@cleocode/cleo-os 2026.4.108 → 2026.4.109

package/README.md

@@ -305,6 +305,72 @@ cleo version
 
 ---
 
+## Startup Migration Verify
+
+CleoOS runs a migration verify pre-check every time `cleoos` starts — before
+Pi is imported and before any workers are dispatched. This prevents agents from
+running against a drifted database and producing confusing mid-session errors.
+
+### How It Works
+
+`cleoos` invokes `cleo upgrade --diagnose --json` via subprocess (CLI
+boundary — no direct imports from `@cleocode/core`). The result is classified
+into three severity levels:
+
+| Severity | Condition | Action |
+|----------|-----------|--------|
+| **ok** | All 5 DB findings are `status:"ok"` | Silent pass-through |
+| **warn** | One or more findings are `status:"warning"` | Logged to stdout; startup continues |
+| **fatal** | One or more findings are `status:"error"`, OR the `cleo` binary could not be invoked | Structured error printed to stderr; startup halts (exit 2) |
+
+`warn` corresponds to states the reconciler already auto-fixed (e.g. a missing
+column that was backfilled, or `signaldock.db` not yet created). `fatal`
+corresponds to states the reconciler could not resolve — a missing migration
+folder, a schema missing a required table, or an unreachable `cleo` binary.
+
+### Operator Remediation
+
+When CleoOS exits with code 2 and prints a fatal drift error:
+
+```
+CleoOS startup blocked — DB migration drift detected
+═══════════════════════════════════════════════════════════
+
+The following issues prevent safe worker spawn:
+
+  [FATAL] tasks.db.journal
+          Migration folder missing: .cleo/migrations/tasks does not exist
+          Fix: Run: cleo init or cleo upgrade
+```
+
+Try these remediation steps in order:
+
+1. **`cleo upgrade`** — applies pending migrations and repairs known drift.
+2. **`cleo upgrade --diagnose`** — detailed DB inspection showing every check.
+3. **`cleo init --force`** — resets `tasks.db` to a fresh state. **Warning:
+   this destroys all task data**. Run `cleo backup add` first if possible.
+4. **`cleo restore backup --file tasks.db`** — restore from the most recent
+   snapshot if the DB is corrupted.
+
+### Bypassing the Check (CI / Test Harnesses)
+
+Set `CLEO_SKIP_MIGRATION_CHECK=1` to skip the check entirely. This is
+intended for CI environments where the DB is freshly initialised by the test
+harness and no persistent CLEO state exists:
+
+```bash
+CLEO_SKIP_MIGRATION_CHECK=1 cleoos --version
+```
+
+### Dedicated Verb (Future)
+
+The current implementation falls back to `cleo upgrade --diagnose --json`
+because `cleo admin migrations verify` does not yet exist. When that verb
+lands, the `verifyMigrations()` function will be updated to prefer it.
+`MigrationVerifyResult.usedDedicatedVerb` will flip to `true`.
+
+---
+
 ## Wave Roadmap
 
 CleoOS ships in named waves. Each wave targets a vertical slice of the platform.

package/dist/cli.js

@@ -15,6 +15,7 @@ import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { getPlatformPaths } from '@cleocode/core/system/platform-paths.js';
 import { renderDoctorReport, runDoctor } from './commands/doctor.js';
+import { renderFatalDriftError, renderWarnDrift, verifyMigrations, } from './health/verify-migrations.js';
 import { AgentRegistry } from './registry/agent-registry.js';
 import { ProviderMatrix } from './registry/provider-matrix.js';
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -196,6 +197,20 @@ async function main() {
     if (await handleDiagnosticsFlags(userArgs)) {
         return;
     }
+    // Migration verify pre-check — fail-fast if DBs are in a drift state that
+    // the runtime reconciler cannot safely auto-fix before workers are spawned.
+    // Skip the check when CLEO_SKIP_MIGRATION_CHECK=1 is set (useful in CI
+    // environments where the DB is freshly initialised by the test harness).
+    if (process.env['CLEO_SKIP_MIGRATION_CHECK'] !== '1') {
+        const migrateResult = await verifyMigrations();
+        if (!migrateResult.ok) {
+            process.stderr.write(renderFatalDriftError(migrateResult));
+            process.exit(2);
+        }
+        if (migrateResult.severity === 'warn' && migrateResult.drift.length > 0) {
+            process.stdout.write(renderWarnDrift(migrateResult));
+        }
+    }
     // Dynamically import Pi — it's a peerDependency, may not be installed
     let piMain;
     try {

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,eAAuB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACpD,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,kEAAkE;QAClE,IAAI,WAAW,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CACtB,SAAS,EACT,IAAI,EACJ,cAAc,EACd,WAAW,EACX,MAAM,EACN,cAAc,CACf,CAAC;YACF,WAAW,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,sBAAsB,CAAC,IAAc;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;IACrE,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;IAErE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CACT,KAAK,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CACzG,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAClD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAC/H,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,qBAAqB;IAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACpC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,0EAA0E;IAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,2CAA2C;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,QAAkB,EAAE,cAAwB;IAC7D,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,IAAI;IACjB,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,sEAAsE;IACtE,IAAI,MAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QACzD,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CACX,oDAAoD;YAClD,qDAAqD;YACrD,wBAAwB,CAC3B,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAEjD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,eAAuB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACpD,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,kEAAkE;QAClE,IAAI,WAAW,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CACtB,SAAS,EACT,IAAI,EACJ,cAAc,EACd,WAAW,EACX,MAAM,EACN,cAAc,CACf,CAAC;YACF,WAAW,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,sBAAsB,CAAC,IAAc;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;IACrE,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;IAErE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CACT,KAAK,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CACzG,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAClD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAC/H,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,qBAAqB;IAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACpC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,0EAA0E;IAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,2CAA2C;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,QAAkB,EAAE,cAAwB;IAC7D,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,IAAI;IACjB,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAyE;IACzE,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,KAAK,GAAG,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,MAAM,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,aAAa,CAAC,QAAQ,KAAK,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,IAAI,MAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QACzD,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CACX,oDAAoD;YAClD,qDAAqD;YACrD,wBAAwB,CAC3B,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAEjD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/health/__tests__/verify-migrations.test.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Tests for the cleo-os startup migration verify check (T1185).
+ *
+ * All tests stub the {@link CliRunner} interface — no real `cleo` binary is
+ * invoked. Coverage:
+ *
+ * 1. Happy path — all findings ok → `ok: true`, `severity: "ok"`, empty drift.
+ * 2. Drift fixture (warning) — `status:"warning"` finding → `warn`, non-blocking.
+ * 3. Drift fixture (error) — `status:"error"` finding → `fatal`, blocking.
+ * 4. Classification — Scenario 1 (name-backfill warning) is `warn`, not `fatal`.
+ * 5. Classification — ENOENT binary failure is `fatal`.
+ * 6. Mixed warn+ok — aggregate is `warn`, `ok: true`.
+ * 7. Mixed fatal+warn — aggregate is `fatal`, `ok: false`.
+ * 8. Malformed JSON output → `fatal` with parse check.
+ * 9. Missing findings array → `fatal` with parse check.
+ * 10. Subprocess spawn error (non-ENOENT) → `fatal`.
+ * 11. `usedDedicatedVerb` is always `false` (dedicated verb not yet implemented).
+ * 12. `renderFatalDriftError` output includes remediation instructions.
+ * 13. `renderWarnDrift` output lists the warning check name.
+ *
+ * @packageDocumentation
+ */
+export {};
+//# sourceMappingURL=verify-migrations.test.d.ts.map

package/dist/health/__tests__/verify-migrations.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-migrations.test.d.ts","sourceRoot":"","sources":["../../../src/health/__tests__/verify-migrations.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/health/__tests__/verify-migrations.test.js

@@ -0,0 +1,292 @@
+/**
+ * Tests for the cleo-os startup migration verify check (T1185).
+ *
+ * All tests stub the {@link CliRunner} interface — no real `cleo` binary is
+ * invoked. Coverage:
+ *
+ * 1. Happy path — all findings ok → `ok: true`, `severity: "ok"`, empty drift.
+ * 2. Drift fixture (warning) — `status:"warning"` finding → `warn`, non-blocking.
+ * 3. Drift fixture (error) — `status:"error"` finding → `fatal`, blocking.
+ * 4. Classification — Scenario 1 (name-backfill warning) is `warn`, not `fatal`.
+ * 5. Classification — ENOENT binary failure is `fatal`.
+ * 6. Mixed warn+ok — aggregate is `warn`, `ok: true`.
+ * 7. Mixed fatal+warn — aggregate is `fatal`, `ok: false`.
+ * 8. Malformed JSON output → `fatal` with parse check.
+ * 9. Missing findings array → `fatal` with parse check.
+ * 10. Subprocess spawn error (non-ENOENT) → `fatal`.
+ * 11. `usedDedicatedVerb` is always `false` (dedicated verb not yet implemented).
+ * 12. `renderFatalDriftError` output includes remediation instructions.
+ * 13. `renderWarnDrift` output lists the warning check name.
+ *
+ * @packageDocumentation
+ */
+import { describe, expect, it } from 'vitest';
+import { renderFatalDriftError, renderWarnDrift, verifyMigrations } from '../verify-migrations.js';
+// ---------------------------------------------------------------------------
+// Stub runner factory
+// ---------------------------------------------------------------------------
+/**
+ * Build a {@link CliRunner} stub that resolves to a given JSON string.
+ *
+ * @param output - Raw JSON string to return from `runDiagnose()`.
+ */
+function stubRunner(output) {
+    return {
+        async runDiagnose() {
+            return output;
+        },
+    };
+}
+/**
+ * Build a {@link CliRunner} stub that rejects with the given error.
+ *
+ * @param message - Error message to throw from `runDiagnose()`.
+ */
+function failRunner(message) {
+    return {
+        async runDiagnose() {
+            throw new Error(message);
+        },
+    };
+}
+/**
+ * Build a well-formed `cleo upgrade --diagnose --json` envelope where all
+ * findings have the given status list.
+ */
+function makeEnvelope(findings) {
+    const ok = findings.filter((f) => f.status === 'ok').length;
+    const warnings = findings.filter((f) => f.status === 'warning').length;
+    const errors = findings.filter((f) => f.status === 'error').length;
+    return JSON.stringify({
+        success: true,
+        data: {
+            success: true,
+            findings,
+            summary: { ok, warnings, errors },
+        },
+    });
+}
+// ---------------------------------------------------------------------------
+// Fixtures
+// ---------------------------------------------------------------------------
+const ALL_OK_ENVELOPE = makeEnvelope([
+    { check: 'tasks.db.columns', status: 'ok', details: 'All required columns present' },
+    { check: 'tasks.db.journal', status: 'ok', details: '17 migrations in journal, all valid' },
+    { check: 'tasks.db.integrity', status: 'ok', details: 'SQLite integrity check passed' },
+    { check: 'brain.db.tables', status: 'ok', details: 'All 4 expected tables present' },
+    { check: 'brain.db.journal', status: 'ok', details: '15 migrations in journal, all valid' },
+    { check: 'brain.db.schema_columns', status: 'ok', details: 'All brain schema columns present' },
+    { check: 'signaldock.db', status: 'ok', details: 'signaldock.db exists' },
+    { check: 'conduit.db', status: 'ok', details: 'conduit.db exists' },
+]);
+const WARNING_ENVELOPE = makeEnvelope([
+    { check: 'tasks.db.columns', status: 'ok', details: 'All required columns present' },
+    {
+        check: 'signaldock.db',
+        status: 'warning',
+        details: 'signaldock.db not found',
+        fix: 'Run: cleo upgrade',
+    },
+    { check: 'conduit.db', status: 'ok', details: 'conduit.db exists' },
+]);
+const ERROR_ENVELOPE = makeEnvelope([
+    { check: 'tasks.db.columns', status: 'ok', details: 'All required columns present' },
+    {
+        check: 'tasks.db.journal',
+        status: 'error',
+        details: 'Migration folder missing: .cleo/migrations/tasks does not exist',
+        fix: 'Run: cleo init or cleo upgrade',
+    },
+]);
+const MIXED_WARN_OK_ENVELOPE = makeEnvelope([
+    { check: 'tasks.db.journal', status: 'ok', details: 'Journal valid' },
+    {
+        check: 'brain.db.schema_columns',
+        status: 'warning',
+        details: 'provenance column missing (auto-backfilled)',
+        fix: 'Run: cleo upgrade',
+    },
+]);
+const MIXED_FATAL_WARN_ENVELOPE = makeEnvelope([
+    {
+        check: 'tasks.db.journal',
+        status: 'error',
+        details: 'Required tasks table missing from schema',
+    },
+    {
+        check: 'signaldock.db',
+        status: 'warning',
+        details: 'signaldock.db not found',
+        fix: 'Run: cleo upgrade',
+    },
+]);
+// ---------------------------------------------------------------------------
+// Test 1: Happy path
+// ---------------------------------------------------------------------------
+describe('verifyMigrations', () => {
+    it('1: happy path — all findings ok → ok: true, severity ok, empty drift', async () => {
+        const result = await verifyMigrations(stubRunner(ALL_OK_ENVELOPE));
+        expect(result.ok).toBe(true);
+        expect(result.severity).toBe('ok');
+        expect(result.drift).toHaveLength(0);
+        expect(result.usedDedicatedVerb).toBe(false);
+    });
+    // -------------------------------------------------------------------------
+    // Test 2: Warning drift fixture
+    // -------------------------------------------------------------------------
+    it('2: drift fixture (warning) → warn severity, ok: true (non-blocking)', async () => {
+        const result = await verifyMigrations(stubRunner(WARNING_ENVELOPE));
+        expect(result.ok).toBe(true);
+        expect(result.severity).toBe('warn');
+        expect(result.drift).toHaveLength(1);
+        expect(result.drift[0]?.severity).toBe('warn');
+        expect(result.drift[0]?.check).toBe('signaldock.db');
+    });
+    // -------------------------------------------------------------------------
+    // Test 3: Error drift fixture
+    // -------------------------------------------------------------------------
+    it('3: drift fixture (error) → fatal severity, ok: false (blocking)', async () => {
+        const result = await verifyMigrations(stubRunner(ERROR_ENVELOPE));
+        expect(result.ok).toBe(false);
+        expect(result.severity).toBe('fatal');
+        expect(result.drift).toHaveLength(1);
+        expect(result.drift[0]?.severity).toBe('fatal');
+        expect(result.drift[0]?.check).toBe('tasks.db.journal');
+    });
+    // -------------------------------------------------------------------------
+    // Test 4: Scenario 1 classification (name-backfill warning → warn)
+    // -------------------------------------------------------------------------
+    it('4: Scenario 1 — name-backfill warning is classified as warn, not fatal', async () => {
+        const scenario1Envelope = makeEnvelope([
+            {
+                check: 'brain.db.schema_columns',
+                status: 'warning',
+                details: 'provenance column missing (name-backfill auto-applied)',
+                fix: 'Run: cleo upgrade',
+            },
+        ]);
+        const result = await verifyMigrations(stubRunner(scenario1Envelope));
+        expect(result.ok).toBe(true);
+        expect(result.severity).toBe('warn');
+        expect(result.drift[0]?.severity).toBe('warn');
+    });
+    // -------------------------------------------------------------------------
+    // Test 5: ENOENT binary failure → fatal
+    // -------------------------------------------------------------------------
+    it('5: ENOENT — cleo binary not on PATH → fatal, ok: false', async () => {
+        const result = await verifyMigrations(failRunner('spawn cleo ENOENT'));
+        expect(result.ok).toBe(false);
+        expect(result.severity).toBe('fatal');
+        expect(result.drift).toHaveLength(1);
+        expect(result.drift[0]?.check).toBe('cleo-binary');
+        expect(result.drift[0]?.severity).toBe('fatal');
+        expect(result.drift[0]?.details).toMatch(/not found/i);
+    });
+    // -------------------------------------------------------------------------
+    // Test 6: Mixed warn + ok → aggregate warn, ok: true
+    // -------------------------------------------------------------------------
+    it('6: mixed warn+ok — aggregate severity is warn, ok: true', async () => {
+        const result = await verifyMigrations(stubRunner(MIXED_WARN_OK_ENVELOPE));
+        expect(result.ok).toBe(true);
+        expect(result.severity).toBe('warn');
+    });
+    // -------------------------------------------------------------------------
+    // Test 7: Mixed fatal + warn → aggregate fatal, ok: false
+    // -------------------------------------------------------------------------
+    it('7: mixed fatal+warn — aggregate severity is fatal, ok: false', async () => {
+        const result = await verifyMigrations(stubRunner(MIXED_FATAL_WARN_ENVELOPE));
+        expect(result.ok).toBe(false);
+        expect(result.severity).toBe('fatal');
+        // Both findings should be in drift (warn is included because severity !== ok)
+        expect(result.drift.some((d) => d.severity === 'fatal')).toBe(true);
+        expect(result.drift.some((d) => d.severity === 'warn')).toBe(true);
+    });
+    // -------------------------------------------------------------------------
+    // Test 8: Malformed JSON output → fatal
+    // -------------------------------------------------------------------------
+    it('8: malformed JSON output → fatal with parse check', async () => {
+        const result = await verifyMigrations(stubRunner('not-valid-json'));
+        expect(result.ok).toBe(false);
+        expect(result.severity).toBe('fatal');
+        expect(result.drift[0]?.check).toBe('parse');
+        expect(result.drift[0]?.severity).toBe('fatal');
+    });
+    // -------------------------------------------------------------------------
+    // Test 9: Missing findings array → fatal
+    // -------------------------------------------------------------------------
+    it('9: missing findings array in response → fatal with parse check', async () => {
+        const badEnvelope = JSON.stringify({ success: true, data: { success: true } });
+        const result = await verifyMigrations(stubRunner(badEnvelope));
+        expect(result.ok).toBe(false);
+        expect(result.severity).toBe('fatal');
+        expect(result.drift[0]?.check).toBe('parse');
+    });
+    // -------------------------------------------------------------------------
+    // Test 10: Subprocess non-ENOENT error → fatal
+    // -------------------------------------------------------------------------
+    it('10: subprocess spawn error (non-ENOENT) → fatal with details', async () => {
+        const result = await verifyMigrations(failRunner('Process exited with code 1: permission denied'));
+        expect(result.ok).toBe(false);
+        expect(result.severity).toBe('fatal');
+        expect(result.drift[0]?.check).toBe('cleo-binary');
+        // Non-ENOENT: details should describe the actual error, not "not found"
+        expect(result.drift[0]?.details).toMatch(/failed|permission/i);
+    });
+    // -------------------------------------------------------------------------
+    // Test 11: usedDedicatedVerb is always false
+    // -------------------------------------------------------------------------
+    it('11: usedDedicatedVerb is always false (dedicated verb not yet implemented)', async () => {
+        const okResult = await verifyMigrations(stubRunner(ALL_OK_ENVELOPE));
+        expect(okResult.usedDedicatedVerb).toBe(false);
+        const failResult = await verifyMigrations(failRunner('ENOENT'));
+        expect(failResult.usedDedicatedVerb).toBe(false);
+    });
+});
+// ---------------------------------------------------------------------------
+// Rendering helpers
+// ---------------------------------------------------------------------------
+describe('renderFatalDriftError', () => {
+    it('12: includes remediation instructions and fatal check name', () => {
+        const result = {
+            ok: false,
+            severity: 'fatal',
+            drift: [
+                {
+                    check: 'tasks.db.journal',
+                    severity: 'fatal',
+                    details: 'Migration folder missing',
+                    fix: 'Run: cleo init',
+                },
+            ],
+            usedDedicatedVerb: false,
+        };
+        const output = renderFatalDriftError(result);
+        expect(output).toContain('CleoOS startup blocked');
+        expect(output).toContain('tasks.db.journal');
+        expect(output).toContain('Migration folder missing');
+        expect(output).toContain('cleo upgrade');
+        expect(output).toContain('cleo init --force');
+    });
+});
+describe('renderWarnDrift', () => {
+    it('13: lists warning check name and includes upgrade hint', () => {
+        const result = {
+            ok: true,
+            severity: 'warn',
+            drift: [
+                {
+                    check: 'signaldock.db',
+                    severity: 'warn',
+                    details: 'signaldock.db not found',
+                    fix: 'Run: cleo upgrade',
+                },
+            ],
+            usedDedicatedVerb: false,
+        };
+        const output = renderWarnDrift(result);
+        expect(output).toContain('signaldock.db');
+        expect(output).toContain('signaldock.db not found');
+        expect(output).toContain('cleo upgrade');
+    });
+});
+//# sourceMappingURL=verify-migrations.test.js.map

package/dist/health/__tests__/verify-migrations.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-migrations.test.js","sourceRoot":"","sources":["../../../src/health/__tests__/verify-migrations.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEnG,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO;QACL,KAAK,CAAC,WAAW;YACf,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO;QACL,KAAK,CAAC,WAAW;YACf,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CACnB,QAKE;IAEF,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAClC;KACF,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,eAAe,GAAG,YAAY,CAAC;IACnC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACpF,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC3F,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE;IACvF,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE;IACpF,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC3F,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE;IAC/F,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE;CACpE,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,YAAY,CAAC;IACpC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACpF;QACE,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,yBAAyB;QAClC,GAAG,EAAE,mBAAmB;KACzB;IACD,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE;CACpE,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,YAAY,CAAC;IAClC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACpF;QACE,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,iEAAiE;QAC1E,GAAG,EAAE,gCAAgC;KACtC;CACF,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,YAAY,CAAC;IAC1C,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE;IACrE;QACE,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,6CAA6C;QACtD,GAAG,EAAE,mBAAmB;KACzB;CACF,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,YAAY,CAAC;IAC7C;QACE,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,0CAA0C;KACpD;IACD;QACE,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,yBAAyB;QAClC,GAAG,EAAE,mBAAmB;KACzB;CACF,CAAC,CAAC;AAEH,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;QAEnE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,gCAAgC;IAChC,4EAA4E;IAE5E,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAEpE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,8BAA8B;IAC9B,4EAA4E;IAE5E,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QAElE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,mEAAmE;IACnE,4EAA4E;IAE5E,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,iBAAiB,GAAG,YAAY,CAAC;YACrC;gBACE,KAAK,EAAE,yBAAyB;gBAChC,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,wDAAwD;gBACjE,GAAG,EAAE,mBAAmB;aACzB;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAE5E,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAEvE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,qDAAqD;IACrD,4EAA4E;IAE5E,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAE1E,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,0DAA0D;IAC1D,4EAA4E;IAE5E,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAE7E,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,8EAA8E;QAC9E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAE5E,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAEpE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,yCAAyC;IACzC,4EAA4E;IAE5E,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,+CAA+C;IAC/C,4EAA4E;IAE5E,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,UAAU,CAAC,+CAA+C,CAAC,CAC5D,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,wEAAwE;QACxE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,6CAA6C;IAC7C,4EAA4E;IAE5E,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE/C,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAA0B;YACpC,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE;gBACL;oBACE,KAAK,EAAE,kBAAkB;oBACzB,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,0BAA0B;oBACnC,GAAG,EAAE,gBAAgB;iBACtB;aACF;YACD,iBAAiB,EAAE,KAAK;SACzB,CAAC;QAEF,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAE7C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAA0B;YACpC,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE;gBACL;oBACE,KAAK,EAAE,eAAe;oBACtB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,yBAAyB;oBAClC,GAAG,EAAE,mBAAmB;iBACzB;aACF;YACD,iBAAiB,EAAE,KAAK;SACzB,CAAC;QAEF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/health/verify-migrations.d.ts

@@ -0,0 +1,151 @@
+/**
+ * CleoOS Startup Migration Verify — fail-fast DB drift check.
+ *
+ * Runs `cleo upgrade --diagnose --json` via subprocess (CLI boundary — no
+ * direct imports from `@cleocode/core` or `@cleocode/cleo`). Classifies each
+ * finding into one of three severity levels and returns an aggregate result
+ * that the harness startup path uses to decide whether to block worker spawn.
+ *
+ * ## Classification Rules
+ *
+ * - **ok**: All DB findings are `status:"ok"`. Silent pass-through.
+ * - **warn**: One or more findings are `status:"warning"`. These correspond to
+ *   states the reconciler already auto-fixed (Scenarios 1-4 in the migration
+ *   reconciler). Logged but not blocking.
+ * - **fatal**: One or more findings are `status:"error"`, OR the `cleo`
+ *   binary could not be invoked, OR the JSON response was unparseable. These
+ *   represent states the reconciler could not resolve — typically a missing
+ *   migration folder (T1166 ENOENT class) or a schema missing a required
+ *   table. Worker spawn is blocked.
+ *
+ * ## Subprocess Boundary
+ *
+ * This module calls `cleo upgrade --diagnose --json` — the same check
+ * exposed by `cleo upgrade --diagnose` — because it is the richest single
+ * command that validates all five DBs and migration journals without starting
+ * an interactive session. If `cleo admin migrations verify` is added in a
+ * future sprint, the runner interface makes it trivial to swap.
+ *
+ * @see ADR-036 — CleoOS Database Topology
+ * @see ADR-049 — CleoOS Sovereignty Invariants
+ * @task T1185
+ * @epic T1150
+ * @packageDocumentation
+ */
+/**
+ * Severity of a single DB finding returned by the diagnose command.
+ *
+ * @public
+ */
+export type DriftSeverity = 'ok' | 'warn' | 'fatal';
+/**
+ * A single DB drift report entry derived from a `cleo upgrade --diagnose`
+ * finding.
+ *
+ * @public
+ */
+export interface DriftReport {
+    /** The check name (e.g. `"tasks.db.journal"`, `"brain.db.tables"`). */
+    check: string;
+    /** Severity classification applied by the verifier. */
+    severity: DriftSeverity;
+    /** Human-readable detail from the diagnose output. */
+    details: string;
+    /** Remediation hint when severity is `"warn"` or `"fatal"`. */
+    fix?: string;
+}
+/**
+ * Aggregated result returned by {@link verifyMigrations}.
+ *
+ * @public
+ */
+export interface MigrationVerifyResult {
+    /**
+     * `true` when the harness may proceed to spawn workers.
+     * `false` when at least one fatal drift was detected.
+     */
+    ok: boolean;
+    /** Aggregate severity across all findings. */
+    severity: DriftSeverity;
+    /** Per-finding drift reports. Empty on a clean run. */
+    drift: DriftReport[];
+    /**
+     * Whether `cleo admin migrations verify` was available.
+     *
+     * Currently always `false` — this verb does not exist yet. The verifier
+     * falls back to `cleo upgrade --diagnose --json`. Set to `true` in a future
+     * sprint once the dedicated verb lands.
+     */
+    usedDedicatedVerb: boolean;
+}
+/**
+ * Abstraction over the subprocess invocation so tests can inject a stub.
+ *
+ * @public
+ */
+export interface CliRunner {
+    /**
+     * Run `cleo upgrade --diagnose --json` and return the raw stdout.
+     *
+     * @throws When the subprocess exits non-zero or cannot be spawned.
+     */
+    runDiagnose(): Promise<string>;
+}
+/**
+ * Default {@link CliRunner} that shells out to the real `cleo` binary.
+ *
+ * @public
+ */
+export declare class DefaultCliRunner implements CliRunner {
+    /** @inheritdoc */
+    runDiagnose(): Promise<string>;
+}
+/**
+ * Run the migration verify pre-check and return a structured result.
+ *
+ * Invokes `cleo upgrade --diagnose --json` via subprocess (CLI boundary).
+ * Classifies every non-ok finding into `warn` or `fatal`. A single `fatal`
+ * finding causes `ok: false` — the harness startup path must block spawn and
+ * print remediation instructions before exiting.
+ *
+ * @param runner - Injectable {@link CliRunner}; defaults to
+ *   {@link DefaultCliRunner} which shells out to the real `cleo` binary.
+ * @returns Structured {@link MigrationVerifyResult}.
+ *
+ * @example
+ * ```typescript
+ * const result = await verifyMigrations();
+ * if (!result.ok) {
+ *   // print structured error + remediation, then exit
+ * }
+ * ```
+ *
+ * @public
+ */
+export declare function verifyMigrations(runner?: CliRunner): Promise<MigrationVerifyResult>;
+/**
+ * Format a {@link MigrationVerifyResult} as a human-readable fatal error
+ * block for printing to stderr.
+ *
+ * Only called when `result.ok === false` (fatal drift detected).
+ *
+ * @param result - The failed verify result.
+ * @returns Multi-line string ready for `process.stderr.write`.
+ *
+ * @public
+ */
+export declare function renderFatalDriftError(result: MigrationVerifyResult): string;
+/**
+ * Format a {@link MigrationVerifyResult} as a human-readable warning block
+ * for printing to stdout.
+ *
+ * Only called when `result.severity === "warn"` (reconciler already handled
+ * the drift — non-blocking).
+ *
+ * @param result - The warn-severity verify result.
+ * @returns Multi-line string ready for `process.stdout.write`.
+ *
+ * @public
+ */
+export declare function renderWarnDrift(result: MigrationVerifyResult): string;
+//# sourceMappingURL=verify-migrations.d.ts.map

package/dist/health/verify-migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-migrations.d.ts","sourceRoot":"","sources":["../../src/health/verify-migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAWH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,QAAQ,EAAE,aAAa,CAAC;IACxB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ,8CAA8C;IAC9C,QAAQ,EAAE,aAAa,CAAC;IACxB,uDAAuD;IACvD,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB;;;;;;OAMG;IACH,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAqCD;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,YAAW,SAAS;IAChD,kBAAkB;IACZ,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;CAMrC;AA6GD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,GAAE,SAAkC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAsChC;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CA+B3E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAgBrE"}

package/dist/health/verify-migrations.js

@@ -0,0 +1,279 @@
+/**
+ * CleoOS Startup Migration Verify — fail-fast DB drift check.
+ *
+ * Runs `cleo upgrade --diagnose --json` via subprocess (CLI boundary — no
+ * direct imports from `@cleocode/core` or `@cleocode/cleo`). Classifies each
+ * finding into one of three severity levels and returns an aggregate result
+ * that the harness startup path uses to decide whether to block worker spawn.
+ *
+ * ## Classification Rules
+ *
+ * - **ok**: All DB findings are `status:"ok"`. Silent pass-through.
+ * - **warn**: One or more findings are `status:"warning"`. These correspond to
+ *   states the reconciler already auto-fixed (Scenarios 1-4 in the migration
+ *   reconciler). Logged but not blocking.
+ * - **fatal**: One or more findings are `status:"error"`, OR the `cleo`
+ *   binary could not be invoked, OR the JSON response was unparseable. These
+ *   represent states the reconciler could not resolve — typically a missing
+ *   migration folder (T1166 ENOENT class) or a schema missing a required
+ *   table. Worker spawn is blocked.
+ *
+ * ## Subprocess Boundary
+ *
+ * This module calls `cleo upgrade --diagnose --json` — the same check
+ * exposed by `cleo upgrade --diagnose` — because it is the richest single
+ * command that validates all five DBs and migration journals without starting
+ * an interactive session. If `cleo admin migrations verify` is added in a
+ * future sprint, the runner interface makes it trivial to swap.
+ *
+ * @see ADR-036 — CleoOS Database Topology
+ * @see ADR-049 — CleoOS Sovereignty Invariants
+ * @task T1185
+ * @epic T1150
+ * @packageDocumentation
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+/**
+ * Default {@link CliRunner} that shells out to the real `cleo` binary.
+ *
+ * @public
+ */
+export class DefaultCliRunner {
+    /** @inheritdoc */
+    async runDiagnose() {
+        const { stdout } = await execFileAsync('cleo', ['upgrade', '--diagnose', '--json'], {
+            timeout: 15_000,
+        });
+        return stdout;
+    }
+}
+// ---------------------------------------------------------------------------
+// Severity classification
+// ---------------------------------------------------------------------------
+/**
+ * Map a raw `status` string from the diagnose output to a {@link DriftSeverity}.
+ *
+ * Uses conservative thresholds per the T1185 classification contract:
+ * - `"ok"` → `ok`
+ * - `"warning"` → `warn`  (reconciler already handled it; non-blocking)
+ * - `"error"` → `fatal`   (reconciler could not resolve; block spawn)
+ *
+ * @param status - Raw status string from the diagnose finding.
+ * @returns Classified severity.
+ *
+ * @internal
+ */
+function classifyStatus(status) {
+    switch (status) {
+        case 'ok':
+            return 'ok';
+        case 'warning':
+            return 'warn';
+        case 'error':
+            return 'fatal';
+        default:
+            // Treat unknown status values conservatively.
+            return 'fatal';
+    }
+}
+/**
+ * Derive the aggregate severity across all drift reports.
+ *
+ * `fatal` dominates `warn` dominates `ok`.
+ *
+ * @param reports - Array of per-finding reports.
+ * @returns Highest severity found, or `"ok"` when the array is empty.
+ *
+ * @internal
+ */
+function aggregateSeverity(reports) {
+    let highest = 'ok';
+    for (const r of reports) {
+        if (r.severity === 'fatal')
+            return 'fatal';
+        if (r.severity === 'warn')
+            highest = 'warn';
+    }
+    return highest;
+}
+// ---------------------------------------------------------------------------
+// Parse helpers
+// ---------------------------------------------------------------------------
+/**
+ * Parse the raw stdout from `cleo upgrade --diagnose --json` into an array
+ * of {@link DriftReport} entries.
+ *
+ * Returns a single `fatal` entry when parsing fails so callers always have a
+ * consistent result shape to act on.
+ *
+ * @param raw - Raw stdout string from the subprocess.
+ * @returns Parsed drift reports.
+ *
+ * @internal
+ */
+function parseDiagnoseOutput(raw) {
+    let envelope;
+    try {
+        envelope = JSON.parse(raw);
+    }
+    catch {
+        return [
+            {
+                check: 'parse',
+                severity: 'fatal',
+                details: 'Failed to parse cleo upgrade --diagnose --json output',
+                fix: 'Run `cleo upgrade --diagnose` manually to inspect DB state',
+            },
+        ];
+    }
+    const findings = envelope.data?.findings;
+    if (!Array.isArray(findings)) {
+        return [
+            {
+                check: 'parse',
+                severity: 'fatal',
+                details: 'cleo upgrade --diagnose response missing findings array',
+                fix: 'Run `cleo upgrade --diagnose` manually to inspect DB state',
+            },
+        ];
+    }
+    return findings
+        .filter((f) => f.status !== 'ok')
+        .map((f) => ({
+        check: f.check,
+        severity: classifyStatus(f.status),
+        details: f.details,
+        fix: f.fix,
+    }));
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Run the migration verify pre-check and return a structured result.
+ *
+ * Invokes `cleo upgrade --diagnose --json` via subprocess (CLI boundary).
+ * Classifies every non-ok finding into `warn` or `fatal`. A single `fatal`
+ * finding causes `ok: false` — the harness startup path must block spawn and
+ * print remediation instructions before exiting.
+ *
+ * @param runner - Injectable {@link CliRunner}; defaults to
+ *   {@link DefaultCliRunner} which shells out to the real `cleo` binary.
+ * @returns Structured {@link MigrationVerifyResult}.
+ *
+ * @example
+ * ```typescript
+ * const result = await verifyMigrations();
+ * if (!result.ok) {
+ *   // print structured error + remediation, then exit
+ * }
+ * ```
+ *
+ * @public
+ */
+export async function verifyMigrations(runner = new DefaultCliRunner()) {
+    let rawOutput;
+    try {
+        rawOutput = await runner.runDiagnose();
+    }
+    catch (err) {
+        // Subprocess spawn failure (ENOENT: cleo not on PATH, timeout, etc.).
+        const detail = err instanceof Error ? err.message : String(err);
+        const isEnoent = detail.includes('ENOENT') ||
+            detail.includes('not found') ||
+            detail.includes('command not found');
+        const drift = [
+            {
+                check: 'cleo-binary',
+                severity: 'fatal',
+                details: isEnoent
+                    ? 'cleo binary not found on PATH — cannot verify DB migration state'
+                    : `cleo upgrade --diagnose failed: ${detail}`,
+                fix: isEnoent
+                    ? 'Install cleo: npm install -g @cleocode/cleo-os'
+                    : 'Run `cleo upgrade --diagnose` manually; check exit code',
+            },
+        ];
+        return { ok: false, severity: 'fatal', drift, usedDedicatedVerb: false };
+    }
+    const drift = parseDiagnoseOutput(rawOutput);
+    const severity = aggregateSeverity(drift);
+    return {
+        ok: severity !== 'fatal',
+        severity,
+        drift,
+        usedDedicatedVerb: false,
+    };
+}
+// ---------------------------------------------------------------------------
+// Rendering helpers (used by cli.ts startup path)
+// ---------------------------------------------------------------------------
+/**
+ * Format a {@link MigrationVerifyResult} as a human-readable fatal error
+ * block for printing to stderr.
+ *
+ * Only called when `result.ok === false` (fatal drift detected).
+ *
+ * @param result - The failed verify result.
+ * @returns Multi-line string ready for `process.stderr.write`.
+ *
+ * @public
+ */
+export function renderFatalDriftError(result) {
+    const lines = [
+        '',
+        'CleoOS startup blocked — DB migration drift detected',
+        '═══════════════════════════════════════════════════════════',
+        '',
+        'The following issues prevent safe worker spawn:',
+        '',
+    ];
+    for (const d of result.drift) {
+        if (d.severity === 'fatal') {
+            lines.push(`  [FATAL] ${d.check}`);
+            lines.push(`          ${d.details}`);
+            if (d.fix !== undefined) {
+                lines.push(`          Fix: ${d.fix}`);
+            }
+            lines.push('');
+        }
+    }
+    lines.push('Remediation options:');
+    lines.push('  1. Run `cleo upgrade` to apply pending migrations');
+    lines.push('  2. Run `cleo upgrade --diagnose` for detailed DB inspection');
+    lines.push('  3. If the project DB is corrupted: `cleo init --force` (WARNING: resets tasks.db)');
+    lines.push('  4. For cloud-sync issues: `cleo init --provider signaldock`');
+    lines.push('');
+    lines.push('If this is a fresh clone, run `cleo init` to initialise the project database.');
+    lines.push('');
+    return lines.join('\n');
+}
+/**
+ * Format a {@link MigrationVerifyResult} as a human-readable warning block
+ * for printing to stdout.
+ *
+ * Only called when `result.severity === "warn"` (reconciler already handled
+ * the drift — non-blocking).
+ *
+ * @param result - The warn-severity verify result.
+ * @returns Multi-line string ready for `process.stdout.write`.
+ *
+ * @public
+ */
+export function renderWarnDrift(result) {
+    const lines = ['[cleo-os] DB migration notice (non-blocking):'];
+    for (const d of result.drift) {
+        if (d.severity === 'warn') {
+            lines.push(`  - ${d.check}: ${d.details}`);
+            if (d.fix !== undefined) {
+                lines.push(`    Fix: ${d.fix}`);
+            }
+        }
+    }
+    lines.push('  Run `cleo upgrade` to resolve these warnings.');
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=verify-migrations.js.map

package/dist/health/verify-migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-migrations.js","sourceRoot":"","sources":["../../src/health/verify-migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAwG1C;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAC3B,kBAAkB;IAClB,KAAK,CAAC,WAAW;QACf,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE;YAClF,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,SAAS,cAAc,CAAC,MAAiC;IACvD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,IAAI;YACP,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB;YACE,8CAA8C;YAC9C,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC;QAC3C,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,GAAG,MAAM,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL;gBACE,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,uDAAuD;gBAChE,GAAG,EAAE,4DAA4D;aAClE;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL;gBACE,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yDAAyD;gBAClE,GAAG,EAAE,4DAA4D;aAClE;SACF,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;QAClC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,EAAE,CAAC,CAAC,GAAG;KACX,CAAC,CAAC,CAAC;AACR,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAoB,IAAI,gBAAgB,EAAE;IAE1C,IAAI,SAAiB,CAAC;IAEtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAEvC,MAAM,KAAK,GAAkB;YAC3B;gBACE,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,QAAQ;oBACf,CAAC,CAAC,kEAAkE;oBACpE,CAAC,CAAC,mCAAmC,MAAM,EAAE;gBAC/C,GAAG,EAAE,QAAQ;oBACX,CAAC,CAAC,gDAAgD;oBAClD,CAAC,CAAC,yDAAyD;aAC9D;SACF,CAAC;QAEF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE1C,OAAO;QACL,EAAE,EAAE,QAAQ,KAAK,OAAO;QACxB,QAAQ;QACR,KAAK;QACL,iBAAiB,EAAE,KAAK;KACzB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,MAAM,KAAK,GAAa;QACtB,EAAE;QACF,sDAAsD;QACtD,6DAA6D;QAC7D,EAAE;QACF,iDAAiD;QACjD,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAClG,KAAK,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,MAA6B;IAC3D,MAAM,KAAK,GAAa,CAAC,+CAA+C,CAAC,CAAC;IAE1E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/cleo-os",
-  "version": "2026.4.108",
+  "version": "2026.4.109",
   "description": "CleoOS — the batteries-included agentic development environment wrapping Pi",
   "type": "module",
   "main": "./dist/cli.js",
@@ -13,9 +13,9 @@
     "@mariozechner/pi-coding-agent": ">=0.60.0",
     "@sinclair/typebox": "^0.34.49",
     "env-paths": "^4.0.0",
-    "@cleocode/cant": "2026.4.108",
-    "@cleocode/core": "2026.4.108",
-    "@cleocode/cleo": "2026.4.108"
+    "@cleocode/cant": "2026.4.109",
+    "@cleocode/core": "2026.4.109",
+    "@cleocode/cleo": "2026.4.109"
   },
   "devDependencies": {
     "typescript": "^6.0.2",