- Clear pending_user_turn after shortcut command persistence - Guard is_allowed against None allow_from values - Update pairing help text for two-arg revoke - Reuse format_expiry in CLI pairing list