Summary

• accept dry-run aliases for schema names and CLI command names
• add agent-authorized gate status updates so the CLI no longer calls operator endpoints
• let CLI-created gates carry required evidence and evidence updates
• de-duplicate live CLI conversation reads and add a closeout bundle command
• document the corrected CLI and dry-run affordances

Verification

• npm run check
• npm run test
• npm run build
• local deployed-worker smoke: dry-run createDirectMessage/message aliases
• local deployed-worker smoke: gate requiredEvidence, gate-status evidence, closeout bundle