@cleocode/cleo 2026.10.4 → 2026.10.5

package/dist/cli/{check-RWJLBCI2.js → check-DHMURGHC.js}

@@ -16,28 +16,29 @@
 import {
   getOperationParams,
   paramsToCittyArgs
-} from "./chunk-W33Q3FBH.js";
+} from "./chunk-RRKP7HLU.js";
 import {
   negatedFlag
 } from "./chunk-47JYZAMS.js";
+import {
+  dispatchFromCli
+} from "./chunk-L7ONYSV6.js";
+import "./chunk-6N6WGLXE.js";
+import "./chunk-4VASFLUW.js";
 import {
   defineCommand,
   showUsage
 } from "./chunk-PKKZPOOP.js";
-import {
-  dispatchFromCli
-} from "./chunk-3IOQVUO7.js";
-import "./chunk-AWCQH2W5.js";
-import "./chunk-OGV57L4J.js";
-import "./chunk-ZBISIPCK.js";
+import "./chunk-QKMBWYAS.js";
 import {
   cliError
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
-import "./chunk-QFFQSKRC.js";
+import "./chunk-D7BAQNV2.js";
+import "./chunk-TYC7G5LF.js";
 
 // packages/cleo/src/cli/commands/check.ts
-import { formatPrGateSummary, runPrGate } from "@cleocode/core/internal";
+import { formatPrGateSummary, runPrGate } from "@cleocode/core/check/pr-gate";
 function emitPrGateSummary(summary) {
   const envelope = {
     success: summary.passed,
@@ -54,6 +55,10 @@ function emitPrGateSummary(summary) {
   process.stderr.write(`${formatPrGateSummary(summary)}
 `);
 }
+var GATE_SKIPPED_EXIT = 78;
+var GATE_SKIP_REPORTING_SCRIPTS = /* @__PURE__ */ new Set([
+  "scripts/check-cli-startup-graph.mjs"
+]);
 var SUPPORTED_PROTOCOL_TYPES = [
   "research",
   "consensus",
@@ -752,6 +757,17 @@ var checkArchCommand = defineCommand({
         task: "T13126",
         script: "scripts/check-cli-startup-graph.mjs",
         description: "Built CLI startup graph and per-command module budgets (ratchet)"
+      },
+      {
+        // T13126: the @cleocode/contracts barrel evaluates every contracts zod
+        // schema (~40 MB of heap). Runtime source of the packages the CLI
+        // loads imports VALUES from the declaring leaf module; type-only
+        // imports may stay on the barrel (erased). Core's own public barrels
+        // are exempt. A 6-file baseline (skill-covered files) may only shrink.
+        id: "gate-40",
+        task: "T13126",
+        script: "scripts/lint-no-contracts-barrel-value-imports.mjs",
+        description: "No runtime value import from the @cleocode/contracts barrel"
       }
     ];
     const scriptArgs = strict ? ["--strict"] : ["--check"];
@@ -777,14 +793,15 @@ var checkArchCommand = defineCommand({
         stdio: ["ignore", "pipe", "pipe"],
         cwd: repoRoot
       });
+      const skipped = result.status === GATE_SKIPPED_EXIT && GATE_SKIP_REPORTING_SCRIPTS.has(gate.script);
       const passed = result.status === 0;
-      if (!passed) anyFailed = true;
+      if (!passed && !skipped) anyFailed = true;
       results.push({
         id: gate.id,
         task: gate.task,
         script: gate.script,
         description: gate.description,
-        status: passed ? "pass" : "fail",
+        status: skipped ? "skipped" : passed ? "pass" : "fail",
         exitCode: result.status,
         stdout: result.stdout ?? "",
         stderr: result.stderr ?? ""
@@ -904,4 +921,4 @@ var checkCommand = defineCommand({
 export {
   checkCommand
 };
-//# sourceMappingURL=check-RWJLBCI2.js.map
+//# sourceMappingURL=check-DHMURGHC.js.map

package/dist/cli/{checkpoint-37HMMKD7.js → checkpoint-UWDFOGYQ.js}

@@ -19,11 +19,11 @@ import {
 import {
   cliError,
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 import "./chunk-6JSJNYH2.js";
 
 // packages/cleo/src/cli/commands/checkpoint.ts
-import { ExitCode } from "@cleocode/contracts";
+import { ExitCode } from "@cleocode/contracts/exit-codes.js";
 import {
   CleoError,
   formatError,
@@ -125,4 +125,4 @@ var checkpointCommand = defineCommand({
 export {
   checkpointCommand
 };
-//# sourceMappingURL=checkpoint-37HMMKD7.js.map
+//# sourceMappingURL=checkpoint-UWDFOGYQ.js.map

package/dist/cli/{chunk-NRKWJLMS.js → chunk-22YPFZYB.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-PKKZPOOP.js";
 import {
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 
 // packages/cleo/src/cli/commands/doctor-manifest-rows.ts
 import {
@@ -88,4 +88,4 @@ var doctorManifestRowsCommand = defineCommand({
 export {
   doctorManifestRowsCommand
 };
-//# sourceMappingURL=chunk-NRKWJLMS.js.map
+//# sourceMappingURL=chunk-22YPFZYB.js.map

package/dist/cli/{chunk-I3CRQQAD.js → chunk-2MGFDMDF.js}

@@ -23,12 +23,18 @@ import {
   cliError,
   cliOutput,
   humanInfo
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 
 // packages/cleo/src/cli/commands/backup-recover.ts
-import { DB_INVENTORY, ExitCode } from "@cleocode/contracts";
-import { getLogger, getProjectRoot } from "@cleocode/core";
-import { BackupRecoverError, runBackupRecover } from "@cleocode/core/store/backup-recover.js";
+import { DB_INVENTORY } from "@cleocode/contracts/db-inventory.js";
+import { ExitCode } from "@cleocode/contracts/exit-codes.js";
+import { CleoError, getLogger, getProjectRoot } from "@cleocode/core";
+import {
+  BackupRecoverError,
+  PROJECT_STORE_ROLES,
+  recoverProjectStore,
+  runBackupRecover
+} from "@cleocode/core/store/backup-recover.js";
 function readBoolFlag(args, key) {
   return args[key] === true;
 }
@@ -36,7 +42,8 @@ function readStringFlag(args, key) {
   const v = args[key];
   return typeof v === "string" ? v : "";
 }
-function executeRecover(role, args) {
+async function executeRecover(role, args) {
+  if (PROJECT_STORE_ROLES.has(role)) return executeStoreRecover(role, args);
   const projectRoot = getProjectRoot();
   const dryRun = readBoolFlag(args, "dry-run");
   const fromSnapshot = readStringFlag(args, "from-snapshot");
@@ -86,43 +93,80 @@ function executeRecover(role, args) {
     process.exitCode = ExitCode.GENERAL_ERROR;
   }
 }
+async function executeStoreRecover(role, args) {
+  const operation = `backup.recover.${role}`;
+  try {
+    const fromSnapshot = readStringFlag(args, "from-snapshot");
+    const result = await recoverProjectStore({
+      role,
+      projectRoot: getProjectRoot(),
+      ...fromSnapshot.length > 0 ? { fromSnapshot } : {},
+      dryRun: readBoolFlag(args, "dry-run"),
+      force: readBoolFlag(args, "force"),
+      confirmOwnerStore: readBoolFlag(args, "confirm-owner-store"),
+      cwd: process.cwd()
+    });
+    cliOutput(result, { command: "backup", operation });
+  } catch (err) {
+    const coded = err instanceof BackupRecoverError || err instanceof CleoError;
+    const code = coded ? err.code : ExitCode.GENERAL_ERROR;
+    const message = err instanceof Error ? err.message : String(err);
+    const fix = coded ? err.fix : void 0;
+    cliError(message, code, { name: "E_RECOVERY_FAILED", ...fix ? { fix } : {} }, { operation });
+    process.exitCode = code;
+  }
+}
+var STORE_LEAF_ARGS = {
+  "dry-run": {
+    type: "boolean",
+    description: "Print what would be done without quarantining or copying any files",
+    default: false
+  },
+  "from-snapshot": {
+    type: "string",
+    description: "Pin recovery to a specific snapshot \u2014 absolute path or ISO timestamp prefix (e.g. 2026-05-23)",
+    default: ""
+  },
+  "no-delta": {
+    type: "boolean",
+    description: "Skip the sqlite3 .recover delta-merge step (reserved \u2014 current pipeline does not delta-merge; flag plumbed for forward-compat)",
+    default: false
+  },
+  force: {
+    type: "boolean",
+    description: "tasks/brain/conduit: the live cleo.db is unreadable and every cleo process is stopped, so the restore may proceed without the live-writer check",
+    default: false
+  },
+  "confirm-owner-store": {
+    type: "boolean",
+    description: "From inside a git worktree: allow overwriting the owning project's LIVE store (refused without it)",
+    default: false
+  }
+};
 var backupRecoverBrainLeaf = defineCommand({
   meta: {
     name: "brain",
     description: "Recover a malformed brain.db from the freshest validated snapshot (Saga T10281 SG-BRAIN-DB-RESILIENCE)"
   },
-  args: {
-    "dry-run": {
-      type: "boolean",
-      description: "Print what would be done without quarantining or copying any files",
-      default: false
-    },
-    "from-snapshot": {
-      type: "string",
-      description: "Pin recovery to a specific snapshot \u2014 absolute path or ISO timestamp prefix (e.g. 2026-05-23)",
-      default: ""
-    },
-    "no-delta": {
-      type: "boolean",
-      description: "Skip the sqlite3 .recover delta-merge step (reserved \u2014 current pipeline does not delta-merge; flag plumbed for forward-compat)",
-      default: false
-    },
-    force: {
-      type: "boolean",
-      description: "Bypass any safety prompts (currently a no-op; reserved)",
-      default: false
-    },
-    "confirm-owner-store": {
-      type: "boolean",
-      description: "From inside a git worktree: allow overwriting the owning project's LIVE store (refused without it)",
-      default: false
-    }
-  },
+  args: STORE_LEAF_ARGS,
   async run({ args }) {
     const argsBag = args;
-    executeRecover("brain", argsBag);
+    await executeRecover("brain", argsBag);
   }
 });
+function makeStoreRecoverLeafCommand(role) {
+  return defineCommand({
+    meta: {
+      name: role,
+      description: `Recover the live project store (.cleo/cleo.db, which holds the ${role} tables) from the freshest validated snapshot`
+    },
+    args: STORE_LEAF_ARGS,
+    async run({ args }) {
+      const argsBag = args;
+      await executeRecover(role, argsBag);
+    }
+  });
+}
 function parseRoleArg(value) {
   const trimmed = value.trim();
   for (const entry of DB_INVENTORY) {
@@ -166,7 +210,7 @@ var backupRecoverSubCommand = defineCommand({
     },
     force: {
       type: "boolean",
-      description: "Bypass any safety prompts (currently a no-op; reserved)",
+      description: "tasks/brain/conduit: the live cleo.db is unreadable and every cleo process is stopped, so the restore may proceed without the live-writer check",
       default: false
     },
     "confirm-owner-store": {
@@ -176,11 +220,14 @@ var backupRecoverSubCommand = defineCommand({
     }
   },
   subCommands: {
-    brain: backupRecoverBrainLeaf
+    brain: backupRecoverBrainLeaf,
+    tasks: makeStoreRecoverLeafCommand("tasks"),
+    conduit: makeStoreRecoverLeafCommand("conduit")
   },
   async run({ args }) {
     const argsBag = args;
     const roleArg = readStringFlag(argsBag, "role");
+    if (roleArg === "brain" || roleArg === "tasks" || roleArg === "conduit") return;
     if (roleArg.length === 0) {
       const validRoles = DB_INVENTORY.map((e) => e.role).join(", ");
       cliError(
@@ -214,7 +261,7 @@ var backupRecoverSubCommand = defineCommand({
       }
       throw err;
     }
-    executeRecover(role, argsBag);
+    await executeRecover(role, argsBag);
   }
 });
 
@@ -222,4 +269,4 @@ export {
   backupRecoverBrainLeaf,
   backupRecoverSubCommand
 };
-//# sourceMappingURL=chunk-I3CRQQAD.js.map
+//# sourceMappingURL=chunk-2MGFDMDF.js.map

package/dist/cli/{chunk-BCEXRFA2.js → chunk-4JYHPP4C.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-PKKZPOOP.js";
 import {
   cliOutput
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 
 // packages/cleo/src/cli/commands/doctor-credentials.ts
 import { join } from "node:path";
@@ -73,4 +73,4 @@ var doctorCredentialsCommand = defineCommand({
 export {
   doctorCredentialsCommand
 };
-//# sourceMappingURL=chunk-BCEXRFA2.js.map
+//# sourceMappingURL=chunk-4JYHPP4C.js.map

package/dist/cli/{chunk-A2IUEIM5.js → chunk-4PEODTHY.js}

@@ -19,7 +19,7 @@ import {
 import {
   cliOutput,
   humanLine
-} from "./chunk-3ZO3M37V.js";
+} from "./chunk-4RGSNUUP.js";
 
 // packages/cleo/src/cli/commands/doctor-release-readiness.ts
 import { existsSync } from "node:fs";
@@ -275,4 +275,4 @@ var doctorReleaseReadinessCommand = defineCommand({
 export {
   doctorReleaseReadinessCommand
 };
-//# sourceMappingURL=chunk-A2IUEIM5.js.map
+//# sourceMappingURL=chunk-4PEODTHY.js.map