@cleocode/cleo 2026.4.25 → 2026.4.27

package/dist/cli/index.js

@@ -54643,33 +54643,23 @@ var init_runtime = __esm({
 });
 
 // packages/core/src/system/safestop.ts
-import { existsSync as existsSync96, readFileSync as readFileSync67, writeFileSync as writeFileSync15 } from "node:fs";
+import { existsSync as existsSync96 } from "node:fs";
 import { join as join98 } from "node:path";
-function safestop(projectRoot, opts) {
+async function safestop(projectRoot, opts) {
   const dryRun = opts?.dryRun ?? false;
   const reason = opts?.reason ?? "Manual safestop";
   let sessionEnded = false;
   if (!dryRun && !opts?.noSessionEnd) {
-    const sessPath = join98(projectRoot, ".cleo", "sessions.json");
-    if (existsSync96(sessPath)) {
-      try {
-        const data = JSON.parse(readFileSync67(sessPath, "utf-8"));
-        const sessions2 = data.sessions ?? [];
-        let changed = false;
-        for (const s3 of sessions2) {
-          if (s3.status === "active") {
-            s3.status = "ended";
-            s3.endedAt = (/* @__PURE__ */ new Date()).toISOString();
-            s3.endNote = `Safestop: ${reason}`;
-            changed = true;
-            sessionEnded = true;
-          }
-        }
-        if (changed) {
-          writeFileSync15(sessPath, JSON.stringify(data, null, 2), "utf-8");
-        }
-      } catch {
+    try {
+      const accessor = await getAccessor(projectRoot);
+      const activeSession = await accessor.getActiveSession();
+      if (activeSession && activeSession.id !== "default") {
+        activeSession.status = "ended";
+        activeSession.endedAt = (/* @__PURE__ */ new Date()).toISOString();
+        await accessor.upsertSingleSession(activeSession);
+        sessionEnded = true;
       }
+    } catch {
     }
   }
   return { stopped: !dryRun, reason, sessionEnded, handoff: opts?.handoff, dryRun };
@@ -55260,7 +55250,7 @@ var init_tasks2 = __esm({
 });
 
 // packages/core/src/templates/parser.ts
-import { existsSync as existsSync97, readdirSync as readdirSync31, readFileSync as readFileSync68 } from "fs";
+import { existsSync as existsSync97, readdirSync as readdirSync31, readFileSync as readFileSync67 } from "fs";
 import { join as join99 } from "path";
 import { parse as parseYaml } from "yaml";
 function deriveSubcommand(filename) {
@@ -55276,7 +55266,7 @@ function deriveSubcommand(filename) {
 }
 function parseTemplateFile2(templateDir, filename) {
   const filePath = join99(templateDir, filename);
-  const raw = readFileSync68(filePath, "utf-8");
+  const raw = readFileSync67(filePath, "utf-8");
   const parsed = parseYaml(raw);
   const name2 = typeof parsed.name === "string" ? parsed.name : filename;
   const titlePrefix = typeof parsed.title === "string" ? parsed.title : "";
@@ -55463,7 +55453,7 @@ var init_templates = __esm({
 });
 
 // packages/core/src/ui/aliases.ts
-import { existsSync as existsSync98, readFileSync as readFileSync69, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync98, readFileSync as readFileSync68, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir5, platform as platform3 } from "node:os";
 import { join as join100 } from "node:path";
 function getCurrentShell() {
@@ -55526,40 +55516,40 @@ function generatePowershellAliases(cleoPath) {
 }
 function hasAliasBlock(filePath) {
   if (!existsSync98(filePath)) return false;
-  const content = readFileSync69(filePath, "utf-8");
+  const content = readFileSync68(filePath, "utf-8");
   return content.includes(MARKER_START) && content.includes(MARKER_END);
 }
 function getInstalledVersion(filePath) {
   if (!existsSync98(filePath)) return null;
-  const content = readFileSync69(filePath, "utf-8");
+  const content = readFileSync68(filePath, "utf-8");
   const match = content.match(/CLEO CLI aliases \(v([^)]+)\)/);
   return match?.[1] ?? null;
 }
 function injectAliases(filePath, shell = "bash", cleoPath) {
   const content = shell === "powershell" ? generatePowershellAliases(cleoPath) : generateBashAliases(cleoPath);
   if (!existsSync98(filePath)) {
-    writeFileSync16(filePath, content + "\n", "utf-8");
+    writeFileSync15(filePath, content + "\n", "utf-8");
     return { action: "created", version: ALIASES_VERSION };
   }
-  const existing = readFileSync69(filePath, "utf-8");
+  const existing = readFileSync68(filePath, "utf-8");
   if (hasAliasBlock(filePath)) {
     const startIdx = existing.indexOf(MARKER_START);
     const endIdx = existing.indexOf(MARKER_END) + MARKER_END.length;
     const updated = existing.slice(0, startIdx) + content + existing.slice(endIdx);
-    writeFileSync16(filePath, updated, "utf-8");
+    writeFileSync15(filePath, updated, "utf-8");
     return { action: "updated", version: ALIASES_VERSION };
   }
-  writeFileSync16(filePath, existing + "\n" + content + "\n", "utf-8");
+  writeFileSync15(filePath, existing + "\n" + content + "\n", "utf-8");
   return { action: "added", version: ALIASES_VERSION };
 }
 function removeAliases(filePath) {
   if (!existsSync98(filePath) || !hasAliasBlock(filePath)) return false;
-  const existing = readFileSync69(filePath, "utf-8");
+  const existing = readFileSync68(filePath, "utf-8");
   const startIdx = existing.indexOf(MARKER_START);
   const endIdx = existing.indexOf(MARKER_END) + MARKER_END.length;
   const before = existing.slice(0, startIdx).replace(/\n+$/, "\n");
   const after = existing.slice(endIdx).replace(/^\n+/, "\n");
-  writeFileSync16(filePath, before + after, "utf-8");
+  writeFileSync15(filePath, before + after, "utf-8");
   return true;
 }
 function checkAliasesStatus(shell) {
@@ -55590,7 +55580,7 @@ var init_aliases = __esm({
 });
 
 // packages/core/src/ui/changelog.ts
-import { appendFileSync as appendFileSync9, existsSync as existsSync99, readFileSync as readFileSync70, writeFileSync as writeFileSync17 } from "node:fs";
+import { appendFileSync as appendFileSync9, existsSync as existsSync99, readFileSync as readFileSync69, writeFileSync as writeFileSync16 } from "node:fs";
 async function discoverReleaseTasks(options = {}, cwd, accessor) {
   const tasks2 = [];
   const dataSources = [];
@@ -55673,21 +55663,21 @@ function formatChangelogJson(version2, date6, sections) {
   };
 }
 function writeChangelogFile(filePath, content) {
-  writeFileSync17(filePath, content, "utf-8");
+  writeFileSync16(filePath, content, "utf-8");
 }
 function appendToChangelog(filePath, newContent) {
   if (!existsSync99(filePath)) {
-    writeFileSync17(filePath, `# Changelog
+    writeFileSync16(filePath, `# Changelog
 
 ${newContent}`, "utf-8");
     return;
   }
-  const existing = readFileSync70(filePath, "utf-8");
+  const existing = readFileSync69(filePath, "utf-8");
   const headerMatch = existing.match(/^# .+\n/m);
   if (headerMatch) {
     const insertPos = (headerMatch.index ?? 0) + headerMatch[0].length;
     const updated = existing.slice(0, insertPos) + "\n" + newContent + existing.slice(insertPos);
-    writeFileSync17(filePath, updated, "utf-8");
+    writeFileSync16(filePath, updated, "utf-8");
   } else {
     appendFileSync9(filePath, "\n" + newContent);
   }
@@ -55747,11 +55737,11 @@ var init_changelog = __esm({
 });
 
 // packages/core/src/ui/command-registry.ts
-import { existsSync as existsSync100, readdirSync as readdirSync32, readFileSync as readFileSync71 } from "node:fs";
+import { existsSync as existsSync100, readdirSync as readdirSync32, readFileSync as readFileSync70 } from "node:fs";
 import { basename as basename16, join as join101 } from "node:path";
 function parseCommandHeader(scriptPath) {
   if (!existsSync100(scriptPath)) return null;
-  const content = readFileSync71(scriptPath, "utf-8");
+  const content = readFileSync70(scriptPath, "utf-8");
   const lines = content.split("\n");
   let inHeader = false;
   const headerLines = [];
@@ -71081,7 +71071,7 @@ var init_compliance2 = __esm({
 });
 
 // packages/core/src/validation/docs-sync.ts
-import { existsSync as existsSync101, readdirSync as readdirSync33, readFileSync as readFileSync72 } from "node:fs";
+import { existsSync as existsSync101, readdirSync as readdirSync33, readFileSync as readFileSync71 } from "node:fs";
 import { join as join102 } from "node:path";
 function getScriptCommands(scriptsDir) {
   if (!existsSync101(scriptsDir)) return [];
@@ -71094,7 +71084,7 @@ function getScriptCommands(scriptsDir) {
 function getIndexScripts(indexPath) {
   if (!existsSync101(indexPath)) return [];
   try {
-    const content = readFileSync72(indexPath, "utf-8");
+    const content = readFileSync71(indexPath, "utf-8");
     const index2 = JSON.parse(content);
     return index2.commands.map((cmd) => cmd.script ?? "").filter((s3) => s3).map((s3) => s3.replace(/\.sh$/, "")).sort();
   } catch {
@@ -71104,7 +71094,7 @@ function getIndexScripts(indexPath) {
 function getIndexCommands(indexPath) {
   if (!existsSync101(indexPath)) return [];
   try {
-    const content = readFileSync72(indexPath, "utf-8");
+    const content = readFileSync71(indexPath, "utf-8");
     const index2 = JSON.parse(content);
     return index2.commands.map((cmd) => cmd.name).sort();
   } catch {
@@ -71141,8 +71131,8 @@ function checkWrapperSync(wrapperPath, indexPath) {
   if (!existsSync101(wrapperPath) || !existsSync101(indexPath)) return [];
   const issues = [];
   try {
-    const wrapperContent = readFileSync72(wrapperPath, "utf-8");
-    const indexContent = readFileSync72(indexPath, "utf-8");
+    const wrapperContent = readFileSync71(wrapperPath, "utf-8");
+    const indexContent = readFileSync71(indexPath, "utf-8");
     const index2 = JSON.parse(indexContent);
     const match = wrapperContent.match(/_get_all_commands\(\)\s*\{[^}]*echo\s+"([^"]+)"/);
     const wrapperCmds = new Set(match ? match[1].split(/\s+/).filter(Boolean) : []);
@@ -71173,7 +71163,7 @@ function detectDrift(mode = "full", projectRoot = ".") {
     const readmePath = join102(projectRoot, "README.md");
     if (existsSync101(readmePath)) {
       try {
-        const readme = readFileSync72(readmePath, "utf-8");
+        const readme = readFileSync71(readmePath, "utf-8");
         const readmeCmds = new Set(
           (readme.match(/cleo [a-z-]+/g) ?? []).map((m2) => m2.replace("cleo ", ""))
         );
@@ -71223,7 +71213,7 @@ var init_docs_sync = __esm({
 
 // packages/core/src/validation/doctor/project-cache.ts
 import { createHash as createHash11 } from "node:crypto";
-import { existsSync as existsSync102, mkdirSync as mkdirSync23, readFileSync as readFileSync73, unlinkSync as unlinkSync8, writeFileSync as writeFileSync18 } from "node:fs";
+import { existsSync as existsSync102, mkdirSync as mkdirSync23, readFileSync as readFileSync72, unlinkSync as unlinkSync8, writeFileSync as writeFileSync17 } from "node:fs";
 import { dirname as dirname19, join as join103 } from "node:path";
 function getCacheFilePath(cleoHome) {
   const home = cleoHome ?? getCleoHome();
@@ -71239,13 +71229,13 @@ function initCacheFile(cacheFile) {
   if (!existsSync102(dir)) {
     mkdirSync23(dir, { recursive: true });
   }
-  writeFileSync18(cacheFile, JSON.stringify(cache, null, 2));
+  writeFileSync17(cacheFile, JSON.stringify(cache, null, 2));
   return cache;
 }
 function loadCache(cacheFile) {
   if (!existsSync102(cacheFile)) return null;
   try {
-    const content = readFileSync73(cacheFile, "utf-8");
+    const content = readFileSync72(cacheFile, "utf-8");
     return JSON.parse(content);
   } catch {
     return null;
@@ -71254,7 +71244,7 @@ function loadCache(cacheFile) {
 function getFileHash(filePath) {
   if (!existsSync102(filePath)) return "";
   try {
-    const content = readFileSync73(filePath);
+    const content = readFileSync72(filePath);
     return createHash11("sha256").update(content).digest("hex");
   } catch {
     return "";
@@ -71299,14 +71289,14 @@ function cacheValidationResult(projectHash, projectPath, validationStatus, issue
     ttl: CACHE_TTL_SECONDS
   };
   cache.lastUpdated = timestamp2;
-  writeFileSync18(cachePath, JSON.stringify(cache, null, 2));
+  writeFileSync17(cachePath, JSON.stringify(cache, null, 2));
 }
 function clearProjectCache(projectHash, cacheFile) {
   const cachePath = cacheFile ?? getCacheFilePath();
   const cache = loadCache(cachePath);
   if (!cache) return;
   delete cache.projects[projectHash];
-  writeFileSync18(cachePath, JSON.stringify(cache, null, 2));
+  writeFileSync17(cachePath, JSON.stringify(cache, null, 2));
 }
 function clearEntireCache(cacheFile) {
   const cachePath = cacheFile ?? getCacheFilePath();
@@ -72523,7 +72513,7 @@ var init_manifest = __esm({
 });
 
 // packages/core/src/validation/protocol-common.ts
-import { existsSync as existsSync104, readdirSync as readdirSync34, readFileSync as readFileSync74 } from "node:fs";
+import { existsSync as existsSync104, readdirSync as readdirSync34, readFileSync as readFileSync73 } from "node:fs";
 function checkOutputFileExists(taskId, expectedDir, pattern) {
   if (!existsSync104(expectedDir)) return false;
   const filePattern = pattern ?? `${taskId}`;
@@ -72537,7 +72527,7 @@ function checkOutputFileExists(taskId, expectedDir, pattern) {
 function checkDocumentationSections(filePath, sections) {
   if (!existsSync104(filePath)) return false;
   try {
-    const content = readFileSync74(filePath, "utf-8");
+    const content = readFileSync73(filePath, "utf-8");
     return sections.every((section) => {
       const regex = new RegExp(`^#+ .*${escapeRegex3(section)}`, "m");
       return regex.test(content);
@@ -72608,7 +72598,7 @@ function checkLinkedTasksPresent(entry, requiredIds) {
 function checkProvenanceTags(filePath, taskId) {
   if (!existsSync104(filePath)) return false;
   try {
-    const content = readFileSync74(filePath, "utf-8");
+    const content = readFileSync73(filePath, "utf-8");
     if (taskId) {
       return content.includes(`@task ${taskId}`);
     }
@@ -73619,7 +73609,7 @@ __export(init_exports, {
   resolveSeedAgentsDir: () => resolveSeedAgentsDir,
   updateDocs: () => updateDocs
 });
-import { existsSync as existsSync106, readdirSync as readdirSync36, readFileSync as readFileSync75 } from "node:fs";
+import { existsSync as existsSync106, readdirSync as readdirSync36, readFileSync as readFileSync74 } from "node:fs";
 import { copyFile as copyFile4, lstat, mkdir as mkdir16, readFile as readFile17, symlink, unlink as unlink4, writeFile as writeFile11 } from "node:fs/promises";
 import { platform as platform4 } from "node:os";
 import { basename as basename17, dirname as dirname21, join as join105 } from "node:path";
@@ -73753,7 +73743,7 @@ async function initCoreSkills(created, warnings) {
       warnings.push("Failed to register skill library with CAAMP");
     }
     const catalogPath = join105(ctSkillsRoot, "skills.json");
-    const catalog4 = JSON.parse(readFileSync75(catalogPath, "utf-8"));
+    const catalog4 = JSON.parse(readFileSync74(catalogPath, "utf-8"));
     const skills = catalog4.skills ?? [];
     const coreSkills = skills.filter((s3) => s3.tier <= 2);
     const installed = [];
@@ -73822,7 +73812,7 @@ async function installGitHubTemplates(projectRoot, created, skipped) {
         skipped.push(`.github/ISSUE_TEMPLATE/${file2}`);
         continue;
       }
-      const content = readFileSync75(join105(issueSrcDir, file2), "utf-8");
+      const content = readFileSync74(join105(issueSrcDir, file2), "utf-8");
       await writeFile11(dest, content, "utf-8");
       created.push(`.github/ISSUE_TEMPLATE/${file2}`);
     }
@@ -73833,7 +73823,7 @@ async function installGitHubTemplates(projectRoot, created, skipped) {
     if (existsSync106(prTemplateDest)) {
       skipped.push(".github/pull_request_template.md");
     } else {
-      const content = readFileSync75(prTemplateSrc, "utf-8");
+      const content = readFileSync74(prTemplateSrc, "utf-8");
       await writeFile11(prTemplateDest, content, "utf-8");
       created.push(".github/pull_request_template.md");
     }
@@ -74286,13 +74276,13 @@ var init_init = __esm({
 });
 
 // packages/core/src/sessions/context-alert.ts
-import { existsSync as existsSync107, readFileSync as readFileSync76, writeFileSync as writeFileSync19 } from "node:fs";
+import { existsSync as existsSync107, readFileSync as readFileSync75, writeFileSync as writeFileSync18 } from "node:fs";
 import { join as join106 } from "node:path";
 function getCurrentSessionId(cwd) {
   if (process.env.CLEO_SESSION) return process.env.CLEO_SESSION;
   const sessionFile = join106(getCleoDir(cwd), ".current-session");
   if (existsSync107(sessionFile)) {
-    return readFileSync76(sessionFile, "utf-8").trim() || null;
+    return readFileSync75(sessionFile, "utf-8").trim() || null;
   }
   return null;
 }
@@ -74388,7 +74378,7 @@ __export(project_info_exports, {
   getProjectInfoSync: () => getProjectInfoSync,
   updateProjectName: () => updateProjectName
 });
-import { existsSync as existsSync108, readFileSync as readFileSync77, writeFileSync as writeFileSync20 } from "node:fs";
+import { existsSync as existsSync108, readFileSync as readFileSync76, writeFileSync as writeFileSync19 } from "node:fs";
 import { readFile as readFile18 } from "node:fs/promises";
 import { join as join107 } from "node:path";
 async function getProjectInfo(cwd) {
@@ -74415,7 +74405,7 @@ function getProjectInfoSync(cwd) {
   const infoPath = join107(cleoDir, "project-info.json");
   if (!existsSync108(infoPath)) return null;
   try {
-    const raw = readFileSync77(infoPath, "utf-8");
+    const raw = readFileSync76(infoPath, "utf-8");
     const data = JSON.parse(raw);
     if (typeof data.projectHash !== "string" || data.projectHash.length === 0) {
       return null;
@@ -74436,10 +74426,10 @@ function updateProjectName(cwd, name2) {
   const cleoDir = getCleoDirAbsolute(cwd);
   const infoPath = join107(cleoDir, "project-info.json");
   if (!existsSync108(infoPath)) return;
-  const data = JSON.parse(readFileSync77(infoPath, "utf-8"));
+  const data = JSON.parse(readFileSync76(infoPath, "utf-8"));
   data.projectName = name2;
   data.lastUpdated = (/* @__PURE__ */ new Date()).toISOString();
-  writeFileSync20(infoPath, `${JSON.stringify(data, null, 2)}
+  writeFileSync19(infoPath, `${JSON.stringify(data, null, 2)}
 `);
 }
 var init_project_info = __esm({
@@ -74450,7 +74440,7 @@ var init_project_info = __esm({
 });
 
 // packages/core/src/bootstrap.ts
-import { existsSync as existsSync109, readFileSync as readFileSync78 } from "node:fs";
+import { existsSync as existsSync109, readFileSync as readFileSync77 } from "node:fs";
 import { mkdir as mkdir17, readFile as readFile19, writeFile as writeFile12 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
 import { join as join108 } from "node:path";
@@ -74489,7 +74479,7 @@ async function ensureGlobalTemplatesBootstrap(ctx, packageRootOverride) {
     const pkgRoot = packageRootOverride ?? getPackageRoot();
     const templatePath = join108(pkgRoot, "templates", "CLEO-INJECTION.md");
     if (existsSync109(templatePath)) {
-      templateContent = readFileSync78(templatePath, "utf-8");
+      templateContent = readFileSync77(templatePath, "utf-8");
     }
   } catch {
   }
@@ -75190,6 +75180,7 @@ var init_cleo = __esm({
 // packages/core/src/index.ts
 var init_src2 = __esm({
   "packages/core/src/index.ts"() {
+    "use strict";
     init_src();
     init_adapters();
     init_admin();
@@ -79174,7 +79165,7 @@ var init_engine_compat = __esm({
 
 // packages/core/src/memory/pipeline-manifest-sqlite.ts
 import { createHash as createHash12 } from "node:crypto";
-import { existsSync as existsSync111, readFileSync as readFileSync79, renameSync as renameSync8 } from "node:fs";
+import { existsSync as existsSync111, readFileSync as readFileSync78, renameSync as renameSync8 } from "node:fs";
 import { join as join109 } from "node:path";
 import { and as and10, count as count2, desc as desc5, eq as eq13, gte as gte3, isNull as isNull3, like as like3, lte as lte2, or as or5 } from "drizzle-orm";
 async function getDb3(cwd) {
@@ -79307,7 +79298,7 @@ async function pipelineManifestShow(researchId, projectRoot) {
     try {
       const filePath = join109(root, entry.file);
       if (existsSync111(filePath)) {
-        fileContent = readFileSync79(filePath, "utf-8");
+        fileContent = readFileSync78(filePath, "utf-8");
       }
     } catch {
     }
@@ -79696,7 +79687,7 @@ var init_model_provider_registry = __esm({
 
 // packages/core/src/metrics/token-service.ts
 import { createHash as createHash13, randomUUID as randomUUID9 } from "node:crypto";
-import { existsSync as existsSync112, readdirSync as readdirSync37, readFileSync as readFileSync80 } from "node:fs";
+import { existsSync as existsSync112, readdirSync as readdirSync37, readFileSync as readFileSync79 } from "node:fs";
 import { join as join110 } from "node:path";
 function normalizeProvider(provider, model, runtimeProvider) {
   const value = (provider ?? "").trim().toLowerCase();
@@ -79784,7 +79775,7 @@ function readOtelJsonl(dir) {
   for (const file2 of readdirSync37(dir)) {
     if (!file2.endsWith(".json") && !file2.endsWith(".jsonl")) continue;
     const filePath = join110(dir, file2);
-    const raw = readFileSync80(filePath, "utf-8").trim();
+    const raw = readFileSync79(filePath, "utf-8").trim();
     if (!raw) continue;
     for (const line2 of raw.split("\n")) {
       try {
@@ -80173,7 +80164,7 @@ var init_parallel = __esm({
 });
 
 // packages/core/src/orchestration/skill-ops.ts
-import { existsSync as existsSync113, readdirSync as readdirSync38, readFileSync as readFileSync81 } from "node:fs";
+import { existsSync as existsSync113, readdirSync as readdirSync38, readFileSync as readFileSync80 } from "node:fs";
 import { join as join111 } from "node:path";
 import { getCanonicalSkillsDir as getCanonicalSkillsDir3 } from "@cleocode/caamp";
 function getSkillContent(skillName, projectRoot) {
@@ -80193,7 +80184,7 @@ function getSkillContent(skillName, projectRoot) {
   if (!existsSync113(skillFilePath)) {
     throw new CleoError(4 /* NOT_FOUND */, `Skill file not found: ${skillFilePath}`);
   }
-  const content = readFileSync81(skillFilePath, "utf-8");
+  const content = readFileSync80(skillFilePath, "utf-8");
   const refsDir = join111(skillDir, "references");
   let references = [];
   if (existsSync113(refsDir)) {
@@ -80388,7 +80379,7 @@ var init_validate_spawn = __esm({
 });
 
 // packages/core/src/sessions/context-inject.ts
-import { existsSync as existsSync114, readFileSync as readFileSync82 } from "node:fs";
+import { existsSync as existsSync114, readFileSync as readFileSync81 } from "node:fs";
 import { resolve as resolve11 } from "node:path";
 function resolveRoot2(projectRoot) {
   return projectRoot || getProjectRoot();
@@ -80408,7 +80399,7 @@ function injectContext(protocolType, params, projectRoot) {
   for (const loc of protocolLocations) {
     if (existsSync114(loc)) {
       try {
-        protocolContent = readFileSync82(loc, "utf-8");
+        protocolContent = readFileSync81(loc, "utf-8");
         protocolPath = loc.replace(root + "/", "");
         break;
       } catch {
@@ -86108,7 +86099,7 @@ __export(migration_sqlite_exports, {
   migrateJsonToSqlite: () => migrateJsonToSqlite2,
   migrateJsonToSqliteAtomic: () => migrateJsonToSqliteAtomic
 });
-import { existsSync as existsSync117, mkdirSync as mkdirSync25, readFileSync as readFileSync83 } from "node:fs";
+import { existsSync as existsSync117, mkdirSync as mkdirSync25, readFileSync as readFileSync82 } from "node:fs";
 import { dirname as dirname22, join as join114 } from "node:path";
 function topoSortTasks(tasks2) {
   const taskMap = new Map(tasks2.map((t) => [t.id, t]));
@@ -86147,7 +86138,7 @@ function countJsonRecords(cleoDir) {
   const todoPath = join114(cleoDir, "todo.json");
   if (existsSync117(todoPath)) {
     try {
-      const data = JSON.parse(readFileSync83(todoPath, "utf-8"));
+      const data = JSON.parse(readFileSync82(todoPath, "utf-8"));
       tasks2 = (data.tasks ?? []).length;
     } catch {
     }
@@ -86155,7 +86146,7 @@ function countJsonRecords(cleoDir) {
   const archivePath = join114(cleoDir, "todo-archive.json");
   if (existsSync117(archivePath)) {
     try {
-      const data = JSON.parse(readFileSync83(archivePath, "utf-8"));
+      const data = JSON.parse(readFileSync82(archivePath, "utf-8"));
       archived = (data.tasks ?? data.archivedTasks ?? []).length;
     } catch {
     }
@@ -86163,7 +86154,7 @@ function countJsonRecords(cleoDir) {
   const sessionsPath = join114(cleoDir, "sessions.json");
   if (existsSync117(sessionsPath)) {
     try {
-      const data = JSON.parse(readFileSync83(sessionsPath, "utf-8"));
+      const data = JSON.parse(readFileSync82(sessionsPath, "utf-8"));
       sessions2 = (data.sessions ?? []).length;
     } catch {
     }
@@ -86236,7 +86227,7 @@ async function runMigrationDataImport(db, cleoDir, result, logger) {
       logger?.info("import", "read-todo", "Reading todo.json", {
         path: todoPath.replace(cleoDir, ".")
       });
-      const todoData = JSON.parse(readFileSync83(todoPath, "utf-8"));
+      const todoData = JSON.parse(readFileSync82(todoPath, "utf-8"));
       const tasks2 = topoSortTasks(todoData.tasks ?? []);
       const totalTasks = tasks2.length;
       logger?.info("import", "tasks-start", `Starting import of ${totalTasks} tasks`, {
@@ -86316,7 +86307,7 @@ async function runMigrationDataImport(db, cleoDir, result, logger) {
       logger?.info("import", "read-archive", "Reading todo-archive.json", {
         path: archivePath.replace(cleoDir, ".")
       });
-      const archiveData = JSON.parse(readFileSync83(archivePath, "utf-8"));
+      const archiveData = JSON.parse(readFileSync82(archivePath, "utf-8"));
       const archivedTasks = topoSortTasks(archiveData.tasks ?? archiveData.archivedTasks ?? []);
       const totalArchived = archivedTasks.length;
       logger?.info(
@@ -86385,7 +86376,7 @@ async function runMigrationDataImport(db, cleoDir, result, logger) {
       logger?.info("import", "read-sessions", "Reading sessions.json", {
         path: sessionsPath.replace(cleoDir, ".")
       });
-      const sessionsData = JSON.parse(readFileSync83(sessionsPath, "utf-8"));
+      const sessionsData = JSON.parse(readFileSync82(sessionsPath, "utf-8"));
       const sessions2 = sessionsData.sessions ?? [];
       const totalSessions = sessions2.length;
       logger?.info("import", "sessions-start", `Starting import of ${totalSessions} sessions`, {
@@ -86515,7 +86506,7 @@ async function migrateJsonToSqlite2(cwd, options) {
   const todoPath = join114(cleoDir, "todo.json");
   if (existsSync117(todoPath)) {
     try {
-      const todoData = JSON.parse(readFileSync83(todoPath, "utf-8"));
+      const todoData = JSON.parse(readFileSync82(todoPath, "utf-8"));
       const tasks2 = topoSortTasks(todoData.tasks ?? []);
       for (const task of tasks2) {
         try {
@@ -86567,7 +86558,7 @@ async function migrateJsonToSqlite2(cwd, options) {
   const archivePath = join114(cleoDir, "todo-archive.json");
   if (existsSync117(archivePath)) {
     try {
-      const archiveData = JSON.parse(readFileSync83(archivePath, "utf-8"));
+      const archiveData = JSON.parse(readFileSync82(archivePath, "utf-8"));
       const archivedTasks = topoSortTasks(archiveData.tasks ?? archiveData.archivedTasks ?? []);
       for (const task of archivedTasks) {
         try {
@@ -86605,7 +86596,7 @@ async function migrateJsonToSqlite2(cwd, options) {
   const sessionsPath = join114(cleoDir, "sessions.json");
   if (existsSync117(sessionsPath)) {
     try {
-      const sessionsData = JSON.parse(readFileSync83(sessionsPath, "utf-8"));
+      const sessionsData = JSON.parse(readFileSync82(sessionsPath, "utf-8"));
       const sessions2 = sessionsData.sessions ?? [];
       for (const session of sessions2) {
         try {
@@ -86786,8 +86777,8 @@ import {
   existsSync as existsSync118,
   mkdirSync as mkdirSync26,
   readdirSync as readdirSync39,
-  readFileSync as readFileSync84,
-  writeFileSync as writeFileSync21
+  readFileSync as readFileSync83,
+  writeFileSync as writeFileSync20
 } from "node:fs";
 import { join as join115 } from "node:path";
 async function runUpgrade(options = {}) {
@@ -86877,8 +86868,8 @@ async function runUpgrade(options = {}) {
           }
           copyFileSync9(dbPath2, dbBackupPath);
           const { createHash: createHash14 } = await import("node:crypto");
-          const origChecksum = createHash14("sha256").update(readFileSync84(dbPath2)).digest("hex");
-          const backupChecksum = createHash14("sha256").update(readFileSync84(dbBackupPath)).digest("hex");
+          const origChecksum = createHash14("sha256").update(readFileSync83(dbPath2)).digest("hex");
+          const backupChecksum = createHash14("sha256").update(readFileSync83(dbBackupPath)).digest("hex");
           if (origChecksum !== backupChecksum) {
             throw new Error(
               `Backup verification failed: checksum mismatch. Aborting migration to prevent data loss.`
@@ -86902,7 +86893,7 @@ async function runUpgrade(options = {}) {
         const configPath = join115(cleoDir2, "config.json");
         let configBackup = null;
         if (existsSync118(configPath)) {
-          configBackup = readFileSync84(configPath, "utf-8");
+          configBackup = readFileSync83(configPath, "utf-8");
         }
         const { resetDbState: resetDbState2 } = await Promise.resolve().then(() => (init_sqlite2(), sqlite_exports));
         resetDbState2();
@@ -86933,7 +86924,7 @@ async function runUpgrade(options = {}) {
           if (totalImported === 0 && existsSync118(dbBackupPath)) {
             copyFileSync9(dbBackupPath, dbPath2);
             if (configBackup) {
-              writeFileSync21(configPath, configBackup);
+              writeFileSync20(configPath, configBackup);
             }
             actions.push({
               action: "storage_migration",
@@ -86946,7 +86937,7 @@ async function runUpgrade(options = {}) {
             let config2 = {};
             if (existsSync118(configPath)) {
               try {
-                config2 = JSON.parse(readFileSync84(configPath, "utf-8"));
+                config2 = JSON.parse(readFileSync83(configPath, "utf-8"));
               } catch {
               }
             }
@@ -86954,7 +86945,7 @@ async function runUpgrade(options = {}) {
               config2.storage = {};
             }
             config2.storage.engine = "sqlite";
-            writeFileSync21(configPath, JSON.stringify(config2, null, 2));
+            writeFileSync20(configPath, JSON.stringify(config2, null, 2));
             actions.push({
               action: "storage_migration",
               status: "applied",
@@ -86976,7 +86967,7 @@ async function runUpgrade(options = {}) {
             copyFileSync9(dbBackupPath, dbPath2);
           }
           if (configBackup) {
-            writeFileSync21(configPath, configBackup);
+            writeFileSync20(configPath, configBackup);
           }
           await updateMigrationPhase2(cleoDir2, "failed");
           for (const error48 of result.errors) {
@@ -87204,7 +87195,7 @@ async function runUpgrade(options = {}) {
         });
       } else {
         try {
-          const context = JSON.parse(readFileSync84(contextPath, "utf-8"));
+          const context = JSON.parse(readFileSync83(contextPath, "utf-8"));
           if (context.detectedAt) {
             const daysSince = (Date.now() - new Date(context.detectedAt).getTime()) / (1e3 * 60 * 60 * 24);
             if (daysSince > 30) {
@@ -88887,10 +88878,10 @@ var init_param_utils = __esm({
 });
 
 // packages/core/src/validation/protocols/_shared.ts
-import { existsSync as existsSync119, readFileSync as readFileSync85 } from "node:fs";
+import { existsSync as existsSync119, readFileSync as readFileSync84 } from "node:fs";
 function findManifestEntry2(taskId, manifestPath) {
   if (!existsSync119(manifestPath)) return null;
-  const content = readFileSync85(manifestPath, "utf-8").trim();
+  const content = readFileSync84(manifestPath, "utf-8").trim();
   if (content.length === 0) return null;
   const lines = content.split("\n");
   for (let i = lines.length - 1; i >= 0; i--) {
@@ -88917,7 +88908,7 @@ function loadManifestEntryFromFile(manifestFile) {
       details: { field: "manifestFile", actual: manifestFile }
     });
   }
-  return JSON.parse(readFileSync85(manifestFile, "utf-8"));
+  return JSON.parse(readFileSync84(manifestFile, "utf-8"));
 }
 function throwIfStrictFailed(result, opts, protocol, taskId) {
   if (!opts.strict || result.valid) return;
@@ -88987,10 +88978,10 @@ var init_artifact_publish = __esm({
 });
 
 // packages/core/src/validation/protocols/consensus.ts
-import { existsSync as existsSync120, readFileSync as readFileSync86 } from "node:fs";
+import { existsSync as existsSync120, readFileSync as readFileSync85 } from "node:fs";
 function loadVotingMatrix(votingMatrixFile) {
   if (!votingMatrixFile || !existsSync120(votingMatrixFile)) return { options: [] };
-  const raw = JSON.parse(readFileSync86(votingMatrixFile, "utf-8"));
+  const raw = JSON.parse(readFileSync85(votingMatrixFile, "utf-8"));
   const options = Array.isArray(raw.options) ? raw.options : Object.values(raw.options ?? {});
   return {
     options: options.filter(
@@ -89155,10 +89146,10 @@ var init_research4 = __esm({
 });
 
 // packages/core/src/validation/protocols/specification.ts
-import { existsSync as existsSync121, readFileSync as readFileSync87 } from "node:fs";
+import { existsSync as existsSync121, readFileSync as readFileSync86 } from "node:fs";
 async function validateSpecificationTask(taskId, opts) {
   const entry = loadManifestEntryByTaskId(taskId);
-  const specContent = opts.specFile && existsSync121(opts.specFile) ? readFileSync87(opts.specFile, "utf-8") : void 0;
+  const specContent = opts.specFile && existsSync121(opts.specFile) ? readFileSync86(opts.specFile, "utf-8") : void 0;
   const result = validateSpecificationProtocol(entry, specContent);
   throwIfStrictFailed(result, opts, "specification", taskId);
   return result;
@@ -89166,7 +89157,7 @@ async function validateSpecificationTask(taskId, opts) {
 async function checkSpecificationManifest(manifestFile, opts) {
   const entry = loadManifestEntryFromFile(manifestFile);
   const taskId = entry.linked_tasks?.[0] ?? "UNKNOWN";
-  const specContent = opts.specFile && existsSync121(opts.specFile) ? readFileSync87(opts.specFile, "utf-8") : void 0;
+  const specContent = opts.specFile && existsSync121(opts.specFile) ? readFileSync86(opts.specFile, "utf-8") : void 0;
   const result = validateSpecificationProtocol(entry, specContent);
   throwIfStrictFailed(result, opts, "specification", taskId);
   return result;
@@ -89226,7 +89217,7 @@ var init_validation3 = __esm({
 // packages/core/src/validation/schema-validator.ts
 import AjvModule from "ajv";
 import addFormatsModule from "ajv-formats";
-import { readFileSync as readFileSync88 } from "fs";
+import { readFileSync as readFileSync87 } from "fs";
 function createAjv() {
   const ajv = new Ajv3({
     allErrors: true,
@@ -89255,7 +89246,7 @@ function getValidator(schemaType) {
     return null;
   }
   try {
-    const schemaContent = readFileSync88(schemaPath, "utf-8");
+    const schemaContent = readFileSync87(schemaPath, "utf-8");
     const schema = JSON.parse(schemaContent);
     const ajv = getAjv2();
     const validate = ajv.compile(schema);
@@ -89309,11 +89300,11 @@ var init_schema_validator = __esm({
 
 // packages/core/src/validation/validate-ops.ts
 import { execFileSync as execFileSync12 } from "node:child_process";
-import { appendFileSync as appendFileSync10, existsSync as existsSync122, mkdirSync as mkdirSync27, readFileSync as readFileSync89 } from "node:fs";
+import { appendFileSync as appendFileSync10, existsSync as existsSync122, mkdirSync as mkdirSync27, readFileSync as readFileSync88 } from "node:fs";
 import { dirname as dirname23, join as join116, resolve as resolve12 } from "node:path";
 function readJsonFile2(filePath) {
   try {
-    const raw = readFileSync89(filePath, "utf-8");
+    const raw = readFileSync88(filePath, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -89478,7 +89469,7 @@ function coreValidateManifest(projectRoot) {
       message: "No manifest file found"
     };
   }
-  const content = readFileSync89(manifestPath, "utf-8");
+  const content = readFileSync88(manifestPath, "utf-8");
   const lines = content.split("\n").filter((l) => l.trim());
   let validCount = 0;
   let invalidCount = 0;
@@ -89522,7 +89513,7 @@ function coreValidateOutput(filePath, taskId, projectRoot) {
   if (!existsSync122(fullPath)) {
     throw new Error(`Output file not found: ${filePath}`);
   }
-  const content = readFileSync89(fullPath, "utf-8");
+  const content = readFileSync88(fullPath, "utf-8");
   const issues = [];
   if (!content.includes("# ")) {
     issues.push({
@@ -89558,7 +89549,7 @@ function parseComplianceEntries(projectRoot) {
   if (!existsSync122(compliancePath)) {
     return [];
   }
-  const content = readFileSync89(compliancePath, "utf-8");
+  const content = readFileSync88(compliancePath, "utf-8");
   const entries = [];
   for (const line2 of content.split("\n")) {
     const trimmed = line2.trim();
@@ -89905,7 +89896,7 @@ var init_validate_ops = __esm({
 });
 
 // packages/core/src/orchestration/bootstrap.ts
-import { existsSync as existsSync123, readFileSync as readFileSync90 } from "node:fs";
+import { existsSync as existsSync123, readFileSync as readFileSync89 } from "node:fs";
 import { join as join117 } from "node:path";
 async function buildBrainState(projectRoot, opts, accessor) {
   const speed = opts?.speed || "fast";
@@ -89974,7 +89965,7 @@ async function buildBrainState(projectRoot, opts, accessor) {
     try {
       const decisionLogPath = join117(projectRoot, ".cleo", "decision-log.jsonl");
       if (existsSync123(decisionLogPath)) {
-        const content = readFileSync90(decisionLogPath, "utf-8").trim();
+        const content = readFileSync89(decisionLogPath, "utf-8").trim();
         if (content) {
           const entries = content.split("\n").filter((l) => l.trim()).map((l) => {
             try {
@@ -89996,7 +89987,7 @@ async function buildBrainState(projectRoot, opts, accessor) {
     try {
       const contextStatePath = join117(projectRoot, ".cleo", ".context-state.json");
       if (existsSync123(contextStatePath)) {
-        const state = JSON.parse(readFileSync90(contextStatePath, "utf-8"));
+        const state = JSON.parse(readFileSync89(contextStatePath, "utf-8"));
         const percentage = state.contextWindow?.percentage ?? 0;
         const factors = [];
         if (percentage > 80) factors.push("high_context_usage");
@@ -97342,13 +97333,13 @@ var init_backup_unpack = __esm({
 
 // packages/core/src/store/regenerators.ts
 import { randomUUID as randomUUID10 } from "node:crypto";
-import { existsSync as existsSync124, readFileSync as readFileSync91 } from "node:fs";
+import { existsSync as existsSync124, readFileSync as readFileSync90 } from "node:fs";
 import { join as join118, resolve as resolve13 } from "node:path";
 function isContributorProject(projectRoot) {
   const at2 = (p2) => existsSync124(join118(projectRoot, p2));
   if (!at2("src/dispatch") || !at2("src/core")) return false;
   try {
-    const pkg = JSON.parse(readFileSync91(join118(projectRoot, "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync90(join118(projectRoot, "package.json"), "utf-8"));
     return pkg.name === "@cleocode/cleo";
   } catch {
     return false;
@@ -98354,7 +98345,7 @@ var init_api_key_kdf = __esm({
 
 // packages/core/src/store/agent-registry-accessor.ts
 import { randomBytes as randomBytes16 } from "node:crypto";
-import { existsSync as existsSync125, mkdirSync as mkdirSync28, readFileSync as readFileSync92, statSync as statSync21, writeFileSync as writeFileSync22 } from "node:fs";
+import { existsSync as existsSync125, mkdirSync as mkdirSync28, readFileSync as readFileSync91, statSync as statSync21, writeFileSync as writeFileSync21 } from "node:fs";
 import { createRequire as createRequire12 } from "node:module";
 import { join as join120 } from "node:path";
 function readMachineKey() {
@@ -98365,7 +98356,7 @@ function readMachineKey() {
       mkdirSync28(cleoHome, { recursive: true });
     }
     const key2 = randomBytes16(MACHINE_KEY_LENGTH);
-    writeFileSync22(keyPath, key2, { mode: 384 });
+    writeFileSync21(keyPath, key2, { mode: 384 });
     return key2;
   }
   if (process.platform !== "win32") {
@@ -98377,7 +98368,7 @@ function readMachineKey() {
       );
     }
   }
-  const key = readFileSync92(keyPath);
+  const key = readFileSync91(keyPath);
   if (key.length !== MACHINE_KEY_LENGTH) {
     throw new Error(
       `Machine key at ${keyPath} has wrong length: expected ${MACHINE_KEY_LENGTH} bytes, got ${key.length}.`
@@ -102133,6 +102124,30 @@ var init_registry5 = __esm({
         sessionRequired: false,
         requiredParams: []
       },
+      {
+        gateway: "query",
+        domain: "admin",
+        operation: "roadmap",
+        description: "admin.roadmap (query) \u2014 project roadmap from task provenance, epics grouped by status with progress",
+        tier: 1,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: [],
+        params: [
+          {
+            name: "includeHistory",
+            type: "boolean",
+            required: false,
+            description: "Include release history from CHANGELOG.md"
+          },
+          {
+            name: "upcomingOnly",
+            type: "boolean",
+            required: false,
+            description: "Only show pending/upcoming epics (exclude completed)"
+          }
+        ]
+      },
       {
         gateway: "query",
         domain: "admin",
@@ -102595,13 +102610,19 @@ var init_registry5 = __esm({
         tier: 0,
         idempotent: false,
         sessionRequired: true,
-        requiredParams: ["id"],
+        requiredParams: ["taskId", "agentId"],
         params: [
           {
-            name: "id",
+            name: "taskId",
             type: "string",
             required: true,
             description: "Task ID to claim"
+          },
+          {
+            name: "agentId",
+            type: "string",
+            required: true,
+            description: "Agent ID to assign the task to"
           }
         ]
       },
@@ -102613,10 +102634,10 @@ var init_registry5 = __esm({
         tier: 0,
         idempotent: false,
         sessionRequired: true,
-        requiredParams: ["id"],
+        requiredParams: ["taskId"],
         params: [
           {
-            name: "id",
+            name: "taskId",
             type: "string",
             required: true,
             description: "Task ID to unclaim"
@@ -106236,7 +106257,7 @@ var init_pipeline_engine = __esm({
 
 // packages/cleo/src/dispatch/engines/release-engine.ts
 import { execFileSync as execFileSync14 } from "node:child_process";
-import { readFileSync as readFileSync93 } from "node:fs";
+import { readFileSync as readFileSync92 } from "node:fs";
 async function loadTasks2(projectRoot) {
   const root = projectRoot ?? resolveProjectRoot();
   try {
@@ -106487,7 +106508,7 @@ async function releaseShip(params, projectRoot) {
     const changelogPath = `${cwd}/CHANGELOG.md`;
     const cleanVersion = version2.replace(/^v/, "");
     try {
-      const changelogContent = readFileSync93(changelogPath, "utf8");
+      const changelogContent = readFileSync92(changelogPath, "utf8");
       if (!changelogContent.includes(`## [${cleanVersion}]`)) {
         logStep(
           4,
@@ -106741,7 +106762,7 @@ __export(system_engine_exports, {
   systemSync: () => systemSync,
   systemUncancel: () => systemUncancel
 });
-import { existsSync as existsSync126, readdirSync as readdirSync40, readFileSync as readFileSync94 } from "node:fs";
+import { existsSync as existsSync126, readdirSync as readdirSync40, readFileSync as readFileSync93 } from "node:fs";
 import { basename as basename18, join as join121 } from "node:path";
 async function systemDash(projectRoot, params) {
   try {
@@ -106980,7 +107001,7 @@ function systemContext(projectRoot, params) {
     } else {
       const currentSessionPath = join121(cleoDir, ".current-session");
       if (existsSync126(currentSessionPath)) {
-        const currentSession2 = readFileSync94(currentSessionPath, "utf-8").trim();
+        const currentSession2 = readFileSync93(currentSessionPath, "utf-8").trim();
         if (currentSession2) {
           const sessionFile = join121(
             cleoDir,
@@ -107001,7 +107022,7 @@ function systemContext(projectRoot, params) {
       for (const file2 of readdirSync40(statesDir)) {
         if (file2.startsWith("context-state-") && file2.endsWith(".json")) {
           try {
-            const state = JSON.parse(readFileSync94(join121(statesDir, file2), "utf-8"));
+            const state = JSON.parse(readFileSync93(join121(statesDir, file2), "utf-8"));
             sessions2.push({
               file: basename18(file2),
               sessionId: state.sessionId ?? null,
@@ -107017,7 +107038,7 @@ function systemContext(projectRoot, params) {
     const singletonFile = join121(cleoDir, ".context-state.json");
     if (existsSync126(singletonFile)) {
       try {
-        const state = JSON.parse(readFileSync94(singletonFile, "utf-8"));
+        const state = JSON.parse(readFileSync93(singletonFile, "utf-8"));
         sessions2.push({
           file: ".context-state.json",
           sessionId: state.sessionId ?? "global",
@@ -107044,7 +107065,7 @@ function systemContext(projectRoot, params) {
       };
     }
     try {
-      const state = JSON.parse(readFileSync94(stateFile, "utf-8"));
+      const state = JSON.parse(readFileSync93(stateFile, "utf-8"));
       const timestamp2 = state.timestamp;
       const staleMs = state.staleAfterMs ?? 5e3;
       const percentage = state.contextWindow?.percentage ?? 0;
@@ -107199,7 +107220,7 @@ function systemCompliance(projectRoot, params) {
       const compliancePath2 = join121(projectRoot, ".cleo", "metrics", "COMPLIANCE.jsonl");
       let entries2 = [];
       if (existsSync126(compliancePath2)) {
-        const content = readFileSync94(compliancePath2, "utf-8").trim();
+        const content = readFileSync93(compliancePath2, "utf-8").trim();
         if (content) {
           entries2 = content.split("\n").filter((l) => l.trim()).map((l) => JSON.parse(l));
         }
@@ -107266,7 +107287,7 @@ function systemCompliance(projectRoot, params) {
     const compliancePath = join121(projectRoot, ".cleo", "metrics", "COMPLIANCE.jsonl");
     let entries = [];
     if (existsSync126(compliancePath)) {
-      const content = readFileSync94(compliancePath, "utf-8").trim();
+      const content = readFileSync93(compliancePath, "utf-8").trim();
       if (content) {
         entries = content.split("\n").filter((l) => l.trim()).map((l) => JSON.parse(l));
       }
@@ -107412,9 +107433,9 @@ function systemSync(_projectRoot, params) {
     }
   };
 }
-function systemSafestop(projectRoot, params) {
+async function systemSafestop(projectRoot, params) {
   try {
-    const result = safestop(projectRoot, params);
+    const result = await safestop(projectRoot, params);
     return { success: true, data: result };
   } catch (err) {
     return cleoErrorToEngineError(err, "E_GENERAL", "Sync failed");
@@ -108007,13 +108028,16 @@ async function taskDelete(projectRoot, taskId, force) {
     return cleoErrorToEngineError(err, "E_NOT_INITIALIZED", "Task database not initialized");
   }
 }
-async function taskArchive(projectRoot, taskId, before) {
+async function taskArchive(projectRoot, taskId, before, opts) {
   try {
     const accessor = await getAccessor(projectRoot);
+    const taskIds = opts?.taskIds ?? (taskId ? [taskId] : void 0);
     const result = await archiveTasks(
       {
-        taskIds: taskId ? [taskId] : void 0,
-        before
+        taskIds,
+        before,
+        includeCancelled: opts?.includeCancelled,
+        dryRun: opts?.dryRun
       },
       projectRoot,
       accessor
@@ -109397,6 +109421,13 @@ var init_admin2 = __esm({
               });
               return wrapResult(result, "query", "admin", operation, startTime);
             }
+            case "roadmap": {
+              const result = await systemRoadmap(projectRoot, {
+                includeHistory: params?.includeHistory,
+                upcomingOnly: params?.upcomingOnly
+              });
+              return wrapResult(result, "query", "admin", operation, startTime);
+            }
             case "smoke": {
               const result = await systemSmoke();
               return wrapResult(result, "query", "admin", operation, startTime);
@@ -109592,7 +109623,7 @@ var init_admin2 = __esm({
               );
             }
             case "safestop": {
-              const result = systemSafestop(
+              const result = await systemSafestop(
                 projectRoot,
                 params
               );
@@ -109897,6 +109928,7 @@ var init_admin2 = __esm({
             "backup",
             "export",
             "map",
+            "roadmap",
             "smoke",
             "hooks.matrix"
           ],
@@ -114237,7 +114269,12 @@ var init_tasks4 = __esm({
               const result = await taskArchive(
                 projectRoot,
                 params?.taskId,
-                params?.before
+                params?.before,
+                {
+                  taskIds: params?.taskIds,
+                  includeCancelled: params?.includeCancelled,
+                  dryRun: params?.dryRun
+                }
               );
               return wrapResult(result, "mutate", "tasks", operation, startTime);
             }
@@ -115624,7 +115661,7 @@ var init_defaults = __esm({
 });
 
 // packages/cleo/src/dispatch/lib/config-loader.ts
-import { existsSync as existsSync127, readFileSync as readFileSync95 } from "fs";
+import { existsSync as existsSync127, readFileSync as readFileSync94 } from "fs";
 import { join as join123 } from "path";
 function loadFromEnv(key) {
   const envKey = `${ENV_PREFIX}${key.toUpperCase()}`;
@@ -115651,7 +115688,7 @@ function loadFromFile(projectRoot) {
     return {};
   }
   try {
-    const content = readFileSync95(configPath, "utf-8");
+    const content = readFileSync94(configPath, "utf-8");
     const config2 = JSON.parse(content);
     const result = {};
     if (config2.lifecycleEnforcement) {
@@ -117432,7 +117469,7 @@ function registerAddCommand(program) {
 // packages/cleo/src/cli/commands/add-batch.ts
 init_cli();
 init_renderers();
-import { readFileSync as readFileSync96 } from "node:fs";
+import { readFileSync as readFileSync95 } from "node:fs";
 function registerAddBatchCommand(program) {
   program.command("add-batch").description("Create multiple tasks atomically from a JSON file").option("--file <path>", "Path to JSON file (array of task objects). Use - for stdin.").option("--parent <parentId>", "Default parent for all tasks (overridden by per-task parent)").option("--dry-run", "Preview what would be created without making changes").action(async (opts) => {
     const filePath = opts["file"];
@@ -117446,7 +117483,7 @@ function registerAddBatchCommand(program) {
       }
       raw = Buffer.concat(chunks).toString("utf-8");
     } else {
-      raw = readFileSync96(filePath, "utf-8");
+      raw = readFileSync95(filePath, "utf-8");
     }
     let tasks2;
     try {
@@ -117619,6 +117656,13 @@ function registerAdminCommand(program) {
   admin.command("context-inject <protocolType>").description(
     "Inject protocol content into session context (e.g. cleo-base, ct-orchestrator, ct-cleo)"
   ).option("--task <id>", "Scope injection to a specific task ID").option("--variant <variant>", "Select a named protocol variant").action(async (protocolType, opts) => {
+    if (!protocolType || typeof protocolType !== "string" || protocolType.trim() === "") {
+      console.error("Error: missing required argument <protocolType>");
+      console.error(
+        "Usage: cleo admin context-inject <protocolType> [--task <id>] [--variant <variant>]"
+      );
+      process.exit(1);
+    }
     await dispatchFromCli(
       "mutate",
       "admin",
@@ -117728,7 +117772,7 @@ function registerAgentCommand(program) {
         transportConfig: {},
         isActive: true
       });
-      const { existsSync: existsSync131, mkdirSync: mkdirSync31, writeFileSync: writeFileSync25 } = await import("node:fs");
+      const { existsSync: existsSync131, mkdirSync: mkdirSync31, writeFileSync: writeFileSync24 } = await import("node:fs");
       const { join: join131 } = await import("node:path");
       const cantDir = join131(".cleo", "agents");
       const cantPath = join131(cantDir, `${agentId}.cant`);
@@ -117784,7 +117828,7 @@ agent ${agentId}:
   enforcement:
     1: TODO \u2014 what does this agent push back on?
 `;
-        writeFileSync25(cantPath, cantContent, "utf-8");
+        writeFileSync24(cantPath, cantContent, "utf-8");
         cantScaffolded = true;
       }
       cliOutput(
@@ -119196,7 +119240,7 @@ Task ${taskId} reassigned to you by ${active.agentId}. Run: cleo show ${taskId}
   });
   agent.command("create").description("Scaffold a new agent package with persona.cant and manifest.json").requiredOption("--name <name>", "Agent name (kebab-case)").requiredOption("--role <role>", "Agent role: orchestrator, lead, worker, or docs-worker").option("--tier <tier>", "Agent tier: low, mid, or high (defaults based on role)").option("--team <teamName>", "Team this agent belongs to").option("--domain <description>", "Domain description for file permissions and context").option("--global", "Create in global tier (~/.local/share/cleo/cant/agents/)").option("--seed-brain", "Create expertise/mental-model-seed.md and seed a BRAIN observation").option("--parent <parentAgent>", "Parent agent name in the hierarchy").action(async (opts) => {
     try {
-      const { existsSync: existsSync131, mkdirSync: mkdirSync31, writeFileSync: writeFileSync25 } = await import("node:fs");
+      const { existsSync: existsSync131, mkdirSync: mkdirSync31, writeFileSync: writeFileSync24 } = await import("node:fs");
       const { join: join131 } = await import("node:path");
       const { homedir: homedir7 } = await import("node:os");
       const name2 = opts["name"];
@@ -119287,9 +119331,9 @@ Task ${taskId} reassigned to you by ${active.agentId}. Run: cleo show ${taskId}
         domain: domain2,
         parent
       });
-      writeFileSync25(join131(agentDir, "persona.cant"), personaContent, "utf-8");
+      writeFileSync24(join131(agentDir, "persona.cant"), personaContent, "utf-8");
       const manifest = generateManifest2({ name: name2, role, tier, domain: domain2 });
-      writeFileSync25(
+      writeFileSync24(
         join131(agentDir, "manifest.json"),
         `${JSON.stringify(manifest, null, 2)}
 `,
@@ -119301,14 +119345,14 @@ Task ${taskId} reassigned to you by ${active.agentId}. Run: cleo show ${taskId}
       ];
       if (team) {
         const teamConfigContent = generateTeamConfig(name2, role, team);
-        writeFileSync25(join131(agentDir, "team-config.cant"), teamConfigContent, "utf-8");
+        writeFileSync24(join131(agentDir, "team-config.cant"), teamConfigContent, "utf-8");
         createdFiles.push(join131(agentDir, "team-config.cant"));
       }
       if (seedBrain) {
         const expertiseDir = join131(agentDir, "expertise");
         mkdirSync31(expertiseDir, { recursive: true });
         const seedContent = generateMentalModelSeed(name2, role, domain2);
-        writeFileSync25(join131(expertiseDir, "mental-model-seed.md"), seedContent, "utf-8");
+        writeFileSync24(join131(expertiseDir, "mental-model-seed.md"), seedContent, "utf-8");
         createdFiles.push(join131(expertiseDir, "mental-model-seed.md"));
         try {
           const { execFile: execFile9 } = await import("node:child_process");
@@ -119821,6 +119865,12 @@ function registerBackfillCommand(program) {
       const dryRun = !!opts.dryRun;
       const rollback = !!opts.rollback;
       const taskIds = opts.tasks?.trim() ? opts.tasks.split(",").map((s3) => s3.trim()).filter(Boolean) : void 0;
+      if (!dryRun && !rollback && !process.env["CLEO_NONINTERACTIVE"]) {
+        console.log(
+          "\u26A0 Backfill will modify tasks in-place. Run with --dry-run first to preview changes."
+        );
+        console.log("  Set CLEO_NONINTERACTIVE=1 or pass --dry-run to suppress this warning.\n");
+      }
       if (dryRun) {
         console.log("[dry run] No changes will be made.\n");
       }
@@ -120671,7 +120721,7 @@ function registerCancelCommand(program) {
 
 // packages/cleo/src/cli/commands/cant.ts
 init_renderers();
-import { existsSync as existsSync128, mkdirSync as mkdirSync29, readFileSync as readFileSync97, writeFileSync as writeFileSync23 } from "node:fs";
+import { existsSync as existsSync128, mkdirSync as mkdirSync29, readFileSync as readFileSync96, writeFileSync as writeFileSync22 } from "node:fs";
 import { dirname as dirname25, isAbsolute as isAbsolute3, join as join124, resolve as resolve15 } from "node:path";
 function registerCantCommand(program) {
   const cant = program.command("cant").description("CANT DSL tooling");
@@ -120749,7 +120799,7 @@ function registerCantCommand(program) {
       }
       try {
         const mod = await loadMigrateEngine();
-        const content = readFileSync97(filePath, "utf-8");
+        const content = readFileSync96(filePath, "utf-8");
         const result = mod.migrateMarkdown(content, filePath, {
           write: isWrite,
           verbose: isVerbose,
@@ -120765,7 +120815,7 @@ function registerCantCommand(program) {
           for (const outputFile of result.outputFiles) {
             const outputPath = isAbsolute3(outputFile.path) ? outputFile.path : join124(projectRoot, outputFile.path);
             mkdirSync29(dirname25(outputPath), { recursive: true });
-            writeFileSync23(outputPath, outputFile.content, "utf-8");
+            writeFileSync22(outputPath, outputFile.content, "utf-8");
             written++;
             if (isVerbose) {
               console.log(`  Created: ${outputFile.path} (${outputFile.kind})`);
@@ -120840,6 +120890,47 @@ async function loadMigrateEngine() {
   throw new Error("Cannot load CANT migration engine. Ensure @cleocode/cant is installed.");
 }
 
+// packages/cleo/src/cli/commands/chain.ts
+init_cli();
+import { readFileSync as readFileSync97 } from "node:fs";
+function registerChainCommand(program) {
+  const chain = program.command("chain").description("WarpChain pipeline management (tier-2 orchestrator)");
+  chain.command("show <chainId>").description("Show details for a WarpChain definition").action(async (chainId) => {
+    await dispatchFromCli("query", "pipeline", "chain.show", { chainId }, { command: "chain" });
+  });
+  chain.command("list").description("List all WarpChain definitions").action(async () => {
+    await dispatchFromCli("query", "pipeline", "chain.list", {}, { command: "chain" });
+  });
+  chain.command("add <file>").description("Add a new WarpChain definition from a JSON file").action(async (file2) => {
+    const chainJson = JSON.parse(readFileSync97(file2, "utf-8"));
+    await dispatchFromCli(
+      "mutate",
+      "pipeline",
+      "chain.add",
+      { chain: chainJson },
+      { command: "chain" }
+    );
+  });
+  chain.command("instantiate <chainId> <epicId>").description("Instantiate a WarpChain for an epic").action(async (chainId, epicId) => {
+    await dispatchFromCli(
+      "mutate",
+      "pipeline",
+      "chain.instantiate",
+      { chainId, epicId },
+      { command: "chain" }
+    );
+  });
+  chain.command("advance <instanceId> <nextStage>").description("Advance a WarpChain instance to the next stage").action(async (instanceId, nextStage) => {
+    await dispatchFromCli(
+      "mutate",
+      "pipeline",
+      "chain.advance",
+      { instanceId, nextStage },
+      { command: "chain" }
+    );
+  });
+}
+
 // packages/cleo/src/cli/commands/check.ts
 init_cli();
 var SUPPORTED_PROTOCOL_TYPES = [
@@ -121051,7 +121142,7 @@ function registerCheckpointCommand(program) {
 // packages/cleo/src/cli/commands/claim.ts
 init_cli();
 function registerClaimCommand(program) {
-  program.command("claim <taskId>").description("Claim a task by assigning it to an agent").option("--agent <agentId>", "Agent ID to assign the task to (required)").action(async (taskId, opts) => {
+  program.command("claim <taskId>").description("Claim a task by assigning it to an agent").requiredOption("--agent <agentId>", "Agent ID to assign the task to").action(async (taskId, opts) => {
     await dispatchFromCli(
       "mutate",
       "tasks",
@@ -121571,7 +121662,7 @@ function registerDepsCommand(program) {
       {
         epicId
       },
-      { command: "deps", operation: "tasks.depends" }
+      { command: "deps", operation: "orchestrate.waves" }
     );
   });
   deps.command("critical-path <taskId>").description("Find longest dependency chain from task").action(async (taskId) => {
@@ -122396,27 +122487,6 @@ function registerDoctorCommand(program) {
   });
 }
 
-// packages/cleo/src/cli/commands/env.ts
-init_internal();
-init_renderers();
-async function getEnvStatus() {
-  return getRuntimeDiagnostics({ detailed: false });
-}
-async function getEnvInfo() {
-  return getRuntimeDiagnostics({ detailed: true });
-}
-function registerEnvCommand(program) {
-  const env = program.command("env").description("Environment and mode inspection");
-  env.command("status", { isDefault: true }).description("Show current environment mode and runtime info").action(async () => {
-    const result = await getEnvStatus();
-    cliOutput(result, { command: "env" });
-  });
-  env.command("info").description("Show detailed environment info including binary paths and compilation status").action(async () => {
-    const result = await getEnvInfo();
-    cliOutput(result, { command: "env" });
-  });
-}
-
 // packages/cleo/src/cli/commands/exists.ts
 init_src();
 init_internal();
@@ -122487,7 +122557,7 @@ function registerExportTasksCommand(program) {
   program.command("export-tasks [taskIds...]").description("Export tasks to portable .cleo-export.json package for cross-project transfer").option("-o, --output <file>", "Output file path (stdout if omitted)").option("--subtree", "Include all descendants of specified task(s)").option("--filter <filters...>", "Filter tasks by criteria (key=value, repeatable)").option("--include-deps", "Auto-include task dependencies").option("--dry-run", "Preview selection without creating export file").action(async (taskIds, opts) => {
     const hasOutput = !!opts["output"];
     const params = {
-      taskIds: taskIds.length > 0 ? taskIds : void 0,
+      taskIds: taskIds && taskIds.length > 0 ? taskIds : void 0,
       output: opts["output"],
       subtree: opts["subtree"],
       filter: opts["filter"],
@@ -122641,7 +122711,7 @@ init_src();
 init_src2();
 init_renderers();
 import { execFileSync as execFileSync16 } from "node:child_process";
-import { existsSync as existsSync130, mkdirSync as mkdirSync30, readFileSync as readFileSync99, writeFileSync as writeFileSync24 } from "node:fs";
+import { existsSync as existsSync130, mkdirSync as mkdirSync30, readFileSync as readFileSync99, writeFileSync as writeFileSync23 } from "node:fs";
 import { dirname as dirname27, join as join127 } from "node:path";
 function getChangelogSource(cwd) {
   const configPath = getConfigPath(cwd);
@@ -122795,7 +122865,7 @@ function registerGenerateChangelogCommand(program) {
         if (!dryRun) {
           const fullPath = join127(getProjectRoot(), outputPath);
           mkdirSync30(dirname27(fullPath), { recursive: true });
-          writeFileSync24(fullPath, content, "utf-8");
+          writeFileSync23(fullPath, content, "utf-8");
         }
         results.push({ platform: targetPlatform, path: outputPath, written: !dryRun });
       } else {
@@ -122816,7 +122886,7 @@ function registerGenerateChangelogCommand(program) {
           if (!dryRun) {
             const fullPath = join127(getProjectRoot(), platformConfig.path);
             mkdirSync30(dirname27(fullPath), { recursive: true });
-            writeFileSync24(fullPath, content, "utf-8");
+            writeFileSync23(fullPath, content, "utf-8");
           }
           results.push({
             platform: platformConfig.platform,
@@ -123476,9 +123546,20 @@ function registerMemoryBrainCommand(program) {
     }
     cliOutput(result, { command: "memory", operation: "memory.stats" });
   });
-  memory.command("observe <text>").description("Save an observation to brain.db").option("--title <title>", "Short title for the observation").option(
+  memory.command("observe <text>").description(
+    "Save an observation to brain.db \u2014 captures facts, decisions, and discoveries for cross-session memory"
+  ).option(
+    "--title <title>",
+    "Short title for the observation (defaults to first 120 chars of text)"
+  ).option(
+    "--type <type>",
+    "Category: discovery (found something new), decision (choice made), bugfix (bug found/fixed), refactor (code restructured), feature (feature added), change (general change), pattern (recurring pattern), session_summary (end-of-session recap)"
+  ).option(
     "--agent <name>",
-    "Tag this observation with the producing agent name (Wave 8 mental models)"
+    "Name of the agent producing this observation (enables per-agent memory retrieval)"
+  ).option(
+    "--source-type <sourceType>",
+    "How this observation was captured: manual (typed by human/agent), auto (lifecycle hook), transcript (extracted from session)"
   ).action(async (text3, opts) => {
     await dispatchFromCli(
       "mutate",
@@ -123487,7 +123568,9 @@ function registerMemoryBrainCommand(program) {
       {
         text: text3,
         title: opts["title"],
-        ...opts["agent"] !== void 0 && { agent: opts["agent"] }
+        ...opts["agent"] !== void 0 && { agent: opts["agent"] },
+        ...opts["type"] !== void 0 && { type: opts["type"] },
+        sourceType: opts["sourceType"] ?? "manual"
       },
       { command: "memory", operation: "memory.observe" }
     );
@@ -123515,7 +123598,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.fetch" }
     );
   });
-  memory.command("decision find [query]").description("Search decisions stored in brain.db").option("--limit <n>", "Maximum results", parseInt).option("--json", "Output as JSON").action(async (query, opts) => {
+  memory.command("decision-find [query]").description("Search decisions stored in brain.db").option("--limit <n>", "Maximum results", parseInt).option("--json", "Output as JSON").action(async (query, opts) => {
     await dispatchFromCli(
       "query",
       "memory",
@@ -123527,7 +123610,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.decision.find" }
     );
   });
-  memory.command("decision store").description("Store a decision to brain.db").requiredOption("--decision <text>", "The decision that was made").requiredOption("--rationale <text>", "Rationale behind the decision").option("--alternatives <text>", "Alternatives that were considered").option("--linked-task <id>", "Task ID to associate with this decision").option("--json", "Output as JSON").action(async (opts) => {
+  memory.command("decision-store").description("Store a decision to brain.db").requiredOption("--decision <text>", "The decision that was made").requiredOption("--rationale <text>", "Rationale behind the decision").option("--alternatives <text>", "Alternatives that were considered").option("--linked-task <id>", "Task ID to associate with this decision").option("--json", "Output as JSON").action(async (opts) => {
     await dispatchFromCli(
       "mutate",
       "memory",
@@ -123550,7 +123633,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.link" }
     );
   });
-  memory.command("graph show <nodeId>").description("Get a PageIndex graph node and its edges").option("--json", "Output as JSON").action(async (nodeId, _opts) => {
+  memory.command("graph-show <nodeId>").description("Get a PageIndex graph node and its edges").option("--json", "Output as JSON").action(async (nodeId, _opts) => {
     await dispatchFromCli(
       "query",
       "memory",
@@ -123559,7 +123642,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.graph.show" }
     );
   });
-  memory.command("graph neighbors <nodeId>").description("Get neighbor nodes from the PageIndex graph").option("--depth <n>", "Traversal depth", parseInt).option("--limit <n>", "Maximum neighbors", parseInt).option("--json", "Output as JSON").action(async (nodeId, opts) => {
+  memory.command("graph-neighbors <nodeId>").description("Get neighbor nodes from the PageIndex graph").option("--depth <n>", "Traversal depth", parseInt).option("--limit <n>", "Maximum neighbors", parseInt).option("--json", "Output as JSON").action(async (nodeId, opts) => {
     await dispatchFromCli(
       "query",
       "memory",
@@ -123572,7 +123655,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.graph.neighbors" }
     );
   });
-  memory.command("graph add").description("Add a node or edge to the PageIndex graph").option("--node-id <id>", "Node ID to add").option("--label <text>", "Label for the node").option("--from <id>", "Source node ID for an edge").option("--to <id>", "Target node ID for an edge").option("--edge-type <type>", "Edge relationship type").option("--json", "Output as JSON").action(async (opts) => {
+  memory.command("graph-add").description("Add a node or edge to the PageIndex graph").option("--node-id <id>", "Node ID to add").option("--label <text>", "Label for the node").option("--from <id>", "Source node ID for an edge").option("--to <id>", "Target node ID for an edge").option("--edge-type <type>", "Edge relationship type").option("--json", "Output as JSON").action(async (opts) => {
     await dispatchFromCli(
       "mutate",
       "memory",
@@ -123587,7 +123670,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.graph.add" }
     );
   });
-  memory.command("graph remove").description("Remove a node or edge from the PageIndex graph").option("--node-id <id>", "Node ID to remove").option("--from <id>", "Source node ID of the edge to remove").option("--to <id>", "Target node ID of the edge to remove").option("--json", "Output as JSON").action(async (opts) => {
+  memory.command("graph-remove").description("Remove a node or edge from the PageIndex graph").option("--node-id <id>", "Node ID to remove").option("--from <id>", "Source node ID of the edge to remove").option("--to <id>", "Target node ID of the edge to remove").option("--json", "Output as JSON").action(async (opts) => {
     await dispatchFromCli(
       "mutate",
       "memory",
@@ -123600,7 +123683,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.graph.remove" }
     );
   });
-  memory.command("reason why <taskId>").description("Causal trace through task dependency chains").option("--depth <n>", "Maximum trace depth", parseInt).option("--json", "Output as JSON").action(async (taskId, opts) => {
+  memory.command("reason-why <taskId>").description("Causal trace through task dependency chains").option("--depth <n>", "Maximum trace depth", parseInt).option("--json", "Output as JSON").action(async (taskId, opts) => {
     await dispatchFromCli(
       "query",
       "memory",
@@ -123612,7 +123695,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.reason.why" }
     );
   });
-  memory.command("reason similar <entryId>").description("Find semantically similar brain entries").option("--limit <n>", "Maximum results", parseInt).option("--json", "Output as JSON").action(async (entryId, opts) => {
+  memory.command("reason-similar <entryId>").description("Find semantically similar brain entries").option("--limit <n>", "Maximum results", parseInt).option("--json", "Output as JSON").action(async (entryId, opts) => {
     await dispatchFromCli(
       "query",
       "memory",
@@ -123624,7 +123707,7 @@ function registerMemoryBrainCommand(program) {
       { command: "memory", operation: "memory.reason.similar" }
     );
   });
-  memory.command("search hybrid <query>").description("Hybrid search across FTS5, vector, and graph indexes").option("--limit <n>", "Maximum results", parseInt).option("--json", "Output as JSON").action(async (query, opts) => {
+  memory.command("search-hybrid <query>").description("Hybrid search across FTS5, vector, and graph indexes").option("--limit <n>", "Maximum results", parseInt).option("--json", "Output as JSON").action(async (query, opts) => {
     await dispatchFromCli(
       "query",
       "memory",
@@ -123919,23 +124002,37 @@ function registerNexusCommand(program) {
 // packages/cleo/src/cli/commands/observe.ts
 init_cli();
 function registerObserveCommand(program) {
-  program.command("observe <text>").description("Save an observation to brain.db").option("-t, --title <title>", "Optional title (defaults to first 120 chars of text)").option(
+  program.command("observe <text>").description(
+    "Save an observation to brain.db \u2014 captures facts, decisions, and discoveries for cross-session memory"
+  ).option(
+    "-t, --title <title>",
+    "Short title for the observation (defaults to first 120 chars of text)"
+  ).option(
     "--type <type>",
-    "Observation type (discovery, decision, bugfix, refactor, feature, change, pattern, session_summary)"
-  ).action(async (text3, opts) => {
-    await dispatchFromCli(
-      "mutate",
-      "memory",
-      "observe",
-      {
-        text: text3,
-        title: opts.title,
-        ...opts.type !== void 0 && { type: opts.type },
-        sourceType: "manual"
-      },
-      { command: "observe", operation: "memory.observe" }
-    );
-  });
+    "Category: discovery (found something new), decision (choice made), bugfix (bug found/fixed), refactor (code restructured), feature (feature added), change (general change), pattern (recurring pattern), session_summary (end-of-session recap)"
+  ).option(
+    "--agent <name>",
+    "Name of the agent producing this observation (enables per-agent memory retrieval)"
+  ).option(
+    "--source-type <sourceType>",
+    "How this observation was captured: manual (typed by human/agent), auto (lifecycle hook), transcript (extracted from session)"
+  ).action(
+    async (text3, opts) => {
+      await dispatchFromCli(
+        "mutate",
+        "memory",
+        "observe",
+        {
+          text: text3,
+          title: opts.title,
+          ...opts.type !== void 0 && { type: opts.type },
+          ...opts.agent !== void 0 && { agent: opts.agent },
+          sourceType: opts.sourceType ?? "manual"
+        },
+        { command: "observe", operation: "memory.observe" }
+      );
+    }
+  );
 }
 
 // packages/cleo/src/cli/commands/ops.ts
@@ -124079,6 +124176,110 @@ function registerOrchestrateCommand(program) {
       { command: "orchestrate" }
     );
   });
+  orch.command("bootstrap").description("Load brain state for agent bootstrapping").option("--epic <epicId>", "Epic ID to scope bootstrap context to").action(async (opts) => {
+    await dispatchFromCli(
+      "query",
+      "orchestrate",
+      "bootstrap",
+      { epicId: opts["epic"] },
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("classify <request>").description("Classify a request using CANT prompt-based team routing").action(async (request) => {
+    await dispatchFromCli(
+      "query",
+      "orchestrate",
+      "classify",
+      { request },
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("fanout-status").description("Get fanout status for an epic").option("--epic <epicId>", "Epic ID to scope fanout status to").action(async (opts) => {
+    await dispatchFromCli(
+      "query",
+      "orchestrate",
+      "fanout.status",
+      { epicId: opts["epic"] },
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("handoff <taskId>").description("Perform session handoff and spawn successor for a task").requiredOption("--protocol <type>", "Protocol type for handoff").action(async (taskId, opts) => {
+    await dispatchFromCli(
+      "mutate",
+      "orchestrate",
+      "handoff",
+      { taskId, protocolType: opts["protocol"] },
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("spawn-execute <taskId>").description("Execute spawn for a task via the adapter registry").action(async (taskId) => {
+    await dispatchFromCli(
+      "mutate",
+      "orchestrate",
+      "spawn.execute",
+      { taskId },
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("fanout <epicId>").description("Fan out tasks for an epic using parallel spawn").option("--tasks <ids>", "Comma-separated task IDs to fan out").action(async (epicId, opts) => {
+    const taskIds = typeof opts["tasks"] === "string" ? opts["tasks"].split(",").map((s3) => s3.trim()) : void 0;
+    await dispatchFromCli(
+      "mutate",
+      "orchestrate",
+      "fanout",
+      { epicId, taskIds },
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("conduit-status").description("Get conduit messaging status").action(async () => {
+    await dispatchFromCli(
+      "query",
+      "orchestrate",
+      "conduit.status",
+      {},
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("conduit-peek").description("Peek at queued conduit messages").option("--limit <n>", "Maximum number of messages to return", parseInt).action(async (opts) => {
+    await dispatchFromCli(
+      "query",
+      "orchestrate",
+      "conduit.peek",
+      { limit: opts["limit"] },
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("conduit-start").description("Start the conduit message loop").option("--poll-interval <ms>", "Polling interval in milliseconds", parseInt).action(async (opts) => {
+    await dispatchFromCli(
+      "mutate",
+      "orchestrate",
+      "conduit.start",
+      { pollInterval: opts["pollInterval"] },
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("conduit-stop").description("Stop the conduit message loop").action(async () => {
+    await dispatchFromCli(
+      "mutate",
+      "orchestrate",
+      "conduit.stop",
+      {},
+      { command: "orchestrate" }
+    );
+  });
+  orch.command("conduit-send <content>").description("Send a message via conduit to an agent or conversation").option("--to <agentId>", "Target agent ID").option("--conversation <id>", "Conversation ID to send into").action(async (content, opts) => {
+    await dispatchFromCli(
+      "mutate",
+      "orchestrate",
+      "conduit.send",
+      {
+        content,
+        agentId: opts["to"],
+        conversationId: opts["conversation"]
+      },
+      { command: "orchestrate" }
+    );
+  });
 }
 
 // packages/cleo/src/cli/commands/otel.ts
@@ -125322,17 +125523,18 @@ function registerRestoreCommand(program) {
 // packages/cleo/src/cli/commands/roadmap.ts
 init_cli();
 function registerRoadmapCommand(program) {
-  program.command("roadmap").description("Generate roadmap from pending epics and CHANGELOG history").option("--include-history", "Include release history from CHANGELOG").option("--upcoming-only", "Only show upcoming/planned releases").action(async (opts) => {
+  program.command("roadmap").description(
+    "Generate project roadmap from task provenance \u2014 epics grouped by status with progress"
+  ).option("--include-history", "Include release history from CHANGELOG.md").option("--upcoming-only", "Only show pending/upcoming epics (exclude completed)").action(async (opts) => {
     await dispatchFromCli(
       "query",
       "admin",
-      "dash",
+      "roadmap",
       {
-        type: "roadmap",
         includeHistory: opts["includeHistory"],
         upcomingOnly: opts["upcomingOnly"]
       },
-      { command: "roadmap" }
+      { command: "roadmap", operation: "admin.roadmap" }
     );
   });
 }
@@ -126057,7 +126259,7 @@ function registerShowCommand(program) {
 // packages/cleo/src/cli/commands/skills.ts
 init_cli();
 function registerSkillsCommand(program) {
-  const skillsCmd = program.command("skills").description("Skill management: list, discover, validate, info, install");
+  const skillsCmd = program.command("skills").description("Skill management: list, search, validate, info, install");
   skillsCmd.command("list").description("List installed skills").option("--global", "Use global skills directory").action(async (opts) => {
     await dispatchFromCli(
       "query",
@@ -126081,17 +126283,6 @@ function registerSkillsCommand(program) {
       { command: "skills", operation: "tools.skill.find" }
     );
   });
-  skillsCmd.command("discover").description("Scan and discover available skills").action(async () => {
-    await dispatchFromCli(
-      "query",
-      "tools",
-      "skill.list",
-      {
-        scope: "project"
-      },
-      { command: "skills", operation: "tools.skill.list" }
-    );
-  });
   skillsCmd.command("validate <skill-name>").description("Validate skill against protocol").action(async (skillName) => {
     await dispatchFromCli(
       "query",
@@ -126577,6 +126768,36 @@ function registerSyncCommand(program) {
       { command: "sync", operation: "tasks.sync.links" }
     );
   });
+  sync.command("reconcile <file>").description("Reconcile external tasks from a JSON file against CLEO tasks").requiredOption("--provider <providerId>", "Provider ID (e.g. linear, jira, github)").option(
+    "--conflict-policy <policy>",
+    "How to resolve conflicts: keep-cleo, keep-external, or newest (default: keep-cleo)",
+    "keep-cleo"
+  ).action(async (file2, opts) => {
+    const { readFileSync: readFileSync102 } = await import("node:fs");
+    let externalTasks;
+    try {
+      externalTasks = JSON.parse(readFileSync102(file2, "utf8"));
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      console.error(`Failed to read or parse external tasks file: ${message}`);
+      process.exit(2);
+    }
+    if (!Array.isArray(externalTasks)) {
+      console.error("External tasks file must contain a JSON array");
+      process.exit(2);
+    }
+    await dispatchFromCli(
+      "mutate",
+      "tasks",
+      "sync.reconcile",
+      {
+        providerId: opts["provider"],
+        externalTasks,
+        conflictPolicy: opts["conflictPolicy"]
+      },
+      { command: "sync", operation: "tasks.sync.reconcile" }
+    );
+  });
 }
 
 // packages/cleo/src/cli/commands/testing.ts
@@ -126587,13 +126808,14 @@ function registerTestingCommand(program) {
     await dispatchFromCli(
       "query",
       "check",
-      "manifest",
+      "protocol",
       {
+        protocolType: "testing",
+        mode: "task",
         taskId,
-        strict: !!opts["strict"],
-        type: "testing"
+        strict: !!opts["strict"]
       },
-      { command: "testing", operation: "check.manifest" }
+      { command: "testing", operation: "check.protocol" }
     );
   });
   testingCmd.command("check <manifestFile>").description("Validate testing protocol from a manifest file").option("--strict", "Exit with error code on violations").action(async (manifestFile, opts) => {
@@ -127266,9 +127488,9 @@ registerDepsCommand(rootShim);
 registerTreeCommand(rootShim);
 registerResearchCommand(rootShim);
 registerOrchestrateCommand(rootShim);
+registerChainCommand(rootShim);
 registerLifecycleCommand(rootShim);
 registerReleaseCommand(rootShim);
-registerEnvCommand(rootShim);
 registerCheckpointCommand(rootShim);
 registerCommandsCommand(rootShim);
 registerDocsCommand(rootShim);