@cleocode/adapters 2026.10.4 → 2026.10.5

package/dist/index.js

@@ -1617,154 +1617,11 @@ var init_identity = __esm({
   }
 });
 
-// packages/contracts/src/docs-taxonomy.ts
-var BUILTIN_DOC_KINDS, BUILTIN_DOC_KIND_VALUES;
-var init_docs_taxonomy = __esm({
-  "packages/contracts/src/docs-taxonomy.ts"() {
+// packages/contracts/src/operations/docs-lifecycle.ts
+var DOCS_LIFECYCLE_STATUSES;
+var init_docs_lifecycle = __esm({
+  "packages/contracts/src/operations/docs-lifecycle.ts"() {
     "use strict";
-    BUILTIN_DOC_KINDS = [
-      {
-        kind: "adr",
-        label: "ADR",
-        description: "Architectural decision record",
-        defaultOwnerKind: "task",
-        publishDir: "docs/adr",
-        requiresEntityId: true,
-        entityIdPattern: /^adr-\d{3,4}-[a-z0-9-]+$/,
-        requiredSections: ["Status", "Date", "Context", "Decision", "Consequences"]
-      },
-      {
-        kind: "spec",
-        label: "Spec",
-        description: "Technical specification",
-        defaultOwnerKind: "task",
-        publishDir: "docs/spec",
-        requiresEntityId: false,
-        requiredSections: ["Goal", "Non-Goals", "Requirements", "Out-of-Scope"]
-      },
-      {
-        kind: "research",
-        label: "Research",
-        description: "Investigation / research note",
-        defaultOwnerKind: "task",
-        publishDir: "docs/research",
-        requiresEntityId: false,
-        requiredSections: ["Question", "Findings", "Sources"]
-      },
-      {
-        kind: "handoff",
-        label: "Handoff",
-        description: "Session / agent handoff",
-        defaultOwnerKind: "session",
-        publishDir: "docs/handoff",
-        requiresEntityId: false,
-        requiredSections: ["Context", "State", "Next-Steps"]
-      },
-      {
-        kind: "note",
-        label: "Note",
-        description: "Agent observation / informal note",
-        defaultOwnerKind: "observation",
-        publishDir: "docs/note",
-        requiresEntityId: false,
-        requiredSections: []
-      },
-      {
-        kind: "llm-readme",
-        label: "LLM README",
-        description: "Machine-readable README (llms.txt)",
-        defaultOwnerKind: "project",
-        publishDir: ".",
-        requiresEntityId: false,
-        requiredSections: []
-      },
-      {
-        kind: "changeset",
-        label: "Changeset",
-        description: "Atomic change entry (release-note input)",
-        defaultOwnerKind: "task",
-        publishDir: ".changeset",
-        requiresEntityId: true,
-        entityIdPattern: /^t\d+-[a-z0-9-]+$/,
-        requiredSections: []
-      },
-      {
-        kind: "release-note",
-        label: "Release Note",
-        description: "Composed release notes",
-        defaultOwnerKind: "project",
-        publishDir: "docs/release",
-        requiresEntityId: true,
-        entityIdPattern: /^v\d{4}\.\d+\.\d+(-[a-z0-9-]+)?$/,
-        requiredSections: ["Changes", "Migration"]
-      },
-      {
-        kind: "plan",
-        label: "Plan",
-        description: "Epic / saga decomposition plan",
-        defaultOwnerKind: "task",
-        publishDir: "docs/plan",
-        requiresEntityId: false,
-        requiredSections: ["Goal", "Steps", "Owners"]
-      },
-      {
-        kind: "rcasd",
-        label: "RCASD",
-        description: "Root-cause analysis + scoped delivery",
-        defaultOwnerKind: "task",
-        publishDir: ".cleo/rcasd",
-        requiresEntityId: true,
-        entityIdPattern: /^t\d+(-.+)?$/,
-        requiredSections: ["Root-Cause", "Action", "Schedule", "Detection"]
-      }
-    ];
-    BUILTIN_DOC_KIND_VALUES = Object.freeze(
-      BUILTIN_DOC_KINDS.map((d) => d.kind)
-    );
-  }
-});
-
-// packages/contracts/src/operations/docs.ts
-import { z as z7 } from "zod";
-var DOCS_PROJECTION_PROPOSAL_SCHEMA, DOCS_PROJECTION_RECEIPT_SCHEMA, DOCS_LIFECYCLE_STATUSES;
-var init_docs = __esm({
-  "packages/contracts/src/operations/docs.ts"() {
-    "use strict";
-    init_docs_taxonomy();
-    DOCS_PROJECTION_PROPOSAL_SCHEMA = z7.object({
-      version: z7.literal(1),
-      operation: z7.literal("docs.projection"),
-      identity: z7.object({
-        projectId: z7.string().min(1),
-        projectRoot: z7.string().min(1),
-        actor: z7.string().min(1),
-        operation: z7.literal("docs.projection"),
-        idempotencyKey: z7.string().min(1)
-      }).strict(),
-      source: z7.object({
-        attachmentId: z7.string().min(1),
-        sha256: z7.string().regex(/^[a-f0-9]{64}$/),
-        ownerId: z7.string().min(1),
-        ownerType: z7.enum(["task", "session", "observation", "decision", "learning", "pattern"]),
-        label: z7.string().min(1)
-      }).strict(),
-      observation: z7.object({
-        kind: z7.literal("doc-attachment"),
-        attachmentId: z7.string().min(1),
-        ownerId: z7.string().min(1),
-        addedAt: z7.string().min(1),
-        slug: z7.string().optional(),
-        type: z7.string().optional()
-      }).strict()
-    }).strict();
-    DOCS_PROJECTION_RECEIPT_SCHEMA = z7.object({
-      version: z7.literal(1),
-      sourceHash: z7.string().regex(/^[a-f0-9]{64}$/),
-      graph: z7.enum(["completed", "disabled"]),
-      observationId: z7.string().min(1),
-      verifiedAt: z7.string().min(1),
-      actor: z7.string().min(1)
-    }).strict();
     DOCS_LIFECYCLE_STATUSES = [
       "draft",
       "proposed",
@@ -2914,7 +2771,7 @@ var requirementTaskParam, OPERATIONS;
 var init_operations_registry = __esm({
   "packages/contracts/src/dispatch/operations-registry.ts"() {
     "use strict";
-    init_docs();
+    init_docs_lifecycle();
     init_output_contracts_data();
     init_tasks();
     requirementTaskParam = {
@@ -13382,7 +13239,7 @@ var init_operations_registry = __esm({
 });
 
 // packages/contracts/src/docs/provenance.ts
-import { z as z8 } from "zod";
+import { z as z7 } from "zod";
 var PROVENANCE_NODE_KINDS, PROVENANCE_EDGE_RELATIONS, DOC_LIFECYCLE_STATUSES, provenanceNodeKindSchema, provenanceEdgeRelationSchema, docLifecycleStatusSchema, provenanceNodeBaseFields, provenanceDocNodeSchema, provenanceTaskNodeSchema, provenanceDecisionNodeSchema, provenanceSessionNodeSchema, provenanceMemoryNodeSchema, provenanceNodeSchema, provenanceEdgeSchema, docProvenanceResponseSchema;
 var init_provenance = __esm({
   "packages/contracts/src/docs/provenance.ts"() {
@@ -13409,108 +13266,215 @@ var init_provenance = __esm({
       "archived",
       "draft"
     ];
-    provenanceNodeKindSchema = z8.enum(PROVENANCE_NODE_KINDS);
-    provenanceEdgeRelationSchema = z8.enum(PROVENANCE_EDGE_RELATIONS);
-    docLifecycleStatusSchema = z8.enum(DOC_LIFECYCLE_STATUSES);
+    provenanceNodeKindSchema = z7.enum(PROVENANCE_NODE_KINDS);
+    provenanceEdgeRelationSchema = z7.enum(PROVENANCE_EDGE_RELATIONS);
+    docLifecycleStatusSchema = z7.enum(DOC_LIFECYCLE_STATUSES);
     provenanceNodeBaseFields = {
-      id: z8.string().min(1),
-      title: z8.string().min(1),
-      metadata: z8.record(z8.string(), z8.unknown()).optional()
+      id: z7.string().min(1),
+      title: z7.string().min(1),
+      metadata: z7.record(z7.string(), z7.unknown()).optional()
     };
-    provenanceDocNodeSchema = z8.object({
+    provenanceDocNodeSchema = z7.object({
       ...provenanceNodeBaseFields,
-      kind: z8.literal("doc"),
-      slug: z8.string().min(1),
-      docKind: z8.string().min(1),
+      kind: z7.literal("doc"),
+      slug: z7.string().min(1),
+      docKind: z7.string().min(1),
       lifecycleStatus: docLifecycleStatusSchema,
-      publishedAt: z8.string().min(1),
-      supersededAt: z8.string().min(1).optional(),
-      summary: z8.string().optional()
+      publishedAt: z7.string().min(1),
+      supersededAt: z7.string().min(1).optional(),
+      summary: z7.string().optional()
     });
-    provenanceTaskNodeSchema = z8.object({
+    provenanceTaskNodeSchema = z7.object({
       ...provenanceNodeBaseFields,
-      kind: z8.literal("task"),
-      taskType: z8.enum(["saga", "epic", "task", "subtask"]),
-      status: z8.enum(["pending", "in_progress", "done", "blocked", "cancelled", "archived"])
+      kind: z7.literal("task"),
+      taskType: z7.enum(["saga", "epic", "task", "subtask"]),
+      status: z7.enum(["pending", "in_progress", "done", "blocked", "cancelled", "archived"])
     });
-    provenanceDecisionNodeSchema = z8.object({
+    provenanceDecisionNodeSchema = z7.object({
       ...provenanceNodeBaseFields,
-      kind: z8.literal("decision"),
-      outcome: z8.enum(["proposed", "accepted", "rejected", "superseded"]),
-      decidedAt: z8.string().min(1)
+      kind: z7.literal("decision"),
+      outcome: z7.enum(["proposed", "accepted", "rejected", "superseded"]),
+      decidedAt: z7.string().min(1)
     });
-    provenanceSessionNodeSchema = z8.object({
+    provenanceSessionNodeSchema = z7.object({
       ...provenanceNodeBaseFields,
-      kind: z8.literal("session"),
-      startedAt: z8.string().min(1),
-      endedAt: z8.string().min(1).optional()
+      kind: z7.literal("session"),
+      startedAt: z7.string().min(1),
+      endedAt: z7.string().min(1).optional()
     });
-    provenanceMemoryNodeSchema = z8.object({
+    provenanceMemoryNodeSchema = z7.object({
       ...provenanceNodeBaseFields,
-      kind: z8.literal("memory"),
-      memoryType: z8.enum(["observation", "pattern", "decision", "diary"]),
-      recordedAt: z8.string().min(1)
+      kind: z7.literal("memory"),
+      memoryType: z7.enum(["observation", "pattern", "decision", "diary"]),
+      recordedAt: z7.string().min(1)
     });
-    provenanceNodeSchema = z8.discriminatedUnion("kind", [
+    provenanceNodeSchema = z7.discriminatedUnion("kind", [
       provenanceDocNodeSchema,
       provenanceTaskNodeSchema,
       provenanceDecisionNodeSchema,
       provenanceSessionNodeSchema,
       provenanceMemoryNodeSchema
     ]);
-    provenanceEdgeSchema = z8.object({
+    provenanceEdgeSchema = z7.object({
       relation: provenanceEdgeRelationSchema,
-      from: z8.string().min(1),
+      from: z7.string().min(1),
       fromKind: provenanceNodeKindSchema,
-      to: z8.string().min(1),
+      to: z7.string().min(1),
       toKind: provenanceNodeKindSchema,
-      addedAt: z8.string().min(1),
-      summary: z8.string().optional()
+      addedAt: z7.string().min(1),
+      summary: z7.string().optional()
     });
-    docProvenanceResponseSchema = z8.object({
-      nodes: z8.array(provenanceNodeSchema).readonly(),
-      edges: z8.array(provenanceEdgeSchema).readonly(),
-      totalNodes: z8.number().int().nonnegative(),
-      totalEdges: z8.number().int().nonnegative()
+    docProvenanceResponseSchema = z7.object({
+      nodes: z7.array(provenanceNodeSchema).readonly(),
+      edges: z7.array(provenanceEdgeSchema).readonly(),
+      totalNodes: z7.number().int().nonnegative(),
+      totalEdges: z7.number().int().nonnegative()
     });
   }
 });
 
 // packages/contracts/src/docs/read.ts
-import { z as z9 } from "zod";
+import { z as z8 } from "zod";
 var docFrontmatterSchema, docBodySchema, docReadResponseSchema;
 var init_read = __esm({
   "packages/contracts/src/docs/read.ts"() {
     "use strict";
-    docFrontmatterSchema = z9.object({
-      slug: z9.string(),
-      kind: z9.string().nullable(),
-      title: z9.string().nullable(),
-      summary: z9.string().nullable(),
-      lifecycleStatus: z9.string(),
-      docVersion: z9.number().int(),
-      ownerVersion: z9.string().nullable(),
-      supersedes: z9.string().nullable(),
-      supersededBy: z9.string().nullable(),
-      topics: z9.array(z9.string()).readonly(),
-      relatedTasks: z9.array(z9.string()).readonly(),
-      sha256: z9.string(),
-      createdAt: z9.string()
-    });
-    docBodySchema = z9.object({
-      encoding: z9.enum(["utf-8", "base64"]),
-      text: z9.string().optional(),
-      base64: z9.string().optional(),
-      sizeBytes: z9.number().int().nonnegative(),
-      mimeType: z9.string().nullable()
-    });
-    docReadResponseSchema = z9.object({
+    docFrontmatterSchema = z8.object({
+      slug: z8.string(),
+      kind: z8.string().nullable(),
+      title: z8.string().nullable(),
+      summary: z8.string().nullable(),
+      lifecycleStatus: z8.string(),
+      docVersion: z8.number().int(),
+      ownerVersion: z8.string().nullable(),
+      supersedes: z8.string().nullable(),
+      supersededBy: z8.string().nullable(),
+      topics: z8.array(z8.string()).readonly(),
+      relatedTasks: z8.array(z8.string()).readonly(),
+      sha256: z8.string(),
+      createdAt: z8.string()
+    });
+    docBodySchema = z8.object({
+      encoding: z8.enum(["utf-8", "base64"]),
+      text: z8.string().optional(),
+      base64: z8.string().optional(),
+      sizeBytes: z8.number().int().nonnegative(),
+      mimeType: z8.string().nullable()
+    });
+    docReadResponseSchema = z8.object({
       frontmatter: docFrontmatterSchema,
       body: docBodySchema
     });
   }
 });
 
+// packages/contracts/src/docs-taxonomy.ts
+var BUILTIN_DOC_KINDS, BUILTIN_DOC_KIND_VALUES;
+var init_docs_taxonomy = __esm({
+  "packages/contracts/src/docs-taxonomy.ts"() {
+    "use strict";
+    BUILTIN_DOC_KINDS = [
+      {
+        kind: "adr",
+        label: "ADR",
+        description: "Architectural decision record",
+        defaultOwnerKind: "task",
+        publishDir: "docs/adr",
+        requiresEntityId: true,
+        entityIdPattern: /^adr-\d{3,4}-[a-z0-9-]+$/,
+        requiredSections: ["Status", "Date", "Context", "Decision", "Consequences"]
+      },
+      {
+        kind: "spec",
+        label: "Spec",
+        description: "Technical specification",
+        defaultOwnerKind: "task",
+        publishDir: "docs/spec",
+        requiresEntityId: false,
+        requiredSections: ["Goal", "Non-Goals", "Requirements", "Out-of-Scope"]
+      },
+      {
+        kind: "research",
+        label: "Research",
+        description: "Investigation / research note",
+        defaultOwnerKind: "task",
+        publishDir: "docs/research",
+        requiresEntityId: false,
+        requiredSections: ["Question", "Findings", "Sources"]
+      },
+      {
+        kind: "handoff",
+        label: "Handoff",
+        description: "Session / agent handoff",
+        defaultOwnerKind: "session",
+        publishDir: "docs/handoff",
+        requiresEntityId: false,
+        requiredSections: ["Context", "State", "Next-Steps"]
+      },
+      {
+        kind: "note",
+        label: "Note",
+        description: "Agent observation / informal note",
+        defaultOwnerKind: "observation",
+        publishDir: "docs/note",
+        requiresEntityId: false,
+        requiredSections: []
+      },
+      {
+        kind: "llm-readme",
+        label: "LLM README",
+        description: "Machine-readable README (llms.txt)",
+        defaultOwnerKind: "project",
+        publishDir: ".",
+        requiresEntityId: false,
+        requiredSections: []
+      },
+      {
+        kind: "changeset",
+        label: "Changeset",
+        description: "Atomic change entry (release-note input)",
+        defaultOwnerKind: "task",
+        publishDir: ".changeset",
+        requiresEntityId: true,
+        entityIdPattern: /^t\d+-[a-z0-9-]+$/,
+        requiredSections: []
+      },
+      {
+        kind: "release-note",
+        label: "Release Note",
+        description: "Composed release notes",
+        defaultOwnerKind: "project",
+        publishDir: "docs/release",
+        requiresEntityId: true,
+        entityIdPattern: /^v\d{4}\.\d+\.\d+(-[a-z0-9-]+)?$/,
+        requiredSections: ["Changes", "Migration"]
+      },
+      {
+        kind: "plan",
+        label: "Plan",
+        description: "Epic / saga decomposition plan",
+        defaultOwnerKind: "task",
+        publishDir: "docs/plan",
+        requiresEntityId: false,
+        requiredSections: ["Goal", "Steps", "Owners"]
+      },
+      {
+        kind: "rcasd",
+        label: "RCASD",
+        description: "Root-cause analysis + scoped delivery",
+        defaultOwnerKind: "task",
+        publishDir: ".cleo/rcasd",
+        requiresEntityId: true,
+        entityIdPattern: /^t\d+(-.+)?$/,
+        requiredSections: ["Root-Cause", "Action", "Schedule", "Detection"]
+      }
+    ];
+    BUILTIN_DOC_KIND_VALUES = Object.freeze(
+      BUILTIN_DOC_KINDS.map((d) => d.kind)
+    );
+  }
+});
+
 // packages/contracts/src/engine-result.ts
 var init_engine_result = __esm({
   "packages/contracts/src/engine-result.ts"() {
@@ -13564,7 +13528,7 @@ var init_errors = __esm({
 });
 
 // packages/contracts/src/evidence-atom-schema.ts
-import { z as z10 } from "zod";
+import { z as z9 } from "zod";
 var EVIDENCE_ATOM_KINDS, PARSER_PREFIXES, KIND_BOUNDARY_REGEX, commitAtomSchema, filesAtomSchema, testRunAtomSchema, toolAtomSchema, urlAtomSchema, noteAtomSchema, decisionAtomSchema, prAtomSchema, ciAtomSchema, locDropAtomSchema, callsiteCoverageAtomSchema, AC_UUID_REGEX, AC_ALIAS_REGEX, SATISFIES_TASK_ID_REGEX, SATISFIES_VERSION_PIN_REGEX, satisfiesAtomSchema, EvidenceAtomSchema, GATE_EVIDENCE_REQUIREMENTS, ATOM_EXAMPLES;
 var init_evidence_atom_schema = __esm({
   "packages/contracts/src/evidence-atom-schema.ts"() {
@@ -13585,73 +13549,73 @@ var init_evidence_atom_schema = __esm({
     ];
     PARSER_PREFIXES = [...EVIDENCE_ATOM_KINDS, "state"];
     KIND_BOUNDARY_REGEX = new RegExp(`;(?=\\s*(?:${PARSER_PREFIXES.join("|")})\\s*:)`, "g");
-    commitAtomSchema = z10.object({
-      kind: z10.literal("commit"),
-      sha: z10.string().regex(/^[0-9a-f]{7,40}$/i, "commit sha must be 7-40 hex characters")
-    });
-    filesAtomSchema = z10.object({
-      kind: z10.literal("files"),
-      paths: z10.array(z10.string().min(1)).min(1, "files atom requires at least one path")
-    });
-    testRunAtomSchema = z10.object({
-      kind: z10.literal("test-run"),
-      path: z10.string().min(1, "test-run atom requires a non-empty path")
-    });
-    toolAtomSchema = z10.object({
-      kind: z10.literal("tool"),
-      tool: z10.string().min(1, "tool atom requires a non-empty tool name")
-    });
-    urlAtomSchema = z10.object({
-      kind: z10.literal("url"),
-      url: z10.string().min(1).regex(/^https?:\/\//, "url atom must start with http:// or https://")
-    });
-    noteAtomSchema = z10.object({
-      kind: z10.literal("note"),
-      note: z10.string().min(1, "note atom must be non-empty").max(512, "note atom is too long (max 512 chars)")
-    });
-    decisionAtomSchema = z10.object({
-      kind: z10.literal("decision"),
-      decisionId: z10.string().min(1, "decision atom requires a non-empty decision ID")
-    });
-    prAtomSchema = z10.object({
-      kind: z10.literal("pr"),
-      prNumber: z10.number().int().positive("pr atom requires a positive integer PR number"),
-      componentPrNumber: z10.number().int().positive().optional()
-    });
-    ciAtomSchema = z10.object({
-      kind: z10.literal("ci"),
-      prNumber: z10.number().int().positive("ci atom requires a positive integer PR number"),
-      componentPrNumber: z10.number().int().positive().optional()
-    });
-    locDropAtomSchema = z10.object({
-      kind: z10.literal("loc-drop"),
-      fromLines: z10.number().int().nonnegative("loc-drop fromLines must be \u2265 0"),
-      toLines: z10.number().int().nonnegative("loc-drop toLines must be \u2265 0")
-    });
-    callsiteCoverageAtomSchema = z10.object({
-      kind: z10.literal("callsite-coverage"),
-      symbolName: z10.string().min(1, "callsite-coverage atom requires a non-empty symbolName"),
-      relativeSourcePath: z10.string().min(1, "callsite-coverage atom requires a non-empty relativeSourcePath")
+    commitAtomSchema = z9.object({
+      kind: z9.literal("commit"),
+      sha: z9.string().regex(/^[0-9a-f]{7,40}$/i, "commit sha must be 7-40 hex characters")
+    });
+    filesAtomSchema = z9.object({
+      kind: z9.literal("files"),
+      paths: z9.array(z9.string().min(1)).min(1, "files atom requires at least one path")
+    });
+    testRunAtomSchema = z9.object({
+      kind: z9.literal("test-run"),
+      path: z9.string().min(1, "test-run atom requires a non-empty path")
+    });
+    toolAtomSchema = z9.object({
+      kind: z9.literal("tool"),
+      tool: z9.string().min(1, "tool atom requires a non-empty tool name")
+    });
+    urlAtomSchema = z9.object({
+      kind: z9.literal("url"),
+      url: z9.string().min(1).regex(/^https?:\/\//, "url atom must start with http:// or https://")
+    });
+    noteAtomSchema = z9.object({
+      kind: z9.literal("note"),
+      note: z9.string().min(1, "note atom must be non-empty").max(512, "note atom is too long (max 512 chars)")
+    });
+    decisionAtomSchema = z9.object({
+      kind: z9.literal("decision"),
+      decisionId: z9.string().min(1, "decision atom requires a non-empty decision ID")
+    });
+    prAtomSchema = z9.object({
+      kind: z9.literal("pr"),
+      prNumber: z9.number().int().positive("pr atom requires a positive integer PR number"),
+      componentPrNumber: z9.number().int().positive().optional()
+    });
+    ciAtomSchema = z9.object({
+      kind: z9.literal("ci"),
+      prNumber: z9.number().int().positive("ci atom requires a positive integer PR number"),
+      componentPrNumber: z9.number().int().positive().optional()
+    });
+    locDropAtomSchema = z9.object({
+      kind: z9.literal("loc-drop"),
+      fromLines: z9.number().int().nonnegative("loc-drop fromLines must be \u2265 0"),
+      toLines: z9.number().int().nonnegative("loc-drop toLines must be \u2265 0")
+    });
+    callsiteCoverageAtomSchema = z9.object({
+      kind: z9.literal("callsite-coverage"),
+      symbolName: z9.string().min(1, "callsite-coverage atom requires a non-empty symbolName"),
+      relativeSourcePath: z9.string().min(1, "callsite-coverage atom requires a non-empty relativeSourcePath")
     });
     AC_UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[45][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
     AC_ALIAS_REGEX = /^AC[0-9]{1,4}$/;
     SATISFIES_TASK_ID_REGEX = /^T[0-9]{1,7}$/;
     SATISFIES_VERSION_PIN_REGEX = /^[0-9]{14}$/;
-    satisfiesAtomSchema = z10.object({
-      kind: z10.literal("satisfies"),
+    satisfiesAtomSchema = z9.object({
+      kind: z9.literal("satisfies"),
       /** Target task ID — `T<1-7 digits>` per ADR-079-r2 §2.1. */
-      targetTaskId: z10.string().regex(SATISFIES_TASK_ID_REGEX, "satisfies atom targetTaskId must match /^T[0-9]{1,7}$/"),
+      targetTaskId: z9.string().regex(SATISFIES_TASK_ID_REGEX, "satisfies atom targetTaskId must match /^T[0-9]{1,7}$/"),
       /** Lowercase UUIDv4/v5 — populated for the canonical form; undefined for alias form. */
-      targetAcId: z10.string().regex(AC_UUID_REGEX, "satisfies atom targetAcId must be a lowercase UUIDv4/v5").optional(),
+      targetAcId: z9.string().regex(AC_UUID_REGEX, "satisfies atom targetAcId must be a lowercase UUIDv4/v5").optional(),
       /** Positional alias `AC<1-4 digits>` — populated for alias form; undefined for UUID form. */
-      targetAcAlias: z10.string().regex(AC_ALIAS_REGEX, "satisfies atom targetAcAlias must match /^AC[0-9]{1,4}$/").optional(),
+      targetAcAlias: z9.string().regex(AC_ALIAS_REGEX, "satisfies atom targetAcAlias must match /^AC[0-9]{1,4}$/").optional(),
       /** Optional `@<14-digit YYYYMMDDhhmmss>` pin captured at mint time. */
-      versionPin: z10.string().regex(
+      versionPin: z9.string().regex(
         SATISFIES_VERSION_PIN_REGEX,
         "satisfies atom versionPin must be 14 digits (YYYYMMDDhhmmss)"
       ).optional()
     });
-    EvidenceAtomSchema = z10.discriminatedUnion("kind", [
+    EvidenceAtomSchema = z9.discriminatedUnion("kind", [
       commitAtomSchema,
       filesAtomSchema,
       testRunAtomSchema,
@@ -13703,58 +13667,58 @@ var init_evidence_atom_schema = __esm({
 });
 
 // packages/contracts/src/evidence-record-schema.ts
-import { z as z11 } from "zod";
+import { z as z10 } from "zod";
 var evidenceBaseSchema, implDiffRecordSchema, validateSpecCheckRecordSchema, testOutputRecordSchema, lintReportRecordSchema, commandOutputRecordSchema, evidenceRecordSchema;
 var init_evidence_record_schema = __esm({
   "packages/contracts/src/evidence-record-schema.ts"() {
     "use strict";
-    evidenceBaseSchema = z11.object({
+    evidenceBaseSchema = z10.object({
       /** Identity string of the agent that produced this record. */
-      agentIdentity: z11.string().min(1),
+      agentIdentity: z10.string().min(1),
       /** SHA-256 hex digest (64 chars) of the attached artifact. */
-      attachmentSha256: z11.string().length(64),
+      attachmentSha256: z10.string().length(64),
       /** ISO 8601 timestamp at which the action ran. */
-      ranAt: z11.string().datetime(),
+      ranAt: z10.string().datetime(),
       /** Wall-clock duration of the action in milliseconds. */
-      durationMs: z11.number().nonnegative()
+      durationMs: z10.number().nonnegative()
     });
     implDiffRecordSchema = evidenceBaseSchema.extend({
-      kind: z11.literal("impl-diff"),
-      phase: z11.literal("implement"),
-      filesChanged: z11.array(z11.string().min(1)).min(1),
-      linesAdded: z11.number().int().nonnegative(),
-      linesRemoved: z11.number().int().nonnegative()
+      kind: z10.literal("impl-diff"),
+      phase: z10.literal("implement"),
+      filesChanged: z10.array(z10.string().min(1)).min(1),
+      linesAdded: z10.number().int().nonnegative(),
+      linesRemoved: z10.number().int().nonnegative()
     });
     validateSpecCheckRecordSchema = evidenceBaseSchema.extend({
-      kind: z11.literal("validate-spec-check"),
-      phase: z11.literal("validate"),
-      reqIdsChecked: z11.array(z11.string().min(1)).min(1),
-      passed: z11.boolean(),
-      details: z11.string().min(1)
+      kind: z10.literal("validate-spec-check"),
+      phase: z10.literal("validate"),
+      reqIdsChecked: z10.array(z10.string().min(1)).min(1),
+      passed: z10.boolean(),
+      details: z10.string().min(1)
     });
     testOutputRecordSchema = evidenceBaseSchema.extend({
-      kind: z11.literal("test-output"),
-      phase: z11.literal("test"),
-      command: z11.string().min(1),
-      exitCode: z11.number().int(),
-      testsPassed: z11.number().int().nonnegative(),
-      testsFailed: z11.number().int().nonnegative()
+      kind: z10.literal("test-output"),
+      phase: z10.literal("test"),
+      command: z10.string().min(1),
+      exitCode: z10.number().int(),
+      testsPassed: z10.number().int().nonnegative(),
+      testsFailed: z10.number().int().nonnegative()
     });
     lintReportRecordSchema = evidenceBaseSchema.extend({
-      kind: z11.literal("lint-report"),
-      phase: z11.enum(["implement", "test"]),
-      tool: z11.string().min(1),
-      passed: z11.boolean(),
-      warnings: z11.number().int().nonnegative(),
-      errors: z11.number().int().nonnegative()
+      kind: z10.literal("lint-report"),
+      phase: z10.enum(["implement", "test"]),
+      tool: z10.string().min(1),
+      passed: z10.boolean(),
+      warnings: z10.number().int().nonnegative(),
+      errors: z10.number().int().nonnegative()
     });
     commandOutputRecordSchema = evidenceBaseSchema.extend({
-      kind: z11.literal("command-output"),
-      phase: z11.enum(["implement", "validate", "test"]),
-      cmd: z11.string().min(1),
-      exitCode: z11.number().int()
+      kind: z10.literal("command-output"),
+      phase: z10.enum(["implement", "validate", "test"]),
+      cmd: z10.string().min(1),
+      exitCode: z10.number().int()
     });
-    evidenceRecordSchema = z11.discriminatedUnion("kind", [
+    evidenceRecordSchema = z10.discriminatedUnion("kind", [
       implDiffRecordSchema,
       validateSpecCheckRecordSchema,
       testOutputRecordSchema,
@@ -14223,6 +14187,21 @@ function checkPending(task) {
 function rulePending(task) {
   return { task, reason: "the typed merge-rule registry does not define it yet (T12344 item)" };
 }
+function implemented(entry) {
+  const { pending: _pending, ...rest } = entry;
+  return { ...rest, runtimeGate: MERGE_ENGINE_GATE };
+}
+function implementedCheck(entry, functionName) {
+  const { pending: _pending, ...rest } = entry;
+  return {
+    ...rest,
+    check: {
+      module: "packages/core/src/store/sync/apply/post-apply.ts",
+      functionName,
+      footprint: entry.check?.footprint ?? []
+    }
+  };
+}
 function trigger(id, tables, triggers, inventory, reason) {
   return { id, class: "trigger-covered", tables, sites: [], triggers, inventory, reason };
 }
@@ -14250,10 +14229,14 @@ function rule(id, task, table, columns, inventory, reason, tables = [table]) {
     reason
   };
 }
-var SYNC_WRITE_INVARIANTS;
+var MERGE_ENGINE_GATE, SYNC_WRITE_INVARIANTS;
 var init_sync_write_invariants = __esm({
   "packages/contracts/src/invariants/sync-write-invariants.ts"() {
     "use strict";
+    MERGE_ENGINE_GATE = {
+      module: "packages/core/src/store/sync/merge/engine.ts",
+      functionName: "applyOp"
+    };
     SYNC_WRITE_INVARIANTS = Object.freeze([
       // §3.6.2: RAISE guards and UNIQUE indexes a migration creates on synced tables.
       trigger(
@@ -14334,13 +14317,16 @@ var init_sync_write_invariants = __esm({
         "at most one active account per provider (partial UNIQUE)"
       ),
       // §3.6.5: post-apply check families (T12344 items).
-      pac(
-        "task.tree.shape",
-        "PAC-01",
-        "T12922",
-        ["tasks_tasks"],
-        ["rows with a changed parent_id or type", "their direct children and ancestor chain"],
-        "saga\u2192epic\u2192task\u2192subtask matrix, non-saga has a parent, depth \u2264 3, no self-parent"
+      implementedCheck(
+        pac(
+          "task.tree.shape",
+          "PAC-01",
+          "T12922",
+          ["tasks_tasks"],
+          ["rows with a changed parent_id or type", "their direct children and ancestor chain"],
+          "saga\u2192epic\u2192task\u2192subtask matrix, non-saga has a parent, depth \u2264 3, no self-parent"
+        ),
+        "checkTaskTreeShape"
       ),
       pac(
         "task.terminal-parent.live-children",
@@ -14350,13 +14336,12 @@ var init_sync_write_invariants = __esm({
         ["rows whose status, stage or parent changed", "their parent and siblings"],
         "no terminal parent with a live child; epic stage \u2265 children; rollup re-evaluated"
       ),
-      pac(
+      trigger(
         "task.dependency.graph",
-        "PAC-03",
-        "T12924",
         ["tasks_task_dependencies", "tasks_tasks"],
-        ["dependency edges inserted in the page", "reachability from each depends_on"],
-        "dependencies are acyclic, with no self-edge"
+        ["tasks_task_dependencies_cycle_guard_insert", "tasks_task_dependencies_cycle_guard_update"],
+        ["PAC-03"],
+        "dependencies are acyclic, with no self-edge: enforced by the T12886 cycle guards on apply (a guard conflict)"
       ),
       pac(
         "task.done.evidence",
@@ -14446,38 +14431,47 @@ var init_sync_write_invariants = __esm({
         ["the owning rows"],
         "derived counters and cross-column facts agree with their rows"
       ),
-      pac(
-        "apply.preconditions",
-        "PAC-15",
-        "T12936",
-        ["tasks_tasks"],
-        ["the whole page"],
-        "no apply while the local twin collapse has failed; restore is a re-baseline"
+      implementedCheck(
+        pac(
+          "apply.preconditions",
+          "PAC-15",
+          "T12936",
+          ["tasks_tasks"],
+          ["the whole page"],
+          "no apply while the local twin collapse has failed; restore is a re-baseline"
+        ),
+        "checkApplyPreconditions"
       ),
       // §3.6.6: typed merge rules (T12344).
-      rule(
-        "task.status.absorbing",
-        "T12937",
-        "tasks_tasks",
-        ["status", "completed_at", "cancelled_at", "cancellation_reason", "pipeline_stage"],
-        ["V18", "V20", "C22", "P40", "P46", "P47"],
-        "done, cancelled and archived are absorbing; leaving them needs an explicit op"
+      implemented(
+        rule(
+          "task.status.absorbing",
+          "T12937",
+          "tasks_tasks",
+          ["status", "completed_at", "cancelled_at", "cancellation_reason", "pipeline_stage"],
+          ["V18", "V20", "C22", "P40", "P46", "P47"],
+          "done, cancelled and archived are absorbing; leaving them needs an explicit op"
+        )
       ),
-      rule(
-        "task.pipeline-stage.max",
-        "T12938",
-        "tasks_tasks",
-        ["pipeline_stage"],
-        ["V21", "C20", "P01", "F3"],
-        "pipeline_stage is the maximum by STAGE_ORDER, except an explicit restore"
+      implemented(
+        rule(
+          "task.pipeline-stage.max",
+          "T12938",
+          "tasks_tasks",
+          ["pipeline_stage"],
+          ["V21", "C20", "P01", "F3"],
+          "pipeline_stage is the maximum by STAGE_ORDER, except an explicit restore"
+        )
       ),
-      rule(
-        "task.verification.frozen-on-done",
-        "T12939",
-        "tasks_tasks",
-        ["verification_json"],
-        ["C01", "C02", "C03", "C17"],
-        "verification is frozen once done; otherwise merged per gate"
+      implemented(
+        rule(
+          "task.verification.frozen-on-done",
+          "T12939",
+          "tasks_tasks",
+          ["verification_json"],
+          ["C01", "C02", "C03", "C17"],
+          "verification is frozen once done; otherwise merged per gate"
+        )
       ),
       rule(
         "session.status.terminal",
@@ -14613,111 +14607,111 @@ var init_lafs = __esm({
 });
 
 // packages/contracts/src/lease-ipc/messages.ts
-import { z as z12 } from "zod";
+import { z as z11 } from "zod";
 var LeaseScopeSchema, LeaseLaneSchema, LeaseAcquireRequestSchema, LeaseReleaseRequestSchema, LeaseRenewRequestSchema, RateCheckRequestSchema, ToolGrantRequestSchema, QueuePriorityClassSchema, QueueAdmitRequestSchema, WorkerHeartbeatRequestSchema, ResourceAdmitRequestSchema, ResourceReleaseRequestSchema, LeaseIpcRequestSchema, LeaseGrantedResponseSchema, LeaseQueuedResponseSchema, LeaseDeniedResponseSchema, RateResultResponseSchema, ToolGrantedResponseSchema, LeaseRevokedResponseSchema, ChildKilledUnresponsiveResponseSchema, QueueAdmitDispositionSchema, QueueAdmitResultResponseSchema, HeartbeatAckResponseSchema, ResourceAdmitDispositionSchema, ResourceAdmitResultResponseSchema, ResourceReleaseResultResponseSchema, LeaseErrorResponseSchema, LeaseIpcResponseSchema, LeaseIpcRequestEnvelopeSchema, LeaseIpcResponseEnvelopeSchema, LeaseIpcEnvelopeSchema, LEASE_IPC_REQUEST_KINDS, LEASE_IPC_RESPONSE_KINDS, LEASE_IPC_MESSAGE_KINDS;
 var init_messages2 = __esm({
   "packages/contracts/src/lease-ipc/messages.ts"() {
     "use strict";
-    LeaseScopeSchema = z12.enum(["project", "global"]);
-    LeaseLaneSchema = z12.enum(["tasks", "brain", "bulk"]);
-    LeaseAcquireRequestSchema = z12.object({
+    LeaseScopeSchema = z11.enum(["project", "global"]);
+    LeaseLaneSchema = z11.enum(["tasks", "brain", "bulk"]);
+    LeaseAcquireRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("lease_acquire"),
+      kind: z11.literal("lease_acquire"),
       /** The cleo.db scope being arbitrated. */
       scope: LeaseScopeSchema,
       /** The write lane within the scope. */
       lane: LeaseLaneSchema,
       /** Process+lane holder identity. */
-      holder_id: z12.string().min(1),
+      holder_id: z11.string().min(1),
       /** Advisory priority — lower acquires sooner. `0` = highest. */
-      priority: z12.number().int().min(0).max(255),
+      priority: z11.number().int().min(0).max(255),
       /** Lease time-to-live in milliseconds. */
-      ttl_ms: z12.number().int().nonnegative(),
+      ttl_ms: z11.number().int().nonnegative(),
       /** When true, a same-holder acquire re-enters (refcount++) rather than queuing. */
-      reentrant: z12.boolean()
+      reentrant: z11.boolean()
     }).strict();
-    LeaseReleaseRequestSchema = z12.object({
+    LeaseReleaseRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("lease_release"),
+      kind: z11.literal("lease_release"),
       /** The cleo.db scope being arbitrated. */
       scope: LeaseScopeSchema,
       /** The write lane within the scope. */
       lane: LeaseLaneSchema,
       /** Process+lane holder identity. */
-      holder_id: z12.string().min(1),
+      holder_id: z11.string().min(1),
       /** The epoch fence the holder acquired — a stale epoch no-ops. */
-      epoch: z12.number().int().nonnegative()
+      epoch: z11.number().int().nonnegative()
     }).strict();
-    LeaseRenewRequestSchema = z12.object({
+    LeaseRenewRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("lease_renew"),
+      kind: z11.literal("lease_renew"),
       /** The cleo.db scope being arbitrated. */
       scope: LeaseScopeSchema,
       /** The write lane within the scope. */
       lane: LeaseLaneSchema,
       /** Process+lane holder identity. */
-      holder_id: z12.string().min(1),
+      holder_id: z11.string().min(1),
       /** The epoch fence the holder acquired (epoch-guarded renew). */
-      epoch: z12.number().int().nonnegative()
+      epoch: z11.number().int().nonnegative()
     }).strict();
-    RateCheckRequestSchema = z12.object({
+    RateCheckRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("rate_check"),
+      kind: z11.literal("rate_check"),
       /** The cleo.db scope being checked. */
       scope: LeaseScopeSchema,
       /** The write lane within the scope. */
       lane: LeaseLaneSchema,
       /** Estimated bytes the caller intends to write. */
-      est_bytes: z12.number().int().nonnegative()
+      est_bytes: z11.number().int().nonnegative()
     }).strict();
-    ToolGrantRequestSchema = z12.object({
+    ToolGrantRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("tool_grant"),
+      kind: z11.literal("tool_grant"),
       /** The tool name being requested. */
-      tool: z12.string().min(1),
+      tool: z11.string().min(1),
       /** The requesting holder identity. */
-      holder_id: z12.string().min(1)
+      holder_id: z11.string().min(1)
     }).strict();
-    QueuePriorityClassSchema = z12.enum(["lead", "worker", "background"]);
-    QueueAdmitRequestSchema = z12.object({
+    QueuePriorityClassSchema = z11.enum(["lead", "worker", "background"]);
+    QueueAdmitRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("queue_admit"),
+      kind: z11.literal("queue_admit"),
       /** The LLM provider id the call targets (rate budget is per-provider). */
-      provider: z12.string().min(1),
+      provider: z11.string().min(1),
       /** The caller's priority class (lead > worker > background). */
       priority_class: QueuePriorityClassSchema,
       /** The caller's estimate of the request's token cost (debited on admit). */
-      est_tokens: z12.number().int().nonnegative(),
+      est_tokens: z11.number().int().nonnegative(),
       /** The child the call belongs to (in-flight tracking — the watchdog seam). */
-      child_id: z12.string().min(1)
+      child_id: z11.string().min(1)
     }).strict();
-    WorkerHeartbeatRequestSchema = z12.object({
+    WorkerHeartbeatRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("worker_heartbeat"),
+      kind: z11.literal("worker_heartbeat"),
       /** The logical id of the heartbeating child (matches the registry key). */
-      child_id: z12.string().min(1),
+      child_id: z11.string().min(1),
       /** The worker's own view of whether it is currently inside an LLM call. */
-      in_flight_llm: z12.boolean()
+      in_flight_llm: z11.boolean()
     }).strict();
-    ResourceAdmitRequestSchema = z12.object({
+    ResourceAdmitRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("resource_admit"),
+      kind: z11.literal("resource_admit"),
       /** The resource class (e.g. `"db-heavy"`, `"full-build"`, `"test-run"`). */
-      class: z12.string().min(1),
+      class: z11.string().min(1),
       /** The caller holding the slot — process/worktree-unique; the release key. */
-      holder_id: z12.string().min(1),
+      holder_id: z11.string().min(1),
       /** The client-computed budget: the max concurrent holders for this class. */
-      budget: z12.number().int().nonnegative()
+      budget: z11.number().int().nonnegative()
     }).strict();
-    ResourceReleaseRequestSchema = z12.object({
+    ResourceReleaseRequestSchema = z11.object({
       /** Tag discriminating this request variant. */
-      kind: z12.literal("resource_release"),
+      kind: z11.literal("resource_release"),
       /** The resource class the slot belongs to. */
-      class: z12.string().min(1),
+      class: z11.string().min(1),
       /** The holder that was admitted (matches the admit `holder_id`). */
-      holder_id: z12.string().min(1)
+      holder_id: z11.string().min(1)
     }).strict();
-    LeaseIpcRequestSchema = z12.discriminatedUnion("kind", [
+    LeaseIpcRequestSchema = z11.discriminatedUnion("kind", [
       LeaseAcquireRequestSchema,
       LeaseReleaseRequestSchema,
       LeaseRenewRequestSchema,
@@ -14728,133 +14722,133 @@ var init_messages2 = __esm({
       ResourceAdmitRequestSchema,
       ResourceReleaseRequestSchema
     ]);
-    LeaseGrantedResponseSchema = z12.object({
+    LeaseGrantedResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("lease_granted"),
+      kind: z11.literal("lease_granted"),
       /** The granted cleo.db scope. */
       scope: LeaseScopeSchema,
       /** The granted write lane. */
       lane: LeaseLaneSchema,
       /** The holder the lease was granted to. */
-      holder_id: z12.string().min(1),
+      holder_id: z11.string().min(1),
       /** The monotonic epoch fence assigned to this grant. */
-      epoch: z12.number().int().nonnegative(),
+      epoch: z11.number().int().nonnegative(),
       /** The lease TTL in milliseconds. */
-      ttl_ms: z12.number().int().nonnegative(),
+      ttl_ms: z11.number().int().nonnegative(),
       /** Absolute expiry timestamp (epoch ms) for this grant. */
-      expires_at_ms: z12.number().int().nonnegative()
+      expires_at_ms: z11.number().int().nonnegative()
     }).strict();
-    LeaseQueuedResponseSchema = z12.object({
+    LeaseQueuedResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("lease_queued"),
+      kind: z11.literal("lease_queued"),
       /** The queued cleo.db scope. */
       scope: LeaseScopeSchema,
       /** The queued write lane. */
       lane: LeaseLaneSchema,
       /** The monotonic ticket assigned for FIFO tiebreak. */
-      ticket: z12.number().int().nonnegative(),
+      ticket: z11.number().int().nonnegative(),
       /** Number of waiters ahead of this one. */
-      ahead: z12.number().int().nonnegative()
+      ahead: z11.number().int().nonnegative()
     }).strict();
-    LeaseDeniedResponseSchema = z12.object({
+    LeaseDeniedResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("lease_denied"),
+      kind: z11.literal("lease_denied"),
       /** The denied cleo.db scope. */
       scope: LeaseScopeSchema,
       /** Machine-readable denial code (e.g. `E_LEASE_UNAVAILABLE`). */
-      code: z12.string().min(1),
+      code: z11.string().min(1),
       /** Human-readable denial message. */
-      message: z12.string()
+      message: z11.string()
     }).strict();
-    RateResultResponseSchema = z12.object({
+    RateResultResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("rate_result"),
+      kind: z11.literal("rate_result"),
       /** The checked cleo.db scope. */
       scope: LeaseScopeSchema,
       /** Whether the write is within budget. */
-      ok: z12.boolean(),
+      ok: z11.boolean(),
       /** Suggested back-off in milliseconds when `ok` is false. */
-      retry_after_ms: z12.number().int().nonnegative(),
+      retry_after_ms: z11.number().int().nonnegative(),
       /** Remaining token budget for the scope. */
-      tokens_remaining: z12.number().int().nonnegative()
+      tokens_remaining: z11.number().int().nonnegative()
     }).strict();
-    ToolGrantedResponseSchema = z12.object({
+    ToolGrantedResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("tool_granted"),
+      kind: z11.literal("tool_granted"),
       /** The granted tool name. */
-      tool: z12.string().min(1),
+      tool: z11.string().min(1),
       /** The holder the tool grant was issued to. */
-      holder_id: z12.string().min(1)
+      holder_id: z11.string().min(1)
     }).strict();
-    LeaseRevokedResponseSchema = z12.object({
+    LeaseRevokedResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("lease_revoked"),
+      kind: z11.literal("lease_revoked"),
       /** The revoked cleo.db scope. */
       scope: LeaseScopeSchema,
       /** The revoked write lane. */
       lane: LeaseLaneSchema,
       /** The holder whose lease was revoked. */
-      holder_id: z12.string().min(1),
+      holder_id: z11.string().min(1),
       /** Human-readable reason for the revocation. */
-      reason: z12.string()
+      reason: z11.string()
     }).strict();
-    ChildKilledUnresponsiveResponseSchema = z12.object({
+    ChildKilledUnresponsiveResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("child_killed_unresponsive"),
+      kind: z11.literal("child_killed_unresponsive"),
       /** Logical id of the killed child. */
-      child_id: z12.string().min(1),
+      child_id: z11.string().min(1),
       /** The holder identity the killed child held the lease as. */
-      holder_id: z12.string().min(1),
+      holder_id: z11.string().min(1),
       /** The cleo.db scope the killed child held the lease in. */
       scope: LeaseScopeSchema,
       /** Human-readable reason for the kill. */
-      reason: z12.string()
+      reason: z11.string()
     }).strict();
-    QueueAdmitDispositionSchema = z12.enum(["admitted", "deferred"]);
-    QueueAdmitResultResponseSchema = z12.object({
+    QueueAdmitDispositionSchema = z11.enum(["admitted", "deferred"]);
+    QueueAdmitResultResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("queue_admit_result"),
+      kind: z11.literal("queue_admit_result"),
       /** Whether the LLM call was admitted or deferred. */
       disposition: QueueAdmitDispositionSchema,
       /** Back-off in ms before re-requesting (0 when admitted). */
-      retry_after_ms: z12.number().int().nonnegative(),
+      retry_after_ms: z11.number().int().nonnegative(),
       /** Remaining provider token budget after this decision. */
-      tokens_remaining: z12.number().int().nonnegative(),
+      tokens_remaining: z11.number().int().nonnegative(),
       /** Number of higher/equal-priority waiters ahead (0 when admitted). */
-      queue_position: z12.number().int().nonnegative()
+      queue_position: z11.number().int().nonnegative()
     }).strict();
-    HeartbeatAckResponseSchema = z12.object({
+    HeartbeatAckResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("heartbeat_ack")
+      kind: z11.literal("heartbeat_ack")
     }).strict();
-    ResourceAdmitDispositionSchema = z12.enum(["admitted", "deferred"]);
-    ResourceAdmitResultResponseSchema = z12.object({
+    ResourceAdmitDispositionSchema = z11.enum(["admitted", "deferred"]);
+    ResourceAdmitResultResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("resource_admit_result"),
+      kind: z11.literal("resource_admit_result"),
       /** Whether the heavy op was admitted or deferred. */
       disposition: ResourceAdmitDispositionSchema,
       /** Back-off in ms before re-requesting (0 when admitted). */
-      retry_after_ms: z12.number().int().nonnegative(),
+      retry_after_ms: z11.number().int().nonnegative(),
       /** Remaining slots for the class after this decision. */
-      slots_remaining: z12.number().int().nonnegative()
+      slots_remaining: z11.number().int().nonnegative()
     }).strict();
-    ResourceReleaseResultResponseSchema = z12.object({
+    ResourceReleaseResultResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("resource_release_result"),
+      kind: z11.literal("resource_release_result"),
       /** Whether a held slot was actually released (false = no such holder). */
-      released: z12.boolean(),
+      released: z11.boolean(),
       /** Remaining in-flight holders for the class after the release. */
-      slots_remaining: z12.number().int().nonnegative()
+      slots_remaining: z11.number().int().nonnegative()
     }).strict();
-    LeaseErrorResponseSchema = z12.object({
+    LeaseErrorResponseSchema = z11.object({
       /** Tag discriminating this response variant. */
-      kind: z12.literal("error"),
+      kind: z11.literal("error"),
       /** Machine-readable error code (e.g. `E_LEASE_BAD_VERSION`, `E_LEASE_UNIMPLEMENTED`). */
-      code: z12.string().min(1),
+      code: z11.string().min(1),
       /** Human-readable error message. */
-      message: z12.string()
+      message: z11.string()
     }).strict();
-    LeaseIpcResponseSchema = z12.discriminatedUnion("kind", [
+    LeaseIpcResponseSchema = z11.discriminatedUnion("kind", [
       LeaseGrantedResponseSchema,
       LeaseQueuedResponseSchema,
       LeaseDeniedResponseSchema,
@@ -14868,27 +14862,27 @@ var init_messages2 = __esm({
       ResourceReleaseResultResponseSchema,
       LeaseErrorResponseSchema
     ]);
-    LeaseIpcRequestEnvelopeSchema = z12.object({
+    LeaseIpcRequestEnvelopeSchema = z11.object({
       /** Parallel protocol version. */
-      protocol_version: z12.string(),
+      protocol_version: z11.string(),
       /** Correlation id echoed back on the matching response. */
-      id: z12.string().min(1),
+      id: z11.string().min(1),
       /** Direction discriminator. */
-      direction: z12.literal("request"),
+      direction: z11.literal("request"),
       /** The request body. */
       request: LeaseIpcRequestSchema
     }).strict();
-    LeaseIpcResponseEnvelopeSchema = z12.object({
+    LeaseIpcResponseEnvelopeSchema = z11.object({
       /** Parallel protocol version. */
-      protocol_version: z12.string(),
+      protocol_version: z11.string(),
       /** Correlation id echoed from the originating request (or a fresh id for events). */
-      id: z12.string().min(1),
+      id: z11.string().min(1),
       /** Direction discriminator. */
-      direction: z12.literal("response"),
+      direction: z11.literal("response"),
       /** The response body. */
       response: LeaseIpcResponseSchema
     }).strict();
-    LeaseIpcEnvelopeSchema = z12.discriminatedUnion("direction", [
+    LeaseIpcEnvelopeSchema = z11.discriminatedUnion("direction", [
       LeaseIpcRequestEnvelopeSchema,
       LeaseIpcResponseEnvelopeSchema
     ]);
@@ -14941,7 +14935,7 @@ var init_lease_ipc = __esm({
 });
 
 // packages/contracts/src/llm/catalog-schema.ts
-import { z as z13 } from "zod";
+import { z as z12 } from "zod";
 var CATALOG_MODEL_STATUSES, CATALOG_AUTH_TYPES, isoDate, semver, catalogModalitiesSchema, catalogCostSchema, catalogLimitSchema, catalogModelProviderSchema, catalogModelEntrySchema, catalogProviderSchema, curatedCatalogSchema, modelsCatalogRowInsertSchema, modelsCatalogRowSelectSchema;
 var init_catalog_schema = __esm({
   "packages/contracts/src/llm/catalog-schema.ts"() {
@@ -14954,78 +14948,78 @@ var init_catalog_schema = __esm({
       "retired"
     ];
     CATALOG_AUTH_TYPES = ["api_key", "oauth", "bedrock", "vertex"];
-    isoDate = z13.string().regex(/^\d{4}-\d{2}-\d{2}$/, "must be an ISO date (YYYY-MM-DD)");
-    semver = z13.string().regex(/^\d+\.\d+\.\d+$/, "must be semver (MAJOR.MINOR.PATCH)");
-    catalogModalitiesSchema = z13.object({
-      input: z13.array(z13.string()),
-      output: z13.array(z13.string())
+    isoDate = z12.string().regex(/^\d{4}-\d{2}-\d{2}$/, "must be an ISO date (YYYY-MM-DD)");
+    semver = z12.string().regex(/^\d+\.\d+\.\d+$/, "must be semver (MAJOR.MINOR.PATCH)");
+    catalogModalitiesSchema = z12.object({
+      input: z12.array(z12.string()),
+      output: z12.array(z12.string())
     }).strict();
-    catalogCostSchema = z13.object({
-      input: z13.number().optional(),
-      output: z13.number().optional(),
-      cache_read: z13.number().optional(),
-      cache_write: z13.number().optional(),
-      context_over_200k: z13.number().optional()
+    catalogCostSchema = z12.object({
+      input: z12.number().optional(),
+      output: z12.number().optional(),
+      cache_read: z12.number().optional(),
+      cache_write: z12.number().optional(),
+      context_over_200k: z12.number().optional()
     }).strict();
-    catalogLimitSchema = z13.object({
-      context: z13.number(),
-      output: z13.number()
+    catalogLimitSchema = z12.object({
+      context: z12.number(),
+      output: z12.number()
     }).strict();
-    catalogModelProviderSchema = z13.object({
-      npm: z13.string(),
-      api: z13.string()
+    catalogModelProviderSchema = z12.object({
+      npm: z12.string(),
+      api: z12.string()
     }).strict();
-    catalogModelEntrySchema = z13.object({
-      id: z13.string(),
-      name: z13.string(),
-      family: z13.string(),
-      attachment: z13.boolean(),
-      reasoning: z13.boolean(),
-      temperature: z13.boolean(),
-      interleaved: z13.boolean(),
-      tool_call: z13.boolean(),
+    catalogModelEntrySchema = z12.object({
+      id: z12.string(),
+      name: z12.string(),
+      family: z12.string(),
+      attachment: z12.boolean(),
+      reasoning: z12.boolean(),
+      temperature: z12.boolean(),
+      interleaved: z12.boolean(),
+      tool_call: z12.boolean(),
       modalities: catalogModalitiesSchema,
       cost: catalogCostSchema,
       limit: catalogLimitSchema,
-      status: z13.enum(CATALOG_MODEL_STATUSES),
+      status: z12.enum(CATALOG_MODEL_STATUSES),
       release_date: isoDate,
       provider: catalogModelProviderSchema
     }).strict();
-    catalogProviderSchema = z13.object({
-      id: z13.string(),
-      endpoint: z13.string(),
-      authTypes: z13.array(z13.enum(CATALOG_AUTH_TYPES)).min(1),
-      npm: z13.string().optional()
+    catalogProviderSchema = z12.object({
+      id: z12.string(),
+      endpoint: z12.string(),
+      authTypes: z12.array(z12.enum(CATALOG_AUTH_TYPES)).min(1),
+      npm: z12.string().optional()
     }).strict();
-    curatedCatalogSchema = z13.object({
-      $schema: z13.string().optional(),
+    curatedCatalogSchema = z12.object({
+      $schema: z12.string().optional(),
       version: semver,
       lastUpdated: isoDate,
-      providers: z13.record(z13.string(), catalogProviderSchema),
-      models: z13.record(z13.string(), z13.record(z13.string(), catalogModelEntrySchema))
+      providers: z12.record(z12.string(), catalogProviderSchema),
+      models: z12.record(z12.string(), z12.record(z12.string(), catalogModelEntrySchema))
     }).strict();
-    modelsCatalogRowInsertSchema = z13.object({
-      id: z13.string(),
-      providerId: z13.string(),
-      name: z13.string(),
-      family: z13.string(),
-      attachment: z13.boolean(),
-      reasoning: z13.boolean(),
-      temperature: z13.boolean(),
-      interleaved: z13.boolean(),
-      toolCall: z13.boolean(),
-      modalities: z13.string(),
-      cost: z13.string(),
-      contextLimit: z13.number().nullable().optional(),
-      outputLimit: z13.number().nullable().optional(),
-      status: z13.enum(CATALOG_MODEL_STATUSES),
+    modelsCatalogRowInsertSchema = z12.object({
+      id: z12.string(),
+      providerId: z12.string(),
+      name: z12.string(),
+      family: z12.string(),
+      attachment: z12.boolean(),
+      reasoning: z12.boolean(),
+      temperature: z12.boolean(),
+      interleaved: z12.boolean(),
+      toolCall: z12.boolean(),
+      modalities: z12.string(),
+      cost: z12.string(),
+      contextLimit: z12.number().nullable().optional(),
+      outputLimit: z12.number().nullable().optional(),
+      status: z12.enum(CATALOG_MODEL_STATUSES),
       releaseDate: isoDate,
-      modelsDevId: z13.string(),
-      source: z13.string(),
-      seededAt: z13.string().optional()
+      modelsDevId: z12.string(),
+      source: z12.string(),
+      seededAt: z12.string().optional()
     }).strict();
     modelsCatalogRowSelectSchema = modelsCatalogRowInsertSchema.extend({
-      seededAt: z13.string()
+      seededAt: z12.string()
     });
   }
 });
@@ -15140,7 +15134,7 @@ var init_status_registry = __esm({
 });
 
 // packages/contracts/src/workgraph.ts
-import { z as z14 } from "zod";
+import { z as z13 } from "zod";
 var E_WORKGRAPH_PARENT_TYPE_MATRIX, taskTypeSchema, taskPrioritySchema, taskStatusSchema, verificationGateSchema, workGraphRelationKindSchema, workGraphTraversalDirectionSchema, workGraphEdgeDirectionSchema, paginationParamsSchema, workGraphNodeSchema, workGraphEdgeSchema, workGraphHierarchyEdgeSchema, workGraphPageInfoSchema, workGraphRollupCountsSchema, workGraphSubtreePercentagesSchema, workGraphProjectionMismatchSchema, workGraphReadyFrontierTaskSchema, workGraphRelationEdgeSchema, workGraphDependencyEdgeSchema, workGraphOmissionReasonSchema, workGraphContextBudgetSchema, workGraphOmissionSchema, workGraphDirectEdgeSchema, workGraphContextPackParamsSchema, workGraphSliceParamsSchema, workGraphSliceSchema, workGraphReadinessParamsSchema, workGraphReadinessResultSchema, workGraphContextPackSchema, workGraphScaffoldValidateParamsSchema, workGraphScaffoldValidationIssueSchema, workGraphScaffoldValidateResultSchema, workGraphScaffoldApplyParamsSchema, workGraphScaffoldApplyResultSchema, workGraphPlanningDocParamsSchema, workGraphPlanningDocSchema, tasksTraverseParamsSchema, tasksTraverseResultSchema, tasksTreeParamsSchema, tasksTreeResultSchema, tasksRollupParamsSchema, tasksRollupResultSchema, tasksFrontierParamsSchema, tasksFrontierResultSchema, tasksWorkGraphAuditParamsSchema, tasksWorkGraphAuditResultSchema;
 var init_workgraph = __esm({
   "packages/contracts/src/workgraph.ts"() {
@@ -15148,10 +15142,10 @@ var init_workgraph = __esm({
     init_enums();
     init_status_registry();
     E_WORKGRAPH_PARENT_TYPE_MATRIX = "E_WORKGRAPH_PARENT_TYPE_MATRIX";
-    taskTypeSchema = z14.enum(["saga", "epic", "task", "subtask"]);
-    taskPrioritySchema = z14.enum(["critical", "high", "medium", "low"]);
-    taskStatusSchema = z14.enum(TASK_STATUSES);
-    verificationGateSchema = z14.enum([
+    taskTypeSchema = z13.enum(["saga", "epic", "task", "subtask"]);
+    taskPrioritySchema = z13.enum(["critical", "high", "medium", "low"]);
+    taskStatusSchema = z13.enum(TASK_STATUSES);
+    verificationGateSchema = z13.enum([
       "implemented",
       "testsPassed",
       "qaPassed",
@@ -15160,7 +15154,7 @@ var init_workgraph = __esm({
       "documented",
       "nexusImpact"
     ]);
-    workGraphRelationKindSchema = z14.enum([
+    workGraphRelationKindSchema = z13.enum([
       "contains",
       "depends_on",
       "blocks",
@@ -15168,317 +15162,317 @@ var init_workgraph = __esm({
       "groups",
       "satisfies"
     ]);
-    workGraphTraversalDirectionSchema = z14.enum([
+    workGraphTraversalDirectionSchema = z13.enum([
       "ancestors",
       "descendants",
       "upstream",
       "downstream"
     ]);
-    workGraphEdgeDirectionSchema = z14.enum(["out", "in", "both"]);
-    paginationParamsSchema = z14.object({
-      cursor: z14.string().min(1).optional(),
-      limit: z14.number().int().positive().max(500).optional()
+    workGraphEdgeDirectionSchema = z13.enum(["out", "in", "both"]);
+    paginationParamsSchema = z13.object({
+      cursor: z13.string().min(1).optional(),
+      limit: z13.number().int().positive().max(500).optional()
     });
-    workGraphNodeSchema = z14.object({
-      id: z14.string().min(1),
+    workGraphNodeSchema = z13.object({
+      id: z13.string().min(1),
       type: taskTypeSchema,
-      title: z14.string(),
+      title: z13.string(),
       status: taskStatusSchema,
       priority: taskPrioritySchema,
-      parentId: z14.string().min(1).optional()
+      parentId: z13.string().min(1).optional()
     });
-    workGraphEdgeSchema = z14.object({
-      fromId: z14.string().min(1),
-      toId: z14.string().min(1),
+    workGraphEdgeSchema = z13.object({
+      fromId: z13.string().min(1),
+      toId: z13.string().min(1),
       kind: workGraphRelationKindSchema
     });
-    workGraphHierarchyEdgeSchema = z14.object({
-      fromId: z14.string().min(1),
-      toId: z14.string().min(1),
-      kind: z14.literal("contains")
+    workGraphHierarchyEdgeSchema = z13.object({
+      fromId: z13.string().min(1),
+      toId: z13.string().min(1),
+      kind: z13.literal("contains")
     }).strict();
-    workGraphPageInfoSchema = z14.object({
-      nextCursor: z14.string().min(1).optional(),
-      hasMore: z14.boolean()
-    });
-    workGraphRollupCountsSchema = z14.object({
-      total: z14.number().int().nonnegative(),
-      byStatus: z14.partialRecord(taskStatusSchema, z14.number().int().nonnegative()),
-      byType: z14.partialRecord(taskTypeSchema, z14.number().int().nonnegative())
-    });
-    workGraphSubtreePercentagesSchema = z14.object({
-      done: z14.number().nonnegative(),
-      active: z14.number().nonnegative(),
-      blocked: z14.number().nonnegative(),
-      pending: z14.number().nonnegative(),
-      cancelled: z14.number().nonnegative()
-    });
-    workGraphProjectionMismatchSchema = z14.object({
-      field: z14.string().min(1),
-      expected: z14.number().int().nonnegative(),
-      actual: z14.number().int().nonnegative()
+    workGraphPageInfoSchema = z13.object({
+      nextCursor: z13.string().min(1).optional(),
+      hasMore: z13.boolean()
+    });
+    workGraphRollupCountsSchema = z13.object({
+      total: z13.number().int().nonnegative(),
+      byStatus: z13.partialRecord(taskStatusSchema, z13.number().int().nonnegative()),
+      byType: z13.partialRecord(taskTypeSchema, z13.number().int().nonnegative())
+    });
+    workGraphSubtreePercentagesSchema = z13.object({
+      done: z13.number().nonnegative(),
+      active: z13.number().nonnegative(),
+      blocked: z13.number().nonnegative(),
+      pending: z13.number().nonnegative(),
+      cancelled: z13.number().nonnegative()
+    });
+    workGraphProjectionMismatchSchema = z13.object({
+      field: z13.string().min(1),
+      expected: z13.number().int().nonnegative(),
+      actual: z13.number().int().nonnegative()
     });
     workGraphReadyFrontierTaskSchema = workGraphNodeSchema.extend({
-      role: z14.string().min(1).optional(),
-      dependencyBlockers: z14.array(z14.object({ taskId: z14.string().min(1), status: taskStatusSchema })),
-      gateBlockers: z14.array(z14.object({ gate: verificationGateSchema }))
+      role: z13.string().min(1).optional(),
+      dependencyBlockers: z13.array(z13.object({ taskId: z13.string().min(1), status: taskStatusSchema })),
+      gateBlockers: z13.array(z13.object({ gate: verificationGateSchema }))
     });
     workGraphRelationEdgeSchema = workGraphEdgeSchema.extend({
-      source: z14.literal("relation"),
-      relationType: z14.enum(TASK_RELATION_TYPES),
-      reason: z14.string().min(1).optional()
+      source: z13.literal("relation"),
+      relationType: z13.enum(TASK_RELATION_TYPES),
+      reason: z13.string().min(1).optional()
     });
     workGraphDependencyEdgeSchema = workGraphEdgeSchema.extend({
-      source: z14.literal("dependency"),
-      kind: z14.literal("depends_on")
+      source: z13.literal("dependency"),
+      kind: z13.literal("depends_on")
     });
-    workGraphOmissionReasonSchema = z14.enum([
+    workGraphOmissionReasonSchema = z13.enum([
       "budget_exceeded",
       "not_requested",
       "not_available",
       "redacted",
       "truncated"
     ]);
-    workGraphContextBudgetSchema = z14.object({
-      tokenBudget: z14.number().int().nonnegative(),
-      estimatedTokens: z14.number().int().nonnegative(),
-      remainingTokens: z14.number().int().nonnegative(),
-      truncated: z14.boolean()
-    });
-    workGraphOmissionSchema = z14.object({
-      path: z14.string().min(1),
+    workGraphContextBudgetSchema = z13.object({
+      tokenBudget: z13.number().int().nonnegative(),
+      estimatedTokens: z13.number().int().nonnegative(),
+      remainingTokens: z13.number().int().nonnegative(),
+      truncated: z13.boolean()
+    });
+    workGraphOmissionSchema = z13.object({
+      path: z13.string().min(1),
       reason: workGraphOmissionReasonSchema,
-      message: z14.string().min(1),
-      estimatedTokens: z14.number().int().nonnegative().optional()
+      message: z13.string().min(1),
+      estimatedTokens: z13.number().int().nonnegative().optional()
     });
-    workGraphDirectEdgeSchema = z14.discriminatedUnion("source", [
+    workGraphDirectEdgeSchema = z13.discriminatedUnion("source", [
       workGraphRelationEdgeSchema,
       workGraphDependencyEdgeSchema
     ]);
     workGraphContextPackParamsSchema = paginationParamsSchema.extend({
-      rootId: z14.string().min(1),
-      tokenBudget: z14.number().int().positive().optional(),
-      includeRelations: z14.boolean().optional(),
-      includeReadiness: z14.boolean().optional(),
-      includeRollup: z14.boolean().optional()
+      rootId: z13.string().min(1),
+      tokenBudget: z13.number().int().positive().optional(),
+      includeRelations: z13.boolean().optional(),
+      includeReadiness: z13.boolean().optional(),
+      includeRollup: z13.boolean().optional()
     });
     workGraphSliceParamsSchema = paginationParamsSchema.extend({
-      rootId: z14.string().min(1),
+      rootId: z13.string().min(1),
       direction: workGraphTraversalDirectionSchema.optional(),
-      maxDepth: z14.number().int().nonnegative().optional(),
-      includeRelations: z14.boolean().optional()
+      maxDepth: z13.number().int().nonnegative().optional(),
+      includeRelations: z13.boolean().optional()
     });
-    workGraphSliceSchema = z14.object({
-      rootId: z14.string().min(1),
+    workGraphSliceSchema = z13.object({
+      rootId: z13.string().min(1),
       direction: workGraphTraversalDirectionSchema,
-      nodes: z14.array(workGraphNodeSchema),
-      edges: z14.array(workGraphEdgeSchema),
+      nodes: z13.array(workGraphNodeSchema),
+      edges: z13.array(workGraphEdgeSchema),
       pageInfo: workGraphPageInfoSchema,
-      omissions: z14.array(workGraphOmissionSchema).optional()
-    });
-    workGraphReadinessParamsSchema = z14.object({
-      rootId: z14.string().min(1),
-      role: z14.string().min(1).optional(),
-      includeGateBlockers: z14.boolean().optional()
-    });
-    workGraphReadinessResultSchema = z14.object({
-      rootId: z14.string().min(1),
-      role: z14.string().min(1).optional(),
-      ready: z14.boolean(),
-      warnings: z14.array(z14.string()),
-      groups: z14.object({
-        ready: z14.array(workGraphReadyFrontierTaskSchema),
-        blocked: z14.array(workGraphReadyFrontierTaskSchema),
-        blockedBy: z14.array(
-          z14.discriminatedUnion("kind", [
-            z14.object({
-              kind: z14.literal("dependency"),
-              blockerId: z14.string().min(1),
-              blocks: z14.array(z14.string().min(1))
+      omissions: z13.array(workGraphOmissionSchema).optional()
+    });
+    workGraphReadinessParamsSchema = z13.object({
+      rootId: z13.string().min(1),
+      role: z13.string().min(1).optional(),
+      includeGateBlockers: z13.boolean().optional()
+    });
+    workGraphReadinessResultSchema = z13.object({
+      rootId: z13.string().min(1),
+      role: z13.string().min(1).optional(),
+      ready: z13.boolean(),
+      warnings: z13.array(z13.string()),
+      groups: z13.object({
+        ready: z13.array(workGraphReadyFrontierTaskSchema),
+        blocked: z13.array(workGraphReadyFrontierTaskSchema),
+        blockedBy: z13.array(
+          z13.discriminatedUnion("kind", [
+            z13.object({
+              kind: z13.literal("dependency"),
+              blockerId: z13.string().min(1),
+              blocks: z13.array(z13.string().min(1))
             }),
-            z14.object({
-              kind: z14.literal("gate"),
+            z13.object({
+              kind: z13.literal("gate"),
               gate: verificationGateSchema,
-              blocks: z14.array(z14.string().min(1))
+              blocks: z13.array(z13.string().min(1))
             })
           ])
         )
       })
     });
-    workGraphContextPackSchema = z14.object({
-      rootId: z14.string().min(1),
-      generatedAt: z14.string().min(1),
+    workGraphContextPackSchema = z13.object({
+      rootId: z13.string().min(1),
+      generatedAt: z13.string().min(1),
       budget: workGraphContextBudgetSchema,
       slice: workGraphSliceSchema,
-      relationEdges: z14.object({
-        rootId: z14.string().min(1),
+      relationEdges: z13.object({
+        rootId: z13.string().min(1),
         direction: workGraphEdgeDirectionSchema,
-        edges: z14.array(workGraphDirectEdgeSchema)
+        edges: z13.array(workGraphDirectEdgeSchema)
       }).optional(),
       readiness: workGraphReadinessResultSchema.optional(),
-      rollup: z14.lazy(() => tasksRollupResultSchema).optional(),
-      omissions: z14.array(workGraphOmissionSchema)
-    });
-    workGraphScaffoldValidateParamsSchema = z14.object({
-      rootId: z14.string().min(1),
-      nodes: z14.array(
-        z14.object({
-          id: z14.string().min(1),
+      rollup: z13.lazy(() => tasksRollupResultSchema).optional(),
+      omissions: z13.array(workGraphOmissionSchema)
+    });
+    workGraphScaffoldValidateParamsSchema = z13.object({
+      rootId: z13.string().min(1),
+      nodes: z13.array(
+        z13.object({
+          id: z13.string().min(1),
           type: taskTypeSchema,
-          parentId: z14.string().min(1).nullable().optional()
+          parentId: z13.string().min(1).nullable().optional()
         })
       ),
-      edges: z14.array(workGraphDirectEdgeSchema).optional(),
-      dryRun: z14.boolean().optional()
-    });
-    workGraphScaffoldValidationIssueSchema = z14.object({
-      code: z14.string().min(1),
-      message: z14.string().min(1),
-      taskId: z14.string().min(1).optional(),
-      severity: z14.enum(["error", "warning"])
-    });
-    workGraphScaffoldValidateResultSchema = z14.object({
-      rootId: z14.string().min(1),
-      valid: z14.boolean(),
-      dryRun: z14.boolean(),
-      issues: z14.array(workGraphScaffoldValidationIssueSchema),
-      hierarchy: z14.object({
-        valid: z14.boolean(),
-        violations: z14.array(
-          z14.object({
-            code: z14.literal(E_WORKGRAPH_PARENT_TYPE_MATRIX),
-            taskId: z14.string().min(1),
+      edges: z13.array(workGraphDirectEdgeSchema).optional(),
+      dryRun: z13.boolean().optional()
+    });
+    workGraphScaffoldValidationIssueSchema = z13.object({
+      code: z13.string().min(1),
+      message: z13.string().min(1),
+      taskId: z13.string().min(1).optional(),
+      severity: z13.enum(["error", "warning"])
+    });
+    workGraphScaffoldValidateResultSchema = z13.object({
+      rootId: z13.string().min(1),
+      valid: z13.boolean(),
+      dryRun: z13.boolean(),
+      issues: z13.array(workGraphScaffoldValidationIssueSchema),
+      hierarchy: z13.object({
+        valid: z13.boolean(),
+        violations: z13.array(
+          z13.object({
+            code: z13.literal(E_WORKGRAPH_PARENT_TYPE_MATRIX),
+            taskId: z13.string().min(1),
             taskType: taskTypeSchema,
-            parentId: z14.string().min(1).nullable(),
+            parentId: z13.string().min(1).nullable(),
             parentType: taskTypeSchema.optional(),
-            message: z14.string().min(1)
+            message: z13.string().min(1)
           })
         )
       })
     });
     workGraphScaffoldApplyParamsSchema = workGraphScaffoldValidateParamsSchema.extend({
-      apply: z14.boolean().optional()
+      apply: z13.boolean().optional()
     });
     workGraphScaffoldApplyResultSchema = workGraphScaffoldValidateResultSchema.extend({
-      applied: z14.boolean(),
-      nodesChanged: z14.number().int().nonnegative(),
-      edgesChanged: z14.number().int().nonnegative()
-    });
-    workGraphPlanningDocParamsSchema = z14.object({
-      rootId: z14.string().min(1),
-      audience: z14.enum(["agent", "maintainer"]),
-      tokenBudget: z14.number().int().positive().optional(),
-      includeRelations: z14.boolean().optional(),
-      includeReadiness: z14.boolean().optional(),
-      includeRollup: z14.boolean().optional()
-    });
-    workGraphPlanningDocSchema = z14.object({
-      rootId: z14.string().min(1),
-      generatedAt: z14.string().min(1),
-      audience: z14.enum(["agent", "maintainer"]),
-      title: z14.string().min(1),
-      content: z14.string(),
-      sections: z14.array(z14.string().min(1)),
-      estimatedTokens: z14.number().int().nonnegative(),
-      budget: z14.object({
-        tokenBudget: z14.number().int().positive(),
-        truncated: z14.boolean()
+      applied: z13.boolean(),
+      nodesChanged: z13.number().int().nonnegative(),
+      edgesChanged: z13.number().int().nonnegative()
+    });
+    workGraphPlanningDocParamsSchema = z13.object({
+      rootId: z13.string().min(1),
+      audience: z13.enum(["agent", "maintainer"]),
+      tokenBudget: z13.number().int().positive().optional(),
+      includeRelations: z13.boolean().optional(),
+      includeReadiness: z13.boolean().optional(),
+      includeRollup: z13.boolean().optional()
+    });
+    workGraphPlanningDocSchema = z13.object({
+      rootId: z13.string().min(1),
+      generatedAt: z13.string().min(1),
+      audience: z13.enum(["agent", "maintainer"]),
+      title: z13.string().min(1),
+      content: z13.string(),
+      sections: z13.array(z13.string().min(1)),
+      estimatedTokens: z13.number().int().nonnegative(),
+      budget: z13.object({
+        tokenBudget: z13.number().int().positive(),
+        truncated: z13.boolean()
       }).optional()
     });
     tasksTraverseParamsSchema = paginationParamsSchema.extend({
-      rootId: z14.string().min(1),
+      rootId: z13.string().min(1),
       direction: workGraphTraversalDirectionSchema,
-      maxDepth: z14.number().int().nonnegative().optional(),
-      includeRelations: z14.boolean().optional()
+      maxDepth: z13.number().int().nonnegative().optional(),
+      includeRelations: z13.boolean().optional()
     });
-    tasksTraverseResultSchema = z14.object({
-      rootId: z14.string().min(1),
+    tasksTraverseResultSchema = z13.object({
+      rootId: z13.string().min(1),
       direction: workGraphTraversalDirectionSchema,
-      nodes: z14.array(workGraphNodeSchema),
-      edges: z14.array(workGraphEdgeSchema),
+      nodes: z13.array(workGraphNodeSchema),
+      edges: z13.array(workGraphEdgeSchema),
       pageInfo: workGraphPageInfoSchema
     });
     tasksTreeParamsSchema = paginationParamsSchema.extend({
-      rootId: z14.string().min(1),
-      maxDepth: z14.number().int().nonnegative().optional()
+      rootId: z13.string().min(1),
+      maxDepth: z13.number().int().nonnegative().optional()
     });
-    tasksTreeResultSchema = z14.object({
-      rootId: z14.string().min(1),
-      nodes: z14.array(workGraphNodeSchema.extend({ depth: z14.number().int().positive() })),
-      edges: z14.array(workGraphHierarchyEdgeSchema),
+    tasksTreeResultSchema = z13.object({
+      rootId: z13.string().min(1),
+      nodes: z13.array(workGraphNodeSchema.extend({ depth: z13.number().int().positive() })),
+      edges: z13.array(workGraphHierarchyEdgeSchema),
       pageInfo: workGraphPageInfoSchema
     });
-    tasksRollupParamsSchema = z14.object({
-      rootId: z14.string().min(1),
+    tasksRollupParamsSchema = z13.object({
+      rootId: z13.string().min(1),
       expectedDirectRollup: workGraphRollupCountsSchema.optional()
     });
-    tasksRollupResultSchema = z14.object({
-      rootId: z14.string().min(1),
+    tasksRollupResultSchema = z13.object({
+      rootId: z13.string().min(1),
       direct: workGraphRollupCountsSchema,
       subtree: workGraphRollupCountsSchema,
-      percentDenominator: z14.object({
-        basis: z14.literal("subtree-total"),
-        total: z14.number().int().nonnegative(),
-        description: z14.string().min(1)
+      percentDenominator: z13.object({
+        basis: z13.literal("subtree-total"),
+        total: z13.number().int().nonnegative(),
+        description: z13.string().min(1)
       }),
       percentages: workGraphSubtreePercentagesSchema,
-      staleProjection: z14.boolean(),
-      projectionMismatches: z14.array(workGraphProjectionMismatchSchema)
-    });
-    tasksFrontierParamsSchema = z14.object({
-      rootId: z14.string().min(1),
-      role: z14.string().min(1).optional()
-    });
-    tasksFrontierResultSchema = z14.object({
-      rootId: z14.string().min(1),
-      role: z14.string().min(1).optional(),
-      groups: z14.object({
-        ready: z14.array(workGraphReadyFrontierTaskSchema),
-        blocked: z14.array(workGraphReadyFrontierTaskSchema),
-        blockedBy: z14.array(
-          z14.discriminatedUnion("kind", [
-            z14.object({
-              kind: z14.literal("dependency"),
-              blockerId: z14.string().min(1),
-              blocks: z14.array(z14.string().min(1))
+      staleProjection: z13.boolean(),
+      projectionMismatches: z13.array(workGraphProjectionMismatchSchema)
+    });
+    tasksFrontierParamsSchema = z13.object({
+      rootId: z13.string().min(1),
+      role: z13.string().min(1).optional()
+    });
+    tasksFrontierResultSchema = z13.object({
+      rootId: z13.string().min(1),
+      role: z13.string().min(1).optional(),
+      groups: z13.object({
+        ready: z13.array(workGraphReadyFrontierTaskSchema),
+        blocked: z13.array(workGraphReadyFrontierTaskSchema),
+        blockedBy: z13.array(
+          z13.discriminatedUnion("kind", [
+            z13.object({
+              kind: z13.literal("dependency"),
+              blockerId: z13.string().min(1),
+              blocks: z13.array(z13.string().min(1))
             }),
-            z14.object({
-              kind: z14.literal("gate"),
+            z13.object({
+              kind: z13.literal("gate"),
               gate: verificationGateSchema,
-              blocks: z14.array(z14.string().min(1))
+              blocks: z13.array(z13.string().min(1))
             })
           ])
         )
       })
     });
     tasksWorkGraphAuditParamsSchema = paginationParamsSchema.extend({
-      rootId: z14.string().min(1),
-      maxDepth: z14.number().int().nonnegative().optional(),
-      includeRelations: z14.boolean().optional()
-    });
-    tasksWorkGraphAuditResultSchema = z14.object({
-      rootId: z14.string().min(1),
-      hierarchy: z14.object({
-        valid: z14.boolean(),
-        violations: z14.array(
-          z14.object({
-            code: z14.literal(E_WORKGRAPH_PARENT_TYPE_MATRIX),
-            taskId: z14.string().min(1),
+      rootId: z13.string().min(1),
+      maxDepth: z13.number().int().nonnegative().optional(),
+      includeRelations: z13.boolean().optional()
+    });
+    tasksWorkGraphAuditResultSchema = z13.object({
+      rootId: z13.string().min(1),
+      hierarchy: z13.object({
+        valid: z13.boolean(),
+        violations: z13.array(
+          z13.object({
+            code: z13.literal(E_WORKGRAPH_PARENT_TYPE_MATRIX),
+            taskId: z13.string().min(1),
             taskType: taskTypeSchema,
-            parentId: z14.string().min(1).nullable(),
+            parentId: z13.string().min(1).nullable(),
             parentType: taskTypeSchema.optional(),
-            message: z14.string().min(1)
+            message: z13.string().min(1)
           })
         )
       }),
       traversal: tasksTraverseResultSchema,
       frontier: tasksFrontierResultSchema,
       rollup: tasksRollupResultSchema,
-      relationEdges: z14.object({
-        rootId: z14.string().min(1),
+      relationEdges: z13.object({
+        rootId: z13.string().min(1),
         direction: workGraphEdgeDirectionSchema,
-        edges: z14.array(
-          z14.discriminatedUnion("source", [
+        edges: z13.array(
+          z13.discriminatedUnion("source", [
             workGraphRelationEdgeSchema,
             workGraphDependencyEdgeSchema
           ])
@@ -15497,6 +15491,51 @@ var init_operation_envelope_validation = __esm({
   }
 });
 
+// packages/contracts/src/operations/docs.ts
+import { z as z14 } from "zod";
+var DOCS_PROJECTION_PROPOSAL_SCHEMA, DOCS_PROJECTION_RECEIPT_SCHEMA;
+var init_docs = __esm({
+  "packages/contracts/src/operations/docs.ts"() {
+    "use strict";
+    init_docs_taxonomy();
+    init_docs_lifecycle();
+    DOCS_PROJECTION_PROPOSAL_SCHEMA = z14.object({
+      version: z14.literal(1),
+      operation: z14.literal("docs.projection"),
+      identity: z14.object({
+        projectId: z14.string().min(1),
+        projectRoot: z14.string().min(1),
+        actor: z14.string().min(1),
+        operation: z14.literal("docs.projection"),
+        idempotencyKey: z14.string().min(1)
+      }).strict(),
+      source: z14.object({
+        attachmentId: z14.string().min(1),
+        sha256: z14.string().regex(/^[a-f0-9]{64}$/),
+        ownerId: z14.string().min(1),
+        ownerType: z14.enum(["task", "session", "observation", "decision", "learning", "pattern"]),
+        label: z14.string().min(1)
+      }).strict(),
+      observation: z14.object({
+        kind: z14.literal("doc-attachment"),
+        attachmentId: z14.string().min(1),
+        ownerId: z14.string().min(1),
+        addedAt: z14.string().min(1),
+        slug: z14.string().optional(),
+        type: z14.string().optional()
+      }).strict()
+    }).strict();
+    DOCS_PROJECTION_RECEIPT_SCHEMA = z14.object({
+      version: z14.literal(1),
+      sourceHash: z14.string().regex(/^[a-f0-9]{64}$/),
+      graph: z14.enum(["completed", "disabled"]),
+      observationId: z14.string().min(1),
+      verifiedAt: z14.string().min(1),
+      actor: z14.string().min(1)
+    }).strict();
+  }
+});
+
 // packages/contracts/src/operations/ensures-schema-registry.ts
 import { z as z15 } from "zod";
 var taskTreeEntrySchema, taskTreeSchema, evidenceSchema, passthroughSchema, LEGACY_PASSTHROUGH_SCHEMA_NAMES, ENSURES_SCHEMA_REGISTRY;
@@ -15866,11 +15905,7 @@ var init_evidence_atoms = __esm({
         }).passthrough()
       ).optional().default([])
     }).passthrough();
-    PR_REQUIRED_WORKFLOWS = Object.freeze([
-      "CI",
-      "Lockfile Check",
-      "Contracts Dep Lint"
-    ]);
+    PR_REQUIRED_WORKFLOWS = Object.freeze(["CI", "Contracts Dep Lint"]);
   }
 });
 
@@ -18162,6 +18197,11 @@ var init_nexus_cloud = __esm({
     nexusCloudStatusSchema = z26.object({
       serverTime: isoTime.optional(),
       apiVersion: z26.string().optional(),
+      /**
+       * Optional server features (e.g. {@link NEXUS_FEATURE_PROJECT_INITIAL_KEY}). Absent from servers older
+       * than the list, which therefore support none of them.
+       */
+      features: z26.array(z26.string()).optional(),
       user: nexusCloudUserSchema,
       credential: nexusCloudCredentialSchema,
       device: nexusCloudDeviceSchema.nullable(),
@@ -44457,18 +44497,6 @@ function appendHookEntry(hooks, event, entry) {
   }
   hooks[event] = [...existing ?? [], entry];
 }
-function removeCleoHookEntries(hooks) {
-  let changed = false;
-  for (const [event, entries] of Object.entries(hooks)) {
-    if (!Array.isArray(entries)) continue;
-    const kept = entries.filter((e) => !isCleoHookEntry(e));
-    if (kept.length !== entries.length) {
-      hooks[event] = kept;
-      changed = true;
-    }
-  }
-  return changed;
-}
 var CLEO_HOOK_MARKER;
 var init_hook_config = __esm({
   "packages/adapters/src/providers/shared/hook-config.ts"() {
@@ -44477,513 +44505,24 @@ var init_hook_config = __esm({
   }
 });
 
-// packages/adapters/src/providers/claude-code/paths.ts
-import { homedir as homedir2 } from "node:os";
-import { join as join3 } from "node:path";
-function claudeSettingsPath() {
-  return new ClaudeCodePathProvider().getSettingsPath() ?? join3(homedir2(), ".claude", "settings.json");
-}
-var ClaudeCodePathProvider;
-var init_paths = __esm({
-  "packages/adapters/src/providers/claude-code/paths.ts"() {
-    "use strict";
-    init_hook_config();
-    ClaudeCodePathProvider = class {
-      /** Get the provider's root configuration directory. */
-      getProviderDir() {
-        return process.env["CLAUDE_HOME"] ?? join3(homedir2(), ".claude");
-      }
-      /** Get the path to the provider's settings file, or null if unavailable. */
-      getSettingsPath() {
-        return process.env["CLAUDE_SETTINGS"] ?? join3(this.getProviderDir(), "settings.json");
-      }
-      /** Get the directory where agents are installed, or null if unsupported. */
-      getAgentInstallDir() {
-        return join3(this.getProviderDir(), "agents");
-      }
-      /** Get the path to the provider's memory database, or null if unsupported. */
-      getMemoryDbPath() {
-        return process.env["CLAUDE_MEM_DB"] ?? join3(homedir2(), ".claude-mem", "claude-mem.db");
-      }
-    };
-  }
-});
-
-// packages/adapters/src/providers/claude-code/context-monitor.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync } from "node:fs";
-import { mkdir } from "node:fs/promises";
-import { homedir as homedir3 } from "node:os";
-import { dirname, join as join4 } from "node:path";
-import { resolveLegacyCleoDir } from "@cleocode/paths";
-function getContextStatusFromPercentage(percentage) {
-  if (percentage >= THRESHOLDS.EMERGENCY) return "emergency";
-  if (percentage >= THRESHOLDS.CRITICAL) return "critical";
-  if (percentage >= THRESHOLDS.CAUTION) return "caution";
-  if (percentage >= THRESHOLDS.WARNING) return "warning";
-  return "ok";
-}
-var THRESHOLDS, ClaudeCodeContextMonitorProvider;
-var init_context_monitor = __esm({
-  "packages/adapters/src/providers/claude-code/context-monitor.ts"() {
-    "use strict";
-    init_paths();
-    THRESHOLDS = {
-      WARNING: 50,
-      CAUTION: 70,
-      CRITICAL: 85,
-      EMERGENCY: 95
-    };
-    ClaudeCodeContextMonitorProvider = class {
-      /** Path provider for resolving Claude Code directory locations. */
-      pathProvider = new ClaudeCodePathProvider();
-      /** Process raw context window JSON and return a formatted summary string. */
-      async processContextInput(input, cwd) {
-        const typed = input;
-        const contextSize = typed.context_window?.context_window_size ?? 2e5;
-        const usage = typed.context_window?.current_usage;
-        if (!usage) return "-- no data";
-        const inputTokens = usage.input_tokens ?? 0;
-        const outputTokens = usage.output_tokens ?? 0;
-        const cacheCreate = usage.cache_creation_input_tokens ?? 0;
-        const totalTokens = inputTokens + outputTokens + cacheCreate;
-        const percentage = Math.floor(totalTokens * 100 / contextSize);
-        const status = getContextStatusFromPercentage(percentage);
-        const cleoDir = cwd ? join4(cwd, ".cleo") : ".cleo";
-        if (existsSync3(cleoDir)) {
-          const stateDir = join4(cleoDir, "context-states");
-          const statePath = join4(stateDir, ".context-state.json");
-          const state = {
-            $schema: "https://cleo-dev.com/schemas/v1/context-state.schema.json",
-            version: "1.0.0",
-            timestamp: (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z"),
-            staleAfterMs: 5e3,
-            contextWindow: {
-              maxTokens: contextSize,
-              currentTokens: totalTokens,
-              percentage,
-              breakdown: {
-                inputTokens,
-                outputTokens,
-                cacheCreationTokens: cacheCreate,
-                cacheReadTokens: usage.cache_read_input_tokens ?? 0
-              }
-            },
-            thresholds: {
-              warning: THRESHOLDS.WARNING,
-              caution: THRESHOLDS.CAUTION,
-              critical: THRESHOLDS.CRITICAL,
-              emergency: THRESHOLDS.EMERGENCY
-            },
-            status,
-            cleoSessionId: ""
-          };
-          try {
-            await mkdir(dirname(statePath), { recursive: true });
-            writeFileSync(statePath, JSON.stringify(state, null, 2));
-          } catch {
-          }
-        }
-        return `${percentage}% | ${totalTokens}/${contextSize}`;
-      }
-      /** Check the current statusline integration status in Claude Code settings. */
-      checkStatuslineIntegration() {
-        const settingsPath = this.pathProvider.getSettingsPath();
-        if (!settingsPath || !existsSync3(settingsPath)) return "no_settings";
-        try {
-          const settings = JSON.parse(readFileSync3(settingsPath, "utf-8"));
-          const statusLine = settings.statusLine;
-          if (!statusLine?.type) return "not_configured";
-          if (statusLine.type !== "command") return "custom_no_cleo";
-          const cmd = statusLine.command ?? "";
-          if (cmd.includes("context-monitor.sh") || cmd.includes("cleo-statusline") || cmd.includes(".context-state.json") || cmd.includes("context-states")) {
-            return "configured";
-          }
-          const scriptPath = cmd.startsWith("~") ? cmd.replace("~", homedir3()) : cmd;
-          if (existsSync3(scriptPath)) {
-            try {
-              const content = readFileSync3(scriptPath, "utf-8");
-              if (content.includes("context-state.json")) return "configured";
-            } catch {
-            }
-          }
-          return "custom_no_cleo";
-        } catch {
-          return "no_settings";
-        }
-      }
-      /** Get the recommended statusline configuration object for Claude Code settings. */
-      getStatuslineConfig() {
-        return {
-          statusLine: {
-            type: "command",
-            command: join4(resolveLegacyCleoDir(), "lib", "session", "context-monitor.sh")
-          }
-        };
-      }
-      /** Get human-readable setup instructions for enabling context monitoring. */
-      getSetupInstructions() {
-        const settingsPath = this.pathProvider.getSettingsPath() ?? "~/.claude/settings.json";
-        return [
-          "To enable context monitoring, add to your Claude Code settings:",
-          `File: ${settingsPath}`,
-          "",
-          JSON.stringify(this.getStatuslineConfig(), null, 2),
-          "",
-          "This enables real-time context window tracking in the CLI."
-        ].join("\n");
-      }
-    };
-  }
-});
-
-// packages/adapters/src/providers/claude-code/hooks.ts
-import { existsSync as existsSync4 } from "node:fs";
-import { readdir, readFile } from "node:fs/promises";
-import { join as join5 } from "node:path";
-import { updateJsonConfigFile } from "@cleocode/caamp";
-var PROVIDER_ID, CLAUDE_CODE_EVENT_MAP, ClaudeCodeHookProvider;
-var init_hooks = __esm({
-  "packages/adapters/src/providers/claude-code/hooks.ts"() {
-    "use strict";
-    init_paths();
-    PROVIDER_ID = "claude-code";
-    CLAUDE_CODE_EVENT_MAP = {
-      // CAAMP: toNative('SessionStart',      'claude-code') = 'SessionStart'
-      SessionStart: "SessionStart",
-      // CAAMP: toNative('SessionEnd',        'claude-code') = 'SessionEnd'
-      SessionEnd: "SessionEnd",
-      // CAAMP: toNative('PromptSubmit',      'claude-code') = 'UserPromptSubmit'
-      UserPromptSubmit: "PromptSubmit",
-      // CAAMP: toNative('ResponseComplete',  'claude-code') = 'Stop'
-      Stop: "ResponseComplete",
-      // CAAMP: toNative('PreToolUse',        'claude-code') = 'PreToolUse'
-      PreToolUse: "PreToolUse",
-      // CAAMP: toNative('PostToolUse',       'claude-code') = 'PostToolUse'
-      PostToolUse: "PostToolUse",
-      // CAAMP: toNative('PostToolUseFailure','claude-code') = 'PostToolUseFailure'
-      PostToolUseFailure: "PostToolUseFailure",
-      // CAAMP: toNative('PermissionRequest', 'claude-code') = 'PermissionRequest'
-      PermissionRequest: "PermissionRequest",
-      // CAAMP: toNative('SubagentStart',     'claude-code') = 'SubagentStart'
-      SubagentStart: "SubagentStart",
-      // CAAMP: toNative('SubagentStop',      'claude-code') = 'SubagentStop'
-      SubagentStop: "SubagentStop",
-      // CAAMP: toNative('PreCompact',        'claude-code') = 'PreCompact'
-      PreCompact: "PreCompact",
-      // CAAMP: toNative('PostCompact',       'claude-code') = 'PostCompact'
-      PostCompact: "PostCompact",
-      // CAAMP: toNative('Notification',      'claude-code') = 'Notification'
-      Notification: "Notification",
-      // CAAMP: toNative('ConfigChange',      'claude-code') = 'ConfigChange'
-      ConfigChange: "ConfigChange"
-    };
-    ClaudeCodeHookProvider = class {
-      /** Whether hooks have been registered for the current session. */
-      registered = false;
-      /**
-       * Map a Claude Code native event name to a CAAMP canonical hook event name.
-       *
-       * Looks up the native event name in the map derived from
-       * `getProviderHookProfile('claude-code').mappings` (CAAMP 1.9.1).
-       * Returns null for unrecognised events (e.g. PreModel, PostModel which
-       * Claude Code does not support).
-       *
-       * @param providerEvent - Claude Code native event (e.g. "UserPromptSubmit", "Stop")
-       * @returns CAAMP canonical event name, or null if unmapped
-       * @task T164
-       */
-      mapProviderEvent(providerEvent) {
-        return CLAUDE_CODE_EVENT_MAP[providerEvent] ?? null;
-      }
-      /** Project directory this hook provider was registered for. */
-      projectDir = null;
-      /**
-       * Register native hooks for a project.
-       *
-       * Writes CLEO hook entries to `~/.claude/settings.json` so that Claude Code's
-       * native event system calls cleo CLI commands when events fire. This bridges
-       * Claude Code's event loop to CLEO's internal hook dispatch.
-       *
-       * Idempotent: skips writing if CLEO hooks already exist in settings.json.
-       *
-       * Hook entries registered:
-       * - `Stop` → `cleo session end --quiet` (triggers LLM extraction, reflector, consolidation)
-       * - `PostToolUse` (Write|Edit) → brain observation for file modifications
-       * - `SubagentStop` → brain observation for agent completion
-       *
-       * @param projectDir - Project directory for context-scoped hook commands
-       * @task T164 @task T555
-       */
-      async registerNativeHooks(projectDir) {
-        this.projectDir = projectDir;
-        this.registered = true;
-        await this.updateSettings((settings) => {
-          const hooks = hookMap(settings);
-          if (Object.values(hooks).some((entries) => hasCleoHook(entries))) {
-            return false;
-          }
-          appendHookEntry(hooks, "Stop", {
-            matcher: "",
-            hooks: [{ type: "command", command: `cleo session end --quiet # cleo-hook` }]
-          });
-          appendHookEntry(hooks, "PostToolUse", {
-            matcher: "Write|Edit",
-            hooks: [
-              {
-                type: "command",
-                command: `cleo observe "File modified via $TOOL_NAME" --title "tool-use" --quiet # cleo-hook`
-              },
-              {
-                // NEXUS post-modification check: re-index changed files and flag regressions.
-                // $TOOL_INPUT_file_path is populated by Claude Code for Write/Edit events.
-                type: "command",
-                command: `cleo nexus analyze --incremental --json > /dev/null 2>&1 && cleo observe "NEXUS re-indexed after $TOOL_NAME on $TOOL_INPUT_file_path" --title "nexus-post-check" --quiet # cleo-hook`
-              }
-            ]
-          });
-          return true;
-        });
-      }
-      /**
-       * Unregister native hooks.
-       *
-       * Removes CLEO hook entries from Claude Code's `settings.json` by filtering
-       * out entries containing the `# cleo-hook` marker. Same locking, atomicity
-       * and parse-error rules as {@link registerNativeHooks}.
-       *
-       * @task T164 @task T555
-       */
-      async unregisterNativeHooks() {
-        this.registered = false;
-        this.projectDir = null;
-        if (!existsSync4(claudeSettingsPath())) return;
-        await this.updateSettings((settings) => {
-          if (settings.hooks === void 0) return false;
-          return removeCleoHookEntries(hookMap(settings));
-        });
-      }
-      /** The last settings.json failure, or `null` when the last update succeeded. */
-      settingsError = null;
-      /**
-       * Why the last settings.json update did not happen, or `null`.
-       *
-       * @remarks
-       * Hook registration stays non-fatal for adapter initialisation, so a
-       * refused write (malformed settings.json, lock timeout) is surfaced here and
-       * on stderr instead of being swallowed (T12385).
-       *
-       * @returns The failure message, or `null`
-       */
-      getSettingsError() {
-        return this.settingsError;
-      }
-      /** Apply `mutate` to settings.json via CAAMP's locked, atomic JSON writer. */
-      async updateSettings(mutate) {
-        const settingsPath = claudeSettingsPath();
-        try {
-          await updateJsonConfigFile(settingsPath, mutate);
-          this.settingsError = null;
-        } catch (err) {
-          this.settingsError = err instanceof Error ? err.message : String(err);
-          process.stderr.write(
-            `[cleo:claude-code] hooks not written to ${settingsPath}: ${this.settingsError}
-`
-          );
-        }
-      }
-      /**
-       * Check whether hooks have been registered via `registerNativeHooks`.
-       */
-      isRegistered() {
-        return this.registered;
-      }
-      /**
-       * Get the project directory this hook provider was registered for.
-       *
-       * Returns null if hooks have not been registered yet.
-       */
-      getProjectDir() {
-        return this.projectDir;
-      }
-      /**
-       * Get the native→canonical event mapping for introspection and debugging.
-       *
-       * Returns the map derived from `getProviderHookProfile('claude-code').mappings`
-       * (CAAMP 1.9.1). Use `getSupportedCanonicalEvents()` to enumerate canonical
-       * names via live CAAMP APIs.
-       *
-       * @returns Immutable record of native event name → canonical event name
-       */
-      getEventMap() {
-        return { ...CLAUDE_CODE_EVENT_MAP };
-      }
-      /**
-       * Enumerate supported canonical events via CAAMP's `getSupportedEvents()`.
-       *
-       * Calls `getSupportedEvents('claude-code')` from the CAAMP normalizer to
-       * get the authoritative list. Claude Code supports 14 of 16 canonical events
-       * (PreModel and PostModel are not supported). Falls back to the values of
-       * the static event map when CAAMP is unavailable at runtime.
-       *
-       * @returns Array of CAAMP canonical event names supported by Claude Code
-       * @task T164
-       */
-      async getSupportedCanonicalEvents() {
-        try {
-          const { getSupportedEvents } = await import("@cleocode/caamp");
-          return getSupportedEvents(PROVIDER_ID);
-        } catch {
-          return [...new Set(Object.values(CLAUDE_CODE_EVENT_MAP))];
-        }
-      }
-      /**
-       * Retrieve the full provider hook profile from CAAMP.
-       *
-       * Calls `getProviderHookProfile('claude-code')` from the CAAMP normalizer to
-       * get the complete profile: hook system type (`config`), config path
-       * (`~/.claude/settings.json`), handler types, and all event mappings.
-       * Returns null when CAAMP is unavailable at runtime.
-       *
-       * @returns Provider hook profile or null if CAAMP is unavailable
-       * @task T164
-       */
-      async getProviderProfile() {
-        try {
-          const { getProviderHookProfile } = await import("@cleocode/caamp");
-          return getProviderHookProfile(PROVIDER_ID) ?? null;
-        } catch {
-          return null;
-        }
-      }
-      /**
-       * Translate a CAAMP canonical event to its Claude Code native name via CAAMP.
-       *
-       * Calls `toNative(canonical, 'claude-code')` from the CAAMP normalizer.
-       * Returns null for unsupported events (PreModel, PostModel) or when
-       * CAAMP is unavailable.
-       *
-       * @param canonical - CAAMP canonical event name (e.g. "PromptSubmit")
-       * @returns Claude Code native event name or null
-       * @task T164
-       */
-      async toNativeEvent(canonical2) {
-        try {
-          const { toNative } = await import("@cleocode/caamp");
-          return toNative(canonical2, PROVIDER_ID);
-        } catch {
-          const entry = Object.entries(CLAUDE_CODE_EVENT_MAP).find(([, v]) => v === canonical2);
-          return entry?.[0] ?? null;
-        }
-      }
-      /**
-       * Extract a plain-text transcript from Claude Code session JSONL files.
-       *
-       * Claude Code stores session data under `~/.claude/projects/<project-slug>/`:
-       *   - Root-level session JSONLs: `<sessionId>.jsonl` (primary transcript)
-       *   - UUID subdirectories contain `subagents/agent-*.jsonl` (subagent turns)
-       *
-       * Reads the most-recent root-level JSONL plus all subagent JSONLs and
-       * extracts user/assistant turn text into a flat string for brain
-       * observation extraction.
-       *
-       * Returns null when no session data is found or on any read error.
-       *
-       * @param sessionId - CLEO session ID (available for future subagent filtering)
-       * @param _projectDir - Project directory (unused; Claude Code uses global paths)
-       * @task T729 @task T144 @epic T134
-       */
-      async getTranscript(sessionId, _projectDir) {
-        try {
-          const homeDir = process.env.HOME ?? process.env.USERPROFILE ?? "/root";
-          const projectsDir = join5(homeDir, ".claude", "projects");
-          let rootFiles = [];
-          const subagentFiles = [];
-          try {
-            const projectDirs = await readdir(projectsDir, { withFileTypes: true });
-            for (const projectEntry of projectDirs) {
-              if (!projectEntry.isDirectory()) continue;
-              const projectDir = join5(projectsDir, projectEntry.name);
-              try {
-                const projectContents = await readdir(projectDir, { withFileTypes: true });
-                for (const entry of projectContents) {
-                  if (entry.isFile() && entry.name.endsWith(".jsonl")) {
-                    rootFiles.push({ path: join5(projectDir, entry.name) });
-                    continue;
-                  }
-                  if (entry.isDirectory()) {
-                    const subagentsDir = join5(projectDir, entry.name, "subagents");
-                    try {
-                      const subagentEntries = await readdir(subagentsDir);
-                      for (const sa of subagentEntries) {
-                        if (sa.startsWith("agent-") && sa.endsWith(".jsonl")) {
-                          subagentFiles.push({ path: join5(subagentsDir, sa) });
-                        }
-                      }
-                    } catch {
-                    }
-                  }
-                }
-              } catch {
-              }
-            }
-          } catch {
-            return null;
-          }
-          if (rootFiles.length === 0 && subagentFiles.length === 0) return null;
-          rootFiles = rootFiles.sort((a, b) => b.path.localeCompare(a.path));
-          const allPaths = [
-            ...rootFiles[0] ? [rootFiles[0].path] : [],
-            ...subagentFiles.map((f) => f.path)
-          ];
-          void sessionId;
-          const turns = [];
-          for (const filePath of allPaths) {
-            try {
-              const raw = await readFile(filePath, "utf-8");
-              const lines = raw.split("\n").filter((l) => l.trim());
-              for (const line of lines) {
-                try {
-                  const entry = JSON.parse(line);
-                  const role = entry.role;
-                  const content = entry.content;
-                  if (role === "assistant" && typeof content === "string") {
-                    turns.push(`assistant: ${content}`);
-                  } else if (role === "user" && typeof content === "string") {
-                    turns.push(`user: ${content}`);
-                  }
-                } catch {
-                }
-              }
-            } catch {
-            }
-          }
-          return turns.length > 0 ? turns.join("\n") : null;
-        } catch {
-          return null;
-        }
-      }
-    };
-  }
-});
-
 // packages/adapters/src/providers/shared/heavy-command-hook-install.ts
 import { execFileSync } from "node:child_process";
 import {
-  existsSync as existsSync5,
+  existsSync as existsSync3,
   mkdirSync,
   readdirSync as readdirSync2,
-  readFileSync as readFileSync4,
+  readFileSync as readFileSync3,
   realpathSync,
   rmSync,
   statSync,
-  writeFileSync as writeFileSync2
+  writeFileSync
 } from "node:fs";
-import { homedir as homedir4, tmpdir } from "node:os";
-import { dirname as dirname2, isAbsolute, join as join6, resolve as resolve2 } from "node:path";
-import { updateJsonConfigFile as updateJsonConfigFile2 } from "@cleocode/caamp";
+import { homedir as homedir2, tmpdir } from "node:os";
+import { dirname, isAbsolute, join as join3, resolve as resolve2 } from "node:path";
+import { updateJsonConfigFile } from "@cleocode/caamp";
 function canonical(path) {
   try {
-    return realpathSync(path);
+    return realpathSync.native(path);
   } catch {
     return resolve2(path);
   }
@@ -44997,17 +44536,17 @@ function nonDirectoryAncestor(dir) {
       const code = err.code;
       if (code !== "ENOENT" && code !== "ENOTDIR") return null;
     }
-    const parent = dirname2(cur);
+    const parent = dirname(cur);
     if (parent === cur) return null;
     cur = parent;
   }
 }
 function ensureParentDir(target) {
-  const blocked = nonDirectoryAncestor(dirname2(target));
+  const blocked = nonDirectoryAncestor(dirname(target));
   if (blocked !== null) throw new HeavyHookPathBlockedError(blocked, target);
-  mkdirSync(dirname2(target), { recursive: true });
+  mkdirSync(dirname(target), { recursive: true });
 }
-function isUserHomeDir(projectDir, home = homedir4()) {
+function isUserHomeDir(projectDir, home = homedir2()) {
   return canonical(projectDir) === canonical(home);
 }
 function clearOlderCleoMarkers(dir = process.env.XDG_RUNTIME_DIR || tmpdir()) {
@@ -45021,7 +44560,7 @@ function clearOlderCleoMarkers(dir = process.env.XDG_RUNTIME_DIR || tmpdir()) {
   for (const name15 of names) {
     if (!name15.startsWith(OLDER_CLEO_MARKER_PREFIX)) continue;
     try {
-      rmSync(join6(dir, name15), { force: true });
+      rmSync(join3(dir, name15), { force: true });
       removed++;
     } catch {
     }
@@ -45111,8 +44650,8 @@ function placeHeavyHook(hooks, desired) {
 }
 async function syncJsonHeavyCommandHook(configPath, provider, mode) {
   if (mode === "off") {
-    if (!existsSync5(configPath)) return "unchanged";
-    const removed = await updateJsonConfigFile2(configPath, (config2) => {
+    if (!existsSync3(configPath)) return "unchanged";
+    const removed = await updateJsonConfigFile(configPath, (config2) => {
       if (config2.hooks === void 0) return false;
       return placeHeavyHook(hookMap(config2), null).changed;
     });
@@ -45121,7 +44660,7 @@ async function syncJsonHeavyCommandHook(configPath, provider, mode) {
   ensureParentDir(configPath);
   clearOlderCleoMarkers();
   let result = "unchanged";
-  await updateJsonConfigFile2(configPath, (config2) => {
+  await updateJsonConfigFile(configPath, (config2) => {
     const hooks = hookMap(config2);
     const placed = placeHeavyHook(hooks, heavyCommandHookObject(provider));
     if (placed.found) {
@@ -45153,7 +44692,7 @@ function excludeFile(projectDir) {
   if (gitOutput(projectDir, ["rev-parse", "--is-inside-work-tree"]) !== "true") return null;
   const path = gitOutput(projectDir, ["rev-parse", "--git-path", "info/exclude"]);
   if (path === null || path === "") return null;
-  return isAbsolute(path) ? path : join6(projectDir, path);
+  return isAbsolute(path) ? path : join3(projectDir, path);
 }
 function excludeLine(projectDir, relPath) {
   const prefix = gitOutput(projectDir, ["rev-parse", "--show-prefix"]) ?? "";
@@ -45165,27 +44704,27 @@ function excludeHookFileFromGit(projectDir, relPath, marker16 = HOOK_FILE_EXCLUD
   if (gitOutput(projectDir, ["check-ignore", relPath]) !== null) return false;
   if (gitOutput(projectDir, ["ls-files", "--error-unmatch", relPath]) !== null) return false;
   const line = excludeLine(projectDir, relPath);
-  const text = existsSync5(exclude) ? readFileSync4(exclude, "utf-8") : "";
+  const text = existsSync3(exclude) ? readFileSync3(exclude, "utf-8") : "";
   if (text.split("\n").includes(line)) return false;
   const block = `${marker16}
 ${line}
 `;
-  mkdirSync(dirname2(exclude), { recursive: true });
-  writeFileSync2(exclude, text === "" || text.endsWith("\n") ? text + block : `${text}
+  mkdirSync(dirname(exclude), { recursive: true });
+  writeFileSync(exclude, text === "" || text.endsWith("\n") ? text + block : `${text}
 ${block}`);
   return true;
 }
 function unexcludeHookFileFromGit(projectDir, relPath) {
   const exclude = excludeFile(projectDir);
-  if (exclude === null || !existsSync5(exclude)) return false;
-  const lines = readFileSync4(exclude, "utf-8").split("\n");
+  if (exclude === null || !existsSync3(exclude)) return false;
+  const lines = readFileSync3(exclude, "utf-8").split("\n");
   const at = lines.indexOf(excludeLine(projectDir, relPath));
   const above = lines[at - 1];
   if (at < 1 || above !== LOCAL_SETTINGS_EXCLUDE_MARKER && above !== HOOK_FILE_EXCLUDE_MARKER) {
     return false;
   }
   lines.splice(at - 1, 2);
-  writeFileSync2(exclude, lines.join("\n"));
+  writeFileSync(exclude, lines.join("\n"));
   return true;
 }
 function hookFileVisibleToGit(projectDir, relPath) {
@@ -45218,14 +44757,14 @@ function cleoCreatedConfig(config2) {
   return mine > 0;
 }
 function codexHooksSharedReason(projectDir, checkGit = true) {
-  const file2 = join6(projectDir, CODEX_HOOKS_FILE);
+  const file2 = join3(projectDir, CODEX_HOOKS_FILE);
   if (checkGit && gitOutput(projectDir, ["ls-files", "--error-unmatch", CODEX_HOOKS_FILE]) !== null) {
     return "is tracked by git (a shared team config)";
   }
-  if (!existsSync5(file2)) return null;
+  if (!existsSync3(file2)) return null;
   let config2;
   try {
-    config2 = JSON.parse(readFileSync4(file2, "utf-8"));
+    config2 = JSON.parse(readFileSync3(file2, "utf-8"));
   } catch {
     return "is the project's own Codex hook config (empty or not valid JSON)";
   }
@@ -45258,7 +44797,7 @@ function jsonEqual(a, b) {
 function restoreCommittedCodexHooks(projectDir) {
   if (gitOutput(projectDir, ["ls-files", "--error-unmatch", CODEX_HOOKS_FILE]) === null)
     return false;
-  const file2 = join6(projectDir, CODEX_HOOKS_FILE);
+  const file2 = join3(projectDir, CODEX_HOOKS_FILE);
   let committed;
   let working;
   try {
@@ -45267,7 +44806,7 @@ function restoreCommittedCodexHooks(projectDir) {
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 5e3
     });
-    working = JSON.parse(readFileSync4(file2, "utf-8"));
+    working = JSON.parse(readFileSync3(file2, "utf-8"));
   } catch {
     return false;
   }
@@ -45279,13 +44818,13 @@ function restoreCommittedCodexHooks(projectDir) {
   } catch {
     return false;
   }
-  writeFileSync2(file2, committed);
+  writeFileSync(file2, committed);
   return true;
 }
 function excludedByCleo(projectDir, relPath) {
   const exclude = excludeFile(projectDir);
-  if (exclude === null || !existsSync5(exclude)) return false;
-  const lines = readFileSync4(exclude, "utf-8").split("\n");
+  if (exclude === null || !existsSync3(exclude)) return false;
+  const lines = readFileSync3(exclude, "utf-8").split("\n");
   const at = lines.indexOf(excludeLine(projectDir, relPath));
   const above = lines[at - 1];
   return at >= 1 && (above === LOCAL_SETTINGS_EXCLUDE_MARKER || above === HOOK_FILE_EXCLUDE_MARKER);
@@ -45298,7 +44837,7 @@ function trackedFileModified(projectDir, relPath) {
   return (gitOutput(projectDir, ["diff", "--name-only", "HEAD", "--", relPath]) ?? "") !== "";
 }
 async function syncCodexHeavyCommandHook(projectDir, mode) {
-  const file2 = join6(projectDir, CODEX_HOOKS_FILE);
+  const file2 = join3(projectDir, CODEX_HOOKS_FILE);
   if (mode !== "off") {
     const shared = codexHooksSharedReason(projectDir);
     if (shared !== null) {
@@ -45321,7 +44860,7 @@ async function syncCodexHeavyCommandHook(projectDir, mode) {
 }
 async function syncClaudeCodeHeavyCommandHook(projectDir, mode) {
   const result = await syncJsonHeavyCommandHook(
-    join6(projectDir, CLAUDE_LOCAL_SETTINGS),
+    join3(projectDir, CLAUDE_LOCAL_SETTINGS),
     "claude-code",
     mode
   );
@@ -45329,7 +44868,7 @@ async function syncClaudeCodeHeavyCommandHook(projectDir, mode) {
   else excludeLocalSettingsFromGit(projectDir);
   try {
     await syncJsonHeavyCommandHook(
-      join6(projectDir, ".claude", "settings.json"),
+      join3(projectDir, ".claude", "settings.json"),
       "claude-code",
       "off"
     );
@@ -45390,8 +44929,8 @@ function opencodeHeavyCommandPluginSource() {
   ].join("\n");
 }
 function syncOpencodeHeavyCommandPlugin(projectDir, mode) {
-  const pluginPath = join6(projectDir, OPENCODE_PLUGIN_FILE);
-  const exists = existsSync5(pluginPath);
+  const pluginPath = join3(projectDir, OPENCODE_PLUGIN_FILE);
+  const exists = existsSync3(pluginPath);
   if (mode === "off") {
     unexcludeHookFileFromGit(projectDir, OPENCODE_PLUGIN_FILE);
     if (!exists) return "unchanged";
@@ -45399,10 +44938,10 @@ function syncOpencodeHeavyCommandPlugin(projectDir, mode) {
     return "removed";
   }
   const source = opencodeHeavyCommandPluginSource();
-  const current = exists && readFileSync4(pluginPath, "utf-8") === source;
+  const current = exists && readFileSync3(pluginPath, "utf-8") === source;
   if (!current) {
     ensureParentDir(pluginPath);
-    writeFileSync2(pluginPath, source, "utf-8");
+    writeFileSync(pluginPath, source, "utf-8");
   }
   excludeHookFileFromGit(projectDir, OPENCODE_PLUGIN_FILE);
   return current ? "unchanged" : exists ? "updated" : "installed";
@@ -45488,13 +45027,617 @@ var init_heavy_command_hook_install = __esm({
   }
 });
 
+// packages/adapters/src/providers/claude-code/paths.ts
+import { realpathSync as realpathSync2 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { basename as basename2, dirname as dirname2, isAbsolute as isAbsolute2, join as join4, relative, resolve as resolve3, sep } from "node:path";
+function claudeSettingsPath() {
+  return new ClaudeCodePathProvider().getSettingsPath() ?? join4(homedir3(), ".claude", "settings.json");
+}
+function canonicalPath(path) {
+  const abs = resolve3(path);
+  try {
+    return realpathSync2.native(abs);
+  } catch {
+    const parent = dirname2(abs);
+    return parent === abs ? abs : join4(canonicalPath(parent), basename2(abs));
+  }
+}
+function comparable(path) {
+  return CASE_INSENSITIVE_DEFAULT ? path.toLowerCase() : path;
+}
+function isAtOrInside(path, dir) {
+  const rel = relative(comparable(dir), comparable(path));
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute2(rel);
+}
+function assertProjectScoped(projectDir, target) {
+  const abs = resolve3(target);
+  if (isUserHomeDir(projectDir)) {
+    throw new UserGlobalClaudeConfigError(abs, "the project is the home directory");
+  }
+  const canonical2 = canonicalPath(abs);
+  if (comparable(canonical2) === comparable(canonicalPath(claudeSettingsPath()))) {
+    throw new UserGlobalClaudeConfigError(abs, "it is the user-global Claude settings file");
+  }
+  if (isAtOrInside(canonical2, canonicalPath(new ClaudeCodePathProvider().getProviderDir()))) {
+    throw new UserGlobalClaudeConfigError(abs, "it is inside the user-global Claude config dir");
+  }
+  return abs;
+}
+function projectClaudeSettingsPath(projectDir) {
+  return assertProjectScoped(projectDir, join4(projectDir, CLAUDE_LOCAL_SETTINGS));
+}
+function projectClaudeHooksDir(projectDir) {
+  return assertProjectScoped(projectDir, join4(projectDir, ".claude", "hooks"));
+}
+function assertProjectInstructionScope(projectDir) {
+  assertProjectScoped(projectDir, join4(projectDir, "CLAUDE.md"));
+}
+function projectClaudeCommandsDir(projectDir) {
+  return assertProjectScoped(projectDir, join4(projectDir, ".claude", "commands"));
+}
+var ClaudeCodePathProvider, CASE_INSENSITIVE_DEFAULT, UserGlobalClaudeConfigError;
+var init_paths = __esm({
+  "packages/adapters/src/providers/claude-code/paths.ts"() {
+    "use strict";
+    init_heavy_command_hook_install();
+    init_hook_config();
+    ClaudeCodePathProvider = class {
+      /** Get the provider's root configuration directory. */
+      getProviderDir() {
+        return process.env["CLAUDE_HOME"] ?? join4(homedir3(), ".claude");
+      }
+      /** Get the path to the provider's settings file, or null if unavailable. */
+      getSettingsPath() {
+        return process.env["CLAUDE_SETTINGS"] ?? join4(this.getProviderDir(), "settings.json");
+      }
+      /** Get the directory where agents are installed, or null if unsupported. */
+      getAgentInstallDir() {
+        return join4(this.getProviderDir(), "agents");
+      }
+      /** Get the path to the provider's memory database, or null if unsupported. */
+      getMemoryDbPath() {
+        return process.env["CLAUDE_MEM_DB"] ?? join4(homedir3(), ".claude-mem", "claude-mem.db");
+      }
+    };
+    CASE_INSENSITIVE_DEFAULT = process.platform === "darwin" || process.platform === "win32";
+    UserGlobalClaudeConfigError = class extends Error {
+      /** The path that was refused. */
+      path;
+      /**
+       * @param path - the refused target.
+       * @param why - which user-global location it hits.
+       */
+      constructor(path, why) {
+        super(`refusing to write ${path}: ${why}; CLEO only writes project-level Claude Code config`);
+        this.name = "UserGlobalClaudeConfigError";
+        this.path = path;
+      }
+    };
+  }
+});
+
+// packages/adapters/src/providers/claude-code/context-monitor.ts
+import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "node:fs";
+import { mkdir } from "node:fs/promises";
+import { homedir as homedir4 } from "node:os";
+import { dirname as dirname3, join as join5 } from "node:path";
+import { resolveLegacyCleoDir } from "@cleocode/paths";
+function getContextStatusFromPercentage(percentage) {
+  if (percentage >= THRESHOLDS.EMERGENCY) return "emergency";
+  if (percentage >= THRESHOLDS.CRITICAL) return "critical";
+  if (percentage >= THRESHOLDS.CAUTION) return "caution";
+  if (percentage >= THRESHOLDS.WARNING) return "warning";
+  return "ok";
+}
+var THRESHOLDS, ClaudeCodeContextMonitorProvider;
+var init_context_monitor = __esm({
+  "packages/adapters/src/providers/claude-code/context-monitor.ts"() {
+    "use strict";
+    init_paths();
+    THRESHOLDS = {
+      WARNING: 50,
+      CAUTION: 70,
+      CRITICAL: 85,
+      EMERGENCY: 95
+    };
+    ClaudeCodeContextMonitorProvider = class {
+      /** Path provider for resolving Claude Code directory locations. */
+      pathProvider = new ClaudeCodePathProvider();
+      /** Process raw context window JSON and return a formatted summary string. */
+      async processContextInput(input, cwd) {
+        const typed = input;
+        const contextSize = typed.context_window?.context_window_size ?? 2e5;
+        const usage = typed.context_window?.current_usage;
+        if (!usage) return "-- no data";
+        const inputTokens = usage.input_tokens ?? 0;
+        const outputTokens = usage.output_tokens ?? 0;
+        const cacheCreate = usage.cache_creation_input_tokens ?? 0;
+        const totalTokens = inputTokens + outputTokens + cacheCreate;
+        const percentage = Math.floor(totalTokens * 100 / contextSize);
+        const status = getContextStatusFromPercentage(percentage);
+        const cleoDir = cwd ? join5(cwd, ".cleo") : ".cleo";
+        if (existsSync4(cleoDir)) {
+          const stateDir = join5(cleoDir, "context-states");
+          const statePath = join5(stateDir, ".context-state.json");
+          const state = {
+            $schema: "https://cleo-dev.com/schemas/v1/context-state.schema.json",
+            version: "1.0.0",
+            timestamp: (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z"),
+            staleAfterMs: 5e3,
+            contextWindow: {
+              maxTokens: contextSize,
+              currentTokens: totalTokens,
+              percentage,
+              breakdown: {
+                inputTokens,
+                outputTokens,
+                cacheCreationTokens: cacheCreate,
+                cacheReadTokens: usage.cache_read_input_tokens ?? 0
+              }
+            },
+            thresholds: {
+              warning: THRESHOLDS.WARNING,
+              caution: THRESHOLDS.CAUTION,
+              critical: THRESHOLDS.CRITICAL,
+              emergency: THRESHOLDS.EMERGENCY
+            },
+            status,
+            cleoSessionId: ""
+          };
+          try {
+            await mkdir(dirname3(statePath), { recursive: true });
+            writeFileSync2(statePath, JSON.stringify(state, null, 2));
+          } catch {
+          }
+        }
+        return `${percentage}% | ${totalTokens}/${contextSize}`;
+      }
+      /** Check the current statusline integration status in Claude Code settings. */
+      checkStatuslineIntegration() {
+        const settingsPath = this.pathProvider.getSettingsPath();
+        if (!settingsPath || !existsSync4(settingsPath)) return "no_settings";
+        try {
+          const settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+          const statusLine = settings.statusLine;
+          if (!statusLine?.type) return "not_configured";
+          if (statusLine.type !== "command") return "custom_no_cleo";
+          const cmd = statusLine.command ?? "";
+          if (cmd.includes("context-monitor.sh") || cmd.includes("cleo-statusline") || cmd.includes(".context-state.json") || cmd.includes("context-states")) {
+            return "configured";
+          }
+          const scriptPath = cmd.startsWith("~") ? cmd.replace("~", homedir4()) : cmd;
+          if (existsSync4(scriptPath)) {
+            try {
+              const content = readFileSync4(scriptPath, "utf-8");
+              if (content.includes("context-state.json")) return "configured";
+            } catch {
+            }
+          }
+          return "custom_no_cleo";
+        } catch {
+          return "no_settings";
+        }
+      }
+      /** Get the recommended statusline configuration object for Claude Code settings. */
+      getStatuslineConfig() {
+        return {
+          statusLine: {
+            type: "command",
+            command: join5(resolveLegacyCleoDir(), "lib", "session", "context-monitor.sh")
+          }
+        };
+      }
+      /** Get human-readable setup instructions for enabling context monitoring. */
+      getSetupInstructions() {
+        const settingsPath = this.pathProvider.getSettingsPath() ?? "~/.claude/settings.json";
+        return [
+          "To enable context monitoring, add to your Claude Code settings:",
+          `File: ${settingsPath}`,
+          "",
+          JSON.stringify(this.getStatuslineConfig(), null, 2),
+          "",
+          "This enables real-time context window tracking in the CLI."
+        ].join("\n");
+      }
+    };
+  }
+});
+
+// packages/adapters/src/providers/claude-code/hooks.ts
+import { existsSync as existsSync5 } from "node:fs";
+import { readdir, readFile } from "node:fs/promises";
+import { join as join6 } from "node:path";
+import { updateJsonConfigFile as updateJsonConfigFile2 } from "@cleocode/caamp";
+function isNativeHookObject(hook) {
+  return isPlainObject2(hook) && typeof hook.command === "string" && NATIVE_HOOK_COMMANDS.has(hook.command);
+}
+function hasNativeHooks(hooks) {
+  return Object.values(hooks).some(
+    (entries) => Array.isArray(entries) && entries.some(
+      (entry) => isPlainObject2(entry) && Array.isArray(entry.hooks) && entry.hooks.some(isNativeHookObject)
+    )
+  );
+}
+function removeNativeHooks(hooks) {
+  let changed = false;
+  for (const [event, entries] of Object.entries(hooks)) {
+    if (!Array.isArray(entries)) continue;
+    const kept = [];
+    let eventChanged = false;
+    for (const entry of entries) {
+      if (!isPlainObject2(entry) || !Array.isArray(entry.hooks) || !entry.hooks.some(isNativeHookObject)) {
+        kept.push(entry);
+        continue;
+      }
+      eventChanged = true;
+      const rest = entry.hooks.filter((hook) => !isNativeHookObject(hook));
+      if (rest.length > 0) kept.push({ ...entry, hooks: rest });
+    }
+    if (!eventChanged) continue;
+    changed = true;
+    if (kept.length === 0) delete hooks[event];
+    else hooks[event] = kept;
+  }
+  return changed;
+}
+var NATIVE_STOP_HOOK_COMMAND, NATIVE_OBSERVE_HOOK_COMMAND, NATIVE_NEXUS_HOOK_COMMAND, NATIVE_HOOK_COMMANDS, PROVIDER_ID, CLAUDE_CODE_EVENT_MAP, ClaudeCodeHookProvider;
+var init_hooks = __esm({
+  "packages/adapters/src/providers/claude-code/hooks.ts"() {
+    "use strict";
+    init_heavy_command_hook_install();
+    init_paths();
+    NATIVE_STOP_HOOK_COMMAND = "cleo session end --quiet # cleo-hook";
+    NATIVE_OBSERVE_HOOK_COMMAND = 'cleo observe "File modified via $TOOL_NAME" --title "tool-use" --quiet # cleo-hook';
+    NATIVE_NEXUS_HOOK_COMMAND = 'cleo nexus analyze --incremental --json > /dev/null 2>&1 && cleo observe "NEXUS re-indexed after $TOOL_NAME on $TOOL_INPUT_file_path" --title "nexus-post-check" --quiet # cleo-hook';
+    NATIVE_HOOK_COMMANDS = /* @__PURE__ */ new Set([
+      NATIVE_STOP_HOOK_COMMAND,
+      NATIVE_OBSERVE_HOOK_COMMAND,
+      NATIVE_NEXUS_HOOK_COMMAND
+    ]);
+    PROVIDER_ID = "claude-code";
+    CLAUDE_CODE_EVENT_MAP = {
+      // CAAMP: toNative('SessionStart',      'claude-code') = 'SessionStart'
+      SessionStart: "SessionStart",
+      // CAAMP: toNative('SessionEnd',        'claude-code') = 'SessionEnd'
+      SessionEnd: "SessionEnd",
+      // CAAMP: toNative('PromptSubmit',      'claude-code') = 'UserPromptSubmit'
+      UserPromptSubmit: "PromptSubmit",
+      // CAAMP: toNative('ResponseComplete',  'claude-code') = 'Stop'
+      Stop: "ResponseComplete",
+      // CAAMP: toNative('PreToolUse',        'claude-code') = 'PreToolUse'
+      PreToolUse: "PreToolUse",
+      // CAAMP: toNative('PostToolUse',       'claude-code') = 'PostToolUse'
+      PostToolUse: "PostToolUse",
+      // CAAMP: toNative('PostToolUseFailure','claude-code') = 'PostToolUseFailure'
+      PostToolUseFailure: "PostToolUseFailure",
+      // CAAMP: toNative('PermissionRequest', 'claude-code') = 'PermissionRequest'
+      PermissionRequest: "PermissionRequest",
+      // CAAMP: toNative('SubagentStart',     'claude-code') = 'SubagentStart'
+      SubagentStart: "SubagentStart",
+      // CAAMP: toNative('SubagentStop',      'claude-code') = 'SubagentStop'
+      SubagentStop: "SubagentStop",
+      // CAAMP: toNative('PreCompact',        'claude-code') = 'PreCompact'
+      PreCompact: "PreCompact",
+      // CAAMP: toNative('PostCompact',       'claude-code') = 'PostCompact'
+      PostCompact: "PostCompact",
+      // CAAMP: toNative('Notification',      'claude-code') = 'Notification'
+      Notification: "Notification",
+      // CAAMP: toNative('ConfigChange',      'claude-code') = 'ConfigChange'
+      ConfigChange: "ConfigChange"
+    };
+    ClaudeCodeHookProvider = class {
+      /** Whether hooks have been registered for the current session. */
+      registered = false;
+      /**
+       * Map a Claude Code native event name to a CAAMP canonical hook event name.
+       *
+       * Looks up the native event name in the map derived from
+       * `getProviderHookProfile('claude-code').mappings` (CAAMP 1.9.1).
+       * Returns null for unrecognised events (e.g. PreModel, PostModel which
+       * Claude Code does not support).
+       *
+       * @param providerEvent - Claude Code native event (e.g. "UserPromptSubmit", "Stop")
+       * @returns CAAMP canonical event name, or null if unmapped
+       * @task T164
+       */
+      mapProviderEvent(providerEvent) {
+        return CLAUDE_CODE_EVENT_MAP[providerEvent] ?? null;
+      }
+      /** Project directory this hook provider was registered for. */
+      projectDir = null;
+      /**
+       * Register native hooks for a project.
+       *
+       * Writes CLEO hook entries to the project's per-machine
+       * `<project>/.claude/settings.local.json` so that Claude Code's native event
+       * system calls cleo CLI commands when events fire in this project. This
+       * bridges Claude Code's event loop to CLEO's internal hook dispatch.
+       * CLEO never writes the user-global `~/.claude/settings.json` (T13227): a
+       * project that is the home directory, or whose settings file resolves into
+       * the user-global Claude config, is refused and nothing is written. When
+       * git does not ignore `settings.local.json` yet, a marked `info/exclude`
+       * block keeps it out of git (the T12983 heavy-command rule).
+       *
+       * Idempotent: skips writing if the native hooks are already present.
+       *
+       * Hook entries registered:
+       * - `Stop` → `cleo session end --quiet` (triggers LLM extraction, reflector, consolidation)
+       * - `PostToolUse` (Write|Edit) → brain observation for file modifications
+       *   and the NEXUS post-check
+       *
+       * @param projectDir - Project whose Claude Code settings receive the hooks
+       * @task T164 @task T555 @task T13227
+       */
+      async registerNativeHooks(projectDir) {
+        this.projectDir = projectDir;
+        this.registered = true;
+        const wrote = await this.updateSettings(projectDir, (settings) => {
+          const hooks = hookMap(settings);
+          if (hasNativeHooks(hooks)) return false;
+          appendHookEntry(hooks, "Stop", {
+            matcher: "",
+            hooks: [{ type: "command", command: NATIVE_STOP_HOOK_COMMAND }]
+          });
+          appendHookEntry(hooks, "PostToolUse", {
+            matcher: "Write|Edit",
+            hooks: [
+              { type: "command", command: NATIVE_OBSERVE_HOOK_COMMAND },
+              { type: "command", command: NATIVE_NEXUS_HOOK_COMMAND }
+            ]
+          });
+          return true;
+        });
+        if (wrote) excludeLocalSettingsFromGit(projectDir);
+      }
+      /**
+       * Unregister native hooks.
+       *
+       * Removes the hook objects {@link registerNativeHooks} wrote from the
+       * project's `settings.local.json`, and nothing else: the heavy-command hook
+       * and the user's own hooks stay, and an entry or event is dropped only when
+       * left empty. Same locking, atomicity, parse-error and project-scope rules
+       * as {@link registerNativeHooks}.
+       *
+       * @task T164 @task T555 @task T13227
+       */
+      async unregisterNativeHooks() {
+        const projectDir = this.projectDir;
+        this.registered = false;
+        this.projectDir = null;
+        if (projectDir === null) return;
+        let settingsPath;
+        try {
+          settingsPath = projectClaudeSettingsPath(projectDir);
+        } catch {
+          return;
+        }
+        if (!existsSync5(settingsPath)) return;
+        await this.updateSettings(projectDir, (settings) => {
+          if (settings.hooks === void 0) return false;
+          return removeNativeHooks(hookMap(settings));
+        });
+      }
+      /** The last settings.json failure, or `null` when the last update succeeded. */
+      settingsError = null;
+      /**
+       * Why the last settings update did not happen, or `null`.
+       *
+       * @remarks
+       * Hook registration stays non-fatal for adapter initialisation, so a
+       * refused write (malformed settings file, lock timeout, a user-global
+       * target) is surfaced here and on stderr instead of being swallowed
+       * (T12385, T13227).
+       *
+       * @returns The failure message, or `null`
+       */
+      getSettingsError() {
+        return this.settingsError;
+      }
+      /**
+       * Apply `mutate` to the project's `settings.local.json` via CAAMP's locked,
+       * atomic JSON writer.
+       *
+       * @returns whether the file was written.
+       */
+      async updateSettings(projectDir, mutate) {
+        let settingsPath = `${projectDir}/.claude/settings.local.json`;
+        try {
+          settingsPath = projectClaudeSettingsPath(projectDir);
+          const wrote = await updateJsonConfigFile2(settingsPath, mutate);
+          this.settingsError = null;
+          return wrote;
+        } catch (err) {
+          this.settingsError = err instanceof Error ? err.message : String(err);
+          process.stderr.write(
+            `[cleo:claude-code] hooks not written to ${settingsPath}: ${this.settingsError}
+`
+          );
+          return false;
+        }
+      }
+      /**
+       * Check whether hooks have been registered via `registerNativeHooks`.
+       */
+      isRegistered() {
+        return this.registered;
+      }
+      /**
+       * Get the project directory this hook provider was registered for.
+       *
+       * Returns null if hooks have not been registered yet.
+       */
+      getProjectDir() {
+        return this.projectDir;
+      }
+      /**
+       * Get the native→canonical event mapping for introspection and debugging.
+       *
+       * Returns the map derived from `getProviderHookProfile('claude-code').mappings`
+       * (CAAMP 1.9.1). Use `getSupportedCanonicalEvents()` to enumerate canonical
+       * names via live CAAMP APIs.
+       *
+       * @returns Immutable record of native event name → canonical event name
+       */
+      getEventMap() {
+        return { ...CLAUDE_CODE_EVENT_MAP };
+      }
+      /**
+       * Enumerate supported canonical events via CAAMP's `getSupportedEvents()`.
+       *
+       * Calls `getSupportedEvents('claude-code')` from the CAAMP normalizer to
+       * get the authoritative list. Claude Code supports 14 of 16 canonical events
+       * (PreModel and PostModel are not supported). Falls back to the values of
+       * the static event map when CAAMP is unavailable at runtime.
+       *
+       * @returns Array of CAAMP canonical event names supported by Claude Code
+       * @task T164
+       */
+      async getSupportedCanonicalEvents() {
+        try {
+          const { getSupportedEvents } = await import("@cleocode/caamp");
+          return getSupportedEvents(PROVIDER_ID);
+        } catch {
+          return [...new Set(Object.values(CLAUDE_CODE_EVENT_MAP))];
+        }
+      }
+      /**
+       * Retrieve the full provider hook profile from CAAMP.
+       *
+       * Calls `getProviderHookProfile('claude-code')` from the CAAMP normalizer to
+       * get the complete profile: hook system type (`config`), config path
+       * (`~/.claude/settings.json`), handler types, and all event mappings.
+       * Returns null when CAAMP is unavailable at runtime.
+       *
+       * @returns Provider hook profile or null if CAAMP is unavailable
+       * @task T164
+       */
+      async getProviderProfile() {
+        try {
+          const { getProviderHookProfile } = await import("@cleocode/caamp");
+          return getProviderHookProfile(PROVIDER_ID) ?? null;
+        } catch {
+          return null;
+        }
+      }
+      /**
+       * Translate a CAAMP canonical event to its Claude Code native name via CAAMP.
+       *
+       * Calls `toNative(canonical, 'claude-code')` from the CAAMP normalizer.
+       * Returns null for unsupported events (PreModel, PostModel) or when
+       * CAAMP is unavailable.
+       *
+       * @param canonical - CAAMP canonical event name (e.g. "PromptSubmit")
+       * @returns Claude Code native event name or null
+       * @task T164
+       */
+      async toNativeEvent(canonical2) {
+        try {
+          const { toNative } = await import("@cleocode/caamp");
+          return toNative(canonical2, PROVIDER_ID);
+        } catch {
+          const entry = Object.entries(CLAUDE_CODE_EVENT_MAP).find(([, v]) => v === canonical2);
+          return entry?.[0] ?? null;
+        }
+      }
+      /**
+       * Extract a plain-text transcript from Claude Code session JSONL files.
+       *
+       * Claude Code stores session data under `~/.claude/projects/<project-slug>/`:
+       *   - Root-level session JSONLs: `<sessionId>.jsonl` (primary transcript)
+       *   - UUID subdirectories contain `subagents/agent-*.jsonl` (subagent turns)
+       *
+       * Reads the most-recent root-level JSONL plus all subagent JSONLs and
+       * extracts user/assistant turn text into a flat string for brain
+       * observation extraction.
+       *
+       * Returns null when no session data is found or on any read error.
+       *
+       * @param sessionId - CLEO session ID (available for future subagent filtering)
+       * @param _projectDir - Project directory (unused; Claude Code uses global paths)
+       * @task T729 @task T144 @epic T134
+       */
+      async getTranscript(sessionId, _projectDir) {
+        try {
+          const homeDir = process.env.HOME ?? process.env.USERPROFILE ?? "/root";
+          const projectsDir = join6(homeDir, ".claude", "projects");
+          let rootFiles = [];
+          const subagentFiles = [];
+          try {
+            const projectDirs = await readdir(projectsDir, { withFileTypes: true });
+            for (const projectEntry of projectDirs) {
+              if (!projectEntry.isDirectory()) continue;
+              const projectDir = join6(projectsDir, projectEntry.name);
+              try {
+                const projectContents = await readdir(projectDir, { withFileTypes: true });
+                for (const entry of projectContents) {
+                  if (entry.isFile() && entry.name.endsWith(".jsonl")) {
+                    rootFiles.push({ path: join6(projectDir, entry.name) });
+                    continue;
+                  }
+                  if (entry.isDirectory()) {
+                    const subagentsDir = join6(projectDir, entry.name, "subagents");
+                    try {
+                      const subagentEntries = await readdir(subagentsDir);
+                      for (const sa of subagentEntries) {
+                        if (sa.startsWith("agent-") && sa.endsWith(".jsonl")) {
+                          subagentFiles.push({ path: join6(subagentsDir, sa) });
+                        }
+                      }
+                    } catch {
+                    }
+                  }
+                }
+              } catch {
+              }
+            }
+          } catch {
+            return null;
+          }
+          if (rootFiles.length === 0 && subagentFiles.length === 0) return null;
+          rootFiles = rootFiles.sort((a, b) => b.path.localeCompare(a.path));
+          const allPaths = [
+            ...rootFiles[0] ? [rootFiles[0].path] : [],
+            ...subagentFiles.map((f) => f.path)
+          ];
+          void sessionId;
+          const turns = [];
+          for (const filePath of allPaths) {
+            try {
+              const raw = await readFile(filePath, "utf-8");
+              const lines = raw.split("\n").filter((l) => l.trim());
+              for (const line of lines) {
+                try {
+                  const entry = JSON.parse(line);
+                  const role = entry.role;
+                  const content = entry.content;
+                  if (role === "assistant" && typeof content === "string") {
+                    turns.push(`assistant: ${content}`);
+                  } else if (role === "user" && typeof content === "string") {
+                    turns.push(`user: ${content}`);
+                  }
+                } catch {
+                }
+              }
+            } catch {
+            }
+          }
+          return turns.length > 0 ? turns.join("\n") : null;
+        } catch {
+          return null;
+        }
+      }
+    };
+  }
+});
+
 // packages/adapters/src/providers/shared/hook-template-installer.ts
 import { copyFileSync, existsSync as existsSync6, mkdirSync as mkdirSync2, statSync as statSync2 } from "node:fs";
-import { dirname as dirname3, join as join7 } from "node:path";
+import { dirname as dirname4, join as join7 } from "node:path";
 import { fileURLToPath } from "node:url";
 function resolveProviderCandidates() {
-  const thisDir = dirname3(fileURLToPath(import.meta.url));
-  const here = dirname3(thisDir);
+  const thisDir = dirname4(fileURLToPath(import.meta.url));
+  const here = dirname4(thisDir);
   const fromDist = join7(here, "..", "..", "src", "providers");
   return [here, fromDist];
 }
@@ -45523,7 +45666,7 @@ function copyTemplate(src, dest, force) {
       return { wrote: false };
     }
   }
-  mkdirSync2(dirname3(dest), { recursive: true });
+  mkdirSync2(dirname4(dest), { recursive: true });
   copyFileSync(src, dest);
   return { wrote: true };
 }
@@ -45569,25 +45712,28 @@ var init_hook_template_installer = __esm({
 
 // packages/adapters/src/providers/claude-code/install.ts
 import { copyFileSync as copyFileSync2, existsSync as existsSync7, mkdirSync as mkdirSync3, readdirSync as readdirSync3, readFileSync as readFileSync5 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
-import { dirname as dirname4, join as join8, resolve as resolve3 } from "node:path";
+import { dirname as dirname5, join as join8, resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { ensureProviderInstructionFile, updateJsonConfigFile as updateJsonConfigFile3 } from "@cleocode/caamp";
-function getClaudeConfigDir() {
-  return process.env["CLAUDE_HOME"] ?? join8(homedir5(), ".claude");
-}
 function getAdapterCommandsDir() {
-  const thisDir = dirname4(fileURLToPath2(import.meta.url));
+  const thisDir = dirname5(fileURLToPath2(import.meta.url));
   return join8(thisDir, "commands");
 }
-var ClaudeCodeInstallProvider;
+var CLEO_PLUGIN_KEY, PROJECT_HOOK_FILES, ClaudeCodeInstallProvider;
 var init_install = __esm({
   "packages/adapters/src/providers/claude-code/install.ts"() {
     "use strict";
     init_heavy_command_hook_install();
     init_hook_template_installer();
     init_paths();
+    CLEO_PLUGIN_KEY = "cleo@cleocode";
+    PROJECT_HOOK_FILES = [
+      ".claude/hooks/precompact-safestop.sh",
+      ".claude/hooks/cleo-precompact-core.sh"
+    ];
     ClaudeCodeInstallProvider = class {
+      /** The project the last {@link install} ran for; {@link isInstalled} reads its settings. */
+      projectDir = null;
       /**
        * Install CLEO into a Claude Code project.
        *
@@ -45596,38 +45742,52 @@ var init_install = __esm({
        */
       async install(options) {
         const { projectDir } = options;
+        this.projectDir = projectDir;
         const installedAt = (/* @__PURE__ */ new Date()).toISOString();
         let instructionFileUpdated = false;
         const details = {};
-        const instructionResult = await ensureProviderInstructionFile("claude-code", projectDir, {});
-        instructionFileUpdated = instructionResult.action !== "intact";
-        if (instructionFileUpdated) {
-          details.instructionFile = instructionResult.filePath;
+        try {
+          assertProjectInstructionScope(projectDir);
+          const instructionResult = await ensureProviderInstructionFile("claude-code", projectDir, {});
+          instructionFileUpdated = instructionResult.action !== "intact";
+          if (instructionFileUpdated) {
+            details.instructionFile = instructionResult.filePath;
+          }
+        } catch (err) {
+          if (!(err instanceof UserGlobalClaudeConfigError)) throw err;
+          details.instructionFile = "skipped";
         }
-        const commandsInstalled = this.installCommands(projectDir);
-        if (commandsInstalled.length > 0) {
-          details.commands = commandsInstalled;
+        try {
+          const commandsInstalled = this.installCommands(projectDir);
+          if (commandsInstalled.length > 0) {
+            details.commands = commandsInstalled;
+          }
+        } catch (err) {
+          if (!(err instanceof UserGlobalClaudeConfigError)) throw err;
+          details.commands = "skipped";
         }
         const settingsErrors = [];
         try {
-          const pluginResult = await this.registerPlugin();
+          const pluginResult = await this.registerPlugin(projectDir);
           if (pluginResult) {
             details.plugin = pluginResult;
           }
         } catch (err) {
-          settingsErrors.push(err instanceof Error ? err.message : String(err));
+          if (err instanceof UserGlobalClaudeConfigError) details.plugin = "skipped";
+          else settingsErrors.push(err instanceof Error ? err.message : String(err));
         }
         try {
-          const hookResult = await this.installHookTemplates();
+          const hookResult = await this.installHookTemplates(projectDir);
           if (hookResult) {
             details.hookTemplates = hookResult;
           }
         } catch (err) {
-          settingsErrors.push(err instanceof Error ? err.message : String(err));
+          if (err instanceof UserGlobalClaudeConfigError) details.hookTemplates = "skipped";
+          else settingsErrors.push(err instanceof Error ? err.message : String(err));
         }
         if (options.heavyCommandHook !== void 0) {
           const projectSettings = join8(projectDir, ".claude", "settings.json");
-          if (isUserHomeDir(projectDir) || resolve3(projectSettings) === resolve3(claudeSettingsPath())) {
+          if (isUserHomeDir(projectDir) || resolve4(projectSettings) === resolve4(claudeSettingsPath())) {
             details.heavyCommandHook = "skipped";
           } else {
             try {
@@ -45660,16 +45820,25 @@ var init_install = __esm({
       /**
        * Check whether CLEO is installed in the current environment.
        *
-       * Checks for plugin enabled in ~/.claude/settings.json.
+       * Checks for the plugin enabled in the project's
+       * `.claude/settings.local.json` — the project of the last {@link install},
+       * else the working directory (T13227).
        */
       async isInstalled() {
-        const settingsPath = claudeSettingsPath();
+        let settingsPath;
+        try {
+          settingsPath = projectClaudeSettingsPath(this.projectDir ?? process.cwd());
+        } catch {
+          return false;
+        }
         if (existsSync7(settingsPath)) {
           try {
             const settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
-            const plugins = settings.enabledPlugins;
-            if (plugins && plugins["cleo@cleocode"] === true) {
-              return true;
+            if (isPlainObject2(settings)) {
+              const plugins = settings.enabledPlugins;
+              if (isPlainObject2(plugins) && plugins[CLEO_PLUGIN_KEY] === true) {
+                return true;
+              }
             }
           } catch {
           }
@@ -45683,8 +45852,11 @@ var init_install = __esm({
        * and default references from the provider registry (T1919).
        *
        * @param projectDir - Project root directory
+       * @throws {@link UserGlobalClaudeConfigError} when the project root is inside
+       *   the user-global Claude config dir (T13227); nothing is written.
        */
       async ensureInstructionReferences(projectDir) {
+        assertProjectInstructionScope(projectDir);
         await ensureProviderInstructionFile("claude-code", projectDir, {});
       }
       /**
@@ -45695,13 +45867,14 @@ var init_install = __esm({
        *
        * @param projectDir - Project root directory
        * @returns Array of installed command filenames
+       * @throws {@link UserGlobalClaudeConfigError} when the target is user-global
        */
       installCommands(projectDir) {
         const adapterCommandsDir = getAdapterCommandsDir();
         if (!existsSync7(adapterCommandsDir)) {
           return [];
         }
-        const targetDir = join8(projectDir, ".claude", "commands");
+        const targetDir = projectClaudeCommandsDir(projectDir);
         mkdirSync3(targetDir, { recursive: true });
         const installed = [];
         const files = readdirSync3(adapterCommandsDir).filter((f) => f.endsWith(".md"));
@@ -45714,13 +45887,17 @@ var init_install = __esm({
         return installed;
       }
       /**
-       * Register the CLEO brain plugin in ~/.claude/settings.json.
+       * Register the CLEO brain plugin in the project's
+       * `.claude/settings.local.json` (T13227: never the user-global settings).
        *
+       * @param projectDir - Project root directory
        * @returns Description of what was registered, or null if no change needed
+       * @throws {@link UserGlobalClaudeConfigError} when the target is user-global
        */
-      async registerPlugin() {
-        const pluginKey = "cleo@cleocode";
-        const wrote = await updateJsonConfigFile3(claudeSettingsPath(), (settings) => {
+      async registerPlugin(projectDir) {
+        const pluginKey = CLEO_PLUGIN_KEY;
+        const settingsPath = projectClaudeSettingsPath(projectDir);
+        const wrote = await updateJsonConfigFile3(settingsPath, (settings) => {
           const enabledPlugins = settings.enabledPlugins ?? {};
           if (!isPlainObject2(enabledPlugins)) {
             throw new Error('settings.json "enabledPlugins" is not an object; not modifying it');
@@ -45735,31 +45912,38 @@ var init_install = __esm({
           settings.enabledPlugins = enabledPlugins;
           return true;
         });
-        return wrote ? `Enabled ${pluginKey} in ~/.claude/settings.json` : null;
+        if (!wrote) return null;
+        excludeLocalSettingsFromGit(projectDir);
+        return `Enabled ${pluginKey} in ${settingsPath}`;
       }
       /**
        * Install the CLEO PreCompact hook templates for Claude Code (T1013).
        *
-       * Writes two files to `~/.claude/hooks/`:
+       * Writes two files to the project's `.claude/hooks/`:
        * 1. `cleo-precompact-core.sh` — universal CLEO safestop helper (shared
        *    across all providers; sourced by the provider-specific shim).
        * 2. `precompact-safestop.sh` — Claude-Code-flavoured wrapper that invokes
        *    `cleo memory precompact-flush` and `cleo safestop`.
        *
-       * Also registers a `PreCompact` entry in `~/.claude/settings.json` so Claude
-       * Code runs the hook when auto-compact fires (at 95% context).
+       * Also registers a `PreCompact` entry in the project's
+       * `.claude/settings.local.json` so Claude Code runs the hook when
+       * auto-compact fires (at 95% context). Files git does not ignore yet are
+       * kept out of it with a marked `info/exclude` block. Nothing is written to
+       * the user-global Claude config (T13227).
        *
        * Idempotent: subsequent installs skip unchanged files and do not duplicate
-       * the settings.json hook entry.
+       * the settings hook entry.
        *
+       * @param projectDir - Project root directory
        * @returns Install summary (paths written + config change description), or
        *   `null` when no change was required.
+       * @throws {@link UserGlobalClaudeConfigError} when the target is user-global
        *
-       * @task T1013
+       * @task T1013 @task T13227
        */
-      async installHookTemplates() {
-        const claudeDir = getClaudeConfigDir();
-        const hooksDir = join8(claudeDir, "hooks");
+      async installHookTemplates(projectDir) {
+        const hooksDir = projectClaudeHooksDir(projectDir);
+        const settingsPath = projectClaudeSettingsPath(projectDir);
         let templates;
         try {
           templates = installProviderHookTemplates({
@@ -45769,30 +45953,35 @@ var init_install = __esm({
         } catch {
           return null;
         }
+        for (const file2 of PROJECT_HOOK_FILES) excludeHookFileFromGit(projectDir, file2);
         const settingsEntryAdded = await this.registerPreCompactHook(
+          settingsPath,
           join8(hooksDir, "precompact-safestop.sh")
         );
+        if (settingsEntryAdded) excludeLocalSettingsFromGit(projectDir);
         if (templates.installedFiles.length === 0 && !settingsEntryAdded) {
           return null;
         }
         return { templates, settingsEntryAdded };
       }
       /**
-       * Register the PreCompact hook command in `~/.claude/settings.json`.
+       * Register the PreCompact hook command in the project's
+       * `.claude/settings.local.json`.
        *
        * The Claude Code native event name for the canonical `PreCompact` event is
        * `PreCompact` (identity mapping — see `hook-mappings.json`). The entry is
        * tagged with `# cleo-hook` so the uninstall flow can identify and remove
        * our additions without touching user-authored hooks.
        *
+       * @param settingsPath - The project settings file (already scope-checked).
        * @param shimPath - Absolute path to the installed `precompact-safestop.sh`.
        * @returns `true` when a new hook entry was written, `false` when an
        *   equivalent entry was already present.
        *
        * @task T1013
        */
-      async registerPreCompactHook(shimPath) {
-        return updateJsonConfigFile3(claudeSettingsPath(), (settings) => {
+      async registerPreCompactHook(settingsPath, shimPath) {
+        return updateJsonConfigFile3(settingsPath, (settings) => {
           const hooks = hookMap(settings);
           if (hasCleoHook(hooks.PreCompact, "precompact-safestop.sh")) {
             return false;
@@ -45915,7 +46104,7 @@ var init_agent_spawn_wrapper = __esm({
 // packages/adapters/src/providers/shared/prompt-file.ts
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { dirname as dirname5, join as join9 } from "node:path";
+import { dirname as dirname6, join as join9 } from "node:path";
 async function writeSpawnPromptFile(prefix, prompt) {
   const dir = await mkdtemp(join9(tmpdir2(), `cleo-${prefix}-`));
   const file2 = join9(dir, "prompt.txt");
@@ -45923,7 +46112,7 @@ async function writeSpawnPromptFile(prefix, prompt) {
   return file2;
 }
 async function removeSpawnPromptFile(file2) {
-  await rm(dirname5(file2), { recursive: true, force: true }).catch(() => void 0);
+  await rm(dirname6(file2), { recursive: true, force: true }).catch(() => void 0);
 }
 var init_prompt_file = __esm({
   "packages/adapters/src/providers/shared/prompt-file.ts"() {
@@ -46015,7 +46204,7 @@ function isEsrch(err) {
   return false;
 }
 function sleep(ms) {
-  return new Promise((resolve5) => setTimeout(resolve5, ms));
+  return new Promise((resolve6) => setTimeout(resolve6, ms));
 }
 var SIGTERM_GRACE_MS;
 var init_suite_reaper = __esm({
@@ -46309,7 +46498,7 @@ var init_transport = __esm({
 
 // packages/adapters/src/providers/claude-code/adapter.ts
 import { existsSync as existsSync8 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
+import { homedir as homedir5 } from "node:os";
 import { join as join11 } from "node:path";
 import { findOnPath as findOnPath2 } from "@cleocode/paths";
 var ClaudeCodeAdapter;
@@ -46463,7 +46652,7 @@ var init_adapter = __esm({
         cliAvailable = resolvedCli !== null;
         if (resolvedCli) details.cliPath = resolvedCli;
         else details.cliAvailable = false;
-        const claudeConfigDir = join11(homedir6(), ".claude");
+        const claudeConfigDir = join11(homedir5(), ".claude");
         const configExists = existsSync8(claudeConfigDir);
         details.configDirExists = configExists;
         const entrypointSet = process.env.CLAUDE_CODE_ENTRYPOINT !== void 0;
@@ -46494,10 +46683,10 @@ var init_adapter = __esm({
 
 // packages/adapters/src/providers/claude-code/statusline.ts
 import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:fs";
-import { homedir as homedir7 } from "node:os";
+import { homedir as homedir6 } from "node:os";
 import { join as join12 } from "node:path";
 function getClaudeSettingsPath() {
-  return process.env["CLAUDE_SETTINGS"] ?? join12(process.env["CLAUDE_HOME"] ?? join12(homedir7(), ".claude"), "settings.json");
+  return process.env["CLAUDE_SETTINGS"] ?? join12(process.env["CLAUDE_HOME"] ?? join12(homedir6(), ".claude"), "settings.json");
 }
 function checkStatuslineIntegration() {
   const settingsPath = getClaudeSettingsPath();
@@ -46511,7 +46700,7 @@ function checkStatuslineIntegration() {
     if (cmd.includes("context-monitor.sh") || cmd.includes("cleo-statusline") || cmd.includes(".context-state.json") || cmd.includes("context-states")) {
       return "configured";
     }
-    const scriptPath = cmd.startsWith("~") ? cmd.replace("~", homedir7()) : cmd;
+    const scriptPath = cmd.startsWith("~") ? cmd.replace("~", homedir6()) : cmd;
     if (existsSync9(scriptPath)) {
       try {
         const content = readFileSync7(scriptPath, "utf-8");
@@ -46593,6 +46782,25 @@ var init_paths2 = __esm({
   }
 });
 
+// packages/adapters/src/providers/shared/project-instruction-file.ts
+import {
+  ensureProviderInstructionFile as ensureProviderInstructionFile2,
+  HomeInstructionFileError
+} from "@cleocode/caamp";
+async function ensureProjectInstructionFile(providerId, projectDir, options) {
+  try {
+    return await ensureProviderInstructionFile2(providerId, projectDir, options);
+  } catch (err) {
+    if (err instanceof HomeInstructionFileError) return null;
+    throw err;
+  }
+}
+var init_project_instruction_file = __esm({
+  "packages/adapters/src/providers/shared/project-instruction-file.ts"() {
+    "use strict";
+  }
+});
+
 // packages/adapters/src/providers/shared/cli-spawn.ts
 import { spawn } from "node:child_process";
 import { resolveSpawnInvocation as resolveSpawnInvocation2 } from "@cleocode/paths";
@@ -46767,7 +46975,7 @@ var init_hooks2 = __esm({
 import { existsSync as existsSync12, readFileSync as readFileSync8 } from "node:fs";
 import { join as join18 } from "node:path";
 import {
-  ensureProviderInstructionFile as ensureProviderInstructionFile3,
+  ensureProviderInstructionFile as ensureProviderInstructionFile4,
   ensureProviderRuleFile,
   updateJsonConfigFile as updateJsonConfigFile4
 } from "@cleocode/caamp";
@@ -46778,8 +46986,10 @@ var CLEO_MDC_FRONTMATTER, CursorInstallProvider;
 var init_install2 = __esm({
   "packages/adapters/src/providers/cursor/install.ts"() {
     "use strict";
+    init_heavy_command_hook_install();
     init_hook_template_installer();
     init_paths2();
+    init_project_instruction_file();
     CLEO_MDC_FRONTMATTER = [
       "---",
       "description: CLEO task management protocol references",
@@ -46800,21 +47010,29 @@ var init_install2 = __esm({
         const installedAt = (/* @__PURE__ */ new Date()).toISOString();
         let instructionFileUpdated = false;
         const details = {};
-        const instructionResult = await ensureProviderInstructionFile3("cursor", projectDir, {});
-        const cursorFilesUpdated = await this.updateInstructionFiles(projectDir);
-        instructionFileUpdated = instructionResult.action !== "intact" || cursorFilesUpdated;
-        if (instructionFileUpdated) {
-          details.instructionFiles = this.getUpdatedFileList(projectDir);
+        const instructionResult = await ensureProjectInstructionFile("cursor", projectDir, {});
+        if (instructionResult === null) {
+          details.instructionFiles = "skipped";
+        } else {
+          const cursorFilesUpdated = await this.updateInstructionFiles(projectDir);
+          instructionFileUpdated = instructionResult.action !== "intact" || cursorFilesUpdated;
+          if (instructionFileUpdated) {
+            details.instructionFiles = this.getUpdatedFileList(projectDir);
+          }
         }
         let hooksError = null;
-        try {
-          const hookResult = await this.installHookTemplates(projectDir);
-          if (hookResult) {
-            details.hookTemplates = hookResult;
+        if (isUserHomeDir(projectDir)) {
+          details.hookTemplates = "skipped";
+        } else {
+          try {
+            const hookResult = await this.installHookTemplates(projectDir);
+            if (hookResult) {
+              details.hookTemplates = hookResult;
+            }
+          } catch (err) {
+            hooksError = err instanceof Error ? err.message : String(err);
+            details.hooksError = hooksError;
           }
-        } catch (err) {
-          hooksError = err instanceof Error ? err.message : String(err);
-          details.hooksError = hooksError;
         }
         return {
           success: hooksError === null,
@@ -46862,7 +47080,7 @@ var init_install2 = __esm({
        * @param projectDir - Project root directory
        */
       async ensureInstructionReferences(projectDir) {
-        await ensureProviderInstructionFile3("cursor", projectDir, {});
+        await ensureProviderInstructionFile4("cursor", projectDir, {});
         await this.updateInstructionFiles(projectDir);
       }
       /**
@@ -47294,7 +47512,7 @@ var init_hooks3 = __esm({
 // packages/adapters/src/providers/opencode/install.ts
 import { existsSync as existsSync18, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join25 } from "node:path";
-import { ensureProviderInstructionFile as ensureProviderInstructionFile6 } from "@cleocode/caamp";
+import { ensureProviderInstructionFile as ensureProviderInstructionFile7 } from "@cleocode/caamp";
 var OpenCodeInstallProvider;
 var init_install3 = __esm({
   "packages/adapters/src/providers/opencode/install.ts"() {
@@ -47302,6 +47520,7 @@ var init_install3 = __esm({
     init_heavy_command_hook_install();
     init_hook_template_installer();
     init_paths2();
+    init_project_instruction_file();
     OpenCodeInstallProvider = class {
       /**
        * Install CLEO into an OpenCode project.
@@ -47313,14 +47532,15 @@ var init_install3 = __esm({
         const { projectDir } = options;
         const installedAt = (/* @__PURE__ */ new Date()).toISOString();
         const details = {};
-        const instructResult = await ensureProviderInstructionFile6("opencode", projectDir, {
+        const instructResult = await ensureProjectInstructionFile("opencode", projectDir, {
           scope: "project",
           references: [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"]
         });
-        const instructionFileUpdated = instructResult.action !== "intact";
+        const instructionFileUpdated = instructResult !== null && instructResult.action !== "intact";
         if (instructionFileUpdated) {
           details.instructionFile = join25(projectDir, instructResult.instructFile);
         }
+        if (instructResult === null) details.instructionFile = "skipped";
         const hookResult = this.installHookTemplates(projectDir);
         if (hookResult) {
           details.hookTemplates = hookResult;
@@ -47360,7 +47580,7 @@ var init_install3 = __esm({
        */
       async isInstalled() {
         try {
-          const result = await ensureProviderInstructionFile6("opencode", process.cwd(), {
+          const result = await ensureProviderInstructionFile7("opencode", process.cwd(), {
             scope: "project",
             references: [
               `@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`,
@@ -47380,7 +47600,7 @@ var init_install3 = __esm({
        * @param projectDir - Project root directory
        */
       async ensureInstructionReferences(projectDir) {
-        await ensureProviderInstructionFile6("opencode", projectDir, {
+        await ensureProviderInstructionFile7("opencode", projectDir, {
           scope: "project",
           references: [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"]
         });
@@ -47988,7 +48208,7 @@ var init_hooks4 = __esm({
 
 // packages/adapters/src/providers/pi/install.ts
 import { join as join29 } from "node:path";
-import { ensureProviderInstructionFile as ensureProviderInstructionFile7 } from "@cleocode/caamp";
+import { ensureProviderInstructionFile as ensureProviderInstructionFile8 } from "@cleocode/caamp";
 function getCleoReferences() {
   return [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"];
 }
@@ -47997,6 +48217,7 @@ var init_install4 = __esm({
   "packages/adapters/src/providers/pi/install.ts"() {
     "use strict";
     init_paths2();
+    init_project_instruction_file();
     PiInstallProvider = class {
       /**
        * Install CLEO into a Pi coding agent project.
@@ -48008,17 +48229,18 @@ var init_install4 = __esm({
         const { projectDir } = options;
         const installedAt = (/* @__PURE__ */ new Date()).toISOString();
         const details = {};
-        const projectResult = await ensureProviderInstructionFile7("pi", projectDir, {
+        const projectResult = await ensureProjectInstructionFile("pi", projectDir, {
           scope: "project",
           references: getCleoReferences()
         });
-        const projectUpdated = projectResult.action !== "intact";
+        const projectUpdated = projectResult !== null && projectResult.action !== "intact";
         if (projectUpdated) {
           details.instructionFile = join29(projectDir, projectResult.instructFile);
         }
+        if (projectResult === null) details.instructionFile = "skipped";
         let globalUpdated = false;
         try {
-          const globalResult = await ensureProviderInstructionFile7("pi", projectDir, {
+          const globalResult = await ensureProviderInstructionFile8("pi", projectDir, {
             scope: "global",
             references: getCleoReferences()
           });
@@ -48050,7 +48272,7 @@ var init_install4 = __esm({
        */
       async isInstalled() {
         try {
-          const result = await ensureProviderInstructionFile7("pi", process.cwd(), {
+          const result = await ensureProviderInstructionFile8("pi", process.cwd(), {
             scope: "project",
             references: getCleoReferences()
           });
@@ -48058,7 +48280,7 @@ var init_install4 = __esm({
         } catch {
         }
         try {
-          const result = await ensureProviderInstructionFile7("pi", process.cwd(), {
+          const result = await ensureProviderInstructionFile8("pi", process.cwd(), {
             scope: "global",
             references: getCleoReferences()
           });
@@ -48075,7 +48297,7 @@ var init_install4 = __esm({
        * @param projectDir - Project root directory
        */
       async ensureInstructionReferences(projectDir) {
-        await ensureProviderInstructionFile7("pi", projectDir, {
+        await ensureProviderInstructionFile8("pi", projectDir, {
           scope: "project",
           references: getCleoReferences()
         });
@@ -48220,21 +48442,21 @@ var init_spawn4 = __esm({
 
 // packages/adapters/src/providers/pi/adapter.ts
 import { existsSync as existsSync21 } from "node:fs";
-import { homedir as homedir14 } from "node:os";
+import { homedir as homedir13 } from "node:os";
 import { join as join30 } from "node:path";
 import { findOnPath as findOnPath13 } from "@cleocode/paths";
 function getPiAgentDir() {
   const env = process.env["PI_CODING_AGENT_DIR"];
   if (env !== void 0 && env.length > 0) {
-    if (env === "~") return homedir14();
-    if (env.startsWith("~/")) return join30(homedir14(), env.slice(2));
+    if (env === "~") return homedir13();
+    if (env.startsWith("~/")) return join30(homedir13(), env.slice(2));
     return env;
   }
   const piHome = process.env["PI_HOME"];
   if (piHome !== void 0 && piHome.length > 0) {
     return join30(piHome, "agent");
   }
-  return join30(homedir14(), ".pi", "agent");
+  return join30(homedir13(), ".pi", "agent");
 }
 var PiAdapter;
 var init_adapter4 = __esm({
@@ -48559,12 +48781,12 @@ function createAdapter2() {
 
 // packages/adapters/src/providers/codex/adapter.ts
 import { existsSync as existsSync11 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
+import { homedir as homedir8 } from "node:os";
 import { join as join17 } from "node:path";
 import { findOnPath as findOnPath3 } from "@cleocode/paths";
 
 // packages/adapters/src/providers/codex/hooks.ts
-import { homedir as homedir8 } from "node:os";
+import { homedir as homedir7 } from "node:os";
 import { join as join15 } from "node:path";
 
 // packages/adapters/src/providers/shared/transcript-reader.ts
@@ -48684,15 +48906,16 @@ var CodexHookProvider = class {
    * @task T162 @epic T134
    */
   async getTranscript(_sessionId, _projectDir) {
-    return readLatestTranscript(join15(homedir8(), ".codex"));
+    return readLatestTranscript(join15(homedir7(), ".codex"));
   }
 };
 
 // packages/adapters/src/providers/codex/install.ts
 init_heavy_command_hook_install();
 init_paths2();
+init_project_instruction_file();
 import { join as join16 } from "node:path";
-import { ensureProviderInstructionFile as ensureProviderInstructionFile2 } from "@cleocode/caamp";
+import { ensureProviderInstructionFile as ensureProviderInstructionFile3 } from "@cleocode/caamp";
 var CodexInstallProvider = class {
   /**
    * Install CLEO into a Codex CLI environment.
@@ -48705,14 +48928,15 @@ var CodexInstallProvider = class {
     const { projectDir } = options;
     const installedAt = (/* @__PURE__ */ new Date()).toISOString();
     const details = {};
-    const result = await ensureProviderInstructionFile2("codex", projectDir, {
+    const result = await ensureProjectInstructionFile("codex", projectDir, {
       scope: "project",
       references: [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"]
     });
-    const instructionFileUpdated = result.action !== "intact";
+    const instructionFileUpdated = result !== null && result.action !== "intact";
     if (instructionFileUpdated) {
       details.instructionFile = join16(projectDir, result.instructFile);
     }
+    if (result === null) details.instructionFile = "skipped";
     let success2 = true;
     if (options.heavyCommandHook !== void 0 && isUserHomeDir(projectDir)) {
       details.heavyCommandHook = "skipped";
@@ -48750,7 +48974,7 @@ var CodexInstallProvider = class {
    */
   async isInstalled() {
     try {
-      const result = await ensureProviderInstructionFile2("codex", process.cwd(), {
+      const result = await ensureProviderInstructionFile3("codex", process.cwd(), {
         scope: "project",
         references: [
           `@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`,
@@ -48771,7 +48995,7 @@ var CodexInstallProvider = class {
    * @task T162
    */
   async ensureInstructionReferences(projectDir) {
-    await ensureProviderInstructionFile2("codex", projectDir, {
+    await ensureProviderInstructionFile3("codex", projectDir, {
       scope: "project",
       references: [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"]
     });
@@ -48859,7 +49083,7 @@ var CodexAdapter = class {
     cliAvailable = resolvedCli !== null;
     if (resolvedCli) details.cliPath = resolvedCli;
     else details.cliAvailable = false;
-    const codexConfigDir = join17(homedir9(), ".codex");
+    const codexConfigDir = join17(homedir8(), ".codex");
     const configExists = existsSync11(codexConfigDir);
     details.configDirExists = configExists;
     const healthy = cliAvailable;
@@ -48902,12 +49126,12 @@ init_cursor();
 
 // packages/adapters/src/providers/gemini-cli/adapter.ts
 import { existsSync as existsSync15 } from "node:fs";
-import { homedir as homedir11 } from "node:os";
+import { homedir as homedir10 } from "node:os";
 import { join as join22 } from "node:path";
 import { findOnPath as findOnPath5 } from "@cleocode/paths";
 
 // packages/adapters/src/providers/gemini-cli/hooks.ts
-import { homedir as homedir10 } from "node:os";
+import { homedir as homedir9 } from "node:os";
 import { join as join20 } from "node:path";
 var GEMINI_CLI_EVENT_MAP = {
   SessionStart: "SessionStart",
@@ -48986,15 +49210,16 @@ var GeminiCliHookProvider = class {
    * @task T161 @epic T134
    */
   async getTranscript(_sessionId, _projectDir) {
-    return readLatestTranscript(join20(homedir10(), ".gemini"));
+    return readLatestTranscript(join20(homedir9(), ".gemini"));
   }
 };
 
 // packages/adapters/src/providers/gemini-cli/install.ts
 init_paths2();
+init_project_instruction_file();
 import { existsSync as existsSync14, readFileSync as readFileSync9 } from "node:fs";
 import { join as join21 } from "node:path";
-import { ensureProviderInstructionFile as ensureProviderInstructionFile4 } from "@cleocode/caamp";
+import { ensureProviderInstructionFile as ensureProviderInstructionFile5 } from "@cleocode/caamp";
 var GeminiCliInstallProvider = class {
   /**
    * Install CLEO into a Gemini CLI environment.
@@ -49007,14 +49232,15 @@ var GeminiCliInstallProvider = class {
     const { projectDir } = options;
     const installedAt = (/* @__PURE__ */ new Date()).toISOString();
     const details = {};
-    const result = await ensureProviderInstructionFile4("gemini-cli", projectDir, {
+    const result = await ensureProjectInstructionFile("gemini-cli", projectDir, {
       references: [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"],
       scope: "project"
     });
-    const instructionFileUpdated = result.action !== "intact";
+    const instructionFileUpdated = result !== null && result.action !== "intact";
     if (instructionFileUpdated) {
       details.instructionFile = result.filePath;
     }
+    if (result === null) details.instructionFile = "skipped";
     return {
       success: true,
       installedAt,
@@ -49059,7 +49285,7 @@ var GeminiCliInstallProvider = class {
    * @task T161
    */
   async ensureInstructionReferences(projectDir) {
-    await ensureProviderInstructionFile4("gemini-cli", projectDir, {
+    await ensureProviderInstructionFile5("gemini-cli", projectDir, {
       references: [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"],
       scope: "project"
     });
@@ -49158,7 +49384,7 @@ var GeminiCliAdapter = class {
     cliAvailable = resolvedCli !== null;
     if (resolvedCli) details.cliPath = resolvedCli;
     else details.cliAvailable = false;
-    const geminiConfigDir = join22(homedir11(), ".gemini");
+    const geminiConfigDir = join22(homedir10(), ".gemini");
     const configExists = existsSync15(geminiConfigDir);
     details.configDirExists = configExists;
     const healthy = cliAvailable;
@@ -49197,7 +49423,7 @@ function createAdapter5() {
 
 // packages/adapters/src/providers/kimi/adapter.ts
 import { existsSync as existsSync17 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
+import { homedir as homedir11 } from "node:os";
 import { join as join24 } from "node:path";
 import { findOnPath as findOnPath7 } from "@cleocode/paths";
 
@@ -49258,9 +49484,10 @@ var KimiHookProvider = class {
 
 // packages/adapters/src/providers/kimi/install.ts
 init_paths2();
+init_project_instruction_file();
 import { existsSync as existsSync16, readFileSync as readFileSync10 } from "node:fs";
 import { join as join23 } from "node:path";
-import { ensureProviderInstructionFile as ensureProviderInstructionFile5 } from "@cleocode/caamp";
+import { ensureProviderInstructionFile as ensureProviderInstructionFile6 } from "@cleocode/caamp";
 var KimiInstallProvider = class {
   /**
    * Install CLEO into a Kimi environment.
@@ -49273,14 +49500,15 @@ var KimiInstallProvider = class {
     const { projectDir } = options;
     const installedAt = (/* @__PURE__ */ new Date()).toISOString();
     const details = {};
-    const result = await ensureProviderInstructionFile5("kimi", projectDir, {
+    const result = await ensureProjectInstructionFile("kimi", projectDir, {
       references: [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"],
       scope: "project"
     });
-    const instructionFileUpdated = result.action !== "intact";
+    const instructionFileUpdated = result !== null && result.action !== "intact";
     if (instructionFileUpdated) {
       details.instructionFile = result.filePath;
     }
+    if (result === null) details.instructionFile = "skipped";
     return {
       success: true,
       installedAt,
@@ -49325,7 +49553,7 @@ var KimiInstallProvider = class {
    * @task T163
    */
   async ensureInstructionReferences(projectDir) {
-    await ensureProviderInstructionFile5("kimi", projectDir, {
+    await ensureProviderInstructionFile6("kimi", projectDir, {
       references: [`@${getCleoTemplatesTildePath()}/CLEO-INJECTION.md`, "@.cleo/memory-bridge.md"],
       scope: "project"
     });
@@ -49411,7 +49639,7 @@ var KimiAdapter = class {
     cliAvailable = resolvedCli !== null;
     if (resolvedCli) details.cliPath = resolvedCli;
     else details.cliAvailable = false;
-    const kimiConfigDir = join24(homedir12(), ".kimi");
+    const kimiConfigDir = join24(homedir11(), ".kimi");
     const configExists = existsSync17(kimiConfigDir);
     details.configDirExists = configExists;
     const healthy = cliAvailable;
@@ -49455,8 +49683,8 @@ init_heavy_command_hook_install();
 init_hook_config();
 import { execFileSync as execFileSync2, spawnSync as spawnSync3 } from "node:child_process";
 import { existsSync as existsSync20, lstatSync, readFileSync as readFileSync12, statSync as statSync3 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { dirname as dirname6, join as join28 } from "node:path";
+import { homedir as homedir12 } from "node:os";
+import { dirname as dirname7, join as join28 } from "node:path";
 import { JsonConfigParseError } from "@cleocode/caamp";
 import { findOnPath as findOnPath11 } from "@cleocode/paths";
 var HEAVY_HOOK_DELIVERY_PROVIDERS = Object.freeze([
@@ -49470,7 +49698,7 @@ var CODEX_SHARED_REMEDY = "if the team wants Codex governed here, add CLEO's Pre
 var KIMI_REASON = "Kimi reads hooks only from its global ~/.kimi/config.toml, and CLEO never writes user-global configs";
 var KIMI_REMEDY = "add a [[hooks]] entry for PreToolUse that runs `cleo hook heavy-command --provider kimi` to ~/.kimi/config.toml yourself";
 function homeOf(env) {
-  return env.HOME || homedir13();
+  return env.HOME || homedir12();
 }
 function heavyHookTarget(provider, projectDir, env = process.env) {
   switch (provider) {
@@ -49734,7 +49962,7 @@ function inspectProvider(provider, projectDir, mode, env, gitChecks) {
       snippet: codexHookSnippet()
     };
   }
-  const blocked = nonDirectoryAncestor(dirname6(target));
+  const blocked = nonDirectoryAncestor(dirname7(target));
   if (blocked !== null) {
     return {
       ...base,
@@ -49838,12 +50066,12 @@ init_hook_template_installer();
 
 // packages/adapters/src/registry.ts
 import { readFileSync as readFileSync13 } from "node:fs";
-import { dirname as dirname7, join as join31, resolve as resolve4 } from "node:path";
+import { dirname as dirname8, join as join31, resolve as resolve5 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var PROVIDER_IDS = ["claude-code", "opencode", "cursor", "pi"];
 function getProviderManifests() {
   const manifests = [];
-  const baseDir = resolve4(dirname7(fileURLToPath3(import.meta.url)), "providers");
+  const baseDir = resolve5(dirname8(fileURLToPath3(import.meta.url)), "providers");
   for (const providerId of PROVIDER_IDS) {
     try {
       const manifestPath = join31(baseDir, providerId, "manifest.json");