@cleocode/cleo 2026.5.107 → 2026.5.109

package/dist/cli/index.js

@@ -1719,6 +1719,189 @@ var init_credentials = __esm({
   }
 });
 
+// packages/core/src/store/db-inventory.json
+var db_inventory_default;
+var init_db_inventory = __esm({
+  "packages/core/src/store/db-inventory.json"() {
+    db_inventory_default = {
+      $schemaNote: "SSoT machine-readable inventory of every CLEO SQLite database. Consumed by T10307 fleet survey, T10310 pragma drift, T10311 migration coverage, T10312 doctor integrity, T10320 cross-DB invariants. Owned by Saga T10281 SG-BRAIN-DB-RESILIENCE / Epic T10282 E1-DB-INVENTORY (task T10305). Amend together with ADR-068 charter; the CI drift gate (forthcoming under E1) compares entries to disk reality.",
+      $pathTokens: {
+        "<projectRoot>": "Resolved at runtime from CLEO_ROOT env var or process.cwd(). Substituted by SSoT helpers `getCleoProjectDir()` in packages/brain/src/cleo-home.ts.",
+        $XDG_DATA_HOME: "Resolved via env-paths through `getCleoHome()` in @cleocode/paths. Linux: ~/.local/share/cleo/, macOS: ~/Library/Application Support/cleo/."
+      },
+      entries: [
+        {
+          role: "tasks",
+          tier: "project",
+          filePathTemplate: "<projectRoot>/.cleo/tasks.db",
+          drizzleSchemaPath: "packages/core/src/store/tasks-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-tasks/",
+          ownerPackage: "@cleocode/core",
+          openedVia: "openCleoDb('tasks', cwd)",
+          concurrency: "single-writer",
+          privacy: "local-only",
+          backupPath: ".cleo/backups/sqlite/tasks-YYYYMMDD-HHmmss.db",
+          documentedIn: "ADR-068 row 1; ADR-013 \xA79"
+        },
+        {
+          role: "brain",
+          tier: "project",
+          filePathTemplate: "<projectRoot>/.cleo/brain.db",
+          drizzleSchemaPath: "packages/core/src/store/memory-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-brain/",
+          ownerPackage: "@cleocode/brain",
+          openedVia: "openCleoDb('brain', cwd)",
+          concurrency: "single-writer",
+          privacy: "local-only-pii",
+          backupPath: ".cleo/backups/sqlite/brain-YYYYMMDD-HHmmss.db",
+          documentedIn: "ADR-068 row 2; ADR-013 \xA79; audit \xA72 (P0 malformed 2026-05-23)"
+        },
+        {
+          role: "conduit",
+          tier: "project",
+          filePathTemplate: "<projectRoot>/.cleo/conduit.db",
+          drizzleSchemaPath: "packages/core/src/store/conduit-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-conduit/",
+          ownerPackage: "@cleocode/core",
+          openedVia: "openCleoDb('conduit', cwd)",
+          concurrency: "single-writer",
+          privacy: "local-only",
+          backupPath: ".cleo/backups/sqlite/conduit-YYYYMMDD-HHmmss.db",
+          documentedIn: "ADR-068 row 3; ADR-037 (signaldock\u2192conduit split)"
+        },
+        {
+          role: "manifest",
+          tier: "derived",
+          filePathTemplate: "<projectRoot>/.cleo/blobs/manifest.db",
+          drizzleSchemaPath: "packages/core/src/store/llmtxt-blob-adapter.ts",
+          migrationsDir: null,
+          ownerPackage: "@cleocode/core",
+          openedVia: "CleoBlobStore via llmtxt/blob BlobFsAdapter (no openCleoDb role registered)",
+          concurrency: "single-writer",
+          privacy: "local-only",
+          backupPath: "rebuildable-from-blob-store",
+          documentedIn: "ADR-068 row 7 (derived); schema owned by llmtxt/blob BlobFsAdapter contract"
+        },
+        {
+          role: "llmtxt",
+          tier: "project",
+          filePathTemplate: "<projectRoot>/.cleo/llmtxt/llmtxt.db",
+          drizzleSchemaPath: null,
+          migrationsDir: null,
+          ownerPackage: "@cleocode/llmtxt-core",
+          openedVia: "openCleoDb('llmtxt', cwd) \u2014 RESERVED; opener throws 'not yet implemented' (see open-cleo-db.ts L138)",
+          concurrency: "single-writer",
+          privacy: "local-only-pii",
+          backupPath: ".cleo/backups/sqlite/llmtxt-YYYYMMDD-HHmmss.db",
+          documentedIn: "ADR-068 row 8 (reserved); audit \xA71.1 row 4 (live at .cleo/llmtxt/llmtxt.db)"
+        },
+        {
+          role: "nexus",
+          tier: "global",
+          filePathTemplate: "$XDG_DATA_HOME/cleo/nexus.db",
+          drizzleSchemaPath: "packages/core/src/store/nexus-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-nexus/",
+          ownerPackage: "@cleocode/core",
+          openedVia: "openCleoDb('nexus')",
+          concurrency: "single-writer",
+          privacy: "local-only-pii",
+          backupPath: "$XDG_DATA_HOME/cleo/backups/sqlite/nexus-YYYYMMDD-HHmmss.db",
+          documentedIn: "ADR-068 row 5"
+        },
+        {
+          role: "signaldock-project",
+          tier: "project",
+          filePathTemplate: "<projectRoot>/.cleo/signaldock.db",
+          drizzleSchemaPath: "packages/core/src/store/signaldock-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-signaldock/",
+          ownerPackage: "@cleocode/core",
+          openedVia: "HISTORICAL \u2014 project-tier signaldock.db was migrated into conduit.db post-T310/ADR-037. No live opener; charter row retained for migration provenance and legacy backup detection.",
+          concurrency: "single-writer",
+          privacy: "local-only",
+          backupPath: ".cleo/backups/sqlite/signaldock-project-YYYYMMDD-HHmmss.db",
+          documentedIn: "ADR-068 row 4 (stale \u2014 superseded by ADR-037); audit \xA71.1 (not in live project DB list)"
+        },
+        {
+          role: "signaldock-global",
+          tier: "global",
+          filePathTemplate: "$XDG_DATA_HOME/cleo/signaldock.db",
+          drizzleSchemaPath: "packages/core/src/store/signaldock-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-signaldock/",
+          ownerPackage: "@cleocode/core",
+          openedVia: "openCleoDb('signaldock')",
+          concurrency: "single-writer",
+          privacy: "local-only",
+          backupPath: "$XDG_DATA_HOME/cleo/backups/sqlite/signaldock-global-YYYYMMDD-HHmmss.db",
+          documentedIn: "ADR-068 row 9; ADR-037 (post-split global identity registry)"
+        },
+        {
+          role: "telemetry",
+          tier: "global",
+          filePathTemplate: "$XDG_DATA_HOME/cleo/telemetry.db",
+          drizzleSchemaPath: "packages/core/src/telemetry/schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-telemetry/",
+          ownerPackage: "@cleocode/core",
+          openedVia: "@cleocode/core telemetry/sqlite.ts \u2014 lazy open on first event when opted-in; not yet registered as openCleoDb role",
+          concurrency: "single-writer",
+          privacy: "cloud-exportable-opt-in",
+          backupPath: "$XDG_DATA_HOME/cleo/backups/sqlite/telemetry-YYYYMMDD-HHmmss.db",
+          documentedIn: "ADR-068 row 6; T624"
+        },
+        {
+          role: "skills",
+          tier: "global",
+          filePathTemplate: "$XDG_DATA_HOME/cleo/skills.db",
+          drizzleSchemaPath: "packages/core/src/store/skills-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-skills/",
+          ownerPackage: "@cleocode/core",
+          openedVia: "openCleoDb('skills')",
+          concurrency: "single-writer",
+          privacy: "local-only",
+          backupPath: "$XDG_DATA_HOME/cleo/backups/sqlite/skills-YYYYMMDD-HHmmss.db",
+          documentedIn: "T9651 (initial skills.db migration); audit \xA71.2 row 4 \u2014 NOT yet in ADR-068 table"
+        },
+        {
+          role: "global-brain",
+          tier: "global",
+          filePathTemplate: "$XDG_DATA_HOME/cleo/brain.db",
+          drizzleSchemaPath: "packages/core/src/store/memory-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-brain/",
+          ownerPackage: "@cleocode/brain",
+          openedVia: "UNREGISTERED \u2014 file exists on disk (audit \xA71.2 row 3) but no live opener. Provenance unclear; likely orphan from a getCleoHome()-vs-project-resolution path bug. Tracked for cleanup decision under T10282/T10307.",
+          concurrency: "single-writer",
+          privacy: "local-only-pii",
+          backupPath: "$XDG_DATA_HOME/cleo/backups/sqlite/global-brain-YYYYMMDD-HHmmss.db",
+          documentedIn: "audit \xA71.2 row 3 \u2014 NEW per saga T10281; not in ADR-068"
+        },
+        {
+          role: "global-tasks",
+          tier: "global",
+          filePathTemplate: "$XDG_DATA_HOME/cleo/tasks.db",
+          drizzleSchemaPath: "packages/core/src/store/tasks-schema.ts",
+          migrationsDir: "packages/core/migrations/drizzle-tasks/",
+          ownerPackage: "@cleocode/core",
+          openedVia: "UNREGISTERED \u2014 file exists on disk (audit \xA71.2 row 5, 4 KB) but no live opener. Provenance unclear; likely orphan from a cwd-cascade bug (T9550 class). Tracked for cleanup decision under T10282/T10307.",
+          concurrency: "single-writer",
+          privacy: "local-only",
+          backupPath: "$XDG_DATA_HOME/cleo/backups/sqlite/global-tasks-YYYYMMDD-HHmmss.db",
+          documentedIn: "audit \xA71.2 row 5 \u2014 NEW per saga T10281; not in ADR-068"
+        }
+      ]
+    };
+  }
+});
+
+// packages/contracts/src/db-inventory.ts
+var rawInventory, DB_INVENTORY;
+var init_db_inventory2 = __esm({
+  "packages/contracts/src/db-inventory.ts"() {
+    "use strict";
+    init_db_inventory();
+    rawInventory = db_inventory_default;
+    DB_INVENTORY = rawInventory.entries;
+  }
+});
+
 // packages/contracts/src/dispatch/identity.ts
 var init_identity = __esm({
   "packages/contracts/src/dispatch/identity.ts"() {
@@ -11309,6 +11492,7 @@ var init_src2 = __esm({
     init_changesets();
     init_cli_category();
     init_credentials();
+    init_db_inventory2();
     init_identity();
     init_operations_registry();
     init_docs_taxonomy();
@@ -25027,8 +25211,8 @@ async function loadPlaybookByName(name) {
     return null;
   }
   try {
-    const { getProjectRoot: getProjectRoot44 } = await import("@cleocode/core/internal");
-    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot44();
+    const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core/internal");
+    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot46();
     const resolved = resolvePlaybook(name, {
       projectRoot,
       globalPlaybooksDir: __playbookRuntimeOverrides.globalPlaybooksDir,
@@ -25072,8 +25256,8 @@ async function acquireDb() {
 async function buildDefaultDispatcher() {
   if (__playbookRuntimeOverrides.dispatcher) return __playbookRuntimeOverrides.dispatcher;
   const { orchestrateSpawnExecute: orchestrateSpawnExecute2 } = await Promise.resolve().then(() => (init_engine(), engine_exports));
-  const { getProjectRoot: getProjectRoot44 } = await import("@cleocode/core/internal");
-  const projectRoot = getProjectRoot44();
+  const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core/internal");
+  const projectRoot = getProjectRoot46();
   return {
     async dispatch(input2) {
       try {
@@ -25263,8 +25447,8 @@ var init_playbook2 = __esm({
             projectRoot = __playbookRuntimeOverrides.projectRoot;
           } else {
             try {
-              const { getProjectRoot: getProjectRoot44 } = await import("@cleocode/core/internal");
-              projectRoot = getProjectRoot44();
+              const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core/internal");
+              projectRoot = getProjectRoot46();
             } catch {
               projectRoot = void 0;
             }
@@ -25328,14 +25512,14 @@ var init_playbook2 = __esm({
         const dispatcher = await buildDefaultDispatcher();
         let result;
         try {
-          const { getProjectRoot: getProjectRoot44 } = await import("@cleocode/core/internal");
+          const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core/internal");
           const opts = {
             db,
             playbook: parsed.definition,
             playbookHash: parsed.sourceHash,
             initialContext,
             dispatcher,
-            projectRoot: getProjectRoot44()
+            projectRoot: getProjectRoot46()
           };
           if (__playbookRuntimeOverrides.approvalSecret !== void 0) {
             opts.approvalSecret = __playbookRuntimeOverrides.approvalSecret;
@@ -25700,7 +25884,7 @@ async function orchestrateClassify(request, context, projectRoot) {
   try {
     const { getCleoCantWorkflowsDir } = await import("@cleocode/core/internal");
     const { readFileSync: readFileSync18, readdirSync: readdirSync3, existsSync: existsSync17 } = await import("node:fs");
-    const { join: join34 } = await import("node:path");
+    const { join: join35 } = await import("node:path");
     const workflowsDir = getCleoCantWorkflowsDir();
     const combined = `${request} ${context ?? ""}`.toLowerCase();
     const matches = [];
@@ -25708,7 +25892,7 @@ async function orchestrateClassify(request, context, projectRoot) {
       const files = readdirSync3(workflowsDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync18(join34(workflowsDir, file), "utf-8");
+          const src = readFileSync18(join35(workflowsDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -25723,12 +25907,12 @@ async function orchestrateClassify(request, context, projectRoot) {
         }
       }
     }
-    const localCantDir = join34(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
+    const localCantDir = join35(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
     if (existsSync17(localCantDir)) {
       const files = readdirSync3(localCantDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync18(join34(localCantDir, file), "utf-8");
+          const src = readFileSync18(join35(localCantDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -31123,11 +31307,11 @@ var init_security = __esm({
 });
 
 // packages/cleo/src/dispatch/middleware/sanitizer.ts
-function createSanitizer(getProjectRoot44) {
+function createSanitizer(getProjectRoot46) {
   return async (req, next) => {
     if (req.params) {
       try {
-        const root = getProjectRoot44 ? getProjectRoot44() : void 0;
+        const root = getProjectRoot46 ? getProjectRoot46() : void 0;
         req.params = sanitizeParams(req.params, root, {
           domain: req.domain,
           operation: req.operation
@@ -32719,9 +32903,9 @@ var init_agent = __esm({
             isActive: true
           });
           const { existsSync: existsSync17, mkdirSync: mkdirSync5, writeFileSync: writeFileSync5 } = await import("node:fs");
-          const { join: join34 } = await import("node:path");
-          const cantDir = join34(CLEO_DIR_NAME, AGENTS_SUBDIR);
-          const cantPath = join34(cantDir, `${agentId}.cant`);
+          const { join: join35 } = await import("node:path");
+          const cantDir = join35(CLEO_DIR_NAME, AGENTS_SUBDIR);
+          const cantPath = join35(cantDir, `${agentId}.cant`);
           let cantScaffolded = false;
           if (!existsSync17(cantPath)) {
             mkdirSync5(cantDir, { recursive: true });
@@ -32903,7 +33087,7 @@ agent ${agentId}:
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { createRuntime } = await import("@cleocode/runtime");
           const { existsSync: existsSync17, readFileSync: readFileSync18 } = await import("node:fs");
-          const { join: join34 } = await import("node:path");
+          const { join: join35 } = await import("node:path");
           await openCleoDb("tasks");
           const registry = new AgentRegistryAccessor(getProjectRoot24());
           const credential = await registry.get(args.agentId);
@@ -32923,7 +33107,7 @@ agent ${agentId}:
           }
           let profile = null;
           let cantValidation = null;
-          const cantPath = args.cant ?? join34(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          const cantPath = args.cant ?? join35(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
           if (existsSync17(cantPath)) {
             profile = readFileSync18(cantPath, "utf-8");
             try {
@@ -33449,7 +33633,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { createRuntime } = await import("@cleocode/runtime");
           const { existsSync: existsSync17 } = await import("node:fs");
-          const { join: join34 } = await import("node:path");
+          const { join: join35 } = await import("node:path");
           await openCleoDb("tasks");
           const registry = new AgentRegistryAccessor(getProjectRoot24());
           const credential = await registry.get(args.agentId);
@@ -33466,7 +33650,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           await registry.update(args.agentId, { isActive: true });
           await registry.markUsed(args.agentId);
-          const cantPath = join34(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          const cantPath = join35(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
           const hasProfile = existsSync17(cantPath);
           const runtime = await createRuntime(registry, {
             agentId: args.agentId,
@@ -34409,8 +34593,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             process.exitCode = 4;
             return;
           }
-          const { join: join34 } = await import("node:path");
-          const personaPath = join34(resolvedDir, "persona.cant");
+          const { join: join35 } = await import("node:path");
+          const personaPath = join35(resolvedDir, "persona.cant");
           if (!existsSync17(personaPath)) {
             cliOutput(
               {
@@ -34458,7 +34642,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               if (entry.isFile()) {
                 fileCount++;
               } else if (entry.isDirectory()) {
-                countFiles(join34(dirPath, entry.name));
+                countFiles(join35(dirPath, entry.name));
               }
             }
           };
@@ -34707,7 +34891,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       async run({ args }) {
         try {
           const { existsSync: existsSync17, readFileSync: readFileSync18, mkdirSync: mkdirSync5 } = await import("node:fs");
-          const { resolve: resolve7, join: join34 } = await import("node:path");
+          const { resolve: resolve7, join: join35 } = await import("node:path");
           const specPath = resolve7(args.spec);
           if (!existsSync17(specPath)) {
             cliError(`spec file not found: ${specPath}`, 4, { name: "E_NOT_FOUND" });
@@ -34716,7 +34900,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const specContent = readFileSync18(specPath, "utf-8");
           const projectRoot = getProjectRoot24();
-          const outputDir = args["output-dir"] ? resolve7(args["output-dir"]) : join34(projectRoot, ".cleo", "cant", "agents");
+          const outputDir = args["output-dir"] ? resolve7(args["output-dir"]) : join35(projectRoot, ".cleo", "cant", "agents");
           mkdirSync5(outputDir, { recursive: true });
           if (args["dry-run"]) {
             cliOutput(
@@ -36113,6 +36297,155 @@ var init_backup_inspect = __esm({
   }
 });
 
+// packages/cleo/src/cli/lib/define-cli-command.ts
+var init_define_cli_command = __esm({
+  "packages/cleo/src/cli/lib/define-cli-command.ts"() {
+    "use strict";
+    init_dist();
+  }
+});
+
+// packages/cleo/src/cli/commands/backup-recover.ts
+var backup_recover_exports = {};
+__export(backup_recover_exports, {
+  backupRecoverBrainLeaf: () => backupRecoverBrainLeaf,
+  backupRecoverSubCommand: () => backupRecoverSubCommand
+});
+import { join as join11 } from "node:path";
+import { getCleoDirAbsolute as getCleoDirAbsolute2, getLogger as getLogger20, getProjectRoot as getProjectRoot27 } from "@cleocode/core";
+import {
+  BackupRecoverBrainError,
+  runBackupRecoverBrain
+} from "@cleocode/core/store/backup-recover-brain.js";
+function readBoolFlag(args, key) {
+  return args[key] === true;
+}
+function readStringFlag(args, key) {
+  const v = args[key];
+  return typeof v === "string" ? v : "";
+}
+var backupRecoverBrainLeaf, backupRecoverSubCommand;
+var init_backup_recover = __esm({
+  "packages/cleo/src/cli/commands/backup-recover.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    backupRecoverBrainLeaf = defineCommand({
+      meta: {
+        name: "brain",
+        description: "Recover a malformed brain.db from the freshest validated snapshot (Saga T10281 SG-BRAIN-DB-RESILIENCE)"
+      },
+      args: {
+        "dry-run": {
+          type: "boolean",
+          description: "Print what would be done without quarantining or copying any files",
+          default: false
+        },
+        "from-snapshot": {
+          type: "string",
+          description: "Pin recovery to a specific snapshot \u2014 absolute path or ISO timestamp prefix (e.g. 2026-05-23)",
+          default: ""
+        },
+        "no-delta": {
+          type: "boolean",
+          description: "Skip the sqlite3 .recover delta-merge step (reserved \u2014 current pipeline does not delta-merge; flag plumbed for forward-compat)",
+          default: false
+        },
+        force: {
+          type: "boolean",
+          description: "Bypass any safety prompts (currently a no-op; reserved)",
+          default: false
+        }
+      },
+      async run({ args }) {
+        const projectRoot = getProjectRoot27();
+        const cleoDir = getCleoDirAbsolute2();
+        const corruptPath = join11(cleoDir, "brain.db");
+        const snapshotDir = join11(cleoDir, "backups", "snapshot");
+        const vacuumSnapshotDir = join11(cleoDir, "backups", "sqlite");
+        const quarantineRoot = join11(cleoDir, "quarantine");
+        const argsBag = args;
+        const dryRun = readBoolFlag(argsBag, "dry-run");
+        const fromSnapshot = readStringFlag(argsBag, "from-snapshot");
+        const noDelta = readBoolFlag(argsBag, "no-delta");
+        try {
+          const result = runBackupRecoverBrain({
+            corruptPath,
+            snapshotDir,
+            vacuumSnapshotDir,
+            legacyArtifactDir: cleoDir,
+            quarantineRoot,
+            logger: getLogger20("backup-recover-brain"),
+            dryRun,
+            fromSnapshot: fromSnapshot.length > 0 ? fromSnapshot : void 0,
+            noDelta
+          });
+          cliOutput(result, {
+            command: "backup",
+            operation: "backup.recover.brain"
+          });
+          if (result.dryRun) {
+            humanInfo(
+              `[dry-run] Would restore from ${result.restoredFrom} (${result.dataLossWindowHours !== null ? `~${result.dataLossWindowHours}h data-loss window` : "data-loss window unknown"}). Re-run without --dry-run to execute (project root: ${projectRoot}).`
+            );
+          } else {
+            humanInfo(
+              `Recovered brain.db from ${result.restoredFrom}. Corrupt DB quarantined at ${result.quarantinedTo}.`
+            );
+          }
+        } catch (err) {
+          if (err instanceof BackupRecoverBrainError) {
+            cliError(
+              err.message,
+              err.code,
+              {
+                name: err.codeName,
+                ...err.fix ? { fix: err.fix } : {}
+              },
+              { operation: "backup.recover.brain" }
+            );
+            process.exitCode = err.code;
+            return;
+          }
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(
+            message,
+            1 /* GENERAL_ERROR */,
+            { name: "E_RECOVERY_FAILED" },
+            { operation: "backup.recover.brain" }
+          );
+          process.exitCode = 1 /* GENERAL_ERROR */;
+        }
+      }
+    });
+    backupRecoverSubCommand = defineCommand({
+      meta: {
+        name: "recover",
+        description: "Recover a malformed CLEO database from snapshot"
+      },
+      subCommands: {
+        brain: backupRecoverBrainLeaf
+      },
+      async run({ args }) {
+        const argsBag = args;
+        const positional = argsBag["_"];
+        if (Array.isArray(positional) && positional.length > 0) return;
+        cliError(
+          "Missing subcommand. Try `cleo backup recover brain` (currently the only available recovery verb).",
+          6 /* VALIDATION_ERROR */,
+          {
+            name: "E_VALIDATION",
+            fix: "Run `cleo backup recover brain --help` to see available flags."
+          },
+          { operation: "backup.recover" }
+        );
+        process.exitCode = 6 /* VALIDATION_ERROR */;
+      }
+    });
+  }
+});
+
 // packages/cleo/src/cli/commands/backup.ts
 var backup_exports = {};
 __export(backup_exports, {
@@ -36184,6 +36517,7 @@ var init_backup = __esm({
     init_paths();
     init_renderers();
     init_backup_inspect();
+    init_backup_recover();
     addCommand2 = defineCommand({
       meta: {
         name: "add",
@@ -36267,9 +36601,9 @@ var init_backup = __esm({
       async run({ args }) {
         const scope = args.scope;
         const { packBundle } = await import("@cleocode/core/store/backup-pack.js");
-        const { getProjectRoot: getProjectRoot44 } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core");
         const includesProject = scope === "project" || scope === "all";
-        const projectRoot = includesProject ? getProjectRoot44() : void 0;
+        const projectRoot = includesProject ? getProjectRoot46() : void 0;
         let passphrase;
         if (args.encrypt === true) {
           passphrase = process.env["CLEO_BACKUP_PASSPHRASE"];
@@ -36345,12 +36679,12 @@ var init_backup = __esm({
       },
       async run({ args }) {
         const bundlePath = args.bundle;
-        const { getProjectRoot: getProjectRoot44, getCleoHome: getCleoHome6, getCleoVersion } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot46, getCleoHome: getCleoHome6, getCleoVersion } = await import("@cleocode/core");
         const { BundleError, cleanupStaging, unpackBundle } = await import("@cleocode/core/store/backup-unpack.js");
         const { regenerateConfigJson, regenerateProjectContextJson, regenerateProjectInfoJson } = await import("@cleocode/core/store/regenerators.js");
         const { regenerateAndCompare } = await import("@cleocode/core/store/restore-json-merge.js");
         const { buildConflictReport, writeConflictReport } = await import("@cleocode/core/store/restore-conflict-report.js");
-        const projectRoot = getProjectRoot44();
+        const projectRoot = getProjectRoot46();
         if (args.force !== true) {
           const existing = checkForExistingData(projectRoot, getCleoHome6());
           if (existing.length > 0) {
@@ -36518,7 +36852,8 @@ var init_backup = __esm({
         list: listCommand4,
         export: exportCommand,
         import: importCommand,
-        inspect: backupInspectSubCommand
+        inspect: backupInspectSubCommand,
+        recover: backupRecoverSubCommand
       },
       async run({ cmd, rawArgs }) {
         if (isSubCommandDispatch(rawArgs, cmd.subCommands)) return;
@@ -36568,7 +36903,7 @@ var brain_exports = {};
 __export(brain_exports, {
   brainCommand: () => brainCommand
 });
-import { getProjectRoot as getProjectRoot27 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot28 } from "@cleocode/core";
 import {
   backfillBrainGraph,
   exportBrainAsGexf,
@@ -36613,7 +36948,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot28();
         try {
           const result = await runBrainMaintenance(root, {
             skipDecay: !!args["skip-decay"],
@@ -36684,7 +37019,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot28();
         try {
           const result = await backfillBrainGraph(root);
           cliOutput(
@@ -36725,7 +37060,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot28();
         try {
           const result = await purgeBrainNoise(root);
           cliOutput(
@@ -36771,7 +37106,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot28();
         const limit = Number.parseInt(args.limit, 10) || 20;
         try {
           const stats = await getPlasticityStats(root, limit);
@@ -36821,7 +37156,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot28();
         try {
           const report = await getMemoryQualityReport(root);
           cliOutput(
@@ -36870,7 +37205,7 @@ var init_brain2 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot28();
         const format = args.format ?? "gexf";
         if (format !== "gexf" && format !== "json") {
           cliError(`Invalid format: ${format}. Use 'gexf' or 'json'.`, "E_VALIDATION", {
@@ -36951,12 +37286,12 @@ __export(briefing_exports, {
   briefingCommand: () => briefingCommand
 });
 import { existsSync as existsSync9, readFileSync as readFileSync10 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 import { pushWarning } from "@cleocode/core";
 import { resolveLegacyCleoDir } from "@cleocode/paths";
 function resolveInjectionTemplatePath() {
   const xdgConfig = resolveLegacyCleoDir(process.env["XDG_CONFIG_HOME"]);
-  return join11(xdgConfig, "templates", "CLEO-INJECTION.md");
+  return join12(xdgConfig, "templates", "CLEO-INJECTION.md");
 }
 function extractSection(content, sectionName) {
   const openTag = `<!-- CLEO-INJECTION:section=${sectionName} -->`;
@@ -37195,7 +37530,7 @@ __export(caamp_exports, {
   caampCommand: () => caampCommand
 });
 import { homedir as homedir3 } from "node:os";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 var dedupeCommand, caampCommand;
 var init_caamp = __esm({
   "packages/cleo/src/cli/commands/caamp.ts"() {
@@ -37232,9 +37567,9 @@ var init_caamp = __esm({
         } else {
           const home = homedir3();
           filePaths = [
-            join12(home, ".agents", "AGENTS.md"),
+            join13(home, ".agents", "AGENTS.md"),
             // project-level AGENTS.md in cwd
-            join12(process.cwd(), "AGENTS.md")
+            join13(process.cwd(), "AGENTS.md")
           ];
         }
         if (args["dry-run"]) {
@@ -37342,7 +37677,7 @@ __export(cant_exports, {
   cantCommand: () => cantCommand
 });
 import { existsSync as existsSync10, mkdirSync as mkdirSync2, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname4, isAbsolute, join as join13, resolve as resolve3 } from "node:path";
+import { dirname as dirname4, isAbsolute, join as join14, resolve as resolve3 } from "node:path";
 function resolveFilePath(file) {
   return isAbsolute(file) ? file : resolve3(process.cwd(), file);
 }
@@ -37507,7 +37842,7 @@ var init_cant = __esm({
             const projectRoot = process.cwd();
             let written = 0;
             for (const outputFile of result.outputFiles) {
-              const outputPath = isAbsolute(outputFile.path) ? outputFile.path : join13(projectRoot, outputFile.path);
+              const outputPath = isAbsolute(outputFile.path) ? outputFile.path : join14(projectRoot, outputFile.path);
               mkdirSync2(dirname4(outputPath), { recursive: true });
               writeFileSync3(outputPath, outputFile.content, "utf-8");
               written++;
@@ -37687,8 +38022,8 @@ __export(changeset_exports, {
   changesetCommand: () => changesetCommand
 });
 import { existsSync as existsSync11 } from "node:fs";
-import { join as join14 } from "node:path";
-import { changesets, dataTable, getProjectRoot as getProjectRoot28 } from "@cleocode/core";
+import { join as join15 } from "node:path";
+import { changesets, dataTable, getProjectRoot as getProjectRoot29 } from "@cleocode/core";
 function isValidKind(raw) {
   return typeof raw === "string" && CHANGESET_KINDS.includes(raw);
 }
@@ -37782,7 +38117,7 @@ var init_changeset = __esm({
           ...typeof args.notes === "string" && args.notes.length > 0 ? { notes: args.notes } : {},
           ...typeof args.breaking === "string" && args.breaking.length > 0 ? { breaking: args.breaking } : {}
         };
-        const projectRoot = getProjectRoot28();
+        const projectRoot = getProjectRoot29();
         const outcome = await changesets.writeChangesetEntry(entry, {
           projectRoot,
           ...typeof args["attached-by"] === "string" && args["attached-by"].length > 0 ? { attachedBy: args["attached-by"] } : {}
@@ -37809,8 +38144,8 @@ var init_changeset = __esm({
       },
       args: {},
       async run() {
-        const projectRoot = getProjectRoot28();
-        const dir = join14(projectRoot, ".changeset");
+        const projectRoot = getProjectRoot29();
+        const dir = join15(projectRoot, ".changeset");
         if (!existsSync11(dir)) {
           const empty = { entries: [], count: 0, dir, note: "no .changeset/ dir" };
           if (isHumanOutput()) {
@@ -38275,7 +38610,7 @@ var init_check2 = __esm({
       async run({ args }) {
         const { spawnSync } = await import("node:child_process");
         const { existsSync: existsSync17 } = await import("node:fs");
-        const { join: join34, resolve: resolve7 } = await import("node:path");
+        const { join: join35, resolve: resolve7 } = await import("node:path");
         const strict = Boolean(args.strict);
         const jsonOnly = Boolean(args.json);
         const repoRoot = resolve7(process.cwd());
@@ -38315,7 +38650,7 @@ var init_check2 = __esm({
         const results = [];
         let anyFailed = false;
         for (const gate of gates) {
-          const scriptPath = join34(repoRoot, gate.script);
+          const scriptPath = join35(repoRoot, gate.script);
           if (!existsSync17(scriptPath)) {
             results.push({
               id: gate.id,
@@ -38631,9 +38966,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartOutline } = await import("@cleocode/core/internal");
-            const { join: join34 } = await import("node:path");
+            const { join: join35 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join34(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join35(root, args.file);
             const result = smartOutline(absPath, root);
             if (result.errors.length > 0 && result.symbols.length === 0) {
               cliError(result.errors.join(", "), 1, { name: "E_OUTLINE_FAILED" });
@@ -38724,9 +39059,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartUnfold } = await import("@cleocode/core/internal");
-            const { join: join34 } = await import("node:path");
+            const { join: join35 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join34(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join35(root, args.file);
             const result = smartUnfold(absPath, args.symbol, root);
             if (!result.found) {
               const errs = result.errors.length > 0 ? `: ${result.errors.join(", ")}` : "";
@@ -39849,7 +40184,7 @@ var curator_exports = {};
 __export(curator_exports, {
   curatorCommand: () => curatorCommand
 });
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 import { getCleoHome } from "@cleocode/paths";
 async function loadCurator() {
   return import("@cleocode/core/sentient/curator.js");
@@ -39879,7 +40214,7 @@ var init_curator = __esm({
         try {
           const { runCuratorTick } = await loadCurator();
           const { readCuratorConfig } = await loadDaemon();
-          const configPath = join15(getCleoHome(), "config.json");
+          const configPath = join16(getCleoHome(), "config.json");
           const cfg = await readCuratorConfig(configPath);
           const result = await runCuratorTick({
             dryRun: args["dry-run"] === true,
@@ -39920,7 +40255,7 @@ var init_curator = __esm({
       async run() {
         try {
           const { readCuratorConfig, curatorCronExpression } = await loadDaemon();
-          const configPath = join15(getCleoHome(), "config.json");
+          const configPath = join16(getCleoHome(), "config.json");
           const cfg = await readCuratorConfig(configPath);
           cliOutput(
             {
@@ -39995,7 +40330,7 @@ __export(daemon_exports, {
   daemonCommand: () => daemonCommand
 });
 import { existsSync as existsSync12 } from "node:fs";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { getGCDaemonStatus, spawnGCDaemon, stopGCDaemon } from "@cleocode/core/gc/daemon.js";
 import {
@@ -40061,9 +40396,9 @@ async function showDaemonStatus(cleoDir, projectRoot) {
 }
 function resolveDaemonInstallerScript() {
   const filePath = fileURLToPath3(import.meta.url);
-  const candidate1 = join16(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
+  const candidate1 = join17(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
   if (existsSync12(candidate1)) return candidate1;
-  const candidate2 = join16(
+  const candidate2 = join17(
     filePath,
     "..",
     "..",
@@ -40135,13 +40470,13 @@ var init_daemon = __esm({
             {
               pid,
               cleoDir,
-              logs: join16(cleoDir, "logs", "gc.log"),
+              logs: join17(cleoDir, "logs", "gc.log"),
               message: `GC daemon started (PID ${pid})`
             },
             {
               command: "daemon",
               operation: "daemon.start",
-              message: `GC daemon started (PID ${pid}) \u2014 Logs: ${join16(cleoDir, "logs", "gc.log")}`
+              message: `GC daemon started (PID ${pid}) \u2014 Logs: ${join17(cleoDir, "logs", "gc.log")}`
             }
           );
         } catch (err) {
@@ -40543,17 +40878,18 @@ var init_colors = __esm({
 // packages/cleo/src/cli/renderers/generic-tree.ts
 import { ascii as ascii2, KindIcon as KindIcon2, pickIcon, RelationIcon } from "@cleocode/contracts/render/icon.js";
 function renderGenericTree(result, opts) {
+  const explicitCtx = opts.ctx !== void 0;
   const ctx = opts.ctx ?? resolveAnimateContext();
   if (!ctx.enabled) return "";
   if (opts.quiet) return renderQuiet(result);
-  const useAscii = ctx.inputs.noColor;
+  const useAscii = explicitCtx ? ctx.inputs.noColor : ctx.inputs.noColor || process.env["NO_COLOR"] != null;
   const lines = [];
   if (result.ancestors.length > 0) {
     lines.push(formatAncestorBanner(result.ancestors, useAscii));
     lines.push("");
   }
   const treeWithGlyphs = decorateGroupsEdges(result.tree, useAscii);
-  const body = renderTree(treeWithGlyphs, { ctx });
+  const body = renderTree(treeWithGlyphs, { ctx, asciiBoxDrawing: useAscii });
   if (body) lines.push(body);
   if (opts.withDeps || opts.withBlockers) {
     const annotations = renderAnnotations(result.tree, opts);
@@ -40617,7 +40953,15 @@ function kindIconOf(kind) {
   }
 }
 function resolveAnimateContext() {
-  return createAnimateContext({ flagResolution: getFormatContext() });
+  const fmt = getFormatContext();
+  if (fmt.format !== "human") {
+    return createAnimateContext({ flagResolution: fmt });
+  }
+  return createAnimateContext({
+    flagResolution: fmt,
+    isTTY: true,
+    noColor: false
+  });
 }
 var init_generic_tree = __esm({
   "packages/cleo/src/cli/renderers/generic-tree.ts"() {
@@ -40903,11 +41247,11 @@ __export(detect_drift_exports, {
   detectDriftCommand: () => detectDriftCommand
 });
 import { existsSync as existsSync13, readdirSync, readFileSync as readFileSync13 } from "node:fs";
-import { dirname as dirname5, join as join17 } from "node:path";
+import { dirname as dirname5, join as join18 } from "node:path";
 function findProjectRoot() {
   let currentDir = process.cwd();
   while (currentDir !== "/") {
-    if (existsSync13(join17(currentDir, "package.json"))) {
+    if (existsSync13(join18(currentDir, "package.json"))) {
       return currentDir;
     }
     const parent = dirname5(currentDir);
@@ -40931,8 +41275,8 @@ var init_detect_drift = __esm({
       },
       async run() {
         const projectRoot = findProjectRoot();
-        const isCleoRepo = existsSync13(join17(projectRoot, "packages", "cleo", "src"));
-        const cleoSrcRoot = isCleoRepo ? join17(projectRoot, "packages", "cleo", "src") : join17(projectRoot, "src");
+        const isCleoRepo = existsSync13(join18(projectRoot, "packages", "cleo", "src"));
+        const cleoSrcRoot = isCleoRepo ? join18(projectRoot, "packages", "cleo", "src") : join18(projectRoot, "src");
         const safeRead = (filePath) => {
           try {
             return readFileSync13(filePath, "utf-8");
@@ -40946,7 +41290,7 @@ var init_detect_drift = __esm({
             checks: [],
             recommendations: []
           };
-          const injPath = join17(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
+          const injPath = join18(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
           if (existsSync13(injPath)) {
             const content = safeRead(injPath);
             userResult.checks.push({
@@ -40998,9 +41342,9 @@ var init_detect_drift = __esm({
           }
         };
         try {
-          const specPath = join17(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
-          const registryPath = join17(cleoSrcRoot, "dispatch", "registry.ts");
-          const dispatchDomainsDir = join17(cleoSrcRoot, "dispatch", "domains");
+          const specPath = join18(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
+          const registryPath = join18(cleoSrcRoot, "dispatch", "registry.ts");
+          const dispatchDomainsDir = join18(cleoSrcRoot, "dispatch", "domains");
           if (!existsSync13(specPath)) {
             addCheck("Gateway-to-spec sync", "fail", "CLEO-OPERATION-CONSTITUTION.md missing", [
               {
@@ -41069,8 +41413,8 @@ var init_detect_drift = __esm({
           ]);
         }
         try {
-          const cliDir = join17(cleoSrcRoot, "cli", "commands");
-          const coreDir = isCleoRepo ? join17(projectRoot, "packages", "core", "src") : join17(projectRoot, "src", "core");
+          const cliDir = join18(cleoSrcRoot, "cli", "commands");
+          const coreDir = isCleoRepo ? join18(projectRoot, "packages", "core", "src") : join18(projectRoot, "src", "core");
           if (!existsSync13(cliDir)) {
             addCheck("CLI-to-core sync", "fail", "CLI commands directory missing", [
               {
@@ -41097,7 +41441,7 @@ var init_detect_drift = __esm({
           addCheck("CLI-to-core sync", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const domainsDir = join17(cleoSrcRoot, "dispatch", "domains");
+          const domainsDir = join18(cleoSrcRoot, "dispatch", "domains");
           if (!existsSync13(domainsDir)) {
             addCheck("Domain handler coverage", "fail", "Dispatch domains directory missing", [
               {
@@ -41115,7 +41459,7 @@ var init_detect_drift = __esm({
           addCheck("Domain handler coverage", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const matrixPath = join17(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
+          const matrixPath = join18(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
           if (!existsSync13(matrixPath)) {
             addCheck("Capability matrix", "fail", "Capability matrix missing", [
               {
@@ -41132,7 +41476,7 @@ var init_detect_drift = __esm({
           addCheck("Capability matrix", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const schemaPath = join17(projectRoot, "src", "store", "schema.ts");
+          const schemaPath = join18(projectRoot, "src", "store", "schema.ts");
           if (!existsSync13(schemaPath)) {
             addCheck("Schema validation", "fail", "Schema definition missing", [
               {
@@ -41167,8 +41511,8 @@ var init_detect_drift = __esm({
           addCheck("Schema validation", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const visionPath = join17(projectRoot, "docs", "concepts", "CLEO-VISION.md");
-          const specPath = join17(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
+          const visionPath = join18(projectRoot, "docs", "concepts", "CLEO-VISION.md");
+          const specPath = join18(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
           const issues = [];
           if (!existsSync13(visionPath)) {
             issues.push({
@@ -41223,7 +41567,7 @@ var init_detect_drift = __esm({
           addCheck("Canonical identity", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const injectionPath = join17(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
+          const injectionPath = join18(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
           if (!existsSync13(injectionPath)) {
             addCheck("Agent injection", "fail", "Agent injection template missing", [
               {
@@ -41253,7 +41597,7 @@ var init_detect_drift = __esm({
           addCheck("Agent injection", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const exitCodesPath = join17(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
+          const exitCodesPath = join18(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
           if (!existsSync13(exitCodesPath)) {
             addCheck("Exit codes", "fail", "Exit codes definition missing", [
               {
@@ -41422,12 +41766,190 @@ var init_diagnostics2 = __esm({
   }
 });
 
+// packages/cleo/src/cli/lib/did-you-mean.ts
+function levenshteinDistance(input2, candidate) {
+  const inputLen = input2.length;
+  const candidateLen = candidate.length;
+  const matrix = Array.from({ length: inputLen + 1 }, (_, i) => [i]);
+  for (let j = 1; j <= candidateLen; j++) {
+    matrix[0][j] = j;
+  }
+  for (let i = 1; i <= inputLen; i++) {
+    for (let j = 1; j <= candidateLen; j++) {
+      const cost = input2[i - 1] === candidate[j - 1] ? 0 : 1;
+      matrix[i][j] = Math.min(
+        matrix[i - 1][j] + 1,
+        // deletion
+        matrix[i][j - 1] + 1,
+        // insertion
+        matrix[i - 1][j - 1] + cost
+        // substitution
+      );
+    }
+  }
+  return matrix[inputLen][candidateLen];
+}
+function didYouMean(input2, candidates, maxDistance = 2) {
+  const suggestions = candidates.map((candidate) => ({
+    command: candidate,
+    distance: levenshteinDistance(input2, candidate)
+  })).filter((item) => item.distance <= maxDistance).sort((a, b) => {
+    if (a.distance !== b.distance) {
+      return a.distance - b.distance;
+    }
+    return a.command.localeCompare(b.command);
+  }).map((item) => item.command);
+  return suggestions;
+}
+var init_did_you_mean = __esm({
+  "packages/cleo/src/cli/lib/did-you-mean.ts"() {
+    "use strict";
+  }
+});
+
+// packages/cleo/src/cli/lib/strict-args.ts
+function collectKnownLongFlags(schema2) {
+  const known = /* @__PURE__ */ new Set();
+  for (const [name, def] of Object.entries(schema2)) {
+    if (!def || def.type === "positional") continue;
+    known.add(`--${name}`);
+    if (def.type === "boolean") {
+      known.add(`--no-${name}`);
+    }
+    const alias2 = def.alias;
+    if (typeof alias2 === "string" && alias2.length > 0) {
+      known.add(alias2.length === 1 ? `-${alias2}` : `--${alias2}`);
+    } else if (Array.isArray(alias2)) {
+      for (const a of alias2) {
+        if (typeof a !== "string" || a.length === 0) continue;
+        known.add(a.length === 1 ? `-${a}` : `--${a}`);
+      }
+    }
+  }
+  return known;
+}
+function collectSuggestionCandidates(schema2) {
+  const candidates = [];
+  for (const [name, def] of Object.entries(schema2)) {
+    if (!def || def.type === "positional") continue;
+    candidates.push(`--${name}`);
+  }
+  return candidates.sort();
+}
+function assertKnownFlags(rawArgs, schema2, commandName) {
+  if (!rawArgs || rawArgs.length === 0) return;
+  if (schema2 === void 0) return;
+  if (typeof schema2 === "function" || typeof schema2 === "object" && schema2 !== null && "then" in schema2) {
+    return;
+  }
+  const resolved = schema2;
+  const known = collectKnownLongFlags(resolved);
+  const candidates = collectSuggestionCandidates(resolved);
+  for (let i = 0; i < rawArgs.length; i++) {
+    const token = rawArgs[i];
+    if (token === void 0) continue;
+    if (token === "--") break;
+    if (!token.startsWith("-")) continue;
+    if (token === "-") continue;
+    if (token.startsWith("--")) {
+      const eqIdx = token.indexOf("=");
+      const flagName = eqIdx >= 0 ? token.slice(0, eqIdx) : token;
+      if (!known.has(flagName)) {
+        throw new UnknownFlagError({
+          flag: flagName,
+          command: commandName,
+          suggestions: didYouMean(flagName, candidates, 3),
+          knownFlags: [...known].sort()
+        });
+      }
+    } else {
+      const eqIdx = token.indexOf("=");
+      const body = eqIdx >= 0 ? token.slice(1, eqIdx) : token.slice(1);
+      const first = `-${body[0]}`;
+      if (!known.has(first)) {
+        throw new UnknownFlagError({
+          flag: first,
+          command: commandName,
+          suggestions: didYouMean(first, candidates, 3),
+          knownFlags: [...known].sort()
+        });
+      }
+      if (eqIdx < 0 && body.length > 1) {
+        const isBooleanShort = isBooleanAlias(resolved, body[0]);
+        if (isBooleanShort) {
+          for (let k = 1; k < body.length; k++) {
+            const ch = body[k];
+            if (ch === void 0) continue;
+            const short = `-${ch}`;
+            if (!known.has(short)) {
+              throw new UnknownFlagError({
+                flag: short,
+                command: commandName,
+                suggestions: didYouMean(short, candidates, 3),
+                knownFlags: [...known].sort()
+              });
+            }
+          }
+        }
+      }
+    }
+  }
+}
+function isBooleanAlias(schema2, letter) {
+  if (!letter) return false;
+  for (const def of Object.values(schema2)) {
+    if (!def || def.type !== "boolean") continue;
+    const alias2 = def.alias;
+    if (alias2 === letter) return true;
+    if (Array.isArray(alias2) && alias2.includes(letter)) return true;
+  }
+  return false;
+}
+var E_UNKNOWN_FLAG, UnknownFlagError;
+var init_strict_args = __esm({
+  "packages/cleo/src/cli/lib/strict-args.ts"() {
+    "use strict";
+    init_did_you_mean();
+    E_UNKNOWN_FLAG = "E_UNKNOWN_FLAG";
+    UnknownFlagError = class extends Error {
+      /** Stable LAFS error code string for envelope emission. */
+      code = E_UNKNOWN_FLAG;
+      /** The unknown flag token as it appeared in `rawArgs` (e.g. `--titel`, `-X`). */
+      flag;
+      /** Human-readable command label (e.g. `'docs add'`). */
+      command;
+      /** Did-you-mean suggestions, sorted by Levenshtein distance ascending. */
+      suggestions;
+      /** The full list of known flags accepted by the command (long form + short). */
+      knownFlags;
+      /** Suggested fix string for {@link CliErrorDetails.fix}. */
+      fix;
+      /**
+       * @param input - Structured failure context: offending flag, command
+       *   label, ranked suggestions, and the full known-flag set.
+       */
+      constructor(input2) {
+        const suggestionPart = input2.suggestions.length > 0 ? ` Did you mean: ${input2.suggestions.join(", ")}?` : "";
+        super(
+          `${E_UNKNOWN_FLAG}: unknown flag '${input2.flag}' for '${input2.command}'.${suggestionPart}`
+        );
+        this.name = "UnknownFlagError";
+        this.flag = input2.flag;
+        this.command = input2.command;
+        this.suggestions = input2.suggestions;
+        this.knownFlags = input2.knownFlags;
+        this.fix = input2.suggestions.length > 0 ? `Try one of: ${input2.suggestions.join(", ")}. Run \`cleo ${input2.command} --help\` for the full flag list.` : `Run \`cleo ${input2.command} --help\` for the full flag list.`;
+      }
+    };
+  }
+});
+
 // packages/cleo/src/viewer/pidfile.ts
 import { mkdir, readFile as readFile2, unlink, writeFile } from "node:fs/promises";
-import { dirname as dirname6, join as join18 } from "node:path";
+import { dirname as dirname6, join as join19 } from "node:path";
 import { getCleoHome as getCleoHome2 } from "@cleocode/core/internal";
 function viewerPidFilePath() {
-  return join18(getCleoHome2(), "viewer.pid");
+  return join19(getCleoHome2(), "viewer.pid");
 }
 async function writeViewerPidFile(record) {
   const path6 = viewerPidFilePath();
@@ -41527,11 +42049,11 @@ var init_port_allocator = __esm({
 // packages/cleo/src/viewer/server.ts
 import { createReadStream } from "node:fs";
 import { stat } from "node:fs/promises";
-import { dirname as dirname7, join as join19, normalize, resolve as resolve4 } from "node:path";
+import { dirname as dirname7, join as join20, normalize, resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import {
   createAttachmentStore as createAttachmentStore5,
-  getProjectRoot as getProjectRoot29,
+  getProjectRoot as getProjectRoot30,
   searchAllProjectDocs
 } from "@cleocode/core/internal";
 function getViewerAssetsDir() {
@@ -41566,7 +42088,7 @@ function inferTitle(markdown, fallback) {
 }
 async function serveStatic(res, assetsDir, relPath) {
   const safeRel = normalize(relPath).replace(/^[\\/]+/, "");
-  const absPath = join19(assetsDir, safeRel);
+  const absPath = join20(assetsDir, safeRel);
   const resolvedAssets = resolve4(assetsDir) + "/";
   const resolvedAbs = resolve4(absPath);
   if (`${resolvedAbs}/`.indexOf(resolvedAssets) !== 0 && resolvedAbs !== resolve4(assetsDir)) {
@@ -41591,7 +42113,7 @@ async function serveStatic(res, assetsDir, relPath) {
   }
 }
 function buildViewerHandler(opts = {}) {
-  const projectRoot = opts.projectRoot ?? getProjectRoot29();
+  const projectRoot = opts.projectRoot ?? getProjectRoot30();
   const assetsDir = getViewerAssetsDir();
   const store = createAttachmentStore5();
   return async (req, res) => {
@@ -41767,12 +42289,12 @@ var init_server = __esm({
 // packages/cleo/src/cli/commands/docs-viewer.ts
 import { spawn } from "node:child_process";
 import { open as fsOpen } from "node:fs/promises";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
-import { getCleoHome as getCleoHome3, getProjectRoot as getProjectRoot30 } from "@cleocode/core";
+import { getCleoHome as getCleoHome3, getProjectRoot as getProjectRoot31 } from "@cleocode/core";
 function getCleoBinPath() {
   const thisFile = fileURLToPath5(import.meta.url);
-  return join20(thisFile, "..", "..", "index.js");
+  return join21(thisFile, "..", "..", "index.js");
 }
 async function waitForExit(pid, timeoutMs, intervalMs = 100) {
   const deadline = Date.now() + timeoutMs;
@@ -41801,7 +42323,7 @@ function openInBrowser(url) {
   }
 }
 async function spawnDetachedServer(opts) {
-  const logFile = join20(getCleoHome3(), "viewer.log");
+  const logFile = join21(getCleoHome3(), "viewer.log");
   const handle = await fsOpen(logFile, "a").catch(() => null);
   const stdio = handle ? ["ignore", handle.fd, handle.fd] : ["ignore", "ignore", "ignore"];
   const args = [
@@ -41820,7 +42342,7 @@ async function spawnDetachedServer(opts) {
     detached: true,
     stdio,
     env: { ...process.env, [DETACHED_CHILD_ENV]: "1" },
-    cwd: getProjectRoot30()
+    cwd: getProjectRoot31()
   });
   child.unref();
   if (handle) await handle.close();
@@ -41972,7 +42494,7 @@ var init_docs_viewer = __esm({
           pid: process.pid,
           port: handle.port,
           host: handle.host,
-          projectRoot: getProjectRoot30(),
+          projectRoot: getProjectRoot31(),
           startedAt: Date.now()
         };
         await writeViewerPidFile(record);
@@ -42248,7 +42770,7 @@ __export(docs_exports, {
   docsCommand: () => docsCommand
 });
 import { appendFile, mkdir as mkdir2, readdir, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname8, isAbsolute as isAbsolute2, join as join21, resolve as resolve5 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute2, join as join22, resolve as resolve5 } from "node:path";
 import {
   buildDocsGraph,
   CleoError as CleoError3,
@@ -42256,7 +42778,7 @@ import {
   createAttachmentStoreDocsAccessor,
   exportDocument,
   getAgentOutputsAbsolute,
-  getProjectRoot as getProjectRoot31,
+  getProjectRoot as getProjectRoot32,
   listDocVersions,
   makeClassifierForScanRoot,
   mergeDocs,
@@ -42272,7 +42794,7 @@ import {
   syncFromGit
 } from "@cleocode/core/internal";
 async function getScriptNames(projectRoot) {
-  const scriptsDir = join21(projectRoot, "scripts");
+  const scriptsDir = join22(projectRoot, "scripts");
   try {
     const files = await readdir(scriptsDir);
     return files.filter((f) => f.endsWith(".sh")).map((f) => f.replace(".sh", "")).sort();
@@ -42281,7 +42803,7 @@ async function getScriptNames(projectRoot) {
   }
 }
 async function getIndexedCommands(projectRoot) {
-  const indexPath = join21(projectRoot, "docs", "commands", "COMMANDS-INDEX.json");
+  const indexPath = join22(projectRoot, "docs", "commands", "COMMANDS-INDEX.json");
   const index = await readJson(indexPath);
   if (!index) return [];
   return index.commands.map((c) => c.name).sort();
@@ -42314,7 +42836,7 @@ async function runGapCheck(_projectRoot, filterId) {
     const reviewFiles = files.filter((f) => f.endsWith(".md"));
     for (const file of reviewFiles) {
       if (filterId && !file.includes(filterId)) continue;
-      const filePath = join21(reviewDir, file);
+      const filePath = join22(reviewDir, file);
       const content = await readFile3(filePath, "utf-8");
       const taskMatch = file.match(/^(T\d+)/);
       const taskId = taskMatch ? taskMatch[1] : "UNKNOWN";
@@ -42365,12 +42887,13 @@ var init_docs3 = __esm({
     init_src2();
     init_dist();
     init_cli();
+    init_strict_args();
     init_renderers();
     init_docs_viewer();
     addCommand5 = defineCommand({
       meta: {
         name: "add",
-        description: "Attach a local file or remote URL to a CLEO entity (task, session, observation). Owner type is inferred from the ID prefix: T### \u2192 task, ses_* \u2192 session, O-* \u2192 observation. Use --slug to set a human-friendly alias (unique per project) (T9636)."
+        description: 'Attach a local file or remote URL to a CLEO entity (task, session, observation). Owner type is inferred from the ID prefix: T### \u2192 task, ses_* \u2192 session, O-* \u2192 observation. Use --slug to set a human-friendly alias (unique per project) (T9636).\n\nPositional arguments:\n  <owner-id>             Owner entity ID (T###, ses_*, O-*) \u2014 required\n  [file]                 Local file path to attach \u2014 optional when --url is set\n\nNamed arguments:\n  --url <url>            Remote URL to attach (instead of a local file)\n  --desc <text>          Free-text description of this attachment\n  --labels <csv>         Comma-separated labels (e.g. rfc,spec)\n  --attached-by <name>   Agent identity that created the attachment (default: "human")\n  --slug <kebab>         Human-friendly alias, unique per project (T9636)\n  --type <kind>          Taxonomy classification \u2014 run `cleo docs list-types` for kinds\n\nUnknown flags are rejected with E_UNKNOWN_FLAG + did-you-mean suggestions (T10359).'
       },
       args: {
         "owner-id": {
@@ -42408,7 +42931,21 @@ var init_docs3 = __esm({
           description: "Taxonomy classification \u2014 run `cleo docs list-types` to enumerate registered kinds (T9637 / T9788)"
         }
       },
-      async run({ args }) {
+      async run({ args, rawArgs }) {
+        try {
+          assertKnownFlags(rawArgs, addCommand5.args, "docs add");
+        } catch (err) {
+          if (err instanceof UnknownFlagError) {
+            cliError(err.message, 6 /* VALIDATION_ERROR */, {
+              name: err.code,
+              fix: err.fix,
+              alternatives: err.suggestions.map((s) => ({ action: s, command: s })),
+              details: { flag: err.flag, knownFlags: err.knownFlags }
+            });
+            process.exit(6 /* VALIDATION_ERROR */);
+          }
+          throw err;
+        }
         const ownerId = args["owner-id"];
         const fileArg = args.file ?? void 0;
         const url = args.url ?? void 0;
@@ -42642,7 +43179,7 @@ var init_docs3 = __esm({
         const taskId = String(args.task);
         const includeAttachments = args["include-attachments"] !== false;
         const includeMemoryRefs = args["include-memory-refs"] === true;
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         try {
           const result = await exportDocument({
             taskId,
@@ -42708,7 +43245,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         const limit = args.limit ? Number.parseInt(String(args.limit), 10) : 10;
         try {
           const result = args.owner ? await searchDocs2(String(args.query), {
@@ -42764,7 +43301,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         const rawStrategy = args.strategy ?? "three-way";
         const strategy = rawStrategy === "cherry-pick" || rawStrategy === "multi-diff" ? rawStrategy : "three-way";
         try {
@@ -42813,7 +43350,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         const fmt = args.format ?? "mermaid";
         try {
           const result = await buildDocsGraph({ ownerId: String(args.for), projectRoot });
@@ -42882,7 +43419,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         try {
           const result = await rankDocs({
             ownerId: String(args.for),
@@ -42920,7 +43457,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         try {
           const result = await listDocVersions({
             ownerId: String(args.for),
@@ -42963,7 +43500,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         try {
           const result = await publishDocs({
             ownerId: String(args.for),
@@ -43087,7 +43624,7 @@ var init_docs3 = __esm({
       },
       async run({ args }) {
         if (args.from) {
-          const projectRoot = getProjectRoot31();
+          const projectRoot = getProjectRoot32();
           const ownerId = args.for ?? void 0;
           if (!ownerId) {
             cliError(
@@ -43154,7 +43691,7 @@ var init_docs3 = __esm({
         }
       },
       async run() {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         try {
           const result = await statusDocs({ projectRoot });
           cliOutput(result, { command: "docs status", operation: "docs.status" });
@@ -43239,7 +43776,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         const dirArg = String(args.dir);
         const scanRoot = isAbsolute2(dirArg) ? dirArg : resolve5(projectRoot, dirArg);
         const dryRun = args["dry-run"] === true;
@@ -43253,9 +43790,9 @@ var init_docs3 = __esm({
           })}
 `;
           try {
-            await mkdir2(join21(projectRoot, ".cleo", "audit"), { recursive: true });
+            await mkdir2(join22(projectRoot, ".cleo", "audit"), { recursive: true });
             await appendFile(
-              join21(projectRoot, ".cleo", "audit", "import-force-bypass.jsonl"),
+              join22(projectRoot, ".cleo", "audit", "import-force-bypass.jsonl"),
               auditLine,
               "utf-8"
             );
@@ -43313,7 +43850,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         const { registry, configError } = loadCliRegistry(projectRoot);
         const kinds = registry.list().map(toWireKind);
         const extensionsCount = kinds.filter((k) => k.isExtension).length;
@@ -43357,7 +43894,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot32();
         const { registry, configError } = loadCliRegistry(projectRoot);
         const kinds = registry.list().map(toWireKind);
         let counts2;
@@ -43699,6 +44236,66 @@ ${this.prefix}: \u2717 ${message}
   }
 });
 
+// packages/cleo/src/cli/commands/doctor-db-substrate.ts
+import { getProjectRoot as getProjectRoot33, pushWarning as pushWarning2 } from "@cleocode/core";
+import { surveyDbSubstrate, surveyFleetDbSubstrate } from "@cleocode/core/doctor/db-substrate.js";
+function pushSubstrateWarnings(result) {
+  for (const warning of result.warnings) {
+    pushWarning2({
+      code: warning.kind === "orphan-project-root" ? "W_DB_SUBSTRATE_ORPHAN_PROJECT_ROOT" : "W_DB_SUBSTRATE_NESTED_NEXUS_DUPLICATE",
+      message: warning.kind === "orphan-project-root" ? `Orphan project-root .cleo/ at ${warning.path} (T9550 regression class \u2014 review then remove)` : `Nested-nexus duplicate at ${warning.path} (structural duplicate of the canonical flat layout)`,
+      severity: "warn",
+      context: {
+        kind: warning.kind,
+        path: warning.path,
+        lastWriteMs: warning.lastWriteMs
+      }
+    });
+  }
+}
+var DEFAULT_FLEET_ROOT, doctorDbSubstrateCommand;
+var init_doctor_db_substrate = __esm({
+  "packages/cleo/src/cli/commands/doctor-db-substrate.ts"() {
+    "use strict";
+    init_define_cli_command();
+    init_renderers();
+    DEFAULT_FLEET_ROOT = "/mnt/projects";
+    doctorDbSubstrateCommand = defineCommand({
+      meta: {
+        name: "db-substrate",
+        description: "Walk every DB in the inventory + report integrity, row counts, orphan dirs. Use --fleet for a multi-project survey under --fleet-root (default /mnt/projects)."
+      },
+      args: {
+        fleet: {
+          type: "boolean",
+          description: "Multi-project survey \u2014 walk every .cleo/-bearing subdir under --fleet-root"
+        },
+        "fleet-root": {
+          type: "string",
+          description: "Fleet root path (default: /mnt/projects). Only used with --fleet."
+        },
+        json: { type: "boolean", description: "Output as JSON" },
+        human: { type: "boolean", description: "Force human-readable output" },
+        quiet: { type: "boolean", description: "Suppress non-essential output" }
+      },
+      async run({ args }) {
+        const isFleet = args.fleet === true;
+        const result = isFleet ? surveyFleetDbSubstrate(
+          typeof args["fleet-root"] === "string" && args["fleet-root"].length > 0 ? args["fleet-root"] : DEFAULT_FLEET_ROOT
+        ) : surveyDbSubstrate(getProjectRoot33());
+        pushSubstrateWarnings(result);
+        cliOutput(result, {
+          command: "doctor",
+          operation: "doctor.db-substrate.run"
+        });
+        if (result.summary.corrupt > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
+          process.exitCode = 2;
+        }
+      }
+    });
+  }
+});
+
 // packages/cleo/src/cli/commands/migrate-agents-v2.ts
 var migrate_agents_v2_exports = {};
 __export(migrate_agents_v2_exports, {
@@ -43710,8 +44307,8 @@ __export(migrate_agents_v2_exports, {
 });
 import { createHash as createHash2 } from "node:crypto";
 import { appendFileSync as appendFileSync2, existsSync as existsSync14, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync14 } from "node:fs";
-import { join as join22 } from "node:path";
-import { getProjectRoot as getProjectRoot32, installAgentFromCant } from "@cleocode/core/internal";
+import { join as join23 } from "node:path";
+import { getProjectRoot as getProjectRoot34, installAgentFromCant } from "@cleocode/core/internal";
 import { openCleoDb as openCleoDb2 } from "@cleocode/core/store/open-cleo-db";
 function sha256Hex(bytes) {
   return createHash2("sha256").update(bytes).digest("hex");
@@ -43730,8 +44327,8 @@ function extractAgentName(source) {
   return headerMatch[1] ?? null;
 }
 function appendAuditLog(projectRoot, entry) {
-  const auditPath = join22(projectRoot, AUDIT_LOG_RELATIVE);
-  const auditDir = join22(auditPath, "..");
+  const auditPath = join23(projectRoot, AUDIT_LOG_RELATIVE);
+  const auditDir = join23(auditPath, "..");
   if (!existsSync14(auditDir)) {
     mkdirSync3(auditDir, { recursive: true });
   }
@@ -43749,7 +44346,7 @@ function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
     return;
   }
   for (const filename of files) {
-    const cantPath = join22(scanDir, filename);
+    const cantPath = join23(scanDir, filename);
     const relPath = cantPath.replace(`${projectRoot}/`, "");
     let sourceBytes;
     let sourceText;
@@ -43846,9 +44443,9 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
   const { db: _sdDb } = await openCleoDb2("signaldock");
   const db = _sdDb;
   try {
-    const canonicalDir = join22(projectRoot, ".cleo", "cant", "agents");
+    const canonicalDir = join23(projectRoot, ".cleo", "cant", "agents");
     walkAgentsDir(db, canonicalDir, projectRoot, summary, verbose);
-    const legacyDir = join22(projectRoot, ".cleo", "agents");
+    const legacyDir = join23(projectRoot, ".cleo", "agents");
     walkAgentsDir(db, legacyDir, projectRoot, summary, verbose);
   } finally {
     db.close();
@@ -43856,7 +44453,7 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
   return summary;
 }
 function readMigrationConflicts(projectRoot) {
-  const auditPath = join22(projectRoot, AUDIT_LOG_RELATIVE);
+  const auditPath = join23(projectRoot, AUDIT_LOG_RELATIVE);
   if (!existsSync14(auditPath)) return [];
   let raw;
   try {
@@ -43898,7 +44495,7 @@ var init_migrate_agents_v2 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot34();
         const verbose = args.quiet !== true;
         if (verbose) {
           humanInfo("Scanning .cleo/cant/agents/ and .cleo/agents/ for unregistered agents...");
@@ -43941,8 +44538,8 @@ __export(doctor_exports, {
   doctorCommand: () => doctorCommand2
 });
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join23 } from "node:path";
-import { getProjectRoot as getProjectRoot33, pushWarning as pushWarning2 } from "@cleocode/core";
+import { join as join24 } from "node:path";
+import { getProjectRoot as getProjectRoot35, pushWarning as pushWarning3 } from "@cleocode/core";
 import {
   quarantineRogueCleoDir,
   scanRogueCleoDirs
@@ -43980,8 +44577,8 @@ async function scanTestFixturesInProd(projectRoot) {
 }
 async function quarantineTestFixtures(projectRoot, matches) {
   if (matches.length === 0) return 0;
-  const cleoDir = join23(projectRoot, ".cleo");
-  const quarantineDir = join23(
+  const cleoDir = join24(projectRoot, ".cleo");
+  const quarantineDir = join24(
     cleoDir,
     "quarantine",
     `fixture-scan-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`
@@ -43989,7 +44586,7 @@ async function quarantineTestFixtures(projectRoot, matches) {
   mkdirSync4(quarantineDir, { recursive: true });
   const manifest = matches.map((m) => ({ ...m, quarantinedAt: (/* @__PURE__ */ new Date()).toISOString() }));
   writeFileSync4(
-    join23(quarantineDir, "manifest.jsonl"),
+    join24(quarantineDir, "manifest.jsonl"),
     manifest.map((m) => JSON.stringify(m)).join("\n") + "\n"
   );
   const { getNativeDb } = await import("@cleocode/core/store/sqlite.js");
@@ -44049,8 +44646,10 @@ var init_doctor = __esm({
     "use strict";
     init_dist();
     init_cli();
+    init_subcommand_guard();
     init_progress();
     init_renderers();
+    init_doctor_db_substrate();
     init_doctor_projects();
     init_migrate_agents_v2();
     FIXTURE_ID_PATTERNS = [/^E\d+$/, /^T\d+EP$/];
@@ -44062,6 +44661,10 @@ var init_doctor = __esm({
     ];
     doctorCommand2 = defineCommand({
       meta: { name: "doctor", description: "Run system diagnostics and health checks" },
+      subCommands: {
+        // T10307 / Saga T10281 / Epic T10282 — DB-substrate walker
+        "db-substrate": doctorDbSubstrateCommand
+      },
       args: {
         detailed: {
           type: "boolean",
@@ -44220,14 +44823,15 @@ var init_doctor = __esm({
           description: "Suppress non-essential output"
         }
       },
-      async run({ args }) {
+      async run({ args, cmd, rawArgs }) {
+        if (isSubCommandDispatch(rawArgs, cmd.subCommands)) return;
         const isHuman = args.human === true || !!process.stdout.isTTY && args.json !== true;
         const progress = createDoctorProgress(isHuman);
         progress.start();
         try {
           if (args.brain) {
             const { computeBrainHealthDashboard } = await import("@cleocode/core/memory/brain-health-dashboard.js");
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const dashboard = await computeBrainHealthDashboard(projectRoot);
             cliOutput(dashboard, { command: "doctor", operation: "doctor.brain" });
             if (dashboard.hasP0Failure) {
@@ -44236,7 +44840,7 @@ var init_doctor = __esm({
             return;
           }
           if (args["scan-test-fixtures-in-prod"]) {
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const matches = await scanTestFixturesInProd(projectRoot);
             const dryRun = args["dry-run"] !== false && args.quarantine !== true;
             const quarantined = !dryRun && matches.length > 0 ? await quarantineTestFixtures(projectRoot, matches) : void 0;
@@ -44324,7 +44928,7 @@ var init_doctor = __esm({
             progress.complete("Comprehensive diagnostics complete");
           } else if (args["scan-rogue-cleo-dirs"]) {
             progress.step(0, "Scanning for rogue .cleo/ directories");
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const reports = scanRogueCleoDirs(projectRoot);
             progress.complete(
               `Found ${reports.length} rogue .cleo/ director${reports.length === 1 ? "y" : "ies"}`
@@ -44333,7 +44937,7 @@ var init_doctor = __esm({
           } else if (args["quarantine-rogue-cleo-dirs"]) {
             const isDryRun = args["dry-run"] === true;
             progress.step(0, `${isDryRun ? "[DRY RUN] " : ""}Scanning for rogue .cleo/ directories`);
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const reports = scanRogueCleoDirs(projectRoot);
             if (reports.length === 0) {
               progress.complete("No rogue .cleo/ directories found \u2014 nothing to quarantine");
@@ -44387,7 +44991,7 @@ var init_doctor = __esm({
             const { detectAndRemoveLegacyGlobalFiles, detectAndRemoveStrayProjectNexus } = await import("@cleocode/core/store/cleanup-legacy.js");
             const { getCleoHome: getCleoHome6 } = await import("@cleocode/core");
             const cleoHome = getCleoHome6();
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const legacyResult = detectAndRemoveLegacyGlobalFiles(cleoHome);
             const strayResult = detectAndRemoveStrayProjectNexus(projectRoot);
             const isDryRun = args["dry-run"] === true;
@@ -44420,7 +45024,7 @@ var init_doctor = __esm({
           } else if (args["audit-worktree-orphans"]) {
             progress.step(0, "Comprehensive worktree anomaly audit (T9808 / council D009)");
             const { auditWorktreeOrphansComprehensive, scanWorktreeOrphansBudgeted } = await import("@cleocode/core/doctor/worktree-orphans.js");
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const timeoutSecs = args["timeout"] !== void 0 ? Number.parseInt(String(args["timeout"]), 10) : 30;
             const timeoutMs = Number.isFinite(timeoutSecs) && timeoutSecs > 0 ? timeoutSecs * 1e3 : 3e4;
             const maxEntriesPerLevel = args["max-entries-per-level"] !== void 0 ? Number.parseInt(String(args["max-entries-per-level"]), 10) : 500;
@@ -44434,7 +45038,7 @@ var init_doctor = __esm({
             const legacyOrphans = legacyScanResult.orphans;
             const totalAnomalies = comprehensive.count;
             if (legacyScanResult.softWarnMessage) {
-              pushWarning2({
+              pushWarning3({
                 code: "W_DOCTOR_SCAN_SOFT_WARN",
                 message: legacyScanResult.softWarnMessage,
                 severity: "warn"
@@ -44442,7 +45046,7 @@ var init_doctor = __esm({
             }
             if (legacyScanResult.isPartial) {
               const reason = legacyScanResult.partialReason === "timeout" ? `timed out after ${timeoutSecs}s (use --timeout <seconds> to adjust)` : `per-level entry cap of ${maxEntriesPerLevel} exceeded (use --max-entries-per-level <n> to adjust)`;
-              pushWarning2({
+              pushWarning3({
                 code: "W_DOCTOR_SCAN_PARTIAL",
                 message: `legacy orphan scan is PARTIAL \u2014 ${reason}. Results may be incomplete.`,
                 severity: "warn",
@@ -44477,7 +45081,7 @@ var init_doctor = __esm({
               `${isDryRun ? "[DRY RUN] " : ""}Scanning + pruning worktree-orphan .cleo/ directories`
             );
             const { pruneWorktreeOrphans, scanWorktreeOrphansBudgeted } = await import("@cleocode/core/doctor/worktree-orphans.js");
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const timeoutSecs = args["timeout"] !== void 0 ? Number.parseInt(String(args["timeout"]), 10) : 30;
             const timeoutMs = Number.isFinite(timeoutSecs) && timeoutSecs > 0 ? timeoutSecs * 1e3 : 3e4;
             const maxEntriesPerLevel = args["max-entries-per-level"] !== void 0 ? Number.parseInt(String(args["max-entries-per-level"]), 10) : 500;
@@ -44486,7 +45090,7 @@ var init_doctor = __esm({
               maxEntriesPerLevel: Number.isFinite(maxEntriesPerLevel) ? maxEntriesPerLevel : 500
             });
             if (scanResult.softWarnMessage) {
-              pushWarning2({
+              pushWarning3({
                 code: "W_DOCTOR_SCAN_SOFT_WARN",
                 message: scanResult.softWarnMessage,
                 severity: "warn"
@@ -44494,7 +45098,7 @@ var init_doctor = __esm({
             }
             if (scanResult.isPartial) {
               const reason = scanResult.partialReason === "timeout" ? `timed out after ${timeoutSecs}s (use --timeout <seconds> to adjust)` : `per-level entry cap of ${maxEntriesPerLevel} exceeded (use --max-entries-per-level <n> to adjust)`;
-              pushWarning2({
+              pushWarning3({
                 code: "W_DOCTOR_SCAN_PARTIAL",
                 message: `orphan scan is PARTIAL \u2014 ${reason}. Only orphans found before abort will be pruned.`,
                 severity: "warn",
@@ -44525,8 +45129,8 @@ var init_doctor = __esm({
               );
               return;
             }
-            const archiveDir = join23(projectRoot, ".cleo", "backups");
-            const auditLogPath = join23(projectRoot, ".cleo", "audit", "worktree-prune.jsonl");
+            const archiveDir = join24(projectRoot, ".cleo", "backups");
+            const auditLogPath = join24(projectRoot, ".cleo", "audit", "worktree-prune.jsonl");
             const result = await pruneWorktreeOrphans(orphans, {
               archiveDir,
               auditLogPath,
@@ -44556,7 +45160,7 @@ var init_doctor = __esm({
               `${isDryRun ? "[DRY RUN] " : ""}Migrating .cleo/worktree-include \u2192 .worktreeinclude`
             );
             const { migrateWorktreeIncludeFile } = await import("@cleocode/core");
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const result = await migrateWorktreeIncludeFile(projectRoot, { dryRun: isDryRun });
             progress.complete(`Migration ${result.action}`);
             cliOutput(result, { command: "doctor", operation: "doctor.migrate-worktree-include" });
@@ -44572,7 +45176,7 @@ var init_doctor = __esm({
           } else if (args["audit-sagas"]) {
             progress.step(0, "Auditing Saga hierarchy for ADR-073 invariants");
             const { auditSagaHierarchy } = await import("@cleocode/core/doctor/saga-audit.js");
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot35();
             const result = await auditSagaHierarchy(projectRoot);
             const summary = `Saga audit complete \u2014 ${result.sagas.length} saga(s) inspected, ${result.count} invariant violation(s), ${result.driftCount} drift warning(s)`;
             progress.complete(summary);
@@ -44590,7 +45194,7 @@ var init_doctor = __esm({
               { command: "doctor", operation: "admin.health" }
             );
             try {
-              const projectRoot = getProjectRoot33();
+              const projectRoot = getProjectRoot35();
               const conflicts = readMigrationConflicts(projectRoot);
               if (conflicts.length > 0) {
                 progress.complete(
@@ -44621,7 +45225,7 @@ var init_doctor = __esm({
               progress.complete("Health check complete");
             }
             try {
-              const projectRoot = getProjectRoot33();
+              const projectRoot = getProjectRoot35();
               const { auditSagaHierarchy } = await import("@cleocode/core/doctor/saga-audit.js");
               const sagaAudit = await auditSagaHierarchy(projectRoot);
               if (sagaAudit.sagas.length === 0) {
@@ -44683,7 +45287,7 @@ __export(event_exports, {
   orchestratorCommand: () => orchestratorCommand
 });
 import { readdir as readdir2 } from "node:fs/promises";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 import { cwd as processCwd } from "node:process";
 import { appendEvent } from "@cleocode/core/events/event-bus.js";
 function resolveProjectRoot3(arg) {
@@ -44806,7 +45410,7 @@ var init_event = __esm({
         const agentIdFilter = args.agent;
         const showAll = args.all === true;
         const lines = parseInt(args.lines ?? "20", 10);
-        const eventsDir = join24(projectRoot, ".cleo", "agent-events");
+        const eventsDir = join25(projectRoot, ".cleo", "agent-events");
         try {
           let files = [];
           try {
@@ -44844,7 +45448,7 @@ var init_event = __esm({
           for (const file of filesToTail) {
             const agentId = file.replace(".jsonl", "");
             const { readFileSync: readFileSync18 } = await import("node:fs");
-            const content = readFileSync18(join24(eventsDir, file), "utf-8");
+            const content = readFileSync18(join25(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -44914,7 +45518,7 @@ var init_event = __esm({
         const epicFilter = args.epic;
         const follow = args.follow === true;
         const lines = parseInt(args.lines ?? "50", 10);
-        const eventsDir = join24(projectRoot, ".cleo", "agent-events");
+        const eventsDir = join25(projectRoot, ".cleo", "agent-events");
         let files = [];
         try {
           const entries = await readdir2(eventsDir);
@@ -44940,7 +45544,7 @@ var init_event = __esm({
           const agentId = file.replace(".jsonl", "");
           try {
             const { readFileSync: readFileSync18 } = await import("node:fs");
-            const content = readFileSync18(join24(eventsDir, file), "utf-8");
+            const content = readFileSync18(join25(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -45479,7 +46083,7 @@ __export(gc_exports, {
   gcCommand: () => gcCommand
 });
 import { homedir as homedir4, tmpdir } from "node:os";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 import { pruneOrphanTempDirs, pruneOrphanWorktrees } from "@cleocode/core/gc/cleanup.js";
 import { runGC } from "@cleocode/core/gc/runner.js";
 import { readGCState } from "@cleocode/core/gc/state.js";
@@ -45562,7 +46166,7 @@ var init_gc = __esm({
       },
       async run({ args }) {
         const cleoDir = resolveLegacyCleoDir3(args["cleo-dir"]);
-        const statePath = join25(cleoDir, "gc-state.json");
+        const statePath = join26(cleoDir, "gc-state.json");
         try {
           const state = await readGCState(statePath);
           const diskStr = state.lastDiskUsedPct !== null ? `${state.lastDiskUsedPct.toFixed(1)}%` : "unknown";
@@ -45615,8 +46219,8 @@ var init_gc = __esm({
         }
       },
       async run({ args }) {
-        const xdgData = process.env["XDG_DATA_HOME"] ?? join25(homedir4(), ".local", "share");
-        const worktreesRoot = args["worktrees-root"] ?? join25(xdgData, "cleo", "worktrees");
+        const xdgData = process.env["XDG_DATA_HOME"] ?? join26(homedir4(), ".local", "share");
+        const worktreesRoot = args["worktrees-root"] ?? join26(xdgData, "cleo", "worktrees");
         const projectHash = args["project-hash"];
         const dryRun = args["dry-run"];
         const preserveRaw = args["preserve-tasks"];
@@ -46829,7 +47433,7 @@ __export(init_exports, {
   initCommand: () => initCommand2
 });
 import { existsSync as existsSync15, readFileSync as readFileSync15 } from "node:fs";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 import {
   CleoError as CleoError4,
@@ -46841,9 +47445,9 @@ import {
 function getGitignoreTemplate() {
   try {
     const thisFile = fileURLToPath6(import.meta.url);
-    const packageRoot = join26(thisFile, "..", "..", "..", "..");
-    const localTemplatePath = join26(packageRoot, "templates", "cleo-gitignore");
-    const monorepoTemplatePath = join26(packageRoot, "..", "..", "templates", "cleo-gitignore");
+    const packageRoot = join27(thisFile, "..", "..", "..", "..");
+    const localTemplatePath = join27(packageRoot, "templates", "cleo-gitignore");
+    const monorepoTemplatePath = join27(packageRoot, "..", "..", "templates", "cleo-gitignore");
     const templatePath = existsSync15(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
     if (existsSync15(templatePath)) {
       return readFileSync15(templatePath, "utf-8");
@@ -47768,7 +48372,7 @@ var llm_cost_exports = {};
 __export(llm_cost_exports, {
   costCommand: () => costCommand
 });
-import { getProjectRoot as getProjectRoot34 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot36 } from "@cleocode/core/internal";
 import { computeCost } from "@cleocode/core/llm/usage-pricing";
 function resolveSessionId(raw) {
   if (raw === "current") {
@@ -47841,7 +48445,7 @@ var init_llm_cost = __esm({
           process.exit(6);
         }
         const sessionId = resolveSessionId(rawSessionId);
-        const projectRoot = getProjectRoot34(process.cwd());
+        const projectRoot = getProjectRoot36(process.cwd());
         let breakdown;
         try {
           breakdown = await loadSessionCostBreakdown(projectRoot, sessionId);
@@ -48482,7 +49086,7 @@ var llm_exports = {};
 __export(llm_exports, {
   llmCommand: () => llmCommand
 });
-import { pushWarning as pushWarning3 } from "@cleocode/core";
+import { pushWarning as pushWarning4 } from "@cleocode/core";
 async function getListProviders() {
   const { listProviders } = await import(
     /* webpackIgnore: true */
@@ -48613,7 +49217,7 @@ var init_llm3 = __esm({
           apiKey = envValue;
           source = "env";
         } else if (typeof a["api-key"] === "string" && a["api-key"]) {
-          pushWarning3({
+          pushWarning4({
             code: "W_DEPRECATED_FLAG",
             message: API_KEY_FLAG_DEPRECATION,
             deprecated: "--api-key=<value>",
@@ -49388,7 +49992,7 @@ var memory_exports = {};
 __export(memory_exports, {
   memoryCommand: () => memoryCommand
 });
-import { getProjectRoot as getProjectRoot35 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot37 } from "@cleocode/core";
 import {
   getBrainDb as getBrainDb2,
   getDreamStatus,
@@ -50312,7 +50916,7 @@ var init_memory3 = __esm({
       },
       args: {},
       async run() {
-        const root = getProjectRoot35();
+        const root = getProjectRoot37();
         try {
           const result = await runConsolidation(root);
           cliOutput(result, { command: "memory-consolidate", operation: "memory.consolidate" });
@@ -50336,7 +50940,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot35();
+        const root = getProjectRoot37();
         if (args.status) {
           try {
             const status = await getDreamStatus(root);
@@ -50373,7 +50977,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot35();
+        const root = getProjectRoot37();
         try {
           const { runObserver, runReflector } = await import("@cleocode/core/memory");
           const observerResult = await runObserver(root, args.session, {
@@ -50413,7 +51017,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot35();
+        const root = getProjectRoot37();
         try {
           await getBrainDb2(root);
           const { totalDuplicateRows, groups } = await scanDuplicateEntries();
@@ -50459,7 +51063,7 @@ var init_memory3 = __esm({
       async run({ args }) {
         const sourceDir = args.from;
         const isDryRun = !!args["dry-run"];
-        const projectRoot = getProjectRoot35();
+        const projectRoot = getProjectRoot37();
         try {
           const result = await importMemoryFiles({
             sourceDir,
@@ -50610,7 +51214,7 @@ var init_memory3 = __esm({
       },
       args: {},
       async run() {
-        const root = getProjectRoot35();
+        const root = getProjectRoot37();
         try {
           await getBrainDb2(root);
           const result = await getTierStats(root);
@@ -50653,7 +51257,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot35();
+        const root = getProjectRoot37();
         const targetTier = args.to;
         const reason = args.reason;
         const validTiers = ["medium", "long"];
@@ -50719,7 +51323,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot35();
+        const root = getProjectRoot37();
         const targetTier = args.to;
         const reason = args.reason;
         const validTiers = ["short", "medium"];
@@ -51179,7 +51783,7 @@ var migrate_claude_mem_exports = {};
 __export(migrate_claude_mem_exports, {
   migrateClaudeMemCommand: () => migrateClaudeMemCommand
 });
-import { getProjectRoot as getProjectRoot36, migrateClaudeMem } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot38, migrateClaudeMem } from "@cleocode/core/internal";
 import { ingestLooseAgentOutputs, ingestRcasdDirectories } from "@cleocode/core/memory";
 import { getDb as getDb2 } from "@cleocode/core/store/sqlite";
 var storageCommand, claudeMemCommand, manifestIngestCommand, migrateClaudeMemCommand;
@@ -51242,7 +51846,7 @@ var init_migrate_claude_mem = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot36();
+        const root = getProjectRoot38();
         try {
           const result = await migrateClaudeMem(root, {
             sourcePath: args.source,
@@ -51291,7 +51895,7 @@ var init_migrate_claude_mem = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot36();
+        const projectRoot = getProjectRoot38();
         try {
           const db = await getDb2(projectRoot);
           const rcasdFlag = Boolean(args.rcasd);
@@ -51395,7 +51999,7 @@ __export(nexus_exports, {
 import { appendFile as appendFile2, mkdir as mkdir3 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import path4 from "node:path";
-import { getProjectRoot as getProjectRoot37 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot39 } from "@cleocode/core";
 import { getSymbolImpact } from "@cleocode/core/nexus";
 import { runNexusAnalysis } from "@cleocode/core/nexus/analyze-orchestrator.js";
 import { exportNexusGraph } from "@cleocode/core/nexus/export.js";
@@ -51510,7 +52114,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const startTime = Date.now();
         try {
           const [{ getNexusDb, nexusSchema }, { getIndexStats }] = await Promise.all([
@@ -52025,7 +52629,7 @@ var init_nexus3 = __esm({
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "clusters", { projectId, repoPath });
         const durationMs = Date.now() - startTime;
@@ -52069,7 +52673,7 @@ var init_nexus3 = __esm({
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "flows", { projectId, repoPath });
         const durationMs = Date.now() - startTime;
@@ -52112,7 +52716,7 @@ var init_nexus3 = __esm({
         void appendDeprecationTelemetry("nexus.context", "cleo graph context");
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = getProjectRoot37();
+        const repoPath = getProjectRoot39();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const limit = parseInt(args.limit, 10);
         const symbolName = args.symbol;
@@ -52175,7 +52779,7 @@ var init_nexus3 = __esm({
         const startTime = Date.now();
         const whyFlag = !!args.why;
         const projectIdOverride = args["project-id"];
-        const repoPath = getProjectRoot37();
+        const repoPath = getProjectRoot39();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const maxDepth = Math.min(parseInt(args.depth, 10), 5);
         const symbolName = args.symbol;
@@ -52247,7 +52851,7 @@ var init_nexus3 = __esm({
         const projectIdOverride = args["project-id"];
         const isIncremental = !!args.incremental;
         const ctx = getFormatContext();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         humanInfo(`[nexus] Analyzing: ${repoPath}${isIncremental ? " (incremental)" : ""}`);
         if (!isIncremental) humanInfo("[nexus] Clearing existing index for project...");
         try {
@@ -52350,7 +52954,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const name = args.name;
         const response = await dispatchRaw("mutate", "nexus", "projects.register", {
           path: repoPath,
@@ -52708,7 +53312,7 @@ var init_nexus3 = __esm({
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "refresh-bridge", {
           repoPath,
@@ -52814,7 +53418,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const projectIdOverride = args["project-id"];
         const beforeRef = args.before ?? "HEAD~1";
         const afterRef = args.after ?? "HEAD";
@@ -52932,7 +53536,7 @@ var init_nexus3 = __esm({
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "route-map", { projectId });
         const durationMs = Date.now() - startTime;
@@ -52988,7 +53592,7 @@ var init_nexus3 = __esm({
         const startTime = Date.now();
         const routeSymbol = args.routeSymbol;
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "shape-check", { routeSymbol, projectId });
         const durationMs = Date.now() - startTime;
@@ -53378,7 +53982,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const projectIdOverride = args["project-id"];
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "contracts-sync", {
@@ -53482,7 +54086,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot37();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
         const projectId = Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "contracts-link-tasks", {
           projectId,
@@ -53563,7 +54167,7 @@ var init_nexus3 = __esm({
         const isIncremental = !!args.incremental;
         try {
           const result = await runNexusWiki({
-            projectRoot: getProjectRoot37(),
+            projectRoot: getProjectRoot39(),
             outputDir,
             communityFilter,
             incremental: isIncremental
@@ -55990,7 +56594,7 @@ var refresh_memory_exports = {};
 __export(refresh_memory_exports, {
   refreshMemoryCommand: () => refreshMemoryCommand
 });
-import { getProjectRoot as getProjectRoot38 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot40 } from "@cleocode/core";
 var refreshMemoryCommand;
 var init_refresh_memory = __esm({
   "packages/cleo/src/cli/commands/refresh-memory.ts"() {
@@ -56003,7 +56607,7 @@ var init_refresh_memory = __esm({
         description: "Regenerate .cleo/memory-bridge.md from brain.db"
       },
       async run() {
-        const projectDir = getProjectRoot38();
+        const projectDir = getProjectRoot40();
         const { writeMemoryBridge } = await import("@cleocode/core/internal");
         const result = await writeMemoryBridge(projectDir);
         if (result.written) {
@@ -56179,14 +56783,6 @@ var init_relates = __esm({
   }
 });
 
-// packages/cleo/src/cli/lib/define-cli-command.ts
-var init_define_cli_command = __esm({
-  "packages/cleo/src/cli/lib/define-cli-command.ts"() {
-    "use strict";
-    init_dist();
-  }
-});
-
 // packages/cleo/src/cli/commands/release/ship-e2e-smoke.ts
 import { release as release2 } from "@cleocode/core";
 var shipE2eSmokeCommand;
@@ -57412,7 +58008,7 @@ import fs3 from "node:fs";
 import path5 from "node:path";
 import {
   CleoError as CleoError7,
-  getProjectRoot as getProjectRoot39,
+  getProjectRoot as getProjectRoot41,
   getTaskAccessor as getTaskAccessor3,
   parseConflictReport,
   setAtPath
@@ -57433,7 +58029,7 @@ var init_restore = __esm({
         description: "Apply manually-resolved conflicts from .cleo/restore-conflicts.md"
       },
       async run() {
-        const projectRoot = getProjectRoot39();
+        const projectRoot = getProjectRoot41();
         const reportPath = path5.join(projectRoot, CLEO_DIR_NAME, RESTORE_CONFLICTS_MD);
         if (!fs3.existsSync(reportPath)) {
           humanLine("No pending restore conflicts. Nothing to finalize.");
@@ -57799,7 +58395,7 @@ __export(revert_exports, {
   revertCommand: () => revertCommand
 });
 import { readFile as readFile4 } from "node:fs/promises";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 import { cwd as processCwd2 } from "node:process";
 import { E_RECEIPT_NOT_FOUND } from "@cleocode/core/sentient/chain-walker.js";
 import { SENTIENT_STATE_FILE } from "@cleocode/core/sentient/daemon.js";
@@ -57852,7 +58448,7 @@ async function loadOwnerAttestation(attestationFilePath) {
   return obj;
 }
 async function loadOwnerPubkeys(projectRoot) {
-  const path6 = join27(projectRoot, OWNER_PUBKEYS_FILE);
+  const path6 = join28(projectRoot, OWNER_PUBKEYS_FILE);
   try {
     const raw = await readFile4(path6, "utf-8");
     const parsed = JSON.parse(raw);
@@ -57936,7 +58532,7 @@ var init_revert = __esm({
         if (attestation && allowedPubkeys.size > 0 && !allowedPubkeys.has(attestation.ownerPubkey)) {
           emitFailure2(
             E_OWNER_ATTESTATION_REQUIRED,
-            `Attestation pubkey "${attestation.ownerPubkey}" is not in the owner allowlist at ${join27(projectRoot, OWNER_PUBKEYS_FILE)}`,
+            `Attestation pubkey "${attestation.ownerPubkey}" is not in the owner allowlist at ${join28(projectRoot, OWNER_PUBKEYS_FILE)}`,
             jsonMode
           );
         }
@@ -57989,7 +58585,7 @@ ${lines}`
             identity,
             includeHuman
           });
-          const statePath = join27(projectRoot, SENTIENT_STATE_FILE);
+          const statePath = join28(projectRoot, SENTIENT_STATE_FILE);
           const state = await readSentientState(statePath);
           emitSuccess(
             {
@@ -58459,7 +59055,7 @@ __export(self_update_exports, {
 });
 import { execFile } from "node:child_process";
 import { readFile as readFile5 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 import * as readline2 from "node:readline";
 import { promisify } from "node:util";
 import {
@@ -58474,7 +59070,7 @@ import {
 async function getCurrentVersion() {
   const cleoHome = getCleoHome4();
   try {
-    const content = await readFile5(join28(cleoHome, "VERSION"), "utf-8");
+    const content = await readFile5(join29(cleoHome, "VERSION"), "utf-8");
     return (content.split("\n")[0] ?? "unknown").trim();
   } catch {
     return "unknown";
@@ -58528,7 +59124,7 @@ async function writeRuntimeVersionMetadata(mode, source, version) {
   ];
   await import("node:fs/promises").then(
     ({ writeFile: writeFile4, mkdir: mkdir5 }) => mkdir5(cleoHome, { recursive: true }).then(
-      () => writeFile4(join28(cleoHome, "VERSION"), `${lines.join("\n")}
+      () => writeFile4(join29(cleoHome, "VERSION"), `${lines.join("\n")}
 `, "utf-8")
     )
   );
@@ -58939,7 +59535,7 @@ var sentient_exports = {};
 __export(sentient_exports, {
   sentientCommand: () => sentientCommand
 });
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 import { cwd as processCwd3 } from "node:process";
 import {
   getSentientDaemonStatus as getSentientDaemonStatus2,
@@ -59014,7 +59610,7 @@ var init_sentient3 = __esm({
             return;
           }
           if (dryRun) {
-            const statePath2 = join29(projectRoot, SENTIENT_STATE_FILE2);
+            const statePath2 = join30(projectRoot, SENTIENT_STATE_FILE2);
             const outcome = await safeRunTick({ projectRoot, statePath: statePath2, dryRun: true });
             emitSuccess2(
               { dryRun: true, outcome },
@@ -59130,7 +59726,7 @@ Logs:  ${logPath}`
         const jsonMode = args.json === true;
         const dryRun = args["dry-run"] === true;
         try {
-          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
           const outcome = await safeRunTick({ projectRoot, statePath, dryRun });
           emitSuccess2(
             { outcome, dryRun },
@@ -59199,7 +59795,7 @@ Logs:  ${logPath}`
             return;
           }
           await db.update(tasks).set({ status: "pending", updatedAt: now }).where(eq2(tasks.id, id)).run();
-          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           await patchSentientState(statePath, {
             tier2Stats: {
@@ -59251,7 +59847,7 @@ Logs:  ${logPath}`
             return;
           }
           await db.update(tasks).set({ status: "cancelled", cancellationReason: reason, cancelledAt: now, updatedAt: now }).where(eq2(tasks.id, id)).run();
-          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           await patchSentientState(statePath, {
             tier2Stats: {
@@ -59296,7 +59892,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
           const outcome = await safeRunProposeTick({ projectRoot, statePath });
           emitSuccess2(
             { outcome },
@@ -59316,7 +59912,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
           const updated = await patchSentientState(statePath, { tier2Enabled: true });
           emitSuccess2({ tier2Enabled: updated.tier2Enabled }, jsonMode, "Tier-2 proposals enabled");
         } catch (err) {
@@ -59335,7 +59931,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
           const updated = await patchSentientState(statePath, { tier2Enabled: false });
           emitSuccess2({ tier2Enabled: updated.tier2Enabled }, jsonMode, "Tier-2 proposals disabled");
         } catch (err) {
@@ -59366,7 +59962,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           emitSuccess2(
             {
@@ -59924,7 +60520,7 @@ var sequence_exports = {};
 __export(sequence_exports, {
   sequenceCommand: () => sequenceCommand
 });
-import { getProjectRoot as getProjectRoot40 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot42 } from "@cleocode/core/internal";
 var showCommand12, checkCommand6, repairCommand2, sequenceCommand;
 var init_sequence = __esm({
   "packages/cleo/src/cli/commands/sequence.ts"() {
@@ -59960,7 +60556,7 @@ var init_sequence = __esm({
       meta: { name: "repair", description: "Reset counter to max + 1 if behind" },
       async run() {
         const { repairSequence } = await import("@cleocode/core/internal");
-        const projectRoot = getProjectRoot40();
+        const projectRoot = getProjectRoot42();
         const repair = await repairSequence(projectRoot);
         const result = {
           repaired: repair.repaired,
@@ -60415,8 +61011,8 @@ var init_session4 = __esm({
         "audit-scope": { type: "string", description: "Audit log scope (global|local)" }
       },
       async run({ args }) {
-        const { detectSessionDrift, getProjectRoot: getProjectRoot44 } = await import("@cleocode/core");
-        const projectRoot = await getProjectRoot44();
+        const { detectSessionDrift, getProjectRoot: getProjectRoot46 } = await import("@cleocode/core");
+        const projectRoot = await getProjectRoot46();
         const scope = args["audit-scope"] === "local" ? "local" : "global";
         const report = await detectSessionDrift({ projectRoot, auditScope: scope });
         cliOutput(report, { command: "session drift", operation: "session.drift" });
@@ -63182,7 +63778,7 @@ __export(token_exports, {
   tokenCommand: () => tokenCommand
 });
 import { readFileSync as readFileSync16 } from "node:fs";
-import { getProjectRoot as getProjectRoot41, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot43, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
 function readPayload(args, textKey, fileKey) {
   const text = args[textKey];
   const file = args[fileKey];
@@ -63346,7 +63942,7 @@ var init_token = __esm({
           domain: args.domain,
           operation: args.operation
         };
-        const result = args.record ? await recordTokenExchange2(getProjectRoot41(), input2) : await measureTokenExchange(input2);
+        const result = args.record ? await recordTokenExchange2(getProjectRoot43(), input2) : await measureTokenExchange(input2);
         cliOutput(result, {
           command: "token",
           operation: args.record ? "admin.token.record" : "token.estimate"
@@ -63381,8 +63977,8 @@ __export(transcript_exports, {
   transcriptCommand: () => transcriptCommand
 });
 import { homedir as homedir6 } from "node:os";
-import { join as join30 } from "node:path";
-import { getProjectRoot as getProjectRoot42 } from "@cleocode/core";
+import { join as join31 } from "node:path";
+import { getProjectRoot as getProjectRoot44 } from "@cleocode/core";
 import {
   parseDurationMs,
   pruneTranscripts,
@@ -63412,7 +64008,7 @@ var init_transcript = __esm({
       async run({ args }) {
         if (args.pending) {
           try {
-            const projectRoot = getProjectRoot42();
+            const projectRoot = getProjectRoot44();
             const { scanPendingTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
             const pending = await scanPendingTranscripts(projectRoot);
             cliOutput(
@@ -63435,7 +64031,7 @@ var init_transcript = __esm({
           }
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join30(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join31(homedir6(), ".claude", "projects");
         try {
           const result = await scanTranscripts(projectsDir);
           cliOutput(
@@ -63509,7 +64105,7 @@ var init_transcript = __esm({
       async run({ args }) {
         const tier = args.tier ?? "warm";
         const dryRun = args["dry-run"] ?? false;
-        const projectRoot = getProjectRoot42();
+        const projectRoot = getProjectRoot44();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { findSessionTranscriptPath, listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -63621,7 +64217,7 @@ var init_transcript = __esm({
         const dryRun = args["dry-run"] ?? false;
         const olderThanHours = args["older-than-hours"] ? Number.parseInt(args["older-than-hours"], 10) : 24;
         const limit = args.limit ? Number.parseInt(args.limit, 10) : void 0;
-        const projectRoot = getProjectRoot42();
+        const projectRoot = getProjectRoot44();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -63741,7 +64337,7 @@ var init_transcript = __esm({
           process.exit(2);
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join30(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join31(homedir6(), ".claude", "projects");
         try {
           const pruneResult = await pruneTranscripts({
             olderThanMs,
@@ -64418,15 +65014,15 @@ __export(web_exports, {
 });
 import { execFileSync as execFileSync3, spawn as spawn3 } from "node:child_process";
 import { mkdir as mkdir4, open, readFile as readFile6, rm, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 import { CleoError as CleoError11, formatError as formatError7, getCleoHome as getCleoHome5 } from "@cleocode/core";
 function getWebPaths() {
   const cleoHome = getCleoHome5();
   return {
-    pidFile: join31(cleoHome, "web-server.pid"),
-    configFile: join31(cleoHome, "web-server.json"),
-    logDir: join31(cleoHome, "logs"),
-    logFile: join31(cleoHome, "logs", "web-server.log")
+    pidFile: join32(cleoHome, "web-server.pid"),
+    configFile: join32(cleoHome, "web-server.json"),
+    logDir: join32(cleoHome, "logs"),
+    logFile: join32(cleoHome, "logs", "web-server.log")
   };
 }
 function isProcessRunning(pid) {
@@ -64465,7 +65061,7 @@ async function startWebServer(port, host) {
     throw new CleoError11(1 /* GENERAL_ERROR */, `Server already running (PID: ${status.pid})`);
   }
   const projectRoot = process.env["CLEO_ROOT"] ?? process.cwd();
-  const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join31(projectRoot, "packages", "studio", "build");
+  const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join32(projectRoot, "packages", "studio", "build");
   await mkdir4(logDir, { recursive: true });
   await writeFile3(
     configFile,
@@ -64475,7 +65071,7 @@ async function startWebServer(port, host) {
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
     })
   );
-  const webIndexPath = join31(studioDir, "index.js");
+  const webIndexPath = join32(studioDir, "index.js");
   try {
     await stat2(webIndexPath);
   } catch {
@@ -64748,7 +65344,7 @@ __export(worktree_exports, {
   worktreeCommand: () => worktreeCommand
 });
 import readline4 from "node:readline";
-import { getProjectRoot as getProjectRoot43, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot45, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
 async function promptYesNo2(question) {
   return new Promise((resolve7) => {
     const rl = readline4.createInterface({ input: process.stdin, output: process.stdout });
@@ -64853,7 +65449,7 @@ var init_worktree3 = __esm({
         const staleDays = staleDaysRaw !== void 0 ? Number.parseInt(staleDaysRaw, 10) : void 0;
         const idleDaysRaw = typeof args["idle-days"] === "string" ? args["idle-days"] : void 0;
         const idleDays = idleDaysRaw !== void 0 ? Number.parseInt(idleDaysRaw, 10) : void 0;
-        const projectRoot = getProjectRoot43();
+        const projectRoot = getProjectRoot45();
         const listResult = await listWorktrees2({
           projectRoot,
           ...staleDays !== void 0 && !Number.isNaN(staleDays) ? { staleDays } : {}
@@ -65089,7 +65685,7 @@ init_dist();
 init_field_context();
 init_format_context();
 import { readFileSync as readFileSync17 } from "node:fs";
-import { dirname as dirname9, join as join33 } from "node:path";
+import { dirname as dirname9, join as join34 } from "node:path";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
 
 // packages/cleo/src/cli/generated/command-manifest.ts
@@ -65178,6 +65774,12 @@ var COMMAND_MANIFEST = [
     description: "Show bundle manifest without extracting or modifying anything",
     load: async () => (await Promise.resolve().then(() => (init_backup_inspect(), backup_inspect_exports))).backupInspectSubCommand
   },
+  {
+    exportName: "backupRecoverSubCommand",
+    name: "recover",
+    description: "Recover a malformed CLEO database from snapshot",
+    load: async () => (await Promise.resolve().then(() => (init_backup_recover(), backup_recover_exports))).backupRecoverSubCommand
+  },
   {
     exportName: "backupCommand",
     name: "backup",
@@ -66075,50 +66677,17 @@ function lazyCommand(meta, loader2) {
   };
 }
 
-// packages/cleo/src/cli/lib/did-you-mean.ts
-function levenshteinDistance(input2, candidate) {
-  const inputLen = input2.length;
-  const candidateLen = candidate.length;
-  const matrix = Array.from({ length: inputLen + 1 }, (_, i) => [i]);
-  for (let j = 1; j <= candidateLen; j++) {
-    matrix[0][j] = j;
-  }
-  for (let i = 1; i <= inputLen; i++) {
-    for (let j = 1; j <= candidateLen; j++) {
-      const cost = input2[i - 1] === candidate[j - 1] ? 0 : 1;
-      matrix[i][j] = Math.min(
-        matrix[i - 1][j] + 1,
-        // deletion
-        matrix[i][j - 1] + 1,
-        // insertion
-        matrix[i - 1][j - 1] + cost
-        // substitution
-      );
-    }
-  }
-  return matrix[inputLen][candidateLen];
-}
-function didYouMean(input2, candidates, maxDistance = 2) {
-  const suggestions = candidates.map((candidate) => ({
-    command: candidate,
-    distance: levenshteinDistance(input2, candidate)
-  })).filter((item) => item.distance <= maxDistance).sort((a, b) => {
-    if (a.distance !== b.distance) {
-      return a.distance - b.distance;
-    }
-    return a.command.localeCompare(b.command);
-  }).map((item) => item.command);
-  return suggestions;
-}
+// packages/cleo/src/cli/index.ts
+init_did_you_mean();
 
 // packages/cleo/src/cli/lib/first-run-detection.ts
 import { existsSync as existsSync16 } from "node:fs";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 async function detectFirstRun() {
   const envKey = process.env["ANTHROPIC_API_KEY"];
   if (typeof envKey === "string" && envKey.length > 0) return false;
   const { getCleoPlatformPaths } = await import("@cleocode/paths");
-  const configPath = join32(getCleoPlatformPaths().config, "config.json");
+  const configPath = join33(getCleoPlatformPaths().config, "config.json");
   if (existsSync16(configPath)) return false;
   try {
     const { getCredentialPool } = await import("@cleocode/core/llm/credential-pool.js");
@@ -66233,7 +66802,7 @@ Or via NodeSource: https://github.com/nodesource/distributions
   }
 }
 function getPackageVersion() {
-  const pkgPath = join33(dirname9(fileURLToPath7(import.meta.url)), "../../package.json");
+  const pkgPath = join34(dirname9(fileURLToPath7(import.meta.url)), "../../package.json");
   const pkg = JSON.parse(readFileSync17(pkgPath, "utf-8"));
   return pkg.version;
 }
@@ -66385,8 +66954,8 @@ async function runStartupMaintenance() {
     detectAndRemoveLegacyGlobalFiles,
     detectAndRemoveStrayProjectNexus,
     getGlobalSalt,
-    getLogger: getLogger20,
-    getProjectRoot: getProjectRoot44,
+    getLogger: getLogger21,
+    getProjectRoot: getProjectRoot46,
     isCleanupMarkerSet,
     migrateSignaldockToConduit,
     needsSignaldockToConduitMigration,
@@ -66395,7 +66964,7 @@ async function runStartupMaintenance() {
   } = await import("@cleocode/core/internal");
   let projectRootForCleanup = "";
   try {
-    projectRootForCleanup = getProjectRoot44();
+    projectRootForCleanup = getProjectRoot46();
   } catch {
   }
   if (!isCleanupMarkerSet(CLI_VERSION, projectRootForCleanup)) {
@@ -66411,11 +66980,11 @@ async function runStartupMaintenance() {
     }
     setCleanupMarker(CLI_VERSION, projectRootForCleanup);
   }
-  const _startupLog = getLogger20("cli-startup");
+  const _startupLog = getLogger21("cli-startup");
   const isInitInvocation = process.argv.slice(2).some((a) => a === "init");
   if (!isInitInvocation) {
     try {
-      const _projectRootForMigration = getProjectRoot44();
+      const _projectRootForMigration = getProjectRoot46();
       if (needsSignaldockToConduitMigration(_projectRootForMigration)) {
         const migrationResult = migrateSignaldockToConduit(_projectRootForMigration);
         if (migrationResult.status === "failed") {