: [{ flag: '--keep <n>', meaning: 'How many to keep.' }],
+        example: 'buddi backup prune --keep 7',
         applies: 'both',
     },
     {
@@ -691,6 +777,7 @@ export const COMMANDS = [
         summary: 'The nightly backup at 03:30, prune included: status, install or uninstall.',
         usage: 'buddi backup schedule [status | install | uninstall] [--keep <n>]',
         flags: [{ flag: '--keep <n>', meaning: 'How many archives the nightly prune keeps.' }],
+        example: 'buddi backup schedule install',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('backup schedule', 'A packaged install sets its nightly backup on the dashboard, in Settings → Backup.'),
     },
@@ -701,14 +788,16 @@ export const COMMANDS = [
         usage: 'buddi vault set <NAME>',
         flags: [],
         example: 'buddi vault set TAVILY_API_KEY',
+        exitCodes: [{ code: 1, meaning: 'The vault is locked or not usable, or nothing was typed.' }],
         applies: 'both',
     },
     {
         name: 'vault get',
         group: 'Operate',
-        summary: 'Print a secret from the vault.',
+        summary: 'Say whether a secret is in the vault. It never prints the value.',
         usage: 'buddi vault get <NAME>',
         flags: [],
+        example: 'buddi vault get TAVILY_API_KEY',
         applies: 'both',
     },
     {
@@ -717,6 +806,7 @@ export const COMMANDS = [
         summary: 'Remove a secret from the vault.',
         usage: 'buddi vault delete <NAME>',
         flags: [],
+        example: 'buddi vault delete TAVILY_API_KEY',
         applies: 'both',
     },
     {
@@ -725,6 +815,7 @@ export const COMMANDS = [
         summary: 'List the names of the secrets in the vault, never their values.',
         usage: 'buddi vault list',
         flags: [],
+        example: 'buddi vault list',
         applies: 'both',
     },
     {
@@ -733,6 +824,8 @@ export const COMMANDS = [
         summary: 'Move the secrets in .env into the vault.',
         usage: 'buddi vault import-env',
         flags: [],
+        example: 'buddi vault import-env',
+        next: '`buddi service restart`, so the running process reads the secrets from the vault.',
         applies: 'both',
     },
     {
@@ -741,6 +834,7 @@ export const COMMANDS = [
         summary: "Say which browser the agents' own browser uses here.",
         usage: 'buddi browser [status]',
         flags: [],
+        example: 'buddi browser',
         applies: 'both',
     },
     {
@@ -749,6 +843,7 @@ export const COMMANDS = [
         summary: "Download Chromium for the agents' own browser, about 150 MB.",
         usage: 'buddi browser install',
         flags: [],
+        example: 'buddi browser install',
         applies: 'both',
     },
     {
@@ -757,6 +852,7 @@ export const COMMANDS = [
         summary: 'Say which local speech models are downloaded, and their size.',
         usage: 'buddi speech [status]',
         flags: [],
+        example: 'buddi speech',
         applies: 'both',
     },
     {
@@ -805,6 +901,39 @@ export const COMMANDS = [
         usage: 'buddi jobs cancel <id>',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi jobs cancel 1234',
+        applies: 'both',
+    },
+    {
+        name: 'api-token create',
+        group: 'Operate',
+        summary: 'Make an owner API token, for calling the HTTP API from a script or another program. Printed once.',
+        usage: 'buddi api-token create <name>',
+        flags: [],
+        example: 'buddi api-token create "home automation"',
+        exitCodes: [NEEDS_DATABASE, { code: 4, meaning: 'Refused: no name, a name over 60 characters, or 20 tokens already.' }],
+        next: 'The token alone is printed on stdout (the note on stderr), so `TOKEN=$(buddi api-token create cron)` keeps it. Send it as `Authorization: Bearer <token>`; docs/api.md lists every route and which a token may call.',
+        applies: 'both',
+    },
+    {
+        name: 'api-token list',
+        group: 'Operate',
+        summary: 'List the API tokens: id, name, last four characters, when made and last used. Never the token.',
+        usage: 'buddi api-token list [--json]',
+        flags: [JSON_FLAG],
+        example: 'buddi api-token list',
+        exitCodes: [NEEDS_DATABASE],
+        applies: 'both',
+        json: '[{ id, name, hint, scope, createdVia, createdAt, lastUsedAt }]',
+    },
+    {
+        name: 'api-token revoke',
+        group: 'Operate',
+        summary: 'Revoke an API token: a request carrying it is refused from the next one on.',
+        usage: 'buddi api-token revoke <id>',
+        flags: [],
+        example: 'buddi api-token revoke 6b2f9c1e',
+        exitCodes: [{ code: 3, meaning: 'No token has that id (or the database is not reachable).' }, { code: 4, meaning: 'More than one token starts with that id.' }],
         applies: 'both',
     },
     {
@@ -814,6 +943,7 @@ export const COMMANDS = [
         usage: 'buddi pause',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi pause',
         applies: 'both',
     },
     {
@@ -823,6 +953,7 @@ export const COMMANDS = [
         usage: 'buddi resume',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi resume',
         applies: 'both',
     },
     /* ----------------------------------------------------------------- Develop */
@@ -842,6 +973,7 @@ export const COMMANDS = [
         summary: 'Start the Postgres container of a source checkout.',
         usage: 'buddi db up',
         flags: [],
+        example: 'buddi db up',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('db', 'A packaged install runs its own database; buddi status says whether it is up.'),
     },
@@ -851,6 +983,7 @@ export const COMMANDS = [
         summary: 'Stop the Postgres container.',
         usage: 'buddi db down',
         flags: [],
+        example: 'buddi db down',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('db', 'A packaged install runs its own database; buddi status says whether it is up.'),
     },
@@ -860,6 +993,7 @@ export const COMMANDS = [
         summary: 'Say whether the Postgres container is running.',
         usage: 'buddi db status',
         flags: [],
+        example: 'buddi db status',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('db', 'A packaged install runs its own database; buddi status says whether it is up.'),
     },
@@ -869,6 +1003,8 @@ export const COMMANDS = [
         summary: 'Give the database a generated password, kept in the vault.',
         usage: 'buddi db secure',
         flags: [],
+        example: 'buddi db secure',
+        next: '`buddi service restart`, so what is running picks up the new password.',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('db', 'A packaged install runs its own database; buddi status says whether it is up.'),
     },
@@ -879,6 +1015,7 @@ export const COMMANDS = [
         usage: 'buddi migrate',
         flags: [],
         exitCodes: [NEEDS_DATABASE],
+        example: 'buddi migrate',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('migrate', 'A packaged install migrates when it starts and when it upgrades.'),
     },
@@ -888,6 +1025,7 @@ export const COMMANDS = [
         summary: 'Run the gateway in this terminal instead of the service.',
         usage: 'buddi serve',
         flags: [],
+        example: 'buddi serve',
         applies: 'checkout',
         elsewhere: CHECKOUT_ONLY('serve', 'A packaged install runs in the background; buddi service status says how it is.'),
     },
@@ -1050,6 +1188,8 @@ export function renderCommandHelp(entry, table = COMMANDS, kind = 'checkout', st
     }
     if (entry.example)
         out.push('', style.bold('Example'), `  ${entry.example}`);
+    if (entry.next)
+        out.push('', style.bold('Then'), `  ${entry.next}`);
     if (entry.json)
         out.push('', style.bold('JSON'), `  ${entry.json}`);
     out.push('', style.bold('Exit codes'));
@@ -1083,6 +1223,144 @@ const GROUP_NOTES = {
     Operate: 'Keeping buddi running: the service, upgrades, backups, secrets and the work queue.',
     Develop: 'Only in a source checkout. A packaged install does not list them.',
 };
+/**
+ * The heading anchor GitHub gives `### buddi backup create`:
+ * `buddi-backup-create`. The bare command is `#buddi`.
+ */
+export function anchorOf(entry) {
+    return ['buddi', ...entry.name.split(' ').filter((w) => w !== '')].join('-');
+}
+/** `buddi backup create`: the command's words, without its arguments. */
+function commandLine(entry) {
+    return ['buddi', entry.name].filter((w) => w !== '').join(' ');
+}
+/** `[`buddi backup create`](#buddi-backup-create)`, for a command in the table. */
+function link(name, table) {
+    const entry = table.find((e) => e.name === name);
+    if (entry === undefined)
+        throw new Error(`the reference links to buddi ${name}, which the table does not have`);
+    return `[\`${commandLine(entry)}\`](#${anchorOf(entry)})`;
+}
+/**
+ * The short recipes at the top of the page. Each step is checked against the
+ * code that prints it, and each command links to its section below, so a
+ * recipe naming a command the table lost fails the render.
+ */
+function commonTasks(table) {
+    const l = (name) => link(name, table);
+    return [
+        '## Common tasks',
+        '',
+        '### Add a model account',
+        '',
+        'Accounts are added on the dashboard: Settings → Model accounts → Add account (an API key,',
+        'a Claude or ChatGPT sign-in, or a model server on your network). Then put an agent on it',
+        'under Agents → the agent → Setup → Brain, or from a terminal:',
+        '',
+        '```sh',
+        'buddi accounts',
+        'buddi agents set ledger --account <id>',
+        'buddi agents test ledger',
+        '```',
+        '',
+        `${l('accounts')} prints each account's id and whether it can run now (the account's page on the`,
+        `dashboard shows the id too, with Copy); ${l('agents set')} takes it, and ${l('agents test')} runs one`,
+        'cheap turn to prove the account answers.',
+        '',
+        "### Change an agent's model or step budget",
+        '',
+        '```sh',
+        'buddi agents models --provider anthropic',
+        'buddi agents set ledger --model claude-sonnet-5',
+        'buddi agents set ledger --max-turns 30',
+        'buddi service restart',
+        '```',
+        '',
+        `${l('agents models')} lists the model ids this build knows. ${l('agents set')} prints the change`,
+        'and asks for a restart so the running service, Telegram and the scheduler pick it up;',
+        '`--max-turns` is how many steps one run may take.',
+        '',
+        '### Back up and restore',
+        '',
+        '```sh',
+        'buddi backup create --encrypt',
+        'buddi backup verify <archive>',
+        'buddi backup restore <archive> --files',
+        '```',
+        '',
+        `${l('backup create')} prints the archive's path and the ${l('backup verify')} line to check it;`,
+        `${l('backup list')} shows every archive. ${l('backup restore')} asks you to type a word first.`,
+        'A packaged install always encrypts (the passphrase is in its vault), reads archives from',
+        'its own backups directory, and stops the gateway for the restore; then run `buddi doctor`',
+        'and open the dashboard, which opens in recovery. In a source checkout, `--files` also',
+        'puts back agents, skills and files, and `--force` restores over a database that has data.',
+        '',
+        '### Pair Telegram',
+        '',
+        '```sh',
+        'buddi vault set TELEGRAM_BOT_TOKEN',
+        'buddi service restart',
+        'buddi telegram pair',
+        '```',
+        '',
+        `Ask @BotFather for a bot and keep its token with ${l('vault set')}, then restart so the service`,
+        'starts the bot; pasting it in Settings → Telegram on the dashboard does both.',
+        `${l('telegram pair')} prints a QR code, a link and a code, good for ten minutes: open it on the phone`,
+        `while the service runs. ${l('telegram devices')} lists what is paired and ${l('telegram unpair')} removes one.`,
+        '',
+        '### Add a local connection',
+        '',
+        '```sh',
+        'buddi connections add files -- npx -y @modelcontextprotocol/server-filesystem ~/Documents',
+        'buddi connections add github-local --secret GITHUB_PERSONAL_ACCESS_TOKEN -- npx -y @modelcontextprotocol/server-github',
+        '```',
+        '',
+        `${l('connections add')} with \`-- <command>\` registers an MCP server that runs on this computer as you.`,
+        'It starts the program once to read its tools, prints each with its tier, and asks to keep them',
+        'and which agents get them (`--keep` and `--to <agent,agent>` answer ahead). `--secret K` asks for a',
+        `value with the echo off and keeps it in the vault. The service must be running. ${l('connections list')}`,
+        `shows it; ${l('connections remove')} takes it away.`,
+        '',
+        '### Upgrade',
+        '',
+        '```sh',
+        'buddi status',
+        'buddi upgrade',
+        '```',
+        '',
+        `${l('status')} says whether a newer buddi is out. In a packaged install ${l('upgrade')} takes a backup,`,
+        'installs the new version, migrates and restarts itself (`buddi upgrade <version>` picks one).',
+        'In a source checkout, `git pull` first: it upgrades the code on disk (backup, stop, install',
+        'and build, migrate, start, `buddi doctor`).',
+    ];
+}
+/** One command in full: what `buddi help <command>` prints, as markdown. */
+function commandSection(entry, table) {
+    const group = entry.group;
+    const only = entry.applies === 'checkout' && group !== 'Develop' ? ' Source checkout only.' : '';
+    const out = [`### ${commandLine(entry)}`, '', `${entry.summary}${only}`];
+    if (entry.applies !== 'both' && entry.elsewhere)
+        out.push('', entry.elsewhere);
+    out.push('', '```sh', entry.usage, '```');
+    if (entry.flags.length > 0) {
+        out.push('', '**Flags**', '');
+        for (const f of entry.flags)
+            out.push(`- \`${f.flag}\`: ${f.meaning}`);
+    }
+    if (entry.example && entry.example !== entry.usage)
+        out.push('', '**Example**', '', '```sh', entry.example, '```');
+    if (entry.next)
+        out.push('', `**Then**: ${entry.next}`);
+    if (entry.json)
+        out.push('', `**JSON**: ${entry.json}`);
+    out.push('', '**Exit codes**', '');
+    for (const c of exitCodesOf(entry))
+        out.push(`- \`${c.code}\`: ${c.meaning}`);
+    const related = entry.name === '' ? [] : entriesUnder(entry.name, table);
+    if (related.length > 0)
+        out.push('', `**See also**: ${related.map((r) => link(r.name, table)).join(', ')}`);
+    return out;
+}
 /**
  * `docs/cli.md`, without its frontmatter: the script adds that, and the test
  * compares what follows it.
@@ -1093,12 +1371,16 @@ export function renderReference(table = COMMANDS) {
         '',
         'Every command, grouped the way `buddi help` groups them. The same words work in a',
         'packaged install and in a source checkout; what does not apply where you run it is',
-        'left out of `buddi help`, and says what to do instead when typed. `buddi help <command>`',
-        'and `buddi <command> --help` print one command with an example and its exit codes.',
+        'left out of `buddi help`, and says what to do instead when typed. Each group lists its',
+        'commands, then gives each one its own section: usage, flags, an example, what it tells',
+        'you to do next, and its exit codes, the same words `buddi help <command>` and',
+        '`buddi <command> --help` print.',
         '',
         'This page is generated from the command table (`packages/cli/src/commands.ts`) by',
         '`pnpm docs:cli`; a test fails when the two differ.',
         '',
+        ...commonTasks(table),
+        '',
         '## What it is for',
         '',
         '`buddi` runs your agents and keeps them running: it starts the service, checks on it,',
@@ -1132,15 +1414,14 @@ export function renderReference(table = COMMANDS) {
         '  change something ignore it.',
     ];
     for (const group of GROUPS) {
+        const entries = table.filter((e) => e.group === group);
         out.push('', `## ${group}`, '', GROUP_NOTES[group], '');
-        for (const entry of table.filter((e) => e.group === group)) {
+        for (const entry of entries) {
             const only = entry.applies === 'checkout' && group !== 'Develop' ? ' Source checkout only.' : '';
-            out.push(`- \`${entry.usage}\`: ${entry.summary}${only}`);
-            for (const f of entry.flags)
-                out.push(`  - \`${f.flag}\`: ${f.meaning}`);
-            if (entry.json)
-                out.push(`  - JSON: ${entry.json}`);
+            out.push(`- ${link(entry.name, table)}: ${entry.summary}${only}`);
         }
+        for (const entry of entries)
+            out.push('', ...commandSection(entry, table));
     }
     return `${out.join('\n')}\n`;
 }