chainlesschain 0.166.89 → 0.166.90

package/src/assets/web-panel/assets/{zoom-BulmeAGy.js → zoom-DnXDAQxA.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-ClsJN8sW.js";import{i as f}from"./motion-fHosyV5c.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-DJ2OiRvh.js";import{i as f}from"./motion-BoyB3ilP.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,7 +8,7 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-ClsJN8sW.js"></script>
+  <script type="module" crossorigin src="./assets/index-DJ2OiRvh.js"></script>
   <link rel="modulepreload" crossorigin href="./assets/vendor-Bn1JzzAn.js">
   <link rel="modulepreload" crossorigin href="./assets/icons-DG5UD-6K.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">

package/src/command-help-index.json

@@ -14,10 +14,10 @@
     "attach": "Usage: chainlesschain attach [options] <id>\n\nAttach to a background agent — interactive when its session transport is\navailable, log stream otherwise\n\nOptions:\n  -n, --lines <n>  Initial lines to print (default: \"100\")\n  --no-follow      Print the initial log tail and exit\n  --no-input       Log stream only; never send prompts\n  -h, --help       display help for command\n",
     "audit": "Usage: chainlesschain audit [options] [command]\n\nAudit log — security event tracking and compliance\n\nOptions:\n  -h, --help                                         display help for command\n\nCommands:\n  log [options]                                      Show recent audit events\n  search [options] <query>                           Search audit logs\n  stats [options]                                    Show audit statistics\n  export [options]                                   Export audit logs to file\n  purge [options]                                    Delete old audit logs\n  types                                              List available event types and risk levels\n  log-statuses-v2                                    List V2 log lifecycle states\n  integrity-statuses-v2                              List V2 integrity states\n  alert-statuses-v2                                  List V2 alert lifecycle states\n  event-types-v2                                     List V2 event types\n  risk-levels-v2                                     List V2 risk levels\n  default-max-alerts-per-actor                       Show default max alerts per actor\n  max-alerts-per-actor                               Show current max alerts per actor\n  set-max-alerts-per-actor <n>                       Update max alerts per actor\n  default-archive-retention-ms                       Show default archive retention\n  archive-retention-ms                               Show current archive retention\n  set-archive-retention-ms <ms>                      Update archive retention (ms)\n  default-purge-retention-ms                         Show default purge retention\n  purge-retention-ms                                 Show current purge retention\n  set-purge-retention-ms <ms>                        Update purge retention (ms)\n  open-alert-count [options]                         Count OPEN alerts (optionally scoped to actor)\n  log-event-v2 [options] <log-id>                    V2: register a hash-chained log entry\n  log-status-v2 <log-id>                             V2: show log status + integrity\n  set-log-status-v2 [options] <log-id> <status>      V2: transition log status (active|archived|purged)\n  verify-chain-v2                                    V2: re-hash the chain and mark each entry verified/corrupted\n  auto-archive-logs                                  V2: bulk-flip stale ACTIVE logs → ARCHIVED\n  auto-purge-logs                                    V2: bulk-flip stale ARCHIVED logs → PURGED\n  alert-status-v2 <alert-id>                         V2: show alert status\n  set-alert-status-v2 [options] <alert-id> <status>  V2: transition alert status (open|acknowledged|resolved|dismissed)\n  acknowledge-alert [options] <alert-id>             V2: shortcut → acknowledged\n  resolve-alert [options] <alert-id>                 V2: shortcut → resolved\n  dismiss-alert [options] <alert-id>                 V2: shortcut → dismissed\n  stats-v2                                           V2: all-enum-key stats snapshot\n  mtc                                                Audit MTC double-track (Phase 2 scaffolding, default disabled)\n  help [command]                                     display help for command\n",
     "auth": "Usage: chainlesschain auth [options] [command]\n\nRBAC permission management\n\nOptions:\n  -h, --help                                 display help for command\n\nCommands:\n  roles [options]                            List all roles\n  create-role [options] <name>               Create a custom role\n  delete-role [options] <name>               Delete a custom role\n  grant [options] <user-did> <role>          Grant a role to a user\n  revoke <user-did> <role>                   Revoke a role from a user\n  grant-permission <user-did> <permission>   Grant a direct permission to a user\n  revoke-permission <user-did> <permission>  Revoke a direct permission from a user\n  check [options] <user-did> <permission>    Check if a user has a specific permission\n  permissions [options] <user-did>           Show all permissions for a user\n  users [options]                            List all users with role assignments\n  scopes                                     List all available permission scopes\n  help [command]                             display help for command\n",
-    "auto": "Usage: chainlesschain auto [options] [command]\n\nWorkflow automation engine — 12 SaaS connectors + triggers (Phase 96)\n\nOptions:\n  -h, --help                                                     display help for command\n\nCommands:\n  connectors [options]                                           List 12 built-in SaaS connectors\n  trigger-types [options]                                        List trigger types\n  statuses                                                       List flow and execution statuses\n  config [options]                                               Show automation engine config\n  create [options]                                               Create a flow\n  flows [options]                                                List flows\n  center-projection [options]                                    Emit the versioned Automation Center projection for IDEs\n  center-runtime-action [options] <occurrenceId> <pause|resume>  Pause or resume one exact fenced scheduler occurrence\n  center-incident-action [options] <incidentId> <retry|cancel>   Retry or cancel a revision-gated Automation Center incident\n  center-routine-create [options]                                Create a revision-gated Routine from JSON stdin\n  center-routine-edit [options] <routineId>                      Edit a revision-gated Routine from JSON stdin\n  center-routine-action [options] <routineId> <action>           Run a revision-gated Routine action\n  center-action [options] <flowId> <action>                      Run a revision-gated Automation Center action\n  show [options] <flowId>                                        Show flow detail\n  activate <flowId>                                              Set flow status = active\n  pause <flowId>                                                 Set flow status = paused\n  archive <flowId>                                               Set flow status = archived\n  delete <flowId>                                                Delete a flow (cascades triggers + executions)\n  schedule [options] <flowId>                                    Set flow cron schedule\n  run-scheduled [options]                                        Run due cron flows through the durable scheduler kernel\n  set-execution-budget [options] <flowId>                        Set the durable unattended-execution budget for a flow\n  execution-preflight [options] <flowId>                         Check live RBAC connector permissions and durable budget availability\n  share [options] <flowId>                                       Record flow share to another org\n  templates [options]                                            List built-in flow templates\n  import-template [options] <templateId>                         Import a built-in template as a flow\n  add-trigger [options] <flowId>                                 Add a trigger to a flow\n  triggers [options] [flowId]                                    List triggers (optionally scoped to a flow)\n  enable-trigger <triggerId>                                     Enable a trigger\n  disable-trigger <triggerId>                                    Disable a trigger\n  fire-trigger [options] <triggerId>                             Simulate trigger firing (executes flow)\n  dispatch-channel-event [options]                               Dispatch one durable, scope-checked webhook or Telegram event\n  execute [options] <flowId>                                     Manually execute a flow (simulated)\n  exec-show [options] <execId>                                   Show execution detail\n  logs [options]                                                 List executions\n  stats [options]                                                Show automation engine stats\n  automation-maturities-v2                                       List V2 automation maturity states\n  execution-lifecycles-v2                                        List V2 execution lifecycle states\n  stats-v2                                                       V2 automation engine stats\n  get-max-active-automations-v2                                  Get max active automations per owner (V2)\n  set-max-active-automations-v2 <n>                              Set max active automations per owner (V2)\n  get-max-running-executions-v2                                  Get max running executions per automation (V2)\n  set-max-running-executions-v2 <n>                              Set max running executions per automation (V2)\n  get-automation-idle-ms-v2                                      Get automation idle threshold (V2)\n  set-automation-idle-ms-v2 <ms>                                 Set automation idle threshold (V2)\n  get-execution-stuck-ms-v2                                      Get execution stuck threshold (V2)\n  set-execution-stuck-ms-v2 <ms>                                 Set execution stuck threshold (V2)\n  active-automation-count-v2 <ownerId>                           Active automation count for owner (V2)\n  running-execution-count-v2 <automationId>                      Running execution count for automation (V2)\n  register-automation-v2 [options] <id>                          Register a V2 automation\n  get-automation-v2 <id>                                         Get a V2 automation\n  list-automations-v2 [options]                                  List V2 automations\n  set-automation-status-v2 <id> <next>                           Set V2 automation status\n  activate-automation-v2 <id>                                    Activate a V2 automation\n  pause-automation-v2 <id>                                       Pause a V2 automation\n  retire-automation-v2 <id>                                      Retire a V2 automation\n  touch-automation-v2 <id>                                       Touch a V2 automation\n  create-execution-v2 [options] <id>                             Create a V2 execution\n  get-execution-v2 <id>                                          Get a V2 execution\n  list-executions-v2 [options]                                   List V2 executions\n  set-execution-status-v2 <id> <next>                            Set V2 execution status\n  start-execution-v2 <id>                                        Start a V2 execution\n  succeed-execution-v2 <id>                                      Succeed a V2 execution\n  fail-execution-v2 <id>                                         Fail a V2 execution\n  cancel-execution-v2 <id>                                       Cancel a V2 execution\n  auto-pause-idle-automations-v2                                 Auto-pause idle V2 automations\n  auto-fail-stuck-executions-v2                                  Auto-fail stuck V2 executions\n  help [command]                                                 display help for command\n",
+    "auto": "Usage: chainlesschain auto [options] [command]\n\nWorkflow automation engine — 12 SaaS connectors + triggers (Phase 96)\n\nOptions:\n  -h, --help                                                     display help for command\n\nCommands:\n  connectors [options]                                           List 12 built-in SaaS connectors\n  trigger-types [options]                                        List trigger types\n  statuses                                                       List flow and execution statuses\n  config [options]                                               Show automation engine config\n  create [options]                                               Create a flow\n  flows [options]                                                List flows\n  center-projection [options]                                    Emit the versioned Automation Center projection for IDEs\n  center-runtime-action [options] <occurrenceId> <pause|resume>  Pause or resume one exact fenced scheduler occurrence\n  center-incident-action [options] <incidentId> <retry|cancel>   Retry or cancel a revision-gated Automation Center incident\n  center-routine-create [options]                                Create a revision-gated Routine from JSON stdin\n  center-routine-edit [options] <routineId>                      Edit a revision-gated Routine from JSON stdin\n  center-routine-action [options] <routineId> <action>           Run a revision-gated Routine action\n  center-action [options] <flowId> <action>                      Run a revision-gated Automation Center action\n  show [options] <flowId>                                        Show flow detail\n  activate <flowId>                                              Set flow status = active\n  pause <flowId>                                                 Set flow status = paused\n  archive <flowId>                                               Set flow status = archived\n  delete <flowId>                                                Delete a flow (cascades triggers + executions)\n  schedule [options] <flowId>                                    Set flow cron schedule\n  run-scheduled [options]                                        Run due cron flows through the durable scheduler kernel\n  set-execution-budget [options] <flowId>                        Set the durable unattended-execution budget for a flow\n  execution-preflight [options] <flowId>                         Check live RBAC connector permissions and durable budget availability\n  share [options] <flowId>                                       Record flow share to another org\n  templates [options]                                            List built-in flow templates\n  import-template [options] <templateId>                         Import a built-in template as a flow\n  add-trigger [options] <flowId>                                 Add a trigger to a flow\n  triggers [options] [flowId]                                    List triggers (optionally scoped to a flow)\n  enable-trigger <triggerId>                                     Enable a trigger\n  disable-trigger <triggerId>                                    Disable a trigger\n  fire-trigger [options] <triggerId>                             Fire a trigger; use --test for simulation\n  dispatch-channel-event [options]                               Dispatch one durable, scope-checked webhook or Telegram event\n  execute [options] <flowId>                                     Execute a flow; use --test for simulation\n  exec-show [options] <execId>                                   Show execution detail\n  logs [options]                                                 List executions\n  stats [options]                                                Show automation engine stats\n  automation-maturities-v2                                       List V2 automation maturity states\n  execution-lifecycles-v2                                        List V2 execution lifecycle states\n  stats-v2                                                       V2 automation engine stats\n  get-max-active-automations-v2                                  Get max active automations per owner (V2)\n  set-max-active-automations-v2 <n>                              Set max active automations per owner (V2)\n  get-max-running-executions-v2                                  Get max running executions per automation (V2)\n  set-max-running-executions-v2 <n>                              Set max running executions per automation (V2)\n  get-automation-idle-ms-v2                                      Get automation idle threshold (V2)\n  set-automation-idle-ms-v2 <ms>                                 Set automation idle threshold (V2)\n  get-execution-stuck-ms-v2                                      Get execution stuck threshold (V2)\n  set-execution-stuck-ms-v2 <ms>                                 Set execution stuck threshold (V2)\n  active-automation-count-v2 <ownerId>                           Active automation count for owner (V2)\n  running-execution-count-v2 <automationId>                      Running execution count for automation (V2)\n  register-automation-v2 [options] <id>                          Register a V2 automation\n  get-automation-v2 <id>                                         Get a V2 automation\n  list-automations-v2 [options]                                  List V2 automations\n  set-automation-status-v2 <id> <next>                           Set V2 automation status\n  activate-automation-v2 <id>                                    Activate a V2 automation\n  pause-automation-v2 <id>                                       Pause a V2 automation\n  retire-automation-v2 <id>                                      Retire a V2 automation\n  touch-automation-v2 <id>                                       Touch a V2 automation\n  create-execution-v2 [options] <id>                             Create a V2 execution\n  get-execution-v2 <id>                                          Get a V2 execution\n  list-executions-v2 [options]                                   List V2 executions\n  set-execution-status-v2 <id> <next>                            Set V2 execution status\n  start-execution-v2 <id>                                        Start a V2 execution\n  succeed-execution-v2 <id>                                      Succeed a V2 execution\n  fail-execution-v2 <id>                                         Fail a V2 execution\n  cancel-execution-v2 <id>                                       Cancel a V2 execution\n  auto-pause-idle-automations-v2                                 Auto-pause idle V2 automations\n  auto-fail-stuck-executions-v2                                  Auto-fail stuck V2 executions\n  help [command]                                                 display help for command\n",
     "auto-mode": "Usage: chainlesschain auto-mode|automode [options] [command]\n\nInspect auto permission-mode defaults and effective config\n\nOptions:\n  -h, --help        display help for command\n\nCommands:\n  defaults          Print built-in auto-mode classification defaults as JSON\n  config [options]  Print the effective auto-mode config\n  eval [options]    Run the offline dangerous-operation classifier corpus and\n                    CI gate\n  help [command]    display help for command\n",
     "autoagent": "Usage: chainlesschain autoagent [options] [command]\n\nAutonomous agent V2 governance\n\nOptions:\n  -h, --help                                display help for command\n\nCommands:\n  enums-v2\n  config-v2\n  set-max-active-v2 <n>\n  set-max-pending-v2 <n>\n  set-idle-ms-v2 <n>\n  set-stuck-ms-v2 <n>\n  register-agent-v2 [options] <id> <owner>\n  activate-agent-v2 <id>\n  pause-agent-v2 <id>\n  archive-agent-v2 <id>\n  touch-agent-v2 <id>\n  get-agent-v2 <id>\n  list-agents-v2\n  create-run-v2 [options] <id> <agentId>\n  start-run-v2 <id>\n  complete-run-v2 <id>\n  fail-run-v2 <id> [reason]\n  cancel-run-v2 <id> [reason]\n  get-run-v2 <id>\n  list-runs-v2\n  auto-pause-idle-v2\n  auto-fail-stuck-v2\n  gov-stats-v2\n  reset-state-v2\n  help [command]                            display help for command\n",
-    "automation": "Usage: chainlesschain automation [options] [command]\n\nWorkflow automation engine — 12 SaaS connectors + triggers (Phase 96)\n\nOptions:\n  -h, --help                                                     display help for command\n\nCommands:\n  connectors [options]                                           List 12 built-in SaaS connectors\n  trigger-types [options]                                        List trigger types\n  statuses                                                       List flow and execution statuses\n  config [options]                                               Show automation engine config\n  create [options]                                               Create a flow\n  flows [options]                                                List flows\n  center-projection [options]                                    Emit the versioned Automation Center projection for IDEs\n  center-runtime-action [options] <occurrenceId> <pause|resume>  Pause or resume one exact fenced scheduler occurrence\n  center-incident-action [options] <incidentId> <retry|cancel>   Retry or cancel a revision-gated Automation Center incident\n  center-routine-create [options]                                Create a revision-gated Routine from JSON stdin\n  center-routine-edit [options] <routineId>                      Edit a revision-gated Routine from JSON stdin\n  center-routine-action [options] <routineId> <action>           Run a revision-gated Routine action\n  center-action [options] <flowId> <action>                      Run a revision-gated Automation Center action\n  show [options] <flowId>                                        Show flow detail\n  activate <flowId>                                              Set flow status = active\n  pause <flowId>                                                 Set flow status = paused\n  archive <flowId>                                               Set flow status = archived\n  delete <flowId>                                                Delete a flow (cascades triggers + executions)\n  schedule [options] <flowId>                                    Set flow cron schedule\n  run-scheduled [options]                                        Run due cron flows through the durable scheduler kernel\n  set-execution-budget [options] <flowId>                        Set the durable unattended-execution budget for a flow\n  execution-preflight [options] <flowId>                         Check live RBAC connector permissions and durable budget availability\n  share [options] <flowId>                                       Record flow share to another org\n  templates [options]                                            List built-in flow templates\n  import-template [options] <templateId>                         Import a built-in template as a flow\n  add-trigger [options] <flowId>                                 Add a trigger to a flow\n  triggers [options] [flowId]                                    List triggers (optionally scoped to a flow)\n  enable-trigger <triggerId>                                     Enable a trigger\n  disable-trigger <triggerId>                                    Disable a trigger\n  fire-trigger [options] <triggerId>                             Simulate trigger firing (executes flow)\n  dispatch-channel-event [options]                               Dispatch one durable, scope-checked webhook or Telegram event\n  execute [options] <flowId>                                     Manually execute a flow (simulated)\n  exec-show [options] <execId>                                   Show execution detail\n  logs [options]                                                 List executions\n  stats [options]                                                Show automation engine stats\n  automation-maturities-v2                                       List V2 automation maturity states\n  execution-lifecycles-v2                                        List V2 execution lifecycle states\n  stats-v2                                                       V2 automation engine stats\n  get-max-active-automations-v2                                  Get max active automations per owner (V2)\n  set-max-active-automations-v2 <n>                              Set max active automations per owner (V2)\n  get-max-running-executions-v2                                  Get max running executions per automation (V2)\n  set-max-running-executions-v2 <n>                              Set max running executions per automation (V2)\n  get-automation-idle-ms-v2                                      Get automation idle threshold (V2)\n  set-automation-idle-ms-v2 <ms>                                 Set automation idle threshold (V2)\n  get-execution-stuck-ms-v2                                      Get execution stuck threshold (V2)\n  set-execution-stuck-ms-v2 <ms>                                 Set execution stuck threshold (V2)\n  active-automation-count-v2 <ownerId>                           Active automation count for owner (V2)\n  running-execution-count-v2 <automationId>                      Running execution count for automation (V2)\n  register-automation-v2 [options] <id>                          Register a V2 automation\n  get-automation-v2 <id>                                         Get a V2 automation\n  list-automations-v2 [options]                                  List V2 automations\n  set-automation-status-v2 <id> <next>                           Set V2 automation status\n  activate-automation-v2 <id>                                    Activate a V2 automation\n  pause-automation-v2 <id>                                       Pause a V2 automation\n  retire-automation-v2 <id>                                      Retire a V2 automation\n  touch-automation-v2 <id>                                       Touch a V2 automation\n  create-execution-v2 [options] <id>                             Create a V2 execution\n  get-execution-v2 <id>                                          Get a V2 execution\n  list-executions-v2 [options]                                   List V2 executions\n  set-execution-status-v2 <id> <next>                            Set V2 execution status\n  start-execution-v2 <id>                                        Start a V2 execution\n  succeed-execution-v2 <id>                                      Succeed a V2 execution\n  fail-execution-v2 <id>                                         Fail a V2 execution\n  cancel-execution-v2 <id>                                       Cancel a V2 execution\n  auto-pause-idle-automations-v2                                 Auto-pause idle V2 automations\n  auto-fail-stuck-executions-v2                                  Auto-fail stuck V2 executions\n  help [command]                                                 display help for command\n",
+    "automation": "Usage: chainlesschain automation [options] [command]\n\nWorkflow automation engine — 12 SaaS connectors + triggers (Phase 96)\n\nOptions:\n  -h, --help                                                     display help for command\n\nCommands:\n  connectors [options]                                           List 12 built-in SaaS connectors\n  trigger-types [options]                                        List trigger types\n  statuses                                                       List flow and execution statuses\n  config [options]                                               Show automation engine config\n  create [options]                                               Create a flow\n  flows [options]                                                List flows\n  center-projection [options]                                    Emit the versioned Automation Center projection for IDEs\n  center-runtime-action [options] <occurrenceId> <pause|resume>  Pause or resume one exact fenced scheduler occurrence\n  center-incident-action [options] <incidentId> <retry|cancel>   Retry or cancel a revision-gated Automation Center incident\n  center-routine-create [options]                                Create a revision-gated Routine from JSON stdin\n  center-routine-edit [options] <routineId>                      Edit a revision-gated Routine from JSON stdin\n  center-routine-action [options] <routineId> <action>           Run a revision-gated Routine action\n  center-action [options] <flowId> <action>                      Run a revision-gated Automation Center action\n  show [options] <flowId>                                        Show flow detail\n  activate <flowId>                                              Set flow status = active\n  pause <flowId>                                                 Set flow status = paused\n  archive <flowId>                                               Set flow status = archived\n  delete <flowId>                                                Delete a flow (cascades triggers + executions)\n  schedule [options] <flowId>                                    Set flow cron schedule\n  run-scheduled [options]                                        Run due cron flows through the durable scheduler kernel\n  set-execution-budget [options] <flowId>                        Set the durable unattended-execution budget for a flow\n  execution-preflight [options] <flowId>                         Check live RBAC connector permissions and durable budget availability\n  share [options] <flowId>                                       Record flow share to another org\n  templates [options]                                            List built-in flow templates\n  import-template [options] <templateId>                         Import a built-in template as a flow\n  add-trigger [options] <flowId>                                 Add a trigger to a flow\n  triggers [options] [flowId]                                    List triggers (optionally scoped to a flow)\n  enable-trigger <triggerId>                                     Enable a trigger\n  disable-trigger <triggerId>                                    Disable a trigger\n  fire-trigger [options] <triggerId>                             Fire a trigger; use --test for simulation\n  dispatch-channel-event [options]                               Dispatch one durable, scope-checked webhook or Telegram event\n  execute [options] <flowId>                                     Execute a flow; use --test for simulation\n  exec-show [options] <execId>                                   Show execution detail\n  logs [options]                                                 List executions\n  stats [options]                                                Show automation engine stats\n  automation-maturities-v2                                       List V2 automation maturity states\n  execution-lifecycles-v2                                        List V2 execution lifecycle states\n  stats-v2                                                       V2 automation engine stats\n  get-max-active-automations-v2                                  Get max active automations per owner (V2)\n  set-max-active-automations-v2 <n>                              Set max active automations per owner (V2)\n  get-max-running-executions-v2                                  Get max running executions per automation (V2)\n  set-max-running-executions-v2 <n>                              Set max running executions per automation (V2)\n  get-automation-idle-ms-v2                                      Get automation idle threshold (V2)\n  set-automation-idle-ms-v2 <ms>                                 Set automation idle threshold (V2)\n  get-execution-stuck-ms-v2                                      Get execution stuck threshold (V2)\n  set-execution-stuck-ms-v2 <ms>                                 Set execution stuck threshold (V2)\n  active-automation-count-v2 <ownerId>                           Active automation count for owner (V2)\n  running-execution-count-v2 <automationId>                      Running execution count for automation (V2)\n  register-automation-v2 [options] <id>                          Register a V2 automation\n  get-automation-v2 <id>                                         Get a V2 automation\n  list-automations-v2 [options]                                  List V2 automations\n  set-automation-status-v2 <id> <next>                           Set V2 automation status\n  activate-automation-v2 <id>                                    Activate a V2 automation\n  pause-automation-v2 <id>                                       Pause a V2 automation\n  retire-automation-v2 <id>                                      Retire a V2 automation\n  touch-automation-v2 <id>                                       Touch a V2 automation\n  create-execution-v2 [options] <id>                             Create a V2 execution\n  get-execution-v2 <id>                                          Get a V2 execution\n  list-executions-v2 [options]                                   List V2 executions\n  set-execution-status-v2 <id> <next>                            Set V2 execution status\n  start-execution-v2 <id>                                        Start a V2 execution\n  succeed-execution-v2 <id>                                      Succeed a V2 execution\n  fail-execution-v2 <id>                                         Fail a V2 execution\n  cancel-execution-v2 <id>                                       Cancel a V2 execution\n  auto-pause-idle-automations-v2                                 Auto-pause idle V2 automations\n  auto-fail-stuck-executions-v2                                  Auto-fail stuck V2 executions\n  help [command]                                                 display help for command\n",
     "batch": "Usage: chainlesschain batch [options]\n\nSplit a large change into independent units, run each in its own git worktree\nin parallel, and aggregate results\n\nOptions:\n  --units <file>             Units JSON file ({ units: [{key, prompt, test?}]\n                             })\n  --decompose <goal>         Ask an agent to split this goal into units first\n                             (structured output)\n  --parts <n>                Target number of units for --decompose (default:\n                             \"6\")\n  --plan-only                With --decompose: print the units and exit (no\n                             run)\n  --concurrency <n>          Max worktrees running at once (default: \"4\")\n  --test <cmd>               Default test command run in each worktree\n  --merge                    Merge clean, passing branches back to base\n  --model <model>            Model for agent runs\n  --permission-mode <mode>   Permission mode for each agent unit (default:\n                             \"acceptEdits\")\n  --max-turns <n>            Per-unit agent turn cap\n  --max-budget-usd <amount>  Per-unit agent cost cap\n  --json                     Machine-readable JSON output\n  -h, --help                 display help for command\n",
     "bi": "Usage: chainlesschain bi [options] [command]\n\nBusiness intelligence — queries, dashboards, reports, analytics\n\nOptions:\n  -h, --help                                        display help for command\n\nCommands:\n  query [options] <question>                        Natural-language query (NL→SQL)\n  dashboard [options] <name>                        Create a dashboard\n  report [options] <name>                           Generate a report\n  schedule [options] <report-id> <cron>             Schedule a report for recurring generation\n  anomaly [options]                                 Detect anomalies in data using Z-score\n  predict [options]                                 Predict trend using linear regression\n  chart-types [options]                             List supported chart types (V2)\n  anomaly-methods [options]                         List supported anomaly detection methods (V2)\n  report-formats [options]                          List supported report formats (V2)\n  report-statuses [options]                         List canonical report statuses (V2)\n  dashboard-layouts [options]                       List supported dashboard layouts (V2)\n  query-v2 [options] <question>                     Heuristic NL→SQL with intent detection (V2)\n  anomaly-v2 [options]                              Anomaly detection with method choice (V2)\n  predict-v2 [options]                              Trend prediction with r² confidence (V2)\n  recommend-chart [options]                         Recommend chart type from intent or data shape (V2)\n  dashboard-v2 [options] <name>                     Create dashboard with validated layout (V2)\n  set-report-status [options] <report-id> <status>  Update report status with validated transition (V2)\n  report-status [options] <report-id>               Show current report status (V2)\n  report-history [options] <report-id>              Show report status transition history (V2)\n  stats-v2 [options]                                BI platform statistics (V2)\n  templates [options]                               List available BI templates\n  enums-v2                                          Show V2 enums\n  register-dataset-v2 [options]                     Register a BI dataset profile (pending)\n  activate-dataset-v2 <id>                          Activate dataset\n  stale-dataset-v2 <id>                             Mark dataset stale\n  archive-dataset-v2 <id>                           Archive dataset (terminal)\n  touch-dataset-v2 <id>                             Refresh lastTouchedAt\n  get-dataset-v2 <id>                               Get dataset\n  list-datasets-v2                                  List datasets\n  create-query-v2 [options]                         Create a BI query (queued)\n  start-query-v2 <id>                               Transition query to running\n  complete-query-v2 <id>                            Transition query to completed\n  fail-query-v2 [options] <id>                      Fail query\n  cancel-query-v2 [options] <id>                    Cancel query\n  get-query-v2 <id>                                 Get query\n  list-queries-v2                                   List queries\n  set-max-active-datasets-v2 <n>                    Set per-owner active cap\n  set-max-pending-queries-v2 <n>                    Set per-dataset pending cap\n  set-dataset-idle-ms-v2 <n>                        Set idle threshold\n  set-query-stuck-ms-v2 <n>                         Set stuck threshold\n  auto-stale-idle-datasets-v2                       Auto-stale idle datasets\n  auto-fail-stuck-queries-v2                        Auto-fail stuck running queries\n  gov-stats-v2                                      V2 governance aggregate stats\n  help [command]                                    display help for command\n",
     "bm25": "Usage: chainlesschain bm25 [options] [command]\n\nBM25 Search V2 governance (in-memory, CLI v0.143.0)\n\nOptions:\n  -h, --help                      display help for command\n\nCommands:\n  enums-v2\n  register-profile-v2 [options]\n  activate-profile-v2 <id>\n  stale-profile-v2 <id>\n  archive-profile-v2 <id>\n  touch-profile-v2 <id>\n  get-profile-v2 <id>\n  list-profiles-v2\n  create-query-v2 [options]\n  searching-query-v2 <id>\n  complete-query-v2 <id>\n  fail-query-v2 [options] <id>\n  cancel-query-v2 [options] <id>\n  get-query-v2 <id>\n  list-queries-v2\n  config-v2\n  set-max-active-profiles-v2 <n>\n  set-max-pending-queries-v2 <n>\n  set-profile-idle-ms-v2 <ms>\n  set-query-stuck-ms-v2 <ms>\n  auto-stale-idle-v2\n  auto-fail-stuck-v2\n  gov-stats-v2\n  help [command]                  display help for command\n",
@@ -69,7 +69,7 @@
     "hardening": "Usage: chainlesschain hardening [options] [command]\n\nSecurity hardening — baselines, audits, regression detection\n\nOptions:\n  -h, --help                                               display help for command\n\nCommands:\n  baseline                                                 Performance baseline management\n  audit                                                    Security audit management\n  config-check [options] <config-path>                     Audit a config file (presence, required keys, placeholders)\n  deploy-check [options]                                   Evaluate the 6-item production-deployment checklist\n  audit-statuses-v2 [options]                              List V2 audit lifecycle statuses\n  baseline-statuses-v2 [options]                           List V2 baseline lifecycle statuses\n  severities-v2 [options]                                  List V2 severity buckets\n  default-max-concurrent-audits [options]                  Default concurrent audit cap\n  max-concurrent-audits [options]                          Current concurrent audit cap\n  set-max-concurrent-audits [options] <n>                  Set concurrent audit cap\n  default-baseline-retention-ms [options]                  Default baseline retention in ms\n  baseline-retention-ms [options]                          Current baseline retention in ms\n  set-baseline-retention-ms [options] <ms>                 Set baseline retention in ms\n  default-audit-timeout-ms [options]                       Default audit timeout in ms\n  audit-timeout-ms [options]                               Current audit timeout in ms\n  set-audit-timeout-ms [options] <ms>                      Set audit timeout in ms\n  running-audit-count [options]                            Number of currently RUNNING audits\n  register-audit-v2 [options] <name>                       Register a V2 audit entry (PENDING)\n  start-audit [options] <audit-id>                         Start a PENDING audit (enforces concurrency cap)\n  complete-audit [options] <audit-id>                      Complete a RUNNING audit\n  set-audit-status-v2 [options] <audit-id> <status>        Transition audit to a new status\n  audit-status-v2 [options] <audit-id>                     Get V2 audit status\n  auto-timeout-audits [options]                            Bulk-fail RUNNING audits past auditTimeoutMs\n  create-baseline-v2 [options] <name>                      Create a V2 baseline (DRAFT)\n  activate-baseline [options] <baseline-id>                Activate a DRAFT baseline (supersedes previous ACTIVE)\n  set-baseline-status-v2 [options] <baseline-id> <status>  Transition baseline to a new status\n  baseline-status-v2 [options] <baseline-id>               Get V2 baseline status\n  auto-archive-stale-baselines [options]                   Bulk-archive SUPERSEDED baselines past retention\n  stats-v2 [options]                                       V2 hardening statistics\n  help [command]                                           display help for command\n",
     "hmemory": "Usage: chainlesschain hmemory [options] [command]\n\nHierarchical Memory 2.0 — four-layer memory system\n\nOptions:\n  -h, --help                                   display help for command\n\nCommands:\n  store [options] <content>                    Store a memory at the appropriate layer\n  recall [options] <query>                     Recall memories with forgetting curve\n  consolidate                                  Promote and forget memories across layers\n  search [options] <query>                     Search memories by type\n  stats [options]                              Show memory statistics\n  share [options] <id> <agent-id>              Share a memory with another agent\n  prune [options]                              Remove weak old memories\n  layers [options]                             List MEMORY_LAYER enum values\n  types [options]                              List MEMORY_TYPE enum values\n  statuses [options]                           List CONSOLIDATION_STATUS enum values\n  permissions [options]                        List SHARE_PERMISSION enum values\n  attach-metadata [options] <id>               Attach V2 metadata (scene/context/concepts) to a memory\n  promote-v2 [options] <id>                    Promote memory one layer up (working→short-term→long-term)\n  demote-v2 [options] <id>                     Demote memory one layer down (short-term → working)\n  share-v2 [options] <id> <target>             Share a memory with permissions (read,copy,modify)\n  revoke-share [options] <shareId>             Revoke a sharing record\n  shares [options]                             List V2 sharing records\n  search-episodic-v2 [options] [query]         Search episodic memories with time/scene/context filters\n  search-semantic-v2 [options] [query]         Search semantic memories with concept similarity\n  consolidate-v2 [options]                     Run V2 consolidation with status tracking\n  consolidations [options]                     List V2 consolidation run history\n  prune-v2 [options]                           Layer-scoped prune with custom threshold\n  stats-v2 [options]                           Extended V2 stats with per-layer + consolidation + shares\n  enums-v2                                     Show V2 enums (tier maturity + promotion lifecycle)\n  config-v2                                    Show V2 config thresholds\n  set-max-active-tiers-v2 <n>                  Set max active tiers per owner\n  set-max-pending-promotions-v2 <n>            Set max pending promotions per tier\n  set-tier-idle-ms-v2 <n>                      Set tier idle threshold (ms)\n  set-promotion-stuck-ms-v2 <n>                Set promotion stuck threshold (ms)\n  register-tier-v2 [options] <id> <owner>      Register V2 memory tier\n  activate-tier-v2 <id>                        Activate tier\n  dormant-tier-v2 <id>                         Mark tier dormant\n  retire-tier-v2 <id>                          Retire tier (terminal)\n  touch-tier-v2 <id>                           Touch tier lastTouchedAt\n  get-tier-v2 <id>                             Get V2 tier\n  list-tiers-v2                                List all V2 tiers\n  create-promotion-v2 [options] <id> <tierId>  Create V2 promotion (queued)\n  start-promotion-v2 <id>                      Start promotion (queued→promoting)\n  complete-promotion-v2 <id>                   Complete promotion (promoting→promoted)\n  fail-promotion-v2 <id> [reason]              Fail promotion\n  cancel-promotion-v2 <id> [reason]            Cancel promotion\n  get-promotion-v2 <id>                        Get V2 promotion\n  list-promotions-v2                           List all V2 promotions\n  auto-dormant-idle-v2                         Auto-dormant idle active tiers\n  auto-fail-stuck-v2                           Auto-fail stuck promoting promotions\n  gov-stats-v2                                 V2 governance aggregate stats\n  help [command]                               display help for command\n",
     "hook": "Usage: chainlesschain hook [options] [command]\n\nLifecycle hook management\n\nOptions:\n  -h, --help                                display help for command\n\nCommands:\n  list [options]                            List registered hooks (DB) + .claude/settings.json hooks\n  trust [options] [file]                    Explicitly trust project Hook definitions; changed content requires reapproval\n  trust-status [options] [file]             Show content-bound project Hook trust status\n  untrust [options] [file]                  Revoke project Hook trust\n  audit [options]                           List or verify the canonical tamper-evident Hook audit\n  test [options] <event> <tool> [args...]   Show which settings.json hooks fire for an event+tool (e.g. hook test PreToolUse run_shell \"git push\"); --run executes them\n  replay [options] <event-id>               Replay a recorded hook delivery (needs CC_HOOK_EVENT_LOG); dry-run by default, --run executes observe-only hooks\n  events-log [options]                      List or verify the recorded hook delivery log (CC_HOOK_EVENT_LOG)\n  add [options] <event> <name>              Register a new hook\n  remove <id>                               Remove a hook by ID\n  run [options] <event>                     Manually trigger hooks for an event\n  fire [options] <event>                    Fire a session-level hook (SessionStart/UserPromptSubmit/AssistantResponse/SessionEnd) and honor stdout JSON directives\n  stats [options]                           Show hook execution statistics\n  events                                    List all valid hook event types\n  maturities-v2                             List hook profile maturity states (V2)\n  exec-lifecycle-v2                         List hook exec lifecycle states (V2)\n  stats-v2                                  Show hook-manager V2 stats\n  config-v2                                 Show hook-manager V2 config\n  register-profile-v2 <id> <owner> [event]\n  activate-profile-v2 <id>\n  disable-profile-v2 <id>\n  retire-profile-v2 <id>\n  touch-profile-v2 <id>\n  get-profile-v2 <id>\n  list-profiles-v2\n  create-exec-v2 <id> <hookId>\n  start-exec-v2 <id>\n  complete-exec-v2 <id>\n  fail-exec-v2 <id> [reason]\n  cancel-exec-v2 <id> [reason]\n  get-exec-v2 <id>\n  list-execs-v2\n  auto-disable-idle-v2\n  auto-fail-stuck-v2\n  set-max-active-hooks-v2 <n>\n  set-max-pending-execs-v2 <n>\n  set-hook-idle-ms-v2 <n>\n  set-hook-exec-stuck-ms-v2 <n>\n  reset-state-v2\n  help [command]                            display help for command\n",
-    "hub": "Usage: chainlesschain hub [options] [command]\n\nPersonal Data Hub — local vault + adapters + AnalysisEngine on this machine\n\nOptions:\n  -h, --help                             display help for command\n\nCommands:\n  ask [options] <question>               Natural-language question over your local vault\n  repl [options]                         Persistent ask loop — opens the vault once, then answers follow-up questions fast (amortizes the ~8s per-call CLI cold-start)\n  retrieve-context [options] <question>  RAG preflight — gather facts + build LLM prompt WITHOUT calling LLM (for cloud-LLM callers that need RAG context)\n  stats [options]                        Vault row counts + hub paths (use --full to also list adapters + LLM)\n  health [options]                       Component health: vault / llm / kgSink / ragSink\n  list-adapters [options]                List registered adapters\n  readiness [options]                    Per-adapter 就绪检查：能否采集 + 不能的原因（未配置/需采集/不支持）\n  sync-adapter [options] <name>          Run one adapter's ingest pipeline\n  sync-all [options]                     Run all registered adapters in series\n  bilibili-adb-sync [options]            Bilibili C 路径: pull cookies via ADB from the user's Android Bilibili App, fetch 4 endpoints, ingest as snapshot. Needs rooted Android + Bilibili App logged in + `adb` on PATH.\n  bilibili-adb-doctor [options]          Bilibili C 路径 dry-run: probe adb + root + Bilibili App + cookies completeness without triggering a sync. Use this BEFORE `cc hub bilibili-adb-sync` to debug env issues.\n  weibo-adb-sync [options]               Weibo C 路径: pull m.weibo.cn cookies via ADB from the user's Android Weibo App, fetch UID + 3 endpoints (posts/favourites/follows), ingest as snapshot. Needs rooted Android + Weibo App logged in + `adb` on PATH. No X-Bogus / WBI signing required.\n  kuaishou-adb-sync [options]            Kuaishou C 路径: pull www.kuaishou.com cookies via ADB from the user's Android Kuaishou App (com.smile.gifmaker, NOT 极速版 com.kuaishou.nebula), parse profile from kuaishou.web.cp.api_ph cookie payload (no HTTP) + 3 GraphQL endpoints (watch/collect/search, __NS_sig3 + kpf/kpn — CLI short-circuits, desktop uses KuaishouSignBridge). Needs rooted Android + Kuaishou App logged in once + opened a video once + `adb` on PATH.\n  toutiao-adb-sync [options]             Toutiao C 路径: pull www.toutiao.com cookies via ADB from the user's Android Toutiao App (com.ss.android.article.news, NOT 极速版), fetch profile (no _sig) + 3 endpoints (feed/collection/search, _signature required — CLI short-circuits, desktop uses ToutiaoSignBridge). Needs rooted Android + Toutiao App logged in once + `adb` on PATH.\n  xhs-adb-sync [options]                 Xhs C 路径: pull xiaohongshu.com cookies via ADB from the user's Android Xhs App, fetch userId + 3 endpoints (notes/liked/follows). Best-effort X-S signing (~60% GET hit rate). Needs rooted Android + Xhs App logged in + `adb` on PATH.\n  douyin-adb-sync [options]              Douyin C 路径: pull <uid>_im.db cohort via ADB from the user's Android Douyin App, parse msg + SIMPLE_USER (abrignoni DFIR), ingest as snapshot. Needs rooted Android + Douyin App logged in + `adb` on PATH.\n  douyin-watch-sync [options]            Douyin 观看历史 C 路径: pull video_record.db via ADB from the user's Android Douyin App (com.ss.android.ugc.aweme), read record_<uid> (aid + view_time_timestamp + enter_from), ingest as `history` (BROWSE) events. Plaintext — no X-Bogus signing, no SQLCipher. Needs rooted Android + Douyin App with watch history. Add --resolve-titles to enrich each event with the video's desc/author/duration via the web detail endpoint (also no signing).\n  rederive [options]                     Re-derive canonical events from raw_events without re-fetching from source (recovers orphan raws from a past sync where putBatch silently failed, e.g. trap #25 partial-index drift).\n  query-events [options]                 Query vault events with filters\n  search [options]                       Vault Browser search — events_fts (FTS5) + faceted filters\n  facet-counts [options]                 Sidebar / chip counts — events grouped by category / adapter / subtype\n  export-events [options]                Export all vault events as JSON (module 101 §8.3 cross-device backup)\n  import-events [options]                Import vault events from a JSON array file (idempotent upsert by id; §8.3)\n  recent-audit [options]                 Recent audit log entries\n  register-mock [options]                Register MockAdapter (dev/smoke only)\n  run-skill [options] <name>             Run a built-in analysis skill: overview (跨 app 汇聚, 决策依据) / spending / relations / footprint / interests / timeline. 'analysis.overview' aggregates all apps' data into one cross-app snapshot.\n  salvage [options] <dumpfile>           Method B (免密钥): salvage SQLite leaf-page records from a /proc/mem dump → ingest into the vault with the correct per-app source (--app). Used by the Android root 一键采集 button after a memory scan.\n  collect-qq [options]                   QQNT (modern QQ): decrypt a root-staged encrypted nt_msg.db via the DERIVED key (no frida), protobuf-parse messages, and ingest into the vault. Used by the Android CollectQqNativeTool (su-reads DB + uids); also runnable on PC.\n  collect-db [options]                   Ingest an app's PLAINTEXT SQLite dbs (browse/read/history/content/config) into the vault — generic readable-record extraction with noise filtering. Pair with the Magisk daemon which stages the dbs (root, MIUI cross-app). Encrypted IM has its own collectors (collect-qq/collect-wechat).\n  collect-wechat [options]               WeChat: decrypt a root-staged EnMicroMsg.db via the DERIVED key MD5(IMEI+uin)[:7] (no frida; saved/raw keys as fallback), parse message/rcontact/chatroom, and ingest. Pairs with the Magisk daemon (stages DB + uin/IMEI candidates).\n  collect-qzone [options]                QQ空间 (Qzone): collect 说说/留言板/相册 via the Qzone CGI API. No local DB — needs the qzone-domain p_skey cookie (from the in-app WebView or a browser login to user.qzone.qq.com; base .qq.com skey is rejected). Derives g_tk from p_skey and ingests as post/message/media events.\n  event-detail [options] <eventId>       推文 §AI 给出处: fetch full event row from local vault by id (used by citation chip deeplink).\n  export [options]                       推文 §一键带走: copy SQLCipher vault.db (+ WAL/SHM) to <path>. Encrypted at rest; reimport via cc hub import-vault on desktop.\n  destroy [options]                      DESTRUCTIVE: wipe vault.db + WAL. Requires --confirm. Adapters / accounts files preserved.\n  aichat                                 AIChat WebView 鉴权向导 — list / login / probe / register / health / unregister 9 家国产 AI\n  wechat                                 WeChat adapter — env-probe / register / list / unregister (rooted Android required for 8.0+)\n  help [command]                         display help for command\n",
+    "hub": "Usage: chainlesschain hub [options] [command]\n\nPersonal Data Hub — local vault + adapters + AnalysisEngine on this machine\n\nOptions:\n  -h, --help                                          display help for command\n\nCommands:\n  ask [options] <question>                            Natural-language question over your local vault\n  repl [options]                                      Persistent ask loop — opens the vault once, then answers follow-up questions fast (amortizes the ~8s per-call CLI cold-start)\n  retrieve-context [options] <question>               RAG preflight — gather facts + build LLM prompt WITHOUT calling LLM (for cloud-LLM callers that need RAG context)\n  stats [options]                                     Vault row counts + hub paths (use --full to also list adapters + LLM)\n  health [options]                                    Component health: vault / llm / kgSink / ragSink\n  list-adapters [options]                             List registered adapters\n  derivation-status [options]                         Inspect KG/RAG delivery status for this vault\n  retry-derivations [options]                         Retry a bounded page of KG/RAG work from current vault state\n  derivation-consumers [options]                      List registered derivation consumers without retirement tokens\n  prune-derivations [options]                         Prune non-running receipts of explicitly selected retired ephemeral consumers\n  derivation-state [options] <entityType> <entityId>  Inspect an entity's source revision and KG/RAG receipts without its payload\n  delete-entity [options] <entityType> <entityId>     Delete a normalized entity and queue index removal; raw archive remains and reimport may restore it\n  readiness [options]                                 Per-adapter 就绪检查：能否采集 + 不能的原因（未配置/需采集/不支持）\n  sync-adapter [options] <name>                       Run one adapter's ingest pipeline\n  sync-all [options]                                  Run all registered adapters in series\n  bilibili-adb-sync [options]                         Bilibili C 路径: pull cookies via ADB from the user's Android Bilibili App, fetch 4 endpoints, ingest as snapshot. Needs rooted Android + Bilibili App logged in + `adb` on PATH.\n  bilibili-adb-doctor [options]                       Bilibili C 路径 dry-run: probe adb + root + Bilibili App + cookies completeness without triggering a sync. Use this BEFORE `cc hub bilibili-adb-sync` to debug env issues.\n  weibo-adb-sync [options]                            Weibo C 路径: pull m.weibo.cn cookies via ADB from the user's Android Weibo App, fetch UID + 3 endpoints (posts/favourites/follows), ingest as snapshot. Needs rooted Android + Weibo App logged in + `adb` on PATH. No X-Bogus / WBI signing required.\n  kuaishou-adb-sync [options]                         Kuaishou C 路径: pull www.kuaishou.com cookies via ADB from the user's Android Kuaishou App (com.smile.gifmaker, NOT 极速版 com.kuaishou.nebula), parse profile from kuaishou.web.cp.api_ph cookie payload (no HTTP) + 3 GraphQL endpoints (watch/collect/search, __NS_sig3 + kpf/kpn — CLI short-circuits, desktop uses KuaishouSignBridge). Needs rooted Android + Kuaishou App logged in once + opened a video once + `adb` on PATH.\n  toutiao-adb-sync [options]                          Toutiao C 路径: pull www.toutiao.com cookies via ADB from the user's Android Toutiao App (com.ss.android.article.news, NOT 极速版), fetch profile (no _sig) + 3 endpoints (feed/collection/search, _signature required — CLI short-circuits, desktop uses ToutiaoSignBridge). Needs rooted Android + Toutiao App logged in once + `adb` on PATH.\n  xhs-adb-sync [options]                              Xhs C 路径: pull xiaohongshu.com cookies via ADB from the user's Android Xhs App, fetch userId + 3 endpoints (notes/liked/follows). Best-effort X-S signing (~60% GET hit rate). Needs rooted Android + Xhs App logged in + `adb` on PATH.\n  douyin-adb-sync [options]                           Douyin C 路径: pull <uid>_im.db cohort via ADB from the user's Android Douyin App, parse msg + SIMPLE_USER (abrignoni DFIR), ingest as snapshot. Needs rooted Android + Douyin App logged in + `adb` on PATH.\n  douyin-watch-sync [options]                         Douyin 观看历史 C 路径: pull video_record.db via ADB from the user's Android Douyin App (com.ss.android.ugc.aweme), read record_<uid> (aid + view_time_timestamp + enter_from), ingest as `history` (BROWSE) events. Plaintext — no X-Bogus signing, no SQLCipher. Needs rooted Android + Douyin App with watch history. Add --resolve-titles to enrich each event with the video's desc/author/duration via the web detail endpoint (also no signing).\n  rederive [options]                                  Re-derive canonical events from raw_events without re-fetching from source (recovers orphan raws from a past sync where putBatch silently failed, e.g. trap #25 partial-index drift).\n  query-events [options]                              Query vault events with filters\n  search [options]                                    Vault Browser search — events_fts (FTS5) + faceted filters\n  facet-counts [options]                              Sidebar / chip counts — events grouped by category / adapter / subtype\n  export-events [options]                             Export all vault events as JSON (module 101 §8.3 cross-device backup)\n  import-events [options]                             Import vault events from a JSON array file (idempotent upsert by id; §8.3)\n  recent-audit [options]                              Recent audit log entries\n  register-mock [options]                             Register MockAdapter (dev/smoke only)\n  run-skill [options] <name>                          Run a built-in analysis skill: overview (跨 app 汇聚, 决策依据) / spending / relations / footprint / interests / timeline. 'analysis.overview' aggregates all apps' data into one cross-app snapshot.\n  salvage [options] <dumpfile>                        Method B (免密钥): salvage SQLite leaf-page records from a /proc/mem dump → ingest into the vault with the correct per-app source (--app). Used by the Android root 一键采集 button after a memory scan.\n  collect-qq [options]                                QQNT (modern QQ): decrypt a root-staged encrypted nt_msg.db via the DERIVED key (no frida), protobuf-parse messages, and ingest into the vault. Used by the Android CollectQqNativeTool (su-reads DB + uids); also runnable on PC.\n  collect-db [options]                                Ingest an app's PLAINTEXT SQLite dbs (browse/read/history/content/config) into the vault — generic readable-record extraction with noise filtering. Pair with the Magisk daemon which stages the dbs (root, MIUI cross-app). Encrypted IM has its own collectors (collect-qq/collect-wechat).\n  collect-wechat [options]                            WeChat: decrypt a root-staged EnMicroMsg.db via the DERIVED key MD5(IMEI+uin)[:7] (no frida; saved/raw keys as fallback), parse message/rcontact/chatroom, and ingest. Pairs with the Magisk daemon (stages DB + uin/IMEI candidates).\n  collect-qzone [options]                             QQ空间 (Qzone): collect 说说/留言板/相册 via the Qzone CGI API. No local DB — needs the qzone-domain p_skey cookie (from the in-app WebView or a browser login to user.qzone.qq.com; base .qq.com skey is rejected). Derives g_tk from p_skey and ingests as post/message/media events.\n  event-detail [options] <eventId>                    推文 §AI 给出处: fetch full event row from local vault by id (used by citation chip deeplink).\n  export [options]                                    推文 §一键带走: copy SQLCipher vault.db (+ WAL/SHM) to <path>. Encrypted at rest; reimport via cc hub import-vault on desktop.\n  destroy [options]                                   DESTRUCTIVE: wipe vault.db + WAL. Requires --confirm. Adapters / accounts files preserved.\n  aichat                                              AIChat WebView 鉴权向导 — list / login / probe / register / health / unregister 9 家国产 AI\n  wechat                                              WeChat adapter — env-probe / register / list / unregister (rooted Android required for 8.0+)\n  help [command]                                      display help for command\n",
     "ide": "Usage: chainlesschain ide [options] [command]\n\nInspect IDE bridge discovery (editor MCP server auto-connect)\n\nOptions:\n  -h, --help           display help for command\n\nCommands:\n  list [options]       List live IDE lockfiles (editor MCP servers advertised)\n  status [options]     Show the IDE server `cc agent` would connect to right\n                       now\n  doctor [options]     Explain why IDE discovery did / didn't pick a server\n  jetbrains [options]  Show whether IntelliJ IDEA's built-in MCP (server\n                       `idea`) would auto-connect\n  help [command]       display help for command\n",
     "import": "Usage: chainlesschain import [options] [command]\n\nImport knowledge from external sources\n\nOptions:\n  -h, --help                            display help for command\n\nCommands:\n  markdown [options] <dir>              Import markdown files from a directory\n  evernote [options] <file>             Import from Evernote ENEX export file\n  notion [options] <dir>                Import from Notion export directory\n  pdf [options] <file>                  Import text from a PDF file\n  source-maturities-v2                  List V2 source maturity states\n  import-job-lifecycles-v2              List V2 import-job lifecycle states\n  stats-v2                              V2 knowledge-importer stats\n  get-max-active-sources-v2             Get max active sources per owner (V2)\n  set-max-active-sources-v2 <n>         Set max active sources per owner (V2)\n  get-max-pending-jobs-v2               Get max pending jobs per source (V2)\n  set-max-pending-jobs-v2 <n>           Set max pending jobs per source (V2)\n  get-source-idle-ms-v2                 Get source idle threshold (V2)\n  set-source-idle-ms-v2 <ms>            Set source idle threshold (V2)\n  get-job-stuck-ms-v2                   Get import-job stuck threshold (V2)\n  set-job-stuck-ms-v2 <ms>              Set import-job stuck threshold (V2)\n  active-source-count-v2 <ownerId>      Active source count for owner (V2)\n  pending-job-count-v2 <sourceId>       Pending import-job count for source\n                                        (V2)\n  register-source-v2 [options] <id>     Register a V2 source manifest\n  get-source-v2 <id>                    Get a V2 source\n  list-sources-v2 [options]             List V2 sources\n  set-source-status-v2 <id> <next>      Set V2 source status\n  activate-source-v2 <id>               Activate a V2 source\n  pause-source-v2 <id>                  Pause a V2 source\n  archive-source-v2 <id>                Archive a V2 source\n  touch-source-v2 <id>                  Touch a V2 source\n  create-import-job-v2 [options] <id>   Create a V2 import job\n  get-import-job-v2 <id>                Get a V2 import job\n  list-import-jobs-v2 [options]         List V2 import jobs\n  set-import-job-status-v2 <id> <next>  Set V2 import-job status\n  start-import-job-v2 <id>              Start a V2 import job\n  complete-import-job-v2 <id>           Complete a V2 import job\n  fail-import-job-v2 <id>               Fail a V2 import job\n  cancel-import-job-v2 <id>             Cancel a V2 import job\n  auto-pause-idle-sources-v2            Auto-pause idle V2 sources\n  auto-fail-stuck-import-jobs-v2        Auto-fail stuck V2 import jobs\n  help [command]                        display help for command\n",
     "incentive": "Usage: chainlesschain incentive [options] [command]\n\nToken incentive — ledger accounts, transfers, contributions, leaderboard\n\nOptions:\n  -h, --help                                             display help for command\n\nCommands:\n  contribution-types [options]                           List known contribution types and their base rewards\n  tx-types [options]                                     List known transaction types\n  balance [options] <account-id>                         Query token balance for an account\n  accounts [options]                                     List accounts (sorted by balance DESC)\n  mint [options] <to> <amount>                           Mint tokens into an account (admin op)\n  transfer [options] <from> <to> <amount>                Transfer tokens between accounts\n  history [options]                                      Show transaction history\n  contribute [options] <user-id> <type> [value]          Record a contribution (type: skill_publication|invocation_provided|skill_review|bug_report|code_contribution|documentation|community_support)\n  reward [options] <contribution-id>                     Reward a previously-recorded contribution\n  contributions [options]                                List contributions\n  leaderboard [options]                                  Top contributors by total reward earned\n  account-statuses-v2                                    List V2 account states\n  claim-statuses-v2                                      List V2 claim states\n  default-max-pending-claims-per-user                    Show default per-user pending claim cap\n  max-pending-claims-per-user                            Show current per-user pending claim cap\n  set-max-pending-claims-per-user <n>                    Update per-user pending claim cap\n  default-claim-expiry-ms                                Show default claim expiry (ms)\n  claim-expiry-ms                                        Show current claim expiry (ms)\n  set-claim-expiry-ms <ms>                               Update claim expiry (ms)\n  default-max-claim-amount                               Show default max claim amount\n  max-claim-amount                                       Show current max claim amount\n  set-max-claim-amount <n>                               Update max claim amount\n  pending-claim-count [options]                          Count PENDING claims (optionally scoped to user)\n  register-account-v2 [options] <account-id>             V2: register a tracked account (tags ACTIVE)\n  account-status-v2 <account-id>                         V2: show account status\n  set-account-status-v2 [options] <account-id> <status>  V2: transition account status (active|frozen|closed)\n  freeze-account [options] <account-id>                  V2: shortcut → frozen\n  unfreeze-account [options] <account-id>                V2: shortcut → active (from frozen)\n  close-account [options] <account-id>                   V2: shortcut → closed\n  submit-claim-v2 [options] <claim-id>                   V2: submit a claim (tags PENDING)\n  claim-status-v2 <claim-id>                             V2: show claim status\n  set-claim-status-v2 [options] <claim-id> <status>      V2: transition claim (pending|approved|paid|rejected)\n  approve-claim [options] <claim-id>                     V2: shortcut → approved\n  reject-claim [options] <claim-id>                      V2: shortcut → rejected\n  pay-claim [options] <claim-id>                         V2: shortcut → paid (stamps paidAt)\n  auto-expire-unclaimed-claims                           V2: bulk-reject stale PENDING claims\n  stats-v2                                               V2: all-enum-key stats snapshot\n  help [command]                                         display help for command\n",
@@ -120,7 +120,7 @@
     "plugin": "Usage: chainlesschain plugin [options] [command]\n\nPlugin and marketplace management\n\nOptions:\n  -h, --help                           display help for command\n\nCommands:\n  list [options]                       List installed plugins\n  install [options] <name>             Install a plugin\n  remove [options] <name>              Remove a plugin\n  enable [options] <name>              Enable a plugin\n  disable [options] <name>             Disable a plugin\n  update <name> <version>              Update a plugin version\n  info [options] <name>                Show plugin details\n  search [options] <query>             Search plugin registry\n  registry [options]                   List all plugins in registry\n  summary [options]                    Show plugin summary statistics\n  eval [options] <dir>                 Run a local control/candidate\n                                       effectiveness eval for a plugin\n  validate [options] <dir>             Validate a plugin manifest and list its\n                                       components\n  add [options] <source>               Install a plugin from a local dir, git\n                                       URL, owner/repo[#ref], or registry URL\n                                       (scope: user|project|local)\n  browse [options] [query]             List plugins in a remote registry\n                                       (--registry <url>); filter by [query]\n  catalog [options] [query]            Review digest, signature, SBOM, license,\n                                       capability, dependency, and health\n                                       metadata across registries\n  select [options] <name>              Select the highest-ranked install\n                                       candidate across an exact registry set\n  impact [options] <name>              Preview version, source, integrity,\n                                       license, capability, and dependency\n                                       impact before a registry upgrade\n  installed [options]                  List plugins installed in the unified\n                                       runtime (scope dirs)\n  transaction [options] <name>         Inspect a durable cross-process plugin\n                                       lifecycle transaction\n  recover [options] <name>             Recover a durable plugin transaction\n                                       after its owner died\n  provenance-plan [options] <name>     Build exact payload-bound authority\n                                       bytes for a signed legacy provenance\n                                       migration\n  provenance-migrate [options] <name>  Apply a signed, payload-bound provenance\n                                       record to one legacy install\n  evidence [options] <name>            Read back installed manifest, license,\n                                       signature, and payload-SBOM evidence\n  trust [options] <name>               Trust a plugin so its hooks / LSP\n                                       servers may run\n  untrust [options] <name>             Revoke trust for a plugin (its hooks /\n                                       LSP servers stop running)\n  consent [options] [name]             View or grant a plugin's capability\n                                       consent (--grant / --revoke / --list)\n  options [options] <name>             View or set a plugin's typed options\n                                       (--set key=value, --scope user|project)\n  monitors [options]                   List installed plugins' background\n                                       monitors (trusted only)\n  uninstall [options] <name>           Uninstall a runtime plugin from a scope\n                                       (user|project|local)\n  upgrade [options] <source>           Update a runtime plugin from its pinned\n                                       local, git, or registry source; repoints\n                                       .active\n  use [options] <name> <version>       Pin a plugin's active version (rollback\n                                       or switch)\n  help [command]                       display help for command\n",
     "pqc": "Usage: chainlesschain pqc [options] [command]\n\nPost-quantum cryptography — key management and migration\n\nOptions:\n  -h, --help                                        display help for command\n\nCommands:\n  keys [options]                                    List PQC keys\n  generate [options] <algorithm>                    Generate a PQC key pair\n  migration-status [options]                        Show PQC migration status\n  algorithms [options]                              List supported PQC algorithms (FIPS 203/204/205 + hybrid)\n  migrate [options] <plan-name> <target-algorithm>  Execute PQC key migration\n  key-maturities-v2 [options]                       [V2] List key maturity states\n  migration-lifecycles-v2 [options]                 [V2] List migration lifecycle states\n  config-v2 [options]                               [V2] Show governance config\n  set-max-active-keys-per-owner-v2 <n>              [V2] Set per-owner active key cap\n  set-max-pending-migrations-per-key-v2 <n>         [V2] Set per-key pending migration cap\n  set-key-idle-ms-v2 <ms>                           [V2] Set key idle threshold (ms)\n  set-migration-stuck-ms-v2 <ms>                    [V2] Set migration stuck threshold (ms)\n  register-key-v2 [options] <id>                    [V2] Register a key profile (PENDING)\n  activate-key-v2 <id>                              [V2] Activate a key (pending|deprecated -> active)\n  deprecate-key-v2 <id>                             [V2] Deprecate a key (active -> deprecated)\n  archive-key-v2 <id>                               [V2] Archive a key (terminal)\n  touch-key-v2 <id>                                 [V2] Bump key lastSeenAt\n  get-key-v2 [options] <id>                         [V2] Show a key profile\n  list-keys-v2 [options]                            [V2] List key profiles\n  create-migration-v2 [options] <id>                [V2] Create a queued V2 migration\n  start-migration-v2 <id>                           [V2] Start a migration (queued -> running)\n  complete-migration-v2 <id>                        [V2] Complete a migration (running -> completed)\n  fail-migration-v2 <id>                            [V2] Fail a migration (running -> failed)\n  cancel-migration-v2 <id>                          [V2] Cancel a migration (queued|running -> cancelled)\n  get-migration-v2 [options] <id>                   [V2] Show migration job\n  list-migrations-v2 [options]                      [V2] List V2 migrations\n  active-key-count-v2 [options]                     [V2] Count active keys (optional --owner filter)\n  pending-migration-count-v2 [options]              [V2] Count pending migrations (queued+running) (optional --key filter)\n  auto-deprecate-idle-keys-v2 [options]             [V2] Deprecate idle active keys\n  auto-fail-stuck-migrations-v2 [options]           [V2] Fail stuck running migrations\n  stats-v2 [options]                                [V2] Show governance stats\n  help [command]                                    display help for command\n",
     "privacy": "Usage: chainlesschain privacy [options] [command]\n\nPrivacy computing (Phase 91)\n\nOptions:\n  -h, --help                                   display help for command\n\nCommands:\n  protocols [options]                          List MPC protocols\n  dp-mechanisms [options]                      List differential privacy mechanisms\n  he-schemes [options]                         List homomorphic encryption schemes\n  fl-statuses [options]                        List federated learning statuses\n  create-model [options] <name>                Create federated learning model\n  train [options] <model-id>                   Run one training round\n  fail-model [options] <model-id>              Mark model as failed\n  show-model [options] <model-id>              Show model details\n  models [options]                             List federated learning models\n  create-computation [options] <type>          Create MPC computation\n  submit-share [options] <computation-id>      Submit a share to MPC computation\n  show-computation [options] <computation-id>  Show computation details\n  computations [options]                       List MPC computations\n  dp-publish [options]                         Publish data with differential privacy noise\n  he-query [options]                           Query encrypted data (simulated HE)\n  report [options]                             Privacy computing report\n  fl-statuses-v2 [options]                     List V2 FL statuses\n  mpc-statuses-v2 [options]                    List V2 MPC statuses\n  dp-mechanisms-v2 [options]                   List V2 DP mechanisms\n  he-schemes-v2 [options]                      List V2 HE schemes\n  mpc-protocols-v2 [options]                   List V2 MPC protocols\n  default-max-active-mpc                       Show V2 default max active MPC computations\n  max-active-mpc                               Show current max active MPC computations\n  active-mpc-count                             Show currently-active MPC computation count\n  set-max-active-mpc <n>                       Set max concurrent active MPC computations\n  budget-limit                                 Show privacy budget limit\n  budget-spent                                 Show privacy budget spent\n  set-budget-limit <n>                         Set privacy budget limit\n  reset-budget                                 Reset privacy budget spent counter to 0\n  create-model-v2 [options] <name>             V2 create FL model (throws on invalid input)\n  train-round-v2 [options] <model-id>          V2 train one FL round (auto initializing → training)\n  aggregate-round [options] <model-id>         Aggregate FL round (training → training next / completed)\n  fail-model-v2 [options] <model-id>           V2 fail FL model (any non-terminal → failed)\n  set-fl-status [options] <model-id> <status>  V2 state-machine guarded FL status setter\n  create-computation-v2 [options] <type>       V2 create MPC computation (throws on invalid input)\n  submit-share-v2 [options] <comp-id>          V2 submit MPC share (state-guarded)\n  fail-computation [options] <comp-id>         Fail MPC computation (any non-terminal → failed)\n  set-mpc-status [options] <comp-id> <status>  V2 state-machine guarded MPC status setter\n  dp-publish-v2 [options]                      V2 DP publish (throws on invalid input / exceeded budget)\n  he-query-v2 [options]                        V2 HE query (throws on invalid input)\n  stats-v2 [options]                           V2 all-enum-key zero-init stats\n  help [command]                               display help for command\n",
-    "project": "Usage: chainlesschain project [options] [command]\n\nManage desktop projects (shared SQLite, syncs to mobile via Phase 3d)\n\nOptions:\n  -h, --help             display help for command\n\nCommands:\n  init [options] <name>  Create a new project in desktop DB\n  list [options]         List projects\n  show [options] <id>    Show project details\n  delete [options] <id>  Delete a project (soft by default; --hard to truly\n                         remove)\n  help [command]         display help for command\n",
+    "project": "Usage: chainlesschain project [options] [command]\n\nManage desktop projects (shared SQLite, syncs to mobile via Phase 3d)\n\nOptions:\n  -h, --help                          display help for command\n\nCommands:\n  risk-evaluate [options]             Evaluate overdue tasks and direct\n                                      blockers in an offline snapshot\n  task-description-preview [options]  Preview a task description request from\n                                      an unverified offline snapshot\n  init [options] <name>               Create a new project in desktop DB\n  list [options]                      List projects\n  show [options] <id>                 Show project details\n  delete [options] <id>               Delete a project (soft by default; --hard\n                                      to truly remove)\n  help [command]                      display help for command\n",
     "promcomp": "Usage: chainlesschain promcomp [options] [command]\n\nPrompt Compressor V2 governance (in-memory, CLI v0.143.0)\n\nOptions:\n  -h, --help                      display help for command\n\nCommands:\n  enums-v2                        Show V2 enums\n  register-profile-v2 [options]\n  activate-profile-v2 <id>\n  stale-profile-v2 <id>\n  archive-profile-v2 <id>\n  touch-profile-v2 <id>\n  get-profile-v2 <id>\n  list-profiles-v2\n  create-run-v2 [options]\n  compressing-run-v2 <id>\n  compress-run-v2 <id>\n  fail-run-v2 [options] <id>\n  cancel-run-v2 [options] <id>\n  get-run-v2 <id>\n  list-runs-v2\n  config-v2\n  set-max-active-profiles-v2 <n>\n  set-max-pending-runs-v2 <n>\n  set-profile-idle-ms-v2 <ms>\n  set-run-stuck-ms-v2 <ms>\n  auto-stale-idle-v2\n  auto-fail-stuck-v2\n  gov-stats-v2\n  help [command]                  display help for command\n",
     "quantize": "Usage: chainlesschain quantize [options] [command]\n\nModel quantization system (Phase 20)\n\nOptions:\n  -h, --help                                               display help for command\n\nCommands:\n  statuses [options]                                       List job statuses\n  types [options]                                          List quantization types (gguf/gptq)\n  levels [options]                                         List GGUF quantization levels (14 levels)\n  gptq-bits [options]                                      List GPTQ bit widths\n  create [options]                                         Create a quantization job\n  start [options] <id>                                     Start a pending job (simulated)\n  progress [options] <id> <percent>                        Update job progress (0-100)\n  complete [options] <id>                                  Mark a running job as completed\n  fail [options] <id>                                      Mark a job as failed\n  cancel [options] <id>                                    Cancel a pending or running job\n  delete [options] <id>                                    Delete a non-running job\n  show [options] <id>                                      Show job details\n  list [options]                                           List quantization jobs\n  stats [options]                                          Quantization statistics\n  model-maturities-v2 [options]                            List Phase 20 V2 model maturity states\n  job-ticket-lifecycles-v2 [options]                       List Phase 20 V2 job-ticket lifecycle states\n  default-max-active-models-per-owner                      Show default V2 per-owner active-model cap\n  max-active-models-per-owner                              Show current V2 per-owner active-model cap\n  set-max-active-models-per-owner <n>                      Set V2 per-owner active-model cap\n  default-max-running-jobs-per-owner                       Show default V2 per-owner running-job cap\n  max-running-jobs-per-owner                               Show current V2 per-owner running-job cap\n  set-max-running-jobs-per-owner <n>                       Set V2 per-owner running-job cap\n  default-model-idle-ms                                    Show default V2 model-idle threshold\n  model-idle-ms                                            Show current V2 model-idle threshold\n  set-model-idle-ms <ms>                                   Set V2 model-idle threshold (ms)\n  default-job-stuck-ms                                     Show default V2 job-stuck threshold\n  job-stuck-ms                                             Show current V2 job-stuck threshold\n  set-job-stuck-ms <ms>                                    Set V2 job-stuck threshold (ms)\n  active-model-count [options]                             Count active V2 models (optionally scoped by owner)\n  running-job-count [options]                              Count running V2 job tickets (optionally scoped by owner)\n  register-model-v2 [options] <model-id>                   Register a V2 model\n  model-v2 [options] <model-id>                            Show a V2 model\n  set-model-maturity-v2 [options] <model-id> <status>      Transition V2 model maturity\n  activate-model [options] <model-id>                      Transition a V2 model to ACTIVE\n  deprecate-model [options] <model-id>                     Transition a V2 model to DEPRECATED\n  retire-model [options] <model-id>                        Transition a V2 model to RETIRED\n  touch-model-usage <model-id>                             Bump lastUsedAt for a V2 model\n  enqueue-job-ticket-v2 [options] <ticket-id>              Enqueue a V2 quantization job ticket\n  job-ticket-v2 [options] <ticket-id>                      Show a V2 job ticket\n  set-job-ticket-status-v2 [options] <ticket-id> <status>  Transition V2 job ticket status\n  start-job-ticket [options] <ticket-id>                   Transition a V2 job ticket to RUNNING\n  complete-job-ticket [options] <ticket-id>                Transition a V2 job ticket to COMPLETED\n  fail-job-ticket [options] <ticket-id>                    Transition a V2 job ticket to FAILED\n  cancel-job-ticket [options] <ticket-id>                  Transition a V2 job ticket to CANCELED\n  auto-retire-idle-models [options]                        Flip idle V2 models (active+deprecated) → RETIRED\n  auto-fail-stuck-job-tickets [options]                    Flip stuck RUNNING V2 tickets → FAILED\n  stats-v2 [options]                                       Phase 20 V2 statistics\n  help [command]                                           display help for command\n",
     "rcache": "Usage: chainlesschain rcache [options] [command]\n\nResponse cache V2 — profile maturity + refresh jobs\n\nOptions:\n  -h, --help                                display help for command\n\nCommands:\n  profile-maturities-v2                     List V2 profile maturity states\n  refresh-job-lifecycles-v2                 List V2 refresh-job lifecycle states\n  stats-v2                                  V2 response cache stats\n  get-max-active-profiles-v2                Get max active profiles per owner (V2)\n  set-max-active-profiles-v2 <n>            Set max active profiles per owner (V2)\n  get-max-pending-refresh-jobs-v2           Get max pending refresh jobs per profile (V2)\n  set-max-pending-refresh-jobs-v2 <n>       Set max pending refresh jobs per profile (V2)\n  get-profile-idle-ms-v2                    Get profile idle threshold (V2)\n  set-profile-idle-ms-v2 <ms>               Set profile idle threshold (V2)\n  get-refresh-stuck-ms-v2                   Get refresh-job stuck threshold (V2)\n  set-refresh-stuck-ms-v2 <ms>              Set refresh-job stuck threshold (V2)\n  active-profile-count-v2 <ownerId>         Active profile count for owner (V2)\n  pending-refresh-job-count-v2 <profileId>  Pending refresh-job count for profile (V2)\n  register-profile-v2 [options] <id>        Register a V2 profile\n  get-profile-v2 <id>                       Get a V2 profile\n  list-profiles-v2 [options]                List V2 profiles\n  set-profile-status-v2 <id> <next>         Set V2 profile status\n  activate-profile-v2 <id>                  Activate a V2 profile\n  suspend-profile-v2 <id>                   Suspend a V2 profile\n  archive-profile-v2 <id>                   Archive a V2 profile\n  touch-profile-v2 <id>                     Touch a V2 profile\n  create-refresh-job-v2 [options] <id>      Create a V2 refresh job\n  get-refresh-job-v2 <id>                   Get a V2 refresh job\n  list-refresh-jobs-v2 [options]            List V2 refresh jobs\n  set-refresh-job-status-v2 <id> <next>     Set V2 refresh-job status\n  start-refresh-job-v2 <id>                 Start a V2 refresh job\n  complete-refresh-job-v2 <id>              Complete a V2 refresh job\n  fail-refresh-job-v2 <id>                  Fail a V2 refresh job\n  cancel-refresh-job-v2 <id>                Cancel a V2 refresh job\n  auto-suspend-idle-profiles-v2             Auto-suspend idle V2 profiles\n  auto-fail-stuck-refresh-jobs-v2           Auto-fail stuck V2 refresh jobs\n  help [command]                            display help for command\n",

package/src/commands/automation.js

@@ -107,6 +107,20 @@ function _dbFromCtx(cmd) {
   return null;
 }
 
+function reportExecution(execution) {
+  const message = `Execution ${execution.id} → ${execution.status}`;
+  if (execution.status === EXECUTION_STATUS.SUCCESS) {
+    logger.success(message);
+  } else if (execution.status === EXECUTION_STATUS.SIMULATED) {
+    logger.log(`${message} (simulation only; no external actions applied)`);
+  } else {
+    logger.error(
+      `${message}: ${execution.error || "execution did not succeed"}`,
+    );
+    process.exitCode = 1;
+  }
+}
+
 async function readBoundedJsonStdin(options, maximum = 80 * 1024) {
   if (options?.jsonStdin !== true) {
     throw new Error("--json-stdin is required for routine definitions");
@@ -665,8 +679,18 @@ function _wire(root) {
           action,
           expectedRevision: opts.expectedRevision,
         });
-        if (opts.json) console.log(JSON.stringify(result, null, 2));
-        else logger.success(`${flowId} ${action} completed`);
+        if (opts.json) {
+          console.log(JSON.stringify(result, null, 2));
+          if (
+            [EXECUTION_STATUS.FAILED, EXECUTION_STATUS.UNSUPPORTED].includes(
+              result.result?.status,
+            )
+          ) {
+            process.exitCode = 1;
+          }
+        } else if (result.result?.id && result.result?.flowId) {
+          reportExecution(result.result);
+        } else logger.success(`${flowId} ${action} completed`);
       } catch (e) {
         logger.error(e.message);
         process.exitCode = 1;
@@ -1033,14 +1057,17 @@ function _wire(root) {
 
   root
     .command("fire-trigger <triggerId>")
-    .description("Simulate trigger firing (executes flow)")
+    .description("Fire a trigger; use --test for simulation")
     .option("-i, --input <json>", "Input data as JSON")
+    .option("--test", "Simulate only; no external actions are applied")
     .action(async (triggerId, opts, cmd) => {
       const db = _dbFromCtx(cmd);
       try {
         const input = parseJsonOption(opts.input, "--input") || {};
-        const exec = fireTrigger(db, triggerId, input);
-        logger.success(`Fired trigger → exec ${chalk.cyan(exec.id)}`);
+        const exec = fireTrigger(db, triggerId, input, {
+          testMode: Boolean(opts.test),
+        });
+        reportExecution(exec);
         logger.log(`  status:   ${exec.status}`);
         logger.log(`  duration: ${exec.durationMs}ms`);
         logger.log(`  steps:    ${exec.stepsLog.length}`);
@@ -1095,9 +1122,9 @@ function _wire(root) {
 
   root
     .command("execute <flowId>")
-    .description("Manually execute a flow (simulated)")
+    .description("Execute a flow; use --test for simulation")
     .option("-i, --input <json>", "Input data as JSON")
-    .option("--test", "Test mode (marks execution as test)")
+    .option("--test", "Simulate only; no external actions are applied")
     .action(async (flowId, opts, cmd) => {
       const db = _dbFromCtx(cmd);
       try {
@@ -1106,7 +1133,7 @@ function _wire(root) {
           inputData: input,
           testMode: Boolean(opts.test),
         });
-        logger.success(`Execution ${chalk.cyan(exec.id)} → ${exec.status}`);
+        reportExecution(exec);
         logger.log(`  duration: ${exec.durationMs}ms`);
         logger.log(`  steps:    ${exec.stepsLog.length}`);
         if (exec.error) logger.log(chalk.red(`  error: ${exec.error}`));

package/src/commands/hub.js

@@ -3446,6 +3446,85 @@ function _defaultKnownVendors() {
 
 // ─── Commander wire-up ───────────────────────────────────────────────
 
+async function cmdDerivation(operation, reference, options = {}) {
+  try {
+    if (
+      reference &&
+      (!["event", "person", "place", "item", "topic"].includes(
+        reference.entityType,
+      ) ||
+        typeof reference.entityId !== "string" ||
+        !reference.entityId.trim() ||
+        reference.entityId.length > 1024)
+    ) {
+      throw new Error("A valid entity type and ID are required");
+    }
+    if (operation === "delete" && options.confirm !== true) {
+      throw new Error(
+        "Normalized entity deletion requires --confirm; raw archive is retained",
+      );
+    }
+    if (operation === "prune" && options.confirm !== true) {
+      throw new Error("Retired derivation receipt pruning requires --confirm");
+    }
+    if (
+      operation === "prune" &&
+      (!Array.isArray(options.consumer) ||
+        options.consumer.length < 1 ||
+        options.consumer.length > 100 ||
+        options.consumer.some(
+          (id) => typeof id !== "string" || !id.trim() || id.length > 1024,
+        ))
+    ) {
+      throw new Error("Select between 1 and 100 retired consumer IDs");
+    }
+    const limit = options.limit === undefined ? 100 : Number(options.limit);
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 1000) {
+      throw new Error("Derivation limit must be between 1 and 1000");
+    }
+    const hub = await (options._getHub || getHub)();
+    const filters = { adapter: options.adapter, scope: options.scope };
+    let result;
+    if (operation === "consumers") {
+      result = hub.vault.getDerivationStore().listConsumers({
+        state: options.state,
+        kind: options.kind,
+        afterConsumerId: options.after,
+        limit,
+      });
+    } else if (operation === "prune") {
+      result = hub.vault.getDerivationStore().pruneRetiredConsumers({
+        consumerIds: options.consumer,
+        activeConsumerId: hub.registry.consumerId,
+        limit,
+      });
+    } else if (operation === "retry") {
+      result = await hub.registry.retryDerivations({ ...filters, limit });
+    } else if (operation === "state") {
+      result = hub.vault
+        .getDerivationStore()
+        .getState(reference.entityType, reference.entityId, {
+          consumerId: hub.registry.consumerId,
+        });
+    } else if (operation === "delete") {
+      const deleted = hub.vault.deleteEntity(
+        reference.entityType,
+        reference.entityId,
+      );
+      result = {
+        deleted,
+        derivations: await hub.registry.retryDerivations({ limit: 1000 }),
+      };
+    } else {
+      result = hub.registry.getDerivationStatus(filters);
+    }
+    printJson(result);
+    return result;
+  } catch (error) {
+    fail(null, error, options.json);
+  }
+}
+
 export function registerHubCommand(program, dependencies = {}) {
   const factory = readEvolutionCompositionFactory(dependencies);
   const invocationOptions = (options) => {
@@ -3571,6 +3650,73 @@ export function registerHubCommand(program, dependencies = {}) {
     .option("--json", "Output JSON")
     .action(cmdListAdapters);
 
+  for (const [name, operation, description] of [
+    [
+      "derivation-status",
+      "status",
+      "Inspect KG/RAG delivery status for this vault",
+    ],
+    [
+      "retry-derivations",
+      "retry",
+      "Retry a bounded page of KG/RAG work from current vault state",
+    ],
+  ]) {
+    const command = hub
+      .command(name)
+      .description(description)
+      .option("--adapter <name>", "Filter by source adapter")
+      .option("--scope <scope>", "Filter by source scope")
+      .option("--json", "Output JSON");
+    if (operation === "retry")
+      command.option("--limit <n>", "Maximum deliveries (1-1000)", "100");
+    command.action((options) => cmdDerivation(operation, null, options));
+  }
+
+  hub
+    .command("derivation-consumers")
+    .description(
+      "List registered derivation consumers without retirement tokens",
+    )
+    .option("--state <state>", "Filter by active or retired")
+    .option("--kind <kind>", "Filter by ephemeral or persistent")
+    .option("--after <id>", "Continue after a consumer ID")
+    .option("--limit <n>", "Maximum consumers (1-1000)", "100")
+    .option("--json", "Output JSON")
+    .action((options) => cmdDerivation("consumers", null, options));
+
+  hub
+    .command("prune-derivations")
+    .description(
+      "Prune non-running receipts of explicitly selected retired ephemeral consumers",
+    )
+    .requiredOption("--consumer <ids...>", "Retired consumer IDs (1-100)")
+    .option("--limit <n>", "Maximum receipts removed (1-1000)", "100")
+    .option("--confirm", "Confirm removal of these retired projection receipts")
+    .option("--json", "Output JSON")
+    .action((options) => cmdDerivation("prune", null, options));
+
+  hub
+    .command("derivation-state <entityType> <entityId>")
+    .description(
+      "Inspect an entity's source revision and KG/RAG receipts without its payload",
+    )
+    .option("--json", "Output JSON")
+    .action((entityType, entityId, options) =>
+      cmdDerivation("state", { entityType, entityId }, options),
+    );
+
+  hub
+    .command("delete-entity <entityType> <entityId>")
+    .description(
+      "Delete a normalized entity and queue index removal; raw archive remains and reimport may restore it",
+    )
+    .option("--confirm", "Confirm deletion of this normalized entity")
+    .option("--json", "Output JSON")
+    .action((entityType, entityId, options) =>
+      cmdDerivation("delete", { entityType, entityId }, options),
+    );
+
   hub
     .command("readiness")
     .description(
@@ -4318,6 +4464,7 @@ export function registerHubCommand(program, dependencies = {}) {
 // `_wizard` / `_factoryDeps` / `_knownVendors` injected, bypassing the
 // real `getHub()` call. The commander wiring above is the runtime path.
 export const _internal = {
+  cmdDerivation,
   cmdAsk,
   cmdRepl,
   cmdRetrieveContext,