doff once --dry-runobserve + plan + recordRuns one real local sweep through the same planner while suppressing delivery.
doff / operator + command reference
Fleet state, policy, action, and receipt.
The hosted page is a safe simulation. The local bridge reads the real fleet and runs one send-suppressed sweep. Live execution is intentionally NOT_READY until delivery has durable pre-action receipts, restart-safe cooldown, and unique target verification.
hosted demo
This page cannot read transcripts, enumerate windows, change configuration, or send keystrokes.
observed sessions4 reference sessions / 3 reachable
transcript state + reachable surface
$
doff once --dry-runready
live action unavailable
This release does not expose live delivery from any packaged runtime or bridge path.
terminalembedded command surface
doff operator ready
type help for safe commands
record outputJSONL decision receipts
{"type":"fleet","state":"awaiting_sweep","taken":false}
actual command contract
The complete CLI surface, with the browser boundary stated.
doff list --allread the enrolled fleetShows every session inside the configured window, including settled and active rows.
doff show <id>inspect one identityShows state, host, plan, resume command, question shape, and recent text when available.
doff config [key]read settingsPrint every setting or one dotted key. The bridge serves these reads from a non-migrating snapshot.
doff config <key> <value>
doff config --editchange settingsWrite one setting or open the config in your editor. These write paths remain terminal-only.
doff add <id|title>
doff remove <id|title>change session scopeAdd to the include list or exclude a matching session. Scope writes remain terminal-only.
doff setup [--lan|--no-open]guided local setupOpen the tokenized setup surface, optionally on the LAN or without opening a browser. The operator only documents it.
doff once|run [--detail|-d]
[--gui-only|--term-only]shape a sweepCanonical modifiers expand detail or constrain a host. The reviewed product accepts them only on once --dry-run and rejects live and continuous execution.
doff runcanonical continuous supervisorDocumented for the preserved original. The reviewed product rejects it until a verified single-process lifetime lock exists.
doff stopcanonical shutdown commandDocumented for the preserved original. The reviewed product rejects it until pid ownership and process identity are verified safely.
The browser bridge documents but does not execute configuration writes, setup, scope changes, stop, or the continuous runner. The package is intended for an open-source GitHub release after explicit license and publication review; hosted mode never receives machine access.