@cleocode/cleo 2026.10.4 → 2026.10.5

package/dist/cli/{update-NVCYV2FT.js → update-2KQWA27S.js}

@@ -16,36 +16,38 @@
 import {
   collectMutateInput
 } from "./chunk-QA6T2LQ5.js";
-import {
-  defineCommand,
-  showUsage
-} from "./chunk-PKKZPOOP.js";
 import {
   dispatchFromCli,
   dispatchRaw,
   handleRawError,
   maybeEmitDescribe
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
+import {
+  defineCommand,
+  showUsage
+} from "./chunk-PKKZPOOP.js";
+import "./chunk-QKMBWYAS.js";
 import {
   cliError,
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/update.ts
-import { ExitCode, TASK_SEVERITIES } from "@cleocode/contracts";
+import { TASK_SEVERITIES } from "@cleocode/contracts/enums.js";
+import { ExitCode } from "@cleocode/contracts/exit-codes.js";
+import { INPUT_CONTRACTS } from "@cleocode/core/dispatch/contracts/input-contracts";
+import { validateOperationInput } from "@cleocode/core/dispatch/validation";
+import { parseAcceptanceCriteria } from "@cleocode/core/tasks/acceptance-input";
 import {
-  INPUT_CONTRACTS,
   isPipelineTransitionForward,
   isValidPipelineStage,
-  parseAcceptanceCriteria,
-  TASK_PIPELINE_STAGES,
-  validateOperationInput
-} from "@cleocode/core";
+  TASK_PIPELINE_STAGES
+} from "@cleocode/core/tasks/pipeline-stage";
 var updateCommand = defineCommand({
   meta: {
     name: "update",
@@ -473,4 +475,4 @@ var updateCommand = defineCommand({
 export {
   updateCommand
 };
-//# sourceMappingURL=update-NVCYV2FT.js.map
+//# sourceMappingURL=update-2KQWA27S.js.map

package/dist/cli/update-check-entry.js

@@ -0,0 +1,124 @@
+(() => {
+  const _installed = Symbol.for('cleocode.cli.sqliteWarningFilter');
+  if (globalThis[_installed]) return;
+  globalThis[_installed] = true;
+  const _origEmitWarning = process.emitWarning;
+  process.emitWarning = function(warning, type, code, ctor) {
+    if (typeof warning === 'object' && warning.name === 'ExperimentalWarning' && typeof warning.message === 'string' && /SQLite is an experimental feature/i.test(warning.message)) {
+      return;
+    }
+    if (typeof warning === 'string' && /SQLite is an experimental feature/i.test(warning)) {
+      return;
+    }
+    return _origEmitWarning.call(process, warning, type, code, ctor);
+  };
+})();
+import {
+  compareVersions
+} from "./chunk-EW2CKNNZ.js";
+
+// packages/cleo/src/cli/lib/update-check.ts
+import { mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+var UPDATE_CHECK_TIMEOUT_MS = 1e4;
+var MAX_DIST_TAGS = 32;
+var VERSION_RE = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z.-]+)?$/;
+function distTagsUrl(registry2, packageName2) {
+  return `${registry2.replace(/\/+$/, "")}/-/package/${packageName2.replace("/", "%2f")}/dist-tags`;
+}
+function versionManifestUrl(registry2, packageName2, version) {
+  return `${registry2.replace(/\/+$/, "")}/${packageName2.replace("/", "%2f")}/${encodeURIComponent(version)}`;
+}
+function manifestFlagsHotfix(body) {
+  if (typeof body !== "object" || body === null || !("cleo" in body)) return false;
+  const meta = body.cleo;
+  return typeof meta === "object" && meta !== null && "hotfix" in meta && meta.hotfix === true;
+}
+function parseDistTags(body) {
+  if (typeof body !== "object" || body === null || Array.isArray(body)) return null;
+  const tags = {};
+  for (const [tag, version] of Object.entries(body)) {
+    if (Object.keys(tags).length >= MAX_DIST_TAGS) break;
+    if (/^[A-Za-z0-9._-]{1,64}$/.test(tag) && typeof version === "string") {
+      if (VERSION_RE.test(version)) tags[tag] = version;
+    }
+  }
+  return tags;
+}
+function previousCache(cachePath2) {
+  try {
+    const body = JSON.parse(readFileSync(cachePath2, "utf8"));
+    if (typeof body === "object" && body !== null) {
+      const distTags = "distTags" in body ? parseDistTags(body.distTags) ?? {} : {};
+      const hotfix = "hotfix" in body ? body.hotfix : void 0;
+      return typeof hotfix === "string" && VERSION_RE.test(hotfix) ? { distTags, hotfix } : { distTags };
+    }
+  } catch {
+  }
+  return { distTags: {} };
+}
+function maxVersion(a, b) {
+  if (a === void 0) return b;
+  if (b === void 0) return a;
+  return (compareVersions(a, b) ?? 0) >= 0 ? a : b;
+}
+function writeCache(cachePath2, cache) {
+  mkdirSync(dirname(cachePath2), { recursive: true });
+  const tmp = `${cachePath2}.${process.pid}.tmp`;
+  writeFileSync(tmp, `${JSON.stringify(cache)}
+`);
+  renameSync(tmp, cachePath2);
+}
+async function runUpdateCheck(request, fetchImpl = fetch, now = () => /* @__PURE__ */ new Date()) {
+  const previous = previousCache(request.cachePath);
+  const signal = AbortSignal.timeout(UPDATE_CHECK_TIMEOUT_MS);
+  const headers = { accept: "application/json" };
+  let distTags = null;
+  let manifestRead = false;
+  let flagged;
+  try {
+    const response = await fetchImpl(distTagsUrl(request.registry, request.packageName), {
+      signal,
+      headers
+    });
+    if (response.ok) distTags = parseDistTags(await response.json());
+    const latest = distTags?.["latest"];
+    if (latest !== void 0) {
+      const manifest = await fetchImpl(
+        versionManifestUrl(request.registry, request.packageName, latest),
+        { signal, headers }
+      );
+      if (manifest.ok) {
+        manifestRead = true;
+        if (manifestFlagsHotfix(await manifest.json())) flagged = latest;
+      }
+    }
+  } catch {
+  }
+  const hotfix = maxVersion(previous.hotfix, flagged);
+  const cache = {
+    schemaVersion: 1,
+    checkedAt: now().toISOString(),
+    // Both reads must succeed: a missed manifest would hide a hotfix for a day.
+    ok: distTags !== null && (manifestRead || distTags["latest"] === void 0),
+    distTags: distTags ?? previous.distTags,
+    ...hotfix === void 0 ? {} : { hotfix }
+  };
+  try {
+    writeCache(request.cachePath, cache);
+  } catch {
+  }
+  try {
+    unlinkSync(request.lockPath);
+  } catch {
+  }
+  return cache;
+}
+
+// packages/cleo/src/cli/update-check-entry.ts
+var [cachePath, lockPath, registry, packageName] = process.argv.slice(2);
+if (cachePath && lockPath && registry && packageName) {
+  await runUpdateCheck({ cachePath, lockPath, registry, packageName });
+}
+process.exit(0);
+//# sourceMappingURL=update-check-entry.js.map

package/dist/cli/update-notice-6SQ6WPQG.js

@@ -0,0 +1,68 @@
+(() => {
+  const _installed = Symbol.for('cleocode.cli.sqliteWarningFilter');
+  if (globalThis[_installed]) return;
+  globalThis[_installed] = true;
+  const _origEmitWarning = process.emitWarning;
+  process.emitWarning = function(warning, type, code, ctor) {
+    if (typeof warning === 'object' && warning.name === 'ExperimentalWarning' && typeof warning.message === 'string' && /SQLite is an experimental feature/i.test(warning.message)) {
+      return;
+    }
+    if (typeof warning === 'string' && /SQLite is an experimental feature/i.test(warning)) {
+      return;
+    }
+    return _origEmitWarning.call(process, warning, type, code, ctor);
+  };
+})();
+import {
+  CLEO_PACKAGE_NAME,
+  DEFAULT_NPM_REGISTRY,
+  HOTFIX_NOTICE_INTERVAL_MS,
+  HOTFIX_NOTICE_STAMP_FILE,
+  UPDATE_CACHE_FILE,
+  UPDATE_CHECK_ENTRY,
+  UPDATE_CHECK_INTERVAL_MS,
+  UPDATE_CHECK_LOCK_STALE_MS,
+  UPDATE_CHECK_RETRY_MS,
+  UPDATE_LOCK_FILE,
+  UPDATE_NOTICE_FROM_SOURCE_ENV,
+  UPDATE_NOTICE_INTERVAL_MS,
+  UPDATE_NOTICE_OPT_OUT_ENV,
+  UPDATE_NOTICE_STAMP_FILE,
+  claimUpdateCheck,
+  compareVersions,
+  decideUpdateNotice,
+  formatUpdateNotice,
+  isCiEnvironment,
+  parseUpdateCache,
+  releaseChannelTag,
+  showUpdateNotice,
+  updateCheckDue,
+  updateNoticeSuppression
+} from "./chunk-EW2CKNNZ.js";
+export {
+  CLEO_PACKAGE_NAME,
+  DEFAULT_NPM_REGISTRY,
+  HOTFIX_NOTICE_INTERVAL_MS,
+  HOTFIX_NOTICE_STAMP_FILE,
+  UPDATE_CACHE_FILE,
+  UPDATE_CHECK_ENTRY,
+  UPDATE_CHECK_INTERVAL_MS,
+  UPDATE_CHECK_LOCK_STALE_MS,
+  UPDATE_CHECK_RETRY_MS,
+  UPDATE_LOCK_FILE,
+  UPDATE_NOTICE_FROM_SOURCE_ENV,
+  UPDATE_NOTICE_INTERVAL_MS,
+  UPDATE_NOTICE_OPT_OUT_ENV,
+  UPDATE_NOTICE_STAMP_FILE,
+  claimUpdateCheck,
+  compareVersions,
+  decideUpdateNotice,
+  formatUpdateNotice,
+  isCiEnvironment,
+  parseUpdateCache,
+  releaseChannelTag,
+  showUpdateNotice,
+  updateCheckDue,
+  updateNoticeSuppression
+};
+//# sourceMappingURL=update-notice-6SQ6WPQG.js.map

package/dist/cli/upgrade-E2MJAPC7.js

@@ -0,0 +1,136 @@
+(() => {
+  const _installed = Symbol.for('cleocode.cli.sqliteWarningFilter');
+  if (globalThis[_installed]) return;
+  globalThis[_installed] = true;
+  const _origEmitWarning = process.emitWarning;
+  process.emitWarning = function(warning, type, code, ctor) {
+    if (typeof warning === 'object' && warning.name === 'ExperimentalWarning' && typeof warning.message === 'string' && /SQLite is an experimental feature/i.test(warning.message)) {
+      return;
+    }
+    if (typeof warning === 'string' && /SQLite is an experimental feature/i.test(warning)) {
+      return;
+    }
+    return _origEmitWarning.call(process, warning, type, code, ctor);
+  };
+})();
+import {
+  dispatchMeta,
+  handleErrorResult,
+  unsupportedOp
+} from "./chunk-XHRZ7OYZ.js";
+
+// packages/cleo/src/dispatch/domains/upgrade.ts
+import { getLogger, getProjectRoot, getWorkflowTemplatesDir } from "@cleocode/core";
+import { upgradeWorkflows } from "@cleocode/core/internal";
+var log = getLogger("domain:upgrade");
+function resolveTemplatesDir() {
+  return getWorkflowTemplatesDir();
+}
+function toDispatchData(result) {
+  return {
+    outcomes: result.outcomes.map((o) => ({
+      template: o.template,
+      targetPath: o.targetPath,
+      status: o.status,
+      overrideDeclared: o.overrideDeclared
+    })),
+    resolvedTools: result.resolvedTools,
+    hasDrift: result.hasDrift
+  };
+}
+var UpgradeHandler = class {
+  /**
+   * Handle read-only upgrade queries.
+   *
+   * Supported operations:
+   *  - `workflows` — drift detection only; never writes to disk.
+   *                  Effectively forces `dryRun=true` at the query gateway.
+   */
+  async query(operation, params) {
+    const startTime = Date.now();
+    try {
+      switch (operation) {
+        case "workflows": {
+          const includeRendered = params?.["includeRendered"] === true;
+          const result = await upgradeWorkflows({
+            projectRoot: getProjectRoot(),
+            templatesDir: resolveTemplatesDir(),
+            dryRun: true
+          });
+          const data = toDispatchData(result);
+          return {
+            meta: dispatchMeta("query", "upgrade", operation, startTime),
+            success: true,
+            data: includeRendered ? {
+              ...data,
+              rendered: result.outcomes.map((o) => ({
+                template: o.template,
+                rendered: o.rendered
+              }))
+            } : data
+          };
+        }
+        default:
+          return unsupportedOp("query", "upgrade", operation, startTime);
+      }
+    } catch (err) {
+      log.error({ err, operation }, "UpgradeHandler query error");
+      return handleErrorResult("query", "upgrade", operation, err, startTime);
+    }
+  }
+  /**
+   * Handle upgrade mutations.
+   *
+   * Supported operations:
+   *  - `workflows` — re-render + (optionally) re-write drifted files.
+   *                  Params: `{ force?, dryRun? }`. Returns the per-template
+   *                  outcomes plus the `hasDrift` flag the CLI uses to drive
+   *                  the `--check` exit-code contract.
+   */
+  async mutate(operation, params) {
+    const startTime = Date.now();
+    try {
+      switch (operation) {
+        case "workflows": {
+          const force = params?.["force"] === true;
+          const dryRun = params?.["dryRun"] === true;
+          const includeRendered = params?.["includeRendered"] === true;
+          const result = await upgradeWorkflows({
+            projectRoot: getProjectRoot(),
+            templatesDir: resolveTemplatesDir(),
+            force,
+            dryRun
+          });
+          const data = toDispatchData(result);
+          return {
+            meta: dispatchMeta("mutate", "upgrade", operation, startTime),
+            success: true,
+            data: includeRendered ? {
+              ...data,
+              rendered: result.outcomes.map((o) => ({
+                template: o.template,
+                rendered: o.rendered
+              }))
+            } : data
+          };
+        }
+        default:
+          return unsupportedOp("mutate", "upgrade", operation, startTime);
+      }
+    } catch (err) {
+      log.error({ err, operation }, "UpgradeHandler mutate error");
+      return handleErrorResult("mutate", "upgrade", operation, err, startTime);
+    }
+  }
+  /** Declared operations for introspection and validation. */
+  getSupportedOperations() {
+    return {
+      query: ["workflows"],
+      mutate: ["workflows"]
+    };
+  }
+};
+export {
+  UpgradeHandler
+};
+//# sourceMappingURL=upgrade-E2MJAPC7.js.map

package/dist/cli/{upgrade-OXJXOGEF.js → upgrade-XRSQ4RWH.js}

@@ -15,13 +15,13 @@
 })();
 import {
   getWorkflowTemplatesDir
-} from "./chunk-OPTEQKBB.js";
+} from "./chunk-EIUXVHNF.js";
 import {
   createUpgradeProgress
 } from "./chunk-W3JLYKKY.js";
-import "./chunk-J3ZFM3UQ.js";
+import "./chunk-UWCZY52R.js";
 import "./chunk-GZFVDR44.js";
-import "./chunk-ULN4OKQQ.js";
+import "./chunk-GRU74UE4.js";
 import {
   negatedFlag
 } from "./chunk-47JYZAMS.js";
@@ -32,7 +32,7 @@ import {
 import {
   cliError,
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 
 // packages/cleo/src/cli/commands/upgrade.ts
@@ -240,4 +240,4 @@ var upgradeCommand = defineCommand({
 export {
   upgradeCommand
 };
-//# sourceMappingURL=upgrade-OXJXOGEF.js.map
+//# sourceMappingURL=upgrade-XRSQ4RWH.js.map

package/dist/cli/{verify-LYLDHPT2.js → verify-WASRGDBA.js}

@@ -16,22 +16,23 @@
 import {
   negatedFlag
 } from "./chunk-47JYZAMS.js";
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand,
   showUsage
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
+import "./chunk-QKMBWYAS.js";
 import {
   cliError,
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/verify.ts
 import { ExitCode } from "@cleocode/contracts";
@@ -187,4 +188,4 @@ var verifyCommand = defineCommand({
 export {
   verifyCommand
 };
-//# sourceMappingURL=verify-LYLDHPT2.js.map
+//# sourceMappingURL=verify-WASRGDBA.js.map

package/dist/cli/{web-QP2RP266.js → web-NJ3P67EU.js}

@@ -25,19 +25,19 @@ import {
   createWebSubsystem,
   getWebPaths,
   getWebStatus
-} from "./chunk-GH37QXW5.js";
+} from "./chunk-GAGUBU4Z.js";
 import {
   defineCommand
 } from "./chunk-PKKZPOOP.js";
 import {
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 
 // packages/cleo/src/cli/commands/web.ts
 import { spawn } from "node:child_process";
 import { rm } from "node:fs/promises";
-import { ExitCode } from "@cleocode/contracts";
+import { ExitCode } from "@cleocode/contracts/exit-codes.js";
 import { CleoError, formatError } from "@cleocode/core";
 function buildStudioUrl(port, host) {
   return `http://${host}:${port}`;
@@ -272,4 +272,4 @@ export {
   openBrowser,
   webCommand
 };
-//# sourceMappingURL=web-QP2RP266.js.map
+//# sourceMappingURL=web-NJ3P67EU.js.map

package/dist/cli/{workgraph-FXBSZDQE.js → workgraph-OHJ2VKJD.js}

@@ -36,7 +36,7 @@ var validateCommand = defineCommand({
   },
   async run({ args }) {
     const { validateWorkGraphScaffold } = await import("@cleocode/core/workgraph");
-    const { cliOutput } = await import("./renderers-64OR3IWX.js");
+    const { cliOutput } = await import("./renderers-TGSW77J4.js");
     const filePath = resolve(String(args.file));
     let raw;
     try {
@@ -81,7 +81,7 @@ var applyCommand = defineCommand({
   },
   async run({ args }) {
     const { applyWorkGraphScaffold } = await import("@cleocode/core/workgraph");
-    const { cliOutput } = await import("./renderers-64OR3IWX.js");
+    const { cliOutput } = await import("./renderers-TGSW77J4.js");
     const filePath = resolve(String(args.file));
     let raw;
     try {
@@ -128,7 +128,7 @@ var planCommand = defineCommand({
   async run({ args }) {
     const { generatePlanningDoc } = await import("@cleocode/core/workgraph");
     const { getProjectRoot } = await import("@cleocode/core");
-    const { cliOutput } = await import("./renderers-64OR3IWX.js");
+    const { cliOutput } = await import("./renderers-TGSW77J4.js");
     const projectRoot = getProjectRoot();
     const audience = String(args.audience) === "agent" ? "agent" : "maintainer";
     const result = await generatePlanningDoc(projectRoot, {
@@ -147,7 +147,7 @@ var structureCommand = defineCommand({
     const { validateWorkGraphStructure } = await import("@cleocode/core/workgraph");
     const { taskList } = await import("@cleocode/core/internal");
     const { getProjectRoot } = await import("@cleocode/core");
-    const { cliOutput } = await import("./renderers-64OR3IWX.js");
+    const { cliOutput } = await import("./renderers-TGSW77J4.js");
     const projectRoot = getProjectRoot();
     const listResult = await taskList(projectRoot, { limit: 5e3 });
     const tasks = listResult.success ? listResult.data?.tasks ?? [] : [];
@@ -168,7 +168,7 @@ var statusCommand = defineCommand({
   },
   async run() {
     const { sagas, getProjectRoot } = await import("@cleocode/core");
-    const { cliOutput } = await import("./renderers-64OR3IWX.js");
+    const { cliOutput } = await import("./renderers-TGSW77J4.js");
     const projectRoot = getProjectRoot();
     const listResult = await sagas.sagaList(projectRoot);
     if (!listResult.success) {
@@ -229,4 +229,4 @@ var workgraphCommand = defineCommand({
 export {
   workgraphCommand
 };
-//# sourceMappingURL=workgraph-FXBSZDQE.js.map
+//# sourceMappingURL=workgraph-OHJ2VKJD.js.map

package/dist/cli/{worktree-6RXAJIST.js → worktree-FVQLORFY.js}

@@ -13,22 +13,23 @@
     return _origEmitWarning.call(process, warning, type, code, ctor);
   };
 })();
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand,
   showUsage
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
+import "./chunk-QKMBWYAS.js";
 import {
   cliError,
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/worktree.ts
 import readline from "node:readline";
@@ -367,4 +368,4 @@ var worktreeCommand = defineCommand({
 export {
   worktreeCommand
 };
-//# sourceMappingURL=worktree-6RXAJIST.js.map
+//# sourceMappingURL=worktree-FVQLORFY.js.map