@cleocode/cleo 2026.10.18 → 2026.10.19

package/dist/cli/{chunk-NIS7EU53.js → chunk-JN552IFO.js}

@@ -30,7 +30,7 @@ function generateResumeToken(runId, nodeId, bindings, secret = getPlaybookSecret
 }
 function narrowStatus(s) {
   if (s === "pending" || s === "approved" || s === "rejected") return s;
-  throw new Error(`invariant: unknown playbook_approvals.status '${s}'`);
+  throw new Error(`invariant: unknown tasks_playbook_approvals.status '${s}'`);
 }
 function readString(row, key) {
   const v = row[key];
@@ -77,7 +77,7 @@ function createApprovalGate(db, input) {
   const autoPassed = input.autoPassed ?? false;
   const status = autoPassed ? "approved" : "pending";
   const stmt = db.prepare(`
-    INSERT INTO playbook_approvals
+    INSERT INTO tasks_playbook_approvals
       (approval_id, run_id, node_id, token, status, auto_passed, approver, reason)
     VALUES (?, ?, ?, ?, ?, ?, ?, ?)
   `);
@@ -91,7 +91,7 @@ function createApprovalGate(db, input) {
     input.approver ?? null,
     input.reason ?? null
   );
-  const row = db.prepare("SELECT * FROM playbook_approvals WHERE approval_id = ?").get(approvalId);
+  const row = db.prepare("SELECT * FROM tasks_playbook_approvals WHERE approval_id = ?").get(approvalId);
   if (row === void 0) {
     throw new Error(
       `${E_APPROVAL_NOT_FOUND}: insert did not round-trip (approval_id=${approvalId})`
@@ -106,7 +106,7 @@ function rejectGate(db, token, approver, reason) {
   return transitionGate(db, token, "rejected", approver, reason);
 }
 function transitionGate(db, token, next, approver, reason) {
-  const existing = db.prepare("SELECT * FROM playbook_approvals WHERE token = ?").get(token);
+  const existing = db.prepare("SELECT * FROM tasks_playbook_approvals WHERE token = ?").get(token);
   if (existing === void 0) {
     throw new Error(`${E_APPROVAL_NOT_FOUND}: no approval gate for token`);
   }
@@ -118,11 +118,11 @@ function transitionGate(db, token, next, approver, reason) {
     );
   }
   db.prepare(
-    `UPDATE playbook_approvals
+    `UPDATE tasks_playbook_approvals
        SET status = ?, approved_at = datetime('now'), approver = ?, reason = ?
      WHERE token = ?`
   ).run(next, approver, reason ?? null, token);
-  const row = db.prepare("SELECT * FROM playbook_approvals WHERE token = ?").get(token);
+  const row = db.prepare("SELECT * FROM tasks_playbook_approvals WHERE token = ?").get(token);
   if (row === void 0) {
     throw new Error(`${E_APPROVAL_NOT_FOUND}: row vanished after update (token=${token})`);
   }
@@ -130,7 +130,7 @@ function transitionGate(db, token, next, approver, reason) {
 }
 function getPendingApprovals(db) {
   const rows = db.prepare(
-    `SELECT * FROM playbook_approvals
+    `SELECT * FROM tasks_playbook_approvals
         WHERE status = 'pending'
         ORDER BY requested_at ASC, approval_id ASC`
   ).all();
@@ -3555,7 +3555,7 @@ function createPlaybookRun(db, input) {
   const runId = randomUUID2();
   const bindingsJson = JSON.stringify(input.initialBindings ?? {});
   const insert = db.prepare(
-    `INSERT INTO playbook_runs (
+    `INSERT INTO tasks_playbook_runs (
        run_id, playbook_name, playbook_hash, bindings, status,
        iteration_counts, epic_id, session_id
      ) VALUES (?, ?, ?, ?, 'running', '{}', ?, ?)`
@@ -3568,14 +3568,14 @@ function createPlaybookRun(db, input) {
     input.epicId ?? null,
     input.sessionId ?? null
   );
-  const row = db.prepare("SELECT * FROM playbook_runs WHERE run_id = ?").get(runId);
+  const row = db.prepare("SELECT * FROM tasks_playbook_runs WHERE run_id = ?").get(runId);
   if (!row) {
     throw new Error(`playbook state: failed to read back run ${runId} after insert`);
   }
   return rowToPlaybookRun(row);
 }
 function getPlaybookRun(db, runId) {
-  const row = db.prepare("SELECT * FROM playbook_runs WHERE run_id = ?").get(runId);
+  const row = db.prepare("SELECT * FROM tasks_playbook_runs WHERE run_id = ?").get(runId);
   return row ? rowToPlaybookRun(row) : null;
 }
 function updatePlaybookRun(db, runId, patch) {
@@ -3630,7 +3630,7 @@ function updatePlaybookRun(db, runId, patch) {
   }
   db.exec("BEGIN");
   try {
-    const stmt = db.prepare(`UPDATE playbook_runs SET ${sets.join(", ")} WHERE run_id = ?`);
+    const stmt = db.prepare(`UPDATE tasks_playbook_runs SET ${sets.join(", ")} WHERE run_id = ?`);
     values.push(runId);
     const result = stmt.run(...values);
     if (result.changes === 0) {
@@ -3641,7 +3641,7 @@ function updatePlaybookRun(db, runId, patch) {
     db.exec("ROLLBACK");
     throw err;
   }
-  const row = db.prepare("SELECT * FROM playbook_runs WHERE run_id = ?").get(runId);
+  const row = db.prepare("SELECT * FROM tasks_playbook_runs WHERE run_id = ?").get(runId);
   if (!row) {
     throw new Error(`playbook state: run ${runId} disappeared after update`);
   }
@@ -3661,30 +3661,38 @@ function listPlaybookRuns(db, opts = {}) {
   const where = clauses.length > 0 ? `WHERE ${clauses.join(" AND ")}` : "";
   const limitClause = typeof opts.limit === "number" ? "LIMIT ?" : "";
   if (limitClause) values.push(opts.limit ?? 0);
-  const sql = `SELECT * FROM playbook_runs ${where} ORDER BY started_at DESC ${limitClause}`;
+  const sql = `SELECT * FROM tasks_playbook_runs ${where} ORDER BY started_at DESC ${limitClause}`;
   const rows = db.prepare(sql).all(...values);
   return rows.map(rowToPlaybookRun);
 }
 function deletePlaybookRun(db, runId) {
-  const result = db.prepare("DELETE FROM playbook_runs WHERE run_id = ?").run(runId);
-  return Number(result.changes) > 0;
+  db.exec("BEGIN");
+  try {
+    db.prepare("DELETE FROM tasks_playbook_approvals WHERE run_id = ?").run(runId);
+    const result = db.prepare("DELETE FROM tasks_playbook_runs WHERE run_id = ?").run(runId);
+    db.exec("COMMIT");
+    return Number(result.changes) > 0;
+  } catch (err) {
+    db.exec("ROLLBACK");
+    throw err;
+  }
 }
 function createPlaybookApproval(db, input) {
   const approvalId = randomUUID2();
   const autoPassed = input.autoPassed ? 1 : 0;
   db.prepare(
-    `INSERT INTO playbook_approvals (
+    `INSERT INTO tasks_playbook_approvals (
        approval_id, run_id, node_id, token, status, auto_passed
      ) VALUES (?, ?, ?, ?, 'pending', ?)`
   ).run(approvalId, input.runId, input.nodeId, input.token, autoPassed);
-  const row = db.prepare("SELECT * FROM playbook_approvals WHERE approval_id = ?").get(approvalId);
+  const row = db.prepare("SELECT * FROM tasks_playbook_approvals WHERE approval_id = ?").get(approvalId);
   if (!row) {
     throw new Error(`playbook state: failed to read back approval ${approvalId} after insert`);
   }
   return rowToPlaybookApproval(row);
 }
 function getPlaybookApprovalByToken(db, token) {
-  const row = db.prepare("SELECT * FROM playbook_approvals WHERE token = ?").get(token);
+  const row = db.prepare("SELECT * FROM tasks_playbook_approvals WHERE token = ?").get(token);
   return row ? rowToPlaybookApproval(row) : null;
 }
 function updatePlaybookApproval(db, approvalId, patch) {
@@ -3715,7 +3723,7 @@ function updatePlaybookApproval(db, approvalId, patch) {
     values.push(patch.reason ?? null);
   }
   if ("status" in patch && patch.status !== void 0) {
-    const current = db.prepare("SELECT status FROM playbook_approvals WHERE approval_id = ?").get(approvalId);
+    const current = db.prepare("SELECT status FROM tasks_playbook_approvals WHERE approval_id = ?").get(approvalId);
     if (current && current.status !== "pending" && current.status !== patch.status) {
       throw new Error(
         `E_APPROVAL_ALREADY_DECIDED: gate ${approvalId} is already ${current.status}`
@@ -3729,7 +3737,7 @@ function updatePlaybookApproval(db, approvalId, patch) {
     values.push(patch.autoPassed ? 1 : 0);
   }
   if (sets.length === 0) {
-    const row2 = db.prepare("SELECT * FROM playbook_approvals WHERE approval_id = ?").get(approvalId);
+    const row2 = db.prepare("SELECT * FROM tasks_playbook_approvals WHERE approval_id = ?").get(approvalId);
     if (!row2) {
       throw new Error(`playbook state: approval ${approvalId} not found for update`);
     }
@@ -3738,7 +3746,7 @@ function updatePlaybookApproval(db, approvalId, patch) {
   db.exec("BEGIN");
   try {
     const stmt = db.prepare(
-      `UPDATE playbook_approvals SET ${sets.join(", ")} WHERE approval_id = ?`
+      `UPDATE tasks_playbook_approvals SET ${sets.join(", ")} WHERE approval_id = ?`
     );
     values.push(approvalId);
     const result = stmt.run(...values);
@@ -3750,7 +3758,7 @@ function updatePlaybookApproval(db, approvalId, patch) {
     db.exec("ROLLBACK");
     throw err;
   }
-  const row = db.prepare("SELECT * FROM playbook_approvals WHERE approval_id = ?").get(approvalId);
+  const row = db.prepare("SELECT * FROM tasks_playbook_approvals WHERE approval_id = ?").get(approvalId);
   if (!row) {
     throw new Error(`playbook state: approval ${approvalId} disappeared after update`);
   }
@@ -3758,7 +3766,7 @@ function updatePlaybookApproval(db, approvalId, patch) {
 }
 function listPlaybookApprovals(db, runId) {
   const rows = db.prepare(
-    "SELECT * FROM playbook_approvals WHERE run_id = ? ORDER BY requested_at ASC, approval_id ASC"
+    "SELECT * FROM tasks_playbook_approvals WHERE run_id = ? ORDER BY requested_at ASC, approval_id ASC"
   ).all(runId);
   return rows.map(rowToPlaybookApproval);
 }
@@ -4504,4 +4512,4 @@ export {
 js-yaml/dist/js-yaml.mjs:
   (*! js-yaml 4.1.1 https://github.com/nodeca/js-yaml @license MIT *)
 */
-//# sourceMappingURL=chunk-NIS7EU53.js.map
+//# sourceMappingURL=chunk-JN552IFO.js.map

package/dist/cli/{chunk-RGTIBYCQ.js → chunk-L7ZIR4GP.js}

@@ -17,7 +17,7 @@ import {
   dispatchRaw,
   handleRawError,
   maybeEmitDescribe
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import {
   defineCommand
 } from "./chunk-PKKZPOOP.js";
@@ -147,4 +147,4 @@ export {
   completeDispatchParams,
   completeCommand
 };
-//# sourceMappingURL=chunk-RGTIBYCQ.js.map
+//# sourceMappingURL=chunk-L7ZIR4GP.js.map

package/dist/cli/{chunk-EELKU7NB.js → chunk-RNMULXXQ.js}

@@ -40,7 +40,7 @@ import {
 } from "./chunk-D7BAQNV2.js";
 import {
   createLazyDomainHandlers
-} from "./chunk-QC3IIDLX.js";
+} from "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/dispatch/adapters/cli.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
@@ -2496,4 +2496,4 @@ export {
   handleRawError,
   dispatchRaw
 };
-//# sourceMappingURL=chunk-EELKU7NB.js.map
+//# sourceMappingURL=chunk-RNMULXXQ.js.map

package/dist/cli/{chunk-QLME64FF.js → chunk-S2IS4DXJ.js}

@@ -25,7 +25,7 @@ import {
   listPlaybookRuns,
   parsePlaybook,
   resumePlaybook
-} from "./chunk-NIS7EU53.js";
+} from "./chunk-JN552IFO.js";
 import {
   defineTypedHandler,
   lafsError,
@@ -653,4 +653,4 @@ export {
   listPendingApprovalsForDispatch,
   lookupApprovalByTokenForDispatch
 };
-//# sourceMappingURL=chunk-QLME64FF.js.map
+//# sourceMappingURL=chunk-S2IS4DXJ.js.map

package/dist/cli/{chunk-QC3IIDLX.js → chunk-WNDM2PS5.js}

@@ -17,27 +17,27 @@
 // packages/cleo/src/dispatch/domains/lazy.ts
 import { OPERATIONS } from "@cleocode/contracts/dispatch/operations-registry.js";
 var DOMAIN_LOADERS = [
-  ["tasks", async () => new (await import("./tasks-VEGD6UWL.js")).TasksHandler()],
-  ["session", async () => new (await import("./session-6C5QVXAM.js")).SessionHandler()],
+  ["tasks", async () => new (await import("./tasks-IDBUBU77.js")).TasksHandler()],
+  ["session", async () => new (await import("./session-4LLPMS74.js")).SessionHandler()],
   ["attention", async () => new (await import("./attention-BVRGUJJQ.js")).AttentionHandler()],
-  ["memory", async () => new (await import("./memory-DJJZHRCX.js")).MemoryHandler()],
+  ["memory", async () => new (await import("./memory-GJLKIO2T.js")).MemoryHandler()],
   ["intelligence", async () => new (await import("./intelligence-SEARRRBF.js")).IntelligenceHandler()],
-  ["check", async () => new (await import("./check-GHJEH437.js")).CheckHandler()],
-  ["pipeline", async () => new (await import("./pipeline-TNTHTBVX.js")).PipelineHandler()],
-  ["orchestrate", async () => new (await import("./orchestrate-RLR6XSDW.js")).OrchestrateHandler()],
+  ["check", async () => new (await import("./check-WWGPEJIE.js")).CheckHandler()],
+  ["pipeline", async () => new (await import("./pipeline-FQZ53XBZ.js")).PipelineHandler()],
+  ["orchestrate", async () => new (await import("./orchestrate-DENHBTRO.js")).OrchestrateHandler()],
   ["tools", async () => new (await import("./tools-UM3OZKEH.js")).ToolsHandler()],
-  ["admin", async () => new (await import("./admin-HCXAR5VU.js")).AdminHandler()],
-  ["nexus", async () => new (await import("./nexus-ZKI6NP6X.js")).NexusHandler()],
+  ["admin", async () => new (await import("./admin-2SGE3CT4.js")).AdminHandler()],
+  ["nexus", async () => new (await import("./nexus-RL2NS4ZH.js")).NexusHandler()],
   ["sticky", async () => new (await import("./sticky-EKL5FD2D.js")).StickyHandler()],
   ["diagnostics", async () => new (await import("./diagnostics-BT3HGJPT.js")).DiagnosticsHandler()],
-  ["docs", async () => new (await import("./docs-JELVV27J.js")).DocsHandler()],
+  ["docs", async () => new (await import("./docs-37WAWQGW.js")).DocsHandler()],
   ["focus", async () => new (await import("./focus-H5CBCFFV.js")).FocusHandler()],
-  ["playbook", async () => new (await import("./playbook-LM5NBNOC.js")).PlaybookHandler()],
+  ["playbook", async () => new (await import("./playbook-YPGSNILZ.js")).PlaybookHandler()],
   ["conduit", async () => new (await import("./conduit-STEBYJTU.js")).ConduitHandler()],
   ["sentient", async () => new (await import("./sentient-Z7W7WO74.js")).SentientHandler()],
-  ["release", async () => new (await import("./release-PKAGPJN3.js")).ReleaseHandler()],
+  ["release", async () => new (await import("./release-OWPFPUQG.js")).ReleaseHandler()],
   ["provenance", async () => new (await import("./provenance-3YCF7G7L.js")).ProvenanceHandler()],
-  ["selfimprove", async () => new (await import("./selfimprove-A3XT2BHD.js")).SelfimproveHandler()],
+  ["selfimprove", async () => new (await import("./selfimprove-PVI6YN5K.js")).SelfimproveHandler()],
   ["service", async () => new (await import("./service-5SQKAABN.js")).ServiceHandler()],
   ["llm", async () => new (await import("./llm-YVC5HL7D.js")).LlmHandler()],
   ["account", async () => new (await import("./entities-JYA4L2OV.js")).AccountHandler()],
@@ -97,4 +97,4 @@ export {
   createLazyDomainHandlers,
   lazyOperation
 };
-//# sourceMappingURL=chunk-QC3IIDLX.js.map
+//# sourceMappingURL=chunk-WNDM2PS5.js.map

package/dist/cli/{claim-PWJB26MI.js → claim-5GUUPIGX.js}

@@ -15,7 +15,7 @@
 })();
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -25,7 +25,7 @@ import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/claim.ts
 var claimCommand = defineCommand({
@@ -94,4 +94,4 @@ export {
   claimCommand,
   unclaimCommand
 };
-//# sourceMappingURL=claim-PWJB26MI.js.map
+//# sourceMappingURL=claim-5GUUPIGX.js.map

package/dist/cli/{cli-WM33BIC6.js → cli-ARPDECGB.js}

@@ -26,14 +26,14 @@ import {
   prepareCoreFor,
   resetCliDispatcher,
   warnUnboundMutation
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 export {
   createCliDispatcher,
   createCliGatewayHandler,
@@ -48,4 +48,4 @@ export {
   resetCliDispatcher,
   warnUnboundMutation
 };
-//# sourceMappingURL=cli-WM33BIC6.js.map
+//# sourceMappingURL=cli-ARPDECGB.js.map

package/dist/cli/{complete-YHIJOF2M.js → complete-VC5H7EVG.js}

@@ -17,8 +17,8 @@ import {
   completeCommand,
   completeCommandArgs,
   completeDispatchParams
-} from "./chunk-RGTIBYCQ.js";
-import "./chunk-EELKU7NB.js";
+} from "./chunk-L7ZIR4GP.js";
+import "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import "./chunk-PKKZPOOP.js";
@@ -26,10 +26,10 @@ import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 export {
   completeCommand,
   completeCommandArgs,
   completeDispatchParams
 };
-//# sourceMappingURL=complete-YHIJOF2M.js.map
+//# sourceMappingURL=complete-VC5H7EVG.js.map

package/dist/cli/{complexity-ZJW4Z7GN.js → complexity-AKELAXU7.js}

@@ -15,7 +15,7 @@
 })();
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -26,7 +26,7 @@ import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/complexity.ts
 var complexityEstimateCommand = defineCommand({
@@ -54,4 +54,4 @@ var complexityCommand = defineCommand({
 export {
   complexityCommand
 };
-//# sourceMappingURL=complexity-ZJW4Z7GN.js.map
+//# sourceMappingURL=complexity-AKELAXU7.js.map

package/dist/cli/{compliance-E3UJB4MT.js → compliance-3AHQSGLE.js}

@@ -15,7 +15,7 @@
 })();
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -26,7 +26,7 @@ import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/compliance.ts
 var summaryCommand = defineCommand({
@@ -274,4 +274,4 @@ var complianceCommand = defineCommand({
 export {
   complianceCommand
 };
-//# sourceMappingURL=compliance-E3UJB4MT.js.map
+//# sourceMappingURL=compliance-3AHQSGLE.js.map

package/dist/cli/{conduit-4OXX7X3G.js → conduit-SYAA6BU6.js}

@@ -15,7 +15,7 @@
 })();
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -26,7 +26,7 @@ import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/conduit.ts
 var statusCommand = defineCommand({
@@ -305,4 +305,4 @@ var conduitCommand = defineCommand({
 export {
   conduitCommand
 };
-//# sourceMappingURL=conduit-4OXX7X3G.js.map
+//# sourceMappingURL=conduit-SYAA6BU6.js.map

package/dist/cli/{config-2UBWE57E.js → config-N3GZN35L.js}

@@ -16,7 +16,7 @@
 import "./chunk-C3B7C43W.js";
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -30,7 +30,7 @@ import {
 } from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/config.ts
 import { loadConfig } from "@cleocode/core/config";
@@ -225,6 +225,11 @@ var configSetCommand = defineCommand({
       return;
     }
     const rawValue = String(args["value"] ?? "");
+    if (key === "evidence.overrideCapPerSession") {
+      const { runOwnerOverrideCapSet } = await import("./owner-override-cap-33U23MZF.js");
+      await runOwnerOverrideCapSet(rawValue);
+      return;
+    }
     const scope = parseWriteScope(args["scope"]);
     if (scope === null) {
       cliError(
@@ -471,6 +476,26 @@ var setPresetCommand = defineCommand({
     );
   }
 });
+var ownerEnrollCommand = defineCommand({
+  meta: {
+    name: "owner-enroll",
+    description: "Enroll this project's owner key (owner only: interactive terminal, --owner-auth session); --reset replaces one (audited)"
+  },
+  args: {
+    reset: {
+      type: "boolean",
+      description: "Replace an existing enrollment; needs the current owner's password (audited)"
+    },
+    confirm: {
+      type: "boolean",
+      description: "Confirm an enrollment that replaced another without proof of the previous owner"
+    }
+  },
+  async run({ args }) {
+    const { runOwnerEnroll } = await import("./owner-override-cap-33U23MZF.js");
+    await runOwnerEnroll(args.reset === true, args.confirm === true);
+  }
+});
 var presetsCommand = defineCommand({
   meta: { name: "presets", description: "List all available strictness presets" },
   async run() {
@@ -503,6 +528,7 @@ var configCommand = defineCommand({
     set: configSetCommand,
     validate: configValidateCommand,
     "drift-check": configDriftCheckCommand,
+    "owner-enroll": ownerEnrollCommand,
     "set-preset": setPresetCommand,
     presets: presetsCommand,
     list: listCommand
@@ -516,4 +542,4 @@ var configCommand = defineCommand({
 export {
   configCommand
 };
-//# sourceMappingURL=config-2UBWE57E.js.map
+//# sourceMappingURL=config-N3GZN35L.js.map

package/dist/cli/{consensus-IISJ5EPZ.js → consensus-2ILDAJBP.js}

@@ -15,7 +15,7 @@
 })();
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -26,7 +26,7 @@ import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/consensus.ts
 var validateCommand = defineCommand({
@@ -119,4 +119,4 @@ var consensusCommand = defineCommand({
 export {
   consensusCommand
 };
-//# sourceMappingURL=consensus-IISJ5EPZ.js.map
+//# sourceMappingURL=consensus-2ILDAJBP.js.map

package/dist/cli/{context-B2OJ7LT4.js → context-3Z2TTNTA.js}

@@ -17,7 +17,7 @@ import {
   dispatchFromCli,
   dispatchRaw,
   handleRawError
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -29,7 +29,7 @@ import {
 } from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/context.ts
 import { ExitCode } from "@cleocode/contracts/exit-codes.js";
@@ -139,4 +139,4 @@ var contextCommand = defineCommand({
 export {
   contextCommand
 };
-//# sourceMappingURL=context-B2OJ7LT4.js.map
+//# sourceMappingURL=context-3Z2TTNTA.js.map

package/dist/cli/{contribution-6VY4DLBS.js → contribution-F5NXLODW.js}

@@ -15,7 +15,7 @@
 })();
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -26,7 +26,7 @@ import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/contribution.ts
 var validateCommand = defineCommand({
@@ -109,4 +109,4 @@ var contributionCommand = defineCommand({
 export {
   contributionCommand
 };
-//# sourceMappingURL=contribution-6VY4DLBS.js.map
+//# sourceMappingURL=contribution-F5NXLODW.js.map

package/dist/cli/{current-FPR6MQ4P.js → current-UAGJGYSZ.js}

@@ -15,7 +15,7 @@
 })();
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -25,7 +25,7 @@ import "./chunk-QKMBWYAS.js";
 import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/current.ts
 var currentCommand = defineCommand({
@@ -40,4 +40,4 @@ var currentCommand = defineCommand({
 export {
   currentCommand
 };
-//# sourceMappingURL=current-FPR6MQ4P.js.map
+//# sourceMappingURL=current-UAGJGYSZ.js.map

package/dist/cli/{daemon-AADB5Z35.js → daemon-ZJMBPPVF.js}

@@ -21,7 +21,7 @@ import {
 } from "./chunk-YY66LFZF.js";
 import {
   createCliGatewayHandler
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -34,7 +34,7 @@ import {
 } from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/daemon.ts
 import { existsSync } from "node:fs";
@@ -449,4 +449,4 @@ var daemonCommand = defineCommand({
 export {
   daemonCommand
 };
-//# sourceMappingURL=daemon-AADB5Z35.js.map
+//# sourceMappingURL=daemon-ZJMBPPVF.js.map

package/dist/cli/{dash-3V2SUXOG.js → dash-JUQWAKZZ.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-47JYZAMS.js";
 import {
   dispatchFromCli
-} from "./chunk-EELKU7NB.js";
+} from "./chunk-RNMULXXQ.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -30,7 +30,7 @@ import {
 } from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-QC3IIDLX.js";
+import "./chunk-WNDM2PS5.js";
 
 // packages/cleo/src/cli/commands/dash.ts
 var dashCommand = defineCommand({
@@ -68,4 +68,4 @@ var dashCommand = defineCommand({
 export {
   dashCommand
 };
-//# sourceMappingURL=dash-3V2SUXOG.js.map
+//# sourceMappingURL=dash-JUQWAKZZ.js.map