chainlesschain 0.163.6 → 0.163.7

package/src/assets/web-panel/index.html

@@ -8,7 +8,7 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-Bbj2NS_I.js"></script>
+  <script type="module" crossorigin src="./assets/index-DiSkx4UB.js"></script>
   <link rel="modulepreload" crossorigin href="./assets/vendor-Bn1JzzAn.js">
   <link rel="modulepreload" crossorigin href="./assets/icons-DG5UD-6K.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">

package/src/command-help-index.json

@@ -5,7 +5,7 @@
     "a2a": "Usage: chainlesschain a2a [options] [command]\n\nA2A Protocol — agent-to-agent communication\n\nOptions:\n  -h, --help                                     display help for command\n\nCommands:\n  register [options] <name>                      Register an agent card\n  discover [options]                             Discover agents by capability or skill\n  submit [options] <agent-id> <input>            Submit a task to an agent\n  status [options] <task-id>                     Get task status\n  complete <task-id> <output>                    Mark a task as completed\n  fail <task-id> <error>                         Mark a task as failed\n  peers [options]                                List all registered agents\n  cards [options]                                List all agent cards with details\n  negotiate [options] <agent-id> <capabilities>  Check if an agent supports required capabilities\n  task-statuses [options]                        List V2 task statuses (Phase 81)\n  card-statuses [options]                        List V2 card statuses (Phase 81)\n  subscription-types [options]                   List V2 subscription types (Phase 81)\n  negotiation-results [options]                  List V2 negotiation outcomes (Phase 81)\n  validate-card [options] <name>                 Validate an agent card against the A2A schema\n  set-card-status [options] <cardId> <status>    Transition a card between active/inactive/expired\n  card-status [options] <cardId>                 Show a card's V2 status\n  send-task-v2 [options] <agentId> <input>       Submit a V2 task (in-memory, with optional timeout)\n  start-working [options] <taskId>               Transition a V2 task to working\n  request-input [options] <taskId> <prompt>      Request user input while a V2 task is working\n  provide-input [options] <taskId> <input>       Provide input for an input-required V2 task\n  complete-task-v2 [options] <taskId> [output]   Complete a V2 task (from working only)\n  fail-task-v2 [options] <taskId> [error]        Fail a V2 task with an error message\n  cancel-task [options] <taskId> [reason]        Cancel a non-terminal V2 task\n  check-timeout [options] <taskId>               Check V2 task timeout (auto-fails if past deadline)\n  task-v2 [options] <taskId>                     Show a V2 task snapshot\n  tasks-v2 [options]                             List V2 tasks\n  negotiate-v2 [options] <cardJson>              Phase 81 capability negotiation against an agent card\n  stats-v2 [options]                             Aggregate V2 stats (tasks + cards + subscriptions)\n  enums-v2                                       Show V2 governance enums\n  register-agent-v2 [options]                    Register an a2a agent profile (pending)\n  activate-agent-v2 <id>                         Activate agent\n  suspend-agent-v2 <id>                          Suspend agent\n  retire-agent-v2 <id>                           Retire agent (terminal)\n  touch-agent-v2 <id>                            Refresh lastTouchedAt\n  get-agent-v2 <id>                              Get agent\n  list-agents-v2                                 List agents\n  create-message-v2 [options]                    Create an a2a message (queued)\n  start-message-v2 <id>                          Transition message to sending\n  deliver-message-v2 <id>                        Transition message to delivered\n  fail-message-v2 [options] <id>                 Fail message\n  cancel-message-v2 [options] <id>               Cancel message\n  get-message-v2 <id>                            Get message\n  list-messages-v2                               List messages\n  set-max-active-agents-v2 <n>                   Set per-owner active cap\n  set-max-pending-messages-v2 <n>                Set per-agent pending cap\n  set-agent-idle-ms-v2 <n>                       Set idle threshold\n  set-message-stuck-ms-v2 <n>                    Set stuck threshold\n  auto-suspend-idle-agents-v2                    Auto-suspend idle agents\n  auto-fail-stuck-messages-v2                    Auto-fail stuck sending messages\n  gov-stats-v2                                   V2 governance aggregate stats\n  help [command]                                 display help for command\n",
     "activitypub": "Usage: chainlesschain activitypub|ap [options] [command]\n\nActivityPub C2S bridge — actors, outbox/inbox, Follow/Create/Like/Announce\n\nOptions:\n  -h, --help                                    display help for command\n\nCommands:\n  actor                                         Manage local and remote ActivityPub actors\n  publish [options] <content>                   Publish a Create(Note) activity to the actor's outbox\n  follow [options] <target>                     Publish a Follow activity (target: username or actor URL)\n  accept [options] <follow-activity-id>         Accept a pending Follow request\n  unfollow [options] <target>                   Publish an Undo(Follow) activity\n  like [options] <object-id>                    Publish a Like activity for an object URL\n  announce [options] <object-id>                Publish an Announce (boost) activity for an object URL\n  outbox [options] <username>                   List an actor's outbox activities\n  inbox [options] <username>                    List an actor's inbox activities\n  deliver [options] <username> <activity-json>  Simulate inbox delivery — push a JSON activity into a local actor's inbox\n  followers [options] <username>                List followers of an actor\n  search [options] <query>                      Search actors and/or notes in the local Fediverse index\n  following [options] <username>                List who this actor is following\n  enums-v2                                      Show V2 enums\n  register-actor-v2 [options]                   Register an AP actor profile (pending)\n  activate-actor-v2 <id>                        Activate actor\n  suspend-actor-v2 <id>                         Suspend actor\n  deactivate-actor-v2 <id>                      Deactivate actor (terminal)\n  touch-actor-v2 <id>                           Refresh lastTouchedAt\n  get-actor-v2 <id>                             Get actor\n  list-actors-v2                                List actors\n  create-activity-v2 [options]                  Create an AP activity (queued)\n  start-activity-v2 <id>                        Transition activity to delivering\n  deliver-activity-v2 <id>                      Transition activity to delivered\n  fail-activity-v2 [options] <id>               Fail activity\n  cancel-activity-v2 [options] <id>             Cancel activity\n  get-activity-v2 <id>                          Get activity\n  list-activities-v2                            List activities\n  set-max-active-actors-v2 <n>                  Set per-owner active cap\n  set-max-pending-activities-v2 <n>             Set per-actor pending cap\n  set-actor-idle-ms-v2 <n>                      Set idle threshold\n  set-activity-stuck-ms-v2 <n>                  Set stuck threshold\n  auto-suspend-idle-actors-v2                   Auto-suspend idle actors\n  auto-fail-stuck-activities-v2                 Auto-fail stuck delivering activities\n  gov-stats-v2                                  V2 governance aggregate stats\n  help [command]                                display help for command\n",
     "agenda": "Usage: chainlesschain agenda [options] [command]\n\nFire agent-scheduled wakeups / crons / monitors (persisted by the `schedule`\ntool)\n\nOptions:\n  -h, --help             display help for command\n\nCommands:\n  list [options]         List all scheduled entries\n  run [options]          Fire every entry that is due now\n  cancel [options] <id>  Remove a scheduled entry by id\n  prune [options]        Remove finished entries (fired / matched / exhausted /\n                         expired)\n  help [command]         display help for command\n",
-    "agent": "Usage: chainlesschain agent|a [options] [task...]\n\nStart an agentic AI session (reads/writes files, runs commands)\n\nArguments:\n  task                                 Headless task 鈥?when given (or with -p /\n                                       piped stdin), runs non-interactively\n\nOptions:\n  --model <model>                      Model name\n  --provider <provider>                LLM provider (ollama, openai,\n                                       volcengine, deepseek, ...)\n  --base-url <url>                     API base URL\n  --api-key <key>                      API key\n  --think [level]                      Enable Anthropic extended thinking\n                                       (level: think | hard | ultra; Anthropic\n                                       models only)\n  --ultrathink                         Maximum Anthropic extended thinking (=\n                                       --think ultra)\n  --thinking-budget <n>                Thinking token budget for legacy Claude\n                                       models (Sonnet 4.5 / Opus 4.0-4.5 /\n                                       older); clamped below max_tokens.\n                                       Adaptive-thinking models ignore it (they\n                                       use --think's effort). Requires\n                                       --think/--ultrathink.\n  --image <path>                       Attach an image (png/jpg/jpeg/gif/webp)\n                                       to the prompt for a vision-capable model\n                                       (headless; repeatable)\n  --vision-model <id>                  Model to use when an image is attached\n                                       (default: config llm.visionModel or\n                                       doubao-seed-2-0-lite-260215)\n  --session <id>                       Resume a previous agent session\n  -c, --continue                       Resume the most recent session (no id\n                                       needed 鈥?claude --continue parity)\n  --resume [id]                        Resume a session by id (no id 鈫?most\n                                       recent 鈥?claude --resume parity)\n  --fork-session                       When resuming, branch into a NEW session\n                                       id and leave the original untouched\n                                       (claude --fork-session parity)\n  --fork-request-id <key>              Stable idempotency key for\n                                       --fork-session retries (omit for a new\n                                       fork each invocation)\n  --add-dir <dir>                      Extra working directory the agent may\n                                       read/search/edit (repeatable)\n  --checkpoint                         Auto-snapshot the work tree before each\n                                       mutating tool (DEFAULT inside a git\n                                       repo; cc checkpoint restore to roll\n                                       back)\n  --no-checkpoint                      Disable auto-checkpointing (it is on by\n                                       default inside git repos)\n  --managed-checkpoint                 Checkpoint bounded mutating tools with\n                                       Process Broker; unavailable writer\n                                       lifetimes are reported as coverage none\n  --managed-checkpoint-state <dir>     Durable managed-checkpoint state\n                                       directory (must be outside the\n                                       workspace)\n  --managed-checkpoint-exclude <path>  Explicit workspace path excluded from\n                                       managed checkpoints; repeatable and\n                                       reported as partial coverage\n  --safe-mode                          Run bare: disable project memory,\n                                       settings hooks, memory recall, IDE\n                                       context, status line and update notice\n                                       (permission rules STAY active)\n  --bare                               Everything --safe-mode disables PLUS\n                                       skills, plugins and MCP/IDE auto-connect\n                                       — minimal fast surface for scripted\n                                       calls (explicit --mcp-config still\n                                       loads; permission rules STAY active)\n  --ephemeral                          No session persistence: nothing is\n                                       written to the session store (headless;\n                                       a --resume id still replays history\n                                       read-only)\n  --capabilities                       Print a machine-readable capability\n                                       manifest (JSON: protocol version, tools,\n                                       permission modes, exit codes) and exit\n  --disable-slash-commands             Interactive REPL: don't dispatch '/'\n                                       input as slash commands — it reaches the\n                                       model verbatim (/exit and /quit stay\n                                       live)\n  --ax-screen-reader                   Screen-reader friendly output: no ANSI\n                                       colors, no in-place status line repaints\n                                       (also CC_SCREEN_READER=1)\n  --worktree                           Run this session in a fresh git worktree\n                                       (isolated branch; auto-removed when the\n                                       session changes nothing)\n  --no-worktree                        Background Git task: explicitly share\n                                       the current work tree (intended for\n                                       read-only tasks; writable runs are not\n                                       isolated)\n  --unattended                         Enable fail-closed shell action policy\n                                       for scheduled/event-driven runs\n  --unattended-allow <classes>         Comma-separated action classes\n                                       explicitly allowed for unattended shell\n                                       runs\n  --sandbox [image]                    Run shell commands in an ephemeral\n                                       Docker sandbox (network disabled by\n                                       default)\n  --sandbox-mode <mode>                Sandbox posture: off | workspace-write |\n                                       strict (explicit isolation modes fail\n                                       closed)\n  --sandbox-network                    Allow network access inside --sandbox\n  --otlp <file>                        Write the agent run's OpenTelemetry\n                                       spans (model/tool/retry) as OTLP/JSON to\n                                       <file>\n  --otlp-content                       Include prompt/response CONTENT in\n                                       --otlp spans (off by default; content is\n                                       redacted unless this is set)\n  --auto-rewake                        When an async `asyncRewake` hook (e.g. a\n                                       background test) fails at turn end,\n                                       re-engage the agent to fix it (bounded\n                                       by --max-rewakes)\n  --auto-pin                           Force-pin the original task (first user\n                                       turn) through compaction (ON by default;\n                                       disable with CC_AUTO_PIN=0 or config\n                                       context.autoPin=false)\n  --max-rewakes <n>                    Max auto-rewake re-drives per run\n                                       (default 1); implies --auto-rewake\n  --bg, --background                   Start as a detached background agent and\n                                       return its id immediately\n  --agent-id <id>                      Agent id for scoped memory recall\n  --recall-limit <n>                   Top-K memories to inject into system\n                                       prompt\n  --recall-query <q>                   Query string for startup memory recall\n  --no-recall-memory                   Disable startup memory recall\n  --vim                                Start the interactive REPL in vim-mode\n                                       line editing (toggle later with /vim; or\n                                       CC_VIM=1)\n  --no-stream                          Disable streamed response rendering\n  --no-park-on-exit                    Close the session-core handle on exit\n                                       instead of parking it\n  --bundle <path>                      Agent bundle directory (may execute\n                                       local MCP commands from mcp.json)\n  -p, --print [prompt]                 Headless: run one non-interactive turn\n                                       and exit\n  --output-format <fmt>                Headless output: text | json |\n                                       stream-json (default: \"text\")\n  --max-turns <n>                      Cap agent loop iterations (headless)\n  --json-schema <file>                 Headless structured output: final reply\n                                       must be JSON validating against this\n                                       schema (invalid replies retried)\n  --allowed-tools <list>               Comma/space-separated tool allow-list\n                                       (headless)\n  --disallowed-tools <list>            Comma/space-separated tool deny-list\n                                       (headless)\n  --permission-mode <mode>             manual | auto | dontAsk | default | plan\n                                       | acceptEdits | bypassPermissions (plan\n                                       headless-only)\n  --no-file-refs                       Disable @path file-reference expansion\n                                       in the prompt (headless)\n  --no-slash-macros                    Disable /name custom-command\n                                       (.claude/commands) expansion in the\n                                       prompt (headless)\n  --system-prompt <text>               Replace the built-in system prompt\n                                       (literal text or @file)\n  --append-system-prompt <text>        Append extra guidance to the system\n                                       prompt (literal text or @file)\n  --no-project-memory                  Skip auto-loaded project memory (cc.md /\n                                       CLAUDE.md / AGENTS.md hierarchy,\n                                       .chainlesschain/rules.md,\n                                       .claude/rules/*.md) — a lean system\n                                       prompt for token-tight surfaces (e.g.\n                                       IDE chat). The agent can still read\n                                       those files with tools when it needs\n                                       them.\n  --output-style <name>                Apply a named output-style persona\n                                       (.claude/output-styles/<name>.md or a\n                                       built-in: explanatory | learning)\n  --input-format <fmt>                 Headless input: text | stream-json\n                                       (NDJSON user events on stdin,\n                                       multi-turn) (default: \"text\")\n  --trace-id <id>                      Correlation id stamped as `trace_id` on\n                                       every stream-json output line (also read\n                                       from CC_TRACE_ID). Lets an IDE/bridge\n                                       trace one run across its own logs, the\n                                       CLI, transcripts and diagnostics.\n                                       Auto-generated per run when omitted.\n  --fallback-model <model>             Backup model(s) to try in order when the\n                                       primary fails (transient error or\n                                       model-not-found). Repeatable or\n                                       comma-separated; up to 3. A\n                                       `provider:model` entry (e.g.\n                                       openai:gpt-4o) falls back\n                                       cross-provider, using that provider's\n                                       API key from its env var (skipped if\n                                       unset — never reuses the primary key).\n                                       Defaults to config llm.fallbackModels.\n  --include-partial-messages           Emit live assistant-text deltas as\n                                       stream_event lines (requires\n                                       --output-format stream-json)\n  --goal [id]                          Bind a cc goal into the run (id, or omit\n                                       the value to auto-resolve the active\n                                       goal)\n  --goal-assess                        After the run, ask the model to assess\n                                       goal progress and persist it (opt-in;\n                                       costs one extra completion; requires\n                                       --goal)\n  --goal-condition <spec>              Session completion condition; re-drives\n                                       outer turns until met. Prefix\n                                       exit-zero:/file-exists:/contains:/regex:\n                                       (deterministic) or model:<desc>\n                                       (model-judged)\n  --max-outer-turns <n>                Max outer re-drive turns for\n                                       --goal-condition (default 10, hard cap\n                                       100)\n  --goal-max-tokens <n>                Token budget across --goal-condition\n                                       outer turns\n  --goal-max-cost <usd>                Cost budget (USD) across\n                                       --goal-condition outer turns\n  --goal-max-time <ms>                 Wall-clock budget (ms) across\n                                       --goal-condition outer turns\n  --mcp-config <file>                  Load ad-hoc MCP servers from a JSON file\n                                       for this run (headless); their tools\n                                       become callable (mcp__<server>__<tool>)\n  --no-mcp                             Don't auto-connect MCP servers\n                                       registered with `cc mcp add\n                                       --auto-connect` (--mcp-config still\n                                       loads)\n  --ide                                Force-enable IDE bridge auto-connect:\n                                       discover a running editor's MCP server\n                                       via ~/.chainlesschain/ide/*.json\n                                       (default: auto inside an IDE integrated\n                                       terminal)\n  --no-ide                             Disable IDE bridge auto-connect\n  --pdh                                Force-enable PDH bridge auto-connect:\n                                       discover the Android app's\n                                       device-capability MCP server via\n                                       ~/.chainlesschain/pdh-bridge/*.json\n                                       (default: auto when\n                                       CHAINLESSCHAIN_PDH_PORT is set)\n  --no-pdh                             Disable PDH bridge auto-connect\n  --jetbrains                          Force-enable IntelliJ IDEA built-in MCP\n                                       (IDEA >= 2025.2) as server `idea`\n                                       (default: auto when the ChainlessChain\n                                       JetBrains plugin injects\n                                       CHAINLESSCHAIN_JETBRAINS_MCP_URL)\n  --no-jetbrains                       Disable IDEA built-in MCP auto-connect\n  --interactive-approvals              Stream mode: confirm-tier approvals\n                                       become approval_request/approval\n                                       stdin-stdout events instead of failing\n                                       closed (chat-panel UX)\n  --permission-prompt-tool <tool>      Defer tool approvals to an MCP tool\n                                       (mcp__<server>__<tool>; requires\n                                       --mcp-config) instead of headless\n                                       fail-closed\n  --remote-control                     Route confirm-tier approvals to paired\n                                       mobile/web devices — prints a pairing\n                                       URI/QR. Headless waits for the remote\n                                       allow/deny (fail-closed on timeout);\n                                       interactive races the terminal prompt\n                                       (first answer wins; also\n                                       /remote-control)\n  --channels <list>                    Inbound channels for the interactive\n                                       session (webhook[:port],telegram) —\n                                       external events enter as user turns;\n                                       webhook needs its bearer token, telegram\n                                       needs channels.telegram.allowFrom\n  --settings <file>                    Merge an extra\n                                       .claude/settings.json-shaped file for\n                                       this run: permission rules\n                                       (allow/ask/deny) + native config\n                                       overrides (model, env)\n  --max-budget-usd <amount>            Hard USD spend cap: stop the run before\n                                       the next paid LLM call once the\n                                       estimated cost reaches this (headless;\n                                       uses the cc cost price table)\n  --strict-mcp-config                  Use ONLY --mcp-config servers; ignore\n                                       registered (cc mcp add) and IDE-bridge\n                                       MCP for a reproducible tool surface\n  --project-mcp                        Opt in to loading a project-scoped\n                                       .mcp.json (default off; a checked-in\n                                       .mcp.json can spawn commands)\n  --replay-user-messages               Stream-input mode: echo each accepted\n                                       stdin user message back as a `user`\n                                       event (transcript/correlation)\n  --allow-dangerous-bypass             Bypass all permission prompts in\n                                       headless mode (DANGEROUS: auto-approves\n                                       all tool calls) (default: false)\n  -y, --yolo                           Alias for --allow-dangerous-bypass\n                                       (default: false)\n  --dangerously-skip-permissions       Alias for --allow-dangerous-bypass\n                                       (default: false)\n  -h, --help                           display help for command\n",
+    "agent": "Usage: chainlesschain agent|a [options] [task...]\n\nStart an agentic AI session (reads/writes files, runs commands)\n\nArguments:\n  task                                 Headless task 鈥?when given (or with -p /\n                                       piped stdin), runs non-interactively\n\nOptions:\n  --model <model>                      Model name\n  --provider <provider>                LLM provider (ollama, openai,\n                                       volcengine, deepseek, ...)\n  --base-url <url>                     API base URL\n  --api-key <key>                      API key\n  --think [level]                      Enable Anthropic extended thinking\n                                       (level: think | hard | ultra; Anthropic\n                                       models only)\n  --ultrathink                         Maximum Anthropic extended thinking (=\n                                       --think ultra)\n  --thinking-budget <n>                Thinking token budget for legacy Claude\n                                       models (Sonnet 4.5 / Opus 4.0-4.5 /\n                                       older); clamped below max_tokens.\n                                       Adaptive-thinking models ignore it (they\n                                       use --think's effort). Requires\n                                       --think/--ultrathink.\n  --image <path>                       Attach an image (png/jpg/jpeg/gif/webp)\n                                       to the prompt for a vision-capable model\n                                       (headless; repeatable)\n  --vision-model <id>                  Model to use when an image is attached\n                                       (default: config llm.visionModel or\n                                       doubao-seed-2-0-lite-260215)\n  --session <id>                       Resume a previous agent session\n  -c, --continue                       Resume the most recent session (no id\n                                       needed 鈥?claude --continue parity)\n  --resume [id]                        Resume a session by id (no id 鈫?most\n                                       recent 鈥?claude --resume parity)\n  --fork-session                       When resuming, branch into a NEW session\n                                       id and leave the original untouched\n                                       (claude --fork-session parity)\n  --fork-request-id <key>              Stable idempotency key for\n                                       --fork-session retries (omit for a new\n                                       fork each invocation)\n  --add-dir <dir>                      Extra working directory the agent may\n                                       read/search/edit (repeatable)\n  --checkpoint                         Auto-snapshot the work tree before each\n                                       mutating tool (DEFAULT inside a git\n                                       repo; cc checkpoint restore to roll\n                                       back)\n  --no-checkpoint                      Disable auto-checkpointing (it is on by\n                                       default inside git repos)\n  --managed-checkpoint                 Checkpoint bounded mutating tools with\n                                       Process Broker; unavailable writer\n                                       lifetimes are reported as coverage none\n  --managed-checkpoint-state <dir>     Durable managed-checkpoint state\n                                       directory (must be outside the\n                                       workspace)\n  --managed-checkpoint-exclude <path>  Explicit workspace path excluded from\n                                       managed checkpoints; repeatable and\n                                       reported as partial coverage\n  --safe-mode                          Run bare: disable project memory,\n                                       settings hooks, memory recall, IDE\n                                       context, status line and update notice\n                                       (permission rules STAY active)\n  --bare                               Everything --safe-mode disables PLUS\n                                       skills, plugins and MCP/IDE auto-connect\n                                       — minimal fast surface for scripted\n                                       calls (explicit --mcp-config still\n                                       loads; permission rules STAY active)\n  --ephemeral                          No session persistence: nothing is\n                                       written to the session store (headless;\n                                       a --resume id still replays history\n                                       read-only)\n  --capabilities                       Print a machine-readable capability\n                                       manifest (JSON: protocol version, tools,\n                                       permission modes, exit codes) and exit\n  --disable-slash-commands             Interactive REPL: don't dispatch '/'\n                                       input as slash commands — it reaches the\n                                       model verbatim (/exit and /quit stay\n                                       live)\n  --ax-screen-reader                   Screen-reader friendly output: no ANSI\n                                       colors, no in-place status line repaints\n                                       (also CC_SCREEN_READER=1)\n  --worktree                           Run this session in a fresh git worktree\n                                       (isolated branch; auto-removed when the\n                                       session changes nothing)\n  --no-worktree                        Background Git task: explicitly share\n                                       the current work tree (intended for\n                                       read-only tasks; writable runs are not\n                                       isolated)\n  --unattended                         Enable fail-closed shell action policy\n                                       for scheduled/event-driven runs\n  --unattended-allow <classes>         Comma-separated action classes\n                                       explicitly allowed for unattended shell\n                                       runs\n  --sandbox [image]                    Run shell commands in an ephemeral\n                                       Docker sandbox (network disabled by\n                                       default)\n  --sandbox-mode <mode>                Sandbox posture: off | workspace-write |\n                                       strict (explicit isolation modes fail\n                                       closed)\n  --sandbox-network                    Allow network access inside --sandbox\n  --otlp <file>                        Write the agent run's OpenTelemetry\n                                       spans (model/tool/retry) as OTLP/JSON to\n                                       <file>\n  --otlp-content                       Include prompt/response CONTENT in\n                                       --otlp spans (off by default; content is\n                                       redacted unless this is set)\n  --auto-rewake                        When an async `asyncRewake` hook (e.g. a\n                                       background test) fails at turn end,\n                                       re-engage the agent to fix it (bounded\n                                       by --max-rewakes)\n  --auto-pin                           Force-pin the original task (first user\n                                       turn) through compaction (ON by default;\n                                       disable with CC_AUTO_PIN=0 or config\n                                       context.autoPin=false)\n  --max-rewakes <n>                    Max auto-rewake re-drives per run\n                                       (default 1); implies --auto-rewake\n  --bg, --background                   Start as a detached background agent and\n                                       return its id immediately\n  --agent-id <id>                      Agent id for scoped memory recall\n  --recall-limit <n>                   Top-K memories to inject into system\n                                       prompt\n  --recall-query <q>                   Query string for startup memory recall\n  --no-recall-memory                   Disable startup memory recall\n  --vim                                Start the interactive REPL in vim-mode\n                                       line editing (toggle later with /vim; or\n                                       CC_VIM=1)\n  --no-stream                          Disable streamed response rendering\n  --no-park-on-exit                    Close the session-core handle on exit\n                                       instead of parking it\n  --bundle <path>                      Agent bundle directory (may execute\n                                       local MCP commands from mcp.json)\n  -p, --print [prompt]                 Headless: run one non-interactive turn\n                                       and exit\n  --output-format <fmt>                Headless output: text | json |\n                                       stream-json (default: \"text\")\n  --max-turns <n>                      Cap agent loop iterations (headless)\n  --json-schema <file>                 Headless structured output: final reply\n                                       must be JSON validating against this\n                                       schema (invalid replies retried)\n  --allowed-tools <list>               Comma/space-separated tool allow-list\n                                       (headless)\n  --disallowed-tools <list>            Comma/space-separated tool deny-list\n                                       (headless)\n  --permission-mode <mode>             manual | auto | dontAsk | default | plan\n                                       | acceptEdits | bypassPermissions (plan\n                                       headless-only)\n  --no-file-refs                       Disable @path file-reference expansion\n                                       in the prompt (headless)\n  --no-slash-macros                    Disable /name custom-command\n                                       (.claude/commands) expansion in the\n                                       prompt (headless)\n  --system-prompt <text>               Replace the built-in system prompt\n                                       (literal text or @file)\n  --append-system-prompt <text>        Append extra guidance to the system\n                                       prompt (literal text or @file)\n  --no-project-memory                  Skip auto-loaded project memory (cc.md /\n                                       CLAUDE.md / AGENTS.md hierarchy,\n                                       .chainlesschain/rules.md,\n                                       .claude/rules/*.md) — a lean system\n                                       prompt for token-tight surfaces (e.g.\n                                       IDE chat). The agent can still read\n                                       those files with tools when it needs\n                                       them.\n  --output-style <name>                Apply a named output-style persona\n                                       (.claude/output-styles/<name>.md or a\n                                       built-in: explanatory | learning)\n  --input-format <fmt>                 Headless input: text | stream-json\n                                       (NDJSON user events on stdin,\n                                       multi-turn) (default: \"text\")\n  --trace-id <id>                      Correlation id stamped as `trace_id` on\n                                       every stream-json output line (also read\n                                       from CC_TRACE_ID). Lets an IDE/bridge\n                                       trace one run across its own logs, the\n                                       CLI, transcripts and diagnostics.\n                                       Auto-generated per run when omitted.\n  --fallback-model <model>             Backup model(s) to try in order when the\n                                       primary fails (transient error or\n                                       model-not-found). Repeatable or\n                                       comma-separated; up to 3. A\n                                       `provider:model` entry (e.g.\n                                       openai:gpt-4o) falls back\n                                       cross-provider, using that provider's\n                                       API key from its env var (skipped if\n                                       unset — never reuses the primary key).\n                                       Defaults to config llm.fallbackModels.\n  --include-partial-messages           Emit live assistant-text deltas as\n                                       stream_event lines (requires\n                                       --output-format stream-json)\n  --goal [id]                          Bind a cc goal into the run (id, or omit\n                                       the value to auto-resolve the active\n                                       goal)\n  --goal-assess                        After the run, ask the model to assess\n                                       goal progress and persist it (opt-in;\n                                       costs one extra completion; requires\n                                       --goal)\n  --goal-condition <spec>              Session completion condition; re-drives\n                                       outer turns until met. Prefix\n                                       exit-zero:/file-exists:/contains:/regex:\n                                       (deterministic) or model:<desc>\n                                       (model-judged)\n  --max-outer-turns <n>                Max outer re-drive turns for\n                                       --goal-condition (default 10, hard cap\n                                       100)\n  --goal-max-tokens <n>                Token budget across --goal-condition\n                                       outer turns\n  --goal-max-cost <usd>                Cost budget (USD) across\n                                       --goal-condition outer turns\n  --goal-max-time <ms>                 Wall-clock budget (ms) across\n                                       --goal-condition outer turns\n  --mcp-config <file>                  Load ad-hoc MCP servers from a JSON file\n                                       for this run (headless); their tools\n                                       become callable (mcp__<server>__<tool>)\n  --no-mcp                             Don't auto-connect MCP servers\n                                       registered with `cc mcp add\n                                       --auto-connect` (--mcp-config still\n                                       loads)\n  --ide                                Force-enable IDE bridge auto-connect:\n                                       discover a running editor's MCP server\n                                       via ~/.chainlesschain/ide/*.json\n                                       (default: auto inside an IDE integrated\n                                       terminal)\n  --no-ide                             Disable IDE bridge auto-connect\n  --pdh                                Force-enable PDH bridge auto-connect:\n                                       discover the Android app's\n                                       device-capability MCP server via\n                                       ~/.chainlesschain/pdh-bridge/*.json\n                                       (default: auto when\n                                       CHAINLESSCHAIN_PDH_PORT is set)\n  --no-pdh                             Disable PDH bridge auto-connect\n  --jetbrains                          Force-enable IntelliJ IDEA built-in MCP\n                                       (IDEA >= 2025.2) as server `idea`\n                                       (default: auto when the ChainlessChain\n                                       JetBrains plugin injects\n                                       CHAINLESSCHAIN_JETBRAINS_MCP_URL)\n  --no-jetbrains                       Disable IDEA built-in MCP auto-connect\n  --interactive-approvals              Stream mode: confirm-tier approvals\n                                       become approval_request/approval\n                                       stdin-stdout events instead of failing\n                                       closed (chat-panel UX)\n  --permission-prompt-tool <tool>      Defer tool approvals to an MCP tool\n                                       (mcp__<server>__<tool>; requires\n                                       --mcp-config) instead of headless\n                                       fail-closed\n  --remote-control                     Route confirm-tier approvals to paired\n                                       mobile/web devices — prints a pairing\n                                       URI/QR. Headless waits for the remote\n                                       allow/deny (fail-closed on timeout);\n                                       interactive races the terminal prompt\n                                       (first answer wins; also\n                                       /remote-control)\n  --channels <list>                    Inbound channels for the interactive\n                                       session (webhook[:port],telegram) —\n                                       external events enter as user turns;\n                                       webhook needs its bearer token, telegram\n                                       needs channels.telegram.allowFrom\n  --settings <file>                    Merge an extra\n                                       .claude/settings.json-shaped file for\n                                       this run: permission rules\n                                       (allow/ask/deny) + native config\n                                       overrides (model, env)\n  --max-budget-usd <amount>            Hard USD spend cap: stop the run before\n                                       the next paid LLM call once the\n                                       estimated cost reaches this (headless;\n                                       uses the cc cost price table)\n  --observability-workspace <id>       Persist a workspace scope on new session\n                                       authority for causal reports\n  --observability-team <id>            Persist a team scope on new session\n                                       authority for causal reports\n  --observability-policy <id>          Persist a policy scope on new session\n                                       authority for causal reports\n  --strict-mcp-config                  Use ONLY --mcp-config servers; ignore\n                                       registered (cc mcp add) and IDE-bridge\n                                       MCP for a reproducible tool surface\n  --project-mcp                        Opt in to loading a project-scoped\n                                       .mcp.json (default off; a checked-in\n                                       .mcp.json can spawn commands)\n  --replay-user-messages               Stream-input mode: echo each accepted\n                                       stdin user message back as a `user`\n                                       event (transcript/correlation)\n  --allow-dangerous-bypass             Bypass all permission prompts in\n                                       headless mode (DANGEROUS: auto-approves\n                                       all tool calls) (default: false)\n  -y, --yolo                           Alias for --allow-dangerous-bypass\n                                       (default: false)\n  --dangerously-skip-permissions       Alias for --allow-dangerous-bypass\n                                       (default: false)\n  -h, --help                           display help for command\n",
     "agent-network": "Usage: chainlesschain agent-network|anet [options] [command]\n\nDecentralized Agent Network (Phase 24) — DID / registry / credentials / task\nrouting\n\nOptions:\n  -h, --help                                           display help for command\n\nCommands:\n  config [options]                                     Show network constants & reputation weights\n  dimensions [options]                                 List reputation dimensions\n  task-statuses [options]                              List task lifecycle statuses\n  did-create [options]                                 Create an Agent DID (Ed25519 + DID document)\n  did-resolve [options] <did>                          Resolve DID → DID document\n  dids [options]                                       List Agent DIDs\n  did-deactivate [options] <did>                       Deactivate a DID (also forces registry offline)\n  sign [options] <did> <data>                          Sign data with agent's Ed25519 key\n  verify [options] <did> <data> <signature>            Verify a signature from an agent\n  register [options] <did> <orgId>                     Register an Agent in the federated registry\n  unregister [options] <did>                           Remove an Agent from the registry\n  heartbeat [options] <did>                            Bump last_heartbeat (forces online)\n  discover [options]                                   Discover agents (capability / org / status)\n  sweep [options]                                      Mark stale online agents offline\n  peer-add [options] <peerId>                          Add/update a Kademlia peer (k-bucket auto-computed)\n  peer-remove [options] <peerId>                       Remove a peer\n  peers [options]                                      List peers (optionally by k-bucket)\n  auth-start [options] <did>                           Issue an auth challenge for a DID\n  auth-complete [options] <sessionId> <signature>      Complete auth with signature over challenge\n  auth-validate [options] <token>                      Validate a session token (returns agentDid or exits 1)\n  auth-sessions [options]                              List auth sessions\n  credential-issue [options] <issuerDid> <subjectDid>  Issue a VC with HMAC/Ed25519 proof\n  credential-verify [options] <id>                     Verify a VC (signature + expiry + revocation)\n  credential-revoke [options] <id>                     Revoke a credential\n  credential-show [options] <id>                       Show a credential\n  credentials [options]                                List credentials (filter by subject/issuer/status/type)\n  task-route [options] <sourceOrg> <taskType>          Route task → pick best-rep agent matching capability\n  task-show [options] <taskId>                         Show a task\n  task-status [options] <taskId> <status>              Update task status (terminal states set completedAt)\n  task-cancel [options] <taskId>                       Cancel a task (sets CANCELLED + reason)\n  tasks [options]                                      List tasks\n  rep-update [options] <did> <dimension> <score>       Record a reputation observation\n  rep-show [options] <did>                             Show reputation summary (weighted total + per-dim avg)\n  rep-history [options] <did>                          Show reputation history (newest first)\n  rep-top [options]                                    Top agents by dimension (or total)\n  stats [options]                                      Network-level statistics\n  agent-maturities-v2                                  List V2 agent maturity states\n  task-lifecycles-v2                                   List V2 task lifecycle states\n  stats-v2                                             V2 agent-network stats\n  get-max-active-agents-v2                             Get max active agents per network (V2)\n  set-max-active-agents-v2 <n>                         Set max active agents per network (V2)\n  get-max-pending-tasks-v2                             Get max pending tasks per agent (V2)\n  set-max-pending-tasks-v2 <n>                         Set max pending tasks per agent (V2)\n  get-agent-idle-ms-v2                                 Get agent idle threshold (V2)\n  set-agent-idle-ms-v2 <ms>                            Set agent idle threshold (V2)\n  get-task-stuck-ms-v2                                 Get task stuck threshold (V2)\n  set-task-stuck-ms-v2 <ms>                            Set task stuck threshold (V2)\n  active-agent-count-v2 <networkId>                    Active agent count for network (V2)\n  pending-task-count-v2 <agentId>                      Pending task count for agent (V2)\n  register-agent-v2 [options] <id>                     Register a V2 agent\n  get-agent-v2 <id>                                    Get a V2 agent\n  list-agents-v2 [options]                             List V2 agents\n  set-agent-status-v2 <id> <next>                      Set V2 agent status\n  activate-agent-v2 <id>                               Activate a V2 agent\n  suspend-agent-v2 <id>                                Suspend a V2 agent\n  revoke-agent-v2 <id>                                 Revoke a V2 agent\n  touch-agent-v2 <id>                                  Touch a V2 agent\n  create-task-v2 [options] <id>                        Create a V2 task\n  get-task-v2 <id>                                     Get a V2 task\n  list-tasks-v2 [options]                              List V2 tasks\n  set-task-status-v2 <id> <next>                       Set V2 task status\n  start-task-v2 <id>                                   Start a V2 task\n  complete-task-v2 <id>                                Complete a V2 task\n  fail-task-v2 <id>                                    Fail a V2 task\n  cancel-task-v2 <id>                                  Cancel a V2 task\n  auto-suspend-idle-agents-v2                          Auto-suspend idle V2 agents\n  auto-fail-stuck-tasks-v2                             Auto-fail stuck V2 tasks\n  help [command]                                       display help for command\n",
     "agents": "Usage: chainlesschain agents [options] [command]\n\nUser-defined subagents (.claude/agents/*.md)\n\nOptions:\n  -h, --help                        display help for command\n\nCommands:\n  background|bg [options]           List background agent sessions\n  logs [options] <id>               Print recent output from a background agent\n  view [options] <id>               Show a detailed background agent view\n  stop [options] <id>               Stop a running background agent\n  rename [options] <id> <title...>  Rename a background agent session\n  list|ls [options]                 List discovered subagents (project +\n                                    personal)\n  show [options] <name>             Show an agent's metadata + system prompt\n  run [options] <name> [task...]    Run a task headlessly as the named subagent\n  new [options] <name>              Scaffold a new agent file (project-native\n                                    .chainlesschain/agents/)\n  help [command]                    display help for command\n",
     "android": "Usage: chainlesschain android [options] [command]\n\nAndroid-native bridge: ContentResolver / SAF / Accessibility / Shizuku / root\n(Plan A A7)\n\nOptions:\n  -h, --help              display help for command\n\nCommands:\n  caps [options]          Probe what bridge capabilities are available on this\n                          device\n  contacts                ContentResolver: contacts\n  sms                     ContentResolver: SMS\n  calls                   ContentResolver: call log\n  app                     PackageManager: app inventory + Intent\n  fs                      SAF / sandbox filesystem\n  a11y                    Accessibility Service\n  shizuku                 Shizuku ADB-like privileges\n  root                    Magisk root su\n  perms [options] <name>  Check (and request) a runtime permission\n  help [command]          display help for command\n",
@@ -140,7 +140,7 @@
     "seshsearch": "Usage: chainlesschain seshsearch [options] [command]\n\nSession Search V2 governance\n\nOptions:\n  -h, --help                                  display help for command\n\nCommands:\n  enums-v2\n  config-v2\n  set-max-active-v2 <n>\n  set-max-pending-v2 <n>\n  set-idle-ms-v2 <n>\n  set-stuck-ms-v2 <n>\n  register-profile-v2 [options] <id> <owner>\n  activate-profile-v2 <id>\n  stale-profile-v2 <id>\n  archive-profile-v2 <id>\n  touch-profile-v2 <id>\n  get-profile-v2 <id>\n  list-profiles-v2\n  create-query-v2 [options] <id> <profileId>\n  searching-query-v2 <id>\n  complete-query-v2 <id>\n  fail-query-v2 <id> [reason]\n  cancel-query-v2 <id> [reason]\n  get-query-v2 <id>\n  list-queries-v2\n  auto-stale-idle-v2\n  auto-fail-stuck-v2\n  gov-stats-v2\n  reset-state-v2\n  help [command]                              display help for command\n",
     "seshtail": "Usage: chainlesschain seshtail [options] [command]\n\nSession Tail V2 governance\n\nOptions:\n  -h, --help                              display help for command\n\nCommands:\n  enums-v2\n  config-v2\n  set-max-active-v2 <n>\n  set-max-pending-v2 <n>\n  set-idle-ms-v2 <n>\n  set-stuck-ms-v2 <n>\n  register-sub-v2 [options] <id> <owner>\n  activate-sub-v2 <id>\n  pause-sub-v2 <id>\n  close-sub-v2 <id>\n  touch-sub-v2 <id>\n  get-sub-v2 <id>\n  list-subs-v2\n  create-event-v2 [options] <id> <subId>\n  tailing-event-v2 <id>\n  complete-event-v2 <id>\n  fail-event-v2 <id> [reason]\n  cancel-event-v2 <id> [reason]\n  get-event-v2 <id>\n  list-events-v2\n  auto-pause-idle-v2\n  auto-fail-stuck-v2\n  gov-stats-v2\n  reset-state-v2\n  help [command]                          display help for command\n",
     "seshu": "Usage: chainlesschain seshu [options] [command]\n\nSession Usage V2 governance\n\nOptions:\n  -h, --help                                  display help for command\n\nCommands:\n  enums-v2\n  config-v2\n  set-max-active-v2 <n>\n  set-max-pending-v2 <n>\n  set-idle-ms-v2 <n>\n  set-stuck-ms-v2 <n>\n  register-budget-v2 [options] <id> <owner>\n  activate-budget-v2 <id>\n  exhaust-budget-v2 <id>\n  archive-budget-v2 <id>\n  touch-budget-v2 <id>\n  get-budget-v2 <id>\n  list-budgets-v2\n  create-record-v2 [options] <id> <budgetId>\n  recording-record-v2 <id>\n  record-record-v2 <id>\n  reject-record-v2 <id> [reason]\n  cancel-record-v2 <id> [reason]\n  get-record-v2 <id>\n  list-records-v2\n  auto-exhaust-idle-v2\n  auto-reject-stuck-v2\n  gov-stats-v2\n  reset-state-v2\n  help [command]                              display help for command\n",
-    "session": "Usage: chainlesschain session [options] [command]\n\nConversation session management\n\nOptions:\n  -h, --help                               display help for command\n\nCommands:\n  mcp-recovery                             Inspect or adjudicate verified MCP outcome-unknown calls\n  list [options]                           List saved sessions\n  projection [options]                     Emit the canonical versioned session projection for IDEs\n  show [options] <id>                      Show a session's messages\n  pr-status [options] [id]                 PR/CI monitor + controlled auto-merge decision for a session's linked PR\n  resume [options] [id]                    Resume a session in chat mode (id optional — interactive picker, or most recent when piped)\n  export [options] <id>                    Export a session as Markdown (canonical JSONL transcript, then legacy DB fallback)\n  search [options] <query>                 Full-text search across agent session transcripts (JSONL --resume store)\n  delete [options] <id>                    Delete a session\n  rename [options] <id> <title...>         Rename a headless (JSONL) session — shows up in session list\n  prune [options]                          Delete JSONL sessions whose last activity is older than a cutoff (newest N always kept)\n  migrate [options] [source]               Migrate legacy JSON session files to JSONL\n  validate [options] [id]                  Validate JSONL session files\n  verify [options] [id]                    Verify transcript hash-chain integrity (tamper-evidence); omit id to verify all\n  repair [options] <id>                    Diagnose and repair one crash-partial final transcript record only\n  index [options] [query]                  Build/refresh the SQLite session index; search it, or mirror sessions off-box\n  policy [options] <id>                    Show or set per-session approval policy\n  lifecycle [options]                      List session-core handles (running/idle/parked)\n  park <id>                                Park a session (persist to disk, free process memory)\n  unpark <id>                              Resume a parked session\n  end [options] <id>                       Close a session (optionally consolidate trace into MemoryStore)\n  tail [options] <id>                      Follow a JSONL session's events (NDJSON on stdout)\n  usage [options] [id]                     Aggregate token usage (per-session or global)\n  workflow [options] [id]                  Inspect coding workflow state (.chainlesschain/sessions/)\n  conversation-maturities-v2 [options]     List V2 conversation maturity states\n  turn-lifecycles-v2 [options]             List V2 turn lifecycle states\n  stats-v2 [options]                       Show V2 session stats\n  get-max-active-conv-v2                   Get max active conversations per user\n  set-max-active-conv-v2 <n>               Set max active conversations per user\n  get-max-pending-turns-v2                 Get max pending turns per conversation\n  set-max-pending-turns-v2 <n>             Set max pending turns per conversation\n  get-conv-idle-ms-v2                      Get conversation idle ms\n  set-conv-idle-ms-v2 <ms>                 Set conversation idle ms\n  get-turn-stuck-ms-v2                     Get turn stuck ms\n  set-turn-stuck-ms-v2 <ms>                Set turn stuck ms\n  active-conv-count-v2 <userId>            Count active conversations for user\n  pending-turn-count-v2 <conversationId>   Count pending+streaming turns for conversation\n  register-conversation-v2 [options] <id>  Register V2 conversation (initial=draft)\n  get-conversation-v2 <id>                 Get V2 conversation by id\n  list-conversations-v2 [options]          List V2 conversations\n  activate-conversation-v2 <id>            Transition conversation → active\n  pause-conversation-v2 <id>               Transition conversation → paused\n  archive-conversation-v2 <id>             Transition conversation → archived (terminal)\n  touch-conversation-v2 <id>               Update conversation lastSeenAt\n  create-turn-v2 [options] <id>            Create V2 turn (initial=pending)\n  get-turn-v2 <id>                         Get V2 turn by id\n  list-turns-v2 [options]                  List V2 turns\n  stream-turn-v2 <id>                      Transition turn → streaming\n  complete-turn-v2 <id>                    Transition turn → completed (terminal)\n  fail-turn-v2 <id>                        Transition turn → failed (terminal)\n  cancel-turn-v2 <id>                      Transition turn → cancelled (terminal)\n  auto-archive-idle-conv-v2                Auto-archive idle conversations; output flipped\n  auto-fail-stuck-turns-v2                 Auto-fail stuck streaming turns; output flipped\n  help [command]                           display help for command\n",
+    "session": "Usage: chainlesschain session [options] [command]\n\nConversation session management\n\nOptions:\n  -h, --help                               display help for command\n\nCommands:\n  mcp-recovery                             Inspect or adjudicate verified MCP outcome-unknown calls\n  list [options]                           List saved sessions\n  projection [options]                     Emit the canonical versioned session projection for IDEs\n  show [options] <id>                      Show a session's messages\n  pr-status [options] [id]                 PR/CI monitor + controlled auto-merge decision for a session's linked PR\n  resume [options] [id]                    Resume a session in chat mode (id optional — interactive picker, or most recent when piped)\n  export [options] <id>                    Export a session as Markdown (canonical JSONL transcript, then legacy DB fallback)\n  search [options] <query>                 Full-text search across agent session transcripts (JSONL --resume store)\n  delete [options] <id>                    Delete a session\n  rename [options] <id> <title...>         Rename a headless (JSONL) session — shows up in session list\n  prune [options]                          Delete JSONL sessions whose last activity is older than a cutoff (newest N always kept)\n  migrate [options] [source]               Migrate legacy JSON session files to JSONL\n  validate [options] [id]                  Validate JSONL session files\n  verify [options] [id]                    Verify transcript hash-chain integrity (tamper-evidence); omit id to verify all\n  repair [options] <id>                    Diagnose and repair one crash-partial final transcript record only\n  index [options] [query]                  Build/refresh the SQLite session index; search it, or mirror sessions off-box\n  policy [options] <id>                    Show or set per-session approval policy\n  lifecycle [options]                      List session-core handles (running/idle/parked)\n  park <id>                                Park a session (persist to disk, free process memory)\n  unpark <id>                              Resume a parked session\n  end [options] <id>                       Close a session (optionally consolidate trace into MemoryStore)\n  tail [options] <id>                      Follow a JSONL session's events (NDJSON on stdout)\n  usage [options] [id]                     Aggregate token usage (per-session or global)\n  observability [options] <request>        Export verified token/USD, retry, tool latency, diff, gate, artifact and PR causality\n  observability-authority [options] <id>   Print the verified headHash/eventCount/scope binding for a delivery flow\n  workflow [options] [id]                  Inspect coding workflow state (.chainlesschain/sessions/)\n  conversation-maturities-v2 [options]     List V2 conversation maturity states\n  turn-lifecycles-v2 [options]             List V2 turn lifecycle states\n  stats-v2 [options]                       Show V2 session stats\n  get-max-active-conv-v2                   Get max active conversations per user\n  set-max-active-conv-v2 <n>               Set max active conversations per user\n  get-max-pending-turns-v2                 Get max pending turns per conversation\n  set-max-pending-turns-v2 <n>             Set max pending turns per conversation\n  get-conv-idle-ms-v2                      Get conversation idle ms\n  set-conv-idle-ms-v2 <ms>                 Set conversation idle ms\n  get-turn-stuck-ms-v2                     Get turn stuck ms\n  set-turn-stuck-ms-v2 <ms>                Set turn stuck ms\n  active-conv-count-v2 <userId>            Count active conversations for user\n  pending-turn-count-v2 <conversationId>   Count pending+streaming turns for conversation\n  register-conversation-v2 [options] <id>  Register V2 conversation (initial=draft)\n  get-conversation-v2 <id>                 Get V2 conversation by id\n  list-conversations-v2 [options]          List V2 conversations\n  activate-conversation-v2 <id>            Transition conversation → active\n  pause-conversation-v2 <id>               Transition conversation → paused\n  archive-conversation-v2 <id>             Transition conversation → archived (terminal)\n  touch-conversation-v2 <id>               Update conversation lastSeenAt\n  create-turn-v2 [options] <id>            Create V2 turn (initial=pending)\n  get-turn-v2 <id>                         Get V2 turn by id\n  list-turns-v2 [options]                  List V2 turns\n  stream-turn-v2 <id>                      Transition turn → streaming\n  complete-turn-v2 <id>                    Transition turn → completed (terminal)\n  fail-turn-v2 <id>                        Transition turn → failed (terminal)\n  cancel-turn-v2 <id>                      Transition turn → cancelled (terminal)\n  auto-archive-idle-conv-v2                Auto-archive idle conversations; output flipped\n  auto-fail-stuck-turns-v2                 Auto-fail stuck streaming turns; output flipped\n  help [command]                           display help for command\n",
     "setup": "Usage: chainlesschain setup [options]\n\nInteractive setup wizard for ChainlessChain\n\nOptions:\n  --skip-download  Skip binary download\n  --skip-services  Skip Docker service setup\n  -h, --help       display help for command\n",
     "sganal": "Usage: chainlesschain sganal [options] [command]\n\nSocial Graph Analytics V2 governance (in-memory, CLI v0.143.0)\n\nOptions:\n  -h, --help                      display help for command\n\nCommands:\n  enums-v2\n  register-profile-v2 [options]\n  activate-profile-v2 <id>\n  stale-profile-v2 <id>\n  archive-profile-v2 <id>\n  touch-profile-v2 <id>\n  get-profile-v2 <id>\n  list-profiles-v2\n  create-run-v2 [options]\n  running-run-v2 <id>\n  complete-run-v2 <id>\n  fail-run-v2 [options] <id>\n  cancel-run-v2 [options] <id>\n  get-run-v2 <id>\n  list-runs-v2\n  config-v2\n  set-max-active-profiles-v2 <n>\n  set-max-pending-runs-v2 <n>\n  set-profile-idle-ms-v2 <ms>\n  set-run-stuck-ms-v2 <ms>\n  auto-stale-idle-v2\n  auto-fail-stuck-v2\n  gov-stats-v2\n  help [command]                  display help for command\n",
     "siem": "Usage: chainlesschain siem [options] [command]\n\nSIEM integration — log export to external targets\n\nOptions:\n  -h, --help                                    display help for command\n\nCommands:\n  targets [options]                             List SIEM export targets\n  add-target [options] <type> <url>             Add a SIEM target (splunk_hec, elasticsearch, azure_sentinel)\n  export <target-id>                            Export logs to a SIEM target\n  stats [options]                               Show SIEM export statistics\n  formats                                       List SIEM export formats (V2)\n  target-types                                  List SIEM target types (V2)\n  severities                                    List SIEM severity levels (V2)\n  statuses                                      List SIEM target statuses (V2)\n  default-batch-size                            Show default SIEM batch size (V2)\n  severity-cef <severity>                       Map a SIEM severity to its CEF integer (0-10)\n  format-log [options] <format>                 Format a JSON log payload as cef|leef|json\n  add-target-v2 [options]                       Add a SIEM target via canonical options (V2)\n  remove-target <target-id>                     Remove a SIEM target (V2)\n  set-status <target-id> <status>               Transition a SIEM target's status (V2)\n  export-v2 [options] <target-id>               Batch-export logs to a target (V2)\n  stats-v2                                      Show extended SIEM stats (byFormat/byType/byStatus, V2)\n  by-status <status>                            List SIEM targets filtered by status (V2)\n  enums-v2                                      Show V2 enums (target maturity + export lifecycle)\n  config-v2                                     Show V2 config thresholds\n  set-max-active-targets-v2 <n>                 Set max active targets per operator\n  set-max-pending-exports-v2 <n>                Set max pending exports per target\n  set-target-idle-ms-v2 <n>                     Set target idle threshold (ms)\n  set-export-stuck-ms-v2 <n>                    Set export stuck threshold (ms)\n  register-target-v2 [options] <id> <operator>  Register V2 SIEM target\n  activate-target-v2 <id>                       Activate target\n  degrade-target-v2 <id>                        Degrade target\n  retire-target-v2 <id>                         Retire target (terminal)\n  touch-target-v2 <id>                          Touch target lastTouchedAt\n  get-target-v2 <id>                            Get V2 target\n  list-targets-v2                               List V2 targets\n  create-export-v2 [options] <id> <targetId>    Create V2 export (queued)\n  start-export-v2 <id>                          Start export\n  deliver-export-v2 <id>                        Deliver export\n  fail-export-v2 <id> [reason]                  Fail export\n  cancel-export-v2 <id> [reason]                Cancel export\n  get-export-v2 <id>                            Get V2 export\n  list-exports-v2                               List V2 exports\n  auto-degrade-idle-v2                          Auto-degrade idle targets\n  auto-fail-stuck-v2                            Auto-fail stuck sending exports\n  gov-stats-v2                                  V2 governance aggregate stats\n  help [command]                                display help for command\n",

package/src/commands/agent.js

@@ -24,6 +24,7 @@ import {
 import { appendSecurityAuditEvent } from "../lib/security-audit.js";
 import {
   agentPrintArgument,
+  BACKGROUND_EPHEMERAL_UNSUPPORTED_CODE,
   canonicalizeBackgroundSessionArgv,
   captureCommandArgvGrammar,
   transformBackgroundLaunchArgv,
@@ -175,6 +176,52 @@ function readStdin() {
   });
 }
 
+/** Normalize the three opt-in causal-report scope flags without losing empties. */
+export function resolveAgentObservabilityScope(options = {}) {
+  const fields = [
+    ["observabilityWorkspace", "workspaceId", "--observability-workspace"],
+    ["observabilityTeam", "teamId", "--observability-team"],
+    ["observabilityPolicy", "policyId", "--observability-policy"],
+  ];
+  const providedFields = fields.filter(
+    ([optionName]) => options[optionName] !== undefined,
+  );
+  if (providedFields.length > 0 && options.forkSession === true) {
+    throw new Error(
+      "observability scope flags cannot be combined with --fork-session; a fork inherits the source session's immutable observability scope",
+    );
+  }
+  let provided = false;
+  const scope = {};
+  for (const [optionName, scopeName, flag] of fields) {
+    const value = options[optionName];
+    if (value === undefined) {
+      scope[scopeName] = null;
+      continue;
+    }
+    provided = true;
+    if (typeof value !== "string") {
+      throw new TypeError(`${flag} requires a non-empty string id`);
+    }
+    const normalized = value.trim();
+    const hasControlCharacter = [...normalized].some((character) => {
+      const code = character.codePointAt(0);
+      return code <= 0x1f || code === 0x7f;
+    });
+    if (!normalized || normalized.length > 256 || hasControlCharacter) {
+      throw new TypeError(`${flag} requires a valid non-empty id`);
+    }
+    scope[scopeName] = normalized;
+  }
+  if (!provided) return undefined;
+  if (options.ephemeral === true) {
+    throw new Error(
+      "observability scope requires durable session persistence and cannot be combined with --ephemeral",
+    );
+  }
+  return scope;
+}
+
 export function registerAgentCommand(program) {
   program
     .command("agent")
@@ -496,6 +543,18 @@ export function registerAgentCommand(program) {
       "--max-budget-usd <amount>",
       "Hard USD spend cap: stop the run before the next paid LLM call once the estimated cost reaches this (headless; uses the cc cost price table)",
     )
+    .option(
+      "--observability-workspace <id>",
+      "Persist a workspace scope on new session authority for causal reports",
+    )
+    .option(
+      "--observability-team <id>",
+      "Persist a team scope on new session authority for causal reports",
+    )
+    .option(
+      "--observability-policy <id>",
+      "Persist a policy scope on new session authority for causal reports",
+    )
     .option(
       "--strict-mcp-config",
       "Use ONLY --mcp-config servers; ignore registered (cc mcp add) and IDE-bridge MCP for a reproducible tool surface",
@@ -520,6 +579,19 @@ export function registerAgentCommand(program) {
       false,
     )
     .action(async (task, options, command) => {
+      // Scope is immutable session authority. Resolve every scope/fork
+      // conflict before worktree creation, session forking, bootstrap, or any
+      // other externally visible setup performed by this action.
+      let observabilityScope;
+      try {
+        observabilityScope = resolveAgentObservabilityScope(options);
+      } catch (error) {
+        process.stderr.write(`${error.message}\n`);
+        process.exitCode = 1;
+        return;
+      }
+      const hasObservabilityScope = observabilityScope !== undefined;
+
       // --capabilities: print the machine-readable manifest and exit — no
       // config, no bootstrap, no network (gap-analysis 2026-07-11 快速收益 #6).
       if (options.capabilities) {
@@ -625,6 +697,15 @@ export function registerAgentCommand(program) {
       }
       const backgroundRequested =
         options.background === true || options.bg === true;
+      if (backgroundRequested && options.ephemeral === true) {
+        const error = new Error(
+          "--bg cannot be combined with --ephemeral because background sessions require durable session and interaction authority",
+        );
+        error.code = BACKGROUND_EPHEMERAL_UNSUPPORTED_CODE;
+        process.stderr.write(`${error.message}\n`);
+        process.exitCode = 1;
+        return;
+      }
       const invocationCwd = process.cwd();
       let worktreeDecision = {
         enabled: false,
@@ -1182,7 +1263,6 @@ export function registerAgentCommand(program) {
         const { mergePricing } = await import("../lib/llm-pricing.js");
         priceTable = mergePricing(loadConfig().llm?.pricing);
       }
-
       // 鈹€鈹€ Streaming-input mode (--input-format stream-json) 鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€鈹€
       // A persistent multi-turn conversation driven by NDJSON user events on
       // stdin; output is always NDJSON. Routed before single-prompt handling
@@ -1248,6 +1328,9 @@ export function registerAgentCommand(program) {
             maxCostUsd,
             priceTable,
             chatFn: fallbackChatFn,
+            observabilityScope: hasObservabilityScope
+              ? observabilityScope
+              : undefined,
             // --json-schema: structured output for stream-INPUT mode. The schema
             // is resolved + meta-validated up front, its output contract injected
             // into the system prompt, and a per-turn `structured_result` event is
@@ -1544,6 +1627,9 @@ export function registerAgentCommand(program) {
           // --max-budget-usd: hard spend cap (+ price table from config llm.pricing)
           maxCostUsd,
           priceTable,
+          observabilityScope: hasObservabilityScope
+            ? observabilityScope
+            : undefined,
           // --fallback-model: retry once on a backup model on transient errors
           chatFn: fallbackChatFn,
         };
@@ -1701,6 +1787,9 @@ export function registerAgentCommand(program) {
         // --channels: inbound channel listeners (webhook/telegram) whose
         // events become user turns in this session.
         channels: options.channels || null,
+        observabilityScope: hasObservabilityScope
+          ? observabilityScope
+          : undefined,
       });
       await runtime.startAgentSession();
       // Interactive session ended (REPL closed) — settle the worktree.

package/src/commands/chat.js

@@ -4,8 +4,16 @@
  */
 
 import { createAgentRuntimeFactory } from "../runtime/runtime-factory.js";
+import { assertChatSessionUsageAdmission } from "../lib/chat-session-admission.js";
 
-export function registerChatCommand(program) {
+export { assertChatSessionUsageAdmission } from "../lib/chat-session-admission.js";
+
+export function registerChatCommand(program, dependencies = {}) {
+  const createRuntimeFactory =
+    dependencies.createAgentRuntimeFactory || createAgentRuntimeFactory;
+  const assertUsageAdmission =
+    dependencies.assertChatSessionUsageAdmission ||
+    assertChatSessionUsageAdmission;
   program
     .command("chat")
     .description("Start an interactive AI chat session")
@@ -22,7 +30,8 @@ export function registerChatCommand(program) {
     )
     .option("--session <id>", "Resume a previous session (agent mode)")
     .action(async (options) => {
-      const factory = createAgentRuntimeFactory();
+      if (!options.agent) assertUsageAdmission(options.session);
+      const factory = createRuntimeFactory();
       const runtimeOptions = {
         model: options.model,
         provider: options.provider,

package/src/commands/compact.js

@@ -5,7 +5,7 @@
  *
  *   cc compact <session-id>              compact and persist (writes a `compact`
  *                                        checkpoint event the resume path honors)
- *   cc compact <session-id> --dry-run    preview the reduction, write nothing
+ *   cc compact <session-id> --dry-run    offline preview; no provider call/write
  *
  * Engine: PromptCompressor with a bounded structured semantic handoff using the
  * session's recorded provider. `--offline` explicitly selects deterministic
@@ -23,14 +23,17 @@ import chalk from "chalk";
 import { logger } from "../lib/logger.js";
 import {
   appendAuthorityEventIfHead,
+  appendEventIfHead,
   readVerifiedProjection,
   sessionExists,
 } from "../harness/jsonl-session-store.js";
 import { PromptCompressor } from "../harness/prompt-compressor.js";
+import { compactConversationWithProvider } from "../harness/provider-backed-compaction.js";
+import { runMeteredDirectModelCall } from "../lib/direct-model-usage.js";
 import { chatWithTools } from "../runtime/agent-core.js";
 
 /** Build a compressor sized to the session (or explicit overrides). */
-function buildCompressor(options, recorded) {
+function buildCompressor(options, recorded, llmQuery) {
   const maxTokens = options.maxTokens ? Number(options.maxTokens) : undefined;
   const maxMessages = options.maxMessages
     ? Number(options.maxMessages)
@@ -40,7 +43,7 @@ function buildCompressor(options, recorded) {
     return new PromptCompressor({
       maxTokens,
       maxMessages,
-      llmQuery: buildSemanticQuery(options, recorded),
+      llmQuery,
     });
   }
   const model = options.model || recorded.model || undefined;
@@ -49,32 +52,89 @@ function buildCompressor(options, recorded) {
   return new PromptCompressor({
     model,
     provider,
-    llmQuery: buildSemanticQuery(options, { model, provider }),
+    llmQuery,
   });
 }
 
-function buildSemanticQuery(options, recorded) {
+function attachMeteringMetadata(value, { callId, settled }) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return;
+  try {
+    Object.defineProperties(value, {
+      compactionCallId: {
+        configurable: true,
+        value: callId || undefined,
+      },
+      usageLedgerSettled: {
+        configurable: true,
+        value: settled === true,
+      },
+    });
+  } catch {
+    // A frozen provider error still propagates. The durable started row remains
+    // authoritative if its unknown settlement could not be attached here.
+  }
+}
+
+function buildSemanticQuery(options, recorded, sessionId, ledger) {
   const provider = options.provider || recorded.provider || undefined;
   const model = options.model || recorded.model || undefined;
-  if (options.offline || !provider) return null;
+  // A preview must be both write-free and spend-free. It uses the same
+  // deterministic compressor thresholds, but never installs an LLM callback.
+  if (options.offline || options.dryRun || !provider) return null;
   const baseUrl =
     options.baseUrl ||
     (provider === "ollama" ? "http://localhost:11434" : undefined);
   return async (prompt) => {
-    const response = await chatWithTools([{ role: "user", content: prompt }], {
-      provider,
-      model,
-      baseUrl,
-      enabledToolNames: [],
-      extraToolDefinitions: [],
-      maxOutputTokens: 2048,
-    });
-    return {
-      summary: response?.message?.content || "",
-      usage: response?.usage || null,
-      provider,
-      model,
-    };
+    let callId = null;
+    try {
+      const response = await runMeteredDirectModelCall({
+        sessionId,
+        provider,
+        model,
+        source: "semantic-compaction",
+        persist: async (type, data) => {
+          const appended = appendEventIfHead(
+            sessionId,
+            type,
+            data,
+            ledger.headHash,
+          );
+          ledger.headHash = appended.hash;
+          if (type === "model_usage_started") {
+            callId = data.callId;
+            ledger.callId = callId;
+            ledger.started = true;
+          } else {
+            ledger.settled = true;
+          }
+        },
+        call: () =>
+          chatWithTools([{ role: "user", content: prompt }], {
+            provider,
+            model,
+            baseUrl,
+            enabledToolNames: [],
+            extraToolDefinitions: [],
+            hostManagedToolPolicy: null,
+            contextEngine: null,
+            maxOutputTokens: 2048,
+          }),
+      });
+      return {
+        summary: response?.message?.content || "",
+        usage: response?.usage || null,
+        provider,
+        model,
+        callId,
+        usageLedgerSettled: true,
+      };
+    } catch (error) {
+      attachMeteringMetadata(error, {
+        callId: callId || ledger.callId,
+        settled: ledger.settled,
+      });
+      throw error;
+    }
   };
 }
 
@@ -144,9 +204,32 @@ export function registerCompactCommand(program) {
 
         const source = readCompactSource(sessionId);
         const messages = source.messages;
-        const compressor = buildCompressor(options, source.recorded);
+        const ledger = {
+          headHash: source.headHash,
+          callId: null,
+          started: false,
+          settled: false,
+        };
+        const llmQuery = buildSemanticQuery(
+          options,
+          source.recorded,
+          sessionId,
+          ledger,
+        );
+        const compressor = buildCompressor(options, source.recorded, llmQuery);
+        // llmQuery already persisted a complete call ledger. The provider
+        // helper only carries its metadata through stats; its projected usage
+        // event is intentionally not appended a second time here.
         const { messages: compacted, stats } =
-          await compressor.compress(messages);
+          await compactConversationWithProvider(messages, {
+            compressor,
+            provider: options.provider || source.recorded.provider || undefined,
+            model: options.model || source.recorded.model || undefined,
+          });
+
+        if (ledger.started && !ledger.settled) {
+          throw new Error("semantic compaction usage ledger is unsettled");
+        }
 
         const reduced = stats.saved > 0 || compacted.length < messages.length;
 
@@ -170,7 +253,7 @@ export function registerCompactCommand(program) {
             sessionId,
             "compact",
             { ...stats, messages: compacted },
-            source.headHash,
+            ledger.headHash,
           );
         }
 

package/src/commands/loop.js

@@ -44,15 +44,20 @@ import {
   appendEvent,
   appendEventIfHead,
   readEvents,
+  sessionPath,
   sessionExists,
 } from "../harness/jsonl-session-store.js";
 import { openSchedulerStore } from "../lib/scheduler-kernel/store.js";
-import { LoopSchedulerBridge } from "../lib/scheduler-kernel/loop-adapter.js";
+import {
+  LoopSchedulerBridge,
+  migrateSavedLoopSession,
+} from "../lib/scheduler-kernel/loop-adapter.js";
 
 export const _deps = {
   spawn: executionBroker.spawn.bind(executionBroker),
   openSchedulerStore,
   createLoopSchedulerBridge: (options) => new LoopSchedulerBridge(options),
+  migrateSavedLoopSession,
 };
 
 /**
@@ -395,7 +400,7 @@ export function registerLoopCommand(program) {
               : null,
             { title: `loop: ${operands.join(" ")}`.slice(0, 80) },
           );
-          appendEvent(sessionId, "loop_config", {
+          savedConfig = {
             execMode,
             operands,
             dynamic,
@@ -404,7 +409,8 @@ export function registerLoopCommand(program) {
             untilExitZero,
             until: untilRaw || null,
             cwd: executionCwd,
-          });
+          };
+          appendEvent(sessionId, "loop_config", savedConfig);
         }
 
         // --- SIGINT → graceful stop after the current iteration ---
@@ -446,15 +452,27 @@ export function registerLoopCommand(program) {
         try {
           const executionId = sessionId || `loop-${randomUUID()}`;
           schedulerStore = _deps.openSchedulerStore();
+          const definition = {
+            executionId,
+            cwd: executionCwd,
+            execMode,
+            operands,
+            dynamic,
+          };
+          if (persist) {
+            _deps.migrateSavedLoopSession({
+              schedulerStore,
+              sessionId,
+              config: savedConfig,
+              definition,
+              readEvents,
+              appendEventIfHead,
+              sessionFilePath: sessionPath,
+            });
+          }
           const loopScheduler = _deps.createLoopSchedulerBridge({
             schedulerStore,
-            definition: {
-              executionId,
-              cwd: executionCwd,
-              execMode,
-              operands,
-              dynamic,
-            },
+            definition,
             runIteration: async (n, { signal } = {}) => {
               logger.log(chalk.gray(`\n▸ iteration ${n} — ${label}`));
               const t0 = Date.now();

package/src/commands/routine.js

@@ -345,7 +345,7 @@ export function registerRoutineCommand(program) {
             runId,
           });
         }
-        for (const r of store.githubRoutines()) {
+        for (const r of store.githubRoutines({ schedulerMigration: true })) {
           const github = await bridge.pollGithub(r, {
             fetchEvents: defaultFetchEvents,
           });