nawabari 0.10.3 → 0.12.2

package/dist/cli-command-registry.d.ts

@@ -24,14 +24,1113 @@ export type CliCommandDefinition = {
     readonly options: readonly CliHelpOptionSpec[];
     readonly notes?: readonly string[];
 };
-export declare const GLOBAL_HELP_OPTIONS: readonly CliHelpOptionSpec[];
+export declare const GLOBAL_HELP_OPTIONS: readonly [{
+    readonly name: "--json";
+    readonly description: "Emit one stable JSON document on stdout";
+}, {
+    readonly name: "--help";
+    readonly aliases: readonly ["-h"];
+    readonly description: "Show command-specific help";
+}, {
+    readonly name: "--version";
+    readonly description: "Print the installed version";
+}];
 /**
  * Canonical public command/discovery registry.
  *
  * Dispatcher implementation deliberately remains below in this module.  This
  * registry only describes the public discovery surface; aliases point at the
  * canonical command so option metadata cannot drift between projections.
+ *
+ * `as const satisfies` on the underlying data (rather than a
+ * `: readonly CliCommandDefinition[]` annotation) keeps every command/option
+ * name as its own literal type so `CommandId`/`OptionId` below can be
+ * derived from this data instead of hand-typed as a second identity list.
+ * `CLI_COMMAND_REGISTRY` itself keeps the wider `CliCommandDefinition[]`
+ * view every existing consumer already expects; it is the same array, not a
+ * second copy.
+ */
+declare const REGISTRY_DATA: readonly [{
+    readonly name: "session create";
+    readonly summary: "Request a new Nawabari session";
+    readonly usage: string;
+    readonly options: readonly [{
+        name: "--branch";
+        description: string;
+    } & {
+        readonly value: "<name>";
+        readonly default: "nawabari/session/<session_id>";
+    }, {
+        name: "--worktree";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly default: "<managed_worktree_root>/<repository>-<session_id>";
+    }, {
+        name: "--worktree-root";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly default: "<repository-parent>/.nawabari/worktrees";
+    }, {
+        name: "--base";
+        description: string;
+    } & {
+        readonly value: "<ref>";
+        readonly default: "HEAD";
+    }, {
+        name: "--label";
+        description: string;
+    } & {
+        readonly value: "<text>";
+        readonly default: "omitted";
+    }, {
+        name: "--profile";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--profile-parameter";
+        description: string;
+    } & {
+        readonly value: "<json>";
+    }, {
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path-or-glob>";
+        readonly repeatable: true;
+    }, {
+        name: "--mode";
+        description: string;
+    } & {
+        readonly value: "<read|write|exclusive-write>";
+        readonly repeatable: true;
+    }, {
+        name: "--auxiliary-state";
+        description: string;
+    } & {
+        readonly value: "<json>";
+        readonly repeatable: true;
+    }, {
+        name: "--execution-scope-file";
+        description: string;
+    } & {
+        readonly value: "<path>";
+    }, {
+        name: "--candidate-working-set-file";
+        description: string;
+    } & {
+        readonly value: "<path>";
+    }, {
+        name: "--enforce-claims";
+        description: string;
+    } & CliHelpOptionSpec];
+    readonly notes: readonly ["All create options are optional. Use status --json to discover managed_worktree_root.", "--worktree and --worktree-root cannot be combined.", "--profile-parameter requires --profile; ambiguous unqualified profile ids are rejected.", "Initial claims are provisioned atomically with the session; each --resource must be immediately followed by its own --mode, and zero pairs remains backward compatible.", "Resource-claim enforcement is disabled by default; pass --enforce-claims to require claims for commit/push authorization on this session. Worktree and branch ownership, and claim conflicts against other sessions, remain enforced regardless.", "Providing one bounded working-set artifact requires the other; both are validated before worktree ownership is established.", "A claim conflict returns blocking-owner evidence. A durability-uncertain result is retry-safe only after re-reading the reported registry state; an existing owner is never silently adopted.", "Without an override, Nawabari creates the safe managed root <repository-parent>/.nawabari/worktrees on first use. Existing absolute worktree paths directly under the repository parent remain accepted for compatibility."];
+}, {
+    readonly name: "session id";
+    readonly summary: "Resolve the current session identity";
+    readonly usage: "nawabari session id";
+    readonly options: readonly [];
+}, {
+    readonly name: "profile list";
+    readonly summary: "List built-in worktree runtime profiles";
+    readonly usage: "nawabari profile list";
+    readonly options: readonly [];
+    readonly notes: readonly ["Built-in and repository profile namespaces remain distinct; collisions are reported rather than overwritten."];
+}, {
+    readonly name: "profile show";
+    readonly summary: "Show one worktree runtime profile";
+    readonly usage: "nawabari profile show --profile <id>";
+    readonly options: readonly [{
+        name: "--profile";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }];
+}, {
+    readonly name: "session show";
+    readonly summary: "Show the current or selected session";
+    readonly usage: "nawabari session show [<session-id>|--session <id>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+    readonly notes: readonly ["Target grammar is consistent: an optional first positional <session-id> is an alias for --session <id>; do not supply both."];
+}, {
+    readonly name: "session inspect";
+    readonly summary: "Report side-effect-free close/cleanup readiness for a session";
+    readonly usage: "nawabari session inspect [<session-id>|--session <id>] [--integrated-revision <rev>] [--schema-version <1|2>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--integrated-revision";
+        description: string;
+    } & {
+        readonly value: "<rev>";
+    }, {
+        name: "--schema-version";
+        description: string;
+    } & {
+        readonly value: "<1|2>";
+        readonly default: "1";
+        readonly values: readonly ["1", "2"];
+    }];
+    readonly notes: readonly ["Read-only: never mutates session, claim, Git, worktree, branch, or registry state. Repeated calls are idempotent.", "Derived from the same authoritative close/cleanup Git evidence as session close; does not duplicate or diverge from that logic.", "The established unqualified result is schema v1. Schema v2 exposes lifecycle and next_actions once at the top level; garbage_collection retains explicit references to those authorities. Use --schema-version 2 to opt into v2.", "Nawabari never queries GitHub or any remote provider; --integrated-revision only names a local revision for Nawabari to independently verify.", "Target grammar: optional first positional <session-id> is an alias for --session <id>; do not supply both."];
+}, {
+    readonly name: "session scope expand";
+    readonly summary: "Explicitly expand a bounded session working set";
+    readonly usage: string;
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--repository";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--repository-host";
+        description: string;
+    } & {
+        readonly value: "<host>";
+        readonly required: true;
+    }, {
+        name: "--revision";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly required: true;
+    }, {
+        name: "--execution-scope-file";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+    }, {
+        name: "--path";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+        readonly repeatable: true;
+    }, {
+        name: "--operation";
+        description: string;
+    } & {
+        readonly value: "<READONLY|WRITE|CREATE|DELETE>";
+        readonly required: true;
+        readonly values: readonly ["READONLY", "WRITE", "CREATE", "DELETE"];
+    }, {
+        name: "--reason";
+        description: string;
+    } & {
+        readonly value: "<text>";
+        readonly default: "explicit-working-set-expansion";
+    }, {
+        name: "--evidence";
+        description: string;
+    } & {
+        readonly value: "<text>";
+    }, {
+        name: "--unresolved";
+        description: string;
+    } & CliHelpOptionSpec];
+    readonly notes: readonly ["The current working-set revision is a mandatory CAS token; stale requests are rejected without mutation.", "READONLY is evaluated independently. Mutation classes also require the existing session claim authority.", "The execution-scope artifact must match the session's established provenance; it cannot widen Inari maximum authority."];
+}, {
+    readonly name: "session reconcile";
+    readonly summary: "Apply bounded lifecycle reconciliation for one selected session";
+    readonly usage: "nawabari session reconcile --session <id> --apply";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--apply";
+        description: string;
+    } & {
+        readonly required: true;
+    }];
+    readonly notes: readonly ["Destructive mutation requires both an explicit session target and --apply.", "Elapsed age, missing paths alone, ambiguous ownership, recoverable work, and unresolved physical evidence never authorize mutation.", "Repeating a converged request returns an explicit already-terminal result."];
+}, {
+    readonly name: "session run";
+    readonly aliases: readonly ["session exec"];
+    readonly summary: "Run one command inside the protected session sandbox";
+    readonly usage: "nawabari session run [--session <id>] [--runtime-policy <strict|compatibility>] -- <command> [args...]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--runtime-policy";
+        description: string;
+    } & {
+        readonly value: "<strict|compatibility>";
+        readonly default: "strict";
+        readonly values: readonly ["strict", "compatibility"];
+    }];
+    readonly notes: readonly ["The -- terminator is mandatory. The command is passed as argv without a shell, and protected execution is fail-closed.", "session exec is an alias."];
+}, {
+    readonly name: "session shell";
+    readonly summary: "Run an explicitly projected shell inside the protected session sandbox";
+    readonly usage: "nawabari session shell [--session <id>] [--runtime-policy <strict|compatibility>] -- <projected-shell> [args...]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--runtime-policy";
+        description: string;
+    } & {
+        readonly value: "<strict|compatibility>";
+        readonly default: "strict";
+        readonly values: readonly ["strict", "compatibility"];
+    }];
+    readonly notes: readonly ["The -- terminator is mandatory. The projected shell is resolved only through /nawabari/bin and receives inherited stdio.", "Nawabari does not parse shell syntax or select a host/default shell."];
+}, {
+    readonly name: "session action";
+    readonly summary: "Dispatch one typed, currently authorized lifecycle action";
+    readonly usage: "nawabari session action --session <id> --action <action-id> --token <json> [--confirm --preview <json>] [--operation-id <id>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--action";
+        description: string;
+    } & {
+        readonly value: "<action-id>";
+        readonly required: true;
+        readonly values: readonly ["retain-session", "supply-exact-integrated-revision", "retry-close-with-bounded-integration-fetch", "discard-session", "reconcile-physical-state"];
+    }, {
+        name: "--token";
+        description: string;
+    } & {
+        readonly value: "<json>";
+        readonly required: true;
+    }, {
+        name: "--confirm";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--preview";
+        description: string;
+    } & {
+        readonly value: "<json>";
+    }, {
+        name: "--operation-id";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+    readonly notes: readonly ["The dispatcher re-reads canonical lifecycle and claim evidence immediately before dispatch; stale tokens fail closed.", "The action command field is descriptive metadata only and is never executed as a shell command.", "Destructive discard requires --confirm and the matching authoritative --preview."];
+}, {
+    readonly name: "ui";
+    readonly summary: "Open the read-only repository runtime UI";
+    readonly usage: "nawabari ui";
+    readonly options: readonly [];
+    readonly notes: readonly ["The UI reads one canonical repository runtime snapshot at startup and on refresh; it never mutates registry, Git, or filesystem state.", "Non-interactive callers receive one bounded projection and may combine this command with --json."];
+}, {
+    readonly name: "session coordination preview";
+    readonly summary: "Preview bounded coordination between two sessions";
+    readonly usage: string;
+    readonly options: readonly [{
+        name: "--left";
+        description: string;
+    } & {
+        readonly value: "<session-id>";
+        readonly required: true;
+    }, {
+        name: "--right";
+        description: string;
+    } & {
+        readonly value: "<session-id>";
+        readonly required: true;
+    }, {
+        name: "--path";
+        description: string;
+    } & {
+        readonly value: "<resource>";
+        readonly required: true;
+    }, {
+        name: "--patch";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--allow-read-path";
+        description: string;
+    } & {
+        readonly value: "<resource>";
+        readonly repeatable: true;
+    }, {
+        name: "--max-content-bytes";
+        description: string;
+    } & {
+        readonly value: "<n>";
+    }, {
+        name: "--max-diff-bytes";
+        description: string;
+    } & {
+        readonly value: "<n>";
+    }, {
+        name: "--max-diff-hunks";
+        description: string;
+    } & {
+        readonly value: "<n>";
+    }, {
+        name: "--max-retries";
+        description: string;
+    } & {
+        readonly value: "<n>";
+    }];
+    readonly notes: readonly ["Preview is read-only and metadata-only by default.", "--patch requires explicit bounded read authority for the requested path.", "Session identities are passed to the producer as session IDs; they are never Git revisions."];
+}, {
+    readonly name: "session handoff";
+    readonly summary: "Transfer one resource claim between active sessions";
+    readonly usage: string;
+    readonly options: readonly [{
+        name: "--from";
+        description: string;
+    } & {
+        readonly value: "<session-id>";
+        readonly required: true;
+    }, {
+        name: "--to";
+        description: string;
+    } & {
+        readonly value: "<session-id>";
+        readonly required: true;
+    }, {
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<exact-resource>";
+        readonly required: true;
+    }, {
+        name: "--mode";
+        description: string;
+    } & {
+        readonly value: "<read|write|exclusive-write>";
+        readonly required: true;
+        readonly values: readonly ["read", "write", "exclusive-write"];
+    }, {
+        name: "--if-generation";
+        description: string;
+    } & {
+        readonly value: "<claim-set-generation>";
+        readonly required: true;
+    }, {
+        name: "--operation-id";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+    readonly notes: readonly ["--from and --to are session identities and are never interpreted as Git revisions.", "A configured execution-control fence is required; absence fails closed before claim mutation."];
+}, {
+    readonly name: "session list";
+    readonly summary: "List bounded repository session records";
+    readonly usage: "nawabari session list [--all|--history] [--limit <n>] [--offset <n>]";
+    readonly options: readonly [{
+        name: "--all";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--history";
+        description: string;
+    } & {
+        readonly alias_of: "--all";
+    }, {
+        name: "--limit";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly default: string;
+        readonly minimum: 1;
+        readonly maximum: 128;
+    }, {
+        name: "--offset";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly default: "0";
+        readonly minimum: 0;
+    }];
+    readonly notes: readonly ["Default output excludes closed records; --all and --history include closed history. Both views are bounded by --limit (default 32, maximum 128) and --offset (default 0)."];
+}, {
+    readonly name: "session enter";
+    readonly summary: "Enter an active session through the protected runtime";
+    readonly usage: "nawabari session enter --session <id> [--runtime-policy <strict|compatibility>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--runtime-policy";
+        description: string;
+    } & {
+        readonly value: "<strict|compatibility>";
+        readonly values: readonly ["strict", "compatibility"];
+        readonly default: "strict";
+    }];
+}, {
+    readonly name: "session processes";
+    readonly summary: "List durable executions owned by a session";
+    readonly usage: "nawabari session processes --session <id>";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+}, {
+    readonly name: "session claim";
+    readonly aliases: readonly ["resource claim"];
+    readonly summary: "Add a canonical resource claim";
+    readonly usage: "nawabari session claim [<session-id>|--session <id>] [--repository <id>] --resource <path-or-glob> --mode <read|write|exclusive-write>";
+    readonly options: readonly [{
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path-or-glob>";
+        readonly required: true;
+    }, {
+        name: "--mode";
+        description: string;
+    } & {
+        readonly value: "<read|write|exclusive-write>";
+        readonly required: true;
+    }, {
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--repository";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+    readonly notes: readonly ["Exactly one --resource/--mode pair is required; --mode must immediately follow its own --resource.", "Target grammar: optional first positional <session-id> is an alias for --session <id>; do not supply both.", string];
+}, {
+    readonly name: "session update";
+    readonly aliases: readonly ["resource update"];
+    readonly summary: "Atomically replace a session's complete resource claim set";
+    readonly usage: "nawabari session update [<session-id>|--session <id>] [--repository <id>] --resource <path-or-glob> --mode <read|write|exclusive-write> [--resource <path-or-glob> --mode <read|write|exclusive-write> ...]";
+    readonly options: readonly [{
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path-or-glob>";
+        readonly required: true;
+        readonly repeatable: true;
+    }, {
+        name: "--mode";
+        description: string;
+    } & {
+        readonly value: "<read|write|exclusive-write>";
+        readonly required: true;
+        readonly repeatable: true;
+    }, {
+        name: "--if-generation";
+        description: string;
+    } & {
+        readonly value: "<non-negative-integer>";
+    }, {
+        name: "--force";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--repository";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+    readonly notes: readonly [string, "Each --resource must be immediately followed by its own --mode; pairing is positional adjacency, not flag order.", "Target grammar: optional first positional <session-id> is an alias for --session <id>; do not supply both."];
+}, {
+    readonly name: "session mutate";
+    readonly aliases: readonly ["resource mutate"];
+    readonly summary: "Atomically apply exact-resource claim additions, changes, and releases";
+    readonly usage: string;
+    readonly options: readonly [{
+        name: "--upsert-resource";
+        description: string;
+    } & {
+        readonly value: "<path-or-glob>";
+        readonly repeatable: true;
+    }, {
+        name: "--mode";
+        description: string;
+    } & {
+        readonly value: "<read|write|exclusive-write>";
+        readonly repeatable: true;
+    }, {
+        name: "--release-resource";
+        description: string;
+    } & {
+        readonly value: "<path-or-glob>";
+        readonly repeatable: true;
+    }, {
+        name: "--if-generation";
+        description: string;
+    } & {
+        readonly value: "<non-negative-safe-int>";
+    }, {
+        name: "--force";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--repository";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+    readonly notes: readonly ["Apply one or more ordered upsert/release deltas in one backend transaction; exactly one concurrency intent is required.", "Every --upsert-resource must be immediately followed by its own --mode; --release-resource takes exactly one value.", "Target grammar: optional first positional <session> is an alias for --session <id>; do not supply both."];
+}, {
+    readonly name: "session transition";
+    readonly aliases: readonly ["resource transition"];
+    readonly summary: "Atomically transition one exact resource claim mode";
+    readonly usage: string;
+    readonly options: readonly [{
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path-or-glob>";
+        readonly required: true;
+    }, {
+        name: "--mode";
+        description: string;
+    } & {
+        readonly value: "<read|write|exclusive-write>";
+        readonly required: true;
+    }, {
+        name: "--if-generation";
+        description: string;
+    } & {
+        readonly value: "<non-negative-safe-int>";
+    }, {
+        name: "--force";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--repository";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+    readonly notes: readonly ["Exactly one resource/mode pair is projected as one atomic upsert delta; same mode is an idempotent no-op.", "Use exactly one concurrency intent: --if-generation <non-negative-safe-int> or explicit --force.", "The target grammar accepts an optional first positional <session> or --session <id>, but not both."];
+}, {
+    readonly name: "session claims";
+    readonly aliases: readonly ["resource list", "resource claims"];
+    readonly summary: "List canonical resource claims";
+    readonly usage: "nawabari session claims [<session-id>|--session <id>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+    readonly notes: readonly ["Target grammar: optional first positional <session-id> is an alias for --session <id>; do not supply both."];
+}, {
+    readonly name: "session release";
+    readonly aliases: readonly ["resource release"];
+    readonly summary: "Release resource claims";
+    readonly usage: "nawabari session release [<session-id>|--session <id>] (--resource <path-or-glob> ... | --claim-id <id> ... | --all) (--if-generation <n> | --force)";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path-or-glob>";
+        readonly repeatable: true;
+    }, {
+        name: "--claim-id";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly repeatable: true;
+    }, {
+        name: "--all";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--if-generation";
+        description: string;
+    } & {
+        readonly value: "<non-negative-safe-int>";
+    }, {
+        name: "--force";
+        description: string;
+    } & CliHelpOptionSpec];
+    readonly notes: readonly ["Target grammar: optional first positional <session-id> is an alias for --session <id>; do not supply both.", "Exactly one selector family is required: repeated --resource, repeated --claim-id, or explicit --all.", "Exactly one destructive concurrency intent is required: --if-generation <non-negative-safe-int> or --force."];
+}, {
+    readonly name: "session close";
+    readonly summary: "Close the current or selected session";
+    readonly usage: "nawabari session close [<session-id>|--session <id>] [--integrated-revision <rev>] [--fetch-remote <name> --fetch-branch <branch>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--integrated-revision";
+        description: string;
+    } & {
+        readonly value: "<rev>";
+    }, {
+        name: "--fetch-remote";
+        description: string;
+    } & {
+        readonly value: "<name>";
+    }, {
+        name: "--fetch-branch";
+        description: string;
+    } & {
+        readonly value: "<branch>";
+    }];
+    readonly notes: readonly ["Ordinary ancestry-based close remains the cheap/default path and requires no flags.", "Network access is never implicit; --fetch-remote and --fetch-branch are accepted only with a full lowercase --integrated-revision SHA.", "Fetch updates only a disposable internal proof ref with no tags, FETCH_HEAD, tracking-ref, or local integration-branch changes; remote tip races fail closed.", "Nawabari never calls provider APIs such as GitHub; only explicit --fetch-remote/--fetch-branch options connect to the configured Git remote.", "Target grammar: optional first positional <session-id> is an alias for --session <id>; do not supply both."];
+}, {
+    readonly name: "session discard";
+    readonly summary: "Explicitly discard one selected session and its owned resources";
+    readonly usage: "nawabari session discard <session-id>|--session <id> [--preview]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--preview";
+        description: string;
+    } & CliHelpOptionSpec];
+    readonly notes: readonly ["Destructive and explicit: unintegrated commits and uncommitted work in the selected owned worktree may be destroyed.", "Discard never changes close, gc, doctor, reconciliation, or integration-lineage proof behavior.", "Use exactly one target form: positional <session-id> or --session <id>; do not supply both.", "Machine JSON mode is non-interactive and deterministic."];
+}, {
+    readonly name: "session file create";
+    readonly summary: "Create one claim-authorized worktree file";
+    readonly usage: "nawabari session file create --session <id> --operation-id <id> --path <path> --if-generation <n> --expect-absent --payload-file <path>|--payload-stdin";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--operation-id";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--path";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+    }, {
+        name: "--if-generation";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly required: true;
+    }, {
+        name: "--expect-absent";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--payload-file";
+        description: string;
+    } & {
+        readonly value: "<path>";
+    }, {
+        name: "--payload-stdin";
+        description: string;
+    } & CliHelpOptionSpec];
+}, {
+    readonly name: "session file delete";
+    readonly summary: "Delete one claim-authorized worktree file";
+    readonly usage: "nawabari session file delete --session <id> --operation-id <id> --path <path> --if-generation <n> (--expected-digest <sha256>|--expected-identity <json>)";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--operation-id";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--path";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+    }, {
+        name: "--if-generation";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly required: true;
+    }, {
+        name: "--expected-digest";
+        description: string;
+    } & {
+        readonly value: "<sha256>";
+    }, {
+        name: "--expected-identity";
+        description: string;
+    } & {
+        readonly value: "<json>";
+    }];
+}, {
+    readonly name: "session file rename";
+    readonly summary: "Rename one claim-authorized worktree file";
+    readonly usage: "nawabari session file rename --session <id> --operation-id <id> --path <path> --to-path <path> --if-generation <n> (--expected-digest <sha256>|--expected-identity <json>)";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--operation-id";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--path";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+    }, {
+        name: "--to-path";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+    }, {
+        name: "--if-generation";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly required: true;
+    }, {
+        name: "--expected-digest";
+        description: string;
+    } & {
+        readonly value: "<sha256>";
+    }, {
+        name: "--expected-identity";
+        description: string;
+    } & {
+        readonly value: "<json>";
+    }];
+}, {
+    readonly name: "authorize";
+    readonly summary: "Authorize an operation against concrete claims";
+    readonly usage: "nawabari authorize --operation <name> --resource <path> [--resource <path>] [--session <id>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--operation";
+        description: string;
+    } & {
+        readonly value: "<name>";
+        readonly required: true;
+        readonly values: readonly ("push" | "source-write" | "stage" | "commit" | "branch-mutation" | "cleanup")[];
+    }, {
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+        readonly repeatable: true;
+    }];
+    readonly notes: readonly ["Read-only claim decision: checks the canonical operation policy and concrete resource claims; it does not grant, persist, or mutate claims.", "Use guard to verify current worktree/session ownership without an operation; use authorize for the canonical claim-aware operation decision. guard --operation is a compatibility convenience for the combined check."];
+}, {
+    readonly name: "checkpoint";
+    readonly summary: "Capture bounded Git execution evidence";
+    readonly usage: "nawabari checkpoint [--session <id>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }];
+}, {
+    readonly name: "evidence snapshot";
+    readonly summary: "Capture bounded read-only evidence for one owned session";
+    readonly usage: "nawabari evidence snapshot --session <id>";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }];
+    readonly notes: readonly ["The result is Git-observable physical evidence only; it contains no task or semantic interpretation."];
+}, {
+    readonly name: "diff";
+    readonly summary: "Inspect bounded Git evidence for explicit paths";
+    readonly usage: "nawabari diff --session <id> --path <path> [options]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+        readonly required: true;
+    }, {
+        name: "--path";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+        readonly repeatable: true;
+    }, {
+        name: "--from";
+        description: string;
+    } & {
+        readonly value: "<ref>";
+        readonly default: "HEAD";
+    }, {
+        name: "--to";
+        description: string;
+    } & {
+        readonly value: "<ref>";
+    }, {
+        name: "--patch";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--max-bytes";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly default: string;
+        readonly minimum: 1;
+        readonly maximum: number;
+    }, {
+        name: "--max-hunks";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly default: string;
+        readonly minimum: 1;
+        readonly maximum: 128;
+    }];
+}, {
+    readonly name: "commit";
+    readonly summary: "Commit explicit claim-authorized resources";
+    readonly usage: "nawabari commit --message <final-message> (--resource <path> [--resource <path>] | --all-claimed) [--session <id>] [--message-pattern <regex>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--message";
+        description: string;
+    } & {
+        readonly value: "<final-message>";
+        readonly required: true;
+    }, {
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+        readonly repeatable: true;
+        readonly required_unless: readonly ["--all-claimed"];
+    }, {
+        name: "--all-claimed";
+        description: string;
+    } & {
+        readonly mutually_exclusive_with: readonly ["--resource"];
+    }, {
+        name: "--message-pattern";
+        description: string;
+    } & {
+        readonly value: "<regex>";
+    }];
+    readonly notes: readonly ["Use repeated --resource by default, or explicitly use --all-claimed; the selectors cannot be combined.", "--all-claimed resolves only concrete Git-changed resources and retains unexpected changed-path protection."];
+}, {
+    readonly name: "push";
+    readonly summary: "Push the owned branch to an explicit target";
+    readonly usage: "nawabari push --remote <name> --branch <name> (--resource <path> [--resource <path>] | --all-claimed) [options]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path>";
+        readonly required: true;
+        readonly repeatable: true;
+        readonly required_unless: readonly ["--all-claimed"];
+    }, {
+        name: "--all-claimed";
+        description: string;
+    } & {
+        readonly mutually_exclusive_with: readonly ["--resource"];
+    }, {
+        name: "--remote";
+        description: string;
+    } & {
+        readonly value: "<name>";
+        readonly required: true;
+    }, {
+        name: "--branch";
+        description: string;
+    } & {
+        readonly value: "<name>";
+        readonly required: true;
+        readonly aliases: readonly ["--remote-branch"];
+    }, {
+        name: "--remote-branch";
+        description: string;
+    } & {
+        readonly value: "<name>";
+        readonly alias_of: "--branch";
+    }, {
+        name: "--force";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--create-upstream";
+        description: string;
+    } & CliHelpOptionSpec];
+}, {
+    readonly name: "status";
+    readonly summary: "Show repository context and bounded session status";
+    readonly usage: "nawabari status [--all|--history] [--limit <n>] [--offset <n>]";
+    readonly options: readonly [{
+        name: "--all";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--history";
+        description: string;
+    } & {
+        readonly alias_of: "--all";
+    }, {
+        name: "--limit";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly default: string;
+        readonly minimum: 1;
+        readonly maximum: 128;
+    }, {
+        name: "--offset";
+        description: string;
+    } & {
+        readonly value: "<n>";
+        readonly default: "0";
+        readonly minimum: 0;
+    }];
+    readonly notes: readonly ["The default machine result exposes managed_worktree_root for session-create path discovery. Session rows are bounded by --limit (default 32, maximum 128) and --offset (default 0); --all and --history include closed history."];
+}, {
+    readonly name: "guard";
+    readonly summary: "Verify current worktree/session ownership";
+    readonly usage: "nawabari guard [--session <id>] [--operation <name> --resource <path>]";
+    readonly options: readonly [{
+        name: "--session";
+        description: string;
+    } & {
+        readonly value: "<id>";
+    }, {
+        name: "--operation";
+        description: string;
+    } & {
+        readonly value: "<name>";
+        readonly values: readonly ("push" | "source-write" | "stage" | "commit" | "branch-mutation" | "cleanup")[];
+    }, {
+        name: "--resource";
+        description: string;
+    } & {
+        readonly value: "<path>";
+    }];
+    readonly notes: readonly ["Without --operation, verifies the current worktree, branch, and session ownership/context only; it does not evaluate resource claims.", "With --operation and --resource, performs the combined claim-aware authorization check for compatibility. Use authorize when the operation decision is the intended boundary."];
+}, {
+    readonly name: "gc";
+    readonly summary: "Detect or clean eligible stale sessions";
+    readonly usage: "nawabari gc [--dry-run|--apply]";
+    readonly options: readonly [{
+        name: "--apply";
+        description: string;
+    } & CliHelpOptionSpec, {
+        name: "--dry-run";
+        description: string;
+    } & CliHelpOptionSpec];
+    readonly notes: readonly ["Default stale threshold is 24 hours (86,400,000 ms). Elapsed age is diagnostic suspicion only; destructive eligibility requires explicit stale/closing state or a safely prunable missing worktree. Closed history is not a candidate."];
+}, {
+    readonly name: "doctor";
+    readonly summary: "Check local Nawabari prerequisites and reconciliation";
+    readonly usage: "nawabari doctor [--summary]";
+    readonly options: readonly [{
+        name: "--summary";
+        description: string;
+    } & CliHelpOptionSpec];
+    readonly notes: readonly ["The default report retains the complete machine-readable check details. --summary omits healthy and closed history rows while retaining all actionable reconciliation issues."];
+}, {
+    readonly name: "migrate";
+    readonly summary: "Migrate legacy resource-claim registry state";
+    readonly usage: "nawabari migrate";
+    readonly options: readonly [];
+    readonly notes: readonly ["Explicitly upgrades claim-schema-v1 (and pre-claim registries) to the current schema under the registry lock.", "Migration is atomic, idempotent, and fail-closed; do not edit or delete the registry manually."];
+}, {
+    readonly name: "capabilities";
+    readonly summary: "Describe the standalone CLI/JSON contract";
+    readonly usage: "nawabari capabilities";
+    readonly options: readonly [];
+}];
+/** Stable canonical command identity, derived from the registry itself. */
+export type CommandId = (typeof REGISTRY_DATA)[number]["name"];
+type RegistryOption = (typeof REGISTRY_DATA)[number]["options"][number];
+type GlobalRegistryOption = (typeof GLOBAL_HELP_OPTIONS)[number];
+/** Extracts an option's declared `aliases` literals, or `never` when absent. */
+type OptionAliasIds<Option> = Option extends {
+    readonly aliases: infer Aliases;
+} ? Aliases extends readonly string[] ? Aliases[number] : never : never;
+/**
+ * Stable canonical option identity across every command, derived from the
+ * registry itself: every option's own flag plus every declared alias.
  */
+export type OptionId = RegistryOption["name"] | OptionAliasIds<RegistryOption> | GlobalRegistryOption["name"] | OptionAliasIds<GlobalRegistryOption>;
 export declare const CLI_COMMAND_REGISTRY: readonly CliCommandDefinition[];
 export declare const ROOT_HELP_SPEC: CliCommandDefinition;
 /** Resolve a public name through the one canonical registry. */
@@ -42,9 +1141,10 @@ export declare function canonicalCommandForName(name: string): CliCommandDefinit
  * usage, options, and parser notes.
  */
 export declare function publicCliCommandDefinitions(): readonly CliCommandDefinition[];
-/** Stable alias for consumers such as the future dispatcher parity layer. */
+/** Stable alias kept for existing external consumers of the registry. */
 export declare const COMMAND_REGISTRY: readonly CliCommandDefinition[];
 /** Resolve either a canonical command or one of its public aliases. */
 export declare function resolveCliCommandDefinition(name: string): CliCommandDefinition | undefined;
 /** Return the complete public discovery name list in registry order. */
 export declare function publicCliCommandNames(): readonly string[];
+export {};