owlrunkit 0.18.4 → 0.19.0

package/scripts/runkit-contract/runkit-cli.mjs

@@ -79,7 +79,18 @@ import {
 import { buildInspectSummary, formatInspectHuman } from "./inspect-presentation.mjs";
 import { attestQuickReceiptDetails } from "./quick-attest.mjs";
 import { readLocalQuickMetrics } from "./quick-metrics.mjs";
+import { runQuickEvidenceReuse } from "./quick-evidence-reuse.mjs";
 import { runQuickVerification } from "./quick-verify.mjs";
+import {
+  formatQuickOutcomeHumanV1,
+  projectQuickOutcomeV1,
+} from "./outcome-presentation.mjs";
+import {
+  formatEfficiencyMetricsHumanV1,
+  readEfficiencyMetricsV1,
+  recordEfficiencyEventV1,
+} from "./efficiency-metrics.mjs";
+import { verifyRuntimeTransitionReceipt } from "./runtime-transition.mjs";
 import { runRepairExecution } from "./repair-execution.mjs";
 import {
   exportOfflineReceipt,
@@ -138,6 +149,11 @@ import {
   readProfileLauncherReadiness,
   runDoctor,
 } from "./onboarding-doctor.mjs";
+import {
+  applyOnboardingBootstrapV1,
+  formatOnboardingBootstrapHumanV1,
+  planOnboardingBootstrapV1,
+} from "./onboarding-bootstrap.mjs";
 import {
   formatAdoptionHuman,
   runRegistryAdoption,
@@ -158,7 +174,9 @@ import {
   openTeamProjectDecisionV1,
   readTeamProjectStatusV2,
   rejectAndReturnTeamProjectV1,
+  reopenUpstreamTeamProjectV1,
   resolveTeamProjectDecisionV1,
+  transferTeamProjectV1,
 } from "./team-project.mjs";
 import {
   formatTeamProjectSuccessorHumanV1,
@@ -175,21 +193,21 @@ Usage:
   npx --no-install owlrunkit <command> [options]
 
 Start here:
+  npx --no-install owlrunkit bootstrap --workspace . --exact owlrunkit@${CORE_VERSION} --dry-run
   npx --no-install owlrunkit mode recommend --workspace .
   npx --no-install owlrunkit doctor --workspace .
   npx --no-install owlrunkit profiles detect --workspace . --dry-run
-  npx --no-install owlrunkit profiles detect --workspace . --apply
-  npx --no-install owlrunkit assurance route --workspace . --request <risk-facts.json>
   npx --no-install owlrunkit adopt --workspace . --exact owlrunkit@${CORE_VERSION}
 Quick Verification
   npx --no-install owlrunkit quick-verify --workspace . -- <command> [args...]
+  npx --no-install owlrunkit quick-reuse --workspace . --base-receipt <receipt> --allow-path <path> --dry-run|--apply -- <delta-command>
+  npx --no-install owlrunkit quick-runtime-verify --workspace . --receipt <runtime-transition.json>
   Low-risk, source-bound reusable evidence without writer leases or acceptance.
 
 Formal Delivery
   npx --no-install owlrunkit formal <start|check|finish> --workspace . --run-id <id> [...]
   Use for multi-writer, permissions, security, funds, irreversible change,
   uncertain rollback, schema/data migration, or explicit Formal acceptance.
-
 Frozen dirty source
   npx --no-install owlrunkit candidate <freeze|verify|materialize> --workspace . [...]
 
@@ -204,7 +222,7 @@ Fleet and status
   npx --no-install owlrunkit fleet discover; npx --no-install owlrunkit status --workspace .
 
 Agent team projects
-  npx --no-install owlrunkit project <init|assign|checkpoint|handoff|reject-and-return|decision|verification|capture|target-snapshot|import-delivery|status|takeover|successor> [options]
+  npx --no-install owlrunkit project <init|assign|checkpoint|handoff|reject-and-return|reopen-upstream|transfer|decision|verification|capture|target-snapshot|import-delivery|status|takeover|successor> [options]
   Durable Agent work, dependencies, decisions, gates, progress, and handoffs.
 Core successor
   npx --no-install owlrunkit core-successor <plan|apply|resume> --workspace . [...]
@@ -216,6 +234,25 @@ Formal accepted does not grant Git or release authority; Quick cannot become For
 `;
 
 const COMMAND_HELP = Object.freeze({
+  init: `Usage:
+  npx --no-install owlrunkit init --workspace <directory> [--json]
+
+Initializes the project-owned RunKit Core and control directory. For a complete
+first-time onboarding transaction, use bootstrap after installing the exact
+project-local package. Initialization grants no Git, release, deployment, or
+business authority.
+`,
+  bootstrap: `Usage:
+  npx --no-install owlrunkit bootstrap --workspace <directory>
+    --exact owlrunkit@${CORE_VERSION} (--dry-run | --apply)
+    [--skill-root <installed-skill-directory>] [--json]
+
+Preflights or atomically completes Core initialization, profile reconciliation,
+validation, exact registry adoption, and doctor readback. Failed apply restores
+the governed preimage and retains a failure receipt. Shared Skill drift is
+diagnosed only; bootstrap never silently refreshes user or fleet Skills and
+grants no Git, release, deployment, production, or business authority.
+`,
   adopt: `Usage:
   npx --no-install owlrunkit adopt --workspace <directory> --exact owlrunkit@${CORE_VERSION}
     [--registry <url>] [--timeout-ms <milliseconds>] [--json]
@@ -268,20 +305,75 @@ Attests one Quick Receipt against its bound materials and current workspace.
 It never grants repository or business authority.
 `,
   "quick-verify": `Usage:
-  npx --no-install owlrunkit quick-verify --workspace <directory> [--stdin-file <file>] [--attest] [--json]
+  npx --no-install owlrunkit quick-verify --workspace <directory>
+    [--isolate] [--dependency-root <directory>] [--bind-ignored <relative-path> ...]
+    [--stdin-file <file>] [--capture-runtime] [--attest] [--json]
     -- <executable> [args...]
 
 Runs one exact command, saves source-bound stdout/stderr and a Quick receipt,
 and returns a bounded head/tail output summary. --stdin-file copies and hash-binds
 up to 1 MiB of exact stdin bytes in the receipt store. --attest immediately
 attests the saved receipt without merging Quick and attestation semantics.
+--isolate runs a Git-visible source copy in a disposable cache environment.
+--dependency-root binds and projects an existing dependency environment without
+installing anything. Ignored workspace bytes are bound only by explicit,
+repeatable --bind-ignored literal paths.
+--capture-runtime sets OWLRUNKIT_RUNTIME_REPORT for the exact command and binds
+one strict command-reported external transition without conflating it with
+workspace mutation. Missing or inconsistent runtime truth fails closed while
+retaining the ordinary Quick receipt.
 Quick evidence is not Formal acceptance and grants no repository or business authority.
+`,
+  "quick-runtime-verify": `Usage:
+  npx --no-install owlrunkit quick-runtime-verify --workspace <directory>
+    --receipt <runtime-transition.json> [--json]
+
+Verifies the companion runtime-transition receipt, Quick receipt, command report,
+and bound material bytes. It does not independently re-observe the external
+runtime and grants no Git, release, deployment, production, or business authority.
 `,
   "quick-metrics": `Usage:
   npx --no-install owlrunkit quick-metrics --workspace <directory> [--local] [--verbose] [--json]
 
 Returns aggregate local-only Quick counts with no telemetry or network access.
 --verbose additionally lists the receipt paths used for the aggregation.
+`,
+  efficiency: `Usage:
+  npx --no-install owlrunkit efficiency status --workspace <directory> [--verbose] [--json]
+  npx --no-install owlrunkit efficiency record --workspace <directory>
+    --event-id <id> --at <ISO-UTC>
+    --kind workflow_started|false_block_confirmed|manual_intervention|acceptable_result_reached
+    --workflow-id <id> --summary <text> [--evidence <ref>...] [--json]
+
+Reads project-local evidence only. False blocks and manual interventions are
+counted only when explicitly recorded; receipt counts are not a value metric.
+It grants no Git, release, deployment, production, or business authorization.
+`,
+  "efficiency record": `Usage:
+  npx --no-install owlrunkit efficiency record --workspace <directory>
+    --event-id <id> --at <ISO-UTC>
+    --kind workflow_started|false_block_confirmed|manual_intervention|acceptable_result_reached
+    --workflow-id <id> --summary <text> [--evidence <ref>...] [--json]
+
+Creates one immutable, project-local observation. Recording friction grants no
+Git, release, deployment, production, or business authorization.
+`,
+  "efficiency status": `Usage:
+  npx --no-install owlrunkit efficiency status --workspace <directory> [--verbose] [--json]
+
+Reports local evidence about RunKit friction without telemetry or network use.
+It grants no Git, release, deployment, production, or business authorization.
+`,
+  "quick-reuse": `Usage:
+  npx --no-install owlrunkit quick-reuse --workspace <directory>
+    --base-receipt <receipt.json> --allow-path <literal-path> [--allow-path <literal-path> ...]
+    (--dry-run | --apply) [--stdin-file <file>] [--json]
+    -- <exact-delta-command> [args...]
+
+Verifies that every current candidate delta is explicitly allowed. --dry-run
+runs no command and writes no receipt. --apply runs only the exact delta gate
+through Quick and records an additive evidence-reuse receipt. Reuse remains
+non-Formal and grants no Git, release, deployment, production, or business authority.
 `,
   fleet: `Usage:
   npx --no-install owlrunkit fleet register-root --fleet-root <directory>
@@ -435,6 +527,16 @@ action without granting any authority.
   npx --no-install owlrunkit project reject-and-return --workspace <directory> --rework-id <id> --at <ISO-UTC>
     --work-item <failed-id> --reviewer-agent <id> --to-agent <id>
     --reason <text> --next <text> --evidence <ref> [--evidence <ref> ...] [--json]
+  npx --no-install owlrunkit project reopen-upstream --workspace <directory> --reopen-id <id> --at <ISO-UTC>
+    --upstream-work-item <completed-id> --trigger-work-item <downstream-id>
+    --reviewer-agent <id> --to-agent <id> --reason <text> --next <text>
+    --evidence <ref> [--evidence <ref> ...] [--json]
+  npx --no-install owlrunkit project transfer --workspace <directory> --transfer-id <id> --at <ISO-UTC>
+    --assignment-id <current> --work-item <id> --from-agent <id> --to-agent <id>
+    --state <active|waiting_dependency|waiting_decision|verifying|ready_to_integrate>
+    --summary <text> [--completed-units <nonnegative-int>]
+    --evidence <ref> [--evidence <ref> ...] [--blocker <ref> ...]
+    [--decision <id> ...] --next <text> [--source-fingerprint <sha256>] [--json]
   npx --no-install owlrunkit project decision --workspace <directory> --open --decision-id <id> --at <ISO-UTC>
     --title <text> --question <text> --owner-agent <id>
     [--blocking-work-item <id> ...] --option <text> [--option <text> ...] [--json]
@@ -494,7 +596,32 @@ production, business, or other authorization.
 
 Atomically records the rejection and opens a new assigned rework attempt. The
 failed attempt remains immutable and evidence-linked. This action does not
-grant Git, release, deployment, production, or business authority.
+  grant Git, release, deployment, production, or business authority.
+  `,
+  "project reopen-upstream": `Usage:
+  npx --no-install owlrunkit project reopen-upstream --workspace <directory>
+    --reopen-id <id> --at <ISO-UTC> --upstream-work-item <completed-id>
+    --trigger-work-item <transitive-downstream-id> --reviewer-agent <id>
+    --to-agent <id> --reason <text> --next <text>
+    --evidence <ref> [--evidence <ref> ...] [--json]
+
+Invalidates stale completion truth for the upstream WorkItem and every transitive
+downstream WorkItem, then creates a new upstream assignment. Passed integration
+gates remain immutable. No Git, release, deployment, production, or business
+authority is granted.
+`,
+  "project transfer": `Usage:
+  npx --no-install owlrunkit project transfer --workspace <directory>
+    --transfer-id <id> --at <ISO-UTC> --assignment-id <current>
+    --work-item <id> --from-agent <id> --to-agent <id>
+    --state <active|waiting_dependency|waiting_decision|verifying|ready_to_integrate>
+    --summary <text> [--completed-units <nonnegative-int>]
+    --evidence <ref> [--evidence <ref> ...] [--blocker <ref> ...]
+    [--decision <id> ...] --next <text> [--source-fingerprint <sha256>] [--json]
+
+Atomically records checkpoint, handoff, and successor-assignment facts inside one
+immutable Event V4 envelope. Terminal WorkItems cannot transfer. No Git, release,
+deployment, production, or business authority is granted.
 `,
   "project target-snapshot": `Usage:
   npx --no-install owlrunkit project target-snapshot --workspace <controller>
@@ -545,6 +672,17 @@ function withHumanOutput(result, humanOutput) {
   return result;
 }
 
+function presentQuickOutcome(result, json) {
+  const presented = {
+    ...result,
+    outcome: projectQuickOutcomeV1(result),
+    authorizationGranted: false,
+  };
+  return json === true
+    ? presented
+    : withHumanOutput(presented, formatQuickOutcomeHumanV1(presented.outcome));
+}
+
 function shellCommandToken(value) {
   const text = String(value);
   return /^[A-Za-z0-9_@%+=:,./-]+$/u.test(text)
@@ -608,6 +746,28 @@ function formatTeamProjectReworkHuman(result) {
   ].join("\n");
 }
 
+function formatTeamProjectUpstreamReopenHuman(result) {
+  const disposition = result.resumed ? "Resumed" : "Reopened";
+  return [
+    `${disposition} upstream WorkItem ${result.upstreamWorkItemId} for Agent ${result.toAgentId}.`,
+    `Invalidated completion: ${result.invalidatedWorkItemIds.join(", ")}`,
+    `Project next: ${result.nextAction ?? "none"}${result.nextActorId ? ` (owner ${result.nextActorId})` : ""}`,
+    "Git/release/deployment/business authority: not granted.",
+    "",
+  ].join("\n");
+}
+
+function formatTeamProjectTransferHuman(result) {
+  const disposition = result.resumed ? "Resumed" : "Transferred";
+  return [
+    `${disposition} WorkItem ${result.workItemId} from Agent ${result.fromAgentId} to Agent ${result.toAgentId}.`,
+    `New assignment: ${result.assignmentId}; immutable facts: ${result.factRefs.length}`,
+    `Project next: ${result.nextAction ?? "none"}${result.nextActorId ? ` (owner ${result.nextActorId})` : ""}`,
+    "Git/release/deployment/business authority: not granted.",
+    "",
+  ].join("\n");
+}
+
 function formatTargetSnapshotHuman(result) {
   return [
     result.persisted
@@ -1980,9 +2140,10 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
     const separatorIndex = rest.indexOf("--");
     const acceptsExactCommand = command === "verify"
       || command === "quick-verify"
+      || command === "quick-reuse"
       || (command === "formal" && rest[0] === "check");
     if (separatorIndex >= 0 && !acceptsExactCommand) {
-      throw new Error("Only verify, quick-verify, and formal check accept an exact command after --.");
+      throw new Error("Only verify, quick-verify, quick-reuse, and formal check accept an exact command after --.");
     }
     const optionValues = separatorIndex >= 0 ? rest.slice(0, separatorIndex) : rest;
     const commandArgv = separatorIndex >= 0 ? rest.slice(separatorIndex + 1) : [];
@@ -1992,6 +2153,7 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
       "core-successor",
       "delivery",
       "deployment",
+      "efficiency",
       "fleet",
       "formal",
       "lease",
@@ -2020,6 +2182,10 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
     const options = parseOptions(nested ? nestedOptions : optionValues, {
       multi: command === "mode"
         ? ["risk-category"]
+        : command === "quick-verify"
+          ? ["bind-ignored"]
+        : command === "quick-reuse"
+          ? ["allow-path"]
         : command === "profiles" && action === "impact"
         ? ["changed"]
         : (command === "fleet" && action === "discover")
@@ -2035,6 +2201,10 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
           ? ["evidence"]
         : command === "project" && action === "reject-and-return"
           ? ["evidence"]
+        : command === "project" && action === "reopen-upstream"
+          ? ["evidence"]
+        : command === "project" && action === "transfer"
+          ? ["evidence", "blocker", "decision"]
         : command === "project" && action === "integrate"
           ? ["evidence"]
         : command === "project" && action === "verification"
@@ -2043,6 +2213,8 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
           ? ["evidence", "blocker", "decision"]
         : command === "project" && action === "decision"
           ? ["blocking-work-item", "option", "evidence"]
+        : command === "efficiency" && action === "record"
+          ? ["evidence"]
           : [],
       boolean: command === "mode" && action === "recommend"
         ? [
@@ -2068,11 +2240,13 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
         ? ["json", "verbose", "history"]
         : command === "init"
           ? ["json"]
+        : command === "bootstrap"
+          ? ["json", "dry-run", "apply"]
         : command === "project" && action === "decision"
           ? ["json", "open", "resolve"]
         : command === "project" && action === "verification"
           ? ["json", "defer", "close"]
-        : command === "project" && new Set(["assign", "handoff", "reject-and-return", "checkpoint", "integrate", "status", "takeover", "successor"]).has(action)
+        : command === "project" && new Set(["assign", "handoff", "reject-and-return", "reopen-upstream", "transfer", "checkpoint", "integrate", "status", "takeover", "successor"]).has(action)
           ? ["json"]
         : command === "project" && new Set(["target-snapshot", "import-delivery"]).has(action)
           ? ["json", "dry-run", "apply"]
@@ -2089,14 +2263,43 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
         : command === "deployment" && action === "execute"
           ? ["resume"]
         : command === "quick-verify"
-          ? ["json", "attest"]
+          ? ["json", "attest", "isolate", "capture-runtime"]
+        : command === "quick-reuse"
+          ? ["json", "dry-run", "apply"]
+        : command === "quick-runtime-verify"
+          ? ["json"]
         : command === "quick-attest"
           ? ["json"]
         : command === "quick-metrics"
           ? ["json", "local", "verbose"]
+        : command === "efficiency" && action === "record"
+          ? ["json"]
+        : command === "efficiency" && action === "status"
+          ? ["json", "verbose"]
           : [],
     });
     if (command === "init") return await initialize(options);
+    if (command === "bootstrap") {
+      if (options.apply === true && options["dry-run"] === true) {
+        throw new Error("bootstrap accepts either --apply or --dry-run, not both.");
+      }
+      if (options.apply !== true && options["dry-run"] !== true) {
+        throw new Error("bootstrap requires --dry-run or --apply.");
+      }
+      const input = {
+        workspaceRoot: requireOption(options, "workspace"),
+        exactSpec: requireOption(options, "exact"),
+        ...(options["skill-root"] === undefined
+          ? {}
+          : { skillRoot: options["skill-root"] }),
+      };
+      const result = options.apply === true
+        ? await applyOnboardingBootstrapV1(input)
+        : await planOnboardingBootstrapV1(input);
+      return options.json === true
+        ? result
+        : withHumanOutput(result, formatOnboardingBootstrapHumanV1(result));
+    }
     if (command === "doctor") {
       const timeoutMs = options["timeout-ms"] === undefined
         ? 1_500
@@ -2933,6 +3136,15 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
           "workspace", "rework-id", "at", "work-item", "reviewer-agent",
           "to-agent", "reason", "next", "evidence", "json",
         ],
+        "reopen-upstream": [
+          "workspace", "reopen-id", "at", "upstream-work-item", "trigger-work-item",
+          "reviewer-agent", "to-agent", "reason", "next", "evidence", "json",
+        ],
+        transfer: [
+          "workspace", "transfer-id", "at", "assignment-id", "work-item",
+          "from-agent", "to-agent", "state", "summary", "completed-units",
+          "evidence", "blocker", "decision", "next", "source-fingerprint", "json",
+        ],
         decision: [
           "workspace", "request", "open", "resolve", "decision-id", "at", "title",
           "question", "owner-agent", "blocking-work-item", "option", "resolution",
@@ -3110,6 +3322,55 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
           ? returned
           : withHumanOutput(returned, formatTeamProjectReworkHuman(returned));
       }
+      if (action === "reopen-upstream") {
+        const evidenceRefs = options.evidence ?? [];
+        if (evidenceRefs.length === 0) {
+          throw new Error("Project reopen-upstream requires at least one --evidence.");
+        }
+        const reopened = reopenUpstreamTeamProjectV1({
+          workspaceRoot: root,
+          reopenId: requireOption(options, "reopen-id"),
+          occurredAt: requireOption(options, "at"),
+          upstreamWorkItemId: requireOption(options, "upstream-work-item"),
+          triggerWorkItemId: requireOption(options, "trigger-work-item"),
+          reviewerAgentId: requireOption(options, "reviewer-agent"),
+          toAgentId: requireOption(options, "to-agent"),
+          reason: requireOption(options, "reason"),
+          nextAction: requireOption(options, "next"),
+          evidenceRefs,
+        });
+        return options.json === true
+          ? reopened
+          : withHumanOutput(reopened, formatTeamProjectUpstreamReopenHuman(reopened));
+      }
+      if (action === "transfer") {
+        const evidenceRefs = options.evidence ?? [];
+        if (evidenceRefs.length === 0) {
+          throw new Error("Project transfer requires at least one --evidence.");
+        }
+        const transferred = transferTeamProjectV1({
+          workspaceRoot: root,
+          transferId: requireOption(options, "transfer-id"),
+          occurredAt: requireOption(options, "at"),
+          assignmentId: requireOption(options, "assignment-id"),
+          workItemId: requireOption(options, "work-item"),
+          fromAgentId: requireOption(options, "from-agent"),
+          toAgentId: requireOption(options, "to-agent"),
+          state: requireOption(options, "state"),
+          summary: requireOption(options, "summary"),
+          completedUnits: options["completed-units"] === undefined
+            ? undefined
+            : Number(options["completed-units"]),
+          evidenceRefs,
+          blockerRefs: options.blocker ?? [],
+          decisionRefs: options.decision ?? [],
+          nextAction: requireOption(options, "next"),
+          sourceFingerprint: options["source-fingerprint"],
+        });
+        return options.json === true
+          ? transferred
+          : withHumanOutput(transferred, formatTeamProjectTransferHuman(transferred));
+      }
       if (action === "decision") {
         const directDecisionFields = [
           "open",
@@ -3433,7 +3694,7 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
           ? successor
           : withHumanOutput(successor, formatTeamProjectSuccessorHumanV1(successor));
       }
-      throw new Error("Usage: npx --no-install owlrunkit project <init|assign|checkpoint|handoff|reject-and-return|decision|verification|integrate|capture|target-snapshot|import-delivery|status|takeover|successor> [options]");
+      throw new Error("Usage: npx --no-install owlrunkit project <init|assign|checkpoint|handoff|reject-and-return|reopen-upstream|transfer|decision|verification|integrate|capture|target-snapshot|import-delivery|status|takeover|successor> [options]");
     }
     if (command === "profiles") {
       const root = requireOption(options, "workspace");
@@ -3521,24 +3782,55 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
         workspaceRoot: workspace(options),
         commandArgv,
         stdinFile: options["stdin-file"],
+        isolate: options.isolate === true,
+        dependencyRoot: options["dependency-root"],
+        ignoredPaths: options["bind-ignored"] ?? [],
+        captureRuntime: options["capture-runtime"] === true,
       });
       if (options.attest !== true || typeof verification.receiptPath !== "string") {
-        return verification;
+        return presentQuickOutcome(verification, options.json === true);
       }
       const details = attestQuickReceiptDetails({
         receiptPath: verification.receiptPath,
         workspaceRoot: workspace(options),
       });
-      return {
+      return presentQuickOutcome({
         ...verification,
         exitCode: details.exitCode === 0 ? verification.exitCode : details.exitCode,
         attestationDecision: details.attestation.decision,
         attestation: details.attestation,
-        nextAllowedAction: details.attestation.decision === "GO"
-          ? "consume_attestation"
-          : "inspect_attestation_issues",
+        nextAllowedAction: verification.status === "quick_verification_runtime_truth_invalid"
+          ? verification.nextAllowedAction
+          : details.attestation.decision === "GO"
+            ? "consume_attestation"
+            : "inspect_attestation_issues",
         authorizationGranted: false,
-      };
+      }, options.json === true);
+    }
+    if (command === "quick-runtime-verify") {
+      return verifyRuntimeTransitionReceipt({
+        workspaceRoot: workspace(options),
+        receiptPath: requireOption(options, "receipt"),
+      });
+    }
+    if (command === "quick-reuse") {
+      if (options.apply === true && options["dry-run"] === true) {
+        throw new Error("quick-reuse accepts either --apply or --dry-run, not both.");
+      }
+      if (options.apply !== true && options["dry-run"] !== true) {
+        throw new Error("quick-reuse requires --dry-run or --apply.");
+      }
+      if (commandArgv.length === 0) {
+        throw new Error("quick-reuse requires an exact delta command after --.");
+      }
+      return runQuickEvidenceReuse({
+        workspaceRoot: workspace(options),
+        baseReceiptPath: requireOption(options, "base-receipt"),
+        allowedPaths: options["allow-path"] ?? [],
+        commandArgv,
+        stdinFile: options["stdin-file"],
+        apply: options.apply === true,
+      });
     }
     if (command === "quick-attest") {
       const details = attestQuickReceiptDetails({
@@ -3569,6 +3861,26 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
         networkRequests: 0,
       };
     }
+    if (command === "efficiency" && action === "record") {
+      return recordEfficiencyEventV1({
+        workspaceRoot: workspace(options),
+        eventId: requireOption(options, "event-id"),
+        occurredAt: requireOption(options, "at"),
+        kind: requireOption(options, "kind"),
+        workflowId: requireOption(options, "workflow-id"),
+        summary: requireOption(options, "summary"),
+        evidenceRefs: options.evidence ?? [],
+      });
+    }
+    if (command === "efficiency" && action === "status") {
+      const metrics = readEfficiencyMetricsV1({
+        workspaceRoot: workspace(options),
+        verbose: options.verbose === true,
+      });
+      return options.json === true
+        ? metrics
+        : withHumanOutput(metrics, formatEfficiencyMetricsHumanV1(metrics));
+    }
     if (command === "repair") {
       return runRepairExecution({
         workspaceRoot: workspace(options),
@@ -3625,7 +3937,7 @@ export async function runCli(argv = process.argv.slice(2), runtimeHooks = {}) {
       return withControlTransaction(root, () => closeout(options));
     }
     if (command === "finish") return finishExecution(options);
-    throw new Error("Usage: npx --no-install owlrunkit <init|doctor|adopt|mode|assurance|fleet|profiles|project|status|formal|candidate|deployment|core-successor|start|verify|repair|offline-export|offline-import|quick-verify|quick-attest|quick-metrics|finish|plan|inspect|lease|delivery|coverage-adopt|resume|verify-plan|resource-preflight|snapshot|visual-smoke|finalize|ready-for-commit|closeout> [options]");
+    throw new Error("Usage: npx --no-install owlrunkit <bootstrap|init|doctor|adopt|mode|assurance|fleet|profiles|project|status|formal|candidate|deployment|core-successor|start|verify|repair|offline-export|offline-import|quick-verify|quick-reuse|quick-runtime-verify|quick-attest|quick-metrics|efficiency|finish|plan|inspect|lease|delivery|coverage-adopt|resume|verify-plan|resource-preflight|snapshot|visual-smoke|finalize|ready-for-commit|closeout> [options]");
   } catch (error) {
     return {
       status: "invalid_input",
@@ -3650,7 +3962,7 @@ if (isDirectExecution(import.meta.url)) {
     ? parseOptions(argv.slice(1), { boolean: ["json", "verbose", "history"] })
     : null;
   const humanInspect = inspectOptions !== null && inspectOptions.json !== true;
-  const onboardingHumanCommand = new Set(["init", "doctor", "adopt", "profiles"]).has(argv[0]);
+  const onboardingHumanCommand = new Set(["bootstrap", "init", "doctor", "adopt", "profiles"]).has(argv[0]);
   const interactiveOnboarding = onboardingHumanCommand
     && !argv.includes("--json")
     && process.stdout.isTTY === true;