@cleocode/cleo 2026.5.113 → 2026.5.120

package/dist/cli/index.js

@@ -1388,6 +1388,40 @@ var init_animation_bridge = __esm({
   }
 });
 
+// packages/cleo/src/cli/output-context.ts
+function setOutputMode(mode) {
+  currentMode = mode;
+}
+function getOutputMode() {
+  return currentMode;
+}
+function isOutputMode(value) {
+  return OUTPUT_MODES.includes(value);
+}
+var OUTPUT_MODES, currentMode;
+var init_output_context = __esm({
+  "packages/cleo/src/cli/output-context.ts"() {
+    "use strict";
+    OUTPUT_MODES = ["envelope", "id", "table", "count", "silent"];
+    currentMode = "envelope";
+  }
+});
+
+// packages/cleo/src/cli/summary-context.ts
+function setSummaryMode(on) {
+  currentSummary = on;
+}
+function getSummaryMode() {
+  return currentSummary;
+}
+var currentSummary;
+var init_summary_context = __esm({
+  "packages/cleo/src/cli/summary-context.ts"() {
+    "use strict";
+    currentSummary = false;
+  }
+});
+
 // packages/contracts/src/acceptance-gate-schema.ts
 import { z } from "zod";
 var gateBaseSchema, fileAssertionSchema, testGateSchema, fileGateSchema, commandGateSchema, lintGateSchema, httpGateSchema, manualGateSchema, acceptanceGateSchema, gateResultDetailsSchema, acceptanceGateResultSchema, acceptanceItemSchema, acceptanceArraySchema;
@@ -4248,6 +4282,39 @@ var init_operations_registry = __esm({
           }
         ]
       },
+      {
+        gateway: "mutate",
+        domain: "tasks",
+        operation: "relates.remove",
+        description: "tasks.relates.remove (mutate) \u2014 delete a relation between two tasks. Pass `type` to scope deletion to a single relation kind; omit to remove any type.",
+        tier: 1,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: ["taskId", "relatedId"],
+        params: [
+          {
+            name: "taskId",
+            type: "string",
+            required: true,
+            description: "Source task ID",
+            cli: { positional: true }
+          },
+          {
+            name: "relatedId",
+            type: "string",
+            required: true,
+            description: "Target task ID to remove the relation to",
+            cli: { positional: true }
+          },
+          {
+            name: "type",
+            type: "string",
+            required: false,
+            description: "Optional relation type (blocks|related|duplicates|absorbs|fixes|extends|supersedes). Omit to remove any type.",
+            cli: { flag: "type" }
+          }
+        ]
+      },
       // === saga sub-domain (ADR-073 — above-epic grouping tier) ===
       {
         gateway: "mutate",
@@ -8533,6 +8600,39 @@ var init_operations_registry = __esm({
           }
         ]
       },
+      // ── docs.supersede (T10162) ──────────────────────────────────────────────
+      {
+        gateway: "mutate",
+        domain: "docs",
+        operation: "supersede",
+        description: "docs.supersede (mutate) \u2014 atomically flip an older doc to `superseded` and link both rows via the supersedes/superseded_by self-FK pointers (T10162 \xB7 Saga T9855)",
+        tier: 1,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: ["oldSlug", "newSlug"],
+        params: [
+          {
+            name: "oldSlug",
+            type: "string",
+            required: true,
+            description: "Slug of the doc being replaced",
+            cli: { positional: true }
+          },
+          {
+            name: "newSlug",
+            type: "string",
+            required: true,
+            description: "Slug of the doc that replaces oldSlug",
+            cli: { positional: true }
+          },
+          {
+            name: "reason",
+            type: "string",
+            required: false,
+            description: "Optional human-readable reason carried back on the response"
+          }
+        ]
+      },
       // ── docs.generate (T798) ─────────────────────────────────────────────────
       {
         gateway: "query",
@@ -8558,6 +8658,55 @@ var init_operations_registry = __esm({
           }
         ]
       },
+      // ── docs.update (T10161 — Epic T10157 / Saga T9855) ──────────────────────
+      {
+        gateway: "mutate",
+        domain: "docs",
+        operation: "update",
+        description: "docs.update (mutate) \u2014 replace blob content for an existing slug while preserving the slug. New sha256 + new attachment row; the old row stays reachable by ID for history. NO supersession edge (use `cleo docs supersede` for that). Audit log entry appended to .cleo/audit/docs-versioning.jsonl (squashed within a 5-min window).",
+        tier: 1,
+        idempotent: false,
+        sessionRequired: false,
+        requiredParams: ["slug"],
+        params: [
+          {
+            name: "slug",
+            type: "string",
+            required: true,
+            description: "Slug of the existing attachment to update"
+          },
+          {
+            name: "file",
+            type: "string",
+            required: false,
+            description: "Path to a local file containing the new content"
+          },
+          {
+            name: "content",
+            type: "string",
+            required: false,
+            description: "Inline UTF-8 content (mutually exclusive with file)"
+          },
+          {
+            name: "message",
+            type: "string",
+            required: false,
+            description: "One-line summary describing the change (recorded in the audit log)"
+          },
+          {
+            name: "status",
+            type: "string",
+            required: false,
+            description: 'Override the new lifecycle status. Defaults to "draft" on every update. Valid: draft|proposed|accepted|superseded|archived|deprecated.'
+          },
+          {
+            name: "attachedBy",
+            type: "string",
+            required: false,
+            description: 'Agent identity that performed the update (defaults to "human")'
+          }
+        ]
+      },
       // ── playbook.* HITL CLI surface (T935) ───────────────────────────────────
       {
         gateway: "mutate",
@@ -12317,6 +12466,7 @@ var init_src2 = __esm({
     init_operations();
     init_nexus_scope_map();
     init_params();
+    init_tasks();
     init_peer();
     init_evidence_atoms();
     init_plan();
@@ -12519,6 +12669,174 @@ var init_normalizer = __esm({
   }
 });
 
+// packages/cleo/src/cli/renderers/output-mode.ts
+function extractIds(data) {
+  if (data === null || typeof data !== "object") return [];
+  const rec = data;
+  const task = rec["task"];
+  if (task && typeof task === "object") {
+    const id2 = task["id"];
+    if (typeof id2 === "string") return [id2];
+  }
+  const tasks = rec["tasks"];
+  if (Array.isArray(tasks)) {
+    return tasks.map((t) => t && typeof t === "object" ? t["id"] : void 0).filter((id2) => typeof id2 === "string");
+  }
+  const items = rec["items"];
+  if (Array.isArray(items)) {
+    return items.map((t) => t && typeof t === "object" ? t["id"] : void 0).filter((id2) => typeof id2 === "string");
+  }
+  const id = rec["id"];
+  if (typeof id === "string") return [id];
+  return [];
+}
+function extractCount(data) {
+  if (data === null || typeof data !== "object") return 0;
+  const rec = data;
+  const total = rec["total"];
+  if (typeof total === "number" && Number.isFinite(total)) return total;
+  const tasks = rec["tasks"];
+  if (Array.isArray(tasks)) return tasks.length;
+  const items = rec["items"];
+  if (Array.isArray(items)) return items.length;
+  if (rec["task"] && typeof rec["task"] === "object") return 1;
+  if (typeof rec["id"] === "string") return 1;
+  return 0;
+}
+function truncate(value, max) {
+  if (value.length <= max) return value;
+  return value.slice(0, Math.max(0, max - 1)) + "\u2026";
+}
+function renderTableList(tasks) {
+  if (tasks.length === 0) return "No rows.";
+  const COL_TITLE_MAX = 60;
+  const rows = tasks.map((t) => ({
+    id: typeof t["id"] === "string" ? t["id"] : "",
+    status: typeof t["status"] === "string" ? t["status"] : "",
+    priority: typeof t["priority"] === "string" ? t["priority"] : "",
+    title: truncate(typeof t["title"] === "string" ? t["title"] : "", COL_TITLE_MAX)
+  }));
+  const widths = {
+    id: Math.max(2, ...rows.map((r) => r.id.length)),
+    status: Math.max(6, ...rows.map((r) => r.status.length)),
+    priority: Math.max(8, ...rows.map((r) => r.priority.length)),
+    title: Math.max(5, ...rows.map((r) => r.title.length))
+  };
+  const pad = (s, w) => s + " ".repeat(Math.max(0, w - s.length));
+  const header = `${pad("id", widths.id)}  ${pad("status", widths.status)}  ${pad(
+    "priority",
+    widths.priority
+  )}  ${pad("title", widths.title)}`;
+  const sep2 = `${"-".repeat(widths.id)}  ${"-".repeat(widths.status)}  ${"-".repeat(
+    widths.priority
+  )}  ${"-".repeat(widths.title)}`;
+  const body = rows.map(
+    (r) => `${pad(r.id, widths.id)}  ${pad(r.status, widths.status)}  ${pad(
+      r.priority,
+      widths.priority
+    )}  ${pad(r.title, widths.title)}`
+  ).join("\n");
+  return `${header}
+${sep2}
+${body}`;
+}
+function renderTableGeneric(data) {
+  const entries = Object.entries(data);
+  if (entries.length === 0) return "(empty)";
+  const rows = entries.map(([k, v]) => ({
+    field: k,
+    value: v === null || v === void 0 ? "" : typeof v === "object" ? JSON.stringify(v) : String(v)
+  }));
+  const VAL_MAX = 80;
+  for (const r of rows) r.value = truncate(r.value, VAL_MAX);
+  const widths = {
+    field: Math.max(5, ...rows.map((r) => r.field.length)),
+    value: Math.max(5, ...rows.map((r) => r.value.length))
+  };
+  const pad = (s, w) => s + " ".repeat(Math.max(0, w - s.length));
+  const header = `${pad("field", widths.field)}  ${pad("value", widths.value)}`;
+  const sep2 = `${"-".repeat(widths.field)}  ${"-".repeat(widths.value)}`;
+  const body = rows.map((r) => `${pad(r.field, widths.field)}  ${pad(r.value, widths.value)}`).join("\n");
+  return `${header}
+${sep2}
+${body}`;
+}
+function renderSummary2(data) {
+  if (data === null || typeof data !== "object") {
+    return { text: "" };
+  }
+  const rec = data;
+  const tasks = rec["tasks"];
+  if (Array.isArray(tasks)) {
+    return { text: renderSummaryList(tasks) };
+  }
+  const items = rec["items"];
+  if (Array.isArray(items)) {
+    return { text: renderSummaryList(items) };
+  }
+  const task = rec["task"];
+  if (task && typeof task === "object") {
+    return { text: renderSummaryRow(task) };
+  }
+  if (typeof rec["id"] === "string") {
+    return { text: renderSummaryRow(rec) };
+  }
+  return { text: "" };
+}
+function renderSummaryRow(record) {
+  const id = typeof record["id"] === "string" ? record["id"] : "";
+  const status = typeof record["status"] === "string" ? record["status"] : "";
+  const title = truncate(typeof record["title"] === "string" ? record["title"] : "", 60);
+  return `${id} [${status}] ${title}`;
+}
+function renderSummaryList(rows) {
+  if (rows.length === 0) return "No rows.";
+  const lines = [];
+  for (const row of rows) {
+    if (!row || typeof row !== "object") continue;
+    const rec = row;
+    if (typeof rec["id"] !== "string") continue;
+    lines.push(renderSummaryRow(rec));
+  }
+  return lines.length === 0 ? "No rows." : lines.join("\n");
+}
+function renderOutputMode(mode, data) {
+  switch (mode) {
+    case "id": {
+      const ids = extractIds(data);
+      return { text: ids.length === 0 ? "" : ids.join("\n") };
+    }
+    case "count": {
+      return { text: String(extractCount(data)) };
+    }
+    case "table": {
+      if (data && typeof data === "object") {
+        const rec = data;
+        const tasks = rec["tasks"];
+        if (Array.isArray(tasks)) {
+          return { text: renderTableList(tasks) };
+        }
+        const items = rec["items"];
+        if (Array.isArray(items)) {
+          return { text: renderTableList(items) };
+        }
+        return { text: renderTableGeneric(rec) };
+      }
+      return { text: data === null || data === void 0 ? "(empty)" : String(data) };
+    }
+    case "silent": {
+      return { text: null };
+    }
+    case "envelope":
+      throw new Error("renderOutputMode: envelope mode must be handled by caller");
+  }
+}
+var init_output_mode = __esm({
+  "packages/cleo/src/cli/renderers/output-mode.ts"() {
+    "use strict";
+  }
+});
+
 // packages/cleo/src/cli/renderers/index.ts
 var renderers_exports = {};
 __export(renderers_exports, {
@@ -12534,7 +12852,9 @@ __export(renderers_exports, {
 import { randomUUID } from "node:crypto";
 import {
   drainWarnings,
+  extractByJsonPointer,
   formatSuccess,
+  isJsonPointer,
   metaFooter,
   pagerFooter,
   renderAuditReconstruct,
@@ -12592,7 +12912,8 @@ import {
   renderStop,
   renderTree as renderTree2,
   renderVersion,
-  renderWaves
+  renderWaves,
+  serializePointerValue
 } from "@cleocode/core";
 import { applyFieldFilter, extractFieldFromResult } from "@cleocode/lafs";
 import {
@@ -12614,11 +12935,60 @@ function pickDecoratorMetaExtensionsLocal(responseMeta) {
   const out = {};
   if (responseMeta["_nexus"] !== void 0) out["_nexus"] = responseMeta["_nexus"];
   if (responseMeta["deprecated"] !== void 0) out["deprecated"] = responseMeta["deprecated"];
+  if (responseMeta["suggestedNext"] !== void 0) {
+    out["suggestedNext"] = responseMeta["suggestedNext"];
+  }
+  if (responseMeta["projection"] !== void 0) {
+    out["projection"] = responseMeta["projection"];
+  }
   return out;
 }
+function buildEnvelopeForPointer(data, opts) {
+  const decoratorExt = pickDecoratorMetaExtensionsLocal(opts.responseMeta);
+  const meta = {
+    ...decoratorExt,
+    ...opts.extensions ?? {},
+    operation: opts.operation ?? "cli.output"
+  };
+  if (opts.message) meta["message"] = opts.message;
+  const envelope = {
+    success: true,
+    data,
+    meta
+  };
+  if (opts.page) envelope["page"] = opts.page;
+  return envelope;
+}
 function cliOutput(data, opts) {
   const ctx = getFormatContext();
   const fieldCtx = getFieldContext();
+  const outputMode = getOutputMode();
+  const summary = getSummaryMode();
+  if (outputMode !== "envelope" && !fieldCtx.field) {
+    const out = renderOutputMode(outputMode, data);
+    if (out.text !== null && out.text.length > 0) {
+      process.stdout.write(out.text + "\n");
+    }
+    return;
+  }
+  if (summary && !fieldCtx.field) {
+    const out = renderSummary2(data);
+    if (out.text !== null && out.text.length > 0) {
+      process.stdout.write(out.text + "\n");
+    }
+    return;
+  }
+  if (fieldCtx.field && isJsonPointer(fieldCtx.field)) {
+    const envelope = buildEnvelopeForPointer(data, opts);
+    const value = extractByJsonPointer(envelope, fieldCtx.field);
+    if (value === void 0) {
+      cliError(`Pointer "${fieldCtx.field}" did not resolve`, 4, { name: "E_FIELD_NOT_FOUND" });
+      process.exit(4);
+    }
+    process.stdout.write(`${serializePointerValue(value)}
+`);
+    return;
+  }
   if (ctx.format === "human") {
     let dataToRender = data;
     let fieldExtracted = false;
@@ -12768,6 +13138,12 @@ function isHumanOutput() {
 }
 function cliError(message, code, details, meta) {
   const ctx = getFormatContext();
+  const outputMode = getOutputMode();
+  if (outputMode === "silent") {
+    process.stderr.write(`Error: ${message}${code ? ` (${code})` : ""}
+`);
+    return;
+  }
   if (ctx.format === "human") {
     process.stderr.write(`Error: ${message}${code ? ` (${code})` : ""}
 `);
@@ -12810,8 +13186,11 @@ var init_renderers = __esm({
     "use strict";
     init_field_context();
     init_format_context();
+    init_output_context();
+    init_summary_context();
     init_lafs_validator();
     init_normalizer();
+    init_output_mode();
     renderers = {
       // Task CRUD
       show: renderShow,
@@ -17004,18 +17383,25 @@ import { resolve as resolve2 } from "node:path";
 import { pushWarning } from "@cleocode/core";
 import {
   AUTO_TOKEN,
+  allocateAdrSlug,
   allocateAutoSlugForDispatch,
+  consumeReservedSlug,
   createAttachmentStore,
   createAttachmentStoreV2,
   generateDocsLlmsTxt,
   getCleoDirAbsolute,
   getProjectRoot as getProjectRoot5,
+  isLifecycleStatus,
   memoryObserve as memoryObserve2,
   parseChangesetFrontmatter,
   releaseReservedSlug,
   reserveSlugForDispatch,
   resolveAttachmentBackend,
   SlugCollisionError,
+  SUPERSEDE_NOT_FOUND_CODE,
+  SUPERSEDE_SAME_SLUG_CODE,
+  supersedeDoc,
+  updateDocBySlug,
   validateDocBody,
   writeChangesetEntry
 } from "@cleocode/core/internal";
@@ -17493,6 +17879,7 @@ var init_docs2 = __esm({
           labels: rawLabels,
           attachedBy: rawAttachedBy,
           slug: rawSlug,
+          title: rawTitle,
           type: rawType,
           strict: strictMode
         } = params;
@@ -17600,6 +17987,19 @@ var init_docs2 = __esm({
             if (err.code === "E_FILE_WRITE_FAILED") {
               return lafsError("E_FILE_ERROR", err.message, "add");
             }
+            if (err.code === "E_SLUG_RESERVED") {
+              return {
+                success: false,
+                error: {
+                  code: "E_SLUG_RESERVED",
+                  message: err.message,
+                  details: {
+                    suggestions: err.suggestions,
+                    aliases: err.aliases
+                  }
+                }
+              };
+            }
             return lafsError("E_SSOT_WRITE_FAILED", err.message, "add");
           }
           const changesetPayload = {
@@ -17632,14 +18032,31 @@ var init_docs2 = __esm({
             "add"
           );
         }
+        let adrNumber;
+        if (type2 === "adr" && slug === void 0) {
+          if (typeof rawTitle !== "string" || rawTitle.trim().length === 0) {
+            return lafsError(
+              "E_VALIDATION",
+              "title is required when type=adr and slug is omitted \u2014 the allocator needs a title to assemble adr-NNN-<kebab-title>",
+              "add"
+            );
+          }
+          const allocation = await allocateAdrSlug(getProjectRoot5(), { title: rawTitle });
+          if (!allocation.ok) {
+            return lafsError(allocation.code, allocation.message, "add");
+          }
+          slug = allocation.slug;
+          adrNumber = allocation.number;
+        }
         if (type2 !== void 0 && slug !== void 0) {
           const patternCheck = getDocKindRegistry().validateSlug(type2, slug);
           if (!patternCheck.ok) {
+            if (adrNumber !== void 0) releaseReservedSlug(slug);
             const exampleHint = patternCheck.example ? ` (example: ${patternCheck.example})` : "";
             return lafsError("E_SLUG_PATTERN_MISMATCH", `${patternCheck.error}${exampleHint}`, "add");
           }
         }
-        if (slug !== void 0) {
+        if (slug !== void 0 && adrNumber === void 0) {
           const reservation = await reserveSlugForDispatch(getProjectRoot5(), {
             kind: type2 ?? "",
             slug
@@ -17740,6 +18157,7 @@ var init_docs2 = __esm({
             }
             throw err;
           }
+          if (adrNumber !== void 0 && slug !== void 0) consumeReservedSlug(slug);
           let backend = "legacy";
           try {
             const v2 = createAttachmentStoreV2(getProjectRoot5());
@@ -17781,7 +18199,8 @@ var init_docs2 = __esm({
               // Cast: core returns 'llmtxt'|'legacy'; contracts uses 'legacy'|'llmstxt-v2' (T1529)
               attachmentBackend: backend,
               ...slug !== void 0 ? { slug } : {},
-              ...type2 !== void 0 ? { type: type2 } : {}
+              ...type2 !== void 0 ? { type: type2 } : {},
+              ...adrNumber !== void 0 ? { adrNumber } : {}
             },
             "add"
           );
@@ -17822,6 +18241,7 @@ var init_docs2 = __esm({
             }
             throw err;
           }
+          if (adrNumber !== void 0 && slug !== void 0) consumeReservedSlug(slug);
           import("@cleocode/core/internal").then(
             ({ ensureLlmtxtNode }) => ensureLlmtxtNode(getProjectRoot5(), meta.sha256, `${ownerType}:${ownerId}`, url)
           ).catch(() => {
@@ -17848,7 +18268,8 @@ var init_docs2 = __esm({
               // Cast: core returns 'llmtxt'|'legacy'; contracts uses 'legacy'|'llmstxt-v2' (T1529)
               attachmentBackend: backend,
               ...slug !== void 0 ? { slug } : {},
-              ...type2 !== void 0 ? { type: type2 } : {}
+              ...type2 !== void 0 ? { type: type2 } : {},
+              ...adrNumber !== void 0 ? { adrNumber } : {}
             },
             "add"
           );
@@ -17906,10 +18327,90 @@ var init_docs2 = __esm({
           },
           "remove"
         );
+      },
+      // ── docs.update (T10161 — E12.C4 / Saga T9855) ─────────────────────────────
+      update: async (params) => {
+        const { slug: rawSlug, file: filePath, content: inlineContent, status: rawStatus } = params;
+        if (typeof rawSlug !== "string" || rawSlug.length === 0) {
+          return lafsError("E_INVALID_INPUT", "slug is required", "update");
+        }
+        const hasFile = typeof filePath === "string" && filePath.length > 0;
+        const hasContent = typeof inlineContent === "string";
+        if (hasFile === hasContent) {
+          return lafsError(
+            "E_INVALID_INPUT",
+            "Provide exactly one of --file <path> or --content <text>",
+            "update",
+            'Use `cleo docs update <slug> --file ./new.md` OR `cleo docs update <slug> --content "..."`.'
+          );
+        }
+        if (rawStatus !== void 0 && !isLifecycleStatus(rawStatus)) {
+          return lafsError(
+            "E_INVALID_INPUT",
+            `status must be one of: draft|proposed|accepted|superseded|archived|deprecated \u2014 got '${String(rawStatus)}'`,
+            "update"
+          );
+        }
+        const projectRoot = getProjectRoot5();
+        const resolvedParams = hasFile ? { ...params, file: resolve2(filePath) } : params;
+        const outcome = await updateDocBySlug(projectRoot, resolvedParams);
+        if (!outcome.ok) {
+          return lafsError(outcome.error.code, outcome.error.message, "update");
+        }
+        return lafsSuccess(
+          {
+            slug: outcome.result.slug,
+            ...outcome.result.type !== null ? { type: outcome.result.type } : {},
+            attachmentId: outcome.result.attachmentId,
+            previousAttachmentId: outcome.result.previousAttachmentId,
+            sha256: outcome.result.sha256,
+            previousSha256: outcome.result.previousSha256,
+            changed: outcome.result.changed,
+            lifecycleStatus: outcome.result.lifecycleStatus,
+            updatedAt: outcome.result.updatedAt,
+            version: outcome.result.version,
+            squashed: outcome.result.squashed
+          },
+          "update"
+        );
+      },
+      // ── docs.supersede ─────────────────────────────────────────────────────────
+      supersede: async (params) => {
+        const { oldSlug, newSlug, reason } = params;
+        if (typeof oldSlug !== "string" || oldSlug.length === 0) {
+          return lafsError("E_INVALID_INPUT", "<oldSlug> is required", "supersede");
+        }
+        if (typeof newSlug !== "string" || newSlug.length === 0) {
+          return lafsError("E_INVALID_INPUT", "<newSlug> is required", "supersede");
+        }
+        try {
+          const result = await supersedeDoc(getProjectRoot5(), {
+            oldSlug,
+            newSlug,
+            ...typeof reason === "string" && reason.length > 0 ? { reason } : {}
+          });
+          const payload = {
+            oldSlug: result.oldSlug,
+            newSlug: result.newSlug,
+            oldAttachmentId: result.oldAttachmentId,
+            newAttachmentId: result.newAttachmentId,
+            supersededAt: result.supersededAt,
+            edgeId: result.edgeId,
+            ...result.reason !== void 0 ? { reason: result.reason } : {}
+          };
+          return lafsSuccess(payload, "supersede");
+        } catch (err) {
+          const code = err && typeof err === "object" && "code" in err && typeof err.code === "number" ? (
+            // Map ExitCode (number) → stable LAFS string code expected by callers.
+            err.code === 4 ? SUPERSEDE_NOT_FOUND_CODE : err.code === 6 ? SUPERSEDE_SAME_SLUG_CODE : "E_INTERNAL"
+          ) : "E_INTERNAL";
+          const message = err instanceof Error ? err.message : "supersede failed";
+          return lafsError(code, message, "supersede");
+        }
       }
     });
     QUERY_OPS3 = /* @__PURE__ */ new Set(["list", "fetch", "generate"]);
-    MUTATE_OPS3 = /* @__PURE__ */ new Set(["add", "remove"]);
+    MUTATE_OPS3 = /* @__PURE__ */ new Set(["add", "remove", "update", "supersede"]);
     DocsHandler = class {
       // -----------------------------------------------------------------------
       // Query
@@ -17968,7 +18469,7 @@ var init_docs2 = __esm({
       getSupportedOperations() {
         return {
           query: ["list", "fetch", "generate"],
-          mutate: ["add", "remove"]
+          mutate: ["add", "remove", "update", "supersede"]
         };
       }
     };
@@ -20429,6 +20930,9 @@ function pickDecoratorMetaExtensions(responseMeta) {
   const out = {};
   if (responseMeta["_nexus"] !== void 0) out["_nexus"] = responseMeta["_nexus"];
   if (responseMeta["deprecated"] !== void 0) out["deprecated"] = responseMeta["deprecated"];
+  if (responseMeta["suggestedNext"] !== void 0) {
+    out["suggestedNext"] = responseMeta["suggestedNext"];
+  }
   return out;
 }
 function buildNexusMetaExtensions(operation, params = {}) {
@@ -26224,8 +26728,8 @@ async function loadPlaybookByName(name) {
     return null;
   }
   try {
-    const { getProjectRoot: getProjectRoot53 } = await import("@cleocode/core/internal");
-    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot53();
+    const { getProjectRoot: getProjectRoot54 } = await import("@cleocode/core/internal");
+    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot54();
     const resolved = resolvePlaybook(name, {
       projectRoot,
       globalPlaybooksDir: __playbookRuntimeOverrides.globalPlaybooksDir,
@@ -26269,8 +26773,8 @@ async function acquireDb() {
 async function buildDefaultDispatcher() {
   if (__playbookRuntimeOverrides.dispatcher) return __playbookRuntimeOverrides.dispatcher;
   const { orchestrateSpawnExecute: orchestrateSpawnExecute2 } = await Promise.resolve().then(() => (init_engine(), engine_exports));
-  const { getProjectRoot: getProjectRoot53 } = await import("@cleocode/core/internal");
-  const projectRoot = getProjectRoot53();
+  const { getProjectRoot: getProjectRoot54 } = await import("@cleocode/core/internal");
+  const projectRoot = getProjectRoot54();
   return {
     async dispatch(input2) {
       try {
@@ -26460,8 +26964,8 @@ var init_playbook2 = __esm({
             projectRoot = __playbookRuntimeOverrides.projectRoot;
           } else {
             try {
-              const { getProjectRoot: getProjectRoot53 } = await import("@cleocode/core/internal");
-              projectRoot = getProjectRoot53();
+              const { getProjectRoot: getProjectRoot54 } = await import("@cleocode/core/internal");
+              projectRoot = getProjectRoot54();
             } catch {
               projectRoot = void 0;
             }
@@ -26525,14 +27029,14 @@ var init_playbook2 = __esm({
         const dispatcher = await buildDefaultDispatcher();
         let result;
         try {
-          const { getProjectRoot: getProjectRoot53 } = await import("@cleocode/core/internal");
+          const { getProjectRoot: getProjectRoot54 } = await import("@cleocode/core/internal");
           const opts = {
             db,
             playbook: parsed.definition,
             playbookHash: parsed.sourceHash,
             initialContext,
             dispatcher,
-            projectRoot: getProjectRoot53()
+            projectRoot: getProjectRoot54()
           };
           if (__playbookRuntimeOverrides.approvalSecret !== void 0) {
             opts.approvalSecret = __playbookRuntimeOverrides.approvalSecret;
@@ -26816,7 +27320,8 @@ async function orchestrateSpawnOp(params) {
     getProjectRoot11(),
     params.tier,
     params.noWorktree,
-    params.spawnScope
+    params.spawnScope,
+    params.atomicityScope
   );
 }
 async function orchestrateHandoffOp(params) {
@@ -26896,16 +27401,16 @@ async function orchestrateRejectOp(params) {
 async function orchestrateClassify(request, context, projectRoot) {
   try {
     const { getCleoCantWorkflowsDir } = await import("@cleocode/core/internal");
-    const { readFileSync: readFileSync18, readdirSync: readdirSync3, existsSync: existsSync17 } = await import("node:fs");
-    const { join: join34 } = await import("node:path");
+    const { readFileSync: readFileSync21, readdirSync: readdirSync3, existsSync: existsSync19 } = await import("node:fs");
+    const { join: join37 } = await import("node:path");
     const workflowsDir = getCleoCantWorkflowsDir();
     const combined = `${request} ${context ?? ""}`.toLowerCase();
     const matches = [];
-    if (existsSync17(workflowsDir)) {
+    if (existsSync19(workflowsDir)) {
       const files = readdirSync3(workflowsDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync18(join34(workflowsDir, file), "utf-8");
+          const src = readFileSync21(join37(workflowsDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -26920,12 +27425,12 @@ async function orchestrateClassify(request, context, projectRoot) {
         }
       }
     }
-    const localCantDir = join34(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
-    if (existsSync17(localCantDir)) {
+    const localCantDir = join37(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
+    if (existsSync19(localCantDir)) {
       const files = readdirSync3(localCantDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync18(join34(localCantDir, file), "utf-8");
+          const src = readFileSync21(join37(localCantDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -27117,11 +27622,11 @@ async function orchestrateAnalyzeParallelSafety(taskIds, projectRoot) {
     };
   }
 }
-async function handleWorktreeComplete(taskId, projectRoot, resolve7) {
+async function handleWorktreeComplete(taskId, projectRoot, resolve8) {
   try {
     const { completeWorktreeForTask } = await import("@cleocode/core/internal");
     const result = completeWorktreeForTask(taskId, projectRoot, {
-      resolve: resolve7 ?? "auto"
+      resolve: resolve8 ?? "auto"
     });
     if (result.outcome === "conflict") {
       return {
@@ -27653,12 +28158,15 @@ var init_orchestrate2 = __esm({
                 );
               const tierRaw = params.tier;
               const tier = tierRaw === 0 || tierRaw === 1 || tierRaw === 2 ? tierRaw : void 0;
+              const atomicityScopeRaw = params.atomicityScope;
+              const atomicityScope = atomicityScopeRaw === "orchestrator-defer" ? "orchestrator-defer" : void 0;
               const p = {
                 taskId: params.taskId,
                 protocolType: params.protocolType,
                 tier,
                 noWorktree: params.noWorktree,
-                spawnScope: params.spawnScope
+                spawnScope: params.spawnScope,
+                ...atomicityScope ? { atomicityScope } : {}
               };
               return wrapResult(await coreOps2.spawn(p), "mutate", "orchestrate", operation, startTime);
             }
@@ -27798,10 +28306,10 @@ var init_orchestrate2 = __esm({
                   startTime
                 );
               const rawResolve = params.resolve;
-              const resolve7 = rawResolve === "manual" ? "manual" : rawResolve === "auto" ? "auto" : void 0;
+              const resolve8 = rawResolve === "manual" ? "manual" : rawResolve === "auto" ? "auto" : void 0;
               const p = {
                 taskId: params.taskId,
-                ...resolve7 !== void 0 ? { resolve: resolve7 } : {}
+                ...resolve8 !== void 0 ? { resolve: resolve8 } : {}
               };
               return wrapResult(
                 await coreOps2["worktree.complete"](p),
@@ -30091,7 +30599,7 @@ var init_sticky2 = __esm({
 });
 
 // packages/cleo/src/dispatch/domains/tasks.ts
-import { getLogger as getLogger15, getProjectRoot as getProjectRoot18 } from "@cleocode/core";
+import { getLogger as getLogger15, getProjectRoot as getProjectRoot18, TASKS_SUGGESTED_NEXT_BUILDERS } from "@cleocode/core";
 import { createAttachmentStore as createAttachmentStore4 } from "@cleocode/core/internal";
 import {
   sagaAdd as coreSagaAdd,
@@ -30169,6 +30677,25 @@ async function sagaReconcile(params) {
     "saga.reconcile"
   );
 }
+function stampSuggestedNext(response, operation, params) {
+  if (!response.success) return response;
+  const builder = TASKS_SUGGESTED_NEXT_BUILDERS[operation];
+  if (!builder) return response;
+  let suggestions;
+  try {
+    suggestions = builder(params, response.data);
+  } catch {
+    return response;
+  }
+  if (suggestions.length === 0) return response;
+  return {
+    ...response,
+    meta: {
+      ...response.meta,
+      suggestedNext: suggestions
+    }
+  };
+}
 var _tasksTypedHandler, QUERY_OPS11, MUTATE_OPS10, TasksHandler;
 var init_tasks2 = __esm({
   "packages/cleo/src/dispatch/domains/tasks.ts"() {
@@ -30240,7 +30767,9 @@ var init_tasks2 = __esm({
             fields: params.fields,
             verbose: params.verbose,
             // T944/T9072: kind filter
-            kind: params.kind
+            kind: params.kind,
+            // T9905: unified urgency surface
+            urgent: params.urgent
           }),
           "find"
         );
@@ -30683,7 +31212,14 @@ var init_tasks2 = __esm({
             operation,
             params ?? {}
           );
-          return wrapResult(envelopeToEngineResult(envelope), "query", "tasks", operation, startTime);
+          const response = wrapResult(
+            envelopeToEngineResult(envelope),
+            "query",
+            "tasks",
+            operation,
+            startTime
+          );
+          return stampSuggestedNext(response, operation, params ?? {});
         } catch (error) {
           getLogger15("domain:tasks").error(
             { gateway: "query", domain: "tasks", operation, err: error },
@@ -30770,7 +31306,14 @@ var init_tasks2 = __esm({
             operation,
             params ?? {}
           );
-          return wrapResult(envelopeToEngineResult(envelope), "mutate", "tasks", operation, startTime);
+          const response = wrapResult(
+            envelopeToEngineResult(envelope),
+            "mutate",
+            "tasks",
+            operation,
+            startTime
+          );
+          return stampSuggestedNext(response, operation, params ?? {});
         } catch (error) {
           getLogger15("domain:tasks").error(
             { gateway: "mutate", domain: "tasks", operation, err: error },
@@ -32295,6 +32838,88 @@ var init_field_filter = __esm({
   }
 });
 
+// packages/cleo/src/cli/projection-context.ts
+function setProjectionOptOut(optOut) {
+  currentOptOut = optOut;
+}
+function getProjectionOptOut() {
+  return currentOptOut;
+}
+var currentOptOut;
+var init_projection_context = __esm({
+  "packages/cleo/src/cli/projection-context.ts"() {
+    "use strict";
+    currentOptOut = false;
+  }
+});
+
+// packages/cleo/src/dispatch/middleware/mutate-minimal-envelope.ts
+import {
+  applyMutateProjection,
+  MUTATE_PROJECTION_PLANS,
+  resolveProjectionMode
+} from "@cleocode/core";
+function resolveModeFor(req) {
+  const override = req.params?.["_projection"];
+  if (override === "full" || override === "mvi") return override;
+  return resolveProjectionMode(getProjectionOptOut() || void 0);
+}
+function createMutateMinimalEnvelope() {
+  return async (req, next) => {
+    const mode = resolveModeFor(req);
+    const opKey = `${req.domain}.${req.operation}`;
+    const hasPlan = MUTATE_PROJECTION_PLANS[opKey] !== void 0;
+    const response = await next();
+    if (!hasPlan) return response;
+    if (response.success && response.data !== void 0) {
+      response.data = applyMutateProjection(response.data, opKey, mode);
+    }
+    response.meta.mutateProjection = mode;
+    return response;
+  };
+}
+var init_mutate_minimal_envelope = __esm({
+  "packages/cleo/src/dispatch/middleware/mutate-minimal-envelope.ts"() {
+    "use strict";
+    init_projection_context();
+  }
+});
+
+// packages/cleo/src/dispatch/middleware/mvi-record-projection.ts
+import {
+  applyProjectionPlan,
+  PROJECTION_PLANS,
+  resolveProjectionMode as resolveProjectionMode2
+} from "@cleocode/core";
+function resolveModeFor2(req) {
+  const override = req.params?.["_projection"];
+  if (override === "full" || override === "mvi") return override;
+  return resolveProjectionMode2(getProjectionOptOut() || void 0);
+}
+function createMviRecordProjection() {
+  return async (req, next) => {
+    const mode = resolveModeFor2(req);
+    if (req.params && "_projection" in req.params) {
+      delete req.params["_projection"];
+    }
+    const opKey = `${req.domain}.${req.operation}`;
+    const hasPlan = PROJECTION_PLANS[opKey] !== void 0;
+    const response = await next();
+    if (!hasPlan) return response;
+    if (response.success && response.data !== void 0) {
+      response.data = applyProjectionPlan(response.data, opKey, mode);
+    }
+    response.meta.projection = mode;
+    return response;
+  };
+}
+var init_mvi_record_projection = __esm({
+  "packages/cleo/src/dispatch/middleware/mvi-record-projection.ts"() {
+    "use strict";
+    init_projection_context();
+  }
+});
+
 // packages/cleo/src/dispatch/lib/security.ts
 import {
   ALL_VALID_STATUSES,
@@ -32320,11 +32945,11 @@ var init_security = __esm({
 });
 
 // packages/cleo/src/dispatch/middleware/sanitizer.ts
-function createSanitizer(getProjectRoot53) {
+function createSanitizer(getProjectRoot54) {
   return async (req, next) => {
     if (req.params) {
       try {
-        const root = getProjectRoot53 ? getProjectRoot53() : void 0;
+        const root = getProjectRoot54 ? getProjectRoot54() : void 0;
         req.params = sanitizeParams(req.params, root, {
           domain: req.domain,
           operation: req.operation
@@ -32502,6 +33127,15 @@ function createCliDispatcher() {
       // T4959: session identity first
       createSanitizer(() => getProjectRoot22()),
       createFieldFilter(),
+      // T9922 (Saga T9855 / E8.3): MVI record projection default for read ops.
+      // Runs AFTER the domain handler returns so it can trim the data payload
+      // before audit + telemetry record byte sizes. Sits before audit so the
+      // audit trail captures the projected (final) bytes.
+      createMviRecordProjection(),
+      // T9931 (Saga T9855 / E9.4): minimal envelopes for mutate ops. Mirror
+      // policy to the read-side projection — sits in the same pre-audit slot
+      // so audit/telemetry record the trimmed bytes.
+      createMutateMinimalEnvelope(),
       createAudit(),
       // T4959: CLI now gets audit trail
       createTelemetry()
@@ -32668,6 +33302,8 @@ var init_cli = __esm({
     init_domains();
     init_audit();
     init_field_filter();
+    init_mutate_minimal_envelope();
+    init_mvi_record_projection();
     init_sanitizer();
     init_session_resolver();
     init_telemetry();
@@ -32857,18 +33493,77 @@ var init_adapter = __esm({
   }
 });
 
+// packages/cleo/src/cli/lib/collect-input.ts
+import { readFile as readFile2 } from "node:fs/promises";
+function wrapParseError(rawInput, parseErr, sourceLabel) {
+  const snippet2 = rawInput.length > PARSE_ERROR_SNIPPET_MAX_LENGTH ? `${rawInput.slice(0, PARSE_ERROR_SNIPPET_MAX_LENGTH)}\u2026` : rawInput;
+  return new Error(`Invalid JSON in ${sourceLabel}: ${parseErr.message} (got: ${snippet2})`);
+}
+function readStdinJson(stdin2) {
+  return new Promise((resolve8, reject) => {
+    const chunks = [];
+    stdin2.on("data", (chunk) => {
+      chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+    });
+    stdin2.on("error", (err) => {
+      reject(err);
+    });
+    stdin2.on("end", () => {
+      const raw = Buffer.concat(chunks).toString("utf8");
+      try {
+        resolve8(JSON.parse(raw));
+      } catch (err) {
+        reject(wrapParseError(raw, err, "stdin"));
+      }
+    });
+  });
+}
+async function collectMutateInput(args, stdin2) {
+  if (typeof args.params === "string" && args.params.length > 0) {
+    try {
+      return JSON.parse(args.params);
+    } catch (err) {
+      throw wrapParseError(args.params, err, "--params");
+    }
+  }
+  if (typeof args.file === "string" && args.file.length > 0) {
+    const raw = await readFile2(args.file, "utf8");
+    try {
+      return JSON.parse(raw);
+    } catch (err) {
+      throw wrapParseError(raw, err, `--file ${args.file}`);
+    }
+  }
+  if (stdin2.isTTY !== true) {
+    return readStdinJson(stdin2);
+  }
+  if (args.positional !== void 0 && args.positional.length > 0) {
+    return args.positional;
+  }
+  return void 0;
+}
+var PARSE_ERROR_SNIPPET_MAX_LENGTH;
+var init_collect_input = __esm({
+  "packages/cleo/src/cli/lib/collect-input.ts"() {
+    "use strict";
+    PARSE_ERROR_SNIPPET_MAX_LENGTH = 80;
+  }
+});
+
 // packages/cleo/src/cli/commands/add-batch.ts
 var add_batch_exports = {};
 __export(add_batch_exports, {
   addBatchCommand: () => addBatchCommand
 });
-import { existsSync as existsSync6, readFileSync as readFileSync8 } from "node:fs";
+import { INPUT_CONTRACTS, validateOperationInput } from "@cleocode/core";
 var addBatchCommand;
 var init_add_batch = __esm({
   "packages/cleo/src/cli/commands/add-batch.ts"() {
     "use strict";
+    init_src2();
     init_dist();
     init_cli();
+    init_collect_input();
     init_renderers();
     addBatchCommand = defineCommand({
       meta: {
@@ -32876,9 +33571,13 @@ var init_add_batch = __esm({
         description: "Create multiple tasks in a single atomic transaction from a JSON file"
       },
       args: {
+        params: {
+          type: "string",
+          description: 'Inline JSON object: { "tasks": [...], "defaultParent"?: "...", "dryRun"?: bool } (T9917)'
+        },
         file: {
           type: "string",
-          description: "Path to JSON file (array of task objects). Use - for stdin."
+          description: "Path to JSON file (array of task objects, or full payload). Use - for stdin."
         },
         parent: {
           type: "string",
@@ -32890,66 +33589,86 @@ var init_add_batch = __esm({
         }
       },
       async run({ args }) {
-        const filePath = args.file;
         const defaultParent = args.parent;
-        const dryRun = args["dry-run"];
+        const dryRunFlag = args["dry-run"];
+        const paramsArg = args.params;
+        const fileArg = args.file;
+        const collectArgs = {};
+        if (paramsArg !== void 0) collectArgs.params = paramsArg;
+        if (fileArg !== void 0 && fileArg !== "-") collectArgs.file = fileArg;
         let raw;
-        if (!filePath || filePath === "-") {
-          const chunks = [];
-          for await (const chunk of process.stdin) chunks.push(chunk);
-          raw = Buffer.concat(chunks).toString("utf-8");
-          if (!raw.trim()) {
-            cliError(
-              "No input provided. Pass --file <path> or pipe JSON to stdin.",
-              "E_VALIDATION",
-              { name: "E_VALIDATION", fix: "cleo add-batch --file tasks.json" },
-              { operation: "tasks.add-batch" }
-            );
-            process.exitCode = 2;
-            return;
-          }
+        try {
+          raw = await collectMutateInput(
+            collectArgs,
+            process.stdin
+          );
+        } catch (err) {
+          cliError(
+            err.message,
+            6 /* VALIDATION_ERROR */,
+            {
+              name: "E_VALIDATION_FAILED",
+              fix: "Verify the JSON syntax of your --params / --file / stdin input"
+            },
+            { operation: "tasks.add-batch" }
+          );
+          process.exitCode = 6 /* VALIDATION_ERROR */;
+          return;
+        }
+        if (raw === void 0) {
+          cliError(
+            "No input provided. Pass --params <json>, --file <path>, or pipe JSON to stdin.",
+            6 /* VALIDATION_ERROR */,
+            {
+              name: "E_VALIDATION_FAILED",
+              fix: "cleo add-batch --file tasks.json"
+            },
+            { operation: "tasks.add-batch" }
+          );
+          process.exitCode = 6 /* VALIDATION_ERROR */;
+          return;
+        }
+        let payload;
+        if (Array.isArray(raw)) {
+          payload = { tasks: raw };
+        } else if (raw !== null && typeof raw === "object" && Array.isArray(raw["tasks"])) {
+          payload = { ...raw };
         } else {
-          if (!existsSync6(filePath)) {
-            cliError(
-              `File not found: ${filePath}`,
-              "E_NOT_FOUND",
-              { name: "E_NOT_FOUND", fix: `Verify the file path exists: ${filePath}` },
-              { operation: "tasks.add-batch" }
-            );
-            process.exitCode = 2;
-            return;
-          }
-          raw = readFileSync8(filePath, "utf-8");
+          payload = { tasks: [raw] };
         }
-        let tasks;
-        try {
-          const parsed = JSON.parse(raw);
-          tasks = Array.isArray(parsed) ? parsed : [parsed];
-        } catch {
+        if (defaultParent !== void 0 && payload["defaultParent"] === void 0) {
+          payload["defaultParent"] = defaultParent;
+        }
+        if (dryRunFlag === true && payload["dryRun"] === void 0) {
+          payload["dryRun"] = true;
+        }
+        const contract = INPUT_CONTRACTS["tasks.add-batch"];
+        if (!contract) {
           cliError(
-            "Invalid JSON input. Expected an array of task objects.",
-            "E_VALIDATION",
-            { name: "E_VALIDATION", fix: "Ensure the input is a valid JSON array of task objects" },
+            "tasks.add-batch contract missing from INPUT_CONTRACTS registry",
+            1 /* GENERAL_ERROR */,
+            { name: "E_INTERNAL", fix: "This is a CLI bug \u2014 file an issue" },
             { operation: "tasks.add-batch" }
           );
-          process.exitCode = 2;
+          process.exitCode = 1 /* GENERAL_ERROR */;
           return;
         }
-        if (tasks.length === 0) {
+        const result = validateOperationInput(contract, payload);
+        if (!result.ok) {
           cliError(
-            "No tasks in input.",
-            "E_VALIDATION",
-            { name: "E_VALIDATION", fix: "Provide at least one task object in the JSON array" },
+            "tasks.add-batch failed: validation",
+            6 /* VALIDATION_ERROR */,
+            {
+              name: "E_VALIDATION_FAILED",
+              fix: result.errors[0]?.fix ?? "Inspect the errors[] payload and correct the input",
+              details: { errors: result.errors }
+            },
             { operation: "tasks.add-batch" }
           );
-          process.exitCode = 2;
+          process.exitCode = 6 /* VALIDATION_ERROR */;
           return;
         }
-        const response = await dispatchRaw("mutate", "tasks", "add-batch", {
-          tasks,
-          ...defaultParent && { defaultParent },
-          ...dryRun && { dryRun: true }
-        });
+        const response = await dispatchRaw("mutate", "tasks", "add-batch", payload);
         if (!response.success) {
           cliError(
             response.error?.message ?? "Batch creation failed",
@@ -32977,7 +33696,9 @@ __export(add_exports, {
 import {
   appendSignedSeverityAttestation,
   getProjectRoot as getProjectRoot23,
-  inferTaskAddParams
+  INPUT_CONTRACTS as INPUT_CONTRACTS2,
+  inferTaskAddParams,
+  validateOperationInput as validateOperationInput2
 } from "@cleocode/core";
 var addCommand;
 var init_add = __esm({
@@ -32986,6 +33707,7 @@ var init_add = __esm({
     init_src2();
     init_dist();
     init_cli();
+    init_collect_input();
     init_renderers();
     addCommand = defineCommand({
       meta: {
@@ -32994,6 +33716,28 @@ var init_add = __esm({
 For 2+ tasks at once: cleo add-batch --file tasks.json (single transaction, atomic rollback)`
       },
       args: {
+        /**
+         * Schema-first input — supersedes all flag-based args when present.
+         *
+         * Accepts a JSON object that matches `INPUT_CONTRACTS['tasks.add']`.
+         * When provided, the command short-circuits the flag-mapping path
+         * entirely and goes straight to validate→dispatch.
+         *
+         * @task T9917
+         */
+        params: {
+          type: "string",
+          description: 'Inline JSON object matching INPUT_CONTRACTS["tasks.add"] (T9917). Overrides positional + flags.'
+        },
+        /**
+         * Schema-first input from a JSON file. Same semantics as --params.
+         *
+         * @task T9917
+         */
+        "params-file": {
+          type: "string",
+          description: 'Path to JSON file matching INPUT_CONTRACTS["tasks.add"] (T9917).'
+        },
         title: {
           type: "positional",
           description: "Task title (3\u2013500 characters)",
@@ -33156,6 +33900,72 @@ For 2+ tasks at once: cleo add-batch --file tasks.json (single transaction, atom
         }
       },
       async run({ args, cmd }) {
+        const paramsArg = args.params;
+        const paramsFileArg = args["params-file"];
+        if (paramsArg !== void 0 || paramsFileArg !== void 0) {
+          const collectArgs = {};
+          if (paramsArg !== void 0) collectArgs.params = paramsArg;
+          if (paramsFileArg !== void 0) collectArgs.file = paramsFileArg;
+          let raw;
+          try {
+            raw = await collectMutateInput(
+              collectArgs,
+              process.stdin
+            );
+          } catch (err) {
+            cliError(
+              err.message,
+              6 /* VALIDATION_ERROR */,
+              {
+                name: "E_VALIDATION_FAILED",
+                fix: "Verify the JSON syntax of your --params / --params-file input"
+              },
+              { operation: "tasks.add" }
+            );
+            process.exit(6 /* VALIDATION_ERROR */);
+            return;
+          }
+          const contract = INPUT_CONTRACTS2["tasks.add"];
+          if (!contract) {
+            cliError(
+              "tasks.add contract missing from INPUT_CONTRACTS registry",
+              1 /* GENERAL_ERROR */,
+              { name: "E_INTERNAL", fix: "This is a CLI bug \u2014 file an issue" },
+              { operation: "tasks.add" }
+            );
+            process.exit(1 /* GENERAL_ERROR */);
+            return;
+          }
+          const validation = validateOperationInput2(contract, raw);
+          if (!validation.ok) {
+            cliError(
+              "tasks.add failed: validation",
+              6 /* VALIDATION_ERROR */,
+              {
+                name: "E_VALIDATION_FAILED",
+                fix: validation.errors[0]?.fix ?? "Inspect errors[] and correct the input",
+                details: { errors: validation.errors }
+              },
+              { operation: "tasks.add" }
+            );
+            process.exit(6 /* VALIDATION_ERROR */);
+            return;
+          }
+          const validatedPayload = raw;
+          const response2 = await dispatchRaw("mutate", "tasks", "add", validatedPayload);
+          if (!response2.success) {
+            handleRawError(response2, { command: "add", operation: "tasks.add" });
+          }
+          const data2 = response2.data;
+          const dataWarnings2 = data2?.warnings;
+          if (dataWarnings2?.length) {
+            for (const w of dataWarnings2) {
+              humanWarn(`\u26A0 ${w}`);
+            }
+          }
+          cliOutput(data2, { command: "add", operation: "tasks.add" });
+          return;
+        }
         if (!args.title) {
           await showUsage(cmd);
           return;
@@ -33930,13 +34740,13 @@ var init_agent = __esm({
             transportConfig: {},
             isActive: true
           });
-          const { existsSync: existsSync17, mkdirSync: mkdirSync5, writeFileSync: writeFileSync5 } = await import("node:fs");
-          const { join: join34 } = await import("node:path");
-          const cantDir = join34(CLEO_DIR_NAME, AGENTS_SUBDIR);
-          const cantPath = join34(cantDir, `${agentId}.cant`);
+          const { existsSync: existsSync19, mkdirSync: mkdirSync7, writeFileSync: writeFileSync7 } = await import("node:fs");
+          const { join: join37 } = await import("node:path");
+          const cantDir = join37(CLEO_DIR_NAME, AGENTS_SUBDIR);
+          const cantPath = join37(cantDir, `${agentId}.cant`);
           let cantScaffolded = false;
-          if (!existsSync17(cantPath)) {
-            mkdirSync5(cantDir, { recursive: true });
+          if (!existsSync19(cantPath)) {
+            mkdirSync7(cantDir, { recursive: true });
             const role = classification ?? "specialist";
             const cantContent = `---
 kind: agent
@@ -33986,7 +34796,7 @@ agent ${agentId}:
   enforcement:
     1: TODO \u2014 what does this agent push back on?
 `;
-            writeFileSync5(cantPath, cantContent, "utf-8");
+            writeFileSync7(cantPath, cantContent, "utf-8");
             cantScaffolded = true;
           }
           cliOutput(
@@ -33995,7 +34805,7 @@ agent ${agentId}:
               data: {
                 agentId: credential.agentId,
                 displayName: credential.displayName,
-                cantFile: cantScaffolded ? cantPath : existsSync17(cantPath) ? cantPath : null,
+                cantFile: cantScaffolded ? cantPath : existsSync19(cantPath) ? cantPath : null,
                 cantScaffolded
               }
             },
@@ -34114,8 +34924,8 @@ agent ${agentId}:
         try {
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync17, readFileSync: readFileSync18 } = await import("node:fs");
-          const { join: join34 } = await import("node:path");
+          const { existsSync: existsSync19, readFileSync: readFileSync21 } = await import("node:fs");
+          const { join: join37 } = await import("node:path");
           await openCleoDb("tasks");
           const registry = new AgentRegistryAccessor(getProjectRoot24());
           const credential = await registry.get(args.agentId);
@@ -34135,9 +34945,9 @@ agent ${agentId}:
           }
           let profile = null;
           let cantValidation = null;
-          const cantPath = args.cant ?? join34(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          if (existsSync17(cantPath)) {
-            profile = readFileSync18(cantPath, "utf-8");
+          const cantPath = args.cant ?? join37(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          if (existsSync19(cantPath)) {
+            profile = readFileSync21(cantPath, "utf-8");
             try {
               const cantModule = await import("@cleocode/cant");
               const validate = "validate" in cantModule ? cantModule.validate : null;
@@ -34660,8 +35470,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
         try {
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync17 } = await import("node:fs");
-          const { join: join34 } = await import("node:path");
+          const { existsSync: existsSync19 } = await import("node:fs");
+          const { join: join37 } = await import("node:path");
           await openCleoDb("tasks");
           const registry = new AgentRegistryAccessor(getProjectRoot24());
           const credential = await registry.get(args.agentId);
@@ -34678,8 +35488,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           await registry.update(args.agentId, { isActive: true });
           await registry.markUsed(args.agentId);
-          const cantPath = join34(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          const hasProfile = existsSync17(cantPath);
+          const cantPath = join37(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          const hasProfile = existsSync19(cantPath);
           const runtime = await createRuntime(registry, {
             agentId: args.agentId,
             pollIntervalMs: 5e3,
@@ -35475,10 +36285,10 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       async run({ args }) {
         let tempDir = null;
         try {
-          const { existsSync: existsSync17 } = await import("node:fs");
-          const { basename, resolve: resolve7 } = await import("node:path");
-          const resolvedPath = resolve7(args.path);
-          if (!existsSync17(resolvedPath)) {
+          const { existsSync: existsSync19 } = await import("node:fs");
+          const { basename, resolve: resolve8 } = await import("node:path");
+          const resolvedPath = resolve8(args.path);
+          if (!existsSync19(resolvedPath)) {
             cliOutput(
               {
                 success: false,
@@ -35603,11 +36413,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync17, statSync } = await import("node:fs");
-          const { resolve: resolve7, basename, dirname: dirname10 } = await import("node:path");
-          const { execFileSync: execFileSync4 } = await import("node:child_process");
-          const resolvedDir = resolve7(args.dir);
-          if (!existsSync17(resolvedDir) || !statSync(resolvedDir).isDirectory()) {
+          const { existsSync: existsSync19, statSync } = await import("node:fs");
+          const { resolve: resolve8, basename, dirname: dirname12 } = await import("node:path");
+          const { execFileSync: execFileSync5 } = await import("node:child_process");
+          const resolvedDir = resolve8(args.dir);
+          if (!existsSync19(resolvedDir) || !statSync(resolvedDir).isDirectory()) {
             cliOutput(
               {
                 success: false,
@@ -35621,9 +36431,9 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             process.exitCode = 4;
             return;
           }
-          const { join: join34 } = await import("node:path");
-          const personaPath = join34(resolvedDir, "persona.cant");
-          if (!existsSync17(personaPath)) {
+          const { join: join37 } = await import("node:path");
+          const personaPath = join37(resolvedDir, "persona.cant");
+          if (!existsSync19(personaPath)) {
             cliOutput(
               {
                 success: false,
@@ -35639,10 +36449,10 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const agentName = basename(resolvedDir);
           const archiveName = `${agentName}.cantz`;
-          const archivePath = resolve7(archiveName);
-          const parentDir = dirname10(resolvedDir);
+          const archivePath = resolve8(archiveName);
+          const parentDir = dirname12(resolvedDir);
           try {
-            execFileSync4("zip", ["-r", archivePath, agentName], {
+            execFileSync5("zip", ["-r", archivePath, agentName], {
               cwd: parentDir,
               encoding: "utf-8",
               timeout: 3e4
@@ -35670,7 +36480,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               if (entry.isFile()) {
                 fileCount++;
               } else if (entry.isDirectory()) {
-                countFiles(join34(dirPath, entry.name));
+                countFiles(join37(dirPath, entry.name));
               }
             }
           };
@@ -35918,18 +36728,18 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync17, readFileSync: readFileSync18, mkdirSync: mkdirSync5 } = await import("node:fs");
-          const { resolve: resolve7, join: join34 } = await import("node:path");
-          const specPath = resolve7(args.spec);
-          if (!existsSync17(specPath)) {
+          const { existsSync: existsSync19, readFileSync: readFileSync21, mkdirSync: mkdirSync7 } = await import("node:fs");
+          const { resolve: resolve8, join: join37 } = await import("node:path");
+          const specPath = resolve8(args.spec);
+          if (!existsSync19(specPath)) {
             cliError(`spec file not found: ${specPath}`, 4, { name: "E_NOT_FOUND" });
             process.exitCode = 4;
             return;
           }
-          const specContent = readFileSync18(specPath, "utf-8");
+          const specContent = readFileSync21(specPath, "utf-8");
           const projectRoot = getProjectRoot24();
-          const outputDir = args["output-dir"] ? resolve7(args["output-dir"]) : join34(projectRoot, ".cleo", "cant", "agents");
-          mkdirSync5(outputDir, { recursive: true });
+          const outputDir = args["output-dir"] ? resolve8(args["output-dir"]) : join37(projectRoot, ".cleo", "cant", "agents");
+          mkdirSync7(outputDir, { recursive: true });
           if (args["dry-run"]) {
             cliOutput(
               {
@@ -36529,7 +37339,7 @@ var init_consent = __esm({
 });
 
 // packages/cleo/src/cli/commands/auth/list.ts
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import { join as join9 } from "node:path";
 function formatExpiry(expiresAt) {
@@ -36609,7 +37419,7 @@ var init_list2 = __esm({
           return p !== 0 ? p : a2.label.localeCompare(b.label);
         });
         const claudeCredsPath = join9(homedir2(), ".claude", ".credentials.json");
-        const hint = existsSync7(claudeCredsPath) && entries.every((e) => e.source !== "claude-code") ? "Hint: Claude Code OAuth detected at ~/.claude/.credentials.json but consent is off. Run `cleo auth consent --enable-claude-code` to seed it into the pool." : null;
+        const hint = existsSync6(claudeCredsPath) && entries.every((e) => e.source !== "claude-code") ? "Hint: Claude Code OAuth detected at ~/.claude/.credentials.json but consent is off. Run `cleo auth consent --enable-claude-code` to seed it into the pool." : null;
         cliOutput(
           { entries, ...hint !== null ? { hint } : {} },
           {
@@ -36623,7 +37433,7 @@ var init_list2 = __esm({
 });
 
 // packages/cleo/src/cli/commands/auth/migrate-project-secrets.ts
-import { existsSync as existsSync8, readFileSync as readFileSync9, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "node:fs";
 import { join as join10 } from "node:path";
 import { createInterface } from "node:readline";
 function resolveProjectRootArg(arg) {
@@ -36679,8 +37489,8 @@ function detectAuthType(provider, token) {
 async function promptYesNo(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
   try {
-    const answer = await new Promise((resolve7) => {
-      rl.question(question, (a) => resolve7(a));
+    const answer = await new Promise((resolve8) => {
+      rl.question(question, (a) => resolve8(a));
     });
     const clean = answer.trim().toLowerCase();
     return clean === "y" || clean === "yes";
@@ -36690,7 +37500,7 @@ async function promptYesNo(question) {
 }
 async function runMigrateProjectSecrets(opts) {
   const configPath = projectConfigPath(opts.projectRoot);
-  if (!existsSync8(configPath)) {
+  if (!existsSync7(configPath)) {
     return {
       configPath,
       backupPath: null,
@@ -36699,7 +37509,7 @@ async function runMigrateProjectSecrets(opts) {
       dryRun: opts.dryRun
     };
   }
-  const raw = readFileSync9(configPath, "utf-8");
+  const raw = readFileSync8(configPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -37616,12 +38426,12 @@ async function promptPassphrase() {
       "Cannot prompt for passphrase: stdin is not a TTY. Set the CLEO_BACKUP_PASSPHRASE environment variable for non-interactive use."
     );
   }
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     process.stdout.write("Passphrase: ");
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
     rl.question("", (answer) => {
       rl.close();
-      resolve7(answer.trim());
+      resolve8(answer.trim());
     });
   });
 }
@@ -37757,9 +38567,9 @@ var init_backup = __esm({
       async run({ args }) {
         const scope = args.scope;
         const { packBundle } = await import("@cleocode/core/store/backup-pack.js");
-        const { getProjectRoot: getProjectRoot53 } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot54 } = await import("@cleocode/core");
         const includesProject = scope === "project" || scope === "all";
-        const projectRoot = includesProject ? getProjectRoot53() : void 0;
+        const projectRoot = includesProject ? getProjectRoot54() : void 0;
         let passphrase;
         if (args.encrypt === true) {
           passphrase = process.env["CLEO_BACKUP_PASSPHRASE"];
@@ -37835,12 +38645,12 @@ var init_backup = __esm({
       },
       async run({ args }) {
         const bundlePath = args.bundle;
-        const { getProjectRoot: getProjectRoot53, getCleoHome: getCleoHome6, getCleoVersion } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot54, getCleoHome: getCleoHome6, getCleoVersion } = await import("@cleocode/core");
         const { BundleError, cleanupStaging, unpackBundle } = await import("@cleocode/core/store/backup-unpack.js");
         const { regenerateConfigJson, regenerateProjectContextJson, regenerateProjectInfoJson } = await import("@cleocode/core/store/regenerators.js");
         const { regenerateAndCompare } = await import("@cleocode/core/store/restore-json-merge.js");
         const { buildConflictReport, writeConflictReport } = await import("@cleocode/core/store/restore-conflict-report.js");
-        const projectRoot = getProjectRoot53();
+        const projectRoot = getProjectRoot54();
         if (args.force !== true) {
           const existing = checkForExistingData(projectRoot, getCleoHome6());
           if (existing.length > 0) {
@@ -38442,7 +39252,7 @@ var briefing_exports = {};
 __export(briefing_exports, {
   briefingCommand: () => briefingCommand
 });
-import { existsSync as existsSync9, readFileSync as readFileSync10 } from "node:fs";
+import { existsSync as existsSync8, readFileSync as readFileSync9 } from "node:fs";
 import { join as join11 } from "node:path";
 import { pushWarning as pushWarning2 } from "@cleocode/core";
 import { resolveLegacyCleoDir } from "@cleocode/paths";
@@ -38475,7 +39285,7 @@ function renderForAdapter(sectionName, content, format) {
 }
 async function runBriefingInject(sectionName, formatStr) {
   const templatePath = resolveInjectionTemplatePath();
-  if (!existsSync9(templatePath)) {
+  if (!existsSync8(templatePath)) {
     pushWarning2({
       code: "W_TEMPLATE_INJECT_FAILED",
       message: `CLEO-INJECTION.md not found at ${templatePath}`
@@ -38492,7 +39302,7 @@ async function runBriefingInject(sectionName, formatStr) {
     process.exitCode = 1;
     return;
   }
-  const content = readFileSync10(templatePath, "utf-8");
+  const content = readFileSync9(templatePath, "utf-8");
   const section = extractSection(content, sectionName);
   if (section === null) {
     const available = INJECTION_SECTION_NAMES.join(", ");
@@ -38731,15 +39541,15 @@ var init_caamp = __esm({
         }
         if (args["dry-run"]) {
           const { parseCaampBlocks } = await import("@cleocode/caamp");
-          const { existsSync: existsSync17 } = await import("node:fs");
-          const { readFile: readFile7 } = await import("node:fs/promises");
+          const { existsSync: existsSync19 } = await import("node:fs");
+          const { readFile: readFile8 } = await import("node:fs/promises");
           const dryResults = [];
           for (const filePath of filePaths) {
-            if (!existsSync17(filePath)) {
+            if (!existsSync19(filePath)) {
               dryResults.push({ filePath, exists: false, blockCount: 0, wouldRemove: 0 });
               continue;
             }
-            const content = await readFile7(filePath, "utf-8");
+            const content = await readFile8(filePath, "utf-8");
             const blocks = parseCaampBlocks(content);
             const uniqueContents = new Set(blocks.map((b) => b.content));
             const wouldRemove = blocks.length - uniqueContents.size;
@@ -38833,13 +39643,13 @@ var cant_exports = {};
 __export(cant_exports, {
   cantCommand: () => cantCommand
 });
-import { existsSync as existsSync10, mkdirSync as mkdirSync2, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync2, readFileSync as readFileSync10, writeFileSync as writeFileSync3 } from "node:fs";
 import { dirname as dirname4, isAbsolute, join as join13, resolve as resolve3 } from "node:path";
 function resolveFilePath(file) {
   return isAbsolute(file) ? file : resolve3(process.cwd(), file);
 }
 function ensureExists(filePath, operation) {
-  if (existsSync10(filePath)) return true;
+  if (existsSync9(filePath)) return true;
   cliError(`File not found: ${filePath}`, "E_FILE_READ");
   process.exitCode = 3;
   if (process.env["CLEO_DEBUG"]) humanWarn(`(operation: ${operation})`);
@@ -38989,7 +39799,7 @@ var init_cant = __esm({
         if (!ensureExists(filePath, "cant.migrate")) return;
         try {
           const mod = await loadMigrateEngine();
-          const content = readFileSync11(filePath, "utf-8");
+          const content = readFileSync10(filePath, "utf-8");
           const result = mod.migrateMarkdown(content, filePath, {
             write: isWrite,
             verbose: isVerbose,
@@ -39055,7 +39865,7 @@ var chain_exports = {};
 __export(chain_exports, {
   chainCommand: () => chainCommand
 });
-import { readFileSync as readFileSync12 } from "node:fs";
+import { readFileSync as readFileSync11 } from "node:fs";
 var showCommand3, listCommand5, addCommand3, instantiateCommand, advanceCommand, chainCommand;
 var init_chain = __esm({
   "packages/cleo/src/cli/commands/chain.ts"() {
@@ -39097,7 +39907,7 @@ var init_chain = __esm({
         }
       },
       async run({ args }) {
-        const chainJson = JSON.parse(readFileSync12(args.file, "utf-8"));
+        const chainJson = JSON.parse(readFileSync11(args.file, "utf-8"));
         await dispatchFromCli(
           "mutate",
           "pipeline",
@@ -39178,7 +39988,7 @@ var changeset_exports = {};
 __export(changeset_exports, {
   changesetCommand: () => changesetCommand
 });
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync10 } from "node:fs";
 import { join as join14 } from "node:path";
 import {
   changesets,
@@ -39305,7 +40115,7 @@ var init_changeset = __esm({
         });
         if (!outcome.ok) {
           const err = outcome.error;
-          const hint = err.code === "E_SLUG_PATTERN_MISMATCH" && err.example ? `example slug: ${err.example}` : void 0;
+          const hint = err.code === "E_SLUG_PATTERN_MISMATCH" && err.example ? `example slug: ${err.example}` : err.code === "E_SLUG_RESERVED" ? `try: ${err.suggestions.join(", ")}` : void 0;
           cliError(err.message, 6 /* VALIDATION_ERROR */, {
             name: err.code,
             ...hint ? { fix: hint } : {}
@@ -39327,7 +40137,7 @@ var init_changeset = __esm({
       async run() {
         const projectRoot = getProjectRoot30();
         const dir = join14(projectRoot, ".changeset");
-        if (!existsSync11(dir)) {
+        if (!existsSync10(dir)) {
           const empty = { entries: [], count: 0, dir, note: "no .changeset/ dir" };
           if (isHumanOutput()) {
             humanLine("No changeset entries found (.changeset/ directory absent).");
@@ -39497,10 +40307,10 @@ var init_check2 = __esm({
         }
       },
       async run({ args }) {
-        const { readFileSync: readFileSync18 } = await import("node:fs");
+        const { readFileSync: readFileSync21 } = await import("node:fs");
         let chain;
         try {
-          chain = JSON.parse(readFileSync18(args.file, "utf8"));
+          chain = JSON.parse(readFileSync21(args.file, "utf8"));
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
           cliError(`Failed to read or parse chain file: ${message}`, 2, {
@@ -39790,11 +40600,11 @@ var init_check2 = __esm({
       },
       async run({ args }) {
         const { spawnSync } = await import("node:child_process");
-        const { existsSync: existsSync17 } = await import("node:fs");
-        const { join: join34, resolve: resolve7 } = await import("node:path");
+        const { existsSync: existsSync19 } = await import("node:fs");
+        const { join: join37, resolve: resolve8 } = await import("node:path");
         const strict = Boolean(args.strict);
         const jsonOnly = Boolean(args.json);
-        const repoRoot = resolve7(process.cwd());
+        const repoRoot = resolve8(process.cwd());
         const gates = [
           {
             id: "gate-1",
@@ -39831,8 +40641,8 @@ var init_check2 = __esm({
         const results = [];
         let anyFailed = false;
         for (const gate of gates) {
-          const scriptPath = join34(repoRoot, gate.script);
-          if (!existsSync17(scriptPath)) {
+          const scriptPath = join37(repoRoot, gate.script);
+          if (!existsSync19(scriptPath)) {
             results.push({
               id: gate.id,
               task: gate.task,
@@ -40147,9 +40957,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartOutline } = await import("@cleocode/core/internal");
-            const { join: join34 } = await import("node:path");
+            const { join: join37 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join34(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join37(root, args.file);
             const result = smartOutline(absPath, root);
             if (result.errors.length > 0 && result.symbols.length === 0) {
               cliError(result.errors.join(", "), 1, { name: "E_OUTLINE_FAILED" });
@@ -40240,9 +41050,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartUnfold } = await import("@cleocode/core/internal");
-            const { join: join34 } = await import("node:path");
+            const { join: join37 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join34(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join37(root, args.file);
             const result = smartUnfold(absPath, args.symbol, root);
             if (!result.found) {
               const errs = result.errors.length > 0 ? `: ${result.errors.join(", ")}` : "";
@@ -41924,7 +42734,7 @@ var daemon_exports = {};
 __export(daemon_exports, {
   daemonCommand: () => daemonCommand
 });
-import { existsSync as existsSync12 } from "node:fs";
+import { existsSync as existsSync11 } from "node:fs";
 import { join as join16 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { getGCDaemonStatus, spawnGCDaemon, stopGCDaemon } from "@cleocode/core/gc/daemon.js";
@@ -41992,7 +42802,7 @@ async function showDaemonStatus(cleoDir, projectRoot) {
 function resolveDaemonInstallerScript() {
   const filePath = fileURLToPath3(import.meta.url);
   const candidate1 = join16(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
-  if (existsSync12(candidate1)) return candidate1;
+  if (existsSync11(candidate1)) return candidate1;
   const candidate2 = join16(
     filePath,
     "..",
@@ -42913,12 +43723,12 @@ var detect_drift_exports = {};
 __export(detect_drift_exports, {
   detectDriftCommand: () => detectDriftCommand
 });
-import { existsSync as existsSync13, readdirSync, readFileSync as readFileSync13 } from "node:fs";
+import { existsSync as existsSync12, readdirSync, readFileSync as readFileSync12 } from "node:fs";
 import { dirname as dirname5, join as join17 } from "node:path";
 function findProjectRoot() {
   let currentDir = process.cwd();
   while (currentDir !== "/") {
-    if (existsSync13(join17(currentDir, "package.json"))) {
+    if (existsSync12(join17(currentDir, "package.json"))) {
       return currentDir;
     }
     const parent = dirname5(currentDir);
@@ -42942,11 +43752,11 @@ var init_detect_drift = __esm({
       },
       async run() {
         const projectRoot = findProjectRoot();
-        const isCleoRepo = existsSync13(join17(projectRoot, "packages", "cleo", "src"));
+        const isCleoRepo = existsSync12(join17(projectRoot, "packages", "cleo", "src"));
         const cleoSrcRoot = isCleoRepo ? join17(projectRoot, "packages", "cleo", "src") : join17(projectRoot, "src");
         const safeRead = (filePath) => {
           try {
-            return readFileSync13(filePath, "utf-8");
+            return readFileSync12(filePath, "utf-8");
           } catch {
             return "";
           }
@@ -42958,7 +43768,7 @@ var init_detect_drift = __esm({
             recommendations: []
           };
           const injPath = join17(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
-          if (existsSync13(injPath)) {
+          if (existsSync12(injPath)) {
             const content = safeRead(injPath);
             userResult.checks.push({
               name: "Agent injection",
@@ -43012,7 +43822,7 @@ var init_detect_drift = __esm({
           const specPath = join17(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
           const registryPath = join17(cleoSrcRoot, "dispatch", "registry.ts");
           const dispatchDomainsDir = join17(cleoSrcRoot, "dispatch", "domains");
-          if (!existsSync13(specPath)) {
+          if (!existsSync12(specPath)) {
             addCheck("Gateway-to-spec sync", "fail", "CLEO-OPERATION-CONSTITUTION.md missing", [
               {
                 severity: "error",
@@ -43022,7 +43832,7 @@ var init_detect_drift = __esm({
                 recommendation: "Create docs/specs/CLEO-OPERATION-CONSTITUTION.md with canonical operation definitions"
               }
             ]);
-          } else if (!existsSync13(registryPath) || !existsSync13(dispatchDomainsDir)) {
+          } else if (!existsSync12(registryPath) || !existsSync12(dispatchDomainsDir)) {
             addCheck("Gateway-to-spec sync", "fail", "Dispatch registry or domains missing", [
               {
                 severity: "error",
@@ -43082,7 +43892,7 @@ var init_detect_drift = __esm({
         try {
           const cliDir = join17(cleoSrcRoot, "cli", "commands");
           const coreDir = isCleoRepo ? join17(projectRoot, "packages", "core", "src") : join17(projectRoot, "src", "core");
-          if (!existsSync13(cliDir)) {
+          if (!existsSync12(cliDir)) {
             addCheck("CLI-to-core sync", "fail", "CLI commands directory missing", [
               {
                 severity: "error",
@@ -43091,7 +43901,7 @@ var init_detect_drift = __esm({
                 recommendation: "Verify TypeScript source structure is intact"
               }
             ]);
-          } else if (!existsSync13(coreDir)) {
+          } else if (!existsSync12(coreDir)) {
             addCheck("CLI-to-core sync", "fail", "Core directory missing", [
               {
                 severity: "error",
@@ -43109,7 +43919,7 @@ var init_detect_drift = __esm({
         }
         try {
           const domainsDir = join17(cleoSrcRoot, "dispatch", "domains");
-          if (!existsSync13(domainsDir)) {
+          if (!existsSync12(domainsDir)) {
             addCheck("Domain handler coverage", "fail", "Dispatch domains directory missing", [
               {
                 severity: "error",
@@ -43127,7 +43937,7 @@ var init_detect_drift = __esm({
         }
         try {
           const matrixPath = join17(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
-          if (!existsSync13(matrixPath)) {
+          if (!existsSync12(matrixPath)) {
             addCheck("Capability matrix", "fail", "Capability matrix missing", [
               {
                 severity: "error",
@@ -43144,7 +43954,7 @@ var init_detect_drift = __esm({
         }
         try {
           const schemaPath = join17(projectRoot, "src", "store", "schema.ts");
-          if (!existsSync13(schemaPath)) {
+          if (!existsSync12(schemaPath)) {
             addCheck("Schema validation", "fail", "Schema definition missing", [
               {
                 severity: "error",
@@ -43181,7 +43991,7 @@ var init_detect_drift = __esm({
           const visionPath = join17(projectRoot, "docs", "concepts", "CLEO-VISION.md");
           const specPath = join17(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
           const issues = [];
-          if (!existsSync13(visionPath)) {
+          if (!existsSync12(visionPath)) {
             issues.push({
               severity: "error",
               category: "vision",
@@ -43190,7 +44000,7 @@ var init_detect_drift = __esm({
               recommendation: "Create docs/concepts/CLEO-VISION.md with project vision"
             });
           }
-          if (!existsSync13(specPath)) {
+          if (!existsSync12(specPath)) {
             issues.push({
               severity: "error",
               category: "spec",
@@ -43235,7 +44045,7 @@ var init_detect_drift = __esm({
         }
         try {
           const injectionPath = join17(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
-          if (!existsSync13(injectionPath)) {
+          if (!existsSync12(injectionPath)) {
             addCheck("Agent injection", "fail", "Agent injection template missing", [
               {
                 severity: "error",
@@ -43265,7 +44075,7 @@ var init_detect_drift = __esm({
         }
         try {
           const exitCodesPath = join17(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
-          if (!existsSync13(exitCodesPath)) {
+          if (!existsSync12(exitCodesPath)) {
             addCheck("Exit codes", "fail", "Exit codes definition missing", [
               {
                 severity: "error",
@@ -43611,8 +44421,96 @@ var init_strict_args = __esm({
   }
 });
 
+// packages/cleo/src/cli/commands/docs/graph.ts
+import {
+  buildDocProvenanceGraph,
+  DocProvenanceRootNotFoundError,
+  renderProvenanceGraphAsDot
+} from "@cleocode/core/internal";
+function parseDepth(raw) {
+  if (raw === void 0 || raw === null || raw === "") return 2;
+  const parsed = Number.parseInt(String(raw), 10);
+  if (!Number.isInteger(parsed) || parsed < 0) {
+    cliError(
+      `--depth must be a non-negative integer (got '${String(raw)}')`,
+      6 /* VALIDATION_ERROR */,
+      { name: "E_VALIDATION" }
+    );
+    process.exit(6 /* VALIDATION_ERROR */);
+  }
+  return parsed;
+}
+function parseFormat(raw) {
+  if (raw === void 0 || raw === null || raw === "") return "json";
+  const candidate = String(raw);
+  if (candidate !== "json" && candidate !== "dot") {
+    cliError(`--format must be one of: json|dot \u2014 got '${candidate}'`, 6 /* VALIDATION_ERROR */, {
+      name: "E_VALIDATION"
+    });
+    process.exit(6 /* VALIDATION_ERROR */);
+  }
+  return candidate;
+}
+var graphCommand;
+var init_graph2 = __esm({
+  "packages/cleo/src/cli/commands/docs/graph.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    graphCommand = defineCommand({
+      meta: {
+        name: "graph",
+        description: "Traverse the docs provenance graph from a root (slug or task ID) and return a typed DocProvenanceResponse envelope. Walks supersedes/superseded-by chains plus cross-entity edges to owning + related tasks. Default depth=2. Pass --format dot for Graphviz output (still wrapped in the envelope under data.dot)."
+      },
+      args: {
+        root: {
+          type: "string",
+          description: "Root identifier \u2014 a canonical doc slug (e.g. adr-078-docs-provenance) or a CLEO task ID (T####). Required.",
+          required: true
+        },
+        depth: {
+          type: "string",
+          description: "Maximum BFS hops from the root (default: 2; minimum: 0)."
+        },
+        format: {
+          type: "string",
+          description: "Output format: json (default) | dot."
+        }
+      },
+      async run({ args }) {
+        const root = String(args.root);
+        const depth = parseDepth(args.depth);
+        const format = parseFormat(args.format);
+        try {
+          const graph = await buildDocProvenanceGraph({ root, depth });
+          const payload = { ...graph };
+          if (format === "dot") {
+            payload["dot"] = renderProvenanceGraphAsDot(graph);
+          }
+          cliOutput(payload, { command: "docs graph", operation: "docs.graph" });
+        } catch (err) {
+          if (err instanceof DocProvenanceRootNotFoundError) {
+            cliError(err.message, 4 /* NOT_FOUND */, {
+              name: "E_DOC_PROVENANCE_ROOT_NOT_FOUND",
+              fix: "Verify the root with `cleo docs list --project --type adr` (or your kind) and pass an existing slug or task ID. Slugs and task IDs are matched against attachments.slug and attachment_refs.owner_id respectively.",
+              details: { root }
+            });
+            process.exit(4 /* NOT_FOUND */);
+          }
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(`docs graph failed: ${message}`, 1 /* GENERAL_ERROR */, {
+            name: "E_DOCS_GRAPH_FAILED"
+          });
+          process.exit(1 /* GENERAL_ERROR */);
+        }
+      }
+    });
+  }
+});
+
 // packages/cleo/src/viewer/pidfile.ts
-import { mkdir, readFile as readFile2, unlink, writeFile } from "node:fs/promises";
+import { mkdir, readFile as readFile3, unlink, writeFile } from "node:fs/promises";
 import { dirname as dirname6, join as join18 } from "node:path";
 import { getCleoHome as getCleoHome2 } from "@cleocode/core/internal";
 function viewerPidFilePath() {
@@ -43626,7 +44524,7 @@ async function writeViewerPidFile(record) {
 }
 async function readViewerPidFile() {
   try {
-    const raw = await readFile2(viewerPidFilePath(), "utf8");
+    const raw = await readFile3(viewerPidFilePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.pid === "number" && typeof parsed.port === "number" && typeof parsed.host === "string" && typeof parsed.projectRoot === "string" && typeof parsed.startedAt === "number") {
       return parsed;
@@ -44436,10 +45334,9 @@ var docs_exports = {};
 __export(docs_exports, {
   docsCommand: () => docsCommand
 });
-import { appendFile, mkdir as mkdir2, readdir, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
+import { appendFile, mkdir as mkdir2, readdir, readFile as readFile4, writeFile as writeFile2 } from "node:fs/promises";
 import { dirname as dirname8, isAbsolute as isAbsolute2, join as join21, resolve as resolve5 } from "node:path";
 import {
-  buildDocsGraph,
   CleoError as CleoError3,
   CounterMismatchError,
   checkSlugSimilarity,
@@ -44448,6 +45345,7 @@ import {
   DEFAULT_SIMILARITY_THRESHOLD,
   detectStrayCleoDb as detectStrayCleoDb2,
   exportDocument,
+  findSimilarDocs,
   getAgentOutputsAbsolute,
   getProjectRoot as getProjectRoot38,
   listDocVersions,
@@ -44510,7 +45408,7 @@ async function runGapCheck(_projectRoot, filterId) {
     for (const file of reviewFiles) {
       if (filterId && !file.includes(filterId)) continue;
       const filePath = join21(reviewDir, file);
-      const content = await readFile3(filePath, "utf-8");
+      const content = await readFile4(filePath, "utf-8");
       const taskMatch = file.match(/^(T\d+)/);
       const taskId = taskMatch ? taskMatch[1] : "UNKNOWN";
       const gaps = [];
@@ -44553,7 +45451,7 @@ function loadCliRegistry(projectRoot) {
     throw err;
   }
 }
-var addCommand5, listCommand8, fetchCommand, removeCommand2, generateCommand, exportCommand4, searchCommand, mergeCommand, graphCommand, rankCommand, versionsCommand, publishCommand2, publishPrCommand, syncCommand3, statusCommand7, gapCheckCommand, importCommand2, schemaCommand, listTypesCommand, docsCommand;
+var addCommand5, listCommand8, fetchCommand, removeCommand2, supersedeCommandArgs, supersedeCommand, generateCommand, exportCommand4, searchCommand, findCommand3, mergeCommand, rankCommand, updateCommand, versionsCommand, publishCommand2, publishPrCommand, syncCommand3, statusCommand7, gapCheckCommand, importCommand2, schemaCommand, listTypesCommand, docsCommand;
 var init_docs3 = __esm({
   "packages/cleo/src/cli/commands/docs.ts"() {
     "use strict";
@@ -44563,11 +45461,12 @@ var init_docs3 = __esm({
     init_canon_docs();
     init_strict_args();
     init_renderers();
+    init_graph2();
     init_docs_viewer();
     addCommand5 = defineCommand({
       meta: {
         name: "add",
-        description: 'Attach a local file or remote URL to a CLEO entity (task, session, observation). Owner type is inferred from the ID prefix: T### \u2192 task, ses_* \u2192 session, O-* \u2192 observation. Use --slug to set a human-friendly alias (unique per project) (T9636).\n\nPositional arguments:\n  <owner-id>             Owner entity ID (T###, ses_*, O-*) \u2014 required\n  [file]                 Local file path to attach \u2014 optional when --url is set\n\nNamed arguments:\n  --url <url>            Remote URL to attach (instead of a local file)\n  --desc <text>          Free-text description of this attachment\n  --labels <csv>         Comma-separated labels (e.g. rfc,spec)\n  --attached-by <name>   Agent identity that created the attachment (default: "human")\n  --slug <kebab>         Human-friendly alias, unique per project (T9636)\n  --type <kind>          Taxonomy classification \u2014 run `cleo docs list-types` for kinds\n\nUnknown flags are rejected with E_UNKNOWN_FLAG + did-you-mean suggestions (T10359).'
+        description: 'Attach a local file or remote URL to a CLEO entity (task, session, observation). Owner type is inferred from the ID prefix: T### \u2192 task, ses_* \u2192 session, O-* \u2192 observation. Use --slug to set a human-friendly alias (unique per project) (T9636).\n\nPositional arguments:\n  <owner-id>             Owner entity ID (T###, ses_*, O-*) \u2014 required\n  [file]                 Local file path to attach \u2014 optional when --url is set\n\nNamed arguments:\n  --url <url>            Remote URL to attach (instead of a local file)\n  --desc <text>          Free-text description of this attachment\n  --labels <csv>         Comma-separated labels (e.g. rfc,spec)\n  --attached-by <name>   Agent identity that created the attachment (default: "human")\n  --slug <kebab>         Human-friendly alias, unique per project (T9636)\n  --title <text>         Human-readable title \u2014 REQUIRED for --type adr when --slug is omitted (T10360)\n  --type <kind>          Taxonomy classification \u2014 run `cleo docs list-types` for kinds\n  --allow-similar        Bypass the slug-similarity warn \u2014 every bypass is audited\n                         to .cleo/audit/similar-bypass.jsonl (T10361)\n  --strict               Enforce body-schema (requiredSections) \u2014 fail with\n                         E_DOC_SCHEMA_MISMATCH instead of warning (T10160)\n\nValidation behaviors:\n  \u2022 Unknown flags \u2192 E_UNKNOWN_FLAG with did-you-mean suggestions (T10359)\n  \u2022 Slug collision \u2192 E_SLUG_RESERVED + 3 alternative slugs (T10386)\n  \u2022 Near-duplicate slug \u2192 W_SLUG_SIMILAR warning unless --allow-similar (T10361)\n  \u2022 For --type adr without --slug, slug auto-allocates as `adr-NNN-<kebab-title>` via the\n    central allocator (T10360 \u2014 closes T10153). --title is required in this case.'
       },
       args: {
         "owner-id": {
@@ -44600,6 +45499,10 @@ var init_docs3 = __esm({
           type: "string",
           description: "Human-friendly kebab-case alias for the attachment, unique per project (T9636). Collision returns E_SLUG_RESERVED with 3 alternative suggestions (legacy E_SLUG_TAKEN aliased under details.aliases for one release \u2014 T10386)."
         },
+        title: {
+          type: "string",
+          description: "Human-readable title used to derive the kebab-slug tail when auto-allocating an ADR slug. REQUIRED when --type adr is set AND --slug is omitted. Slugified via the shared kebabize helper (lowercase, hyphen-separated, diacritics stripped) (T10360)."
+        },
         type: {
           type: "string",
           description: "Taxonomy classification \u2014 run `cleo docs list-types` to enumerate registered kinds (T9637 / T9788)"
@@ -44639,6 +45542,17 @@ var init_docs3 = __esm({
           });
           process.exit(6);
         }
+        if (args.type === "adr" && !args.slug && !args.title) {
+          cliError(
+            "--title <text> is required when --type adr is used without --slug \u2014 the allocator needs a title to assemble adr-NNN-<kebab-title>",
+            6,
+            {
+              name: "E_VALIDATION",
+              fix: 'Re-run with --title "Adopt Drizzle v1 beta" (or pass --slug adr-042-explicit-name to bypass auto-allocation).'
+            }
+          );
+          process.exit(6);
+        }
         let resolvedFile;
         if (fileArg) {
           const routing = resolveWorktreeRouting2();
@@ -44751,6 +45665,7 @@ var init_docs3 = __esm({
             ...args.labels ? { labels: args.labels } : {},
             ...args["attached-by"] ? { attachedBy: args["attached-by"] } : {},
             ...args.slug ? { slug: args.slug } : {},
+            ...args.title ? { title: args.title } : {},
             ...args.type ? { type: args.type } : {},
             ...args.strict === true ? { strict: true } : {}
           },
@@ -44791,6 +45706,15 @@ var init_docs3 = __esm({
         orderBy: {
           type: "string",
           description: "Sort key: newest (default \u2014 most recent first), sha (ascending hex), slug (alphabetical, slug-less rows last) (T9792)."
+        },
+        // T9922 — MVI record projection opt-out flags (surfaced for --help).
+        verbose: {
+          type: "boolean",
+          description: "Return full attachment records instead of the MVI projection (id + slug + type + kind + sha + size + createdAt). T9922."
+        },
+        full: {
+          type: "boolean",
+          description: "Alias for --verbose. T9922."
         }
       },
       async run({ args }) {
@@ -44857,6 +45781,15 @@ var init_docs3 = __esm({
           type: "positional",
           description: "Attachment ID (att_*) or SHA-256 hex",
           required: true
+        },
+        // T9922 — MVI record projection opt-out flags (surfaced for --help).
+        verbose: {
+          type: "boolean",
+          description: "Return the full attachment metadata block instead of the MVI projection. The byte payload is always returned. T9922."
+        },
+        full: {
+          type: "boolean",
+          description: "Alias for --verbose. T9922."
         }
       },
       async run({ args }) {
@@ -44900,6 +45833,54 @@ var init_docs3 = __esm({
         );
       }
     });
+    supersedeCommandArgs = {
+      oldSlug: {
+        type: "positional",
+        description: "Slug of the doc being replaced",
+        required: true
+      },
+      newSlug: {
+        type: "positional",
+        description: "Slug of the doc that replaces oldSlug",
+        required: true
+      },
+      reason: {
+        type: "string",
+        description: "Optional human-readable reason carried back on the response envelope"
+      }
+    };
+    supersedeCommand = defineCommand({
+      meta: {
+        name: "supersede",
+        description: "Atomically supersede an older doc with a newer one: flips lifecycle_status to 'superseded' on the old row and links both rows via the supersedes/superseded_by FK pointers. All writes commit in a single SQLite transaction."
+      },
+      args: supersedeCommandArgs,
+      async run({ args, rawArgs }) {
+        try {
+          assertKnownFlags(rawArgs, supersedeCommandArgs, "docs supersede");
+        } catch (err) {
+          if (err instanceof UnknownFlagError) {
+            cliError(err.message, 6 /* VALIDATION_ERROR */, { name: "E_VALIDATION" });
+            process.exit(6 /* VALIDATION_ERROR */);
+          }
+          throw err;
+        }
+        const oldSlug = args.oldSlug;
+        const newSlug = args.newSlug;
+        const reason = typeof args.reason === "string" && args.reason.length > 0 ? args.reason : void 0;
+        await dispatchFromCli(
+          "mutate",
+          "docs",
+          "supersede",
+          {
+            oldSlug,
+            newSlug,
+            ...reason !== void 0 ? { reason } : {}
+          },
+          { command: "docs supersede" }
+        );
+      }
+    });
     generateCommand = defineCommand({
       meta: {
         name: "generate",
@@ -45051,6 +46032,102 @@ var init_docs3 = __esm({
         }
       }
     });
+    findCommand3 = defineCommand({
+      meta: {
+        name: "find",
+        description: "Find docs similar to a seed slug via llmtxt/similarity.rankBySimilarity. Pass --similar <slug>; results default to the same DocKind as the seed. Use --all-kinds to rank cross-kind, --threshold to set the minimum cosine score, and --limit to cap the number of returned hits.\n\nNamed arguments:\n  --similar <slug>       Slug of the seed doc to anchor similarity against (required for now)\n  --limit <n>            Maximum number of hits to return (default 10)\n  --threshold <0..1>     Minimum cosine score, hits below are dropped (default 0.5)\n  --all-kinds            Disable the same-kind filter and rank cross-kind\n  --json                 Emit LAFS JSON envelope (default for non-TTY)"
+      },
+      args: {
+        similar: {
+          type: "string",
+          description: "Slug of the seed doc to anchor similarity against"
+        },
+        limit: {
+          type: "string",
+          description: "Maximum number of hits to return (default: 10)"
+        },
+        threshold: {
+          type: "string",
+          description: "Minimum cosine similarity score in [0, 1] (default: 0.5)"
+        },
+        "all-kinds": {
+          type: "boolean",
+          description: "Disable the same-kind filter and rank across every DocKind"
+        },
+        json: {
+          type: "boolean",
+          description: "Emit LAFS JSON envelope instead of human-readable output"
+        }
+      },
+      async run({ args, rawArgs }) {
+        try {
+          assertKnownFlags(rawArgs, findCommand3.args, "docs find");
+        } catch (err) {
+          if (err instanceof UnknownFlagError) {
+            cliError(err.message, 6 /* VALIDATION_ERROR */, {
+              name: err.code,
+              fix: err.fix,
+              alternatives: err.suggestions.map((s) => ({ action: s, command: s })),
+              details: { flag: err.flag, knownFlags: err.knownFlags }
+            });
+            process.exit(6 /* VALIDATION_ERROR */);
+          }
+          throw err;
+        }
+        const similarSlug = typeof args.similar === "string" ? args.similar.trim() : "";
+        if (similarSlug.length === 0) {
+          cliError("--similar <slug> is required", 6 /* VALIDATION_ERROR */, {
+            name: "E_VALIDATION",
+            fix: "Example: `cleo docs find --similar adr-073-above-epic-naming --limit 5`."
+          });
+          process.exit(6 /* VALIDATION_ERROR */);
+        }
+        let limit;
+        if (typeof args.limit === "string") {
+          const parsed = Number.parseInt(args.limit, 10);
+          if (!Number.isFinite(parsed) || parsed <= 0) {
+            cliError(
+              `--limit must be a positive integer (got "${args.limit}")`,
+              6 /* VALIDATION_ERROR */,
+              {
+                name: "E_VALIDATION"
+              }
+            );
+            process.exit(6 /* VALIDATION_ERROR */);
+          }
+          limit = parsed;
+        }
+        let threshold;
+        if (typeof args.threshold === "string") {
+          const parsed = Number.parseFloat(args.threshold);
+          if (!Number.isFinite(parsed) || parsed < 0 || parsed > 1) {
+            cliError(
+              `--threshold must be a number in [0, 1] (got "${args.threshold}")`,
+              6 /* VALIDATION_ERROR */,
+              { name: "E_VALIDATION" }
+            );
+            process.exit(6 /* VALIDATION_ERROR */);
+          }
+          threshold = parsed;
+        }
+        const allKinds = args["all-kinds"] === true;
+        const projectRoot = getProjectRoot38();
+        try {
+          const result = await findSimilarDocs(similarSlug, {
+            ...limit !== void 0 ? { limit } : {},
+            ...threshold !== void 0 ? { threshold } : {},
+            allKinds,
+            projectRoot
+          });
+          cliOutput(result, { command: "docs find", operation: "docs.find" });
+        } catch (err) {
+          const code = err instanceof Error && typeof err.code === "string" ? err.code : "E_DOCS_FIND_FAILED";
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(`docs find failed: ${message}`, 1 /* GENERAL_ERROR */, { name: code });
+          process.exit(1 /* GENERAL_ERROR */);
+        }
+      }
+    });
     mergeCommand = defineCommand({
       meta: {
         name: "merge",
@@ -45109,10 +46186,10 @@ var init_docs3 = __esm({
         }
       }
     });
-    graphCommand = defineCommand({
+    rankCommand = defineCommand({
       meta: {
-        name: "graph",
-        description: "Build a document relationship graph for an entity using llmtxt/graph.buildGraph. Output formats: mermaid (default), dot, json."
+        name: "rank",
+        description: "Rank attachments for an entity by relevance using llmtxt/similarity.rankBySimilarity. Pass --query to use a custom query; otherwise the entity ID anchors the ranking."
       },
       args: {
         for: {
@@ -45120,13 +46197,9 @@ var init_docs3 = __esm({
           description: "Owner entity ID (T###, ses_*, O-*)",
           required: true
         },
-        format: {
-          type: "string",
-          description: "Output format: mermaid | dot | json (default: mermaid)"
-        },
-        out: {
+        query: {
           type: "string",
-          description: "Write graph to this file path"
+          description: "Optional free-text query to rank against (default: owner ID)"
         },
         json: {
           type: "boolean",
@@ -45135,89 +46208,105 @@ var init_docs3 = __esm({
       },
       async run({ args }) {
         const projectRoot = getProjectRoot38();
-        const fmt = args.format ?? "mermaid";
         try {
-          const result = await buildDocsGraph({ ownerId: String(args.for), projectRoot });
-          let output2;
-          if (fmt === "dot") {
-            const dotLines = ["digraph docs {"];
-            for (const node of result.nodes) {
-              dotLines.push(`  "${node.id}" [label="${node.label}"];`);
-            }
-            for (const edge of result.edges) {
-              dotLines.push(`  "${edge.source}" -> "${edge.target}" [label="${edge.relation}"];`);
-            }
-            dotLines.push("}");
-            output2 = dotLines.join("\n");
-          } else if (fmt === "json") {
-            output2 = JSON.stringify(result, null, 2);
-          } else {
-            const lines = ["graph LR"];
-            for (const edge of result.edges) {
-              lines.push(`  ${edge.source} -->|${edge.relation}| ${edge.target}`);
-            }
-            if (result.edges.length === 0) {
-              for (const node of result.nodes) {
-                lines.push(`  ${node.id}["${node.label}"]`);
-              }
-            }
-            output2 = lines.join("\n");
-          }
-          if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
-            await mkdir2(dirname8(outPath), { recursive: true });
-            await writeFile2(outPath, output2, "utf8");
-            humanInfo(`Wrote graph to ${outPath}`);
-          }
-          cliOutput(
-            { format: fmt, nodeCount: result.nodes.length, edgeCount: result.edges.length, output: output2 },
-            { command: "docs graph", operation: "docs.graph" }
-          );
+          const result = await rankDocs({
+            ownerId: String(args.for),
+            query: args.query ?? void 0,
+            projectRoot
+          });
+          cliOutput(result, { command: "docs rank", operation: "docs.rank" });
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
-          cliError(`docs graph failed: ${message}`, 1 /* GENERAL_ERROR */, {
-            name: "E_DOCS_GRAPH_FAILED"
+          cliError(`docs rank failed: ${message}`, 1 /* GENERAL_ERROR */, {
+            name: "E_DOCS_RANK_FAILED"
           });
           process.exit(1 /* GENERAL_ERROR */);
         }
       }
     });
-    rankCommand = defineCommand({
+    updateCommand = defineCommand({
       meta: {
-        name: "rank",
-        description: "Rank attachments for an entity by relevance using llmtxt/similarity.rankBySimilarity. Pass --query to use a custom query; otherwise the entity ID anchors the ranking."
+        name: "update",
+        description: 'Replace blob content for an existing slug while preserving the slug. Pass --file <path> OR --content <text> (exactly one). Defaults --status to "draft" on every update so explicit `accepted` docs get back-pressured to draft on edit. Audit log entry appended to .cleo/audit/docs-versioning.jsonl (squashed within 5 min).\n\nPositional arguments:\n  <slug>                 Slug of the attachment to update (required)\n\nNamed arguments:\n  --file <path>          Local file containing the new content\n  --content <text>       Inline UTF-8 content (mutually exclusive with --file)\n  --message <text>       One-line summary of the change (audit log)\n  --status <status>      Override lifecycle status \u2014 default "draft"\n  --attached-by <name>   Agent identity for this revision (default "human")'
       },
       args: {
-        for: {
-          type: "string",
-          description: "Owner entity ID (T###, ses_*, O-*)",
+        slug: {
+          type: "positional",
+          description: "Slug of the attachment to update",
           required: true
         },
-        query: {
+        file: {
           type: "string",
-          description: "Optional free-text query to rank against (default: owner ID)"
+          description: "Local file containing the new content"
         },
-        json: {
-          type: "boolean",
-          description: "Emit LAFS JSON envelope"
+        content: {
+          type: "string",
+          description: "Inline UTF-8 content (mutually exclusive with --file)"
+        },
+        message: {
+          type: "string",
+          description: "One-line summary of the change (recorded in the audit log)"
+        },
+        status: {
+          type: "string",
+          description: "Lifecycle status to set on the new row. Valid: draft|proposed|accepted|superseded|archived|deprecated. Default: draft."
+        },
+        "attached-by": {
+          type: "string",
+          description: 'Agent identity that performed the update (default: "human")'
         }
       },
-      async run({ args }) {
-        const projectRoot = getProjectRoot38();
+      async run({ args, rawArgs }) {
         try {
-          const result = await rankDocs({
-            ownerId: String(args.for),
-            query: args.query ?? void 0,
-            projectRoot
-          });
-          cliOutput(result, { command: "docs rank", operation: "docs.rank" });
+          assertKnownFlags(rawArgs, updateCommand.args, "docs update");
         } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
-          cliError(`docs rank failed: ${message}`, 1 /* GENERAL_ERROR */, {
-            name: "E_DOCS_RANK_FAILED"
+          if (err instanceof UnknownFlagError) {
+            cliError(err.message, 6 /* VALIDATION_ERROR */, {
+              name: err.code,
+              fix: err.fix,
+              alternatives: err.suggestions.map((s) => ({ action: s, command: s })),
+              details: { flag: err.flag, knownFlags: err.knownFlags }
+            });
+            process.exit(6 /* VALIDATION_ERROR */);
+          }
+          throw err;
+        }
+        const slug = String(args.slug);
+        const filePath = typeof args.file === "string" ? args.file : void 0;
+        const inlineContent = typeof args.content === "string" ? args.content : void 0;
+        if (filePath !== void 0 && inlineContent !== void 0) {
+          cliError("--file and --content are mutually exclusive", 6 /* VALIDATION_ERROR */, {
+            name: "E_VALIDATION",
+            fix: "Use `cleo docs update <slug> --file <path>` OR `--content <text>` (not both)."
           });
-          process.exit(1 /* GENERAL_ERROR */);
+          process.exit(6 /* VALIDATION_ERROR */);
         }
+        if (filePath === void 0 && inlineContent === void 0) {
+          cliError("provide --file <path> OR --content <text>", 6 /* VALIDATION_ERROR */, {
+            name: "E_VALIDATION",
+            fix: 'Example: `cleo docs update my-doc --file ./new.md` OR `cleo docs update my-doc --content "..."`.'
+          });
+          process.exit(6 /* VALIDATION_ERROR */);
+        }
+        let resolvedFile;
+        if (filePath !== void 0) {
+          const routing = resolveWorktreeRouting2();
+          resolvedFile = resolveWorktreeFilePath(filePath, routing);
+        }
+        await dispatchFromCli(
+          "mutate",
+          "docs",
+          "update",
+          {
+            slug,
+            ...resolvedFile !== void 0 ? { file: resolvedFile } : {},
+            ...inlineContent !== void 0 ? { content: inlineContent } : {},
+            ...typeof args.message === "string" ? { message: args.message } : {},
+            ...typeof args.status === "string" ? { status: args.status } : {},
+            ...typeof args["attached-by"] === "string" ? { attachedBy: args["attached-by"] } : {}
+          },
+          { command: "docs update" }
+        );
       }
     });
     versionsCommand = defineCommand({
@@ -45726,13 +46815,17 @@ var init_docs3 = __esm({
       },
       subCommands: {
         add: addCommand5,
+        update: updateCommand,
         list: listCommand8,
         fetch: fetchCommand,
         remove: removeCommand2,
+        supersede: supersedeCommand,
         generate: generateCommand,
         export: exportCommand4,
+        find: findCommand3,
         search: searchCommand,
         merge: mergeCommand,
+        // T10164 — DocProvenanceResponse-typed graph (`--root <slug>|<taskId>`).
         graph: graphCommand,
         rank: rankCommand,
         versions: versionsCommand,
@@ -46174,6 +47267,7 @@ var ProgressTracker;
 var init_progress = __esm({
   "packages/cleo/src/cli/progress.ts"() {
     "use strict";
+    init_format_context();
     ProgressTracker = class {
       enabled;
       prefix;
@@ -46190,7 +47284,7 @@ var init_progress = __esm({
        * Start the progress tracker.
        */
       start() {
-        if (!this.enabled) return;
+        if (!this.enabled || isQuiet()) return;
         this.currentStep = 0;
         stderr.write(`
 ${this.prefix}: Starting...
@@ -46200,7 +47294,7 @@ ${this.prefix}: Starting...
        * Update to a specific step.
        */
       step(index, message) {
-        if (!this.enabled) return;
+        if (!this.enabled || isQuiet()) return;
         this.currentStep = index;
         const stepName = this.steps[index] ?? message ?? "Working...";
         const progress = `[${index + 1}/${this.totalSteps}]`;
@@ -46222,7 +47316,7 @@ ${this.prefix}: Starting...
        * one JSON object per CLI invocation (ADR-039 / T927).
        */
       complete(summary) {
-        if (!this.enabled) return;
+        if (!this.enabled || isQuiet()) return;
         if (summary) {
           stderr.write(`
 ${this.prefix}: \u2713 ${summary}
@@ -46239,7 +47333,7 @@ ${this.prefix}: \u2713 Complete
        * Report an error.
        */
       error(message) {
-        if (!this.enabled) return;
+        if (!this.enabled || isQuiet()) return;
         stderr.write(`
 ${this.prefix}: \u2717 ${message}
 
@@ -46259,7 +47353,7 @@ __export(migrate_agents_v2_exports, {
   walkAgentsDir: () => walkAgentsDir
 });
 import { createHash as createHash2 } from "node:crypto";
-import { appendFileSync as appendFileSync2, existsSync as existsSync14, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync14 } from "node:fs";
+import { appendFileSync as appendFileSync2, existsSync as existsSync13, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync13 } from "node:fs";
 import { join as join22 } from "node:path";
 import { getProjectRoot as getProjectRoot41, installAgentFromCant } from "@cleocode/core/internal";
 import { openCleoDb as openCleoDb2 } from "@cleocode/core/store/open-cleo-db";
@@ -46282,13 +47376,13 @@ function extractAgentName(source) {
 function appendAuditLog(projectRoot, entry) {
   const auditPath = join22(projectRoot, AUDIT_LOG_RELATIVE);
   const auditDir = join22(auditPath, "..");
-  if (!existsSync14(auditDir)) {
+  if (!existsSync13(auditDir)) {
     mkdirSync3(auditDir, { recursive: true });
   }
   appendFileSync2(auditPath, JSON.stringify(entry) + "\n", "utf8");
 }
 function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
-  if (!existsSync14(scanDir)) return;
+  if (!existsSync13(scanDir)) return;
   let files;
   try {
     files = readdirSync2(scanDir).filter((f) => f.endsWith(".cant"));
@@ -46304,7 +47398,7 @@ function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
     let sourceBytes;
     let sourceText;
     try {
-      sourceBytes = readFileSync14(cantPath);
+      sourceBytes = readFileSync13(cantPath);
       sourceText = sourceBytes.toString("utf8");
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
@@ -46407,10 +47501,10 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
 }
 function readMigrationConflicts(projectRoot) {
   const auditPath = join22(projectRoot, AUDIT_LOG_RELATIVE);
-  if (!existsSync14(auditPath)) return [];
+  if (!existsSync13(auditPath)) return [];
   let raw;
   try {
-    raw = readFileSync14(auditPath, "utf8");
+    raw = readFileSync13(auditPath, "utf8");
   } catch {
     return [];
   }
@@ -47439,8 +48533,8 @@ var init_event = __esm({
           }
           for (const file of filesToTail) {
             const agentId = file.replace(".jsonl", "");
-            const { readFileSync: readFileSync18 } = await import("node:fs");
-            const content = readFileSync18(join24(eventsDir, file), "utf-8");
+            const { readFileSync: readFileSync21 } = await import("node:fs");
+            const content = readFileSync21(join24(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -47535,8 +48629,8 @@ var init_event = __esm({
         const printAgentLog = async (file) => {
           const agentId = file.replace(".jsonl", "");
           try {
-            const { readFileSync: readFileSync18 } = await import("node:fs");
-            const content = readFileSync18(join24(eventsDir, file), "utf-8");
+            const { readFileSync: readFileSync21 } = await import("node:fs");
+            const content = readFileSync21(join24(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -47954,10 +49048,10 @@ var init_federation = __esm({
 // packages/cleo/src/cli/commands/find.ts
 var find_exports = {};
 __export(find_exports, {
-  findCommand: () => findCommand3
+  findCommand: () => findCommand4
 });
 import { createPage } from "@cleocode/core";
-var findCommand3;
+var findCommand4;
 var init_find = __esm({
   "packages/cleo/src/cli/commands/find.ts"() {
     "use strict";
@@ -47965,7 +49059,7 @@ var init_find = __esm({
     init_dist();
     init_cli();
     init_renderers();
-    findCommand3 = defineCommand({
+    findCommand4 = defineCommand({
       meta: { name: "find", description: "Fuzzy search tasks by title/description" },
       args: {
         query: {
@@ -47984,7 +49078,16 @@ var init_find = __esm({
         limit: { type: "string", description: "Max results (default: 20)" },
         offset: { type: "string", description: "Skip first N results" },
         fields: { type: "string", description: "Comma-separated additional fields to include" },
-        verbose: { type: "boolean", description: "Include all task fields", alias: "v" },
+        verbose: {
+          type: "boolean",
+          description: "Return full task records instead of the MVI projection (id + title + status + key metadata). T9922.",
+          alias: "v"
+        },
+        // T9922 — MVI record projection opt-out alias (surfaced for --help).
+        full: {
+          type: "boolean",
+          description: "Alias for --verbose. T9922."
+        },
         /**
          * Filter by task kind axis (T944/T9072).
          * Values: work | research | experiment | bug | spike | release
@@ -47992,6 +49095,20 @@ var init_find = __esm({
         kind: {
           type: "string",
           description: "Filter by kind axis (work|research|experiment|bug|spike|release) \u2014 T944"
+        },
+        /**
+         * Unified urgency surface (T9905).
+         *
+         * Selects tasks where
+         *   priority IN ('critical','high') OR severity IN ('P0','P1')
+         *
+         * Combines the two orthogonal urgency axes (priority + severity) into a
+         * single filter so agents don't have to query each axis separately.
+         */
+        urgent: {
+          type: "boolean",
+          description: "Surface urgent work across both axes: priority IN (critical,high) OR severity IN (P0,P1) (T9905)",
+          alias: "u"
         }
       },
       async run({ args }) {
@@ -48009,6 +49126,7 @@ var init_find = __esm({
         if (args.fields !== void 0) params["fields"] = args.fields;
         if (args.verbose !== void 0) params["verbose"] = args.verbose;
         if (args.kind !== void 0) params["kind"] = args.kind;
+        if (args.urgent !== void 0) params["urgent"] = args.urgent;
         const response = await dispatchRaw("query", "tasks", "find", params);
         if (!response.success) {
           handleRawError(response, { command: "find", operation: "tasks.find" });
@@ -48365,7 +49483,7 @@ function applyJsonFlag(jsonFlag) {
   }
 }
 var statusCommand9, resolveCommand, depsCommand2, rawCommand, discoverCommand, searchCommand2, augmentCommand, contextCommand2, impactCommand2, impactFullCommand, clustersCommand, flowsCommand, diffCommand, routeMapCommand, shapeCheckCommand, searchCodeCommand, wikiCommand, hotPathsCommand, hotNodesCommand, coldSymbolsCommand, orphansCommand, queryCommand, initCommand, syncCommand4, reconcileCommand, livingFullContextCommand, livingTaskFootprintCommand, livingBrainAnchorsCommand, livingWhyCommand, livingConduitScanCommand, livingCommand, graphCommand2;
-var init_graph2 = __esm({
+var init_graph3 = __esm({
   "packages/cleo/src/cli/commands/graph.ts"() {
     "use strict";
     init_dist();
@@ -49424,25 +50542,26 @@ __export(init_exports, {
   getWorkflowTemplatesDir: () => getWorkflowTemplatesDir2,
   initCommand: () => initCommand2
 });
-import { existsSync as existsSync15, readFileSync as readFileSync15 } from "node:fs";
+import { existsSync as existsSync14, readFileSync as readFileSync14 } from "node:fs";
 import { join as join26 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 import {
   CleoError as CleoError4,
-  formatError as formatError4,
   getWorkflowTemplatesDir as getCoreWorkflowTemplatesDir,
   initProject as initProject2,
+  pushWarning as pushWarning5,
   scaffoldWorkflows
 } from "@cleocode/core";
+import { getTemplatesByKind } from "@cleocode/core/templates/registry";
 function getGitignoreTemplate() {
   try {
     const thisFile = fileURLToPath6(import.meta.url);
     const packageRoot = join26(thisFile, "..", "..", "..", "..");
     const localTemplatePath = join26(packageRoot, "templates", "cleo-gitignore");
     const monorepoTemplatePath = join26(packageRoot, "..", "..", "templates", "cleo-gitignore");
-    const templatePath = existsSync15(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
-    if (existsSync15(templatePath)) {
-      return readFileSync15(templatePath, "utf-8");
+    const templatePath = existsSync14(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
+    if (existsSync14(templatePath)) {
+      return readFileSync14(templatePath, "utf-8");
     }
   } catch {
   }
@@ -49451,6 +50570,9 @@ function getGitignoreTemplate() {
 function getWorkflowTemplatesDir2() {
   return getCoreWorkflowTemplatesDir();
 }
+function isWorkflowName(id) {
+  return id === "release-prepare" || id === "release-publish" || id === "release-fanout" || id === "release-rollback";
+}
 var initCommand2;
 var init_init = __esm({
   "packages/cleo/src/cli/commands/init.ts"() {
@@ -49491,7 +50613,11 @@ var init_init = __esm({
         },
         workflows: {
           type: "boolean",
-          description: "Scaffold the release-prepare.yml workflow into .github/workflows/ (T9531).",
+          /**
+           * @deprecated Use `cleo templates install --kind workflow` instead
+           * (T9886 / Saga T9855). Removal target: v2026.7.0. T9888.
+           */
+          description: "[DEPRECATED \u2014 use `cleo templates install --kind workflow`] Scaffold release workflows into .github/workflows/. Will be removed in v2026.7.0.",
           default: false
         },
         "dry-run": {
@@ -49503,11 +50629,23 @@ var init_init = __esm({
       async run({ args }) {
         try {
           if (args.workflows) {
+            pushWarning5({
+              code: "W_INIT_WORKFLOWS_DEPRECATED",
+              message: "[deprecated] cleo init --workflows: use `cleo templates install --kind workflow` instead. This alias will be removed in v2026.7.0.",
+              severity: "warn",
+              deprecated: "cleo init --workflows",
+              replacement: "cleo templates install --kind workflow",
+              removeBy: "v2026.7.0",
+              context: { task: "T9888", saga: "T9855" }
+            });
             const projectRoot = process.cwd();
             const templatesDir = getWorkflowTemplatesDir2();
+            const workflowEntries = getTemplatesByKind("workflow");
+            const templates2 = workflowEntries.map((entry) => entry.id).filter((id) => isWorkflowName(id));
             const result2 = await scaffoldWorkflows({
               projectRoot,
               templatesDir,
+              ...templates2.length > 0 ? { templates: templates2 } : {},
               dryRun: !!args["dry-run"],
               force: !!args.force
             });
@@ -49549,7 +50687,7 @@ var init_init = __esm({
           );
         } catch (err) {
           if (err instanceof CleoError4) {
-            cliError(formatError4(err), err.code, { name: "E_INTERNAL" });
+            cliError(`init failed: ${err.message}`, err.code, { name: "E_INTERNAL" });
             process.exit(err.code);
           }
           throw err;
@@ -50320,6 +51458,20 @@ var init_list3 = __esm({
       "parent-id": {
         type: "string",
         description: "Alias for --parent (legacy parentId compatibility)"
+      },
+      // T9922 — MVI record projection opt-out flags (surfaced for --help).
+      verbose: {
+        type: "boolean",
+        description: "Return full task records instead of the MVI projection (id + title + status + key metadata). T9922."
+      },
+      full: {
+        type: "boolean",
+        description: "Alias for --verbose. T9922."
+      },
+      // T9932 — 1-line-per-record summary render. Global flag; parsed by cli/index.ts.
+      summary: {
+        type: "boolean",
+        description: 'Render each task as a single line "<id> [<status>] <title-truncated-60>". Composes with --output: --output {id|table|count|silent} wins. T9932.'
       }
     };
     listCommand11 = defineCommand({
@@ -50552,7 +51704,7 @@ async function resolveDefaultModel(provider) {
   return profile?.defaultModel ?? IMPLICIT_FALLBACK_MODEL;
 }
 async function runLlmStream(opts) {
-  const stdout = opts.stdout ?? process.stdout;
+  const stdout2 = opts.stdout ?? process.stdout;
   const stderr2 = opts.stderr ?? process.stderr;
   const session = opts._sessionOverride ?? await buildSession(opts.provider, opts.model ?? await resolveDefaultModel(opts.provider));
   const sendOpts = {
@@ -50563,7 +51715,7 @@ async function runLlmStream(opts) {
   const stream = session.stream(messages, sendOpts);
   for await (const delta of stream) {
     if (delta.text) {
-      stdout.write(delta.text);
+      stdout2.write(delta.text);
     }
     if (delta.reasoning && opts.showThink) {
       stderr2.write(delta.reasoning);
@@ -50808,7 +51960,7 @@ async function _headlessPkceFlow(provider, authUrl) {
     `  After approving, paste the full redirect URL (http://localhost?code=\u2026&state=\u2026):
   `
   );
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     let buf = "";
     process.stdin.setEncoding("utf8");
     process.stdin.once("data", (chunk) => {
@@ -50820,7 +51972,7 @@ async function _headlessPkceFlow(provider, authUrl) {
           reject(new Error('Redirect URL is missing the "code" parameter'));
           return;
         }
-        resolve7(code);
+        resolve8(code);
       } catch {
         reject(new Error(`Invalid redirect URL: ${buf}`));
       }
@@ -50828,7 +51980,7 @@ async function _headlessPkceFlow(provider, authUrl) {
   });
 }
 async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const server = createServer2((req, res) => {
       const url = new URL(req.url ?? "/", `http://localhost:${port}`);
       const code = url.searchParams.get("code");
@@ -50838,7 +51990,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       if (error) {
         res.end(`<h1>Authorization failed</h1><p>${error}</p><p>You may close this tab.</p>`);
         server.close();
-        resolve7({
+        resolve8({
           error: {
             code: "E_PKCE_AUTH_DENIED",
             codeName: "E_PKCE_AUTH_DENIED",
@@ -50850,7 +52002,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       if (!code || state !== expectedState) {
         res.end("<h1>Invalid callback</h1><p>You may close this tab.</p>");
         server.close();
-        resolve7({
+        resolve8({
           error: {
             code: "E_PKCE_INVALID_CALLBACK",
             codeName: "E_PKCE_INVALID_CALLBACK",
@@ -50861,7 +52013,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       }
       res.end("<h1>Authorized</h1><p>You may close this tab and return to your terminal.</p>");
       server.close();
-      resolve7({ code });
+      resolve8({ code });
     });
     server.listen(port, "localhost", () => {
       process.stderr.write("\n");
@@ -50994,7 +52146,7 @@ function _generateState() {
   return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
 function _findFreePort() {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const srv = createServer2();
     srv.listen(0, "localhost", () => {
       const addr = srv.address();
@@ -51004,7 +52156,7 @@ function _findFreePort() {
         return;
       }
       const port = addr.port;
-      srv.close(() => resolve7(port));
+      srv.close(() => resolve8(port));
     });
     srv.on("error", reject);
   });
@@ -51078,7 +52230,7 @@ var llm_exports = {};
 __export(llm_exports, {
   llmCommand: () => llmCommand
 });
-import { pushWarning as pushWarning5 } from "@cleocode/core";
+import { pushWarning as pushWarning6 } from "@cleocode/core";
 async function getListProviders() {
   const { listProviders } = await import(
     /* webpackIgnore: true */
@@ -51209,7 +52361,7 @@ var init_llm3 = __esm({
           apiKey = envValue;
           source = "env";
         } else if (typeof a["api-key"] === "string" && a["api-key"]) {
-          pushWarning5({
+          pushWarning6({
             code: "W_DEPRECATED_FLAG",
             message: API_KEY_FLAG_DEPRECATION,
             deprecated: "--api-key=<value>",
@@ -51626,19 +52778,19 @@ async function readStdin() {
   if (process.stdin.isTTY) {
     return "";
   }
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     let data = "";
     process.stdin.setEncoding("utf-8");
     process.stdin.on("data", (chunk) => {
       data += chunk;
     });
     process.stdin.on("end", () => {
-      resolve7(data.trim());
+      resolve8(data.trim());
     });
     process.stdin.on("error", reject);
   });
 }
-var showCommand7, listCommand13, findCommand4, statsCommand3, appendCommand, archiveCommand2, manifestCommand;
+var showCommand7, listCommand13, findCommand5, statsCommand3, appendCommand, archiveCommand2, manifestCommand;
 var init_manifest3 = __esm({
   "packages/cleo/src/cli/commands/manifest.ts"() {
     "use strict";
@@ -51724,7 +52876,7 @@ var init_manifest3 = __esm({
         );
       }
     });
-    findCommand4 = defineCommand({
+    findCommand5 = defineCommand({
       meta: {
         name: "find",
         description: "Full-text search manifest entries"
@@ -51933,7 +53085,7 @@ var init_manifest3 = __esm({
       subCommands: {
         show: showCommand7,
         list: listCommand13,
-        find: findCommand4,
+        find: findCommand5,
         stats: statsCommand3,
         append: appendCommand,
         archive: archiveCommand2
@@ -52013,7 +53165,7 @@ function makeMemorySubcommand(opts) {
     }
   });
 }
-var storeCommand, findCommand5, statsCommand4, observeCommand, timelineCommand, fetchCommand2, decisionFindCommand, decisionStoreCommand, linkCommand, traceCommand, relatedCommand, contextCommand3, graphStatsCommand, graphShowCommand, graphNeighborsCommand, graphAddCommand, graphRemoveCommand, reasonWhyCommand, reasonSimilarCommand, searchHybridCommand, codeLinksCommand, codeAutoLinkCommand, codeMemoriesForCodeCommand, codeForMemoryCommand, consolidateCommand, dreamCommand, reflectCommand, dedupScanCommand, importCommand4, doctorCommand3, llmStatusCommand, verifyCommand, pendingVerifyCommand, tierStatsCommand, tierPromoteCommand, tierDemoteCommand, precompactFlushCommand, backfillRunCommand, backfillApproveCommand, backfillRollbackCommand, backfillCommand2, digestCommand, recentCommand, diaryReadCommand, diaryWriteCommand, diaryCommand, watchCommand2, tierCommand, sweepCommand, memoryCommand;
+var storeCommand, findCommand6, statsCommand4, observeCommand, timelineCommand, fetchCommand2, decisionFindCommand, decisionStoreCommand, linkCommand, traceCommand, relatedCommand, contextCommand3, graphStatsCommand, graphShowCommand, graphNeighborsCommand, graphAddCommand, graphRemoveCommand, reasonWhyCommand, reasonSimilarCommand, searchHybridCommand, codeLinksCommand, codeAutoLinkCommand, codeMemoriesForCodeCommand, codeForMemoryCommand, consolidateCommand, dreamCommand, reflectCommand, dedupScanCommand, importCommand4, doctorCommand3, llmStatusCommand, verifyCommand, pendingVerifyCommand, tierStatsCommand, tierPromoteCommand, tierDemoteCommand, precompactFlushCommand, backfillRunCommand, backfillApproveCommand, backfillRollbackCommand, backfillCommand2, digestCommand, recentCommand, diaryReadCommand, diaryWriteCommand, diaryCommand, watchCommand2, tierCommand, sweepCommand, memoryCommand;
 var init_memory3 = __esm({
   "packages/cleo/src/cli/commands/memory.ts"() {
     "use strict";
@@ -52105,7 +53257,7 @@ var init_memory3 = __esm({
         }
       }
     });
-    findCommand5 = defineCommand({
+    findCommand6 = defineCommand({
       meta: {
         name: "find",
         description: "Search BRAIN memory (all tables, or filter by --type pattern|learning)"
@@ -53718,7 +54870,7 @@ data: ${JSON.stringify({ ts: item.ts })}
       meta: { name: "memory", description: "BRAIN memory operations (patterns, learnings)" },
       subCommands: {
         store: storeCommand,
-        find: findCommand5,
+        find: findCommand6,
         stats: statsCommand4,
         observe: observeCommand,
         timeline: timelineCommand,
@@ -55200,15 +56352,15 @@ var init_nexus3 = __esm({
             return;
           }
           if (!skipPrompt) {
-            const { createInterface: createInterface4 } = await import("node:readline");
-            const rl = createInterface4({ input: process.stdin, output: process.stdout });
-            const confirmed = await new Promise((resolve7) => {
+            const { createInterface: createInterface5 } = await import("node:readline");
+            const rl = createInterface5({ input: process.stdin, output: process.stdout });
+            const confirmed = await new Promise((resolve8) => {
               rl.question(
                 `
 [nexus] Delete ${matchCount} project(s) from the registry? [y/N] `,
                 (answer) => {
                   rl.close();
-                  resolve7(answer.trim().toLowerCase() === "y");
+                  resolve8(answer.trim().toLowerCase() === "y");
                 }
               );
             });
@@ -55358,8 +56510,8 @@ var init_nexus3 = __esm({
             projectFilter
           });
           if (outputFile) {
-            const { writeFileSync: writeFileSync5 } = await import("node:fs");
-            writeFileSync5(outputFile, result.content, "utf-8");
+            const { writeFileSync: writeFileSync7 } = await import("node:fs");
+            writeFileSync7(outputFile, result.content, "utf-8");
             const durationMs = Date.now() - startTime;
             cliOutput(
               { outputFile, nodeCount: result.nodeCount, edgeCount: result.edgeCount },
@@ -56507,7 +57659,9 @@ __export(orchestrate_exports, {
   formatRollupTable: () => formatRollupTable,
   orchestrateCommand: () => orchestrateCommand
 });
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { orchestration } from "@cleocode/core";
+import { BUILD_CONFIG as BUILD_CONFIG2 } from "@cleocode/core/internal";
 function formatRollupTable(rollup) {
   const waves = "waves" in rollup ? rollup.waves : [rollup];
   const lines = [];
@@ -56600,9 +57754,34 @@ var init_orchestrate3 = __esm({
         epic: {
           type: "string",
           description: "Epic ID to scope status to"
+        },
+        "merge-queue": {
+          type: "boolean",
+          description: "Show GitHub merge queue depth instead of epic status (T10445)"
         }
       },
       async run({ args }) {
+        if (args["merge-queue"]) {
+          const repo = BUILD_CONFIG2.repository.fullName;
+          let queueDepth = 0;
+          let estimatedWaitMinutes = 0;
+          let blocked = false;
+          let note = "merge queue not enabled";
+          try {
+            const raw = execFileSync3(
+              "gh",
+              ["api", `repos/${repo}/merge-queue`, "--jq", ".entries | length"],
+              { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 15e3 }
+            );
+            queueDepth = Number(raw.trim()) || 0;
+            estimatedWaitMinutes = queueDepth * 5;
+            blocked = queueDepth > 10;
+            note = queueDepth > 0 ? "active" : "empty";
+          } catch {
+          }
+          cliOutput({ queueDepth, estimatedWaitMinutes, blocked, note }, { command: "orchestrate" });
+          return;
+        }
         await dispatchFromCli(
           "query",
           "orchestrate",
@@ -56772,6 +57951,10 @@ var init_orchestrate3 = __esm({
         scope: {
           type: "string",
           description: "T9807 sparse-checkout scope: directory prefix to check out in the worktree (cone mode). Example: --scope packages/cleo creates a worktree with only that subtree checked out. Reduces disk usage and checkout time for tasks scoped to a single package."
+        },
+        "orchestrator-defer": {
+          type: "boolean",
+          description: "T9214 atomicity waiver: defer worker file-scope declaration to commit time. Tier-1+ orchestrators only \u2014 records auditable atomicity_waiver in the spawn manifest. Bypasses E_ATOMICITY_NO_SCOPE for worker tasks without explicit AC.files."
         }
       },
       async run({ args }) {
@@ -56782,6 +57965,7 @@ var init_orchestrate3 = __esm({
             tier = parsed;
           }
         }
+        const atomicityScope = args["orchestrator-defer"] ? "orchestrator-defer" : void 0;
         await dispatchFromCli(
           "mutate",
           "orchestrate",
@@ -56791,7 +57975,8 @@ var init_orchestrate3 = __esm({
             protocolType: args.protocol,
             tier,
             noWorktree: args["no-worktree"] === true,
-            ...args.scope ? { spawnScope: args.scope } : {}
+            ...args.scope ? { spawnScope: args.scope } : {},
+            ...atomicityScope ? { atomicityScope } : {}
           },
           { command: "orchestrate" }
         );
@@ -57410,7 +58595,7 @@ __export(otel_exports, {
 import {
   CleoError as CleoError5,
   clearOtelData,
-  formatError as formatError5,
+  formatError as formatError4,
   getOtelSessions,
   getOtelSpawns,
   getOtelStatus,
@@ -57431,7 +58616,7 @@ var init_otel = __esm({
           cliOutput(result, { command: "otel" });
         } catch (err) {
           if (err instanceof CleoError5) {
-            cliError(formatError5(err), err.code, { name: "E_INTERNAL" });
+            cliError(formatError4(err), err.code, { name: "E_INTERNAL" });
             process.exit(err.code);
           }
           throw err;
@@ -57446,7 +58631,7 @@ var init_otel = __esm({
           cliOutput(result, { command: "otel" });
         } catch (err) {
           if (err instanceof CleoError5) {
-            cliError(formatError5(err), err.code, { name: "E_INTERNAL" });
+            cliError(formatError4(err), err.code, { name: "E_INTERNAL" });
             process.exit(err.code);
           }
           throw err;
@@ -57474,7 +58659,7 @@ var init_otel = __esm({
           cliOutput(result, { command: "otel" });
         } catch (err) {
           if (err instanceof CleoError5) {
-            cliError(formatError5(err), err.code, { name: "E_INTERNAL" });
+            cliError(formatError4(err), err.code, { name: "E_INTERNAL" });
             process.exit(err.code);
           }
           throw err;
@@ -57502,7 +58687,7 @@ var init_otel = __esm({
           cliOutput(result, { command: "otel" });
         } catch (err) {
           if (err instanceof CleoError5) {
-            cliError(formatError5(err), err.code, { name: "E_INTERNAL" });
+            cliError(formatError4(err), err.code, { name: "E_INTERNAL" });
             process.exit(err.code);
           }
           throw err;
@@ -57530,7 +58715,7 @@ var init_otel = __esm({
           cliOutput(result, { command: "otel" });
         } catch (err) {
           if (err instanceof CleoError5) {
-            cliError(formatError5(err), err.code, { name: "E_INTERNAL" });
+            cliError(formatError4(err), err.code, { name: "E_INTERNAL" });
             process.exit(err.code);
           }
           throw err;
@@ -57545,7 +58730,7 @@ var init_otel = __esm({
           cliOutput(result, { command: "otel" });
         } catch (err) {
           if (err instanceof CleoError5) {
-            cliError(formatError5(err), err.code, { name: "E_INTERNAL" });
+            cliError(formatError4(err), err.code, { name: "E_INTERNAL" });
             process.exit(err.code);
           }
           throw err;
@@ -59654,7 +60839,7 @@ __export(research_exports, {
 function generateResearchId() {
   return `res_${Date.now()}`;
 }
-var addCommand10, showCommand11, listCommand21, pendingCommand2, linkCommand2, updateCommand, statsCommand5, linksCommand, archiveCommand3, manifestCommand2, researchCommand;
+var addCommand10, showCommand11, listCommand21, pendingCommand2, linkCommand2, updateCommand2, statsCommand5, linksCommand, archiveCommand3, manifestCommand2, researchCommand;
 var init_research2 = __esm({
   "packages/cleo/src/cli/commands/research.ts"() {
     "use strict";
@@ -59821,7 +61006,7 @@ var init_research2 = __esm({
         );
       }
     });
-    updateCommand = defineCommand({
+    updateCommand2 = defineCommand({
       meta: { name: "update", description: "Update research findings" },
       args: {
         id: {
@@ -59975,7 +61160,7 @@ var init_research2 = __esm({
         list: listCommand21,
         pending: pendingCommand2,
         link: linkCommand2,
-        update: updateCommand,
+        update: updateCommand2,
         stats: statsCommand5,
         links: linksCommand,
         archive: archiveCommand3,
@@ -60386,7 +61571,7 @@ var revert_exports = {};
 __export(revert_exports, {
   revertCommand: () => revertCommand
 });
-import { readFile as readFile4 } from "node:fs/promises";
+import { readFile as readFile5 } from "node:fs/promises";
 import { join as join27 } from "node:path";
 import { cwd as processCwd2 } from "node:process";
 import { E_RECEIPT_NOT_FOUND } from "@cleocode/core/sentient/chain-walker.js";
@@ -60412,7 +61597,7 @@ async function loadOwnerAttestation(attestationFilePath) {
   let raw;
   if (attestationFilePath) {
     try {
-      raw = await readFile4(attestationFilePath, "utf-8");
+      raw = await readFile5(attestationFilePath, "utf-8");
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       throw new Error(`Failed to read attestation file "${attestationFilePath}": ${message}`);
@@ -60442,7 +61627,7 @@ async function loadOwnerAttestation(attestationFilePath) {
 async function loadOwnerPubkeys(projectRoot) {
   const path6 = join27(projectRoot, OWNER_PUBKEYS_FILE);
   try {
-    const raw = await readFile4(path6, "utf-8");
+    const raw = await readFile5(path6, "utf-8");
     const parsed = JSON.parse(raw);
     if (Array.isArray(parsed)) {
       return new Set(parsed.filter((k) => typeof k === "string"));
@@ -61110,12 +62295,12 @@ __export(self_update_exports, {
   selfUpdateCommand: () => selfUpdateCommand
 });
 import { execFile } from "node:child_process";
-import { readFile as readFile5 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 import { join as join28 } from "node:path";
 import * as readline2 from "node:readline";
 import { promisify } from "node:util";
 import {
-  BUILD_CONFIG as BUILD_CONFIG2,
+  BUILD_CONFIG as BUILD_CONFIG3,
   CleoError as CleoError8,
   checkAllRegisteredProjects as checkAllRegisteredProjects2,
   checkStorageMigration,
@@ -61126,7 +62311,7 @@ import {
 async function getCurrentVersion() {
   const cleoHome = getCleoHome4();
   try {
-    const content = await readFile5(join28(cleoHome, "VERSION"), "utf-8");
+    const content = await readFile6(join28(cleoHome, "VERSION"), "utf-8");
     return (content.split("\n")[0] ?? "unknown").trim();
   } catch {
     return "unknown";
@@ -61134,14 +62319,14 @@ async function getCurrentVersion() {
 }
 async function getNpmInstalledVersion() {
   try {
-    const { stdout } = await execAsync("npm", [
+    const { stdout: stdout2 } = await execAsync("npm", [
       "ls",
       "-g",
       "@cleocode/cleo",
       "--depth=0",
       "--json"
     ]);
-    const data = JSON.parse(stdout);
+    const data = JSON.parse(stdout2);
     return data.dependencies?.["@cleocode/cleo"]?.version ?? null;
   } catch {
     return null;
@@ -61149,19 +62334,19 @@ async function getNpmInstalledVersion() {
 }
 async function getDistTagVersion(tag) {
   try {
-    const { stdout } = await execAsync("npm", ["view", `@cleocode/cleo@${tag}`, "version"]);
-    const v = stdout.trim();
+    const { stdout: stdout2 } = await execAsync("npm", ["view", `@cleocode/cleo@${tag}`, "version"]);
+    const v = stdout2.trim();
     return v || null;
   } catch {
     if (tag === "latest") {
       try {
-        const { stdout } = await execAsync("curl", [
+        const { stdout: stdout2 } = await execAsync("curl", [
           "-sL",
           "--max-time",
           "10",
           `https://api.github.com/repos/${GITHUB_REPO}/releases/latest`
         ]);
-        const data = JSON.parse(stdout);
+        const data = JSON.parse(stdout2);
         return data.tag_name?.replace(/^v/, "") ?? null;
       } catch {
         return null;
@@ -61218,11 +62403,11 @@ async function runPostUpdateDiagnostics(opts) {
         input: process.stdin,
         output: process.stdout
       });
-      shouldMigrate = await new Promise((resolve7) => {
+      shouldMigrate = await new Promise((resolve8) => {
         rl.question("  Do you want to run the upgrade now? [Y/n] ", (answer) => {
           rl.close();
           const clean = answer.trim().toLowerCase();
-          resolve7(clean === "" || clean === "y" || clean === "yes");
+          resolve8(clean === "" || clean === "y" || clean === "yes");
         });
       });
     }
@@ -61362,7 +62547,7 @@ var init_self_update = __esm({
     init_progress();
     init_renderers();
     execAsync = promisify(execFile);
-    GITHUB_REPO = BUILD_CONFIG2.repository.fullName;
+    GITHUB_REPO = BUILD_CONFIG3.repository.fullName;
     selfUpdateCommand = defineCommand({
       meta: {
         name: "self-update",
@@ -61589,10 +62774,13 @@ var init_self_update = __esm({
 // packages/cleo/src/cli/commands/sentient.ts
 var sentient_exports = {};
 __export(sentient_exports, {
+  __setPromptAcceptExecutionForTest: () => __setPromptAcceptExecutionForTest,
+  promptAcceptExecution: () => promptAcceptExecution,
   sentientCommand: () => sentientCommand
 });
 import { join as join29 } from "node:path";
-import { cwd as processCwd3 } from "node:process";
+import { cwd as processCwd3, stdin, stdout } from "node:process";
+import { createInterface as createInterface3 } from "node:readline/promises";
 import {
   getSentientDaemonStatus as getSentientDaemonStatus2,
   monitorWorkers,
@@ -61603,6 +62791,12 @@ import {
   stopSentientDaemon,
   WORKER_BUDGET_MS
 } from "@cleocode/core/sentient/daemon.js";
+import {
+  appendSentientExecuteAudit,
+  executeFixAction,
+  extractFixActionFromNotesJson,
+  parseFixAction
+} from "@cleocode/core/sentient/execute-action.js";
 import { safeRunProposeTick } from "@cleocode/core/sentient/propose-tick.js";
 import { patchSentientState, readSentientState as readSentientState2 } from "@cleocode/core/sentient/state.js";
 import { safeRunTick } from "@cleocode/core/sentient/tick.js";
@@ -61622,7 +62816,14 @@ function emitFailure3(code, message, _jsonMode, operation) {
   cliError(message, code, { name: code }, operation ? { operation } : void 0);
   process.exit(1);
 }
-var projectArgs2, startSub, stopSub, statusSub, resumeSub, tickSub, proposeListSub, proposeAcceptSub, proposeRejectSub, proposeDiffSub, proposeRunSub, proposeEnableSub, proposeDisableSub, proposeSub, baselineCaptureSub, baselineSub, allowlistListSub, allowlistAddSub, allowlistRemoveSub, allowlistSub, monitorSub, reviewStatusListSub, reviewStatusShowSub, reviewStatusAcceptSub, reviewStatusRejectSub, reviewStatusSub, sentientCommand;
+function __setPromptAcceptExecutionForTest(next) {
+  const prev = promptAcceptExecution;
+  promptAcceptExecution = next;
+  return () => {
+    promptAcceptExecution = prev;
+  };
+}
+var projectArgs2, startSub, stopSub, statusSub, resumeSub, tickSub, proposeListSub, promptAcceptExecution, proposeAcceptSub, proposeRejectSub, proposeDiffSub, proposeRunSub, proposeEnableSub, proposeDisableSub, proposeSub, baselineCaptureSub, baselineSub, allowlistListSub, allowlistAddSub, allowlistRemoveSub, allowlistSub, monitorSub, reviewStatusListSub, reviewStatusShowSub, reviewStatusAcceptSub, reviewStatusRejectSub, reviewStatusSub, sentientCommand;
 var init_sentient3 = __esm({
   "packages/cleo/src/cli/commands/sentient.ts"() {
     "use strict";
@@ -61820,19 +63021,42 @@ Logs:  ${logPath}`
         }
       }
     });
+    promptAcceptExecution = async (fixAction) => {
+      const rl = createInterface3({ input: stdin, output: stdout });
+      try {
+        stdout.write(`[sentient] Proposal accepted. fixAction:
+  $ ${fixAction}
+`);
+        const answer = await rl.question("Execute now? [y/N] ");
+        const normalised = answer.trim().toLowerCase();
+        return normalised === "y" || normalised === "yes";
+      } finally {
+        rl.close();
+      }
+    };
     proposeAcceptSub = defineCommand({
       meta: {
         name: "accept",
-        description: "Accept a proposal \u2014 transition proposed \u2192 pending"
+        description: "Accept a proposal \u2014 transition proposed \u2192 pending, optionally execute its fixAction"
       },
       args: {
         ...projectArgs2,
-        id: { type: "positional", description: "Proposal task ID", required: true }
+        id: { type: "positional", description: "Proposal task ID", required: true },
+        execute: {
+          type: "boolean",
+          description: "Execute proposal.fixAction without prompting"
+        },
+        "no-execute": {
+          type: "boolean",
+          description: "Skip fixAction execution even if the proposal carries one"
+        }
       },
       async run({ args }) {
         const projectRoot = resolveProjectRoot6(args.project);
         const jsonMode = args.json === true;
         const id = args.id;
+        const forceExecute = args.execute === true;
+        const skipExecute = args["no-execute"] === true;
         try {
           const { getDb: getDb3 } = await import("@cleocode/core/store/sqlite.js");
           const { tasks } = await import("@cleocode/core/store/tasks-schema");
@@ -61859,10 +63083,54 @@ Logs:  ${logPath}`
               proposalsAccepted: state.tier2Stats.proposalsAccepted + 1
             }
           });
+          const fixAction = extractFixActionFromNotesJson(existing.notesJson ?? null);
+          let shouldExecute = false;
+          if (fixAction && !skipExecute) {
+            if (forceExecute) {
+              shouldExecute = true;
+            } else {
+              shouldExecute = await promptAcceptExecution(fixAction);
+            }
+          }
+          if (!shouldExecute) {
+            emitSuccess2(
+              {
+                id,
+                status: "pending",
+                acceptedAt: now,
+                executed: false,
+                fixAction: fixAction ?? null
+              },
+              jsonMode,
+              `Proposal ${id} accepted \u2192 pending`
+            );
+            return;
+          }
+          const parsed = parseFixAction(fixAction);
+          if (!parsed.ok) {
+            emitFailure3(parsed.code, parsed.reason, jsonMode);
+            return;
+          }
+          const result = await executeFixAction(parsed, { cwd: projectRoot });
+          await appendSentientExecuteAudit(projectRoot, {
+            proposalId: id,
+            fixAction,
+            exitCode: result.exitCode,
+            durationMs: result.durationMs,
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          });
           emitSuccess2(
-            { id, status: "pending", acceptedAt: now },
+            {
+              id,
+              status: "pending",
+              acceptedAt: now,
+              executed: true,
+              exitCode: result.exitCode,
+              stderrSnippet: result.stderrSnippet,
+              fixAction
+            },
             jsonMode,
-            `Proposal ${id} accepted \u2192 pending`
+            `Proposal ${id} accepted \u2192 pending (fixAction exit=${result.exitCode})`
           );
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
@@ -62658,15 +63926,15 @@ async function promptOwnerAuthPassword(sessionName) {
     );
     return null;
   }
-  const { createInterface: createInterface4 } = await import("node:readline");
+  const { createInterface: createInterface5 } = await import("node:readline");
   const { deriveOwnerAuthToken } = await import("@cleocode/core/internal");
-  const rl = createInterface4({
+  const rl = createInterface5({
     input: process.stdin,
     output: process.stderr,
     terminal: true
   });
   process.stderr.write(`[cleo] Enter owner-auth password for session "${sessionName}": `);
-  const password = await new Promise((resolve7) => {
+  const password = await new Promise((resolve8) => {
     if (process.stdin.setRawMode) {
       process.stdin.setRawMode(
         true
@@ -62684,10 +63952,10 @@ async function promptOwnerAuthPassword(sessionName) {
           );
         }
         process.stderr.write("\n");
-        resolve7(pw);
+        resolve8(pw);
       } else if (ch === "") {
         process.stderr.write("\n[cleo] Cancelled.\n");
-        resolve7("");
+        resolve8("");
       } else if (ch === "\x7F" || ch === "\b") {
         pw = pw.slice(0, -1);
       } else {
@@ -62701,7 +63969,7 @@ async function promptOwnerAuthPassword(sessionName) {
   const token = deriveOwnerAuthToken(sessionName, password);
   return token;
 }
-var startCommand7, endCommand, handoffCommand2, statusCommand14, resumeCommand2, findCommand6, listCommand23, gcCommand2, showCommand13, driftCommand, contextDriftCommand, suspendCommand, recordAssumptionCommand, recordDecisionCommand, decisionLogCommand, adoptCommand, lintCommand, sessionCommand;
+var startCommand7, endCommand, handoffCommand2, statusCommand14, resumeCommand2, findCommand7, listCommand23, gcCommand2, showCommand13, driftCommand, contextDriftCommand, suspendCommand, recordAssumptionCommand, recordDecisionCommand, decisionLogCommand, adoptCommand, lintCommand, sessionCommand;
 var init_session4 = __esm({
   "packages/cleo/src/cli/commands/session.ts"() {
     "use strict";
@@ -62931,7 +64199,7 @@ var init_session4 = __esm({
         );
       }
     });
-    findCommand6 = defineCommand({
+    findCommand7 = defineCommand({
       meta: {
         name: "find",
         description: "Find sessions (lightweight discovery \u2014 minimal fields, low context cost)"
@@ -63067,8 +64335,8 @@ var init_session4 = __esm({
         "audit-scope": { type: "string", description: "Audit log scope (global|local)" }
       },
       async run({ args }) {
-        const { detectSessionDrift, getProjectRoot: getProjectRoot53 } = await import("@cleocode/core");
-        const projectRoot = await getProjectRoot53();
+        const { detectSessionDrift, getProjectRoot: getProjectRoot54 } = await import("@cleocode/core");
+        const projectRoot = await getProjectRoot54();
         const scope = args["audit-scope"] === "local" ? "local" : "global";
         const report = await detectSessionDrift({ projectRoot, auditScope: scope });
         cliOutput(report, { command: "session drift", operation: "session.drift" });
@@ -63294,7 +64562,7 @@ var init_session4 = __esm({
         handoff: handoffCommand2,
         status: statusCommand14,
         resume: resumeCommand2,
-        find: findCommand6,
+        find: findCommand7,
         list: listCommand23,
         gc: gcCommand2,
         show: showCommand13,
@@ -63779,9 +65047,27 @@ var init_show2 = __esm({
     showCommand14 = defineCommand({
       meta: {
         name: "show",
-        description: "Show full task details by ID (returns complete task record with metadata, verification, lifecycle)"
+        description: "Show task details by ID. MVI-projected (id + title + status + key metadata) by default; pass --verbose / --full to receive the complete record with description, acceptance, verification, evidence, etc. (T9922)"
+      },
+      args: {
+        ...paramsToCittyArgs(getOperationParams("query", "tasks", "show")),
+        // T9922 — MVI record projection opt-out flags. The global parser in
+        // cli/index.ts reads these too; the declarations here surface them in
+        // `cleo show --help` and document the contract for agents.
+        verbose: {
+          type: "boolean",
+          description: "Return the full task record (description, acceptance, verification, evidence) instead of the MVI projection. T9922."
+        },
+        full: {
+          type: "boolean",
+          description: "Alias for --verbose. T9922."
+        },
+        // T9932 — 1-line summary render. Global flag; parsed by cli/index.ts.
+        summary: {
+          type: "boolean",
+          description: 'Render the task as a single line "<id> [<status>] <title-truncated-60>". Composes with --output: --output {id|table|count|silent} wins. T9932.'
+        }
       },
-      args: paramsToCittyArgs(getOperationParams("query", "tasks", "show")),
       async run({ args }) {
         await dispatchFromCli(
           "query",
@@ -63903,7 +65189,7 @@ function buildSkillsDoctorAdoptAdapters() {
     }
   };
 }
-var listCommand24, searchCommand4, findCommand7, validateCommand8, infoCommand, installCommand3, uninstallCommand2, enableCommand2, disableCommand2, refreshCommand, dispatchCommand, catalogCommand, precedenceCommand, depsCommand4, doctorBridgeCommand, doctorAdoptOrphansCommand, statsCommand6, importHermesCommand, migrateCommand2, pruneTelemetryCommand, spawnProvidersCommand, doctorDiagnoseCommand, doctorCommand4, proposePatchCommand, skillsCommand2;
+var listCommand24, searchCommand4, findCommand8, validateCommand8, infoCommand, installCommand3, uninstallCommand2, enableCommand2, disableCommand2, refreshCommand, dispatchCommand, catalogCommand, precedenceCommand, depsCommand4, doctorBridgeCommand, doctorAdoptOrphansCommand, statsCommand6, importHermesCommand, migrateCommand2, pruneTelemetryCommand, spawnProvidersCommand, doctorDiagnoseCommand, doctorCommand4, proposePatchCommand, skillsCommand2;
 var init_skills2 = __esm({
   "packages/cleo/src/cli/commands/skills.ts"() {
     "use strict";
@@ -63961,7 +65247,7 @@ var init_skills2 = __esm({
         );
       }
     });
-    findCommand7 = defineCommand({
+    findCommand8 = defineCommand({
       meta: {
         name: "find",
         description: "Federated skill search across local, canonical, and federation peers"
@@ -64646,7 +65932,7 @@ var init_skills2 = __esm({
       subCommands: {
         list: listCommand24,
         search: searchCommand4,
-        find: findCommand7,
+        find: findCommand8,
         validate: validateCommand8,
         info: infoCommand,
         install: installCommand3,
@@ -64712,8 +65998,8 @@ var init_snapshot = __esm({
           handleRawError(response, { command: "snapshot", operation: "admin.export" });
           const data = response.data;
           if (data?.outputPath) {
-            const { readFile: readFile7 } = await import("node:fs/promises");
-            const content = await readFile7(data.outputPath, "utf-8");
+            const { readFile: readFile8 } = await import("node:fs/promises");
+            const content = await readFile8(data.outputPath, "utf-8");
             process.stdout.write(content);
             if (!content.endsWith("\n")) process.stdout.write("\n");
           }
@@ -65444,10 +66730,10 @@ var init_sync = __esm({
         }
       },
       async run({ args }) {
-        const { readFileSync: readFileSync18 } = await import("node:fs");
+        const { readFileSync: readFileSync21 } = await import("node:fs");
         let externalTasks;
         try {
-          externalTasks = JSON.parse(readFileSync18(args.file, "utf8"));
+          externalTasks = JSON.parse(readFileSync21(args.file, "utf8"));
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
           cliError(`Failed to read or parse external tasks file: ${message}`, 2, {
@@ -65702,6 +66988,667 @@ var init_telemetry2 = __esm({
   }
 });
 
+// packages/cleo/src/cli/commands/templates/lib.ts
+import { readFileSync as readFileSync15 } from "node:fs";
+import { isAbsolute as isAbsolute3, resolve as resolve6 } from "node:path";
+import { getProjectRoot as getProjectRoot50 } from "@cleocode/core";
+import { resolveSourcePathAbsolute } from "@cleocode/core/templates/registry";
+function resolveProjectRoot7(raw) {
+  if (typeof raw === "string" && raw.length > 0) {
+    return isAbsolute3(raw) ? raw : resolve6(process.cwd(), raw);
+  }
+  return getProjectRoot50();
+}
+function readTemplateSource(entry) {
+  const sourceAbsolute = resolveSourcePathAbsolute(entry);
+  return readFileSync15(sourceAbsolute, "utf8");
+}
+function applySubstitution(entry, source) {
+  if (entry.substitution === "static") {
+    return { rendered: source, substituted: false };
+  }
+  return { rendered: source, substituted: false };
+}
+var init_lib = __esm({
+  "packages/cleo/src/cli/commands/templates/lib.ts"() {
+    "use strict";
+  }
+});
+
+// packages/cleo/src/cli/commands/templates/diff.ts
+import { existsSync as existsSync15, readFileSync as readFileSync16 } from "node:fs";
+import { join as join30 } from "node:path";
+import { getTemplateById } from "@cleocode/core/templates/registry";
+function unifiedDiff(a, b) {
+  const aLines = a.length === 0 ? [] : a.split("\n");
+  const bLines = b.length === 0 ? [] : b.split("\n");
+  const out = [];
+  const max = Math.max(aLines.length, bLines.length);
+  for (let i = 0; i < max; i += 1) {
+    const av = aLines[i];
+    const bv = bLines[i];
+    if (av === bv) {
+      if (av !== void 0) out.push(` ${av}`);
+      continue;
+    }
+    if (av !== void 0) out.push(`-${av}`);
+    if (bv !== void 0) out.push(`+${bv}`);
+  }
+  return out.join("\n");
+}
+var templatesDiffCommand;
+var init_diff = __esm({
+  "packages/cleo/src/cli/commands/templates/diff.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    init_lib();
+    templatesDiffCommand = defineCommand({
+      meta: {
+        name: "diff",
+        description: "Diff a template against its installed copy (exit 0 same, 1 different)"
+      },
+      args: {
+        id: {
+          type: "positional",
+          required: true,
+          description: "Template id (kebab-case)"
+        },
+        project: {
+          type: "string",
+          description: "Project root to diff against (default: detected project root)"
+        },
+        json: {
+          type: "boolean",
+          description: "Output as JSON"
+        }
+      },
+      async run({ args }) {
+        const id = String(args["id"] ?? "").trim();
+        if (id.length === 0) {
+          cliError(`templates diff failed: <id> is required`, 2 /* INVALID_INPUT */, {
+            name: "E_TEMPLATES_DIFF_FAILED"
+          });
+          process.exit(2 /* INVALID_INPUT */);
+          return;
+        }
+        const entry = getTemplateById(id);
+        if (entry === void 0) {
+          cliError(`templates diff failed: id "${id}" not found`, 4 /* NOT_FOUND */, {
+            name: "E_NOT_FOUND",
+            details: { id }
+          });
+          process.exit(4 /* NOT_FOUND */);
+          return;
+        }
+        let projectRoot;
+        let installPath;
+        let rendered;
+        try {
+          projectRoot = resolveProjectRoot7(args["project"]);
+          installPath = join30(projectRoot, entry.installPath);
+          const source = readTemplateSource(entry);
+          rendered = applySubstitution(entry, source).rendered;
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(`templates diff failed: ${message}`, 1 /* GENERAL_ERROR */, {
+            name: "E_TEMPLATES_DIFF_FAILED"
+          });
+          process.exit(1 /* GENERAL_ERROR */);
+          return;
+        }
+        if (!existsSync15(installPath)) {
+          const missingResult = {
+            id,
+            installPath,
+            same: false,
+            missing: true,
+            diff: `--- (missing) ${installPath}
++++ (rendered) ${id}
+${unifiedDiff("", rendered)}`
+          };
+          cliOutput(missingResult, {
+            command: "templates-diff",
+            operation: "templates.diff"
+          });
+          process.exit(1 /* GENERAL_ERROR */);
+          return;
+        }
+        const current = readFileSync16(installPath, "utf8");
+        const same = current === rendered;
+        const result = {
+          id,
+          installPath,
+          same,
+          missing: false,
+          diff: same ? "" : unifiedDiff(current, rendered)
+        };
+        cliOutput(result, {
+          command: "templates-diff",
+          operation: "templates.diff"
+        });
+        if (!same) {
+          process.exit(1 /* GENERAL_ERROR */);
+        }
+      }
+    });
+  }
+});
+
+// packages/cleo/src/cli/commands/templates/install.ts
+import { existsSync as existsSync16, mkdirSync as mkdirSync5, readFileSync as readFileSync17, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname9, join as join31 } from "node:path";
+import { getTemplateById as getTemplateById2 } from "@cleocode/core/templates/registry";
+var templatesInstallCommand;
+var init_install = __esm({
+  "packages/cleo/src/cli/commands/templates/install.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    init_lib();
+    templatesInstallCommand = defineCommand({
+      meta: {
+        name: "install",
+        description: "Install a template into a project root (default: current project), idempotent"
+      },
+      args: {
+        id: {
+          type: "positional",
+          required: true,
+          description: "Template id (kebab-case)"
+        },
+        project: {
+          type: "string",
+          description: "Project root to install into (default: detected project root)"
+        },
+        json: {
+          type: "boolean",
+          description: "Output as JSON"
+        }
+      },
+      async run({ args }) {
+        const id = String(args["id"] ?? "").trim();
+        if (id.length === 0) {
+          cliError(`templates install failed: <id> is required`, 2 /* INVALID_INPUT */, {
+            name: "E_TEMPLATES_INSTALL_FAILED"
+          });
+          process.exit(2 /* INVALID_INPUT */);
+          return;
+        }
+        const entry = getTemplateById2(id);
+        if (entry === void 0) {
+          cliError(`templates install failed: id "${id}" not found`, 4 /* NOT_FOUND */, {
+            name: "E_NOT_FOUND",
+            details: { id }
+          });
+          process.exit(4 /* NOT_FOUND */);
+          return;
+        }
+        let projectRoot;
+        let installPath;
+        let rendered;
+        let substituted;
+        try {
+          projectRoot = resolveProjectRoot7(args["project"]);
+          installPath = join31(projectRoot, entry.installPath);
+          const source = readTemplateSource(entry);
+          const sub = applySubstitution(entry, source);
+          rendered = sub.rendered;
+          substituted = sub.substituted;
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(`templates install failed: ${message}`, 1 /* GENERAL_ERROR */, {
+            name: "E_TEMPLATES_INSTALL_FAILED"
+          });
+          process.exit(1 /* GENERAL_ERROR */);
+          return;
+        }
+        if (existsSync16(installPath)) {
+          const current = readFileSync17(installPath, "utf8");
+          if (current === rendered) {
+            const noopResult = {
+              id,
+              installPath,
+              installed: false,
+              noop: true,
+              substituted
+            };
+            cliOutput(noopResult, {
+              command: "templates-install",
+              operation: "templates.install"
+            });
+            return;
+          }
+        }
+        try {
+          mkdirSync5(dirname9(installPath), { recursive: true });
+          writeFileSync5(installPath, rendered, "utf8");
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(`templates install failed: ${message}`, 1 /* GENERAL_ERROR */, {
+            name: "E_TEMPLATES_INSTALL_FAILED"
+          });
+          process.exit(1 /* GENERAL_ERROR */);
+          return;
+        }
+        const result = {
+          id,
+          installPath,
+          installed: true,
+          noop: false,
+          substituted
+        };
+        cliOutput(result, {
+          command: "templates-install",
+          operation: "templates.install"
+        });
+      }
+    });
+  }
+});
+
+// packages/cleo/src/cli/commands/templates/list.ts
+import { getTemplateManifest, getTemplatesByKind as getTemplatesByKind2 } from "@cleocode/core/templates/registry";
+function parseTemplateKind(raw) {
+  if (raw === void 0 || raw === "") return null;
+  return TEMPLATE_KINDS.includes(raw) ? raw : null;
+}
+var templatesListCommand;
+var init_list4 = __esm({
+  "packages/cleo/src/cli/commands/templates/list.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    templatesListCommand = defineCommand({
+      meta: {
+        name: "list",
+        description: "List every template the registry knows about (optionally filtered by --kind)"
+      },
+      args: {
+        kind: {
+          type: "string",
+          description: `Optional kind filter: ${TEMPLATE_KINDS.join(" | ")}`
+        },
+        json: {
+          type: "boolean",
+          description: "Output as JSON"
+        }
+      },
+      async run({ args }) {
+        const rawKind = args["kind"];
+        const kind = parseTemplateKind(typeof rawKind === "string" ? rawKind : void 0);
+        if (kind === null && rawKind !== void 0 && rawKind !== "") {
+          cliError(
+            `templates list failed: invalid --kind (must be ${TEMPLATE_KINDS.join("|")})`,
+            2 /* INVALID_INPUT */,
+            { name: "E_TEMPLATES_LIST_FAILED" }
+          );
+          process.exit(2 /* INVALID_INPUT */);
+          return;
+        }
+        const entries = kind === null ? getTemplateManifest() : getTemplatesByKind2(kind);
+        const result = { kind, entries };
+        cliOutput(result, {
+          command: "templates-list",
+          operation: "templates.list"
+        });
+      }
+    });
+  }
+});
+
+// packages/cleo/src/cli/commands/templates/show.ts
+import { getTemplateById as getTemplateById3 } from "@cleocode/core/templates/registry";
+var templatesShowCommand;
+var init_show3 = __esm({
+  "packages/cleo/src/cli/commands/templates/show.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    templatesShowCommand = defineCommand({
+      meta: {
+        name: "show",
+        description: "Print a single template manifest entry by id"
+      },
+      args: {
+        id: {
+          type: "positional",
+          required: true,
+          description: "Template id (kebab-case)"
+        },
+        json: {
+          type: "boolean",
+          description: "Output as JSON"
+        }
+      },
+      async run({ args }) {
+        const id = String(args["id"] ?? "").trim();
+        if (id.length === 0) {
+          cliError(`templates show failed: <id> is required`, 2 /* INVALID_INPUT */, {
+            name: "E_TEMPLATES_SHOW_FAILED"
+          });
+          process.exit(2 /* INVALID_INPUT */);
+          return;
+        }
+        const entry = getTemplateById3(id);
+        if (entry === void 0) {
+          cliError(`templates show failed: id "${id}" not found`, 4 /* NOT_FOUND */, {
+            name: "E_NOT_FOUND",
+            details: { id }
+          });
+          process.exit(4 /* NOT_FOUND */);
+          return;
+        }
+        const result = { id, entry };
+        cliOutput(result, {
+          command: "templates-show",
+          operation: "templates.show"
+        });
+      }
+    });
+  }
+});
+
+// packages/cleo/src/cli/commands/templates/upgrade.ts
+import { existsSync as existsSync17, mkdirSync as mkdirSync6, readFileSync as readFileSync18, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname10, join as join32 } from "node:path";
+import { getTemplateById as getTemplateById4 } from "@cleocode/core/templates/registry";
+var templatesUpgradeCommand;
+var init_upgrade2 = __esm({
+  "packages/cleo/src/cli/commands/templates/upgrade.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    init_diff();
+    init_lib();
+    templatesUpgradeCommand = defineCommand({
+      meta: {
+        name: "upgrade",
+        description: "Re-install a template respecting its updateStrategy (overwrite | diff-prompt | immutable | manifest-merge)"
+      },
+      args: {
+        id: {
+          type: "positional",
+          required: true,
+          description: "Template id (kebab-case)"
+        },
+        project: {
+          type: "string",
+          description: "Project root to upgrade against (default: detected project root)"
+        },
+        diff: {
+          type: "boolean",
+          description: "Preview-only \u2014 print the diff without writing"
+        },
+        accept: {
+          type: "boolean",
+          description: "Apply when strategy is diff-prompt (no-op otherwise)"
+        },
+        json: {
+          type: "boolean",
+          description: "Output as JSON"
+        }
+      },
+      async run({ args }) {
+        const id = String(args["id"] ?? "").trim();
+        if (id.length === 0) {
+          cliError(`templates upgrade failed: <id> is required`, 2 /* INVALID_INPUT */, {
+            name: "E_TEMPLATES_UPGRADE_FAILED"
+          });
+          process.exit(2 /* INVALID_INPUT */);
+          return;
+        }
+        const entry = getTemplateById4(id);
+        if (entry === void 0) {
+          cliError(`templates upgrade failed: id "${id}" not found`, 4 /* NOT_FOUND */, {
+            name: "E_NOT_FOUND",
+            details: { id }
+          });
+          process.exit(4 /* NOT_FOUND */);
+          return;
+        }
+        let projectRoot;
+        let installPath;
+        let rendered;
+        try {
+          projectRoot = resolveProjectRoot7(args["project"]);
+          installPath = join32(projectRoot, entry.installPath);
+          const source = readTemplateSource(entry);
+          rendered = applySubstitution(entry, source).rendered;
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(`templates upgrade failed: ${message}`, 1 /* GENERAL_ERROR */, {
+            name: "E_TEMPLATES_UPGRADE_FAILED"
+          });
+          process.exit(1 /* GENERAL_ERROR */);
+          return;
+        }
+        const previewOnly = args["diff"] === true;
+        const accept = args["accept"] === true;
+        const current = existsSync17(installPath) ? readFileSync18(installPath, "utf8") : null;
+        const diffBody = current === null ? "" : current === rendered ? "" : unifiedDiff(current, rendered);
+        let outcome;
+        let reason;
+        let shouldWrite = false;
+        if (entry.updateStrategy === "manifest-merge") {
+          outcome = "not-supported";
+          reason = "manifest-merge upgrade is not yet supported (T9886-followup)";
+        } else if (entry.updateStrategy === "immutable") {
+          outcome = "skipped";
+          reason = current === null ? "immutable: not installed yet \u2014 use `install`" : "immutable: skipped per strategy";
+        } else if (current !== null && current === rendered) {
+          outcome = "noop";
+          reason = "already current";
+        } else if (entry.updateStrategy === "overwrite-on-bump") {
+          if (previewOnly) {
+            outcome = "skipped";
+            reason = "preview-only (--diff)";
+          } else {
+            outcome = "overwritten";
+            reason = current === null ? "fresh install" : "overwrite-on-bump";
+            shouldWrite = true;
+          }
+        } else {
+          if (previewOnly || !accept) {
+            outcome = "skipped";
+            reason = previewOnly ? "preview-only (--diff)" : "diff-prompt: pass --accept to apply";
+          } else {
+            outcome = "overwritten";
+            reason = "diff-prompt: accepted";
+            shouldWrite = true;
+          }
+        }
+        if (shouldWrite) {
+          try {
+            mkdirSync6(dirname10(installPath), { recursive: true });
+            writeFileSync6(installPath, rendered, "utf8");
+          } catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            cliError(`templates upgrade failed: ${message}`, 1 /* GENERAL_ERROR */, {
+              name: "E_TEMPLATES_UPGRADE_FAILED"
+            });
+            process.exit(1 /* GENERAL_ERROR */);
+            return;
+          }
+        }
+        const result = {
+          id,
+          installPath,
+          updateStrategy: entry.updateStrategy,
+          outcome,
+          reason,
+          diff: diffBody
+        };
+        cliOutput(result, {
+          command: "templates-upgrade",
+          operation: "templates.upgrade"
+        });
+      }
+    });
+  }
+});
+
+// packages/cleo/src/cli/commands/templates/validate.ts
+import {
+  getInstalledStatus,
+  getTemplateById as getTemplateById5,
+  getTemplateManifest as getTemplateManifest2,
+  resolveSourcePathAbsolute as resolveSourcePathAbsolute2
+} from "@cleocode/core/templates/registry";
+var templatesValidateCommand;
+var init_validate3 = __esm({
+  "packages/cleo/src/cli/commands/templates/validate.ts"() {
+    "use strict";
+    init_src2();
+    init_define_cli_command();
+    init_renderers();
+    init_lib();
+    templatesValidateCommand = defineCommand({
+      meta: {
+        name: "validate",
+        description: "Validate every registry entry (or one --id) against the live filesystem"
+      },
+      args: {
+        id: {
+          type: "string",
+          description: "Validate a single entry by id (default: walk every entry)"
+        },
+        project: {
+          type: "string",
+          description: "Project root to probe install status against (default: detected)"
+        },
+        json: {
+          type: "boolean",
+          description: "Output as JSON"
+        }
+      },
+      async run({ args }) {
+        let projectRoot;
+        try {
+          projectRoot = resolveProjectRoot7(args["project"]);
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(`templates validate failed: ${message}`, 1 /* GENERAL_ERROR */, {
+            name: "E_TEMPLATES_VALIDATE_FAILED"
+          });
+          process.exit(1 /* GENERAL_ERROR */);
+          return;
+        }
+        const idFilter = typeof args["id"] === "string" && args["id"].length > 0 ? args["id"] : null;
+        let targets;
+        if (idFilter === null) {
+          targets = getTemplateManifest2();
+        } else {
+          const entry = getTemplateById5(idFilter);
+          if (entry === void 0) {
+            cliError(`templates validate failed: id "${idFilter}" not found`, 4 /* NOT_FOUND */, {
+              name: "E_NOT_FOUND",
+              details: { id: idFilter }
+            });
+            process.exit(4 /* NOT_FOUND */);
+            return;
+          }
+          targets = [entry];
+        }
+        const entries = targets.map((entry) => {
+          const issues = [];
+          let sourcePath = null;
+          let sourceExists = false;
+          try {
+            sourcePath = resolveSourcePathAbsolute2(entry);
+            sourceExists = true;
+          } catch (err) {
+            issues.push(`source: ${err instanceof Error ? err.message : String(err)}`);
+          }
+          let installed = false;
+          let installPath = null;
+          try {
+            const status = getInstalledStatus(entry.id, projectRoot);
+            installed = status.installed;
+            installPath = status.path;
+          } catch (err) {
+            issues.push(`install: ${err instanceof Error ? err.message : String(err)}`);
+          }
+          return {
+            id: entry.id,
+            kind: entry.kind,
+            sourceExists,
+            sourcePath,
+            installed,
+            installPath,
+            issues
+          };
+        });
+        const ok = entries.every((e) => e.issues.length === 0);
+        const result = {
+          ok,
+          count: entries.length,
+          entries
+        };
+        cliOutput(result, {
+          command: "templates-validate",
+          operation: "templates.validate"
+        });
+        if (!ok) {
+          process.exit(6 /* VALIDATION_ERROR */);
+        }
+      }
+    });
+  }
+});
+
+// packages/cleo/src/cli/commands/templates/index.ts
+var init_templates = __esm({
+  "packages/cleo/src/cli/commands/templates/index.ts"() {
+    "use strict";
+    init_diff();
+    init_install();
+    init_list4();
+    init_show3();
+    init_upgrade2();
+    init_validate3();
+  }
+});
+
+// packages/cleo/src/cli/commands/templates.ts
+var templates_exports = {};
+__export(templates_exports, {
+  templatesCommand: () => templatesCommand
+});
+var templatesCommand;
+var init_templates2 = __esm({
+  "packages/cleo/src/cli/commands/templates.ts"() {
+    "use strict";
+    init_dist();
+    init_define_cli_command();
+    init_templates();
+    templatesCommand = defineCommand({
+      meta: {
+        name: "templates",
+        description: "TemplateManifest SSoT registry surface (list, show, install, upgrade, diff, validate)"
+      },
+      subCommands: {
+        list: templatesListCommand,
+        show: templatesShowCommand,
+        install: templatesInstallCommand,
+        upgrade: templatesUpgradeCommand,
+        diff: templatesDiffCommand,
+        validate: templatesValidateCommand
+      },
+      async run({ cmd, rawArgs }) {
+        const firstArg = rawArgs?.find((a) => !a.startsWith("-"));
+        if (firstArg && cmd.subCommands && firstArg in cmd.subCommands) return;
+        await showUsage(cmd);
+      }
+    });
+  }
+});
+
 // packages/cleo/src/cli/commands/testing.ts
 var testing_exports = {};
 __export(testing_exports, {
@@ -65833,12 +67780,12 @@ var token_exports = {};
 __export(token_exports, {
   tokenCommand: () => tokenCommand
 });
-import { readFileSync as readFileSync16 } from "node:fs";
-import { getProjectRoot as getProjectRoot50, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
+import { readFileSync as readFileSync19 } from "node:fs";
+import { getProjectRoot as getProjectRoot51, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
 function readPayload(args, textKey, fileKey) {
   const text = args[textKey];
   const file = args[fileKey];
-  if (file) return readFileSync16(file, "utf-8");
+  if (file) return readFileSync19(file, "utf-8");
   return text;
 }
 var filterArgs, summaryCommand3, listCommand26, showCommand16, deleteCommand3, clearCommand2, estimateCommand, tokenCommand;
@@ -65998,7 +67945,7 @@ var init_token = __esm({
           domain: args.domain,
           operation: args.operation
         };
-        const result = args.record ? await recordTokenExchange2(getProjectRoot50(), input2) : await measureTokenExchange(input2);
+        const result = args.record ? await recordTokenExchange2(getProjectRoot51(), input2) : await measureTokenExchange(input2);
         cliOutput(result, {
           command: "token",
           operation: args.record ? "admin.token.record" : "token.estimate"
@@ -66033,8 +67980,8 @@ __export(transcript_exports, {
   transcriptCommand: () => transcriptCommand
 });
 import { homedir as homedir6 } from "node:os";
-import { join as join30 } from "node:path";
-import { getProjectRoot as getProjectRoot51 } from "@cleocode/core";
+import { join as join33 } from "node:path";
+import { getProjectRoot as getProjectRoot52 } from "@cleocode/core";
 import {
   parseDurationMs,
   pruneTranscripts,
@@ -66064,7 +68011,7 @@ var init_transcript = __esm({
       async run({ args }) {
         if (args.pending) {
           try {
-            const projectRoot = getProjectRoot51();
+            const projectRoot = getProjectRoot52();
             const { scanPendingTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
             const pending = await scanPendingTranscripts(projectRoot);
             cliOutput(
@@ -66087,7 +68034,7 @@ var init_transcript = __esm({
           }
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join30(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join33(homedir6(), ".claude", "projects");
         try {
           const result = await scanTranscripts(projectsDir);
           cliOutput(
@@ -66161,7 +68108,7 @@ var init_transcript = __esm({
       async run({ args }) {
         const tier = args.tier ?? "warm";
         const dryRun = args["dry-run"] ?? false;
-        const projectRoot = getProjectRoot51();
+        const projectRoot = getProjectRoot52();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { findSessionTranscriptPath, listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -66273,7 +68220,7 @@ var init_transcript = __esm({
         const dryRun = args["dry-run"] ?? false;
         const olderThanHours = args["older-than-hours"] ? Number.parseInt(args["older-than-hours"], 10) : 24;
         const limit = args.limit ? Number.parseInt(args.limit, 10) : void 0;
-        const projectRoot = getProjectRoot51();
+        const projectRoot = getProjectRoot52();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -66393,7 +68340,7 @@ var init_transcript = __esm({
           process.exit(2);
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join30(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join33(homedir6(), ".claude", "projects");
         try {
           const pruneResult = await pruneTranscripts({
             olderThanMs,
@@ -66450,29 +68397,54 @@ var init_transcript = __esm({
 // packages/cleo/src/cli/commands/update.ts
 var update_exports = {};
 __export(update_exports, {
-  updateCommand: () => updateCommand2
+  updateCommand: () => updateCommand3
 });
 import {
   appendSignedSeverityAttestation as appendSignedSeverityAttestation2,
+  INPUT_CONTRACTS as INPUT_CONTRACTS3,
   isPipelineTransitionForward,
   isValidPipelineStage,
   parseAcceptanceCriteria as parseAcceptanceCriteria2,
-  TASK_PIPELINE_STAGES
+  TASK_PIPELINE_STAGES,
+  validateOperationInput as validateOperationInput3
 } from "@cleocode/core";
-var updateCommand2;
+var updateCommand3;
 var init_update = __esm({
   "packages/cleo/src/cli/commands/update.ts"() {
     "use strict";
     init_src2();
     init_dist();
     init_cli();
+    init_collect_input();
     init_renderers();
-    updateCommand2 = defineCommand({
+    updateCommand3 = defineCommand({
       meta: {
         name: "update",
         description: "Update a task. Safe under concurrent invocation \u2014 retries on SQLITE_BUSY up to 4 attempts (gh#391)."
       },
       args: {
+        /**
+         * Schema-first input — supersedes all flag-based args when present.
+         *
+         * Accepts a JSON object matching `INPUT_CONTRACTS['tasks.update']`.
+         * The `taskId` MUST be present in the JSON payload (positional
+         * `taskId` arg is ignored in this path).
+         *
+         * @task T9917
+         */
+        params: {
+          type: "string",
+          description: 'Inline JSON object matching INPUT_CONTRACTS["tasks.update"] (T9917). Overrides positional + flags.'
+        },
+        /**
+         * Schema-first input from a JSON file. Same semantics as --params.
+         *
+         * @task T9917
+         */
+        "params-file": {
+          type: "string",
+          description: 'Path to JSON file matching INPUT_CONTRACTS["tasks.update"] (T9917).'
+        },
         taskId: {
           type: "positional",
           description: "Task ID to update",
@@ -66489,7 +68461,7 @@ var init_update = __esm({
         },
         priority: {
           type: "string",
-          description: "New priority (critical|high|medium|low)",
+          description: "New priority (critical|high|medium|low). Orthogonal to --severity \u2014 see `cleo find --urgent` for the unified surface (T9905).",
           alias: "p"
         },
         type: {
@@ -66613,7 +68585,7 @@ var init_update = __esm({
          */
         severity: {
           type: "string",
-          description: "Severity level (P0|P1|P2|P3) \u2014 valid for any --role (T9073). Orthogonal to priority. Appends signed attestation."
+          description: "Severity level (P0|P1|P2|P3) \u2014 valid for any --kind (T9073). Orthogonal to --priority \u2014 does NOT auto-map (a P0 with priority=medium stays medium). Use `cleo find --urgent` for the unified surface (T9905). Appends signed attestation."
         },
         /**
          * Operator-supplied justification required to override the
@@ -66671,6 +68643,78 @@ var init_update = __esm({
         }
       },
       async run({ args, cmd }) {
+        const paramsArg = args.params;
+        const paramsFileArg = args["params-file"];
+        if (paramsArg !== void 0 || paramsFileArg !== void 0) {
+          const collectArgs = {};
+          if (paramsArg !== void 0) collectArgs.params = paramsArg;
+          if (paramsFileArg !== void 0) collectArgs.file = paramsFileArg;
+          let raw;
+          try {
+            raw = await collectMutateInput(
+              collectArgs,
+              process.stdin
+            );
+          } catch (err) {
+            cliError(
+              err.message,
+              6 /* VALIDATION_ERROR */,
+              {
+                name: "E_VALIDATION_FAILED",
+                fix: "Verify the JSON syntax of your --params / --params-file input"
+              },
+              { operation: "tasks.update" }
+            );
+            process.exit(6 /* VALIDATION_ERROR */);
+            return;
+          }
+          if (raw !== null && typeof raw === "object" && !Array.isArray(raw) && raw["taskId"] === void 0 && args.taskId !== void 0) {
+            raw["taskId"] = args.taskId;
+          }
+          const contract = INPUT_CONTRACTS3["tasks.update"];
+          if (!contract) {
+            cliError(
+              "tasks.update contract missing from INPUT_CONTRACTS registry",
+              1 /* GENERAL_ERROR */,
+              { name: "E_INTERNAL", fix: "This is a CLI bug \u2014 file an issue" },
+              { operation: "tasks.update" }
+            );
+            process.exit(1 /* GENERAL_ERROR */);
+            return;
+          }
+          const validation = validateOperationInput3(contract, raw);
+          if (!validation.ok) {
+            cliError(
+              "tasks.update failed: validation",
+              6 /* VALIDATION_ERROR */,
+              {
+                name: "E_VALIDATION_FAILED",
+                fix: validation.errors[0]?.fix ?? "Inspect errors[] and correct the input",
+                details: { errors: validation.errors }
+              },
+              { operation: "tasks.update" }
+            );
+            process.exit(6 /* VALIDATION_ERROR */);
+            return;
+          }
+          const validatedPayload = raw;
+          const response = await dispatchRaw("mutate", "tasks", "update", validatedPayload);
+          if (!response.success) {
+            cliError(
+              response.error?.message ?? "Update failed",
+              response.error?.code ?? "E_UPDATE_FAILED",
+              {
+                name: response.error?.code ?? "E_UPDATE_FAILED",
+                fix: response.error?.fix ?? "Check task fields and try again"
+              },
+              { operation: "tasks.update" }
+            );
+            process.exit(1);
+            return;
+          }
+          cliOutput(response.data, { command: "update", operation: "tasks.update" });
+          return;
+        }
         if (!args.taskId) {
           await showUsage(cmd);
           return;
@@ -66828,10 +68872,10 @@ var upgrade_exports = {};
 __export(upgrade_exports, {
   upgradeCommand: () => upgradeCommand
 });
-import { resolve as resolve6 } from "node:path";
+import { resolve as resolve7 } from "node:path";
 import { CleoError as CleoError10, diagnoseUpgrade, runUpgrade as runUpgrade2, upgradeWorkflows as upgradeWorkflows2 } from "@cleocode/core/internal";
 var workflowsSubcommand, upgradeCommand;
-var init_upgrade2 = __esm({
+var init_upgrade3 = __esm({
   "packages/cleo/src/cli/commands/upgrade.ts"() {
     "use strict";
     init_dist();
@@ -66868,7 +68912,7 @@ var init_upgrade2 = __esm({
           const dryRun = args["dry-run"] === true || args.check === true;
           const force = args.force === true && !dryRun;
           const result = await upgradeWorkflows2({
-            projectRoot: resolve6(process.cwd()),
+            projectRoot: resolve7(process.cwd()),
             templatesDir: getWorkflowTemplatesDir2(),
             dryRun,
             force
@@ -67127,17 +69171,17 @@ var web_exports = {};
 __export(web_exports, {
   webCommand: () => webCommand
 });
-import { execFileSync as execFileSync3, spawn as spawn3 } from "node:child_process";
-import { mkdir as mkdir4, open, readFile as readFile6, rm, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join31 } from "node:path";
-import { CleoError as CleoError11, formatError as formatError6, getCleoHome as getCleoHome5 } from "@cleocode/core";
+import { execFileSync as execFileSync4, spawn as spawn3 } from "node:child_process";
+import { mkdir as mkdir4, open, readFile as readFile7, rm, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
+import { join as join34 } from "node:path";
+import { CleoError as CleoError11, formatError as formatError5, getCleoHome as getCleoHome5 } from "@cleocode/core";
 function getWebPaths() {
   const cleoHome = getCleoHome5();
   return {
-    pidFile: join31(cleoHome, "web-server.pid"),
-    configFile: join31(cleoHome, "web-server.json"),
-    logDir: join31(cleoHome, "logs"),
-    logFile: join31(cleoHome, "logs", "web-server.log")
+    pidFile: join34(cleoHome, "web-server.pid"),
+    configFile: join34(cleoHome, "web-server.json"),
+    logDir: join34(cleoHome, "logs"),
+    logFile: join34(cleoHome, "logs", "web-server.log")
   };
 }
 function isProcessRunning(pid) {
@@ -67151,7 +69195,7 @@ function isProcessRunning(pid) {
 async function getStatus() {
   const { pidFile, configFile } = getWebPaths();
   try {
-    const pidStr = (await readFile6(pidFile, "utf-8")).trim();
+    const pidStr = (await readFile7(pidFile, "utf-8")).trim();
     const pid = Number.parseInt(pidStr, 10);
     if (Number.isNaN(pid) || !isProcessRunning(pid)) {
       return { running: false, pid: null, port: null, host: null, url: null };
@@ -67159,7 +69203,7 @@ async function getStatus() {
     let port = DEFAULT_PORT;
     let host = DEFAULT_HOST;
     try {
-      const config = JSON.parse(await readFile6(configFile, "utf-8"));
+      const config = JSON.parse(await readFile7(configFile, "utf-8"));
       port = config.port ?? DEFAULT_PORT;
       host = config.host ?? DEFAULT_HOST;
     } catch {
@@ -67176,7 +69220,7 @@ async function startWebServer(port, host) {
     throw new CleoError11(1 /* GENERAL_ERROR */, `Server already running (PID: ${status.pid})`);
   }
   const projectRoot = process.env["CLEO_ROOT"] ?? process.cwd();
-  const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join31(projectRoot, "packages", "studio", "build");
+  const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join34(projectRoot, "packages", "studio", "build");
   await mkdir4(logDir, { recursive: true });
   await writeFile3(
     configFile,
@@ -67186,12 +69230,12 @@ async function startWebServer(port, host) {
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
     })
   );
-  const webIndexPath = join31(studioDir, "index.js");
+  const webIndexPath = join34(studioDir, "index.js");
   try {
     await stat2(webIndexPath);
   } catch {
     try {
-      execFileSync3("pnpm", ["--filter", "@cleocode/studio", "run", "build"], {
+      execFileSync4("pnpm", ["--filter", "@cleocode/studio", "run", "build"], {
         cwd: projectRoot,
         stdio: "ignore"
       });
@@ -67234,7 +69278,7 @@ Logs: ${logFile}`
       }
     } catch {
     }
-    await new Promise((resolve7) => setTimeout(resolve7, 500));
+    await new Promise((resolve8) => setTimeout(resolve8, 500));
   }
   if (!started) {
     try {
@@ -67283,7 +69327,7 @@ var init_web = __esm({
           await startWebServer(Number.parseInt(args.port, 10), args.host);
         } catch (err) {
           if (err instanceof CleoError11) {
-            console.error(formatError6(err));
+            console.error(formatError5(err));
             process.exit(err.code);
           }
           throw err;
@@ -67311,7 +69355,7 @@ var init_web = __esm({
           }
           for (let i = 0; i < 60; i++) {
             if (!isProcessRunning(status.pid)) break;
-            await new Promise((resolve7) => setTimeout(resolve7, 500));
+            await new Promise((resolve8) => setTimeout(resolve8, 500));
           }
           if (isProcessRunning(status.pid)) {
             try {
@@ -67327,7 +69371,7 @@ var init_web = __esm({
           cliOutput({ stopped: true }, { command: "web", message: "CLEO Web UI stopped" });
         } catch (err) {
           if (err instanceof CleoError11) {
-            console.error(formatError6(err));
+            console.error(formatError5(err));
             process.exit(err.code);
           }
           throw err;
@@ -67363,7 +69407,7 @@ var init_web = __esm({
             }
             for (let i = 0; i < 60; i++) {
               if (!isProcessRunning(status.pid)) break;
-              await new Promise((resolve7) => setTimeout(resolve7, 500));
+              await new Promise((resolve8) => setTimeout(resolve8, 500));
             }
             if (isProcessRunning(status.pid)) {
               try {
@@ -67380,7 +69424,7 @@ var init_web = __esm({
           await startWebServer(Number.parseInt(args.port, 10), args.host);
         } catch (err) {
           if (err instanceof CleoError11) {
-            console.error(formatError6(err));
+            console.error(formatError5(err));
             process.exit(err.code);
           }
           throw err;
@@ -67395,7 +69439,7 @@ var init_web = __esm({
           cliOutput(status, { command: "web" });
         } catch (err) {
           if (err instanceof CleoError11) {
-            console.error(formatError6(err));
+            console.error(formatError5(err));
             process.exit(err.code);
           }
           throw err;
@@ -67428,7 +69472,7 @@ var init_web = __esm({
           cliOutput({ url }, { command: "web", message: `Open browser to: ${url}` });
         } catch (err) {
           if (err instanceof CleoError11) {
-            console.error(formatError6(err));
+            console.error(formatError5(err));
             process.exit(err.code);
           }
           throw err;
@@ -67459,14 +69503,14 @@ __export(worktree_exports, {
   worktreeCommand: () => worktreeCommand
 });
 import readline4 from "node:readline";
-import { getProjectRoot as getProjectRoot52, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot53, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
 async function promptYesNo2(question) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const rl = readline4.createInterface({ input: process.stdin, output: process.stdout });
     rl.question(`${question} [y/N]: `, (answer) => {
       rl.close();
       const trimmed = answer.trim().toLowerCase();
-      resolve7(trimmed === "y" || trimmed === "yes");
+      resolve8(trimmed === "y" || trimmed === "yes");
     });
   });
 }
@@ -67564,7 +69608,7 @@ var init_worktree3 = __esm({
         const staleDays = staleDaysRaw !== void 0 ? Number.parseInt(staleDaysRaw, 10) : void 0;
         const idleDaysRaw = typeof args["idle-days"] === "string" ? args["idle-days"] : void 0;
         const idleDays = idleDaysRaw !== void 0 ? Number.parseInt(idleDaysRaw, 10) : void 0;
-        const projectRoot = getProjectRoot52();
+        const projectRoot = getProjectRoot53();
         const listResult = await listWorktrees2({
           projectRoot,
           ...staleDays !== void 0 && !Number.isNaN(staleDays) ? { staleDays } : {}
@@ -67799,8 +69843,8 @@ var init_worktree3 = __esm({
 init_dist();
 init_field_context();
 init_format_context();
-import { readFileSync as readFileSync17 } from "node:fs";
-import { dirname as dirname9, join as join33 } from "node:path";
+import { readFileSync as readFileSync20 } from "node:fs";
+import { dirname as dirname11, join as join36 } from "node:path";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
 
 // packages/cleo/src/cli/generated/command-manifest.ts
@@ -68193,7 +70237,7 @@ var COMMAND_MANIFEST = [
     exportName: "graphCommand",
     name: "graph",
     description: "Project-scoped code intelligence: symbol graph, impact analysis, clusters, flows",
-    load: async () => (await Promise.resolve().then(() => (init_graph2(), graph_exports))).graphCommand
+    load: async () => (await Promise.resolve().then(() => (init_graph3(), graph_exports))).graphCommand
   },
   {
     exportName: "historyCommand",
@@ -68528,7 +70572,7 @@ var COMMAND_MANIFEST = [
   {
     exportName: "showCommand",
     name: "show",
-    description: "Show full task details by ID (returns complete task record with metadata, verification, lifecycle)",
+    description: "Show task details by ID. MVI-projected (id + title + status + key metadata) by default; pass --verbose / --full to receive the complete record with description, acceptance, verification, evidence, etc. (T9922)",
     load: async () => (await Promise.resolve().then(() => (init_show2(), show_exports))).showCommand
   },
   {
@@ -68597,6 +70641,12 @@ var COMMAND_MANIFEST = [
     description: "Manage anonymous skills-usage telemetry (enable/disable/status)",
     load: async () => (await Promise.resolve().then(() => (init_telemetry2(), telemetry_exports))).telemetryCommand
   },
+  {
+    exportName: "templatesCommand",
+    name: "templates",
+    description: "TemplateManifest SSoT registry surface (list, show, install, upgrade, diff, validate)",
+    load: async () => (await Promise.resolve().then(() => (init_templates2(), templates_exports))).templatesCommand
+  },
   {
     exportName: "testingCommand",
     name: "testing",
@@ -68625,7 +70675,7 @@ var COMMAND_MANIFEST = [
     exportName: "upgradeCommand",
     name: "upgrade",
     description: "Unified project maintenance (storage migration, schema repair, structural fixes, doc refresh)",
-    load: async () => (await Promise.resolve().then(() => (init_upgrade2(), upgrade_exports))).upgradeCommand
+    load: async () => (await Promise.resolve().then(() => (init_upgrade3(), upgrade_exports))).upgradeCommand
   },
   {
     exportName: "verifyCommand",
@@ -68808,14 +70858,14 @@ function lazyCommand(meta, loader2) {
 init_did_you_mean();
 
 // packages/cleo/src/cli/lib/first-run-detection.ts
-import { existsSync as existsSync16 } from "node:fs";
-import { join as join32 } from "node:path";
+import { existsSync as existsSync18 } from "node:fs";
+import { join as join35 } from "node:path";
 async function detectFirstRun() {
   const envKey = process.env["ANTHROPIC_API_KEY"];
   if (typeof envKey === "string" && envKey.length > 0) return false;
   const { getCleoPlatformPaths } = await import("@cleocode/paths");
-  const configPath = join32(getCleoPlatformPaths().config, "config.json");
-  if (existsSync16(configPath)) return false;
+  const configPath = join35(getCleoPlatformPaths().config, "config.json");
+  if (existsSync18(configPath)) return false;
   try {
     const { getCredentialPool } = await import("@cleocode/core/llm/credential-pool.js");
     const pool = getCredentialPool();
@@ -68826,7 +70876,7 @@ async function detectFirstRun() {
   return true;
 }
 function waitForEnterOrTimeout(timeoutMs) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     let resolved = false;
     const finish = () => {
       if (resolved) return;
@@ -68838,7 +70888,7 @@ function waitForEnterOrTimeout(timeoutMs) {
         process.stdin.pause();
       } catch {
       }
-      resolve7();
+      resolve8();
     };
     const onData = (chunk) => {
       const s = typeof chunk === "string" ? chunk : chunk.toString("utf8");
@@ -68880,6 +70930,10 @@ function resolveFormat(opts, defaults) {
   return resolveOutputFormat(input2);
 }
 
+// packages/cleo/src/cli/index.ts
+init_output_context();
+init_projection_context();
+
 // packages/cleo/src/cli/resolve-subcommand.ts
 async function resolveLazyValue(input2) {
   if (typeof input2 === "function") {
@@ -68907,6 +70961,7 @@ async function resolveSubCommandForHelp(cmd, rawArgs) {
 }
 
 // packages/cleo/src/cli/index.ts
+init_summary_context();
 {
   const [major] = process.versions.node.split(".").map(Number);
   if (typeof major !== "number" || major < 24) {
@@ -68929,8 +70984,8 @@ Or via NodeSource: https://github.com/nodesource/distributions
   }
 }
 function getPackageVersion() {
-  const pkgPath = join33(dirname9(fileURLToPath7(import.meta.url)), "../../package.json");
-  const pkg = JSON.parse(readFileSync17(pkgPath, "utf-8"));
+  const pkgPath = join36(dirname11(fileURLToPath7(import.meta.url)), "../../package.json");
+  const pkg = JSON.parse(readFileSync20(pkgPath, "utf-8"));
   return pkg.version;
 }
 var CLI_VERSION = getPackageVersion();
@@ -68965,6 +71020,9 @@ alias("pipeline", "phaseCommand");
 async function startCli() {
   const argv = process.argv.slice(2);
   const rawOpts = {};
+  let verboseFlag = false;
+  let outputModeRaw;
+  let summaryFlag = false;
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
     if (arg === "--json") rawOpts["json"] = true;
@@ -68973,6 +71031,9 @@ async function startCli() {
     else if (arg === "--field" && i + 1 < argv.length) rawOpts["field"] = argv[++i];
     else if (arg === "--fields" && i + 1 < argv.length) rawOpts["fields"] = argv[++i];
     else if (arg === "--mvi" && i + 1 < argv.length) rawOpts["mvi"] = argv[++i];
+    else if (arg === "--verbose" || arg === "--full") verboseFlag = true;
+    else if (arg === "--output" && i + 1 < argv.length) outputModeRaw = argv[++i];
+    else if (arg === "--summary") summaryFlag = true;
   }
   const formatResolution = resolveFormat(rawOpts);
   setFormatContext(formatResolution);
@@ -68981,6 +71042,19 @@ async function startCli() {
     fieldResolution.mvi = "minimal";
   }
   setFieldContext(fieldResolution);
+  setProjectionOptOut(verboseFlag || formatResolution.format === "human");
+  if (outputModeRaw !== void 0) {
+    if (!isOutputMode(outputModeRaw)) {
+      process.stderr.write(
+        `Error: invalid --output mode "${outputModeRaw}"
+Valid modes: envelope, id, table, count, silent
+`
+      );
+      process.exit(2);
+    }
+    setOutputMode(outputModeRaw);
+  }
+  setSummaryMode(summaryFlag);
   const isHelpOrVersion = argv.length === 0 || argv[0] === "--help" || argv[0] === "-h" || argv[0] === "--version" || argv[0] === "-V" || argv[0] === "help";
   if (argv[0] === "--version" || argv[0] === "-V") {
     const { cliOutput: cliOutput2 } = await Promise.resolve().then(() => (init_renderers(), renderers_exports));
@@ -68988,6 +71062,10 @@ async function startCli() {
     return;
   }
   if (!isHelpOrVersion) {
+    if (rawOpts["quiet"] === true) {
+      const { setLoggerQuiet } = await import("@cleocode/core/internal");
+      setLoggerQuiet(true);
+    }
     await runStartupMaintenance();
   }
   if (!isHelpOrVersion) {
@@ -69082,7 +71160,7 @@ async function runStartupMaintenance() {
     detectAndRemoveStrayProjectNexus,
     getGlobalSalt,
     getLogger: getLogger21,
-    getProjectRoot: getProjectRoot53,
+    getProjectRoot: getProjectRoot54,
     isCleanupMarkerSet,
     migrateSignaldockToConduit,
     needsSignaldockToConduitMigration,
@@ -69091,7 +71169,7 @@ async function runStartupMaintenance() {
   } = await import("@cleocode/core/internal");
   let projectRootForCleanup = "";
   try {
-    projectRootForCleanup = getProjectRoot53();
+    projectRootForCleanup = getProjectRoot54();
   } catch {
   }
   if (!isCleanupMarkerSet(CLI_VERSION, projectRootForCleanup)) {
@@ -69111,7 +71189,7 @@ async function runStartupMaintenance() {
   const isInitInvocation = process.argv.slice(2).some((a) => a === "init");
   if (!isInitInvocation) {
     try {
-      const _projectRootForMigration = getProjectRoot53();
+      const _projectRootForMigration = getProjectRoot54();
       if (needsSignaldockToConduitMigration(_projectRootForMigration)) {
         const migrationResult = migrateSignaldockToConduit(_projectRootForMigration);
         if (migrationResult.status === "failed") {