@cleocode/cleo 2026.10.4 → 2026.10.5

package/dist/cli/{pivot-FF2CVUZL.js → pivot-V5MSQZ7L.js}

@@ -16,18 +16,19 @@
 import {
   negatedFlag
 } from "./chunk-47JYZAMS.js";
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
-import "./chunk-3ZO3M37V.js";
+import "./chunk-QKMBWYAS.js";
+import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/pivot.ts
 var pivotCommand = defineCommand({
@@ -84,4 +85,4 @@ var pivotCommand = defineCommand({
 export {
   pivotCommand
 };
-//# sourceMappingURL=pivot-FF2CVUZL.js.map
+//# sourceMappingURL=pivot-V5MSQZ7L.js.map

package/dist/cli/{plan-3SL2NTRV.js → plan-SQUGCKSM.js}

@@ -13,18 +13,19 @@
     return _origEmitWarning.call(process, warning, type, code, ctor);
   };
 })();
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
-import "./chunk-3ZO3M37V.js";
+import "./chunk-QKMBWYAS.js";
+import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/plan.ts
 var planCommand = defineCommand({
@@ -45,4 +46,4 @@ var planCommand = defineCommand({
 export {
   planCommand
 };
-//# sourceMappingURL=plan-3SL2NTRV.js.map
+//# sourceMappingURL=plan-SQUGCKSM.js.map

package/dist/cli/{playbook-2FCBV7N3.js → playbook-L47GLDQD.js}

@@ -13,19 +13,20 @@
     return _origEmitWarning.call(process, warning, type, code, ctor);
   };
 })();
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand,
   showUsage
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
-import "./chunk-3ZO3M37V.js";
+import "./chunk-QKMBWYAS.js";
+import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/playbook.ts
 var runCommand = defineCommand({
@@ -226,4 +227,4 @@ var playbookCommand = defineCommand({
 export {
   playbookCommand
 };
-//# sourceMappingURL=playbook-2FCBV7N3.js.map
+//# sourceMappingURL=playbook-L47GLDQD.js.map

package/dist/cli/playbook-NJVO4R6P.js

@@ -0,0 +1,33 @@
+(() => {
+  const _installed = Symbol.for('cleocode.cli.sqliteWarningFilter');
+  if (globalThis[_installed]) return;
+  globalThis[_installed] = true;
+  const _origEmitWarning = process.emitWarning;
+  process.emitWarning = function(warning, type, code, ctor) {
+    if (typeof warning === 'object' && warning.name === 'ExperimentalWarning' && typeof warning.message === 'string' && /SQLite is an experimental feature/i.test(warning.message)) {
+      return;
+    }
+    if (typeof warning === 'string' && /SQLite is an experimental feature/i.test(warning)) {
+      return;
+    }
+    return _origEmitWarning.call(process, warning, type, code, ctor);
+  };
+})();
+import {
+  PlaybookHandler,
+  __playbookRuntimeOverrides,
+  acquirePlaybookDb,
+  listPendingApprovalsForDispatch,
+  lookupApprovalByTokenForDispatch
+} from "./chunk-NEFMQYLE.js";
+import "./chunk-NU6CQQVB.js";
+import "./chunk-QWNKLLLG.js";
+import "./chunk-XHRZ7OYZ.js";
+export {
+  PlaybookHandler,
+  __playbookRuntimeOverrides,
+  acquirePlaybookDb,
+  listPendingApprovalsForDispatch,
+  lookupApprovalByTokenForDispatch
+};
+//# sourceMappingURL=playbook-NJVO4R6P.js.map

package/dist/cli/{project-WDX2TGMC.js → project-YZEC7GYF.js}

@@ -19,7 +19,7 @@ import {
   failNexus,
   nexusApiUrlArg,
   writeNexusWarnings
-} from "./chunk-ULN4OKQQ.js";
+} from "./chunk-GRU74UE4.js";
 import "./chunk-47JYZAMS.js";
 import {
   defineCommand
@@ -27,14 +27,14 @@ import {
 import {
   cliError,
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import {
   getFormatContext
 } from "./chunk-6JSJNYH2.js";
 
 // packages/cleo/src/cli/commands/project.ts
 import { resolve } from "node:path";
-import { ExitCode } from "@cleocode/contracts";
+import { ExitCode } from "@cleocode/contracts/exit-codes.js";
 import {
   CleoError,
   getProjectRoot,
@@ -306,7 +306,8 @@ var linkSubCommand = defineCommand({
     const { link, replica } = result;
     const verb = result.alreadyLinked ? "Already linked" : "Linked";
     const attached = replica ? ` This machine (device ${replica.deviceId}) holds it as replica ${replica.replicaId}${replica.reboundFrom ? ` (rebound from ${replica.reboundFrom})` : ""}${replica.presenceAt ? "; presence reported" : ""}.` : "";
-    const summary = `${verb}: project ${link.localProjectId} as "${link.label ?? ""}" on ${link.apiUrl}.${attached}`;
+    const keyed = result.initialKeyVersion !== null ? ` Its encryption key (version ${result.initialKeyVersion}) was stored with the registration.` : "";
+    const summary = `${verb}: project ${link.localProjectId} as "${link.label ?? ""}" on ${link.apiUrl}.${attached}${keyed}`;
     writeNexusWarnings(result.warnings);
     emitNexusResult(result, summary, "project", "project.link");
   }
@@ -327,4 +328,4 @@ var projectCommand = defineCommand({
 export {
   projectCommand
 };
-//# sourceMappingURL=project-WDX2TGMC.js.map
+//# sourceMappingURL=project-YZEC7GYF.js.map

package/dist/cli/{promote-YINYFBZY.js → promote-FINF4HVK.js}

@@ -13,18 +13,19 @@
     return _origEmitWarning.call(process, warning, type, code, ctor);
   };
 })();
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
-import "./chunk-3ZO3M37V.js";
+import "./chunk-QKMBWYAS.js";
+import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/promote.ts
 var promoteCommand = defineCommand({
@@ -49,4 +50,4 @@ var promoteCommand = defineCommand({
 export {
   promoteCommand
 };
-//# sourceMappingURL=promote-YINYFBZY.js.map
+//# sourceMappingURL=promote-FINF4HVK.js.map

package/dist/cli/provenance-3TUWVBFR.js

@@ -0,0 +1,141 @@
+(() => {
+  const _installed = Symbol.for('cleocode.cli.sqliteWarningFilter');
+  if (globalThis[_installed]) return;
+  globalThis[_installed] = true;
+  const _origEmitWarning = process.emitWarning;
+  process.emitWarning = function(warning, type, code, ctor) {
+    if (typeof warning === 'object' && warning.name === 'ExperimentalWarning' && typeof warning.message === 'string' && /SQLite is an experimental feature/i.test(warning.message)) {
+      return;
+    }
+    if (typeof warning === 'string' && /SQLite is an experimental feature/i.test(warning)) {
+      return;
+    }
+    return _origEmitWarning.call(process, warning, type, code, ctor);
+  };
+})();
+import {
+  errorResult,
+  handleErrorResult,
+  unsupportedOp,
+  wrapResult
+} from "./chunk-XHRZ7OYZ.js";
+
+// packages/cleo/src/dispatch/domains/provenance.ts
+import {
+  getLogger,
+  getProjectRoot,
+  provenanceBackfill,
+  verifyProvenance
+} from "@cleocode/core/internal";
+var log = getLogger("domain:provenance");
+var ProvenanceHandler = class {
+  // -----------------------------------------------------------------------
+  // Query
+  // -----------------------------------------------------------------------
+  /**
+   * Provenance query operations. Currently only `verify` is implemented.
+   *
+   * @param operation - The provenance query op name (`verify`).
+   * @param params    - The dispatch params object: `version`, `all`, `limit`.
+   */
+  async query(operation, params) {
+    const startTime = Date.now();
+    try {
+      switch (operation) {
+        // ------------------------------------------------------------------
+        // provenance.verify — T9529 / SPEC-T9345 §4.6
+        // ------------------------------------------------------------------
+        case "verify": {
+          const version = typeof params?.["version"] === "string" ? params["version"] : void 0;
+          const all = typeof params?.["all"] === "boolean" ? params["all"] : false;
+          const limit = typeof params?.["limit"] === "number" ? params["limit"] : void 0;
+          if (!version && !all) {
+            return errorResult(
+              "query",
+              "provenance",
+              operation,
+              "E_INVALID_INPUT",
+              "verify requires either <version> or --all",
+              startTime
+            );
+          }
+          const result = await verifyProvenance({
+            ...version ? { version } : {},
+            all,
+            ...limit !== void 0 ? { limit } : {},
+            projectRoot: getProjectRoot()
+          });
+          return wrapResult(result, "query", "provenance", operation, startTime);
+        }
+        default:
+          return unsupportedOp("query", "provenance", operation, startTime);
+      }
+    } catch (err) {
+      log.error({ err, operation }, "ProvenanceHandler query error");
+      return handleErrorResult("query", "provenance", operation, err, startTime);
+    }
+  }
+  // -----------------------------------------------------------------------
+  // Mutate
+  // -----------------------------------------------------------------------
+  /**
+   * Provenance mutate operations. Currently only `backfill` is implemented.
+   *
+   * @param operation - The provenance mutate op name (`backfill`).
+   * @param params    - The dispatch params object: `since`, `forceOverwrite`,
+   *                    `dryRun`, `resetCheckpoint`.
+   */
+  async mutate(operation, params) {
+    const startTime = Date.now();
+    try {
+      switch (operation) {
+        // ------------------------------------------------------------------
+        // provenance.backfill — T9528 / SPEC-T9345 §8.3
+        // ------------------------------------------------------------------
+        case "backfill": {
+          const since = typeof params?.["since"] === "string" ? params["since"] : void 0;
+          if (since === void 0) {
+            return errorResult(
+              "mutate",
+              "provenance",
+              operation,
+              "E_INVALID_INPUT",
+              'since is required (use --since "" to walk every reachable tag)',
+              startTime
+            );
+          }
+          const forceOverwrite = typeof params?.["forceOverwrite"] === "boolean" ? params["forceOverwrite"] : false;
+          const dryRun = typeof params?.["dryRun"] === "boolean" ? params["dryRun"] : false;
+          const resetCheckpoint = typeof params?.["resetCheckpoint"] === "boolean" ? params["resetCheckpoint"] : false;
+          const result = await provenanceBackfill({
+            since,
+            projectRoot: getProjectRoot(),
+            forceOverwrite,
+            dryRun,
+            resetCheckpoint
+          });
+          return wrapResult(result, "mutate", "provenance", operation, startTime);
+        }
+        default:
+          return unsupportedOp("mutate", "provenance", operation, startTime);
+      }
+    } catch (err) {
+      log.error({ err, operation }, "ProvenanceHandler mutate error");
+      return handleErrorResult("mutate", "provenance", operation, err, startTime);
+    }
+  }
+  // -----------------------------------------------------------------------
+  // getSupportedOperations
+  // -----------------------------------------------------------------------
+  /** Return declared operations for introspection and registry validation. */
+  getSupportedOperations() {
+    return {
+      query: ["verify"],
+      mutate: ["backfill"]
+    };
+  }
+};
+export {
+  ProvenanceHandler
+};
+//# sourceMappingURL=provenance-3TUWVBFR.js.map

package/dist/cli/{provenance-C7AYD7WG.js → provenance-YZG33JGM.js}

@@ -13,19 +13,20 @@
     return _origEmitWarning.call(process, warning, type, code, ctor);
   };
 })();
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand,
   showUsage
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
-import "./chunk-3ZO3M37V.js";
+import "./chunk-QKMBWYAS.js";
+import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/provenance.ts
 var backfillCommand = defineCommand({
@@ -125,4 +126,4 @@ var provenanceCommand = defineCommand({
 export {
   provenanceCommand
 };
-//# sourceMappingURL=provenance-C7AYD7WG.js.map
+//# sourceMappingURL=provenance-YZG33JGM.js.map

package/dist/cli/{provider-QLJEDQBR.js → provider-23JVLLG3.js}

@@ -16,18 +16,19 @@
 import {
   isSubCommandDispatch
 } from "./chunk-YY66LFZF.js";
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
-import "./chunk-3ZO3M37V.js";
+import "./chunk-QKMBWYAS.js";
+import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/provider.ts
 var listCommand = defineCommand({
@@ -209,4 +210,4 @@ var providerCommand = defineCommand({
 export {
   providerCommand
 };
-//# sourceMappingURL=provider-QLJEDQBR.js.map
+//# sourceMappingURL=provider-23JVLLG3.js.map

package/dist/cli/{reason-JF5BHBM5.js → reason-FHN54O7O.js}

@@ -13,21 +13,22 @@
     return _origEmitWarning.call(process, warning, type, code, ctor);
   };
 })();
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand,
   showUsage
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
+import "./chunk-QKMBWYAS.js";
 import {
   cliError
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/reason.ts
 var impactCommand = defineCommand({
@@ -134,4 +135,4 @@ var reasonCommand = defineCommand({
 export {
   reasonCommand
 };
-//# sourceMappingURL=reason-JF5BHBM5.js.map
+//# sourceMappingURL=reason-FHN54O7O.js.map

package/dist/cli/{reconcile-NMISHDGX.js → reconcile-MOM5T4AX.js}

@@ -13,22 +13,23 @@
     return _origEmitWarning.call(process, warning, type, code, ctor);
   };
 })();
+import {
+  dispatchRaw,
+  handleRawError
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand,
   showUsage
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchRaw,
-  handleRawError
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
+import "./chunk-QKMBWYAS.js";
 import {
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/reconcile.ts
 import { release } from "@cleocode/core";
@@ -124,4 +125,4 @@ var reconcileCommand = defineCommand({
 export {
   reconcileCommand
 };
-//# sourceMappingURL=reconcile-NMISHDGX.js.map
+//# sourceMappingURL=reconcile-MOM5T4AX.js.map

package/dist/cli/{refresh-memory-EY5YNICV.js → refresh-memory-3OSTRAVK.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-PKKZPOOP.js";
 import {
   humanLine
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 
 // packages/cleo/src/cli/commands/refresh-memory.ts
@@ -42,4 +42,4 @@ var refreshMemoryCommand = defineCommand({
 export {
   refreshMemoryCommand
 };
-//# sourceMappingURL=refresh-memory-EY5YNICV.js.map
+//# sourceMappingURL=refresh-memory-3OSTRAVK.js.map

package/dist/cli/{relates-R3ZPICAY.js → relates-6FWUFUS2.js}

@@ -16,19 +16,20 @@
 import {
   negatedFlag
 } from "./chunk-47JYZAMS.js";
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand,
   showUsage
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
-import "./chunk-3ZO3M37V.js";
+import "./chunk-QKMBWYAS.js";
+import "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/relates.ts
 import { readFile } from "node:fs/promises";
@@ -256,4 +257,4 @@ var relatesCommand = defineCommand({
 export {
   relatesCommand
 };
-//# sourceMappingURL=relates-R3ZPICAY.js.map
+//# sourceMappingURL=relates-6FWUFUS2.js.map