CLI v0.8 Full Command Reference

Complete reference for `sentinelayer-cli@0.8.0`. Grouped by surface area. Commands marked **(new in 0.8)** ship for the first time in this release.

Install and authentication

```bash

npm install -g sentinelayer-cli # install

npm install -g sentinelayer-cli@next # install latest (0.8 during next→latest promotion)

sl --version

sl auth login --api-url https://api.sentinelayer.com

sl auth status

sl auth sessions

sl auth revoke --token-id <id>

sl auth logout

```

Tokens persist in the OS keyring when available, with a deterministic encrypted file fallback. Near-expiry rotation is automatic.

Project scaffold

```bash

sentinelayer-cli init <project-name> # bootstrap a new repo skeleton

sl ingest map --path . --json # AST + framework detection

sl spec generate --path . --template api-service --description "..."

sl prompt generate --path . --agent codex

sl scan init --path . --non-interactive # prepare .sentinelayer artifact tree

```

Omar Gate — deterministic + AI scan

13-persona AI scan added a faceless-persona fix + silent-failure detector in 0.8.

```bash

sl /omargate baseline --path . # deterministic only

sl /omargate deep --path . # 13-persona AI + deterministic (default)

sl /omargate deep --path . --scan-mode baseline # 1 persona (security)

sl /omargate deep --path . --scan-mode full-depth # all 13 personas, verbose

# Mode flags

sl /omargate deep --path . --json # machine output

sl /omargate deep --path . --stream # NDJSON event stream

sl /omargate deep --path . --ai-dry-run # skip LLM, show dispatch plan only

sl /omargate deep --path . --max-cost 5.00 # per-run cost ceiling

sl /omargate deep --path . --model gpt-5.3-codex # override routing

# Outputs under .sentinelayer/runs/<run-id>/

# REVIEW.json (deterministic findings)

# REVIEW_AI.json (per-persona AI findings)

# REVIEW_PERSONAS.json (per-persona roster + elapsed + cost)

# REVIEW_RECONCILED.json (merged + deduped + verdicted)

```

Senti sessions **(new in 0.8)**

```bash

sl session start --project <name> --json # mint session id

sl session join <id> --name <agent-id> # join as agent or human

sl session say <id> "message body" # fan-out message

sl session read <id> --tail 20 # read recent events

sl session status <id> --json # roster + leases + locks

sl session list --json # active sessions

sl session leave <id> # graceful exit

sl session kill --session <id> --agent <id> # revoke one agent

sl session kill --session <id> --all # kill every agent

sl session archive <id> # close + ship to S3

# Work assignment

sl session claim <id> --work <work-id> --lease 300 # claim with TTL

sl session heartbeat <id> --work <work-id> # keep lease alive

sl session release <id> --work <work-id> # release lease

# File locks

sl session lock <id> --path src/foo.ts # take lock before edit

sl session unlock <id> --path src/foo.ts # release after commit

```

Slash commands inside a session

Any participant can issue slash commands. Senti fans them out.

• `/senti status` — roster + leases + locks + recent activity
• `/senti stuck` — list agents without progress in last 90s
• `/spec <description>` — generate spec doc from description
• `/omargate deep` — trigger deep scan inside the session
• `/audit frontend` — trigger frontend audit inside the session
• `/kill <agent-id>` — shorthand for session kill

AIdenID — ephemeral identities

```bash

sl ai provision-email --tags "e2e,signup" --ttl 3600 --json

sl ai provision-email --tags "test" --ttl 3600 --execute # live

sl ai identity list --json

sl ai identity show <id> --json

sl ai identity wait-for-otp <id> --timeout 60 --min-confidence 0.8 --json

sl ai identity latest <id> --json

sl ai identity revoke <id>

# Child hierarchies

sl ai identity create-child --parent <pid> --tags "child"

sl ai identity lineage <id>

sl ai identity revoke-children <pid>

```

Jules Tanaka deep audits

```bash

sl audit frontend --path ./my-react-app --stream

sl audit frontend --path ./my-react-app --email test@aidenid.com # authenticated

sl audit frontend --path . --json

sl audit backend --path . # backend lane (experimental)

sl audit --dry-run --agents security,architecture,testing

```

Review, reconciliation, and exports

```bash

sl review --diff

sl review --staged --ai --provider openai --model gpt-5.3-codex

sl review show --run-id <run-id>

sl review export --format sarif --run-id <run-id>

sl review export --format pdf --run-id <run-id>

```

Observability and artifacts

```bash

sl watch run-events --run-id <run-id> # follow live NDJSON

sl watch history # recent runs

sl telemetry show --path . --json # local telemetry snapshot

sl telemetry sync # push to dashboard (opt-in)

```

Config and MCP

```bash

sl config list --scope resolved --json

sl config set <key> <value>

sl config unset <key>

sl mcp list # list MCP servers

sl mcp add <name> --command <cmd> # register an MCP server

sl mcp remove <name>

```

Session templates **(new in 0.8)**

```bash

sl template list

sl template show <name>

sl session start --template incident-response --project my-repo

```

Built-in templates: `incident-response`, `pr-review`, `migration-planning`, `security-triage`, `performance-investigation`.

Kill paths — every daemon has one

• `sl session kill --session <id> --agent <id>` — targeted agent stop
• `sl session kill --session <id> --all` — session-wide stop
• `sl /omargate deep --max-cost 0` — abort before any LLM call
• `Ctrl+C` — local SIGINT is always honored

Complete command map

| Surface | Commands |

|---------|---------|

| Auth | `login`, `logout`, `status`, `sessions`, `revoke` |

| Scaffold | `init`, `ingest`, `spec`, `prompt`, `scan init` |

| Omar | `/omargate baseline`, `/omargate deep` |

| Senti | `session start/join/say/read/status/list/leave/kill/archive/claim/heartbeat/release/lock/unlock` |

| AIdenID | `ai provision-email`, `ai identity list/show/wait-for-otp/latest/revoke/create-child/lineage/revoke-children` |

| Audit | `audit frontend`, `audit backend` |

| Review | `review`, `review show`, `review export` |

| Observability | `watch run-events`, `watch history`, `telemetry show`, `telemetry sync` |

| Config | `config list/set/unset`, `mcp list/add/remove` |

| Templates | `template list/show` |

Upgrade path from 0.7 → 0.8

• `sl auth login` once after upgrade. Sessions persist.
• All existing commands are backward compatible.
• New: `sl session *`, `/omargate deep` now dispatches 13 personas (was 6).
• New: silent-failure detection — a scan with zero cost and zero findings now raises a loud warning instead of looking "clean".

Structured Answers