@cleocode/cleo 2026.5.128 → 2026.5.130

package/dist/cli/index.js

@@ -19682,8 +19682,12 @@ Recovery command: cleo docs update {slug} --file <your-file>`;
           const totalCount = docs.length;
           const projected = docs.map((doc) => ({
             id: doc.id,
-            sha256: `${doc.sha256.slice(0, 8)}\u2026`,
-            _sortSha: doc.sha256,
+            // Full content hash — a SHA-256 field in a machine envelope must be the
+            // real digest, never a display-truncated form (T11294: the per-doc
+            // `docs fetch` the Manual-Write-Sweep had to spawn existed solely to
+            // recover the full hash the list previously hid). Human/table rendering
+            // abbreviates for display, not the data layer.
+            sha256: doc.sha256,
             kind: "blob",
             mime: doc.mimeType ?? "\u2014",
             size: doc.sizeBytes,
@@ -19698,8 +19702,8 @@ Recovery command: cleo docs update {slug} --file <your-file>`;
           }));
           projected.sort(
             (a, b) => comparator(
-              { sha256: a._sortSha, slug: a.slug, createdAt: a.createdAt },
-              { sha256: b._sortSha, slug: b.slug, createdAt: b.createdAt }
+              { sha256: a.sha256, slug: a.slug, createdAt: a.createdAt },
+              { sha256: b.sha256, slug: b.slug, createdAt: b.createdAt }
             )
           );
           const truncated = totalCount > projected.length;
@@ -19719,7 +19723,7 @@ Recovery command: cleo docs update {slug} --file <your-file>`;
               limit: Number.isFinite(effectiveLimit) ? effectiveLimit : 0,
               orderBy,
               ...hintParts.length > 0 ? { hint: hintParts.join(" ") } : {},
-              attachments: projected.map(({ _sortSha: _drop, ...row }) => row),
+              attachments: projected,
               attachmentBackend: backend
             },
             "list"
@@ -19730,8 +19734,8 @@ Recovery command: cleo docs update {slug} --file <your-file>`;
         const ownerDocs = await model.resolveByOwner(scopedOwner, { ownerType, kind: typeFilter });
         const projectedOwner = ownerDocs.map((doc) => ({
           id: doc.id,
-          sha256: `${doc.sha256.slice(0, 8)}\u2026`,
-          _sortSha: doc.sha256,
+          // Full content hash (see project-scope note above; T11294).
+          sha256: doc.sha256,
           kind: "blob",
           mime: doc.mimeType ?? "\u2014",
           size: doc.sizeBytes,
@@ -19744,8 +19748,8 @@ Recovery command: cleo docs update {slug} --file <your-file>`;
         }));
         projectedOwner.sort(
           (a, b) => comparator(
-            { sha256: a._sortSha, slug: a.slug, createdAt: a.createdAt },
-            { sha256: b._sortSha, slug: b.slug, createdAt: b.createdAt }
+            { sha256: a.sha256, slug: a.slug, createdAt: a.createdAt },
+            { sha256: b.sha256, slug: b.slug, createdAt: b.createdAt }
           )
         );
         const totalCountOwner = projectedOwner.length;
@@ -19766,7 +19770,7 @@ Recovery command: cleo docs update {slug} --file <your-file>`;
             limit: Number.isFinite(effectiveLimit) ? effectiveLimit : 0,
             orderBy,
             ...hintParts.length > 0 ? { hint: hintParts.join(" ") } : {},
-            attachments: slicedOwner.map(({ _sortSha: _drop, ...row }) => row),
+            attachments: slicedOwner,
             attachmentBackend: backend
           },
           "list"
@@ -74108,6 +74112,7 @@ init_format_context();
 import { readFileSync as readFileSync21 } from "node:fs";
 import { dirname as dirname11, join as join37 } from "node:path";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
+import { enforceNodeVersion } from "@cleocode/paths";
 
 // packages/cleo/src/cli/generated/command-manifest.ts
 var COMMAND_MANIFEST = [
@@ -75251,27 +75256,7 @@ async function resolveSubCommandForHelp(cmd, rawArgs) {
 
 // packages/cleo/src/cli/index.ts
 init_summary_context();
-{
-  const [major] = process.versions.node.split(".").map(Number);
-  if (typeof major !== "number" || major < 24) {
-    process.stderr.write(
-      `
-Error: cleo requires Node.js >= 24.0.0
-You are running Node ${process.versions.node}.
-
-Node 24 provides the stable node:sqlite DatabaseSync API that CLEO
-uses for its attachment store (zero native deps). Older Node versions
-fail at runtime with ERR_UNKNOWN_BUILTIN_MODULE.
-
-Upgrade via nvm:   nvm install 24 && nvm use 24
-Or via fnm:        fnm install 24 && fnm use 24
-Or via NodeSource: https://github.com/nodesource/distributions
-
-`
-    );
-    process.exit(1);
-  }
-}
+enforceNodeVersion();
 function getPackageVersion() {
   const pkgPath = join37(dirname11(fileURLToPath7(import.meta.url)), "../../package.json");
   const pkg = JSON.parse(readFileSync21(pkgPath, "utf-8"));