delegation-layer 0.3.0 → 0.4.0

package/skills/agent-integration/references/command-reference.md

@@ -24,13 +24,15 @@ The main skill owns [root selection](../SKILL.md#3-prepare-separate-paths-and-a-
 | `schedule` | [Recurring definitions](#schedules), [history and execution evidence](#schedule-history-and-execution) | None |
 | `scheduler serve/status/stop` (when supported), `scheduler run` | [User-started host and compatibility runtime](#scheduler-runtime) | Due occurrences use normal dispatch; status/stop do not launch providers |
 
-Prefix every task command with `delegate --root ROOT`, using the same
-explicit root across invocations.
+The commands below use the CLI default and omit `--root`. The advanced override
+syntax is `delegate --root ABS COMMAND ...`; use it only for an explicitly
+supplied or already recorded custom or historical root, preserved exactly under
+the main skill's [root rule](../SKILL.md#3-prepare-separate-paths-and-a-finite-brief).
 
 ## Dispatch
 
 ```text
-delegate --root ROOT dispatch [--auto | --provider ID] --brief FILE \
+delegate dispatch [--auto | --provider ID] --brief FILE \
   --cwd ABS [--id TASK_ID] [--permission MODE] [--budget DURATION] \
   [--model MODEL] [--effort EFFORT] [--native-timeout DURATION] \
   [--interactive] [--review-target TARGET] [--resume-task TASK_ID] \
@@ -170,8 +172,8 @@ setup, even when there is no matching Team or project default.
 After a task record is created, inspect the same ID and root:
 
 ```sh
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" status TASK_ID --json
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" collect TASK_ID --watch 5s --json
+delegate status TASK_ID --json
+delegate collect TASK_ID --watch 5s --json
 ```
 
 Dispatch/status/collect optionally expose top-level `team`, the admitted
@@ -198,18 +200,18 @@ another create to obtain a running scheduler.
 See [definition and host results](result-handling.md#schedule-definition-and-host-results).
 
 ```text
-delegate --root ROOT schedule create --brief FILE --cwd ABS \
+delegate schedule create --brief FILE --cwd ABS \
   [--auto | --provider ID] --cron 'MIN HOUR DOM MONTH DOW' \
   [--timezone ZONE] [--id SCHEDULE_ID] [--model MODEL] [--effort EFFORT] \
   [--permission MODE] [--budget DURATION] [--native-timeout DURATION] \
   [--review-target TARGET] \
   [--team-scope user|project --team TEAM_ID --member MEMBER_ID] \
   [--project-root ABS] --json
-delegate --root ROOT schedule list [--after SCHEDULE_ID] [--limit N] --json
-delegate --root ROOT schedule show SCHEDULE_ID --json
-delegate --root ROOT schedule pause SCHEDULE_ID --json
-delegate --root ROOT schedule resume SCHEDULE_ID --json
-delegate --root ROOT schedule delete SCHEDULE_ID --json
+delegate schedule list [--after SCHEDULE_ID] [--limit N] --json
+delegate schedule show SCHEDULE_ID --json
+delegate schedule pause SCHEDULE_ID --json
+delegate schedule resume SCHEDULE_ID --json
+delegate schedule delete SCHEDULE_ID --json
 ```
 
 - Requested provider options remain as supplied, including omissions. Creation
@@ -245,9 +247,10 @@ delegate --root ROOT schedule delete SCHEDULE_ID --json
   history. Pause/delete do not cancel an active occurrence or require a live
   host. Create/resume preserve the saved definition even when the host is
   absent, starting, in backoff or otherwise not confirmed ready.
-- Only create initializes absent schedule storage. An absent store lists as
-  empty; show/state commands report not found. List defaults to 50 rows, at most
-  100, including paused/deleted definitions. Use the returned cursor to page.
+- Among schedule management commands, only create initializes absent storage.
+  An absent store lists as empty; show/state commands report not found. List
+  defaults to 50 rows, at most 100, including paused/deleted definitions. Use the
+  returned cursor to page.
 - Create/state responses are compact. Show returns saved requested choices and
   brief metadata, not brief contents, with a 2 MiB response limit. Keep the ID
   when output or storage reports uncertainty; inspect it with show rather than
@@ -265,8 +268,8 @@ timestamp range has a distinct range error, not a claim of permanent invalidity.
 ### Schedule history and execution
 
 ```text
-delegate --root ROOT schedule history SCHEDULE_ID [--before RFC3339Nano] [--limit N] --json
-delegate --root ROOT schedule execution TASK_ID --json
+delegate schedule history SCHEDULE_ID [--before RFC3339Nano] [--limit N] --json
+delegate schedule execution TASK_ID --json
 ```
 
 `history` returns occurrence summaries and compact skipped intervals together,
@@ -292,22 +295,49 @@ Missing task files and corrupt evidence are distinct; see
 [scheduled result handling](result-handling.md#scheduled-execution-results)
 for freshness, no-result states, response bounds, exit codes and recovery.
 
+## Supervisor owner control
+
+```sh
+delegate supervisor stop-owner --json
+```
+
+Use only when the installed build advertises this command. Preserve the explicit
+root for work bound to a custom or historical root. This command contacts one
+existing infrastructure owner; it does not initialize, repair or start one.
+It leaves Pueue and admitted tasks running. Startup, accepted operations and
+unresolved cleanup can make the owner busy.
+
+The `supervisor_owner` response separates `state` (`serving_released`,
+`not_initialized`, `busy` or `unknown`) from `process_closure` (`closed`,
+`pending` or `unknown`). A released owner can remain alive as the sole waiter for
+its daemon; serving release is not proof of process exit or root quiescence.
+The optional `process` value (`pid`, `start_token`) identifies the validated
+selected `startup`; it does not establish liveness. It is omitted when no owner
+was selected or validated. Observe that exact incarnation after daemon shutdown;
+a new root-selected stop can address a newer owner.
+An absent root reports `not_initialized` with unknown process closure.
+Exit `0` reports the observed release or uninitialized state, `3` reports busy,
+and `1` reports a control or observation fault. Preserve an uncertain result;
+the command does not resend an uncertain stop request. Human output exposes
+the same separate observations.
+
 ## Scheduler runtime
 
 Check `delegate help` for the installed build's command surface. Use `serve`,
 `status` and `stop` only when that help advertises them; prefer `serve` for managed
-recovery. The signatures below describe the current command surface. Keep the
-same explicit absolute `ROOT` used by the schedule commands.
+recovery. The signatures below describe the current command surface. They use
+the same CLI default as ordinary schedule commands; preserve an explicit custom
+or historical root when the schedule is bound to one.
 
 ```text
-delegate --root ROOT scheduler serve
-delegate --root ROOT scheduler status
-delegate --root ROOT scheduler stop
-delegate --root ROOT scheduler run [--pueue-config ABS] [--json]
+delegate scheduler serve
+delegate scheduler status
+delegate scheduler stop
+delegate scheduler run [--pueue-config ABS] [--json]
 ```
 
 If installed help offers only `scheduler run`, the user runs
-`delegate --root ROOT scheduler run` in an independent terminal or tmux pane and
+`delegate scheduler run` in an independent terminal or tmux pane and
 leaves it in the foreground. Ctrl-C in its original pane stops it; it has no
 automatic child restart. Keep the saved schedule ID and inspect
 [history and execution](#schedule-history-and-execution) for actual occurrences.
@@ -332,9 +362,13 @@ When present, `scheduler.serve_command` preserves spaces and shell metacharacter
 as separate arguments. Human output also prints JSON argv, not an unquoted shell string.
 Preserve those boundaries; see the [scheduler response fields](result-handling.md#schedule-definition-and-host-results).
 
-Serve requires existing schedule storage; create owns initialization. A second
-host or competing `run` cannot acquire the same root's ownership. The host uses
-its retained launch context and the saved requested provider choices. For
+Explicit `serve` may initialize absent scheduler storage through the same
+scheduler owner lease used by `schedule create`. It can become ready with no
+definitions; later creates reach that running host without a restart. Existing
+root identity and data stay in place; invalid existing storage fails explicitly.
+Passive reads and low-level `run` do not initialize absent storage. A second host
+or competing `run` cannot acquire the same root's ownership. The host uses its
+retained launch context and the saved requested provider choices. For
 Team-targeted schedules, new occurrences read the pinned catalog's latest Member
 defaults through normal admission; existing task IDs retain saved settings. Use
 the intended user configuration context, or a different catalog instance fails
@@ -452,8 +486,8 @@ A checkpoint is Git-content evidence, not a provider outcome.
 ## Providers and capabilities
 
 ```sh
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" providers --json
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" capabilities --provider PROVIDER_ID --json
+delegate providers --json
+delegate capabilities --provider PROVIDER_ID --json
 ```
 
 `providers` returns `schema_version: 1` and a sorted `providers` array.
@@ -479,9 +513,11 @@ Inspection-backed admission can return `status: "ready"` with
 `verification: "runtime"` after its probe. Managed runtime-only admission
 keeps the catalog projection; its supervised worker checks compatibility before
 provider execution. Collect the created task to establish the result.
-Optional protocol members `version` and `executable_sha256` are diagnostics,
-not launch authority. Live acceptance remains separate (`not_run`, `passed`,
-or `blocked`); a blocked prerequisite is unresolved.
+Provider versions are optional diagnostics. Historical executable-digest members
+remain readable as recorded data. Do not depend on these fields or calculate new
+executable fingerprints for diagnostics or admission. Required behavior and the
+selected installed executable govern compatibility. Live acceptance remains separate (`not_run`,
+`passed`, or `blocked`); a blocked prerequisite is unresolved.
 
 ## Choosing models and effort
 
@@ -490,7 +526,7 @@ them. Keep defaults when no explicit choice is needed. Resolve a natural-languag
 name through native discovery:
 
 ```sh
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" models \
+delegate models \
   --provider PROVIDER_ID --cwd ABSOLUTE_WORKSPACE --json
 ```
 
@@ -533,7 +569,7 @@ reason codes and return no model facts.
 Use static preflight when readiness was requested, not before every task:
 
 ```sh
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" preflight \
+delegate preflight \
   --provider PROVIDER_ID --cwd ABSOLUTE_WORKSPACE \
   --permission REQUESTED_MODE --json
 ```

package/skills/agent-integration/references/continuation.md

@@ -22,7 +22,7 @@ When `status` or `collect` reports a timed-out turn with:
 run:
 
 ```sh
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" continue \
+delegate continue \
   --task PREDECESSOR_TASK_ID \
   --brief FOLLOW_UP_BRIEF \
   --budget 30m \
@@ -35,8 +35,11 @@ indefinitely for a publication that the interrupted turn cannot complete.
 
 The follow-up brief is optional. If it is omitted, Delegation Layer reuses the
 validated predecessor brief. A successful continuation returns a new task ID
-and links it to the predecessor. Observe and collect the new ID separately. Always retain the original state
-root, even if a returned command hint omits it. Permission is inherited; do not
+and links it to the predecessor. Observe and collect the new ID separately.
+Follow the main skill's [root rule](../SKILL.md#3-prepare-separate-paths-and-a-finite-brief):
+ordinary continuation omits `--root` in the same user/configuration context;
+an explicit custom or recorded historical root must be retained exactly, even
+if a returned command hint omits it. Permission is inherited; do not
 add `--permission` to `continue`. Apply
 [task creation](result-handling.md#task-creation) before retrying or observing.
 Any authorized admission retry remains the argv-equivalent `continue`;
@@ -85,7 +88,7 @@ observe that successor instead; if its creation is uncertain, follow the
    `workspace.id` from the task response; never guess an ID or path:
 
    ```sh
-   delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" workspace status \
+   delegate workspace status \
      WORKSPACE_ID --watch 30s --json
    ```
 

package/skills/agent-integration/references/interaction.md

@@ -62,7 +62,7 @@ question. A printed question alone is not a pending reply request.
    together with the exact answers. Submit the reply:
 
    ```sh
-   delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" reply "$task_id" \
+   delegate reply "$task_id" \
      --request "$request_id" --answers "$answers_file" \
      --id "$message_id" --json
    ```
@@ -70,9 +70,10 @@ question. A printed question alone is not a pending reply request.
 6. Keep collecting. A receipt is not task completion. Only the task's
    authoritative `outcome` establishes the final result.
 
-Use the same root expression for dispatch, collection, reply, and steering.
-If the user explicitly chose another root, use that exact path for all of
-them. The other variables stand for actual values saved from this task;
+Follow the main skill's [root rule](../SKILL.md#3-prepare-separate-paths-and-a-finite-brief)
+for dispatch, collection, reply, and steering. The examples use the CLI default;
+preserve an explicit custom or recorded historical root for all of them.
+The variables stand for actual values saved from this task;
 reassign them in each shell invocation if your tool does not preserve variables.
 A pending response without questions means keep collecting, not inspect OS
 processes or dispatch a replacement task.
@@ -86,7 +87,7 @@ reply IDs and earlier steering IDs. Submit it; for a lost response, follow the
 [delivery rules](#interpret-delivery-precisely) with the same ID and content:
 
 ```sh
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" steer "$task_id" \
+delegate steer "$task_id" \
   --brief "$guidance_file" --id "$steering_message_id" --json
 ```
 

package/skills/agent-integration/references/result-handling.md

@@ -2,6 +2,9 @@
 
 Read response fields independently. A successful control command is not a
 successful provider result.
+Examples use the CLI default under the main skill's
+[root rule](../SKILL.md#3-prepare-separate-paths-and-a-finite-brief); preserve an
+explicit custom or recorded historical root on related commands.
 
 ## Task control response
 
@@ -49,7 +52,7 @@ this table to each dispatch or continuation attempt separately, in order:
 | Response | Next action |
 |---|---|
 | Usage error, no JSON response | Correct the reported syntax using Delegate help or `providers --json`, then invoke that request again. Parsing failed before admission. |
-| `task_record: not_created`, `failure.code: supervisor_upgrade_required`, and `failure.next_action: run_supervisor_migrate` | Run `delegate --root "<the exact absolute state root used by the failed command>" supervisor migrate --json` once. Retry the exact original admission argv once only after `supervisor_control.state: migrated` and `supervisor_control.next_action: retry_dispatch`; otherwise stop and report the migration response. Preserve an explicit custom root exactly. A failed `continue` must be retried as the same `continue`; never replace it with a fresh `dispatch` or a direct provider call. |
+| `task_record: not_created`, `failure.code: supervisor_upgrade_required`, and `failure.next_action: run_supervisor_migrate` | Run `delegate supervisor migrate --json` once in the same user/configuration context for ordinary default-root work. If the failed command used an explicit custom or recorded historical root, run `delegate --root "<the exact absolute root used by the failed command>" supervisor migrate --json` instead. Retry the exact original admission argv once only after `supervisor_control.state: migrated` and `supervisor_control.next_action: retry_dispatch`; otherwise stop and report the migration response. A failed `continue` must be retried as the same `continue`; never replace it with a fresh `dispatch` or a direct provider call. |
 | `task_record: not_created` and `failure.next_action: correct_request` | Correct that request and retry it. |
 | `task_record: not_created`, `failure.code: workspace_provision_pending` or `workspace_busy`, and `failure.next_action: watch_workspace` | Follow [managed workspace recovery](#managed-workspace-results) using the same root and workspace. Once ready, retry the exact admission command and inputs. A failed `continue` remains that same `continue`, never a new dispatch. |
 | `task_record: not_created`, `failure.code: resource_pressure`, `failure.next_action: retry_later`, and `failure.retry_after_seconds: 30` | Delegate checked the host and confirmed resource pressure, so no ordinary task record was created and no provider task is running for this attempt. Do not poll or observe a task. Choose one: report the refusal and stop, or wait at least 30 seconds in the foreground and retry the exact original admission argv once. A `continue` stays that same `continue`. If the retry is refused again, report and stop. Never loop, retry in the background, schedule a retry, or run Pueue or process commands. The 30 seconds is advice, not a guarantee that the retry will pass. |
@@ -192,7 +195,7 @@ keep `schedule.id` even if the command exits nonzero. The separate top-level
 For `start_required`, both `schedule.next_action` and `scheduler.next_action`
 carry that guidance. `scheduler.serve_command` is JSON argv, including the
 resolved executable and exact root. Human output also prints JSON argv after
-`run independently (argv):`, for example:
+`run independently (argv):`. For example, a returned root containing spaces:
 
 ```text
 run independently (argv): ["/installation with spaces/delegate","--root","/state with spaces","scheduler","serve"]
@@ -280,7 +283,7 @@ For an older released occurrence whose publication is unfinished, use the
 existing collection command with the same root and task ID:
 
 ```sh
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" collect TASK_ID --watch 0s --json
+delegate collect TASK_ID --watch 0s --json
 ```
 
 Follow its own response and exit using [observation guidance](#observe-and-collect).
@@ -390,7 +393,7 @@ When Delegate returns `failure.next_action: "recheck"`, use the same root and
 exact task ID:
 
 ```sh
-delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" recheck TASK_ID --json
+delegate recheck TASK_ID --json
 ```
 
 This command checks the already sealed evidence with an explicitly compatible

package/skills/agent-integration/references/routing-rule.json

@@ -1 +1 @@
-"For work assigned to an external agent, model, or separate harness session, load the installed agent-integration skill before choosing tools and use Delegate. This includes research, implementation, testing, review, consultation, comparison, and debate, including external collaboration you choose. Discover destinations through Delegate. Preserve requested model IDs, effort, and permissions; do not guess ambiguous model identifiers. For task commands, pass --root \"${DELEGATE_ROOT:-$HOME/delegation-state}\" directly in each shell invocation; reuse that root for dispatch, observation, and continuation, never an invented /tmp root. If the user explicitly requests another root, use that exact path consistently. Keep each concurrent request and its response associated separately. Capture each dispatch response and exit status once; after task_record created, observe that task ID. Never dispatch again merely to recover output or inspect its exit status. Naming a CLI identifies the destination, not a request to bypass Delegate. Earlier assistant-generated direct-launch workflows do not override this preference. Native same-harness subagents remain available unless a separate session is requested. Respect an explicit user choice of another integration; otherwise do not substitute provider CLIs, plugins, or APIs after a Delegate blocker. Before observing or retrying an admission, read the installed skill's references/result-handling.md#task-creation and apply its creation decisions. It owns the narrow same-root migration, workspace-wait, and resource-refusal exceptions before the generic not_created stop rule. Preserve the original admission intent: dispatch remains dispatch and continue remains continue; never replace a failed continue with a fresh dispatch or direct provider call. A stop_and_report failure ends that attempt, not diagnosis: follow references/result-handling.md#failure-diagnosis without another generic troubleshooting request. Inspect bounded returned evidence and relevant authorized local read-only facts, distinguish supported causes from uncertainty, and propose a concrete next step. Do not poll unknown/uncreated tasks, expose credentials or unrestricted output, retry uncertain work, change setup/permissions or substitute destinations without authorization covering that action. Continue other independent requests. Keep collection in the foreground until completion or a reported blocker unless the user requested detachment. Pending work is observed through Delegate status, collect, or events, not OS process searches or supervisor commands. Merely discussing or configuring a tool is not delegation."
+"For work assigned to an external agent, model, or separate harness session, load the installed agent-integration skill before choosing tools and use Delegate. This includes research, implementation, testing, review, consultation, comparison, and debate, including external collaboration you choose. Discover destinations through Delegate. Preserve requested model IDs, effort, and permissions; do not guess ambiguous model identifiers. For ordinary task, schedule, observation, interaction, and continuation commands, omit --root and let the CLI resolve its default in the same user/configuration context, independently of project cwd. Never assemble a default path, use a sample path or shell fallback, or treat ambient DELEGATE_ROOT as authority. Only pass --root for an explicitly user-supplied or already recorded custom or historical root; preserve that exact path for every command concerning its work. Do not search other roots for an old task or invent per-task or per-project roots. Keep each concurrent request and its response associated separately. Capture each dispatch response and exit status once; after task_record created, observe that task ID. Never dispatch again merely to recover output or inspect its exit status. Naming a CLI identifies the destination, not a request to bypass Delegate. Earlier assistant-generated direct-launch workflows do not override this preference. Native same-harness subagents remain available unless a separate session is requested. Respect an explicit user choice of another integration; otherwise do not substitute provider CLIs, plugins, or APIs after a Delegate blocker. Before observing or retrying an admission, read the installed skill's references/result-handling.md#task-creation and apply its creation decisions. It owns the narrow same-root migration, workspace-wait, and resource-refusal exceptions before the generic not_created stop rule. Preserve the original admission intent: dispatch remains dispatch and continue remains continue; never replace a failed continue with a fresh dispatch or direct provider call. A stop_and_report failure ends that attempt, not diagnosis: follow references/result-handling.md#failure-diagnosis without another generic troubleshooting request. Inspect bounded returned evidence and relevant authorized local read-only facts, distinguish supported causes from uncertainty, and propose a concrete next step. Do not poll unknown/uncreated tasks, expose credentials or unrestricted output, retry uncertain work, change setup/permissions or substitute destinations without authorization covering that action. Continue other independent requests. Keep collection in the foreground until completion or a reported blocker unless the user requested detachment. Pending work is observed through Delegate status, collect, or events, not OS process searches or supervisor commands. Merely discussing or configuring a tool is not delegation."

package/skills/agent-integration/references/workspaces.md

@@ -7,6 +7,10 @@ or attaches to a managed workspace (`--isolation git-worktree` or
 `--workspace ID`), or creates or removes a [Git checkpoint](#git-checkpoints).
 
 This reference is self-contained guidance for using managed workspaces.
+Commands use the CLI default under the main skill's
+[root rule](../SKILL.md#3-prepare-separate-paths-and-a-finite-brief). For a workspace
+or checkpoint in an explicit custom or recorded historical root, pass that
+exact `--root` on every related command.
 
 Provider-native permissions still apply inside an isolated checkout. A provider
 may edit files but be unable to stage or commit because linked-worktree Git
@@ -41,7 +45,7 @@ row ending or a provider outcome alone is not closure evidence.
 Create a managed workspace from a committed source base:
 
 ```text
-delegate --root ROOT dispatch --isolation git-worktree --cwd ABS \
+delegate dispatch --isolation git-worktree --cwd ABS \
   [--base REV] [--workspace-budget DURATION] ... --json
 ```
 
@@ -55,7 +59,7 @@ removing that source does not block capture, release, or forget. A request that
 workspace uses its recorded checkout and source identity:
 
 ```text
-delegate --root ROOT dispatch --workspace WORKSPACE_ID ... --json
+delegate dispatch --workspace WORKSPACE_ID ... --json
 ```
 
 Public `--workspace` cannot be combined with `--cwd`, `--base`, or
@@ -80,11 +84,11 @@ made no write outside the promised content scope.
 The CLI currently exposes these managed-workspace commands:
 
 ```text
-delegate --root ROOT workspace list [--after ID] [--limit 1..50] --json
-delegate --root ROOT workspace status ID [--operation OP] [--watch DURATION] --json
-delegate --root ROOT workspace exec ID --budget DURATION --json -- ARGV...
-delegate --root ROOT workspace release ID [--discard] [--budget DURATION] --json
-delegate --root ROOT workspace forget ID [--budget DURATION] --json
+delegate workspace list [--after ID] [--limit 1..50] --json
+delegate workspace status ID [--operation OP] [--watch DURATION] --json
+delegate workspace exec ID --budget DURATION --json -- ARGV...
+delegate workspace release ID [--discard] [--budget DURATION] --json
+delegate workspace forget ID [--budget DURATION] --json
 ```
 
 `workspace exec` passes `ARGV...` directly to the supervised helper; the
@@ -110,7 +114,7 @@ must not mutate the predecessor's immutable records. A retained workspace can be
 read-only review by attaching its ID, for example:
 
 ```text
-delegate --root ROOT dispatch --provider codex:review \
+delegate dispatch --provider codex:review \
   --workspace WORKSPACE_ID --review-target TARGET --brief ABS_BRIEF \
   --permission read-only --budget 1h --json
 ```
@@ -183,11 +187,11 @@ fixed Delegate values; trailers carry the checkpoint ID and request digest.
 This is unrelated to a provider continuation `mode: "checkpoint"`.
 
 ```text
-delegate --root ROOT checkpoint create --cwd ABS [--budget DURATION] --json
-delegate --root ROOT checkpoint create --workspace ID [--budget DURATION] --json
-delegate --root ROOT checkpoint status CHECKPOINT_ID [--operation OP] [--watch DURATION] --json
-delegate --root ROOT checkpoint list [--after CHECKPOINT_ID] [--limit 1..50] --json
-delegate --root ROOT checkpoint remove CHECKPOINT_ID [--budget DURATION] --json
+delegate checkpoint create --cwd ABS [--budget DURATION] --json
+delegate checkpoint create --workspace ID [--budget DURATION] --json
+delegate checkpoint status CHECKPOINT_ID [--operation OP] [--watch DURATION] --json
+delegate checkpoint list [--after CHECKPOINT_ID] [--limit 1..50] --json
+delegate checkpoint remove CHECKPOINT_ID [--budget DURATION] --json
 ```
 
 - `create` names exactly one target: `--cwd` for an absolute ordinary Git
@@ -232,7 +236,7 @@ Save every response and exit code once; follow
    the same repository as `--cwd`, normally the source the Lead already uses:
 
    ```text
-   delegate --root ROOT dispatch --auto --brief ABS_BRIEF --cwd ABS_SOURCE \
+   delegate dispatch --auto --brief ABS_BRIEF --cwd ABS_SOURCE \
      --isolation git-worktree --base COMMIT_OID \
      --permission workspace-write --budget 30m --json
    ```

package/skills/agent-integration/scripts/delegate-routing-context.sh

@@ -5,11 +5,11 @@ case "${1:-}" in
     SessionStart|SubagentStart) event=$1 ;;
     *) printf '%s\n' 'Expected SessionStart or SubagentStart.' >&2; exit 2 ;;
 esac
-script_dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+script_dir=$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)
 rule_file="$script_dir/../references/routing-rule.json"
 # Read before emitting anything so a missing asset cannot produce partial JSON.
 rule=$(cat "$rule_file")
-skill_file="$(CDPATH= cd -- "$script_dir/.." && pwd)/SKILL.md"
+skill_file="$(CDPATH='' cd -- "$script_dir/.." && pwd)/SKILL.md"
 DELEGATE_ROUTING_EVENT="$event" DELEGATE_ROUTING_RULE="$rule" DELEGATE_ROUTING_SKILL="$skill_file" awk '
 BEGIN {
     # Paths are task data, not shell code. Escape every JSON control character.