Implemented operations helper commands for validation, locking, and status

docs/cli.md

@@ -17,9 +17,15 @@ Implemented commands:
 - `run`: execute pipeline stages and persist manifest state.
 - `plan`: validate config, prepare workspace layout, and print stage run/skip decisions.
 - `resume`: continue from first non-succeeded stage unless forced.
-- `status`: read and print stage statuses from an existing manifest.
+- `status`: read an existing manifest or inspect local/remote state for a session.
 - `run-stage`: execute exactly one stage.
 - `restore`: restore durable local session state from the committed remote archive state.
+- `session validate`: run read-only preflight checks for a session.
+- `session init`: create local or remote `session.yml`.
+- `artifacts list`: list effective artifact source IDs.
+- `locks`: list effective archive promotion locks.
+- `lock`: add or update a remote session lock.
+- `unlock`: remove a remote session lock.
 
 Unknown commands print usage and exit non-zero.
 
@@ -92,7 +98,55 @@ Valid stage names:
 
 ### `status`
 
-- `--manifest <path>`: required manifest path.
+- `--manifest <path>`: inspect one manifest file.
+- `--config <path>`
+- `--campaign <path>`
+- `--session <path>`
+- `--session-id <value>`
+- `--previous-session-id <value>`
+
+### `session validate`
+
+- `--config <path>`
+- `--campaign <path>`
+- `--session <path>`
+- `--session-id <value>`
+- `--previous-session-id <value>`
+
+### `session init`
+
+- `--config <path>`: required.
+- `--campaign <path>`: required.
+- `--session-id <value>`: required.
+- `--output <path>`: local `session.yml` target; mutually exclusive with `--remote`.
+- `--remote`: write remote `session.yml` to the canonical session prefix; mutually exclusive with `--output`.
+- `--previous-session-id <value>`
+- `--date <value>`
+- `--title <value>`
+- `--audio-s3-prefix <prefix>`: defaults to `audio/` when neither audio flag is provided.
+- `--audio-dir <path>`: local audio directory; mutually exclusive with `--audio-s3-prefix`.
+- `--force`: overwrite existing local or remote target.
+
+### `artifacts list`
+
+- `--config <path>`
+- `--campaign <path>`
+- `--session <path>`
+- `--session-id <value>`
+- `--previous-session-id <value>`
+- `--remote`: check promoted remote object availability.
+
+### `locks`, `lock`, `unlock`
+
+- `--config <path>`
+- `--campaign <path>`
+- `--session <path>`
+- `--session-id <value>`
+- `--previous-session-id <value>`
+- `lock <source>` positional source ID.
+- `lock --reason <text>` optional remote lock reason.
+- `lock --force` updates an existing remote lock.
+- `unlock <source>` positional source ID.
 
 ## Command Reference
 
@@ -161,22 +215,101 @@ Common failure cases:
 ### `status`
 
 Purpose:
-- Inspect one manifest file without executing stages.
+- Inspect one manifest file, or inspect configured local/remote state for a session.
 
 Syntax:
 
 ```bash
 narratio status --manifest <manifest.json>
+narratio status [--config <pipeline.yml>] [--campaign <campaign.yml>] [--session <session.yml>] [--session-id <id>] [--previous-session-id <id>]
 ```
 
-Success output includes:
+Manifest output includes:
 - `session_id: <id>`
 - `updated_at: <timestamp>`
 - `stages:` entries (`- <stage>: <status>`)
 
+Session output includes:
+- session ID, campaign, workspace, session config source.
+- local manifest state when present.
+- remote current archive state when storage is configured.
+- effective archive locks and conservative next actions.
+
 Common failure cases:
-- missing `--manifest`.
+- missing `--manifest` when no config/session flags are provided.
 - unreadable or invalid manifest path.
+- invalid config or remote session fallback failure in session mode.
+
+### `session validate`
+
+Purpose:
+- Run read-only preflight checks for a session.
+
+Syntax:
+
+```bash
+narratio session validate [--config <pipeline.yml>] [--campaign <campaign.yml>] [--session <session.yml>] [--session-id <id>] [--previous-session-id <id>]
+```
+
+Checks include:
+- effective config and session source.
+- stable input files.
+- local or remote audio availability.
+- previous-session requirements.
+- archive promotions and effective locks.
+
+Warnings do not fail the command. Any `ERROR` finding exits non-zero.
+
+### `session init`
+
+Purpose:
+- Create a strict-decoded session skeleton locally or in object storage.
+
+Syntax:
+
+```bash
+narratio session init --config <pipeline.yml> --campaign <campaign.yml> --session-id <id> --output ./session.yml
+narratio session init --config <pipeline.yml> --campaign <campaign.yml> --session-id <id> --remote
+```
+
+Behavior:
+- exactly one of `--output` or `--remote` is required.
+- remote writes target `{root_prefix}/campaigns/{campaign}/sessions/{session_id}/session.yml`.
+- existing local or remote targets fail unless `--force` is passed.
+- remote writes use existence checks, not compare-and-swap.
+
+### `artifacts list`
+
+Purpose:
+- List built-in, configured, previous-session, promoted, and locked artifact sources.
+
+Syntax:
+
+```bash
+narratio artifacts list [--config <pipeline.yml>] [--campaign <campaign.yml>] [--session <session.yml>] [--session-id <id>] [--previous-session-id <id>] [--remote]
+```
+
+`--remote` checks promoted top-level object availability through the storage adapter.
+
+### `locks`, `lock`, and `unlock`
+
+Purpose:
+- Inspect and mutate source-based archive promotion locks.
+
+Syntax:
+
+```bash
+narratio locks [--config <pipeline.yml>] [--campaign <campaign.yml>] [--session <session.yml>] [--session-id <id>]
+narratio lock [flags] <source>
+narratio unlock [flags] <source>
+```
+
+Behavior:
+- static locks from `pipeline.archive.locks` and remote locks from `{session_prefix}/locks.yml` are merged.
+- static locks win when sources duplicate remote locks.
+- `lock` writes or updates only remote locks.
+- `unlock` removes only remote locks and cannot remove static pipeline locks.
+- `lock --force` is required to update an existing remote lock reason.
 
 ### `run-stage`