Folds in the Codex verification review (kept verbatim with per-point
Resolution notes):
- `graphs list` is marked remote-only today in the current-state table
(the embedded arm bails; it rides GraphClient only to share the resolver).
- `init` is noted as positional-URI-only today (no `--target`); adding
`--target` to init is part of the proposal, entangled with the
init→cluster apply signpost, not current state.
- Validated-fact #1 now describes the post-collapse reality
(`GraphClient::resolve*`; only the two factories call `apply_server_flag`),
dropping the stale "16 call sites" count.
- The Authority rule carries a flag-shape caveat: `--graph` is already a
global flag requiring `--server`, so the cluster-managed resolver and its
flag shape are deferred to a later slice; the illustrative
`--cluster <dir> --graph <id>` spelling is marked not-final.
Docs-only; no code change.
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
The CLI silently spans three planes (data / storage-maintenance / control)
and forces the operator to name a graph differently per plane: the graph
you query as `--server prod --graph knowledge` you must maintain as
`s3://bucket/knowledge.omni`. Plane restrictions (graphs list is
server-only, optimize is storage-only) are accidental — discovered by
hitting a cryptic error, not declared.
RFC-010 proposes: one graph-addressing model across every verb, a declared
per-subcommand capability surface (expanding RFC-009 Phase 4), and
plane-grouped --help. Storage maintenance stays off the wire deliberately
(no HTTP routes for optimize/cleanup/repair). CLI-internal only — no
engine, server, or wire change.
Incorporates the Codex review thread (kept verbatim with per-point
Resolution notes): sharpened resolver authority rule (operator/legacy
target must be direct storage; cluster-managed graphs via explicit
--cluster --graph), per-subcommand capability table (schema plan vs
show/apply, queries validate vs list, session/tooling classified), graphs
list aligned to RFC-009's both-later target, init promoted to an explicit
cluster-apply signpost, and a Test plan that extends the existing CLI
suites and pins the new wrong-plane error strings.
Linked from docs/dev/index.md.
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>