fix: add provider rootfs diagnostic

scripts/src/help.ts

@@ -99,6 +99,7 @@ export function rootHelp(): unknown {
       { command: "debug health", description: "Probe internal core, nodes, system/Docker status, frontend, provider ingress, and public boundary." },
       { command: "debug ssh-pool <providerId>", description: "Show bounded host.ssh.tcp-pool labels for one provider, including ready/claimed/desired/lastError." },
       { command: "debug egress-proxy <providerId>", description: "Show provider-gateway egress proxy tunnel counts, stale tunnel diagnosis, active target summaries, and recent closed tunnel lifecycle without URL credential leakage." },
+      { command: "debug provider-rootfs <providerId>", description: "Run a read-only provider-gateway rootfs diagnostic over trans: image id, runtime smoke, docker system df snapshot errors, and recent host_ssh lifecycle lines." },
       { command: "debug dispatch [providerId] [docker.ps|provider.upgrade|host.ssh|microservice.http|echo] [--wait-ms N]", description: "Submit a real internal-core dispatch request for CLI debugging." },
       { command: "debug task <taskId|latest>", description: "Read a dispatched task record from internal core for CLI debugging." },
       { command: "network perf [--service code-queue --path /api/tasks/overview?limit=30 --count N --concurrency N --label before|after]", description: "Benchmark frontend -> backend-core -> provider/adapter user-service networking and report latency/proxy-mode distributions." },
@@ -544,12 +545,13 @@ function jobHelp(): unknown {
 
 function debugHelp(): unknown {
   return {
-    command: "debug health|ssh-pool|egress-proxy|dispatch|task",
+    command: "debug health|ssh-pool|egress-proxy|provider-rootfs|dispatch|task",
     output: "json",
     usage: [
       "bun scripts/cli.ts debug health",
       "bun scripts/cli.ts debug ssh-pool <providerId>",
       "bun scripts/cli.ts debug egress-proxy <providerId>",
+      "bun scripts/cli.ts debug provider-rootfs <providerId>",
       "bun scripts/cli.ts debug dispatch [providerId] [docker.ps|provider.upgrade|host.ssh|microservice.http|echo] [--wait-ms N]",
       "bun scripts/cli.ts debug task <taskId|latest>",
     ],