orizu 0.5.20 → 0.5.21

package/dist/github-setup.d.ts

@@ -0,0 +1,122 @@
+/**
+ * GitHub link + hosted-repo attach for `orizu setup` (ALI-971 / WS-C + WS-D).
+ *
+ * Pure logic + injected HTTP/git/io so index.ts stays thin and the flows are
+ * unit-testable without a real browser, server, or git. Two responsibilities:
+ *
+ *   1. `runGithubLink` — the REQUIRED team-setup link step: POST the link route,
+ *      open/print the App-install URL, then poll until the org is connected
+ *      (with a timeout + resume guidance).
+ *   2. `runHostedAttach` — clone the provisioned workbench repo and wire the
+ *      repo-local git credential helper so future pull/push flow through the
+ *      Orizu broker. Never stores a long-lived credential: the clone uses a
+ *      one-shot brokered token embedded only in the transient clone URL, which
+ *      is immediately rewritten to a clean origin.
+ */
+export type SetupFetcher = (path: string, init?: RequestInit) => Promise<Response>;
+export interface GithubLinkIo {
+    print: (line: string) => void;
+    fetcher?: SetupFetcher;
+    openUrl?: (url: string) => void;
+    sleep?: (ms: number) => Promise<void>;
+    now?: () => number;
+    pollIntervalMs?: number;
+    pollTimeoutMs?: number;
+    /**
+     * Second-factor confirmation of the bound org (confused-deputy defense). The
+     * callback binds the installation but parks it in `pending_confirmation`; this
+     * asks the human to confirm the org they were shown before it becomes active.
+     */
+    confirm?: (orgLogin: string | null) => Promise<boolean>;
+}
+export interface GithubLinkResult {
+    status: 'active';
+    orgLogin: string | null;
+    alreadyLinked: boolean;
+}
+/**
+ * Begin (or resume) the required GitHub link for a team and block until the
+ * customer org is connected. Throws with resume guidance on timeout.
+ */
+export declare function runGithubLink(teamSlug: string, io: GithubLinkIo): Promise<GithubLinkResult>;
+export type SetupMode = 'local' | 'attach' | 'provision-then-attach';
+/**
+ * Decide how `orizu setup` should materialize the workspace. `--local` (or the
+ * absence of a linked org) keeps Phase 1 scaffolding; a linked org with a
+ * provisioned repo attaches by clone; a linked org without a repo provisions
+ * first, then attaches.
+ */
+export declare function decideSetupMode(input: {
+    local: boolean;
+    activeInstallation: boolean;
+    repoFullName: string | null;
+}): SetupMode;
+export interface GitRunResult {
+    status: number;
+    stderr?: string;
+}
+export interface GitRunOpts {
+    cwd?: string;
+    env?: Record<string, string>;
+}
+export type GitRunner = (args: string[], opts?: GitRunOpts) => GitRunResult;
+export interface HostedAttachIo {
+    print: (line: string) => void;
+    fetcher?: SetupFetcher;
+    git: GitRunner;
+    /** Overridable for tests; defaults to creating `.orizu/` on disk. */
+    ensureOrizuDir?: (repoDir: string) => void;
+    /** True when `targetDir` already holds the cloned workbench repo (an
+     *  idempotent `orizu setup` re-run). Overridable for tests; defaults to a
+     *  `.git` presence check. */
+    repoAlreadyCloned?: (targetDir: string) => boolean;
+}
+export interface HostedAttachOptions {
+    workspaceId: string;
+    repoFullName: string | null;
+    targetDir: string;
+}
+export interface HostedAttachResult {
+    repoFullName: string;
+    provisioned: boolean;
+    targetDir: string;
+}
+/**
+ * Provision-if-needed, then clone with the Orizu credential helper already
+ * configured so the brokered token NEVER touches argv, the clone URL, or
+ * .git/config. The helper resolves the workspace during clone via the
+ * `ORIZU_WORKSPACE_ID` env var (the working tree — and orizu.team.json — does
+ * not exist yet), then mints on demand. Repo-local config persists the helper
+ * for subsequent pull/push, which resolve the workspace from cwd.
+ */
+export declare function runHostedAttach(options: HostedAttachOptions, io: HostedAttachIo): Promise<HostedAttachResult>;
+export interface InteractiveHostedSetupInput {
+    teamSlug: string;
+    targetDir: string;
+    /** The `--local` flag: forces Phase-1 scaffolding regardless of linkage. */
+    local: boolean;
+    /** True once the required github-link step has connected an active org. */
+    activeInstallation: boolean;
+}
+export interface InteractiveHostedSetupIo {
+    print: (line: string) => void;
+    fetcher?: SetupFetcher;
+    git?: GitRunner;
+    ensureOrizuDir?: (repoDir: string) => void;
+}
+export interface InteractiveHostedSetupResult {
+    mode: SetupMode;
+    /** True when the hosted repo was cloned; false means the caller scaffolds locally. */
+    attached: boolean;
+    repoFullName: string | null;
+}
+/**
+ * Bridge the required github-link step to the hosted attach. Create-or-attaches
+ * the server workspace (whose response now surfaces repoProvider/repoFullName —
+ * ALI-972), then routes through the already-tested `decideSetupMode`:
+ *   - `local`                 → returns `attached: false`; the caller scaffolds.
+ *   - `attach` / `provision-then-attach` → clones (provisioning first if needed)
+ *     via `runHostedAttach` and returns `attached: true`.
+ */
+export declare function runInteractiveHostedSetup(input: InteractiveHostedSetupInput, io: InteractiveHostedSetupIo): Promise<InteractiveHostedSetupResult>;
+//# sourceMappingURL=github-setup.d.ts.map

package/dist/github-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-setup.d.ts","sourceRoot":"","sources":["../src/github-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAElF,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACxD;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,QAAQ,CAAA;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,aAAa,EAAE,OAAO,CAAA;CACvB;AAiDD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkGjG;AA0CD,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,uBAAuB,CAAA;AAEpE;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,kBAAkB,EAAE,OAAO,CAAA;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B,GAAG,SAAS,CAGZ;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC7B;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,UAAU,KAAK,YAAY,CAAA;AAE3E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,GAAG,EAAE,SAAS,CAAA;IACd,qEAAqE;IACrE,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC1C;;iCAE6B;IAC7B,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAA;CACnD;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,OAAO,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAWD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,EAC5B,EAAE,EAAE,cAAc,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAmG7B;AAeD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAA;IACd,2EAA2E;IAC3E,kBAAkB,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAC3C;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,SAAS,CAAA;IACf,sFAAsF;IACtF,QAAQ,EAAE,OAAO,CAAA;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,2BAA2B,EAClC,EAAE,EAAE,wBAAwB,GAC3B,OAAO,CAAC,4BAA4B,CAAC,CA2CvC"}

package/dist/global-flags.d.ts

@@ -0,0 +1,12 @@
+export interface GlobalFlags {
+    local: boolean;
+    server: string | null;
+}
+export interface ParsedGlobalFlags {
+    flags: GlobalFlags;
+    args: string[];
+}
+export declare function normalizeBaseUrl(url: string): string;
+export declare function parseGlobalFlags(argv: string[]): ParsedGlobalFlags;
+export declare function getFlagBaseUrl(flags: GlobalFlags): string | null;
+//# sourceMappingURL=global-flags.d.ts.map

package/dist/global-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-flags.d.ts","sourceRoot":"","sources":["../src/global-flags.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,MAAM,EAAE,CAAA;CACf;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAqBpD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAiClE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAUhE"}

package/dist/help.d.ts

@@ -0,0 +1,46 @@
+export interface CliOptionDoc {
+    name: string;
+    help: string;
+    required?: boolean;
+    repeatable?: boolean;
+    choices?: string[];
+}
+export interface CliCommandDoc {
+    path: string[];
+    usage: string;
+    summary: string;
+    group: string;
+    aliases?: string[][];
+    options?: CliOptionDoc[];
+    examples?: string[];
+}
+export declare const COMMAND_DOCS: CliCommandDoc[];
+export declare function findCommandDoc(args: string[]): CliCommandDoc | undefined;
+export declare function commandDocsWithPrefix(args: string[]): CliCommandDoc[];
+export declare function renderRootHelp(): string;
+export declare function renderGroupHelp(args: string[]): string;
+export declare function renderCommandHelp(doc: CliCommandDoc): string;
+export declare function renderHelpForArgs(args: string[]): string;
+export declare function getCapabilities(version: string): {
+    name: string;
+    version: string;
+    globalOptions: {
+        name: string;
+        help: string;
+    }[];
+    commands: {
+        name: string;
+        usage: string;
+        help: string;
+        group: string;
+        aliases: string[];
+        params: {
+            name: string;
+            help: string;
+            required: boolean;
+            repeatable: boolean;
+            choices: string[] | undefined;
+        }[];
+    }[];
+};
+//# sourceMappingURL=help.d.ts.map

package/dist/help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;IACpB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAoCD,eAAO,MAAM,YAAY,EAAE,aAAa,EAumCvC,CAAA;AAUD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,GAAG,SAAS,CAMxE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAWrE;AAOD,wBAAgB,cAAc,IAAI,MAAM,CA0CvC;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAoBtD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CA4B5D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAgBxD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;EAoB9C"}

package/dist/help.js

@@ -11,6 +11,7 @@ const GROUPS = [
     { name: 'Teams', summary: 'Manage teams and team memberships.' },
     { name: 'Projects', summary: 'Manage projects inside teams.' },
     { name: 'Prompts and judges', summary: 'Work with versioned prompt and judge artifacts.' },
+    { name: 'Instruction sets', summary: 'Inspect the project-scoped instruction-set control plane.' },
     { name: 'Report comments', summary: 'Review and mutate anchored report comments across prompt, optimization, and task reports.' },
     { name: 'Diff comments', summary: 'Export inline comments with recoverable prompt-diff context.' },
     { name: 'Scorers and runners', summary: 'Register scorers, push runnable artifacts, execute runners, and submit scores.' },
@@ -25,6 +26,44 @@ const GROUPS = [
     { name: 'Promotion manifests', summary: 'List, inspect, approve, reject, and idempotently apply promotion manifests.' },
 ];
 export const COMMAND_DOCS = [
+    { path: ['instructions', 'create'], aliases: [['instruction-sets', 'create']], usage: 'orizu instructions create <manifest> --project <team/project> [--runner-version <id>] [--model-config <identity>] [--json]', summary: 'Create an instruction set from a local manifest.', group: 'Instruction sets', options: [{ name: '--runner-version <id>', help: 'Pin the runner version for component prompt versions.' }, { name: '--model-config <identity>', help: 'Select the default model configuration.' }, { name: '--json', help: 'Print one JSON document.' }], examples: ['orizu instructions create ./orizu.instruction-set.json --project core/evals --model-config anthropic/claude-haiku'] },
+    { path: ['instructions', 'push'], aliases: [['instruction-sets', 'push']], usage: 'orizu instructions push <manifest> --project <team/project> [--set <slug-or-exact-name>] [--runner-version <id>] [--json]', summary: 'Push a new instruction-set profile version.', group: 'Instruction sets', options: [{ name: '--set <slug-or-exact-name>', help: 'Target the stable set handle when it differs from the manifest name.' }, { name: '--runner-version <id>', help: 'Pin the runner version for changed component prompt versions.' }, { name: '--json', help: 'Print one JSON document.' }], examples: ['orizu instructions push ./orizu.instruction-set.json --project core/evals --set planner'] },
+    {
+        path: ['instructions', 'list'],
+        aliases: [['instruction-sets', 'list']],
+        usage: 'orizu instructions list [--project <team/project>] [--status active|archived|all] [--json]',
+        summary: 'List instruction sets in a project.',
+        group: 'Instruction sets',
+        options: [{ name: '--project <team/project>', help: 'Project slug (defaults to configured context).' }, { name: '--status <active|archived|all>', help: 'Filter archived instruction sets.' }, { name: '--json', help: 'Print JSON.' }],
+        examples: ['orizu instructions list --project core/evals', 'orizu instructions list --status archived --json'],
+    },
+    {
+        path: ['instructions', 'show'],
+        aliases: [['instruction-sets', 'show']],
+        usage: 'orizu instructions show <set> [--project <team/project>] [--status active|archived|all] [--json]',
+        summary: 'Show an instruction set shape, default, and profile production state.',
+        group: 'Instruction sets',
+        options: [{ name: '--project <team/project>', help: 'Project slug (defaults to configured context).' }, { name: '--status <active|archived|all>', help: 'Filter archived instruction sets.' }, { name: '--json', help: 'Print JSON.' }],
+        examples: ['orizu instructions show research --project core/evals', 'orizu instructions show research --json'],
+    },
+    { path: ['instructions', 'profiles', 'new'], aliases: [['instruction-sets', 'profiles', 'new']], usage: 'orizu instructions profiles new <set> --project <team/project> --model-config <identity> [--json]', summary: 'Create a model-config profile seeded from the instruction-set default.', group: 'Instruction sets', options: [{ name: '--model-config <identity>', help: 'Model config identity for the new profile.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions profiles new planner --project core/evals --model-config anthropic/claude-haiku'] },
+    { path: ['instructions', 'profiles', 'promote'], aliases: [['instruction-sets', 'profiles', 'promote']], usage: 'orizu instructions profiles promote <set> --project <team/project> --model-config <identity> --version <n> [--json]', summary: 'Move one profile version to production.', group: 'Instruction sets', options: [{ name: '--model-config <identity>', help: 'Profile model config.', required: true }, { name: '--version <n>', help: 'Profile version to promote.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions profiles promote planner --project core/evals --model-config anthropic/claude-haiku --version 2'] },
+    { path: ['instructions', 'profiles', 'rollback'], aliases: [['instruction-sets', 'profiles', 'rollback']], usage: 'orizu instructions profiles rollback <set> --project <team/project> --model-config <identity> --to <n> [--json]', summary: 'Create a rollback version and move profile production to it.', group: 'Instruction sets', options: [{ name: '--model-config <identity>', help: 'Profile model config.', required: true }, { name: '--to <n>', help: 'Historical profile version to copy.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions profiles rollback planner --project core/evals --model-config anthropic/claude-haiku --to 1'] },
+    { path: ['instructions', 'default', 'show'], aliases: [['instruction-sets', 'default', 'show']], usage: 'orizu instructions default show <set> --project <team/project> [--json]', summary: 'Show the instruction-set default and its resolution impact.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions default show planner --project core/evals'] },
+    { path: ['instructions', 'default', 'move'], aliases: [['instruction-sets', 'default', 'move']], usage: 'orizu instructions default move <set> --project <team/project> --model-config <identity> --version <n> [--json]', summary: 'Move the instruction-set default to a profile version.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--model-config <identity>', help: 'Target model config.', required: true }, { name: '--version <n>', help: 'Target profile version.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions default move planner --project core/evals --model-config anthropic/claude-haiku --version 2'] },
+    { path: ['instructions', 'shape', 'add'], aliases: [['instruction-sets', 'shape', 'add']], usage: 'orizu instructions shape add <set> --project <team/project> --key <key> --from <manifest> [--json]', summary: 'Add one component key to every instruction-set profile.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--key <key>', help: 'Component key to add.', required: true }, { name: '--from <manifest>', help: 'Manifest containing the component body.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions shape add planner --project core/evals --key skill --from planner.json'] },
+    { path: ['instructions', 'shape', 'remove'], aliases: [['instruction-sets', 'shape', 'remove']], usage: 'orizu instructions shape remove <set> --project <team/project> --key <key> [--json]', summary: 'Remove one component key from every instruction-set profile.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--key <key>', help: 'Component key to remove.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions shape remove planner --project core/evals --key skill'] },
+    {
+        path: ['instructions', 'sync'],
+        aliases: [['instruction-sets', 'sync']],
+        usage: 'orizu instructions sync <set> --out <dir> [--model-config <identity>] [--project <team/project>] [--json]',
+        summary: 'Write an instruction set for offline runner loading.',
+        group: 'Instruction sets',
+        options: [{ name: '--out <dir>', help: 'Destination parent directory.', required: true }, { name: '--model-config <identity>', help: 'Sync only one profile plus default.' }, { name: '--project <team/project>', help: 'Project slug.' }, { name: '--json', help: 'Print source transport JSON.' }],
+        examples: ['orizu instructions sync planner --out ./instructions --project core/evals'],
+    },
+    { path: ['instructions', 'archive'], aliases: [['instruction-sets', 'archive']], usage: 'orizu instructions archive <slug-or-exact-name> --project <team/project> [--json]', summary: 'Archive an instruction set without changing resolution or sync.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions archive planner --project core/evals'] },
+    { path: ['instructions', 'restore'], aliases: [['instruction-sets', 'restore']], usage: 'orizu instructions restore <slug-or-exact-name> --project <team/project> [--json]', summary: 'Restore an archived instruction set.', group: 'Instruction sets', options: [{ name: '--project <team/project>', help: 'Project slug.', required: true }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu instructions restore planner --project core/evals'] },
     {
         path: ['login'],
         usage: 'orizu login [--no-prompt-if-logged-in]',
@@ -317,30 +356,12 @@ export const COMMAND_DOCS = [
         summary: 'List prompt artifacts in a project.',
         group: 'Prompts and judges',
     },
-    {
-        path: ['prompts', 'archive'],
-        usage: 'orizu prompts archive <prompt-id-or-name> --project <team/project> [--json]',
-        summary: 'Mark a prompt artifact as archived.',
-        group: 'Prompts and judges',
-    },
-    {
-        path: ['prompts', 'restore'],
-        usage: 'orizu prompts restore <prompt-id-or-name> --project <team/project> [--json]',
-        summary: 'Restore an archived prompt artifact to active status.',
-        group: 'Prompts and judges',
-    },
     {
         path: ['prompts', 'pull'],
         usage: 'orizu prompts pull <prompt-id-or-name> --project <team/project> --out <dir> [--label <label> | --version <id>] [--json]',
         summary: 'Pull a prompt artifact version to a local directory.',
         group: 'Prompts and judges',
     },
-    {
-        path: ['prompts', 'push'],
-        usage: 'orizu prompts push <dir> [--runner-version <id>] [--project <team/project>] [--parent <version-id>] [--session <session-id>] [--report-file <path>] [--json]',
-        summary: 'Push a local prompt artifact directory as a new version (with --session: a commit-first git draft).',
-        group: 'Prompts and judges',
-    },
     {
         path: ['prompts', 'report', 'set'],
         usage: 'orizu prompts report set --prompt <id-or-name> [--project <team/project>] (--version <n> | --version-id <id>) (--report <markdown|@file> | --report-file <path>) [--json]',
@@ -364,7 +385,7 @@ export const COMMAND_DOCS = [
     {
         path: ['prompts', 'labels', 'set'],
         usage: 'orizu prompts labels set <prompt-name> <label> --version <version-id> [--project <team/project>] [--json]',
-        summary: 'Move or set a prompt label to a version.',
+        summary: 'Move or set a non-production prompt label; use instructions profiles promote for production.',
         group: 'Prompts and judges',
     },
     {
@@ -439,6 +460,12 @@ export const COMMAND_DOCS = [
         summary: 'Execute a scorer locally for a prompt version or optimization candidate.',
         group: 'Scorers and runners',
     },
+    {
+        path: ['scorers', 'verify-parity'],
+        usage: 'orizu scorers verify-parity --scorer-version <id> --dataset-version <id> --split-set <id> [--split <name>] --outputs <outputs.jsonl> --original <module:function> [--scorer-input-contract gepa|flat_row] [--scorer-candidate-field <row-field>] [--runner-dir <dir>] [--python <cmd>] [--tolerance <float>] [--limit <n>] [--json]',
+        summary: 'Prove a migrated scorer runner scores rows the same as the original Python metric.',
+        group: 'Scorers and runners',
+    },
     {
         path: ['scores', 'submit'],
         usage: 'orizu scores submit <results.jsonl|results.json> --scorer-version <id> (--subject-version <prompt-version-id> | --optimization-run <id> --candidate <id>) [--aggregate] [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]',
@@ -511,6 +538,7 @@ export const COMMAND_DOCS = [
         summary: 'List optimization runs with explicit archive visibility.',
         group: 'Optimizations',
     },
+    { path: ['optimizations', 'promote'], usage: 'orizu optimizations promote <run-id> --candidate <id> [--label production] [--project <team/project>] [--json]', summary: 'Promote a selected optimization candidate.', group: 'Optimizations', options: [{ name: '--candidate <id>', help: 'Candidate to promote.', required: true }, { name: '--label production', help: 'Move the new tuple profile version to production.' }, { name: '--project <team/project>', help: 'Project slug (defaults to configured context).' }, { name: '--json', help: 'Print JSON.' }], examples: ['orizu optimizations promote <run-id> --candidate candidate-2 --label production'] },
     {
         path: ['optimizations', 'archive'],
         usage: 'orizu optimizations archive <run-id> [--project <team/project>] [--json]',
@@ -525,8 +553,8 @@ export const COMMAND_DOCS = [
     },
     {
         path: ['optimizations', 'run-gepa'],
-        usage: 'orizu optimizations run-gepa --project <team/project> --optimizer-version-id <id> --candidate-version-id <id> --runner-version-id <id> --candidate-runner-dir <dir> --scorer-version-id <id> --scorer-runner-version-id <id> --scorer-runner-dir <dir> [--engine official|legacy] [--scorer-input-contract gepa|flat_row] [--scorer-candidate-field <row-field>] [--allow-degenerate-seed] --dataset-version-id <id> --split-set-id <id> [--train-split train] [--val-split validation] [--budget auto|light|medium|heavy | --max-metric-calls <n> | --max-full-evals <n> | --max-iterations <n> | --max-candidate-proposals <n>] [--num-threads auto|N] [--reflection-retry-attempts N] [--reflection-http-timeout-seconds N] [--log-dir logs]',
-        summary: 'Run official GEPA locally and stream events; pass --engine legacy only for the frozen safety hatch. --max-candidate-proposals is official-engine-only. Validates the scorer contract on the seed before iterating; judge runners built for flat-row score runs need --scorer-input-contract flat_row (ALI-1158).',
+        usage: 'orizu optimizations run-gepa --project <team/project> --optimizer-version-id <id> (--candidate-version-id <id> | --instruction-set <name> --model-config <identity> [--component-selector round-robin|all]) --runner-version-id <id> --candidate-runner-dir <dir> --scorer-version-id <id> --scorer-runner-version-id <id> --scorer-runner-dir <dir> [--engine official|legacy] [--scorer-input-contract gepa|flat_row] [--scorer-candidate-field <row-field>] [--allow-degenerate-seed] --dataset-version-id <id> --split-set-id <id> [--train-split train] [--val-split validation] [--budget auto|light|medium|heavy | --max-metric-calls <n> | --max-full-evals <n> | --max-iterations <n> | --max-candidate-proposals <n>] [--num-threads auto|N] [--reflection-retry-attempts N] [--reflection-http-timeout-seconds N] [--log-dir logs]',
+        summary: 'Run official GEPA locally and stream events; pass --engine legacy only for the frozen safety hatch. --instruction-set requires --model-config and cannot be combined with --candidate-version-id; round-robin updates one component-map entry per round and all updates every component. --max-candidate-proposals is official-engine-only. Validates the scorer contract on the seed before iterating; judge runners built for flat-row score runs need --scorer-input-contract flat_row (ALI-1158).',
         group: 'Optimizations',
     },
     {
@@ -1029,6 +1057,46 @@ export const COMMAND_DOCS = [
         ],
         examples: ['orizu connectors', 'orizu connectors status --project highlight/hip --json'],
     },
+    {
+        path: ['model-configs', 'create'],
+        usage: 'orizu model-configs create <provider/model> [--settings <json|@file>] [--name <name>] [--project <team/project>] [--json]',
+        summary: 'Create a provider-qualified model config with its first settings version.',
+        group: 'Model configs',
+        options: [{ name: '--settings <json|@file>', help: 'Optional JSON settings object or a JSON file; defaults to {}.' }, { name: '--name <name>', help: 'Optional display name.' }, { name: '--project <team/project>', help: 'Project that owns the config.' }, { name: '--json', help: 'Emit the machine-readable model config.' }],
+        examples: ['orizu model-configs create azure/gpt-5.4-mini --settings @settings.json'],
+    },
+    {
+        path: ['model-configs', 'list'],
+        usage: 'orizu model-configs list [--project <team/project>] [--json]',
+        summary: 'List model configs for a project.',
+        group: 'Model configs',
+        options: [{ name: '--project <team/project>', help: 'Project whose configs to list.' }, { name: '--json', help: 'Emit machine-readable model configs.' }],
+        examples: ['orizu model-configs list --project core/evals --json'],
+    },
+    {
+        path: ['model-configs', 'show'],
+        usage: 'orizu model-configs show <provider/model> [--project <team/project>] [--json]',
+        summary: 'Show a model config and its current settings version.',
+        group: 'Model configs',
+        options: [{ name: '--project <team/project>', help: 'Project that owns the config.' }, { name: '--json', help: 'Emit the machine-readable model config.' }],
+        examples: ['orizu model-configs show openai/gpt-5.4-mini'],
+    },
+    {
+        path: ['model-configs', 'settings', 'set'],
+        usage: 'orizu model-configs settings set <provider/model> --settings <json|@file> [--project <team/project>] [--json]',
+        summary: 'Add a settings version and advance the config current pointer.',
+        group: 'Model configs',
+        options: [{ name: '--settings <json|@file>', help: 'JSON settings object or a JSON file.', required: true }, { name: '--project <team/project>', help: 'Project that owns the config.' }, { name: '--json', help: 'Emit the machine-readable model config.' }],
+        examples: ["orizu model-configs settings set openai/gpt-5.4-mini --settings '{\"temperature\":0.2}'"],
+    },
+    {
+        path: ['model-configs', 'copy'],
+        usage: 'orizu model-configs copy <provider/model> --to <provider/model> [--project <team/project>] [--json]',
+        summary: 'Copy the current settings snapshot to a new provider-qualified config.',
+        group: 'Model configs',
+        options: [{ name: '--to <provider/model>', help: 'New provider-qualified config identity.', required: true }, { name: '--project <team/project>', help: 'Project that owns the config.' }, { name: '--json', help: 'Emit the machine-readable model config.' }],
+        examples: ['orizu model-configs copy openai/gpt-5.4-mini --to azure/gpt-5.4-mini'],
+    },
     {
         path: ['manifests', 'list'],
         usage: 'orizu manifests list [--project <team/project>] [--status <status>] [--json]',
@@ -1097,8 +1165,8 @@ export function commandDocsWithPrefix(args) {
     if (args.length === 0) {
         return COMMAND_DOCS;
     }
-    return COMMAND_DOCS.filter(doc => args.every((part, index) => doc.path[index] === part) &&
-        doc.path.length > args.length);
+    return COMMAND_DOCS.filter(doc => [doc.path, ...(doc.aliases || [])].some(path => args.every((part, index) => path[index] === part) &&
+        path.length > args.length));
 }
 function formatRows(rows, indent = '  ') {
     const width = Math.max(...rows.map(row => row[0].length));