@cleocode/cleo 2026.5.109 → 2026.5.111

package/dist/cli/index.js

@@ -1719,10 +1719,10 @@ var init_credentials = __esm({
   }
 });
 
-// packages/core/src/store/db-inventory.json
+// packages/contracts/src/db-inventory.json
 var db_inventory_default;
 var init_db_inventory = __esm({
-  "packages/core/src/store/db-inventory.json"() {
+  "packages/contracts/src/db-inventory.json"() {
     db_inventory_default = {
       $schemaNote: "SSoT machine-readable inventory of every CLEO SQLite database. Consumed by T10307 fleet survey, T10310 pragma drift, T10311 migration coverage, T10312 doctor integrity, T10320 cross-DB invariants. Owned by Saga T10281 SG-BRAIN-DB-RESILIENCE / Epic T10282 E1-DB-INVENTORY (task T10305). Amend together with ADR-068 charter; the CI drift gate (forthcoming under E1) compares entries to disk reality.",
       $pathTokens: {
@@ -14810,7 +14810,38 @@ function validateCanonRegistry(raw, source) {
   for (const [kindId, entryRaw] of Object.entries(kindsRaw)) {
     kinds[kindId] = validateKindEntry(kindId, entryRaw, source);
   }
-  return { version, kinds };
+  const similarity = validateSimilarity(obj["similarity"], source);
+  return similarity !== void 0 ? { version, kinds, similarity } : { version, kinds };
+}
+function validateSimilarity(raw, source) {
+  if (raw === void 0 || raw === null) {
+    return void 0;
+  }
+  if (typeof raw !== "object" || Array.isArray(raw)) {
+    throw new Error(`${source}: 'similarity' must be an object`);
+  }
+  const obj = raw;
+  const warnThresholdRaw = obj["warnThreshold"];
+  let warnThreshold = 0.85;
+  if (warnThresholdRaw !== void 0) {
+    if (typeof warnThresholdRaw !== "number" || Number.isNaN(warnThresholdRaw) || warnThresholdRaw < 0 || warnThresholdRaw > 1) {
+      throw new Error(
+        `${source}: 'similarity.warnThreshold' must be a number in [0, 1] (got ${String(warnThresholdRaw)})`
+      );
+    }
+    warnThreshold = warnThresholdRaw;
+  }
+  const modeRaw = obj["mode"];
+  let mode = "warn";
+  if (modeRaw !== void 0) {
+    if (modeRaw !== "warn" && modeRaw !== "block") {
+      throw new Error(
+        `${source}: 'similarity.mode' must be 'warn' or 'block' (got ${String(modeRaw)})`
+      );
+    }
+    mode = modeRaw;
+  }
+  return { warnThreshold, mode };
 }
 function validateKindEntry(kindId, raw, source) {
   const where = `${source} kinds.${kindId}`;
@@ -16168,8 +16199,12 @@ import {
   getCleoDirAbsolute,
   getProjectRoot as getProjectRoot5,
   memoryObserve as memoryObserve2,
+  parseChangesetFrontmatter,
+  releaseReservedSlug,
+  reserveSlugForDispatch,
   resolveAttachmentBackend,
-  SlugCollisionError
+  SlugCollisionError,
+  writeChangesetEntry
 } from "@cleocode/core/internal";
 function getDocKindRegistry() {
   const root = getProjectRoot5();
@@ -16676,6 +16711,105 @@ var init_docs2 = __esm({
           }
           type2 = rawType;
         }
+        if (type2 === "changeset") {
+          if (!filePath) {
+            return lafsError(
+              "E_INVALID_INPUT",
+              "changeset writes require a --file path (URL attachments are not supported for changesets)",
+              "add"
+            );
+          }
+          const absPath = resolve2(filePath);
+          let bytes;
+          try {
+            bytes = await readFile(absPath);
+          } catch {
+            return lafsError("E_FILE_ERROR", `Cannot read file: ${absPath}`, "add");
+          }
+          const parsed = parseChangesetFrontmatter(bytes.toString("utf-8"));
+          if (!parsed.ok) {
+            let message;
+            if (parsed.error === "missing-frontmatter") {
+              message = "changeset file is missing the `---`-fenced YAML frontmatter. Required fields: id, tasks, kind, summary.";
+            } else if (parsed.error === "missing-required") {
+              message = `changeset frontmatter is missing required fields: ${parsed.missing.join(", ")}.`;
+            } else if (parsed.error === "yaml-invalid") {
+              const lineHint = parsed.line !== void 0 ? ` (line ${parsed.line})` : "";
+              message = `changeset frontmatter YAML is invalid${lineHint}: ${parsed.parserMessage}`;
+            } else {
+              message = `changeset frontmatter failed schema validation: ${parsed.issues.join("; ")}`;
+            }
+            return {
+              success: false,
+              error: {
+                code: "E_REQUIRES_CHANGESET_VERB",
+                message,
+                details: {
+                  fix: "Use `cleo changeset add --slug <id> --tasks <T####> --kind <kind> --summary <text>` for guided authoring.",
+                  parserError: parsed.error,
+                  ...parsed.error === "missing-required" ? { missing: parsed.missing } : {},
+                  ...parsed.error === "schema-invalid" ? { issues: parsed.issues } : {}
+                }
+              }
+            };
+          }
+          if (slug !== void 0 && slug !== parsed.entry.id) {
+            return {
+              success: false,
+              error: {
+                code: "E_SLUG_MISMATCH",
+                message: `--slug '${slug}' does not match changeset frontmatter id '${parsed.entry.id}'. The frontmatter is canonical \u2014 drop --slug or align it.`
+              }
+            };
+          }
+          const outcome = await writeChangesetEntry(parsed.entry, {
+            projectRoot: getProjectRoot5(),
+            attachedBy: typeof rawAttachedBy === "string" && rawAttachedBy.length > 0 ? rawAttachedBy : "cleo-docs-add"
+          });
+          if (!outcome.ok) {
+            const err = outcome.error;
+            if (err.code === "E_SLUG_PATTERN_MISMATCH") {
+              const hint = err.example ? ` (example: ${err.example})` : "";
+              return lafsError("E_SLUG_PATTERN_MISMATCH", `${err.message}${hint}`, "add");
+            }
+            if (err.code === "E_INVALID_ENTRY") {
+              return lafsError("E_INVALID_INPUT", err.message, "add");
+            }
+            if (err.code === "E_FILE_WRITE_FAILED") {
+              return lafsError("E_FILE_ERROR", err.message, "add");
+            }
+            return lafsError("E_SSOT_WRITE_FAILED", err.message, "add");
+          }
+          const changesetPayload = {
+            kind: "doc-attachment",
+            attachmentId: outcome.result.attachmentId,
+            ownerId: outcome.result.ownerId,
+            addedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            slug: outcome.result.slug,
+            type: "changeset"
+          };
+          emitDocAttachmentObservation(changesetPayload, getProjectRoot5());
+          return lafsSuccess(
+            {
+              attachmentId: outcome.result.attachmentId,
+              sha256: outcome.result.sha256,
+              // writeChangesetEntry returns a freshly-minted ref so refCount is 1
+              // (or more if the same content was already addressed by another
+              // owner). The store sets the canonical value; mirroring it here
+              // keeps the envelope shape identical to the file/url branches.
+              refCount: 1,
+              kind: "blob",
+              ownerId: outcome.result.ownerId,
+              ownerType: "task",
+              // Changeset writes land in the legacy attachment store; v2 mirror
+              // is not applicable to the dual-write transaction.
+              attachmentBackend: "legacy",
+              slug: outcome.result.slug,
+              type: "changeset"
+            },
+            "add"
+          );
+        }
         if (type2 !== void 0 && slug !== void 0) {
           const patternCheck = getDocKindRegistry().validateSlug(type2, slug);
           if (!patternCheck.ok) {
@@ -16683,6 +16817,25 @@ var init_docs2 = __esm({
             return lafsError("E_SLUG_PATTERN_MISMATCH", `${patternCheck.error}${exampleHint}`, "add");
           }
         }
+        if (slug !== void 0) {
+          const reservation = await reserveSlugForDispatch(getProjectRoot5(), {
+            kind: type2 ?? "",
+            slug
+          });
+          if (!reservation.ok) {
+            return {
+              success: false,
+              error: {
+                code: "E_SLUG_RESERVED",
+                message: `slug '${slug}' is already in use in this project`,
+                details: {
+                  suggestions: reservation.suggestions,
+                  aliases: ["E_SLUG_TAKEN"]
+                }
+              }
+            };
+          }
+        }
         const extras = {};
         if (slug !== void 0) extras.slug = slug;
         if (type2 !== void 0) extras.type = type2;
@@ -16719,13 +16872,17 @@ var init_docs2 = __esm({
               extras
             );
           } catch (err) {
+            if (slug !== void 0) releaseReservedSlug(slug);
             if (err instanceof SlugCollisionError) {
               return {
                 success: false,
                 error: {
-                  code: "E_SLUG_TAKEN",
+                  code: "E_SLUG_RESERVED",
                   message: `slug '${err.slug}' is already in use in this project`,
-                  details: { suggestions: err.suggestions }
+                  details: {
+                    suggestions: err.suggestions,
+                    aliases: ["E_SLUG_TAKEN"]
+                  }
                 }
               };
             }
@@ -16797,13 +16954,17 @@ var init_docs2 = __esm({
               extras
             );
           } catch (err) {
+            if (slug !== void 0) releaseReservedSlug(slug);
             if (err instanceof SlugCollisionError) {
               return {
                 success: false,
                 error: {
-                  code: "E_SLUG_TAKEN",
+                  code: "E_SLUG_RESERVED",
                   message: `slug '${err.slug}' is already in use in this project`,
-                  details: { suggestions: err.suggestions }
+                  details: {
+                    suggestions: err.suggestions,
+                    aliases: ["E_SLUG_TAKEN"]
+                  }
                 }
               };
             }
@@ -16969,6 +17130,7 @@ import {
   createAttachmentStore as createAttachmentStore2,
   memoryFind as memoryFind2,
   orchestrateReady as orchestrateReady2,
+  sagas,
   taskRelates as taskRelates2,
   taskShow as taskShow2
 } from "@cleocode/core/internal";
@@ -17070,8 +17232,7 @@ async function buildFocusEnvelope(id, projectRoot) {
     };
   }
   const task = showResult.data.task;
-  const labels = Array.isArray(task.labels) ? task.labels : [];
-  const isSaga = labels.includes("saga");
+  const isSaga = sagas.isSagaType(task);
   const isEpic = task.type === "epic" && !isSaga;
   const entityType = isSaga ? "saga" : isEpic ? "epic" : "task";
   const identity = {
@@ -25211,8 +25372,8 @@ async function loadPlaybookByName(name) {
     return null;
   }
   try {
-    const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core/internal");
-    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot46();
+    const { getProjectRoot: getProjectRoot48 } = await import("@cleocode/core/internal");
+    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot48();
     const resolved = resolvePlaybook(name, {
       projectRoot,
       globalPlaybooksDir: __playbookRuntimeOverrides.globalPlaybooksDir,
@@ -25256,8 +25417,8 @@ async function acquireDb() {
 async function buildDefaultDispatcher() {
   if (__playbookRuntimeOverrides.dispatcher) return __playbookRuntimeOverrides.dispatcher;
   const { orchestrateSpawnExecute: orchestrateSpawnExecute2 } = await Promise.resolve().then(() => (init_engine(), engine_exports));
-  const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core/internal");
-  const projectRoot = getProjectRoot46();
+  const { getProjectRoot: getProjectRoot48 } = await import("@cleocode/core/internal");
+  const projectRoot = getProjectRoot48();
   return {
     async dispatch(input2) {
       try {
@@ -25447,8 +25608,8 @@ var init_playbook2 = __esm({
             projectRoot = __playbookRuntimeOverrides.projectRoot;
           } else {
             try {
-              const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core/internal");
-              projectRoot = getProjectRoot46();
+              const { getProjectRoot: getProjectRoot48 } = await import("@cleocode/core/internal");
+              projectRoot = getProjectRoot48();
             } catch {
               projectRoot = void 0;
             }
@@ -25512,14 +25673,14 @@ var init_playbook2 = __esm({
         const dispatcher = await buildDefaultDispatcher();
         let result;
         try {
-          const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core/internal");
+          const { getProjectRoot: getProjectRoot48 } = await import("@cleocode/core/internal");
           const opts = {
             db,
             playbook: parsed.definition,
             playbookHash: parsed.sourceHash,
             initialContext,
             dispatcher,
-            projectRoot: getProjectRoot46()
+            projectRoot: getProjectRoot48()
           };
           if (__playbookRuntimeOverrides.approvalSecret !== void 0) {
             opts.approvalSecret = __playbookRuntimeOverrides.approvalSecret;
@@ -25884,7 +26045,7 @@ async function orchestrateClassify(request, context, projectRoot) {
   try {
     const { getCleoCantWorkflowsDir } = await import("@cleocode/core/internal");
     const { readFileSync: readFileSync18, readdirSync: readdirSync3, existsSync: existsSync17 } = await import("node:fs");
-    const { join: join35 } = await import("node:path");
+    const { join: join34 } = await import("node:path");
     const workflowsDir = getCleoCantWorkflowsDir();
     const combined = `${request} ${context ?? ""}`.toLowerCase();
     const matches = [];
@@ -25892,7 +26053,7 @@ async function orchestrateClassify(request, context, projectRoot) {
       const files = readdirSync3(workflowsDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync18(join35(workflowsDir, file), "utf-8");
+          const src = readFileSync18(join34(workflowsDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -25907,12 +26068,12 @@ async function orchestrateClassify(request, context, projectRoot) {
         }
       }
     }
-    const localCantDir = join35(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
+    const localCantDir = join34(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
     if (existsSync17(localCantDir)) {
       const files = readdirSync3(localCantDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync18(join35(localCantDir, file), "utf-8");
+          const src = readFileSync18(join34(localCantDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -31307,11 +31468,11 @@ var init_security = __esm({
 });
 
 // packages/cleo/src/dispatch/middleware/sanitizer.ts
-function createSanitizer(getProjectRoot46) {
+function createSanitizer(getProjectRoot48) {
   return async (req, next) => {
     if (req.params) {
       try {
-        const root = getProjectRoot46 ? getProjectRoot46() : void 0;
+        const root = getProjectRoot48 ? getProjectRoot48() : void 0;
         req.params = sanitizeParams(req.params, root, {
           domain: req.domain,
           operation: req.operation
@@ -32903,9 +33064,9 @@ var init_agent = __esm({
             isActive: true
           });
           const { existsSync: existsSync17, mkdirSync: mkdirSync5, writeFileSync: writeFileSync5 } = await import("node:fs");
-          const { join: join35 } = await import("node:path");
-          const cantDir = join35(CLEO_DIR_NAME, AGENTS_SUBDIR);
-          const cantPath = join35(cantDir, `${agentId}.cant`);
+          const { join: join34 } = await import("node:path");
+          const cantDir = join34(CLEO_DIR_NAME, AGENTS_SUBDIR);
+          const cantPath = join34(cantDir, `${agentId}.cant`);
           let cantScaffolded = false;
           if (!existsSync17(cantPath)) {
             mkdirSync5(cantDir, { recursive: true });
@@ -33087,7 +33248,7 @@ agent ${agentId}:
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { createRuntime } = await import("@cleocode/runtime");
           const { existsSync: existsSync17, readFileSync: readFileSync18 } = await import("node:fs");
-          const { join: join35 } = await import("node:path");
+          const { join: join34 } = await import("node:path");
           await openCleoDb("tasks");
           const registry = new AgentRegistryAccessor(getProjectRoot24());
           const credential = await registry.get(args.agentId);
@@ -33107,7 +33268,7 @@ agent ${agentId}:
           }
           let profile = null;
           let cantValidation = null;
-          const cantPath = args.cant ?? join35(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          const cantPath = args.cant ?? join34(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
           if (existsSync17(cantPath)) {
             profile = readFileSync18(cantPath, "utf-8");
             try {
@@ -33633,7 +33794,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { createRuntime } = await import("@cleocode/runtime");
           const { existsSync: existsSync17 } = await import("node:fs");
-          const { join: join35 } = await import("node:path");
+          const { join: join34 } = await import("node:path");
           await openCleoDb("tasks");
           const registry = new AgentRegistryAccessor(getProjectRoot24());
           const credential = await registry.get(args.agentId);
@@ -33650,7 +33811,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           await registry.update(args.agentId, { isActive: true });
           await registry.markUsed(args.agentId);
-          const cantPath = join35(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          const cantPath = join34(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
           const hasProfile = existsSync17(cantPath);
           const runtime = await createRuntime(registry, {
             agentId: args.agentId,
@@ -34593,8 +34754,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             process.exitCode = 4;
             return;
           }
-          const { join: join35 } = await import("node:path");
-          const personaPath = join35(resolvedDir, "persona.cant");
+          const { join: join34 } = await import("node:path");
+          const personaPath = join34(resolvedDir, "persona.cant");
           if (!existsSync17(personaPath)) {
             cliOutput(
               {
@@ -34642,7 +34803,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               if (entry.isFile()) {
                 fileCount++;
               } else if (entry.isDirectory()) {
-                countFiles(join35(dirPath, entry.name));
+                countFiles(join34(dirPath, entry.name));
               }
             }
           };
@@ -34891,7 +35052,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       async run({ args }) {
         try {
           const { existsSync: existsSync17, readFileSync: readFileSync18, mkdirSync: mkdirSync5 } = await import("node:fs");
-          const { resolve: resolve7, join: join35 } = await import("node:path");
+          const { resolve: resolve7, join: join34 } = await import("node:path");
           const specPath = resolve7(args.spec);
           if (!existsSync17(specPath)) {
             cliError(`spec file not found: ${specPath}`, 4, { name: "E_NOT_FOUND" });
@@ -34900,7 +35061,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const specContent = readFileSync18(specPath, "utf-8");
           const projectRoot = getProjectRoot24();
-          const outputDir = args["output-dir"] ? resolve7(args["output-dir"]) : join35(projectRoot, ".cleo", "cant", "agents");
+          const outputDir = args["output-dir"] ? resolve7(args["output-dir"]) : join34(projectRoot, ".cleo", "cant", "agents");
           mkdirSync5(outputDir, { recursive: true });
           if (args["dry-run"]) {
             cliOutput(
@@ -36311,12 +36472,8 @@ __export(backup_recover_exports, {
   backupRecoverBrainLeaf: () => backupRecoverBrainLeaf,
   backupRecoverSubCommand: () => backupRecoverSubCommand
 });
-import { join as join11 } from "node:path";
-import { getCleoDirAbsolute as getCleoDirAbsolute2, getLogger as getLogger20, getProjectRoot as getProjectRoot27 } from "@cleocode/core";
-import {
-  BackupRecoverBrainError,
-  runBackupRecoverBrain
-} from "@cleocode/core/store/backup-recover-brain.js";
+import { getLogger as getLogger20, getProjectRoot as getProjectRoot27 } from "@cleocode/core";
+import { BackupRecoverError, runBackupRecover } from "@cleocode/core/store/backup-recover.js";
 function readBoolFlag(args, key) {
   return args[key] === true;
 }
@@ -36324,6 +36481,68 @@ function readStringFlag(args, key) {
   const v = args[key];
   return typeof v === "string" ? v : "";
 }
+function executeRecover(role, args) {
+  const projectRoot = getProjectRoot27();
+  const dryRun = readBoolFlag(args, "dry-run");
+  const fromSnapshot = readStringFlag(args, "from-snapshot");
+  const noDelta = readBoolFlag(args, "no-delta");
+  const operation = `backup.recover.${role}`;
+  try {
+    const result = runBackupRecover({
+      role,
+      projectRoot,
+      logger: getLogger20(`backup-recover-${role}`),
+      dryRun,
+      fromSnapshot: fromSnapshot.length > 0 ? fromSnapshot : void 0,
+      noDelta
+    });
+    cliOutput(result, {
+      command: "backup",
+      operation
+    });
+    if (result.dryRun) {
+      humanInfo(
+        `[dry-run] Would restore role "${role}" from ${result.restoredFrom} (${result.dataLossWindowHours !== null ? `~${result.dataLossWindowHours}h data-loss window` : "data-loss window unknown"}). Re-run without --dry-run to execute (project root: ${projectRoot}).`
+      );
+    } else {
+      humanInfo(
+        `Recovered "${role}" DB from ${result.restoredFrom}. Corrupt DB quarantined at ${result.quarantinedTo}.`
+      );
+    }
+  } catch (err) {
+    if (err instanceof BackupRecoverError) {
+      cliError(
+        err.message,
+        err.code,
+        {
+          name: err.codeName,
+          ...err.fix ? { fix: err.fix } : {}
+        },
+        { operation }
+      );
+      process.exitCode = err.code;
+      return;
+    }
+    const message = err instanceof Error ? err.message : String(err);
+    cliError(message, 1 /* GENERAL_ERROR */, { name: "E_RECOVERY_FAILED" }, { operation });
+    process.exitCode = 1 /* GENERAL_ERROR */;
+  }
+}
+function parseRoleArg(value) {
+  const trimmed = value.trim();
+  for (const entry of DB_INVENTORY) {
+    if (entry.role === trimmed) {
+      return entry.role;
+    }
+  }
+  const validRoles = DB_INVENTORY.map((e) => e.role).join(", ");
+  throw new BackupRecoverError(
+    `Unknown DB role "${trimmed}". Valid roles: ${validRoles}.`,
+    6 /* VALIDATION_ERROR */,
+    "E_UNKNOWN_ROLE",
+    "Run `cleo backup recover --help` for the list of valid roles."
+  );
+}
 var backupRecoverBrainLeaf, backupRecoverSubCommand;
 var init_backup_recover = __esm({
   "packages/cleo/src/cli/commands/backup-recover.ts"() {
@@ -36359,43 +36578,67 @@ var init_backup_recover = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot27();
-        const cleoDir = getCleoDirAbsolute2();
-        const corruptPath = join11(cleoDir, "brain.db");
-        const snapshotDir = join11(cleoDir, "backups", "snapshot");
-        const vacuumSnapshotDir = join11(cleoDir, "backups", "sqlite");
-        const quarantineRoot = join11(cleoDir, "quarantine");
         const argsBag = args;
-        const dryRun = readBoolFlag(argsBag, "dry-run");
-        const fromSnapshot = readStringFlag(argsBag, "from-snapshot");
-        const noDelta = readBoolFlag(argsBag, "no-delta");
+        executeRecover("brain", argsBag);
+      }
+    });
+    backupRecoverSubCommand = defineCommand({
+      meta: {
+        name: "recover",
+        description: "Recover a malformed CLEO database from snapshot \u2014 accepts any role from DB_INVENTORY (T10318)"
+      },
+      args: {
+        role: {
+          type: "positional",
+          description: `Canonical DB role (one of: ${DB_INVENTORY.map((e) => e.role).join(", ")})`,
+          required: false
+        },
+        "dry-run": {
+          type: "boolean",
+          description: "Print what would be done without quarantining or copying any files",
+          default: false
+        },
+        "from-snapshot": {
+          type: "string",
+          description: "Pin recovery to a specific snapshot \u2014 absolute path or ISO timestamp prefix (e.g. 2026-05-23)",
+          default: ""
+        },
+        "no-delta": {
+          type: "boolean",
+          description: "Skip the sqlite3 .recover delta-merge step (reserved \u2014 current pipeline does not delta-merge; flag plumbed for forward-compat)",
+          default: false
+        },
+        force: {
+          type: "boolean",
+          description: "Bypass any safety prompts (currently a no-op; reserved)",
+          default: false
+        }
+      },
+      subCommands: {
+        brain: backupRecoverBrainLeaf
+      },
+      async run({ args }) {
+        const argsBag = args;
+        const roleArg = readStringFlag(argsBag, "role");
+        if (roleArg.length === 0) {
+          const validRoles = DB_INVENTORY.map((e) => e.role).join(", ");
+          cliError(
+            `Missing role. Try \`cleo backup recover <role>\` (one of: ${validRoles}).`,
+            6 /* VALIDATION_ERROR */,
+            {
+              name: "E_VALIDATION",
+              fix: "Run `cleo backup recover --help` to see available roles and flags."
+            },
+            { operation: "backup.recover" }
+          );
+          process.exitCode = 6 /* VALIDATION_ERROR */;
+          return;
+        }
+        let role;
         try {
-          const result = runBackupRecoverBrain({
-            corruptPath,
-            snapshotDir,
-            vacuumSnapshotDir,
-            legacyArtifactDir: cleoDir,
-            quarantineRoot,
-            logger: getLogger20("backup-recover-brain"),
-            dryRun,
-            fromSnapshot: fromSnapshot.length > 0 ? fromSnapshot : void 0,
-            noDelta
-          });
-          cliOutput(result, {
-            command: "backup",
-            operation: "backup.recover.brain"
-          });
-          if (result.dryRun) {
-            humanInfo(
-              `[dry-run] Would restore from ${result.restoredFrom} (${result.dataLossWindowHours !== null ? `~${result.dataLossWindowHours}h data-loss window` : "data-loss window unknown"}). Re-run without --dry-run to execute (project root: ${projectRoot}).`
-            );
-          } else {
-            humanInfo(
-              `Recovered brain.db from ${result.restoredFrom}. Corrupt DB quarantined at ${result.quarantinedTo}.`
-            );
-          }
+          role = parseRoleArg(roleArg);
         } catch (err) {
-          if (err instanceof BackupRecoverBrainError) {
+          if (err instanceof BackupRecoverError) {
             cliError(
               err.message,
               err.code,
@@ -36403,44 +36646,89 @@ var init_backup_recover = __esm({
                 name: err.codeName,
                 ...err.fix ? { fix: err.fix } : {}
               },
-              { operation: "backup.recover.brain" }
+              { operation: "backup.recover" }
             );
             process.exitCode = err.code;
             return;
           }
-          const message = err instanceof Error ? err.message : String(err);
-          cliError(
-            message,
-            1 /* GENERAL_ERROR */,
-            { name: "E_RECOVERY_FAILED" },
-            { operation: "backup.recover.brain" }
-          );
-          process.exitCode = 1 /* GENERAL_ERROR */;
+          throw err;
         }
+        executeRecover(role, argsBag);
       }
     });
-    backupRecoverSubCommand = defineCommand({
+  }
+});
+
+// packages/cleo/src/cli/commands/backup-verify.ts
+import { getProjectRoot as getProjectRoot28 } from "@cleocode/core";
+import { runBackupVerify } from "@cleocode/core/store/backup-verify.js";
+var backupVerifySubCommand;
+var init_backup_verify = __esm({
+  "packages/cleo/src/cli/commands/backup-verify.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    backupVerifySubCommand = defineCommand({
       meta: {
-        name: "recover",
-        description: "Recover a malformed CLEO database from snapshot"
+        name: "verify",
+        description: "Walk DB_INVENTORY and report per-DB freshness + integrity for each snapshot in BOTH .cleo/backups/sqlite/ (canonical) and .cleo/backups/snapshot/ (legacy). Exits non-zero on any stale/corrupt finding."
       },
-      subCommands: {
-        brain: backupRecoverBrainLeaf
+      args: {
+        "per-db-timeout-ms": {
+          type: "string",
+          description: "Per-DB integrity-check timeout in milliseconds (default: 30000).",
+          default: "30000"
+        },
+        json: { type: "boolean", description: "Output as JSON" },
+        human: { type: "boolean", description: "Force human-readable output" },
+        quiet: { type: "boolean", description: "Suppress non-essential output" }
       },
       async run({ args }) {
         const argsBag = args;
-        const positional = argsBag["_"];
-        if (Array.isArray(positional) && positional.length > 0) return;
-        cliError(
-          "Missing subcommand. Try `cleo backup recover brain` (currently the only available recovery verb).",
-          6 /* VALIDATION_ERROR */,
-          {
-            name: "E_VALIDATION",
-            fix: "Run `cleo backup recover brain --help` to see available flags."
-          },
-          { operation: "backup.recover" }
-        );
-        process.exitCode = 6 /* VALIDATION_ERROR */;
+        const rawTimeout = argsBag["per-db-timeout-ms"];
+        let perDbTimeoutMs = 3e4;
+        if (typeof rawTimeout === "string" && rawTimeout.length > 0) {
+          const parsed = Number.parseInt(rawTimeout, 10);
+          if (!Number.isFinite(parsed) || parsed <= 0) {
+            cliError(
+              `Invalid --per-db-timeout-ms value: ${rawTimeout}`,
+              6 /* VALIDATION_ERROR */,
+              {
+                name: "E_VALIDATION",
+                fix: "Provide a positive integer number of milliseconds (e.g. --per-db-timeout-ms 30000)."
+              },
+              { operation: "backup.verify" }
+            );
+            process.exitCode = 6 /* VALIDATION_ERROR */;
+            return;
+          }
+          perDbTimeoutMs = parsed;
+        }
+        let result;
+        try {
+          result = runBackupVerify({
+            projectRoot: getProjectRoot28(),
+            perDbTimeoutMs
+          });
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(
+            message,
+            1 /* GENERAL_ERROR */,
+            { name: "E_BACKUP_VERIFY_FAILED" },
+            { operation: "backup.verify" }
+          );
+          process.exitCode = 1 /* GENERAL_ERROR */;
+          return;
+        }
+        cliOutput(result, {
+          command: "backup",
+          operation: "backup.verify"
+        });
+        if ((result.summary.corrupt > 0 || result.summary.stale > 0) && (process.exitCode === void 0 || process.exitCode === 0)) {
+          process.exitCode = 1 /* GENERAL_ERROR */;
+        }
       }
     });
   }
@@ -36518,6 +36806,7 @@ var init_backup = __esm({
     init_renderers();
     init_backup_inspect();
     init_backup_recover();
+    init_backup_verify();
     addCommand2 = defineCommand({
       meta: {
         name: "add",
@@ -36601,9 +36890,9 @@ var init_backup = __esm({
       async run({ args }) {
         const scope = args.scope;
         const { packBundle } = await import("@cleocode/core/store/backup-pack.js");
-        const { getProjectRoot: getProjectRoot46 } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot48 } = await import("@cleocode/core");
         const includesProject = scope === "project" || scope === "all";
-        const projectRoot = includesProject ? getProjectRoot46() : void 0;
+        const projectRoot = includesProject ? getProjectRoot48() : void 0;
         let passphrase;
         if (args.encrypt === true) {
           passphrase = process.env["CLEO_BACKUP_PASSPHRASE"];
@@ -36679,12 +36968,12 @@ var init_backup = __esm({
       },
       async run({ args }) {
         const bundlePath = args.bundle;
-        const { getProjectRoot: getProjectRoot46, getCleoHome: getCleoHome6, getCleoVersion } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot48, getCleoHome: getCleoHome6, getCleoVersion } = await import("@cleocode/core");
         const { BundleError, cleanupStaging, unpackBundle } = await import("@cleocode/core/store/backup-unpack.js");
         const { regenerateConfigJson, regenerateProjectContextJson, regenerateProjectInfoJson } = await import("@cleocode/core/store/regenerators.js");
         const { regenerateAndCompare } = await import("@cleocode/core/store/restore-json-merge.js");
         const { buildConflictReport, writeConflictReport } = await import("@cleocode/core/store/restore-conflict-report.js");
-        const projectRoot = getProjectRoot46();
+        const projectRoot = getProjectRoot48();
         if (args.force !== true) {
           const existing = checkForExistingData(projectRoot, getCleoHome6());
           if (existing.length > 0) {
@@ -36853,7 +37142,8 @@ var init_backup = __esm({
         export: exportCommand,
         import: importCommand,
         inspect: backupInspectSubCommand,
-        recover: backupRecoverSubCommand
+        recover: backupRecoverSubCommand,
+        verify: backupVerifySubCommand
       },
       async run({ cmd, rawArgs }) {
         if (isSubCommandDispatch(rawArgs, cmd.subCommands)) return;
@@ -36903,7 +37193,7 @@ var brain_exports = {};
 __export(brain_exports, {
   brainCommand: () => brainCommand
 });
-import { getProjectRoot as getProjectRoot28 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot29 } from "@cleocode/core";
 import {
   backfillBrainGraph,
   exportBrainAsGexf,
@@ -36948,7 +37238,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args }) {
-        const root = getProjectRoot28();
+        const root = getProjectRoot29();
         try {
           const result = await runBrainMaintenance(root, {
             skipDecay: !!args["skip-decay"],
@@ -37019,7 +37309,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot28();
+        const root = getProjectRoot29();
         try {
           const result = await backfillBrainGraph(root);
           cliOutput(
@@ -37060,7 +37350,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot28();
+        const root = getProjectRoot29();
         try {
           const result = await purgeBrainNoise(root);
           cliOutput(
@@ -37106,7 +37396,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args }) {
-        const root = getProjectRoot28();
+        const root = getProjectRoot29();
         const limit = Number.parseInt(args.limit, 10) || 20;
         try {
           const stats = await getPlasticityStats(root, limit);
@@ -37156,7 +37446,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot28();
+        const root = getProjectRoot29();
         try {
           const report = await getMemoryQualityReport(root);
           cliOutput(
@@ -37205,7 +37495,7 @@ var init_brain2 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot28();
+        const root = getProjectRoot29();
         const format = args.format ?? "gexf";
         if (format !== "gexf" && format !== "json") {
           cliError(`Invalid format: ${format}. Use 'gexf' or 'json'.`, "E_VALIDATION", {
@@ -37286,12 +37576,12 @@ __export(briefing_exports, {
   briefingCommand: () => briefingCommand
 });
 import { existsSync as existsSync9, readFileSync as readFileSync10 } from "node:fs";
-import { join as join12 } from "node:path";
+import { join as join11 } from "node:path";
 import { pushWarning } from "@cleocode/core";
 import { resolveLegacyCleoDir } from "@cleocode/paths";
 function resolveInjectionTemplatePath() {
   const xdgConfig = resolveLegacyCleoDir(process.env["XDG_CONFIG_HOME"]);
-  return join12(xdgConfig, "templates", "CLEO-INJECTION.md");
+  return join11(xdgConfig, "templates", "CLEO-INJECTION.md");
 }
 function extractSection(content, sectionName) {
   const openTag = `<!-- CLEO-INJECTION:section=${sectionName} -->`;
@@ -37530,7 +37820,7 @@ __export(caamp_exports, {
   caampCommand: () => caampCommand
 });
 import { homedir as homedir3 } from "node:os";
-import { join as join13 } from "node:path";
+import { join as join12 } from "node:path";
 var dedupeCommand, caampCommand;
 var init_caamp = __esm({
   "packages/cleo/src/cli/commands/caamp.ts"() {
@@ -37567,9 +37857,9 @@ var init_caamp = __esm({
         } else {
           const home = homedir3();
           filePaths = [
-            join13(home, ".agents", "AGENTS.md"),
+            join12(home, ".agents", "AGENTS.md"),
             // project-level AGENTS.md in cwd
-            join13(process.cwd(), "AGENTS.md")
+            join12(process.cwd(), "AGENTS.md")
           ];
         }
         if (args["dry-run"]) {
@@ -37677,7 +37967,7 @@ __export(cant_exports, {
   cantCommand: () => cantCommand
 });
 import { existsSync as existsSync10, mkdirSync as mkdirSync2, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname4, isAbsolute, join as join14, resolve as resolve3 } from "node:path";
+import { dirname as dirname4, isAbsolute, join as join13, resolve as resolve3 } from "node:path";
 function resolveFilePath(file) {
   return isAbsolute(file) ? file : resolve3(process.cwd(), file);
 }
@@ -37842,7 +38132,7 @@ var init_cant = __esm({
             const projectRoot = process.cwd();
             let written = 0;
             for (const outputFile of result.outputFiles) {
-              const outputPath = isAbsolute(outputFile.path) ? outputFile.path : join14(projectRoot, outputFile.path);
+              const outputPath = isAbsolute(outputFile.path) ? outputFile.path : join13(projectRoot, outputFile.path);
               mkdirSync2(dirname4(outputPath), { recursive: true });
               writeFileSync3(outputPath, outputFile.content, "utf-8");
               written++;
@@ -38022,8 +38312,14 @@ __export(changeset_exports, {
   changesetCommand: () => changesetCommand
 });
 import { existsSync as existsSync11 } from "node:fs";
-import { join as join15 } from "node:path";
-import { changesets, dataTable, getProjectRoot as getProjectRoot29 } from "@cleocode/core";
+import { join as join14 } from "node:path";
+import {
+  changesets,
+  dataTable,
+  detectStrayCleoDb,
+  getProjectRoot as getProjectRoot30,
+  resolveWorktreeRouting
+} from "@cleocode/core";
 function isValidKind(raw) {
   return typeof raw === "string" && CHANGESET_KINDS.includes(raw);
 }
@@ -38117,7 +38413,25 @@ var init_changeset = __esm({
           ...typeof args.notes === "string" && args.notes.length > 0 ? { notes: args.notes } : {},
           ...typeof args.breaking === "string" && args.breaking.length > 0 ? { breaking: args.breaking } : {}
         };
-        const projectRoot = getProjectRoot29();
+        const routing = resolveWorktreeRouting();
+        const strayDb = detectStrayCleoDb(routing);
+        if (strayDb) {
+          cliError(
+            `stray .cleo/tasks.db detected inside worktree at ${routing.worktreePath}. This is a leaked CLEO state directory.`,
+            6 /* VALIDATION_ERROR */,
+            {
+              name: "E_STRAY_WORKTREE_DB",
+              fix: `Remove it with: rm -rf ${routing.worktreePath}/.cleo \u2014 then retry. See ADR-068 \xA73 for the worktree DB isolation rationale.`
+            }
+          );
+          process.exit(6 /* VALIDATION_ERROR */);
+        }
+        if (routing.isWorktree && process.env["CLEO_QUIET"] !== "1") {
+          const routingLog = `[T10389] routing SSoT write from worktree cwd ${routing.cwd} \u2192 canonical project root ${routing.canonicalRoot}
+`;
+          process.stderr.write(routingLog);
+        }
+        const projectRoot = routing.canonicalRoot;
         const outcome = await changesets.writeChangesetEntry(entry, {
           projectRoot,
           ...typeof args["attached-by"] === "string" && args["attached-by"].length > 0 ? { attachedBy: args["attached-by"] } : {}
@@ -38144,8 +38458,8 @@ var init_changeset = __esm({
       },
       args: {},
       async run() {
-        const projectRoot = getProjectRoot29();
-        const dir = join15(projectRoot, ".changeset");
+        const projectRoot = getProjectRoot30();
+        const dir = join14(projectRoot, ".changeset");
         if (!existsSync11(dir)) {
           const empty = { entries: [], count: 0, dir, note: "no .changeset/ dir" };
           if (isHumanOutput()) {
@@ -38610,7 +38924,7 @@ var init_check2 = __esm({
       async run({ args }) {
         const { spawnSync } = await import("node:child_process");
         const { existsSync: existsSync17 } = await import("node:fs");
-        const { join: join35, resolve: resolve7 } = await import("node:path");
+        const { join: join34, resolve: resolve7 } = await import("node:path");
         const strict = Boolean(args.strict);
         const jsonOnly = Boolean(args.json);
         const repoRoot = resolve7(process.cwd());
@@ -38650,7 +38964,7 @@ var init_check2 = __esm({
         const results = [];
         let anyFailed = false;
         for (const gate of gates) {
-          const scriptPath = join35(repoRoot, gate.script);
+          const scriptPath = join34(repoRoot, gate.script);
           if (!existsSync17(scriptPath)) {
             results.push({
               id: gate.id,
@@ -38966,9 +39280,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartOutline } = await import("@cleocode/core/internal");
-            const { join: join35 } = await import("node:path");
+            const { join: join34 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join35(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join34(root, args.file);
             const result = smartOutline(absPath, root);
             if (result.errors.length > 0 && result.symbols.length === 0) {
               cliError(result.errors.join(", "), 1, { name: "E_OUTLINE_FAILED" });
@@ -39059,9 +39373,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartUnfold } = await import("@cleocode/core/internal");
-            const { join: join35 } = await import("node:path");
+            const { join: join34 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join35(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join34(root, args.file);
             const result = smartUnfold(absPath, args.symbol, root);
             if (!result.found) {
               const errs = result.errors.length > 0 ? `: ${result.errors.join(", ")}` : "";
@@ -40184,7 +40498,7 @@ var curator_exports = {};
 __export(curator_exports, {
   curatorCommand: () => curatorCommand
 });
-import { join as join16 } from "node:path";
+import { join as join15 } from "node:path";
 import { getCleoHome } from "@cleocode/paths";
 async function loadCurator() {
   return import("@cleocode/core/sentient/curator.js");
@@ -40214,7 +40528,7 @@ var init_curator = __esm({
         try {
           const { runCuratorTick } = await loadCurator();
           const { readCuratorConfig } = await loadDaemon();
-          const configPath = join16(getCleoHome(), "config.json");
+          const configPath = join15(getCleoHome(), "config.json");
           const cfg = await readCuratorConfig(configPath);
           const result = await runCuratorTick({
             dryRun: args["dry-run"] === true,
@@ -40255,7 +40569,7 @@ var init_curator = __esm({
       async run() {
         try {
           const { readCuratorConfig, curatorCronExpression } = await loadDaemon();
-          const configPath = join16(getCleoHome(), "config.json");
+          const configPath = join15(getCleoHome(), "config.json");
           const cfg = await readCuratorConfig(configPath);
           cliOutput(
             {
@@ -40330,7 +40644,7 @@ __export(daemon_exports, {
   daemonCommand: () => daemonCommand
 });
 import { existsSync as existsSync12 } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join16 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { getGCDaemonStatus, spawnGCDaemon, stopGCDaemon } from "@cleocode/core/gc/daemon.js";
 import {
@@ -40396,9 +40710,9 @@ async function showDaemonStatus(cleoDir, projectRoot) {
 }
 function resolveDaemonInstallerScript() {
   const filePath = fileURLToPath3(import.meta.url);
-  const candidate1 = join17(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
+  const candidate1 = join16(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
   if (existsSync12(candidate1)) return candidate1;
-  const candidate2 = join17(
+  const candidate2 = join16(
     filePath,
     "..",
     "..",
@@ -40470,13 +40784,13 @@ var init_daemon = __esm({
             {
               pid,
               cleoDir,
-              logs: join17(cleoDir, "logs", "gc.log"),
+              logs: join16(cleoDir, "logs", "gc.log"),
               message: `GC daemon started (PID ${pid})`
             },
             {
               command: "daemon",
               operation: "daemon.start",
-              message: `GC daemon started (PID ${pid}) \u2014 Logs: ${join17(cleoDir, "logs", "gc.log")}`
+              message: `GC daemon started (PID ${pid}) \u2014 Logs: ${join16(cleoDir, "logs", "gc.log")}`
             }
           );
         } catch (err) {
@@ -41247,11 +41561,11 @@ __export(detect_drift_exports, {
   detectDriftCommand: () => detectDriftCommand
 });
 import { existsSync as existsSync13, readdirSync, readFileSync as readFileSync13 } from "node:fs";
-import { dirname as dirname5, join as join18 } from "node:path";
+import { dirname as dirname5, join as join17 } from "node:path";
 function findProjectRoot() {
   let currentDir = process.cwd();
   while (currentDir !== "/") {
-    if (existsSync13(join18(currentDir, "package.json"))) {
+    if (existsSync13(join17(currentDir, "package.json"))) {
       return currentDir;
     }
     const parent = dirname5(currentDir);
@@ -41275,8 +41589,8 @@ var init_detect_drift = __esm({
       },
       async run() {
         const projectRoot = findProjectRoot();
-        const isCleoRepo = existsSync13(join18(projectRoot, "packages", "cleo", "src"));
-        const cleoSrcRoot = isCleoRepo ? join18(projectRoot, "packages", "cleo", "src") : join18(projectRoot, "src");
+        const isCleoRepo = existsSync13(join17(projectRoot, "packages", "cleo", "src"));
+        const cleoSrcRoot = isCleoRepo ? join17(projectRoot, "packages", "cleo", "src") : join17(projectRoot, "src");
         const safeRead = (filePath) => {
           try {
             return readFileSync13(filePath, "utf-8");
@@ -41290,7 +41604,7 @@ var init_detect_drift = __esm({
             checks: [],
             recommendations: []
           };
-          const injPath = join18(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
+          const injPath = join17(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
           if (existsSync13(injPath)) {
             const content = safeRead(injPath);
             userResult.checks.push({
@@ -41342,9 +41656,9 @@ var init_detect_drift = __esm({
           }
         };
         try {
-          const specPath = join18(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
-          const registryPath = join18(cleoSrcRoot, "dispatch", "registry.ts");
-          const dispatchDomainsDir = join18(cleoSrcRoot, "dispatch", "domains");
+          const specPath = join17(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
+          const registryPath = join17(cleoSrcRoot, "dispatch", "registry.ts");
+          const dispatchDomainsDir = join17(cleoSrcRoot, "dispatch", "domains");
           if (!existsSync13(specPath)) {
             addCheck("Gateway-to-spec sync", "fail", "CLEO-OPERATION-CONSTITUTION.md missing", [
               {
@@ -41413,8 +41727,8 @@ var init_detect_drift = __esm({
           ]);
         }
         try {
-          const cliDir = join18(cleoSrcRoot, "cli", "commands");
-          const coreDir = isCleoRepo ? join18(projectRoot, "packages", "core", "src") : join18(projectRoot, "src", "core");
+          const cliDir = join17(cleoSrcRoot, "cli", "commands");
+          const coreDir = isCleoRepo ? join17(projectRoot, "packages", "core", "src") : join17(projectRoot, "src", "core");
           if (!existsSync13(cliDir)) {
             addCheck("CLI-to-core sync", "fail", "CLI commands directory missing", [
               {
@@ -41441,7 +41755,7 @@ var init_detect_drift = __esm({
           addCheck("CLI-to-core sync", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const domainsDir = join18(cleoSrcRoot, "dispatch", "domains");
+          const domainsDir = join17(cleoSrcRoot, "dispatch", "domains");
           if (!existsSync13(domainsDir)) {
             addCheck("Domain handler coverage", "fail", "Dispatch domains directory missing", [
               {
@@ -41459,7 +41773,7 @@ var init_detect_drift = __esm({
           addCheck("Domain handler coverage", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const matrixPath = join18(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
+          const matrixPath = join17(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
           if (!existsSync13(matrixPath)) {
             addCheck("Capability matrix", "fail", "Capability matrix missing", [
               {
@@ -41476,7 +41790,7 @@ var init_detect_drift = __esm({
           addCheck("Capability matrix", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const schemaPath = join18(projectRoot, "src", "store", "schema.ts");
+          const schemaPath = join17(projectRoot, "src", "store", "schema.ts");
           if (!existsSync13(schemaPath)) {
             addCheck("Schema validation", "fail", "Schema definition missing", [
               {
@@ -41511,8 +41825,8 @@ var init_detect_drift = __esm({
           addCheck("Schema validation", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const visionPath = join18(projectRoot, "docs", "concepts", "CLEO-VISION.md");
-          const specPath = join18(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
+          const visionPath = join17(projectRoot, "docs", "concepts", "CLEO-VISION.md");
+          const specPath = join17(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
           const issues = [];
           if (!existsSync13(visionPath)) {
             issues.push({
@@ -41567,7 +41881,7 @@ var init_detect_drift = __esm({
           addCheck("Canonical identity", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const injectionPath = join18(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
+          const injectionPath = join17(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
           if (!existsSync13(injectionPath)) {
             addCheck("Agent injection", "fail", "Agent injection template missing", [
               {
@@ -41597,7 +41911,7 @@ var init_detect_drift = __esm({
           addCheck("Agent injection", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const exitCodesPath = join18(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
+          const exitCodesPath = join17(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
           if (!existsSync13(exitCodesPath)) {
             addCheck("Exit codes", "fail", "Exit codes definition missing", [
               {
@@ -41946,10 +42260,10 @@ var init_strict_args = __esm({
 
 // packages/cleo/src/viewer/pidfile.ts
 import { mkdir, readFile as readFile2, unlink, writeFile } from "node:fs/promises";
-import { dirname as dirname6, join as join19 } from "node:path";
+import { dirname as dirname6, join as join18 } from "node:path";
 import { getCleoHome as getCleoHome2 } from "@cleocode/core/internal";
 function viewerPidFilePath() {
-  return join19(getCleoHome2(), "viewer.pid");
+  return join18(getCleoHome2(), "viewer.pid");
 }
 async function writeViewerPidFile(record) {
   const path6 = viewerPidFilePath();
@@ -42049,11 +42363,11 @@ var init_port_allocator = __esm({
 // packages/cleo/src/viewer/server.ts
 import { createReadStream } from "node:fs";
 import { stat } from "node:fs/promises";
-import { dirname as dirname7, join as join20, normalize, resolve as resolve4 } from "node:path";
+import { dirname as dirname7, join as join19, normalize, resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import {
   createAttachmentStore as createAttachmentStore5,
-  getProjectRoot as getProjectRoot30,
+  getProjectRoot as getProjectRoot31,
   searchAllProjectDocs
 } from "@cleocode/core/internal";
 function getViewerAssetsDir() {
@@ -42088,7 +42402,7 @@ function inferTitle(markdown, fallback) {
 }
 async function serveStatic(res, assetsDir, relPath) {
   const safeRel = normalize(relPath).replace(/^[\\/]+/, "");
-  const absPath = join20(assetsDir, safeRel);
+  const absPath = join19(assetsDir, safeRel);
   const resolvedAssets = resolve4(assetsDir) + "/";
   const resolvedAbs = resolve4(absPath);
   if (`${resolvedAbs}/`.indexOf(resolvedAssets) !== 0 && resolvedAbs !== resolve4(assetsDir)) {
@@ -42113,7 +42427,7 @@ async function serveStatic(res, assetsDir, relPath) {
   }
 }
 function buildViewerHandler(opts = {}) {
-  const projectRoot = opts.projectRoot ?? getProjectRoot30();
+  const projectRoot = opts.projectRoot ?? getProjectRoot31();
   const assetsDir = getViewerAssetsDir();
   const store = createAttachmentStore5();
   return async (req, res) => {
@@ -42289,12 +42603,12 @@ var init_server = __esm({
 // packages/cleo/src/cli/commands/docs-viewer.ts
 import { spawn } from "node:child_process";
 import { open as fsOpen } from "node:fs/promises";
-import { join as join21 } from "node:path";
+import { join as join20 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
-import { getCleoHome as getCleoHome3, getProjectRoot as getProjectRoot31 } from "@cleocode/core";
+import { getCleoHome as getCleoHome3, getProjectRoot as getProjectRoot32 } from "@cleocode/core";
 function getCleoBinPath() {
   const thisFile = fileURLToPath5(import.meta.url);
-  return join21(thisFile, "..", "..", "index.js");
+  return join20(thisFile, "..", "..", "index.js");
 }
 async function waitForExit(pid, timeoutMs, intervalMs = 100) {
   const deadline = Date.now() + timeoutMs;
@@ -42323,7 +42637,7 @@ function openInBrowser(url) {
   }
 }
 async function spawnDetachedServer(opts) {
-  const logFile = join21(getCleoHome3(), "viewer.log");
+  const logFile = join20(getCleoHome3(), "viewer.log");
   const handle = await fsOpen(logFile, "a").catch(() => null);
   const stdio = handle ? ["ignore", handle.fd, handle.fd] : ["ignore", "ignore", "ignore"];
   const args = [
@@ -42342,7 +42656,7 @@ async function spawnDetachedServer(opts) {
     detached: true,
     stdio,
     env: { ...process.env, [DETACHED_CHILD_ENV]: "1" },
-    cwd: getProjectRoot31()
+    cwd: getProjectRoot32()
   });
   child.unref();
   if (handle) await handle.close();
@@ -42494,7 +42808,7 @@ var init_docs_viewer = __esm({
           pid: process.pid,
           port: handle.port,
           host: handle.host,
-          projectRoot: getProjectRoot31(),
+          projectRoot: getProjectRoot32(),
           startedAt: Date.now()
         };
         await writeViewerPidFile(record);
@@ -42770,15 +43084,19 @@ __export(docs_exports, {
   docsCommand: () => docsCommand
 });
 import { appendFile, mkdir as mkdir2, readdir, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname8, isAbsolute as isAbsolute2, join as join22, resolve as resolve5 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute2, join as join21, resolve as resolve5 } from "node:path";
 import {
   buildDocsGraph,
   CleoError as CleoError3,
   CounterMismatchError,
+  checkSlugSimilarity,
   createAttachmentStoreDocsAccessor,
+  DEFAULT_SIMILARITY_MODE,
+  DEFAULT_SIMILARITY_THRESHOLD,
+  detectStrayCleoDb as detectStrayCleoDb2,
   exportDocument,
   getAgentOutputsAbsolute,
-  getProjectRoot as getProjectRoot32,
+  getProjectRoot as getProjectRoot33,
   listDocVersions,
   makeClassifierForScanRoot,
   mergeDocs,
@@ -42787,6 +43105,8 @@ import {
   rankDocs,
   readJson,
   recordPublication,
+  resolveWorktreeFilePath,
+  resolveWorktreeRouting as resolveWorktreeRouting2,
   runDocsImport,
   searchAllProjectDocs as searchAllProjectDocs2,
   searchDocs as searchDocs2,
@@ -42794,7 +43114,7 @@ import {
   syncFromGit
 } from "@cleocode/core/internal";
 async function getScriptNames(projectRoot) {
-  const scriptsDir = join22(projectRoot, "scripts");
+  const scriptsDir = join21(projectRoot, "scripts");
   try {
     const files = await readdir(scriptsDir);
     return files.filter((f) => f.endsWith(".sh")).map((f) => f.replace(".sh", "")).sort();
@@ -42803,7 +43123,7 @@ async function getScriptNames(projectRoot) {
   }
 }
 async function getIndexedCommands(projectRoot) {
-  const indexPath = join22(projectRoot, "docs", "commands", "COMMANDS-INDEX.json");
+  const indexPath = join21(projectRoot, "docs", "commands", "COMMANDS-INDEX.json");
   const index = await readJson(indexPath);
   if (!index) return [];
   return index.commands.map((c) => c.name).sort();
@@ -42836,7 +43156,7 @@ async function runGapCheck(_projectRoot, filterId) {
     const reviewFiles = files.filter((f) => f.endsWith(".md"));
     for (const file of reviewFiles) {
       if (filterId && !file.includes(filterId)) continue;
-      const filePath = join22(reviewDir, file);
+      const filePath = join21(reviewDir, file);
       const content = await readFile3(filePath, "utf-8");
       const taskMatch = file.match(/^(T\d+)/);
       const taskId = taskMatch ? taskMatch[1] : "UNKNOWN";
@@ -42887,6 +43207,7 @@ var init_docs3 = __esm({
     init_src2();
     init_dist();
     init_cli();
+    init_canon_docs();
     init_strict_args();
     init_renderers();
     init_docs_viewer();
@@ -42924,11 +43245,15 @@ var init_docs3 = __esm({
         },
         slug: {
           type: "string",
-          description: "Human-friendly kebab-case alias for the attachment, unique per project (T9636). Collision returns E_SLUG_TAKEN with 3 alternative suggestions."
+          description: "Human-friendly kebab-case alias for the attachment, unique per project (T9636). Collision returns E_SLUG_RESERVED with 3 alternative suggestions (legacy E_SLUG_TAKEN aliased under details.aliases for one release \u2014 T10386)."
         },
         type: {
           type: "string",
           description: "Taxonomy classification \u2014 run `cleo docs list-types` to enumerate registered kinds (T9637 / T9788)"
+        },
+        "allow-similar": {
+          type: "boolean",
+          description: "Bypass the T10361 slug-similarity check. Use when you really do mean to add a new doc with a near-duplicate slug (e.g. intentional fork). Every bypass is logged to .cleo/audit/similar-bypass.jsonl."
         }
       },
       async run({ args, rawArgs }) {
@@ -42949,6 +43274,7 @@ var init_docs3 = __esm({
         const ownerId = args["owner-id"];
         const fileArg = args.file ?? void 0;
         const url = args.url ?? void 0;
+        const allowSimilar = args["allow-similar"] === true;
         if (!fileArg && !url) {
           cliError("provide a file path (positional argument) or --url <url>", 6, {
             name: "E_VALIDATION",
@@ -42956,13 +43282,113 @@ var init_docs3 = __esm({
           });
           process.exit(6);
         }
+        let resolvedFile;
+        if (fileArg) {
+          const routing = resolveWorktreeRouting2();
+          const strayDb = detectStrayCleoDb2(routing);
+          if (strayDb) {
+            cliError(
+              `stray .cleo/tasks.db detected inside worktree at ${routing.worktreePath}. This is a leaked CLEO state directory.`,
+              6,
+              {
+                name: "E_STRAY_WORKTREE_DB",
+                fix: `Remove it with: rm -rf ${routing.worktreePath}/.cleo \u2014 then retry. See ADR-068 \xA73 for the worktree DB isolation rationale.`
+              }
+            );
+            process.exit(6);
+          }
+          if (routing.isWorktree && process.env["CLEO_QUIET"] !== "1") {
+            const routingLog = `[T10389] routing SSoT write from worktree cwd ${routing.cwd} \u2192 canonical project root ${routing.canonicalRoot}
+`;
+            process.stderr.write(routingLog);
+          }
+          resolvedFile = resolveWorktreeFilePath(String(fileArg), routing);
+        }
+        if (args.slug && args.type) {
+          const projectRoot = await getProjectRoot33();
+          let warnThreshold = DEFAULT_SIMILARITY_THRESHOLD;
+          let mode = DEFAULT_SIMILARITY_MODE;
+          try {
+            const canon = loadCanonRegistry(projectRoot);
+            if (canon?.similarity) {
+              warnThreshold = canon.similarity.warnThreshold;
+              mode = canon.similarity.mode;
+            }
+          } catch {
+          }
+          try {
+            const sim = await checkSlugSimilarity({
+              slug: args.slug,
+              type: args.type,
+              projectRoot,
+              threshold: warnThreshold
+            });
+            if (sim.mostSimilarSlug !== null) {
+              const scoreFixed = sim.score.toFixed(2);
+              const hint = `Similar to '${sim.mostSimilarSlug}' (score ${scoreFixed}) \u2014 did you mean: cleo docs update ${sim.mostSimilarSlug}? Pass --allow-similar to bypass.`;
+              if (mode === "block" && !allowSimilar) {
+                cliError(hint, 6 /* VALIDATION_ERROR */, {
+                  name: "E_SLUG_SIMILARITY",
+                  fix: `Use \`cleo docs update ${sim.mostSimilarSlug}\` if updating, or pass --allow-similar to add as a new doc.`,
+                  alternatives: [
+                    {
+                      action: `update '${sim.mostSimilarSlug}' instead`,
+                      command: `cleo docs update ${sim.mostSimilarSlug}`
+                    },
+                    {
+                      action: "bypass the similarity check",
+                      command: `cleo docs add ${ownerId} ${fileArg ?? `--url ${url}`} --slug ${args.slug} --type ${args.type} --allow-similar`
+                    }
+                  ],
+                  details: {
+                    proposedSlug: args.slug,
+                    mostSimilarSlug: sim.mostSimilarSlug,
+                    score: sim.score,
+                    threshold: warnThreshold,
+                    kind: args.type
+                  }
+                });
+                process.exit(6 /* VALIDATION_ERROR */);
+              }
+              humanInfo(hint);
+              if (allowSimilar) {
+                const auditLine = `${JSON.stringify({
+                  ts: (/* @__PURE__ */ new Date()).toISOString(),
+                  reason: "allow-similar-bypass",
+                  proposedSlug: args.slug,
+                  mostSimilarSlug: sim.mostSimilarSlug,
+                  score: sim.score,
+                  threshold: warnThreshold,
+                  kind: args.type,
+                  ownerId
+                })}
+`;
+                try {
+                  await mkdir2(join21(projectRoot, ".cleo", "audit"), { recursive: true });
+                  await appendFile(
+                    join21(projectRoot, ".cleo", "audit", "similar-bypass.jsonl"),
+                    auditLine,
+                    "utf-8"
+                  );
+                } catch {
+                }
+              }
+            }
+          } catch (err) {
+            if (process.env["CLEO_DEBUG"]) {
+              humanInfo(
+                `similarity check skipped: ${err instanceof Error ? err.message : String(err)}`
+              );
+            }
+          }
+        }
         await dispatchFromCli(
           "mutate",
           "docs",
           "add",
           {
             ownerId,
-            ...fileArg ? { file: fileArg } : {},
+            ...resolvedFile ? { file: resolvedFile } : {},
             ...url ? { url } : {},
             ...args.desc ? { desc: args.desc } : {},
             ...args.labels ? { labels: args.labels } : {},
@@ -43179,7 +43605,7 @@ var init_docs3 = __esm({
         const taskId = String(args.task);
         const includeAttachments = args["include-attachments"] !== false;
         const includeMemoryRefs = args["include-memory-refs"] === true;
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         try {
           const result = await exportDocument({
             taskId,
@@ -43245,7 +43671,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         const limit = args.limit ? Number.parseInt(String(args.limit), 10) : 10;
         try {
           const result = args.owner ? await searchDocs2(String(args.query), {
@@ -43301,7 +43727,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         const rawStrategy = args.strategy ?? "three-way";
         const strategy = rawStrategy === "cherry-pick" || rawStrategy === "multi-diff" ? rawStrategy : "three-way";
         try {
@@ -43350,7 +43776,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         const fmt = args.format ?? "mermaid";
         try {
           const result = await buildDocsGraph({ ownerId: String(args.for), projectRoot });
@@ -43419,7 +43845,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         try {
           const result = await rankDocs({
             ownerId: String(args.for),
@@ -43457,7 +43883,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         try {
           const result = await listDocVersions({
             ownerId: String(args.for),
@@ -43500,7 +43926,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         try {
           const result = await publishDocs({
             ownerId: String(args.for),
@@ -43624,7 +44050,7 @@ var init_docs3 = __esm({
       },
       async run({ args }) {
         if (args.from) {
-          const projectRoot = getProjectRoot32();
+          const projectRoot = getProjectRoot33();
           const ownerId = args.for ?? void 0;
           if (!ownerId) {
             cliError(
@@ -43691,7 +44117,7 @@ var init_docs3 = __esm({
         }
       },
       async run() {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         try {
           const result = await statusDocs({ projectRoot });
           cliOutput(result, { command: "docs status", operation: "docs.status" });
@@ -43776,7 +44202,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         const dirArg = String(args.dir);
         const scanRoot = isAbsolute2(dirArg) ? dirArg : resolve5(projectRoot, dirArg);
         const dryRun = args["dry-run"] === true;
@@ -43790,9 +44216,9 @@ var init_docs3 = __esm({
           })}
 `;
           try {
-            await mkdir2(join22(projectRoot, ".cleo", "audit"), { recursive: true });
+            await mkdir2(join21(projectRoot, ".cleo", "audit"), { recursive: true });
             await appendFile(
-              join22(projectRoot, ".cleo", "audit", "import-force-bypass.jsonl"),
+              join21(projectRoot, ".cleo", "audit", "import-force-bypass.jsonl"),
               auditLine,
               "utf-8"
             );
@@ -43850,7 +44276,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         const { registry, configError } = loadCliRegistry(projectRoot);
         const kinds = registry.list().map(toWireKind);
         const extensionsCount = kinds.filter((k) => k.isExtension).length;
@@ -43894,7 +44320,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot32();
+        const projectRoot = getProjectRoot33();
         const { registry, configError } = loadCliRegistry(projectRoot);
         const kinds = registry.list().map(toWireKind);
         let counts2;
@@ -43972,6 +44398,235 @@ var init_docs3 = __esm({
   }
 });
 
+// packages/cleo/src/cli/commands/doctor-db-substrate.ts
+var doctor_db_substrate_exports = {};
+__export(doctor_db_substrate_exports, {
+  doctorDbSubstrateCommand: () => doctorDbSubstrateCommand
+});
+import { getProjectRoot as getProjectRoot34, pushWarning as pushWarning2 } from "@cleocode/core";
+import { surveyDbSubstrate, surveyFleetDbSubstrate } from "@cleocode/core/doctor/db-substrate.js";
+function pushSubstrateWarnings(result) {
+  for (const warning of result.warnings) {
+    const context = {
+      kind: warning.kind,
+      path: warning.path,
+      lastWriteMs: warning.lastWriteMs
+    };
+    if (warning.kind === "orphan-project-root") {
+      context["parentWorkspace"] = warning.parentWorkspace ?? null;
+    }
+    pushWarning2({
+      code: warning.kind === "orphan-project-root" ? "W_DB_SUBSTRATE_ORPHAN_PROJECT_ROOT" : "W_DB_SUBSTRATE_NESTED_NEXUS_DUPLICATE",
+      message: warning.kind === "orphan-project-root" ? `Orphan project-root .cleo/ at ${warning.path} (T9550 regression class \u2014 review then remove)` + (warning.parentWorkspace ? ` \u2014 attributed to workspace: ${warning.parentWorkspace}` : "") : `Nested-nexus duplicate at ${warning.path} (structural duplicate of the canonical flat layout)`,
+      severity: "warn",
+      context
+    });
+  }
+  for (const projectSurvey of result.projects) {
+    for (const [role, entry] of Object.entries(projectSurvey.dbs)) {
+      if (entry.pragmaDrift === null || entry.pragmaDrift.length === 0) continue;
+      for (const drift of entry.pragmaDrift) {
+        pushWarning2({
+          code: "W_DB_SUBSTRATE_PRAGMA_DRIFT",
+          message: `Pragma drift on ${role} (${entry.filePath}): expected ${drift.pragma}=${drift.expected}, actual=${drift.actual ?? "<unmeasurable>"}`,
+          severity: "warn",
+          context: {
+            role,
+            filePath: entry.filePath,
+            pragma: drift.pragma,
+            expected: drift.expected,
+            actual: drift.actual
+          }
+        });
+      }
+    }
+  }
+  for (const report of result.crossDbOrphans) {
+    if (report.skipped || report.orphanCount === 0) continue;
+    pushWarning2({
+      code: `W_DB_SUBSTRATE_CROSS_DB_${report.invariant}`,
+      message: `${report.invariant}: ${report.orphanCount} orphan row${report.orphanCount === 1 ? "" : "s"} \u2014 ${report.description}. ${report.suggestedFix}`,
+      severity: "warn",
+      context: {
+        invariant: report.invariant,
+        orphanCount: report.orphanCount,
+        sample: report.sample.join(","),
+        suggestedFix: report.suggestedFix
+      }
+    });
+  }
+}
+function pushPerDbWarnings(result) {
+  for (const projectSurvey of result.projects) {
+    for (const [role, dbEntry] of Object.entries(projectSurvey.dbs)) {
+      if (dbEntry.quarantinedTo !== null) {
+        pushWarning2({
+          code: "W_DB_SUBSTRATE_AUTO_QUARANTINED",
+          message: `Auto-quarantined corrupt ${role} DB at ${dbEntry.filePath} \u2192 ${dbEntry.quarantinedTo}. Recover via: cleo backup recover ${role}`,
+          severity: "warn",
+          context: {
+            role,
+            filePath: dbEntry.filePath,
+            quarantinedTo: dbEntry.quarantinedTo,
+            integrityCheckMs: dbEntry.integrityCheckMs
+          }
+        });
+      }
+      if (dbEntry.timedOut) {
+        pushWarning2({
+          code: "W_DB_SUBSTRATE_INTEGRITY_TIMEOUT",
+          message: `integrity_check on ${role} DB at ${dbEntry.filePath} took ${dbEntry.integrityCheckMs}ms \u2014 slow substrate flagged for operator attention`,
+          severity: "warn",
+          context: {
+            role,
+            filePath: dbEntry.filePath,
+            integrityCheckMs: dbEntry.integrityCheckMs
+          }
+        });
+      }
+    }
+  }
+}
+var DEFAULT_FLEET_ROOT, doctorDbSubstrateCommand;
+var init_doctor_db_substrate = __esm({
+  "packages/cleo/src/cli/commands/doctor-db-substrate.ts"() {
+    "use strict";
+    init_define_cli_command();
+    init_renderers();
+    DEFAULT_FLEET_ROOT = "/mnt/projects";
+    doctorDbSubstrateCommand = defineCommand({
+      meta: {
+        name: "db-substrate",
+        description: "Walk every DB in the inventory + report integrity, row counts, orphan dirs. Use --fleet for a multi-project survey under --fleet-root (default /mnt/projects)."
+      },
+      args: {
+        fleet: {
+          type: "boolean",
+          description: "Multi-project survey \u2014 walk every .cleo/-bearing subdir under --fleet-root"
+        },
+        "fleet-root": {
+          type: "string",
+          description: "Fleet root path (default: /mnt/projects). Only used with --fleet."
+        },
+        "integrity-timeout-ms": {
+          type: "string",
+          description: "Wall-clock budget for each PRAGMA integrity_check call (ms; default 60000; 0 disables)."
+        },
+        "no-quarantine": {
+          type: "boolean",
+          description: "Disable auto-quarantine of corrupt DBs (leaves them in place; report-only mode)."
+        },
+        json: { type: "boolean", description: "Output as JSON" },
+        human: { type: "boolean", description: "Force human-readable output" },
+        quiet: { type: "boolean", description: "Suppress non-essential output" }
+      },
+      async run({ args }) {
+        const isFleet = args.fleet === true;
+        let parsedTimeoutMs;
+        if (typeof args["integrity-timeout-ms"] === "string" && args["integrity-timeout-ms"].length > 0) {
+          const n = Number.parseInt(args["integrity-timeout-ms"], 10);
+          if (Number.isFinite(n) && n >= 0) {
+            parsedTimeoutMs = n;
+          }
+        }
+        const options = {
+          ...parsedTimeoutMs !== void 0 ? { integrityCheckTimeoutMs: parsedTimeoutMs } : {},
+          autoQuarantine: args["no-quarantine"] !== true
+        };
+        const result = isFleet ? surveyFleetDbSubstrate(
+          typeof args["fleet-root"] === "string" && args["fleet-root"].length > 0 ? args["fleet-root"] : DEFAULT_FLEET_ROOT,
+          options
+        ) : surveyDbSubstrate(getProjectRoot34(), options);
+        pushSubstrateWarnings(result);
+        pushPerDbWarnings(result);
+        cliOutput(result, {
+          command: "doctor",
+          operation: "doctor.db-substrate.run"
+        });
+        if (result.summary.corrupt > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
+          process.exitCode = 2;
+        }
+      }
+    });
+  }
+});
+
+// packages/cleo/src/cli/commands/doctor-legacy-backups.ts
+var doctor_legacy_backups_exports = {};
+__export(doctor_legacy_backups_exports, {
+  doctorLegacyBackupsCommand: () => doctorLegacyBackupsCommand
+});
+import { getProjectRoot as getProjectRoot35 } from "@cleocode/core";
+import { pruneLegacyBackups, scanLegacyBackups } from "@cleocode/core/doctor/legacy-backups.js";
+function parsePositiveInt(raw, fallback) {
+  if (raw === void 0 || raw === null) return fallback;
+  const parsed = Number.parseInt(String(raw), 10);
+  if (!Number.isFinite(parsed) || parsed <= 0) return fallback;
+  return parsed;
+}
+var doctorLegacyBackupsCommand;
+var init_doctor_legacy_backups = __esm({
+  "packages/cleo/src/cli/commands/doctor-legacy-backups.ts"() {
+    "use strict";
+    init_define_cli_command();
+    init_renderers();
+    doctorLegacyBackupsCommand = defineCommand({
+      meta: {
+        name: "legacy-backups",
+        description: "Enumerate legacy *-pre-cleo.db.bak / brain.db.PRE-DUP-FIX-* / pre-untrack / rotation-overflow artefacts and report origin + retention recommendation. Use --prune to delete 'delete'-recommended files (always dry-run unless --no-dry-run is passed)."
+      },
+      args: {
+        prune: {
+          type: "boolean",
+          description: "Remove every artefact whose recommendation is 'delete'. Defaults to --dry-run; pass --no-dry-run to physically remove."
+        },
+        "dry-run": {
+          type: "boolean",
+          description: "Combine with --prune to preview deletions without touching the filesystem.",
+          default: true
+        },
+        "soft-retention-days": {
+          type: "string",
+          description: "Days under which artefacts are always kept (default 30)."
+        },
+        "hard-retention-days": {
+          type: "string",
+          description: "Days over which artefacts are eligible for prune (default 90)."
+        },
+        json: { type: "boolean", description: "Output as JSON" },
+        human: { type: "boolean", description: "Force human-readable output" },
+        quiet: { type: "boolean", description: "Suppress non-essential output" }
+      },
+      async run({ args }) {
+        const softRetentionDays = parsePositiveInt(args["soft-retention-days"], 30);
+        const hardRetentionDays = parsePositiveInt(args["hard-retention-days"], 90);
+        const projectRoot = getProjectRoot35();
+        let result;
+        if (args.prune === true) {
+          const dryRun = args["dry-run"] !== false;
+          result = pruneLegacyBackups(projectRoot, {
+            softRetentionDays,
+            hardRetentionDays,
+            dryRun
+          });
+        } else {
+          result = scanLegacyBackups(projectRoot, {
+            softRetentionDays,
+            hardRetentionDays
+          });
+        }
+        cliOutput(result, {
+          command: "doctor",
+          operation: "doctor.legacy-backups.run"
+        });
+        if (result.errors.length > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
+          process.exitCode = 1;
+        }
+      }
+    });
+  }
+});
+
 // packages/cleo/src/cli/commands/doctor-projects.ts
 var doctor_projects_exports = {};
 __export(doctor_projects_exports, {
@@ -44236,66 +44891,6 @@ ${this.prefix}: \u2717 ${message}
   }
 });
 
-// packages/cleo/src/cli/commands/doctor-db-substrate.ts
-import { getProjectRoot as getProjectRoot33, pushWarning as pushWarning2 } from "@cleocode/core";
-import { surveyDbSubstrate, surveyFleetDbSubstrate } from "@cleocode/core/doctor/db-substrate.js";
-function pushSubstrateWarnings(result) {
-  for (const warning of result.warnings) {
-    pushWarning2({
-      code: warning.kind === "orphan-project-root" ? "W_DB_SUBSTRATE_ORPHAN_PROJECT_ROOT" : "W_DB_SUBSTRATE_NESTED_NEXUS_DUPLICATE",
-      message: warning.kind === "orphan-project-root" ? `Orphan project-root .cleo/ at ${warning.path} (T9550 regression class \u2014 review then remove)` : `Nested-nexus duplicate at ${warning.path} (structural duplicate of the canonical flat layout)`,
-      severity: "warn",
-      context: {
-        kind: warning.kind,
-        path: warning.path,
-        lastWriteMs: warning.lastWriteMs
-      }
-    });
-  }
-}
-var DEFAULT_FLEET_ROOT, doctorDbSubstrateCommand;
-var init_doctor_db_substrate = __esm({
-  "packages/cleo/src/cli/commands/doctor-db-substrate.ts"() {
-    "use strict";
-    init_define_cli_command();
-    init_renderers();
-    DEFAULT_FLEET_ROOT = "/mnt/projects";
-    doctorDbSubstrateCommand = defineCommand({
-      meta: {
-        name: "db-substrate",
-        description: "Walk every DB in the inventory + report integrity, row counts, orphan dirs. Use --fleet for a multi-project survey under --fleet-root (default /mnt/projects)."
-      },
-      args: {
-        fleet: {
-          type: "boolean",
-          description: "Multi-project survey \u2014 walk every .cleo/-bearing subdir under --fleet-root"
-        },
-        "fleet-root": {
-          type: "string",
-          description: "Fleet root path (default: /mnt/projects). Only used with --fleet."
-        },
-        json: { type: "boolean", description: "Output as JSON" },
-        human: { type: "boolean", description: "Force human-readable output" },
-        quiet: { type: "boolean", description: "Suppress non-essential output" }
-      },
-      async run({ args }) {
-        const isFleet = args.fleet === true;
-        const result = isFleet ? surveyFleetDbSubstrate(
-          typeof args["fleet-root"] === "string" && args["fleet-root"].length > 0 ? args["fleet-root"] : DEFAULT_FLEET_ROOT
-        ) : surveyDbSubstrate(getProjectRoot33());
-        pushSubstrateWarnings(result);
-        cliOutput(result, {
-          command: "doctor",
-          operation: "doctor.db-substrate.run"
-        });
-        if (result.summary.corrupt > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
-          process.exitCode = 2;
-        }
-      }
-    });
-  }
-});
-
 // packages/cleo/src/cli/commands/migrate-agents-v2.ts
 var migrate_agents_v2_exports = {};
 __export(migrate_agents_v2_exports, {
@@ -44307,8 +44902,8 @@ __export(migrate_agents_v2_exports, {
 });
 import { createHash as createHash2 } from "node:crypto";
 import { appendFileSync as appendFileSync2, existsSync as existsSync14, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync14 } from "node:fs";
-import { join as join23 } from "node:path";
-import { getProjectRoot as getProjectRoot34, installAgentFromCant } from "@cleocode/core/internal";
+import { join as join22 } from "node:path";
+import { getProjectRoot as getProjectRoot36, installAgentFromCant } from "@cleocode/core/internal";
 import { openCleoDb as openCleoDb2 } from "@cleocode/core/store/open-cleo-db";
 function sha256Hex(bytes) {
   return createHash2("sha256").update(bytes).digest("hex");
@@ -44327,8 +44922,8 @@ function extractAgentName(source) {
   return headerMatch[1] ?? null;
 }
 function appendAuditLog(projectRoot, entry) {
-  const auditPath = join23(projectRoot, AUDIT_LOG_RELATIVE);
-  const auditDir = join23(auditPath, "..");
+  const auditPath = join22(projectRoot, AUDIT_LOG_RELATIVE);
+  const auditDir = join22(auditPath, "..");
   if (!existsSync14(auditDir)) {
     mkdirSync3(auditDir, { recursive: true });
   }
@@ -44346,7 +44941,7 @@ function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
     return;
   }
   for (const filename of files) {
-    const cantPath = join23(scanDir, filename);
+    const cantPath = join22(scanDir, filename);
     const relPath = cantPath.replace(`${projectRoot}/`, "");
     let sourceBytes;
     let sourceText;
@@ -44443,9 +45038,9 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
   const { db: _sdDb } = await openCleoDb2("signaldock");
   const db = _sdDb;
   try {
-    const canonicalDir = join23(projectRoot, ".cleo", "cant", "agents");
+    const canonicalDir = join22(projectRoot, ".cleo", "cant", "agents");
     walkAgentsDir(db, canonicalDir, projectRoot, summary, verbose);
-    const legacyDir = join23(projectRoot, ".cleo", "agents");
+    const legacyDir = join22(projectRoot, ".cleo", "agents");
     walkAgentsDir(db, legacyDir, projectRoot, summary, verbose);
   } finally {
     db.close();
@@ -44453,7 +45048,7 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
   return summary;
 }
 function readMigrationConflicts(projectRoot) {
-  const auditPath = join23(projectRoot, AUDIT_LOG_RELATIVE);
+  const auditPath = join22(projectRoot, AUDIT_LOG_RELATIVE);
   if (!existsSync14(auditPath)) return [];
   let raw;
   try {
@@ -44495,7 +45090,7 @@ var init_migrate_agents_v2 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot34();
+        const projectRoot = getProjectRoot36();
         const verbose = args.quiet !== true;
         if (verbose) {
           humanInfo("Scanning .cleo/cant/agents/ and .cleo/agents/ for unregistered agents...");
@@ -44538,8 +45133,8 @@ __export(doctor_exports, {
   doctorCommand: () => doctorCommand2
 });
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join24 } from "node:path";
-import { getProjectRoot as getProjectRoot35, pushWarning as pushWarning3 } from "@cleocode/core";
+import { join as join23 } from "node:path";
+import { getProjectRoot as getProjectRoot37, pushWarning as pushWarning3 } from "@cleocode/core";
 import {
   quarantineRogueCleoDir,
   scanRogueCleoDirs
@@ -44577,8 +45172,8 @@ async function scanTestFixturesInProd(projectRoot) {
 }
 async function quarantineTestFixtures(projectRoot, matches) {
   if (matches.length === 0) return 0;
-  const cleoDir = join24(projectRoot, ".cleo");
-  const quarantineDir = join24(
+  const cleoDir = join23(projectRoot, ".cleo");
+  const quarantineDir = join23(
     cleoDir,
     "quarantine",
     `fixture-scan-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`
@@ -44586,7 +45181,7 @@ async function quarantineTestFixtures(projectRoot, matches) {
   mkdirSync4(quarantineDir, { recursive: true });
   const manifest = matches.map((m) => ({ ...m, quarantinedAt: (/* @__PURE__ */ new Date()).toISOString() }));
   writeFileSync4(
-    join24(quarantineDir, "manifest.jsonl"),
+    join23(quarantineDir, "manifest.jsonl"),
     manifest.map((m) => JSON.stringify(m)).join("\n") + "\n"
   );
   const { getNativeDb } = await import("@cleocode/core/store/sqlite.js");
@@ -44650,6 +45245,7 @@ var init_doctor = __esm({
     init_progress();
     init_renderers();
     init_doctor_db_substrate();
+    init_doctor_legacy_backups();
     init_doctor_projects();
     init_migrate_agents_v2();
     FIXTURE_ID_PATTERNS = [/^E\d+$/, /^T\d+EP$/];
@@ -44663,7 +45259,9 @@ var init_doctor = __esm({
       meta: { name: "doctor", description: "Run system diagnostics and health checks" },
       subCommands: {
         // T10307 / Saga T10281 / Epic T10282 — DB-substrate walker
-        "db-substrate": doctorDbSubstrateCommand
+        "db-substrate": doctorDbSubstrateCommand,
+        // T10309 / Saga T10281 / Epic T10282 — Legacy-backup walker
+        "legacy-backups": doctorLegacyBackupsCommand
       },
       args: {
         detailed: {
@@ -44831,7 +45429,7 @@ var init_doctor = __esm({
         try {
           if (args.brain) {
             const { computeBrainHealthDashboard } = await import("@cleocode/core/memory/brain-health-dashboard.js");
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const dashboard = await computeBrainHealthDashboard(projectRoot);
             cliOutput(dashboard, { command: "doctor", operation: "doctor.brain" });
             if (dashboard.hasP0Failure) {
@@ -44840,7 +45438,7 @@ var init_doctor = __esm({
             return;
           }
           if (args["scan-test-fixtures-in-prod"]) {
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const matches = await scanTestFixturesInProd(projectRoot);
             const dryRun = args["dry-run"] !== false && args.quarantine !== true;
             const quarantined = !dryRun && matches.length > 0 ? await quarantineTestFixtures(projectRoot, matches) : void 0;
@@ -44928,7 +45526,7 @@ var init_doctor = __esm({
             progress.complete("Comprehensive diagnostics complete");
           } else if (args["scan-rogue-cleo-dirs"]) {
             progress.step(0, "Scanning for rogue .cleo/ directories");
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const reports = scanRogueCleoDirs(projectRoot);
             progress.complete(
               `Found ${reports.length} rogue .cleo/ director${reports.length === 1 ? "y" : "ies"}`
@@ -44937,7 +45535,7 @@ var init_doctor = __esm({
           } else if (args["quarantine-rogue-cleo-dirs"]) {
             const isDryRun = args["dry-run"] === true;
             progress.step(0, `${isDryRun ? "[DRY RUN] " : ""}Scanning for rogue .cleo/ directories`);
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const reports = scanRogueCleoDirs(projectRoot);
             if (reports.length === 0) {
               progress.complete("No rogue .cleo/ directories found \u2014 nothing to quarantine");
@@ -44991,7 +45589,7 @@ var init_doctor = __esm({
             const { detectAndRemoveLegacyGlobalFiles, detectAndRemoveStrayProjectNexus } = await import("@cleocode/core/store/cleanup-legacy.js");
             const { getCleoHome: getCleoHome6 } = await import("@cleocode/core");
             const cleoHome = getCleoHome6();
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const legacyResult = detectAndRemoveLegacyGlobalFiles(cleoHome);
             const strayResult = detectAndRemoveStrayProjectNexus(projectRoot);
             const isDryRun = args["dry-run"] === true;
@@ -45024,7 +45622,7 @@ var init_doctor = __esm({
           } else if (args["audit-worktree-orphans"]) {
             progress.step(0, "Comprehensive worktree anomaly audit (T9808 / council D009)");
             const { auditWorktreeOrphansComprehensive, scanWorktreeOrphansBudgeted } = await import("@cleocode/core/doctor/worktree-orphans.js");
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const timeoutSecs = args["timeout"] !== void 0 ? Number.parseInt(String(args["timeout"]), 10) : 30;
             const timeoutMs = Number.isFinite(timeoutSecs) && timeoutSecs > 0 ? timeoutSecs * 1e3 : 3e4;
             const maxEntriesPerLevel = args["max-entries-per-level"] !== void 0 ? Number.parseInt(String(args["max-entries-per-level"]), 10) : 500;
@@ -45081,7 +45679,7 @@ var init_doctor = __esm({
               `${isDryRun ? "[DRY RUN] " : ""}Scanning + pruning worktree-orphan .cleo/ directories`
             );
             const { pruneWorktreeOrphans, scanWorktreeOrphansBudgeted } = await import("@cleocode/core/doctor/worktree-orphans.js");
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const timeoutSecs = args["timeout"] !== void 0 ? Number.parseInt(String(args["timeout"]), 10) : 30;
             const timeoutMs = Number.isFinite(timeoutSecs) && timeoutSecs > 0 ? timeoutSecs * 1e3 : 3e4;
             const maxEntriesPerLevel = args["max-entries-per-level"] !== void 0 ? Number.parseInt(String(args["max-entries-per-level"]), 10) : 500;
@@ -45129,8 +45727,8 @@ var init_doctor = __esm({
               );
               return;
             }
-            const archiveDir = join24(projectRoot, ".cleo", "backups");
-            const auditLogPath = join24(projectRoot, ".cleo", "audit", "worktree-prune.jsonl");
+            const archiveDir = join23(projectRoot, ".cleo", "backups");
+            const auditLogPath = join23(projectRoot, ".cleo", "audit", "worktree-prune.jsonl");
             const result = await pruneWorktreeOrphans(orphans, {
               archiveDir,
               auditLogPath,
@@ -45160,7 +45758,7 @@ var init_doctor = __esm({
               `${isDryRun ? "[DRY RUN] " : ""}Migrating .cleo/worktree-include \u2192 .worktreeinclude`
             );
             const { migrateWorktreeIncludeFile } = await import("@cleocode/core");
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const result = await migrateWorktreeIncludeFile(projectRoot, { dryRun: isDryRun });
             progress.complete(`Migration ${result.action}`);
             cliOutput(result, { command: "doctor", operation: "doctor.migrate-worktree-include" });
@@ -45176,7 +45774,7 @@ var init_doctor = __esm({
           } else if (args["audit-sagas"]) {
             progress.step(0, "Auditing Saga hierarchy for ADR-073 invariants");
             const { auditSagaHierarchy } = await import("@cleocode/core/doctor/saga-audit.js");
-            const projectRoot = getProjectRoot35();
+            const projectRoot = getProjectRoot37();
             const result = await auditSagaHierarchy(projectRoot);
             const summary = `Saga audit complete \u2014 ${result.sagas.length} saga(s) inspected, ${result.count} invariant violation(s), ${result.driftCount} drift warning(s)`;
             progress.complete(summary);
@@ -45194,7 +45792,7 @@ var init_doctor = __esm({
               { command: "doctor", operation: "admin.health" }
             );
             try {
-              const projectRoot = getProjectRoot35();
+              const projectRoot = getProjectRoot37();
               const conflicts = readMigrationConflicts(projectRoot);
               if (conflicts.length > 0) {
                 progress.complete(
@@ -45225,7 +45823,7 @@ var init_doctor = __esm({
               progress.complete("Health check complete");
             }
             try {
-              const projectRoot = getProjectRoot35();
+              const projectRoot = getProjectRoot37();
               const { auditSagaHierarchy } = await import("@cleocode/core/doctor/saga-audit.js");
               const sagaAudit = await auditSagaHierarchy(projectRoot);
               if (sagaAudit.sagas.length === 0) {
@@ -45287,7 +45885,7 @@ __export(event_exports, {
   orchestratorCommand: () => orchestratorCommand
 });
 import { readdir as readdir2 } from "node:fs/promises";
-import { join as join25 } from "node:path";
+import { join as join24 } from "node:path";
 import { cwd as processCwd } from "node:process";
 import { appendEvent } from "@cleocode/core/events/event-bus.js";
 function resolveProjectRoot3(arg) {
@@ -45410,7 +46008,7 @@ var init_event = __esm({
         const agentIdFilter = args.agent;
         const showAll = args.all === true;
         const lines = parseInt(args.lines ?? "20", 10);
-        const eventsDir = join25(projectRoot, ".cleo", "agent-events");
+        const eventsDir = join24(projectRoot, ".cleo", "agent-events");
         try {
           let files = [];
           try {
@@ -45448,7 +46046,7 @@ var init_event = __esm({
           for (const file of filesToTail) {
             const agentId = file.replace(".jsonl", "");
             const { readFileSync: readFileSync18 } = await import("node:fs");
-            const content = readFileSync18(join25(eventsDir, file), "utf-8");
+            const content = readFileSync18(join24(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -45518,7 +46116,7 @@ var init_event = __esm({
         const epicFilter = args.epic;
         const follow = args.follow === true;
         const lines = parseInt(args.lines ?? "50", 10);
-        const eventsDir = join25(projectRoot, ".cleo", "agent-events");
+        const eventsDir = join24(projectRoot, ".cleo", "agent-events");
         let files = [];
         try {
           const entries = await readdir2(eventsDir);
@@ -45544,7 +46142,7 @@ var init_event = __esm({
           const agentId = file.replace(".jsonl", "");
           try {
             const { readFileSync: readFileSync18 } = await import("node:fs");
-            const content = readFileSync18(join25(eventsDir, file), "utf-8");
+            const content = readFileSync18(join24(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -46083,7 +46681,7 @@ __export(gc_exports, {
   gcCommand: () => gcCommand
 });
 import { homedir as homedir4, tmpdir } from "node:os";
-import { join as join26 } from "node:path";
+import { join as join25 } from "node:path";
 import { pruneOrphanTempDirs, pruneOrphanWorktrees } from "@cleocode/core/gc/cleanup.js";
 import { runGC } from "@cleocode/core/gc/runner.js";
 import { readGCState } from "@cleocode/core/gc/state.js";
@@ -46166,7 +46764,7 @@ var init_gc = __esm({
       },
       async run({ args }) {
         const cleoDir = resolveLegacyCleoDir3(args["cleo-dir"]);
-        const statePath = join26(cleoDir, "gc-state.json");
+        const statePath = join25(cleoDir, "gc-state.json");
         try {
           const state = await readGCState(statePath);
           const diskStr = state.lastDiskUsedPct !== null ? `${state.lastDiskUsedPct.toFixed(1)}%` : "unknown";
@@ -46219,8 +46817,8 @@ var init_gc = __esm({
         }
       },
       async run({ args }) {
-        const xdgData = process.env["XDG_DATA_HOME"] ?? join26(homedir4(), ".local", "share");
-        const worktreesRoot = args["worktrees-root"] ?? join26(xdgData, "cleo", "worktrees");
+        const xdgData = process.env["XDG_DATA_HOME"] ?? join25(homedir4(), ".local", "share");
+        const worktreesRoot = args["worktrees-root"] ?? join25(xdgData, "cleo", "worktrees");
         const projectHash = args["project-hash"];
         const dryRun = args["dry-run"];
         const preserveRaw = args["preserve-tasks"];
@@ -47433,7 +48031,7 @@ __export(init_exports, {
   initCommand: () => initCommand2
 });
 import { existsSync as existsSync15, readFileSync as readFileSync15 } from "node:fs";
-import { join as join27 } from "node:path";
+import { join as join26 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 import {
   CleoError as CleoError4,
@@ -47445,9 +48043,9 @@ import {
 function getGitignoreTemplate() {
   try {
     const thisFile = fileURLToPath6(import.meta.url);
-    const packageRoot = join27(thisFile, "..", "..", "..", "..");
-    const localTemplatePath = join27(packageRoot, "templates", "cleo-gitignore");
-    const monorepoTemplatePath = join27(packageRoot, "..", "..", "templates", "cleo-gitignore");
+    const packageRoot = join26(thisFile, "..", "..", "..", "..");
+    const localTemplatePath = join26(packageRoot, "templates", "cleo-gitignore");
+    const monorepoTemplatePath = join26(packageRoot, "..", "..", "templates", "cleo-gitignore");
     const templatePath = existsSync15(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
     if (existsSync15(templatePath)) {
       return readFileSync15(templatePath, "utf-8");
@@ -48372,7 +48970,7 @@ var llm_cost_exports = {};
 __export(llm_cost_exports, {
   costCommand: () => costCommand
 });
-import { getProjectRoot as getProjectRoot36 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot38 } from "@cleocode/core/internal";
 import { computeCost } from "@cleocode/core/llm/usage-pricing";
 function resolveSessionId(raw) {
   if (raw === "current") {
@@ -48445,7 +49043,7 @@ var init_llm_cost = __esm({
           process.exit(6);
         }
         const sessionId = resolveSessionId(rawSessionId);
-        const projectRoot = getProjectRoot36(process.cwd());
+        const projectRoot = getProjectRoot38(process.cwd());
         let breakdown;
         try {
           breakdown = await loadSessionCostBreakdown(projectRoot, sessionId);
@@ -49992,7 +50590,7 @@ var memory_exports = {};
 __export(memory_exports, {
   memoryCommand: () => memoryCommand
 });
-import { getProjectRoot as getProjectRoot37 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot39 } from "@cleocode/core";
 import {
   getBrainDb as getBrainDb2,
   getDreamStatus,
@@ -50916,7 +51514,7 @@ var init_memory3 = __esm({
       },
       args: {},
       async run() {
-        const root = getProjectRoot37();
+        const root = getProjectRoot39();
         try {
           const result = await runConsolidation(root);
           cliOutput(result, { command: "memory-consolidate", operation: "memory.consolidate" });
@@ -50940,7 +51538,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot37();
+        const root = getProjectRoot39();
         if (args.status) {
           try {
             const status = await getDreamStatus(root);
@@ -50977,7 +51575,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot37();
+        const root = getProjectRoot39();
         try {
           const { runObserver, runReflector } = await import("@cleocode/core/memory");
           const observerResult = await runObserver(root, args.session, {
@@ -51017,7 +51615,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot37();
+        const root = getProjectRoot39();
         try {
           await getBrainDb2(root);
           const { totalDuplicateRows, groups } = await scanDuplicateEntries();
@@ -51063,7 +51661,7 @@ var init_memory3 = __esm({
       async run({ args }) {
         const sourceDir = args.from;
         const isDryRun = !!args["dry-run"];
-        const projectRoot = getProjectRoot37();
+        const projectRoot = getProjectRoot39();
         try {
           const result = await importMemoryFiles({
             sourceDir,
@@ -51214,7 +51812,7 @@ var init_memory3 = __esm({
       },
       args: {},
       async run() {
-        const root = getProjectRoot37();
+        const root = getProjectRoot39();
         try {
           await getBrainDb2(root);
           const result = await getTierStats(root);
@@ -51257,7 +51855,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot37();
+        const root = getProjectRoot39();
         const targetTier = args.to;
         const reason = args.reason;
         const validTiers = ["medium", "long"];
@@ -51323,7 +51921,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot37();
+        const root = getProjectRoot39();
         const targetTier = args.to;
         const reason = args.reason;
         const validTiers = ["short", "medium"];
@@ -51783,7 +52381,7 @@ var migrate_claude_mem_exports = {};
 __export(migrate_claude_mem_exports, {
   migrateClaudeMemCommand: () => migrateClaudeMemCommand
 });
-import { getProjectRoot as getProjectRoot38, migrateClaudeMem } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot40, migrateClaudeMem } from "@cleocode/core/internal";
 import { ingestLooseAgentOutputs, ingestRcasdDirectories } from "@cleocode/core/memory";
 import { getDb as getDb2 } from "@cleocode/core/store/sqlite";
 var storageCommand, claudeMemCommand, manifestIngestCommand, migrateClaudeMemCommand;
@@ -51846,7 +52444,7 @@ var init_migrate_claude_mem = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot38();
+        const root = getProjectRoot40();
         try {
           const result = await migrateClaudeMem(root, {
             sourcePath: args.source,
@@ -51895,7 +52493,7 @@ var init_migrate_claude_mem = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot38();
+        const projectRoot = getProjectRoot40();
         try {
           const db = await getDb2(projectRoot);
           const rcasdFlag = Boolean(args.rcasd);
@@ -51999,7 +52597,7 @@ __export(nexus_exports, {
 import { appendFile as appendFile2, mkdir as mkdir3 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import path4 from "node:path";
-import { getProjectRoot as getProjectRoot39 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot41 } from "@cleocode/core";
 import { getSymbolImpact } from "@cleocode/core/nexus";
 import { runNexusAnalysis } from "@cleocode/core/nexus/analyze-orchestrator.js";
 import { exportNexusGraph } from "@cleocode/core/nexus/export.js";
@@ -52114,7 +52712,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const startTime = Date.now();
         try {
           const [{ getNexusDb, nexusSchema }, { getIndexStats }] = await Promise.all([
@@ -52629,7 +53227,7 @@ var init_nexus3 = __esm({
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "clusters", { projectId, repoPath });
         const durationMs = Date.now() - startTime;
@@ -52673,7 +53271,7 @@ var init_nexus3 = __esm({
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "flows", { projectId, repoPath });
         const durationMs = Date.now() - startTime;
@@ -52716,7 +53314,7 @@ var init_nexus3 = __esm({
         void appendDeprecationTelemetry("nexus.context", "cleo graph context");
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = getProjectRoot39();
+        const repoPath = getProjectRoot41();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const limit = parseInt(args.limit, 10);
         const symbolName = args.symbol;
@@ -52779,7 +53377,7 @@ var init_nexus3 = __esm({
         const startTime = Date.now();
         const whyFlag = !!args.why;
         const projectIdOverride = args["project-id"];
-        const repoPath = getProjectRoot39();
+        const repoPath = getProjectRoot41();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const maxDepth = Math.min(parseInt(args.depth, 10), 5);
         const symbolName = args.symbol;
@@ -52851,7 +53449,7 @@ var init_nexus3 = __esm({
         const projectIdOverride = args["project-id"];
         const isIncremental = !!args.incremental;
         const ctx = getFormatContext();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         humanInfo(`[nexus] Analyzing: ${repoPath}${isIncremental ? " (incremental)" : ""}`);
         if (!isIncremental) humanInfo("[nexus] Clearing existing index for project...");
         try {
@@ -52954,7 +53552,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const name = args.name;
         const response = await dispatchRaw("mutate", "nexus", "projects.register", {
           path: repoPath,
@@ -53312,7 +53910,7 @@ var init_nexus3 = __esm({
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "refresh-bridge", {
           repoPath,
@@ -53418,7 +54016,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const projectIdOverride = args["project-id"];
         const beforeRef = args.before ?? "HEAD~1";
         const afterRef = args.after ?? "HEAD";
@@ -53536,7 +54134,7 @@ var init_nexus3 = __esm({
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "route-map", { projectId });
         const durationMs = Date.now() - startTime;
@@ -53592,7 +54190,7 @@ var init_nexus3 = __esm({
         const startTime = Date.now();
         const routeSymbol = args.routeSymbol;
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "shape-check", { routeSymbol, projectId });
         const durationMs = Date.now() - startTime;
@@ -53982,7 +54580,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const projectIdOverride = args["project-id"];
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "contracts-sync", {
@@ -54086,7 +54684,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot39();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot41();
         const projectId = Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "contracts-link-tasks", {
           projectId,
@@ -54167,7 +54765,7 @@ var init_nexus3 = __esm({
         const isIncremental = !!args.incremental;
         try {
           const result = await runNexusWiki({
-            projectRoot: getProjectRoot39(),
+            projectRoot: getProjectRoot41(),
             outputDir,
             communityFilter,
             incremental: isIncremental
@@ -56594,7 +57192,7 @@ var refresh_memory_exports = {};
 __export(refresh_memory_exports, {
   refreshMemoryCommand: () => refreshMemoryCommand
 });
-import { getProjectRoot as getProjectRoot40 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot42 } from "@cleocode/core";
 var refreshMemoryCommand;
 var init_refresh_memory = __esm({
   "packages/cleo/src/cli/commands/refresh-memory.ts"() {
@@ -56607,7 +57205,7 @@ var init_refresh_memory = __esm({
         description: "Regenerate .cleo/memory-bridge.md from brain.db"
       },
       async run() {
-        const projectDir = getProjectRoot40();
+        const projectDir = getProjectRoot42();
         const { writeMemoryBridge } = await import("@cleocode/core/internal");
         const result = await writeMemoryBridge(projectDir);
         if (result.written) {
@@ -58008,7 +58606,7 @@ import fs3 from "node:fs";
 import path5 from "node:path";
 import {
   CleoError as CleoError7,
-  getProjectRoot as getProjectRoot41,
+  getProjectRoot as getProjectRoot43,
   getTaskAccessor as getTaskAccessor3,
   parseConflictReport,
   setAtPath
@@ -58029,7 +58627,7 @@ var init_restore = __esm({
         description: "Apply manually-resolved conflicts from .cleo/restore-conflicts.md"
       },
       async run() {
-        const projectRoot = getProjectRoot41();
+        const projectRoot = getProjectRoot43();
         const reportPath = path5.join(projectRoot, CLEO_DIR_NAME, RESTORE_CONFLICTS_MD);
         if (!fs3.existsSync(reportPath)) {
           humanLine("No pending restore conflicts. Nothing to finalize.");
@@ -58395,7 +58993,7 @@ __export(revert_exports, {
   revertCommand: () => revertCommand
 });
 import { readFile as readFile4 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { join as join27 } from "node:path";
 import { cwd as processCwd2 } from "node:process";
 import { E_RECEIPT_NOT_FOUND } from "@cleocode/core/sentient/chain-walker.js";
 import { SENTIENT_STATE_FILE } from "@cleocode/core/sentient/daemon.js";
@@ -58448,7 +59046,7 @@ async function loadOwnerAttestation(attestationFilePath) {
   return obj;
 }
 async function loadOwnerPubkeys(projectRoot) {
-  const path6 = join28(projectRoot, OWNER_PUBKEYS_FILE);
+  const path6 = join27(projectRoot, OWNER_PUBKEYS_FILE);
   try {
     const raw = await readFile4(path6, "utf-8");
     const parsed = JSON.parse(raw);
@@ -58532,7 +59130,7 @@ var init_revert = __esm({
         if (attestation && allowedPubkeys.size > 0 && !allowedPubkeys.has(attestation.ownerPubkey)) {
           emitFailure2(
             E_OWNER_ATTESTATION_REQUIRED,
-            `Attestation pubkey "${attestation.ownerPubkey}" is not in the owner allowlist at ${join28(projectRoot, OWNER_PUBKEYS_FILE)}`,
+            `Attestation pubkey "${attestation.ownerPubkey}" is not in the owner allowlist at ${join27(projectRoot, OWNER_PUBKEYS_FILE)}`,
             jsonMode
           );
         }
@@ -58585,7 +59183,7 @@ ${lines}`
             identity,
             includeHuman
           });
-          const statePath = join28(projectRoot, SENTIENT_STATE_FILE);
+          const statePath = join27(projectRoot, SENTIENT_STATE_FILE);
           const state = await readSentientState(statePath);
           emitSuccess(
             {
@@ -59055,7 +59653,7 @@ __export(self_update_exports, {
 });
 import { execFile } from "node:child_process";
 import { readFile as readFile5 } from "node:fs/promises";
-import { join as join29 } from "node:path";
+import { join as join28 } from "node:path";
 import * as readline2 from "node:readline";
 import { promisify } from "node:util";
 import {
@@ -59070,7 +59668,7 @@ import {
 async function getCurrentVersion() {
   const cleoHome = getCleoHome4();
   try {
-    const content = await readFile5(join29(cleoHome, "VERSION"), "utf-8");
+    const content = await readFile5(join28(cleoHome, "VERSION"), "utf-8");
     return (content.split("\n")[0] ?? "unknown").trim();
   } catch {
     return "unknown";
@@ -59124,7 +59722,7 @@ async function writeRuntimeVersionMetadata(mode, source, version) {
   ];
   await import("node:fs/promises").then(
     ({ writeFile: writeFile4, mkdir: mkdir5 }) => mkdir5(cleoHome, { recursive: true }).then(
-      () => writeFile4(join29(cleoHome, "VERSION"), `${lines.join("\n")}
+      () => writeFile4(join28(cleoHome, "VERSION"), `${lines.join("\n")}
 `, "utf-8")
     )
   );
@@ -59535,7 +60133,7 @@ var sentient_exports = {};
 __export(sentient_exports, {
   sentientCommand: () => sentientCommand
 });
-import { join as join30 } from "node:path";
+import { join as join29 } from "node:path";
 import { cwd as processCwd3 } from "node:process";
 import {
   getSentientDaemonStatus as getSentientDaemonStatus2,
@@ -59610,7 +60208,7 @@ var init_sentient3 = __esm({
             return;
           }
           if (dryRun) {
-            const statePath2 = join30(projectRoot, SENTIENT_STATE_FILE2);
+            const statePath2 = join29(projectRoot, SENTIENT_STATE_FILE2);
             const outcome = await safeRunTick({ projectRoot, statePath: statePath2, dryRun: true });
             emitSuccess2(
               { dryRun: true, outcome },
@@ -59726,7 +60324,7 @@ Logs:  ${logPath}`
         const jsonMode = args.json === true;
         const dryRun = args["dry-run"] === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
           const outcome = await safeRunTick({ projectRoot, statePath, dryRun });
           emitSuccess2(
             { outcome, dryRun },
@@ -59795,7 +60393,7 @@ Logs:  ${logPath}`
             return;
           }
           await db.update(tasks).set({ status: "pending", updatedAt: now }).where(eq2(tasks.id, id)).run();
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           await patchSentientState(statePath, {
             tier2Stats: {
@@ -59847,7 +60445,7 @@ Logs:  ${logPath}`
             return;
           }
           await db.update(tasks).set({ status: "cancelled", cancellationReason: reason, cancelledAt: now, updatedAt: now }).where(eq2(tasks.id, id)).run();
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           await patchSentientState(statePath, {
             tier2Stats: {
@@ -59892,7 +60490,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
           const outcome = await safeRunProposeTick({ projectRoot, statePath });
           emitSuccess2(
             { outcome },
@@ -59912,7 +60510,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
           const updated = await patchSentientState(statePath, { tier2Enabled: true });
           emitSuccess2({ tier2Enabled: updated.tier2Enabled }, jsonMode, "Tier-2 proposals enabled");
         } catch (err) {
@@ -59931,7 +60529,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
           const updated = await patchSentientState(statePath, { tier2Enabled: false });
           emitSuccess2({ tier2Enabled: updated.tier2Enabled }, jsonMode, "Tier-2 proposals disabled");
         } catch (err) {
@@ -59962,7 +60560,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join29(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           emitSuccess2(
             {
@@ -60520,7 +61118,7 @@ var sequence_exports = {};
 __export(sequence_exports, {
   sequenceCommand: () => sequenceCommand
 });
-import { getProjectRoot as getProjectRoot42 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot44 } from "@cleocode/core/internal";
 var showCommand12, checkCommand6, repairCommand2, sequenceCommand;
 var init_sequence = __esm({
   "packages/cleo/src/cli/commands/sequence.ts"() {
@@ -60556,7 +61154,7 @@ var init_sequence = __esm({
       meta: { name: "repair", description: "Reset counter to max + 1 if behind" },
       async run() {
         const { repairSequence } = await import("@cleocode/core/internal");
-        const projectRoot = getProjectRoot42();
+        const projectRoot = getProjectRoot44();
         const repair = await repairSequence(projectRoot);
         const result = {
           repaired: repair.repaired,
@@ -61011,8 +61609,8 @@ var init_session4 = __esm({
         "audit-scope": { type: "string", description: "Audit log scope (global|local)" }
       },
       async run({ args }) {
-        const { detectSessionDrift, getProjectRoot: getProjectRoot46 } = await import("@cleocode/core");
-        const projectRoot = await getProjectRoot46();
+        const { detectSessionDrift, getProjectRoot: getProjectRoot48 } = await import("@cleocode/core");
+        const projectRoot = await getProjectRoot48();
         const scope = args["audit-scope"] === "local" ? "local" : "global";
         const report = await detectSessionDrift({ projectRoot, auditScope: scope });
         cliOutput(report, { command: "session drift", operation: "session.drift" });
@@ -63778,7 +64376,7 @@ __export(token_exports, {
   tokenCommand: () => tokenCommand
 });
 import { readFileSync as readFileSync16 } from "node:fs";
-import { getProjectRoot as getProjectRoot43, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot45, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
 function readPayload(args, textKey, fileKey) {
   const text = args[textKey];
   const file = args[fileKey];
@@ -63942,7 +64540,7 @@ var init_token = __esm({
           domain: args.domain,
           operation: args.operation
         };
-        const result = args.record ? await recordTokenExchange2(getProjectRoot43(), input2) : await measureTokenExchange(input2);
+        const result = args.record ? await recordTokenExchange2(getProjectRoot45(), input2) : await measureTokenExchange(input2);
         cliOutput(result, {
           command: "token",
           operation: args.record ? "admin.token.record" : "token.estimate"
@@ -63977,8 +64575,8 @@ __export(transcript_exports, {
   transcriptCommand: () => transcriptCommand
 });
 import { homedir as homedir6 } from "node:os";
-import { join as join31 } from "node:path";
-import { getProjectRoot as getProjectRoot44 } from "@cleocode/core";
+import { join as join30 } from "node:path";
+import { getProjectRoot as getProjectRoot46 } from "@cleocode/core";
 import {
   parseDurationMs,
   pruneTranscripts,
@@ -64008,7 +64606,7 @@ var init_transcript = __esm({
       async run({ args }) {
         if (args.pending) {
           try {
-            const projectRoot = getProjectRoot44();
+            const projectRoot = getProjectRoot46();
             const { scanPendingTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
             const pending = await scanPendingTranscripts(projectRoot);
             cliOutput(
@@ -64031,7 +64629,7 @@ var init_transcript = __esm({
           }
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join31(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join30(homedir6(), ".claude", "projects");
         try {
           const result = await scanTranscripts(projectsDir);
           cliOutput(
@@ -64105,7 +64703,7 @@ var init_transcript = __esm({
       async run({ args }) {
         const tier = args.tier ?? "warm";
         const dryRun = args["dry-run"] ?? false;
-        const projectRoot = getProjectRoot44();
+        const projectRoot = getProjectRoot46();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { findSessionTranscriptPath, listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -64217,7 +64815,7 @@ var init_transcript = __esm({
         const dryRun = args["dry-run"] ?? false;
         const olderThanHours = args["older-than-hours"] ? Number.parseInt(args["older-than-hours"], 10) : 24;
         const limit = args.limit ? Number.parseInt(args.limit, 10) : void 0;
-        const projectRoot = getProjectRoot44();
+        const projectRoot = getProjectRoot46();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -64337,7 +64935,7 @@ var init_transcript = __esm({
           process.exit(2);
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join31(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join30(homedir6(), ".claude", "projects");
         try {
           const pruneResult = await pruneTranscripts({
             olderThanMs,
@@ -65014,15 +65612,15 @@ __export(web_exports, {
 });
 import { execFileSync as execFileSync3, spawn as spawn3 } from "node:child_process";
 import { mkdir as mkdir4, open, readFile as readFile6, rm, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { join as join31 } from "node:path";
 import { CleoError as CleoError11, formatError as formatError7, getCleoHome as getCleoHome5 } from "@cleocode/core";
 function getWebPaths() {
   const cleoHome = getCleoHome5();
   return {
-    pidFile: join32(cleoHome, "web-server.pid"),
-    configFile: join32(cleoHome, "web-server.json"),
-    logDir: join32(cleoHome, "logs"),
-    logFile: join32(cleoHome, "logs", "web-server.log")
+    pidFile: join31(cleoHome, "web-server.pid"),
+    configFile: join31(cleoHome, "web-server.json"),
+    logDir: join31(cleoHome, "logs"),
+    logFile: join31(cleoHome, "logs", "web-server.log")
   };
 }
 function isProcessRunning(pid) {
@@ -65061,7 +65659,7 @@ async function startWebServer(port, host) {
     throw new CleoError11(1 /* GENERAL_ERROR */, `Server already running (PID: ${status.pid})`);
   }
   const projectRoot = process.env["CLEO_ROOT"] ?? process.cwd();
-  const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join32(projectRoot, "packages", "studio", "build");
+  const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join31(projectRoot, "packages", "studio", "build");
   await mkdir4(logDir, { recursive: true });
   await writeFile3(
     configFile,
@@ -65071,7 +65669,7 @@ async function startWebServer(port, host) {
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
     })
   );
-  const webIndexPath = join32(studioDir, "index.js");
+  const webIndexPath = join31(studioDir, "index.js");
   try {
     await stat2(webIndexPath);
   } catch {
@@ -65344,7 +65942,7 @@ __export(worktree_exports, {
   worktreeCommand: () => worktreeCommand
 });
 import readline4 from "node:readline";
-import { getProjectRoot as getProjectRoot45, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot47, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
 async function promptYesNo2(question) {
   return new Promise((resolve7) => {
     const rl = readline4.createInterface({ input: process.stdin, output: process.stdout });
@@ -65449,7 +66047,7 @@ var init_worktree3 = __esm({
         const staleDays = staleDaysRaw !== void 0 ? Number.parseInt(staleDaysRaw, 10) : void 0;
         const idleDaysRaw = typeof args["idle-days"] === "string" ? args["idle-days"] : void 0;
         const idleDays = idleDaysRaw !== void 0 ? Number.parseInt(idleDaysRaw, 10) : void 0;
-        const projectRoot = getProjectRoot45();
+        const projectRoot = getProjectRoot47();
         const listResult = await listWorktrees2({
           projectRoot,
           ...staleDays !== void 0 && !Number.isNaN(staleDays) ? { staleDays } : {}
@@ -65685,7 +66283,7 @@ init_dist();
 init_field_context();
 init_format_context();
 import { readFileSync as readFileSync17 } from "node:fs";
-import { dirname as dirname9, join as join34 } from "node:path";
+import { dirname as dirname9, join as join33 } from "node:path";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
 
 // packages/cleo/src/cli/generated/command-manifest.ts
@@ -65777,7 +66375,7 @@ var COMMAND_MANIFEST = [
   {
     exportName: "backupRecoverSubCommand",
     name: "recover",
-    description: "Recover a malformed CLEO database from snapshot",
+    description: "Recover a malformed CLEO database from snapshot \u2014 accepts any role from DB_INVENTORY (T10318)",
     load: async () => (await Promise.resolve().then(() => (init_backup_recover(), backup_recover_exports))).backupRecoverSubCommand
   },
   {
@@ -65984,6 +66582,18 @@ var COMMAND_MANIFEST = [
     description: "Documentation attachment management (add/list/fetch/remove), ",
     load: async () => (await Promise.resolve().then(() => (init_docs3(), docs_exports))).docsCommand
   },
+  {
+    exportName: "doctorDbSubstrateCommand",
+    name: "db-substrate",
+    description: "Walk every DB in the inventory + report integrity, row counts, orphan dirs. ",
+    load: async () => (await Promise.resolve().then(() => (init_doctor_db_substrate(), doctor_db_substrate_exports))).doctorDbSubstrateCommand
+  },
+  {
+    exportName: "doctorLegacyBackupsCommand",
+    name: "legacy-backups",
+    description: "Enumerate legacy *-pre-cleo.db.bak / brain.db.PRE-DUP-FIX-* / pre-untrack / rotation-overflow ",
+    load: async () => (await Promise.resolve().then(() => (init_doctor_legacy_backups(), doctor_legacy_backups_exports))).doctorLegacyBackupsCommand
+  },
   {
     exportName: "doctorProjectsCommand",
     name: "doctor-projects",
@@ -66682,12 +67292,12 @@ init_did_you_mean();
 
 // packages/cleo/src/cli/lib/first-run-detection.ts
 import { existsSync as existsSync16 } from "node:fs";
-import { join as join33 } from "node:path";
+import { join as join32 } from "node:path";
 async function detectFirstRun() {
   const envKey = process.env["ANTHROPIC_API_KEY"];
   if (typeof envKey === "string" && envKey.length > 0) return false;
   const { getCleoPlatformPaths } = await import("@cleocode/paths");
-  const configPath = join33(getCleoPlatformPaths().config, "config.json");
+  const configPath = join32(getCleoPlatformPaths().config, "config.json");
   if (existsSync16(configPath)) return false;
   try {
     const { getCredentialPool } = await import("@cleocode/core/llm/credential-pool.js");
@@ -66802,7 +67412,7 @@ Or via NodeSource: https://github.com/nodesource/distributions
   }
 }
 function getPackageVersion() {
-  const pkgPath = join34(dirname9(fileURLToPath7(import.meta.url)), "../../package.json");
+  const pkgPath = join33(dirname9(fileURLToPath7(import.meta.url)), "../../package.json");
   const pkg = JSON.parse(readFileSync17(pkgPath, "utf-8"));
   return pkg.version;
 }
@@ -66955,7 +67565,7 @@ async function runStartupMaintenance() {
     detectAndRemoveStrayProjectNexus,
     getGlobalSalt,
     getLogger: getLogger21,
-    getProjectRoot: getProjectRoot46,
+    getProjectRoot: getProjectRoot48,
     isCleanupMarkerSet,
     migrateSignaldockToConduit,
     needsSignaldockToConduitMigration,
@@ -66964,7 +67574,7 @@ async function runStartupMaintenance() {
   } = await import("@cleocode/core/internal");
   let projectRootForCleanup = "";
   try {
-    projectRootForCleanup = getProjectRoot46();
+    projectRootForCleanup = getProjectRoot48();
   } catch {
   }
   if (!isCleanupMarkerSet(CLI_VERSION, projectRootForCleanup)) {
@@ -66984,7 +67594,7 @@ async function runStartupMaintenance() {
   const isInitInvocation = process.argv.slice(2).some((a) => a === "init");
   if (!isInitInvocation) {
     try {
-      const _projectRootForMigration = getProjectRoot46();
+      const _projectRootForMigration = getProjectRoot48();
       if (needsSignaldockToConduitMigration(_projectRootForMigration)) {
         const migrationResult = migrateSignaldockToConduit(_projectRootForMigration);
         if (migrationResult.status === "failed") {