[process-manager PM-26] Lifecycle verbs via the shared CommandInvokePort shape

[rickylabs]

Summary

Lifecycle verbs — start/stop/restart/reload/block/unblock/terminate/token/enable-service/disable-service — via the shared CommandInvokePort shape (E4). Verbs that are not contract routes (reload, enable-service, disable-service) map onto contract routes or OsServicePort ops — never mint hidden routes.

Scope

• Archetype / area: packages/cli pm command group
• Part of Epic: NetScript Process Manager — bare-metal supervisor + admin console (pup/pm2 done right) #510
• Depends on: [process-manager PM-25] netscript pm CLI router + read verbs (+ degraded-local reads) #536, [process-manager PM-12] Token auth: opaque bearer + 0o600 secrets + deny-remote default #523, [process-manager PM-18] Conventions wiring: ServiceDeployTargetPorts → wired 8-op adapters #529 · Blocks: PM-30

Design source

• research/design/d4-cli-admin-console-surfaces.md §1.2 + §5.3 (PMS-2) · plan.md §4 PM-26, E4

Acceptance criteria

• gate: verb→route/OsServicePort mapping table implemented exactly as E4 records it
• gate: mutations require the bearer token (PM-12) — anonymous mutation refused in tests
• gate: scoped check/lint/fmt wrappers green (--ext ts,tsx)

Non-scope

• Dashboard CommandInvokePort first-definition (epic: NetScript Dev Dashboard — the Aspire/Scalar satellite that drives the framework (ships as a plugin, beta.6) #400 owns it by default — bidirectional edge recorded).

Drift / Debt

• none