@cleocode/cleo 2026.5.56 → 2026.5.58

package/dist/cli/index.js

@@ -24010,16 +24010,16 @@ async function orchestrateRejectOp(params) {
 async function orchestrateClassify(request, context, projectRoot) {
   try {
     const { getCleoCantWorkflowsDir } = await import("@cleocode/core/internal");
-    const { readFileSync: readFileSync16, readdirSync: readdirSync4, existsSync: existsSync13 } = await import("node:fs");
-    const { join: join23 } = await import("node:path");
+    const { readFileSync: readFileSync16, readdirSync: readdirSync4, existsSync: existsSync15 } = await import("node:fs");
+    const { join: join25 } = await import("node:path");
     const workflowsDir = getCleoCantWorkflowsDir();
     const combined = `${request} ${context ?? ""}`.toLowerCase();
     const matches = [];
-    if (existsSync13(workflowsDir)) {
+    if (existsSync15(workflowsDir)) {
       const files = readdirSync4(workflowsDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync16(join23(workflowsDir, file), "utf-8");
+          const src = readFileSync16(join25(workflowsDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -24034,12 +24034,12 @@ async function orchestrateClassify(request, context, projectRoot) {
         }
       }
     }
-    const localCantDir = join23(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
-    if (existsSync13(localCantDir)) {
+    const localCantDir = join25(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
+    if (existsSync15(localCantDir)) {
       const files = readdirSync4(localCantDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync16(join23(localCantDir, file), "utf-8");
+          const src = readFileSync16(join25(localCantDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -29981,6 +29981,87 @@ var init_adr = __esm({
   }
 });
 
+// packages/cleo/src/cli/commands/agent-outputs.ts
+var agent_outputs_exports = {};
+__export(agent_outputs_exports, {
+  agentOutputsCommand: () => agentOutputsCommand
+});
+import { searchDocs } from "@cleocode/core/internal";
+var findCommand2, agentOutputsCommand;
+var init_agent_outputs = __esm({
+  "packages/cleo/src/cli/commands/agent-outputs.ts"() {
+    "use strict";
+    init_src2();
+    init_dist();
+    init_renderers();
+    findCommand2 = defineCommand({
+      meta: {
+        name: "find",
+        description: "Search agent output documents by query (routed via DocsAccessor.searchDocs)"
+      },
+      args: {
+        query: {
+          type: "positional",
+          description: "Free-text search query to match against agent output documents",
+          required: true
+        },
+        limit: {
+          type: "string",
+          description: "Maximum number of results to return (default: 10)",
+          default: "10"
+        },
+        json: {
+          type: "boolean",
+          description: "Emit raw JSON envelope instead of human-readable table",
+          default: false
+        }
+      },
+      async run({ args }) {
+        try {
+          const limit = parseInt(String(args.limit), 10);
+          const query = String(args.query);
+          const result = await searchDocs(query, { limit: Number.isNaN(limit) ? 10 : limit });
+          if (args.json) {
+            cliOutput(result, {
+              command: "agent-outputs find",
+              operation: "docs.agent-outputs.find"
+            });
+            return;
+          }
+          if (result.hits.length === 0) {
+            console.log(`No agent output documents found matching "${query}".`);
+            return;
+          }
+          console.log(`Found ${result.hits.length} result(s) for "${query}":
+`);
+          for (const hit of result.hits) {
+            const score = typeof hit.score === "number" ? ` (score: ${hit.score.toFixed(3)})` : "";
+            console.log(`  ${hit.name ?? hit.id}${score}`);
+          }
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          cliError(`agent-outputs find failed: ${message}`, 1 /* GENERAL_ERROR */);
+        }
+      }
+    });
+    agentOutputsCommand = defineCommand({
+      meta: {
+        name: "agent-outputs",
+        description: "Agent output document management \u2014 find/search via DocsAccessor (find subcommand)"
+      },
+      subCommands: {
+        find: findCommand2
+      },
+      run({ rawArgs }) {
+        const sub = rawArgs?.find((a) => !a.startsWith("-"));
+        if (!sub) {
+          showUsage(agentOutputsCommand);
+        }
+      }
+    });
+  }
+});
+
 // packages/cleo/src/cli/commands/agent-profile-status.ts
 function computeProfileStatus(profile, validation) {
   if (profile === null) return "none";
@@ -30000,7 +30081,6 @@ __export(agent_exports, {
   agentCommand: () => agentCommand
 });
 import {
-  applyPerfPragmas,
   checkAgentHealth,
   detectCrashedAgents,
   detectStaleAgents,
@@ -30408,12 +30488,12 @@ var init_agent = __esm({
             transportConfig: {},
             isActive: true
           });
-          const { existsSync: existsSync13, mkdirSync: mkdirSync6, writeFileSync: writeFileSync5 } = await import("node:fs");
-          const { join: join23 } = await import("node:path");
-          const cantDir = join23(CLEO_DIR_NAME, AGENTS_SUBDIR);
-          const cantPath = join23(cantDir, `${agentId}.cant`);
+          const { existsSync: existsSync15, mkdirSync: mkdirSync6, writeFileSync: writeFileSync5 } = await import("node:fs");
+          const { join: join25 } = await import("node:path");
+          const cantDir = join25(CLEO_DIR_NAME, AGENTS_SUBDIR);
+          const cantPath = join25(cantDir, `${agentId}.cant`);
           let cantScaffolded = false;
-          if (!existsSync13(cantPath)) {
+          if (!existsSync15(cantPath)) {
             mkdirSync6(cantDir, { recursive: true });
             const role = classification ?? "specialist";
             const cantContent = `---
@@ -30473,7 +30553,7 @@ agent ${agentId}:
               data: {
                 agentId: credential.agentId,
                 displayName: credential.displayName,
-                cantFile: cantScaffolded ? cantPath : existsSync13(cantPath) ? cantPath : null,
+                cantFile: cantScaffolded ? cantPath : existsSync15(cantPath) ? cantPath : null,
                 cantScaffolded
               }
             },
@@ -30592,8 +30672,8 @@ agent ${agentId}:
         try {
           const { AgentRegistryAccessor, getDb: getDb3 } = await import("@cleocode/core/internal");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync13, readFileSync: readFileSync16 } = await import("node:fs");
-          const { join: join23 } = await import("node:path");
+          const { existsSync: existsSync15, readFileSync: readFileSync16 } = await import("node:fs");
+          const { join: join25 } = await import("node:path");
           await getDb3();
           const registry = new AgentRegistryAccessor(process.cwd());
           const credential = await registry.get(args.agentId);
@@ -30613,8 +30693,8 @@ agent ${agentId}:
           }
           let profile = null;
           let cantValidation = null;
-          const cantPath = args.cant ?? join23(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          if (existsSync13(cantPath)) {
+          const cantPath = args.cant ?? join25(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          if (existsSync15(cantPath)) {
             profile = readFileSync16(cantPath, "utf-8");
             try {
               const cantModule = await import("@cleocode/cant");
@@ -31138,8 +31218,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
         try {
           const { AgentRegistryAccessor, getDb: getDb3 } = await import("@cleocode/core/internal");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync13 } = await import("node:fs");
-          const { join: join23 } = await import("node:path");
+          const { existsSync: existsSync15 } = await import("node:fs");
+          const { join: join25 } = await import("node:path");
           const { execFile: execFile2 } = await import("node:child_process");
           const { promisify: promisify2 } = await import("node:util");
           const execFileAsync = promisify2(execFile2);
@@ -31159,8 +31239,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           await registry.update(args.agentId, { isActive: true });
           await registry.markUsed(args.agentId);
-          const cantPath = join23(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          const hasProfile = existsSync13(cantPath);
+          const cantPath = join25(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          const hasProfile = existsSync15(cantPath);
           const runtime = await createRuntime(registry, {
             agentId: args.agentId,
             pollIntervalMs: 5e3,
@@ -32008,11 +32088,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       async run({ args }) {
         let tempDir = null;
         try {
-          const { existsSync: existsSync13, mkdirSync: mkdirSync6, statSync, readdirSync: readdirSync4, copyFileSync } = await import("node:fs");
-          const { join: join23, basename, resolve: resolve5, extname } = await import("node:path");
+          const { existsSync: existsSync15, mkdirSync: mkdirSync6, statSync, readdirSync: readdirSync4, copyFileSync } = await import("node:fs");
+          const { join: join25, basename, resolve: resolve7, extname } = await import("node:path");
           const { tmpdir: tmpdir2 } = await import("node:os");
-          const resolvedPath = resolve5(args.path);
-          if (!existsSync13(resolvedPath)) {
+          const resolvedPath = resolve7(args.path);
+          if (!existsSync15(resolvedPath)) {
             cliOutput(
               {
                 success: false,
@@ -32033,7 +32113,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             cantPath = resolvedPath;
           } else if (stat2.isFile() && ext === ".cantz") {
             const { execFileSync: execFileSync5 } = await import("node:child_process");
-            tempDir = join23(tmpdir2(), `cleo-agent-install-${Date.now()}`);
+            tempDir = join25(tmpdir2(), `cleo-agent-install-${Date.now()}`);
             mkdirSync6(tempDir, { recursive: true });
             try {
               execFileSync5("unzip", ["-o", "-q", resolvedPath, "-d", tempDir], {
@@ -32055,7 +32135,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               return;
             }
             const topLevel = readdirSync4(tempDir).filter(
-              (entry) => statSync(join23(tempDir, entry)).isDirectory()
+              (entry) => statSync(join25(tempDir, entry)).isDirectory()
             );
             if (topLevel.length !== 1) {
               cliOutput(
@@ -32072,8 +32152,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               return;
             }
             const agentName = topLevel[0];
-            const personaPath = join23(tempDir, agentName, "persona.cant");
-            if (!existsSync13(personaPath)) {
+            const personaPath = join25(tempDir, agentName, "persona.cant");
+            if (!existsSync15(personaPath)) {
               cliOutput(
                 {
                   success: false,
@@ -32087,12 +32167,12 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               process.exitCode = 6;
               return;
             }
-            cantPath = join23(tempDir, `${agentName}.cant`);
+            cantPath = join25(tempDir, `${agentName}.cant`);
             copyFileSync(personaPath, cantPath);
           } else if (stat2.isDirectory()) {
             const agentName = basename(resolvedPath);
-            const personaPath = join23(resolvedPath, "persona.cant");
-            if (!existsSync13(personaPath)) {
+            const personaPath = join25(resolvedPath, "persona.cant");
+            if (!existsSync15(personaPath)) {
               cliOutput(
                 {
                   success: false,
@@ -32106,9 +32186,9 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               process.exitCode = 6;
               return;
             }
-            tempDir = join23(tmpdir2(), `cleo-agent-install-${Date.now()}`);
+            tempDir = join25(tmpdir2(), `cleo-agent-install-${Date.now()}`);
             mkdirSync6(tempDir, { recursive: true });
-            cantPath = join23(tempDir, `${agentName}.cant`);
+            cantPath = join25(tempDir, `${agentName}.cant`);
             copyFileSync(personaPath, cantPath);
           } else {
             cliOutput(
@@ -32124,17 +32204,10 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             process.exitCode = 6;
             return;
           }
-          const {
-            ensureGlobalSignaldockDb: ensureGlobalSignaldockDb2,
-            getGlobalSignaldockDbPath: getGlobalSignaldockDbPath2,
-            installAgentFromCant: installAgentFromCant2,
-            attachAgentToProject
-          } = await import("@cleocode/core/internal");
-          const { DatabaseSync: DatabaseSync2 } = await import("node:sqlite");
-          ensureGlobalSignaldockDb2();
-          const dbPath = getGlobalSignaldockDbPath2();
-          const db = new DatabaseSync2(dbPath);
-          applyPerfPragmas(db);
+          const { installAgentFromCant: installAgentFromCant2, attachAgentToProject } = await import("@cleocode/core/internal");
+          const { openCleoDb: openCleoDb2 } = await import("@cleocode/core/store/open-cleo-db");
+          const { db: _sdDb } = await openCleoDb2("signaldock");
+          const db = _sdDb;
           const isGlobal = args.global === true;
           const targetTier = isGlobal ? "global" : "project";
           const projectRoot = process.cwd();
@@ -32234,11 +32307,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync13, statSync } = await import("node:fs");
-          const { resolve: resolve5, basename, dirname: dirname9 } = await import("node:path");
+          const { existsSync: existsSync15, statSync } = await import("node:fs");
+          const { resolve: resolve7, basename, dirname: dirname9 } = await import("node:path");
           const { execFileSync: execFileSync5 } = await import("node:child_process");
-          const resolvedDir = resolve5(args.dir);
-          if (!existsSync13(resolvedDir) || !statSync(resolvedDir).isDirectory()) {
+          const resolvedDir = resolve7(args.dir);
+          if (!existsSync15(resolvedDir) || !statSync(resolvedDir).isDirectory()) {
             cliOutput(
               {
                 success: false,
@@ -32252,9 +32325,9 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             process.exitCode = 4;
             return;
           }
-          const { join: join23 } = await import("node:path");
-          const personaPath = join23(resolvedDir, "persona.cant");
-          if (!existsSync13(personaPath)) {
+          const { join: join25 } = await import("node:path");
+          const personaPath = join25(resolvedDir, "persona.cant");
+          if (!existsSync15(personaPath)) {
             cliOutput(
               {
                 success: false,
@@ -32270,7 +32343,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const agentName = basename(resolvedDir);
           const archiveName = `${agentName}.cantz`;
-          const archivePath = resolve5(archiveName);
+          const archivePath = resolve7(archiveName);
           const parentDir = dirname9(resolvedDir);
           try {
             execFileSync5("zip", ["-r", archivePath, agentName], {
@@ -32301,7 +32374,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               if (entry.isFile()) {
                 fileCount++;
               } else if (entry.isDirectory()) {
-                countFiles(join23(dirPath, entry.name));
+                countFiles(join25(dirPath, entry.name));
               }
             }
           };
@@ -32370,8 +32443,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync13, mkdirSync: mkdirSync6, writeFileSync: writeFileSync5 } = await import("node:fs");
-          const { join: join23 } = await import("node:path");
+          const { existsSync: existsSync15, mkdirSync: mkdirSync6, writeFileSync: writeFileSync5 } = await import("node:fs");
+          const { join: join25 } = await import("node:path");
           const { homedir: homedir7 } = await import("node:os");
           const name = args.name;
           const role = args.role;
@@ -32431,13 +32504,13 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           let targetRoot;
           if (isGlobal) {
             const home = homedir7();
-            const xdgData = process.env["XDG_DATA_HOME"] ?? join23(home, ".local", "share");
-            targetRoot = join23(xdgData, "cleo", "cant", "agents");
+            const xdgData = process.env["XDG_DATA_HOME"] ?? join25(home, ".local", "share");
+            targetRoot = join25(xdgData, "cleo", "cant", "agents");
           } else {
-            targetRoot = join23(process.cwd(), CLEO_DIR_NAME, CANT_AGENTS_SUBDIR);
+            targetRoot = join25(process.cwd(), CLEO_DIR_NAME, CANT_AGENTS_SUBDIR);
           }
-          const agentDir = join23(targetRoot, name);
-          if (existsSync13(agentDir)) {
+          const agentDir = join25(targetRoot, name);
+          if (existsSync15(agentDir)) {
             cliOutput(
               {
                 success: false,
@@ -32461,29 +32534,29 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             domain,
             parent
           });
-          writeFileSync5(join23(agentDir, "persona.cant"), personaContent, "utf-8");
+          writeFileSync5(join25(agentDir, "persona.cant"), personaContent, "utf-8");
           const manifest = generateManifest({ name, role, tier, domain });
           writeFileSync5(
-            join23(agentDir, "manifest.json"),
+            join25(agentDir, "manifest.json"),
             `${JSON.stringify(manifest, null, 2)}
 `,
             "utf-8"
           );
           const createdFiles = [
-            join23(agentDir, "persona.cant"),
-            join23(agentDir, "manifest.json")
+            join25(agentDir, "persona.cant"),
+            join25(agentDir, "manifest.json")
           ];
           if (team) {
             const teamConfigContent = generateTeamConfig(name, role, team);
-            writeFileSync5(join23(agentDir, "team-config.cant"), teamConfigContent, "utf-8");
-            createdFiles.push(join23(agentDir, "team-config.cant"));
+            writeFileSync5(join25(agentDir, "team-config.cant"), teamConfigContent, "utf-8");
+            createdFiles.push(join25(agentDir, "team-config.cant"));
           }
           if (seedBrain) {
-            const expertiseDir = join23(agentDir, "expertise");
+            const expertiseDir = join25(agentDir, "expertise");
             mkdirSync6(expertiseDir, { recursive: true });
             const seedContent = generateMentalModelSeed(name, role, domain);
-            writeFileSync5(join23(expertiseDir, "mental-model-seed.md"), seedContent, "utf-8");
-            createdFiles.push(join23(expertiseDir, "mental-model-seed.md"));
+            writeFileSync5(join25(expertiseDir, "mental-model-seed.md"), seedContent, "utf-8");
+            createdFiles.push(join25(expertiseDir, "mental-model-seed.md"));
             try {
               const { execFile: execFile2 } = await import("node:child_process");
               const { promisify: promisify2 } = await import("node:util");
@@ -32581,10 +32654,10 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync13, readFileSync: readFileSync16, mkdirSync: mkdirSync6 } = await import("node:fs");
-          const { resolve: resolve5, join: join23 } = await import("node:path");
-          const specPath = resolve5(args.spec);
-          if (!existsSync13(specPath)) {
+          const { existsSync: existsSync15, readFileSync: readFileSync16, mkdirSync: mkdirSync6 } = await import("node:fs");
+          const { resolve: resolve7, join: join25 } = await import("node:path");
+          const specPath = resolve7(args.spec);
+          if (!existsSync15(specPath)) {
             if (args.json) {
               const errEnv = {
                 success: false,
@@ -32600,7 +32673,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const specContent = readFileSync16(specPath, "utf-8");
           const projectRoot = process.cwd();
-          const outputDir = args["output-dir"] ? resolve5(args["output-dir"]) : join23(projectRoot, ".cleo", "cant", "agents");
+          const outputDir = args["output-dir"] ? resolve7(args["output-dir"]) : join25(projectRoot, ".cleo", "cant", "agents");
           mkdirSync6(outputDir, { recursive: true });
           if (args["dry-run"]) {
             const preview = {
@@ -32679,19 +32752,10 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const {
-            buildDoctorReport,
-            reconcileDoctor,
-            ensureGlobalSignaldockDb: ensureGlobalSignaldockDb2,
-            getGlobalSignaldockDbPath: getGlobalSignaldockDbPath2
-          } = await import("@cleocode/core/internal");
-          const { createRequire: createRequire2 } = await import("node:module");
-          const { DatabaseSync: DatabaseSync2 } = createRequire2(import.meta.url)(
-            "node:sqlite"
-          );
-          await ensureGlobalSignaldockDb2();
-          const db = new DatabaseSync2(getGlobalSignaldockDbPath2());
-          applyPerfPragmas(db);
+          const { buildDoctorReport, reconcileDoctor } = await import("@cleocode/core/internal");
+          const { openCleoDb: openCleoDb2 } = await import("@cleocode/core/store/open-cleo-db");
+          const { db: _sdDb2 } = await openCleoDb2("signaldock");
+          const db = _sdDb2;
           try {
             const report = await buildDoctorReport(db, {});
             const d002 = report.findings.filter((f) => f.code === "D-002");
@@ -32754,21 +32818,10 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const {
-            buildDoctorReport,
-            reconcileDoctor,
-            ensureGlobalSignaldockDb: ensureGlobalSignaldockDb2,
-            getGlobalSignaldockDbPath: getGlobalSignaldockDbPath2
-          } = await import("@cleocode/core/internal");
-          const { createRequire: createRequire2 } = await import("node:module");
-          const nodeSqlite = createRequire2(import.meta.url)(
-            "node:sqlite"
-          );
-          const { DatabaseSync: DatabaseSync2 } = nodeSqlite;
-          await ensureGlobalSignaldockDb2();
-          const dbPath = getGlobalSignaldockDbPath2();
-          const db = new DatabaseSync2(dbPath);
-          applyPerfPragmas(db);
+          const { buildDoctorReport, reconcileDoctor } = await import("@cleocode/core/internal");
+          const { openCleoDb: openCleoDb2 } = await import("@cleocode/core/store/open-cleo-db");
+          const { db: _sdDb3 } = await openCleoDb2("signaldock");
+          const db = _sdDb3;
           try {
             const report = await buildDoctorReport(db, { projectRoot: process.cwd() });
             const repairFlag = args.repair === true;
@@ -33038,8 +33091,24 @@ var audit_exports = {};
 __export(audit_exports, {
   auditCommand: () => auditCommand
 });
+import { spawnSync } from "node:child_process";
+import { existsSync as existsSync6 } from "node:fs";
+import { join as join7, resolve as resolve3 } from "node:path";
 import { getProjectRoot as getProjectRoot19, reconstructLineage } from "@cleocode/core/internal";
-var reconstructCommand, auditCommand;
+function resolveVerifierScript(taskId, projectRoot) {
+  const id = taskId.toLowerCase();
+  const candidates = [
+    join7(projectRoot, "scripts", `verify-${taskId}-fu.mjs`),
+    join7(projectRoot, "scripts", `verify-${taskId}.mjs`),
+    join7(projectRoot, "scripts", `verify-${id}-fu.mjs`),
+    join7(projectRoot, "scripts", `verify-${id}.mjs`)
+  ];
+  for (const candidate of candidates) {
+    if (existsSync6(candidate)) return candidate;
+  }
+  return null;
+}
+var reconstructCommand, verifierCommand, auditCommand;
 var init_audit2 = __esm({
   "packages/cleo/src/cli/commands/audit.ts"() {
     "use strict";
@@ -33095,13 +33164,87 @@ var init_audit2 = __esm({
         });
       }
     });
+    verifierCommand = defineCommand({
+      meta: {
+        name: "verifier",
+        description: "Independent acceptance verifier re-run (ADR-070 auditor-loop). Resolves scripts/verify-<taskId>-fu.mjs and runs it independently. Does NOT trust prior Implementer claims. Exits non-zero if verifier fails."
+      },
+      args: {
+        taskId: {
+          type: "positional",
+          description: "Task ID whose acceptance verifier script to run independently (e.g. T9188)",
+          required: true
+        },
+        script: {
+          type: "string",
+          description: "Explicit path to the verifier script (overrides auto-resolution)"
+        }
+      },
+      async run({ args }) {
+        const taskId = String(args.taskId);
+        let projectRoot;
+        try {
+          projectRoot = getProjectRoot19(process.cwd()) ?? resolve3(process.cwd());
+        } catch {
+          projectRoot = resolve3(process.cwd());
+        }
+        let verifierPath;
+        if (args.script) {
+          const explicit = resolve3(projectRoot, String(args.script));
+          verifierPath = existsSync6(explicit) ? explicit : null;
+          if (!verifierPath) {
+            cliError(`Verifier script not found: ${explicit}`, 1, { name: "E_NOT_FOUND" });
+            process.exitCode = 1;
+            return;
+          }
+        } else {
+          verifierPath = resolveVerifierScript(taskId, projectRoot);
+        }
+        if (!verifierPath) {
+          cliError(
+            `No verifier script found for ${taskId}.
+  Looked for: scripts/verify-${taskId}-fu.mjs, scripts/verify-${taskId}.mjs
+  Create the verifier script per ADR-070 before running the auditor.`,
+            1,
+            { name: "E_NOT_FOUND" }
+          );
+          process.exitCode = 1;
+          return;
+        }
+        process.stdout.write(`[AUDITOR] Independent verifier run for ${taskId}
+`);
+        process.stdout.write(`[AUDITOR] Script: ${verifierPath}
+`);
+        process.stdout.write(`[AUDITOR] Note: Does NOT trust any prior Implementer claims.
+
+`);
+        const result = spawnSync("node", [verifierPath], { encoding: "utf8", stdio: "inherit" });
+        const exitCode = result.status ?? 1;
+        if (exitCode === 0) {
+          process.stdout.write(
+            `
+[AUDITOR] Audit pass. Verifier exit-code 0. Task ${taskId} acceptance verified.
+`
+          );
+        } else {
+          process.stderr.write(
+            `
+[AUDITOR] Audit fail. Verifier exit-code ${exitCode}. Task ${taskId} NOT verified.
+  E_ACCEPTANCE_VERIFIER_FAILED. Implementation must be re-worked. (ADR-070)
+`
+          );
+          process.exitCode = exitCode;
+        }
+      }
+    });
     auditCommand = defineCommand({
       meta: {
         name: "audit",
-        description: "Git-backed audit tooling (lineage reconstruction, integrity checks)"
+        description: "Git-backed audit tooling (lineage reconstruction, integrity checks). Also provides independent acceptance verifier re-runs for the ADR-070 auditor-loop pattern (verifier subcommand \u2014 does not trust Implementer claims, runs script independently)."
       },
       subCommands: {
-        reconstruct: reconstructCommand
+        reconstruct: reconstructCommand,
+        verifier: verifierCommand
       },
       async run({ args: _args }) {
         await showUsage(auditCommand);
@@ -33528,12 +33671,12 @@ async function promptPassphrase() {
       "Cannot prompt for passphrase: stdin is not a TTY. Set the CLEO_BACKUP_PASSPHRASE environment variable for non-interactive use."
     );
   }
-  return new Promise((resolve5) => {
+  return new Promise((resolve7) => {
     process.stdout.write("Passphrase: ");
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
     rl.question("", (answer) => {
       rl.close();
-      resolve5(answer.trim());
+      resolve7(answer.trim());
     });
   });
 }
@@ -34512,7 +34655,7 @@ __export(caamp_exports, {
   caampCommand: () => caampCommand
 });
 import { homedir as homedir2 } from "node:os";
-import { join as join7 } from "node:path";
+import { join as join8 } from "node:path";
 var dedupeCommand, caampCommand;
 var init_caamp = __esm({
   "packages/cleo/src/cli/commands/caamp.ts"() {
@@ -34549,18 +34692,18 @@ var init_caamp = __esm({
         } else {
           const home = homedir2();
           filePaths = [
-            join7(home, ".agents", "AGENTS.md"),
+            join8(home, ".agents", "AGENTS.md"),
             // project-level AGENTS.md in cwd
-            join7(process.cwd(), "AGENTS.md")
+            join8(process.cwd(), "AGENTS.md")
           ];
         }
         if (args["dry-run"]) {
           const { parseCaampBlocks } = await import("@cleocode/caamp");
-          const { existsSync: existsSync13 } = await import("node:fs");
+          const { existsSync: existsSync15 } = await import("node:fs");
           const { readFile: readFile6 } = await import("node:fs/promises");
           const dryResults = [];
           for (const filePath of filePaths) {
-            if (!existsSync13(filePath)) {
+            if (!existsSync15(filePath)) {
               dryResults.push({ filePath, exists: false, blockCount: 0, wouldRemove: 0 });
               continue;
             }
@@ -34694,13 +34837,13 @@ var cant_exports = {};
 __export(cant_exports, {
   cantCommand: () => cantCommand
 });
-import { existsSync as existsSync6, mkdirSync as mkdirSync2, readFileSync as readFileSync7, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname4, isAbsolute, join as join8, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync2, readFileSync as readFileSync7, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname4, isAbsolute, join as join9, resolve as resolve4 } from "node:path";
 function resolveFilePath(file) {
-  return isAbsolute(file) ? file : resolve3(process.cwd(), file);
+  return isAbsolute(file) ? file : resolve4(process.cwd(), file);
 }
 function ensureExists(filePath, operation) {
-  if (existsSync6(filePath)) return true;
+  if (existsSync7(filePath)) return true;
   cliError(`File not found: ${filePath}`, "E_FILE_READ");
   process.exitCode = 3;
   if (process.env["CLEO_DEBUG"]) humanWarn(`(operation: ${operation})`);
@@ -34860,7 +35003,7 @@ var init_cant = __esm({
             const projectRoot = process.cwd();
             let written = 0;
             for (const outputFile of result.outputFiles) {
-              const outputPath = isAbsolute(outputFile.path) ? outputFile.path : join8(projectRoot, outputFile.path);
+              const outputPath = isAbsolute(outputFile.path) ? outputFile.path : join9(projectRoot, outputFile.path);
               mkdirSync2(dirname4(outputPath), { recursive: true });
               writeFileSync2(outputPath, outputFile.content, "utf-8");
               written++;
@@ -35534,9 +35677,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartOutline } = await import("@cleocode/core/internal");
-            const { join: join23 } = await import("node:path");
+            const { join: join25 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join23(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join25(root, args.file);
             const result = smartOutline(absPath, root);
             if (result.errors.length > 0 && result.symbols.length === 0) {
               cliError(result.errors.join(", "), 1, { name: "E_OUTLINE_FAILED" });
@@ -35627,9 +35770,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartUnfold } = await import("@cleocode/core/internal");
-            const { join: join23 } = await import("node:path");
+            const { join: join25 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join23(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join25(root, args.file);
             const result = smartUnfold(absPath, args.symbol, root);
             if (!result.found) {
               const errs = result.errors.length > 0 ? `: ${result.errors.join(", ")}` : "";
@@ -36771,9 +36914,9 @@ var daemon_exports = {};
 __export(daemon_exports, {
   daemonCommand: () => daemonCommand
 });
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { getGCDaemonStatus, spawnGCDaemon, stopGCDaemon } from "@cleocode/core/gc/daemon.js";
 import {
@@ -36838,9 +36981,9 @@ async function showDaemonStatus(cleoDir, projectRoot) {
 }
 function resolveDaemonInstallerScript() {
   const filePath = fileURLToPath3(import.meta.url);
-  const candidate1 = join9(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
-  if (existsSync7(candidate1)) return candidate1;
-  const candidate2 = join9(
+  const candidate1 = join10(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
+  if (existsSync8(candidate1)) return candidate1;
+  const candidate2 = join10(
     filePath,
     "..",
     "..",
@@ -36875,7 +37018,7 @@ var init_daemon = __esm({
         }
       },
       async run({ args }) {
-        const cleoDir = args["cleo-dir"] ?? join9(homedir3(), ".cleo");
+        const cleoDir = args["cleo-dir"] ?? join10(homedir3(), ".cleo");
         const foreground = args.foreground ?? false;
         if (foreground) {
           const projectRoot = process.cwd();
@@ -36912,13 +37055,13 @@ var init_daemon = __esm({
             {
               pid,
               cleoDir,
-              logs: join9(cleoDir, "logs", "gc.log"),
+              logs: join10(cleoDir, "logs", "gc.log"),
               message: `GC daemon started (PID ${pid})`
             },
             {
               command: "daemon",
               operation: "daemon.start",
-              message: `GC daemon started (PID ${pid}) \u2014 Logs: ${join9(cleoDir, "logs", "gc.log")}`
+              message: `GC daemon started (PID ${pid}) \u2014 Logs: ${join10(cleoDir, "logs", "gc.log")}`
             }
           );
         } catch (err) {
@@ -36948,7 +37091,7 @@ var init_daemon = __esm({
         }
       },
       async run({ args }) {
-        const cleoDir = args["cleo-dir"] ?? join9(homedir3(), ".cleo");
+        const cleoDir = args["cleo-dir"] ?? join10(homedir3(), ".cleo");
         try {
           const stopResult = await stopGCDaemon(cleoDir);
           cliOutput(stopResult, {
@@ -36986,7 +37129,7 @@ var init_daemon = __esm({
         }
       },
       async run({ args }) {
-        const cleoDir = args["cleo-dir"] ?? join9(homedir3(), ".cleo");
+        const cleoDir = args["cleo-dir"] ?? join10(homedir3(), ".cleo");
         await showDaemonStatus(cleoDir, process.cwd());
       }
     });
@@ -37084,7 +37227,7 @@ var init_daemon = __esm({
       },
       async run({ args, cmd, rawArgs }) {
         if (isSubCommandDispatch(rawArgs, cmd.subCommands)) return;
-        const cleoDir = args["cleo-dir"] ?? join9(homedir3(), ".cleo");
+        const cleoDir = args["cleo-dir"] ?? join10(homedir3(), ".cleo");
         await showDaemonStatus(cleoDir, process.cwd());
       }
     });
@@ -37547,12 +37690,12 @@ var detect_drift_exports = {};
 __export(detect_drift_exports, {
   detectDriftCommand: () => detectDriftCommand
 });
-import { existsSync as existsSync8, readdirSync, readFileSync as readFileSync9 } from "node:fs";
-import { dirname as dirname5, join as join10 } from "node:path";
+import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync9 } from "node:fs";
+import { dirname as dirname5, join as join11 } from "node:path";
 function findProjectRoot() {
   let currentDir = process.cwd();
   while (currentDir !== "/") {
-    if (existsSync8(join10(currentDir, "package.json"))) {
+    if (existsSync9(join11(currentDir, "package.json"))) {
       return currentDir;
     }
     const parent = dirname5(currentDir);
@@ -37576,8 +37719,8 @@ var init_detect_drift = __esm({
       },
       async run() {
         const projectRoot = findProjectRoot();
-        const isCleoRepo = existsSync8(join10(projectRoot, "packages", "cleo", "src"));
-        const cleoSrcRoot = isCleoRepo ? join10(projectRoot, "packages", "cleo", "src") : join10(projectRoot, "src");
+        const isCleoRepo = existsSync9(join11(projectRoot, "packages", "cleo", "src"));
+        const cleoSrcRoot = isCleoRepo ? join11(projectRoot, "packages", "cleo", "src") : join11(projectRoot, "src");
         const safeRead = (filePath) => {
           try {
             return readFileSync9(filePath, "utf-8");
@@ -37591,8 +37734,8 @@ var init_detect_drift = __esm({
             checks: [],
             recommendations: []
           };
-          const injPath = join10(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
-          if (existsSync8(injPath)) {
+          const injPath = join11(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
+          if (existsSync9(injPath)) {
             const content = safeRead(injPath);
             userResult.checks.push({
               name: "Agent injection",
@@ -37643,10 +37786,10 @@ var init_detect_drift = __esm({
           }
         };
         try {
-          const specPath = join10(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
-          const registryPath = join10(cleoSrcRoot, "dispatch", "registry.ts");
-          const dispatchDomainsDir = join10(cleoSrcRoot, "dispatch", "domains");
-          if (!existsSync8(specPath)) {
+          const specPath = join11(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
+          const registryPath = join11(cleoSrcRoot, "dispatch", "registry.ts");
+          const dispatchDomainsDir = join11(cleoSrcRoot, "dispatch", "domains");
+          if (!existsSync9(specPath)) {
             addCheck("Gateway-to-spec sync", "fail", "CLEO-OPERATION-CONSTITUTION.md missing", [
               {
                 severity: "error",
@@ -37656,7 +37799,7 @@ var init_detect_drift = __esm({
                 recommendation: "Create docs/specs/CLEO-OPERATION-CONSTITUTION.md with canonical operation definitions"
               }
             ]);
-          } else if (!existsSync8(registryPath) || !existsSync8(dispatchDomainsDir)) {
+          } else if (!existsSync9(registryPath) || !existsSync9(dispatchDomainsDir)) {
             addCheck("Gateway-to-spec sync", "fail", "Dispatch registry or domains missing", [
               {
                 severity: "error",
@@ -37714,9 +37857,9 @@ var init_detect_drift = __esm({
           ]);
         }
         try {
-          const cliDir = join10(cleoSrcRoot, "cli", "commands");
-          const coreDir = isCleoRepo ? join10(projectRoot, "packages", "core", "src") : join10(projectRoot, "src", "core");
-          if (!existsSync8(cliDir)) {
+          const cliDir = join11(cleoSrcRoot, "cli", "commands");
+          const coreDir = isCleoRepo ? join11(projectRoot, "packages", "core", "src") : join11(projectRoot, "src", "core");
+          if (!existsSync9(cliDir)) {
             addCheck("CLI-to-core sync", "fail", "CLI commands directory missing", [
               {
                 severity: "error",
@@ -37725,7 +37868,7 @@ var init_detect_drift = __esm({
                 recommendation: "Verify TypeScript source structure is intact"
               }
             ]);
-          } else if (!existsSync8(coreDir)) {
+          } else if (!existsSync9(coreDir)) {
             addCheck("CLI-to-core sync", "fail", "Core directory missing", [
               {
                 severity: "error",
@@ -37742,8 +37885,8 @@ var init_detect_drift = __esm({
           addCheck("CLI-to-core sync", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const domainsDir = join10(cleoSrcRoot, "dispatch", "domains");
-          if (!existsSync8(domainsDir)) {
+          const domainsDir = join11(cleoSrcRoot, "dispatch", "domains");
+          if (!existsSync9(domainsDir)) {
             addCheck("Domain handler coverage", "fail", "Dispatch domains directory missing", [
               {
                 severity: "error",
@@ -37760,8 +37903,8 @@ var init_detect_drift = __esm({
           addCheck("Domain handler coverage", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const matrixPath = join10(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
-          if (!existsSync8(matrixPath)) {
+          const matrixPath = join11(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
+          if (!existsSync9(matrixPath)) {
             addCheck("Capability matrix", "fail", "Capability matrix missing", [
               {
                 severity: "error",
@@ -37777,8 +37920,8 @@ var init_detect_drift = __esm({
           addCheck("Capability matrix", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const schemaPath = join10(projectRoot, "src", "store", "schema.ts");
-          if (!existsSync8(schemaPath)) {
+          const schemaPath = join11(projectRoot, "src", "store", "schema.ts");
+          if (!existsSync9(schemaPath)) {
             addCheck("Schema validation", "fail", "Schema definition missing", [
               {
                 severity: "error",
@@ -37812,10 +37955,10 @@ var init_detect_drift = __esm({
           addCheck("Schema validation", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const visionPath = join10(projectRoot, "docs", "concepts", "CLEO-VISION.md");
-          const specPath = join10(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
+          const visionPath = join11(projectRoot, "docs", "concepts", "CLEO-VISION.md");
+          const specPath = join11(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
           const issues = [];
-          if (!existsSync8(visionPath)) {
+          if (!existsSync9(visionPath)) {
             issues.push({
               severity: "error",
               category: "vision",
@@ -37824,7 +37967,7 @@ var init_detect_drift = __esm({
               recommendation: "Create docs/concepts/CLEO-VISION.md with project vision"
             });
           }
-          if (!existsSync8(specPath)) {
+          if (!existsSync9(specPath)) {
             issues.push({
               severity: "error",
               category: "spec",
@@ -37868,8 +38011,8 @@ var init_detect_drift = __esm({
           addCheck("Canonical identity", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const injectionPath = join10(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
-          if (!existsSync8(injectionPath)) {
+          const injectionPath = join11(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
+          if (!existsSync9(injectionPath)) {
             addCheck("Agent injection", "fail", "Agent injection template missing", [
               {
                 severity: "error",
@@ -37898,8 +38041,8 @@ var init_detect_drift = __esm({
           addCheck("Agent injection", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const exitCodesPath = join10(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
-          if (!existsSync8(exitCodesPath)) {
+          const exitCodesPath = join11(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
+          if (!existsSync9(exitCodesPath)) {
             addCheck("Exit codes", "fail", "Exit codes definition missing", [
               {
                 severity: "error",
@@ -38073,7 +38216,7 @@ __export(docs_exports, {
   docsCommand: () => docsCommand
 });
 import { mkdir, readdir, readFile as readFile2, writeFile } from "node:fs/promises";
-import { dirname as dirname6, isAbsolute as isAbsolute2, join as join11, resolve as resolve4 } from "node:path";
+import { dirname as dirname6, isAbsolute as isAbsolute2, join as join12, resolve as resolve5 } from "node:path";
 import {
   buildDocsGraph,
   CleoError as CleoError3,
@@ -38086,10 +38229,10 @@ import {
   publishDocs,
   rankDocs,
   readJson,
-  searchDocs
+  searchDocs as searchDocs2
 } from "@cleocode/core/internal";
 async function getScriptNames(projectRoot) {
-  const scriptsDir = join11(projectRoot, "scripts");
+  const scriptsDir = join12(projectRoot, "scripts");
   try {
     const files = await readdir(scriptsDir);
     return files.filter((f) => f.endsWith(".sh")).map((f) => f.replace(".sh", "")).sort();
@@ -38098,7 +38241,7 @@ async function getScriptNames(projectRoot) {
   }
 }
 async function getIndexedCommands(projectRoot) {
-  const indexPath = join11(projectRoot, "docs", "commands", "COMMANDS-INDEX.json");
+  const indexPath = join12(projectRoot, "docs", "commands", "COMMANDS-INDEX.json");
   const index = await readJson(indexPath);
   if (!index) return [];
   return index.commands.map((c) => c.name).sort();
@@ -38131,7 +38274,7 @@ async function runGapCheck(_projectRoot, filterId) {
     const reviewFiles = files.filter((f) => f.endsWith(".md"));
     for (const file of reviewFiles) {
       if (filterId && !file.includes(filterId)) continue;
-      const filePath = join11(reviewDir, file);
+      const filePath = join12(reviewDir, file);
       const content = await readFile2(filePath, "utf-8");
       const taskMatch = file.match(/^(T\d+)/);
       const taskId = taskMatch ? taskMatch[1] : "UNKNOWN";
@@ -38386,7 +38529,7 @@ var init_docs3 = __esm({
           });
           let writtenPath;
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve4(projectRoot, args.out);
+            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
             await mkdir(dirname6(outPath), { recursive: true });
             await writeFile(outPath, result.markdown, "utf8");
             writtenPath = outPath;
@@ -38441,7 +38584,7 @@ var init_docs3 = __esm({
       async run({ args }) {
         const projectRoot = getProjectRoot22();
         try {
-          const result = await searchDocs(String(args.query), {
+          const result = await searchDocs2(String(args.query), {
             ownerId: args.owner ?? void 0,
             limit: args.limit ? Number.parseInt(String(args.limit), 10) : 10,
             projectRoot
@@ -38500,7 +38643,7 @@ var init_docs3 = __esm({
             base: args.base ?? void 0
           });
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve4(projectRoot, args.out);
+            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
             await mkdir(dirname6(outPath), { recursive: true });
             await writeFile(outPath, result.merged, "utf8");
             humanInfo(`Wrote merged content to ${outPath}`);
@@ -38571,7 +38714,7 @@ var init_docs3 = __esm({
             output = lines.join("\n");
           }
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve4(projectRoot, args.out);
+            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
             await mkdir(dirname6(outPath), { recursive: true });
             await writeFile(outPath, output, "utf8");
             humanInfo(`Wrote graph to ${outPath}`);
@@ -39095,16 +39238,10 @@ __export(migrate_agents_v2_exports, {
   walkAgentsDir: () => walkAgentsDir
 });
 import { createHash as createHash2 } from "node:crypto";
-import { appendFileSync as appendFileSync2, existsSync as existsSync9, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync10 } from "node:fs";
-import { join as join12 } from "node:path";
-import { DatabaseSync } from "node:sqlite";
-import {
-  applyPerfPragmas as applyPerfPragmas2,
-  ensureGlobalSignaldockDb,
-  getGlobalSignaldockDbPath,
-  getProjectRoot as getProjectRoot23,
-  installAgentFromCant
-} from "@cleocode/core/internal";
+import { appendFileSync as appendFileSync2, existsSync as existsSync10, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync10 } from "node:fs";
+import { join as join13 } from "node:path";
+import { getProjectRoot as getProjectRoot23, installAgentFromCant } from "@cleocode/core/internal";
+import { openCleoDb } from "@cleocode/core/store/open-cleo-db";
 function sha256Hex(bytes) {
   return createHash2("sha256").update(bytes).digest("hex");
 }
@@ -39122,15 +39259,15 @@ function extractAgentName(source) {
   return headerMatch[1] ?? null;
 }
 function appendAuditLog(projectRoot, entry) {
-  const auditPath = join12(projectRoot, AUDIT_LOG_RELATIVE);
-  const auditDir = join12(auditPath, "..");
-  if (!existsSync9(auditDir)) {
+  const auditPath = join13(projectRoot, AUDIT_LOG_RELATIVE);
+  const auditDir = join13(auditPath, "..");
+  if (!existsSync10(auditDir)) {
     mkdirSync3(auditDir, { recursive: true });
   }
   appendFileSync2(auditPath, JSON.stringify(entry) + "\n", "utf8");
 }
 function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
-  if (!existsSync9(scanDir)) return;
+  if (!existsSync10(scanDir)) return;
   let files;
   try {
     files = readdirSync2(scanDir).filter((f) => f.endsWith(".cant"));
@@ -39141,7 +39278,7 @@ function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
     return;
   }
   for (const filename of files) {
-    const cantPath = join12(scanDir, filename);
+    const cantPath = join13(scanDir, filename);
     const relPath = cantPath.replace(`${projectRoot}/`, "");
     let sourceBytes;
     let sourceText;
@@ -39235,13 +39372,12 @@ function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
 }
 async function runMigrateAgentsV2(projectRoot, verbose = true) {
   const summary = { registered: 0, skipped: 0, conflicts: 0, errors: 0 };
-  await ensureGlobalSignaldockDb();
-  const db = new DatabaseSync(getGlobalSignaldockDbPath());
-  applyPerfPragmas2(db);
+  const { db: _sdDb } = await openCleoDb("signaldock");
+  const db = _sdDb;
   try {
-    const canonicalDir = join12(projectRoot, ".cleo", "cant", "agents");
+    const canonicalDir = join13(projectRoot, ".cleo", "cant", "agents");
     walkAgentsDir(db, canonicalDir, projectRoot, summary, verbose);
-    const legacyDir = join12(projectRoot, ".cleo", "agents");
+    const legacyDir = join13(projectRoot, ".cleo", "agents");
     walkAgentsDir(db, legacyDir, projectRoot, summary, verbose);
   } finally {
     db.close();
@@ -39249,8 +39385,8 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
   return summary;
 }
 function readMigrationConflicts(projectRoot) {
-  const auditPath = join12(projectRoot, AUDIT_LOG_RELATIVE);
-  if (!existsSync9(auditPath)) return [];
+  const auditPath = join13(projectRoot, AUDIT_LOG_RELATIVE);
+  if (!existsSync10(auditPath)) return [];
   let raw;
   try {
     raw = readFileSync10(auditPath, "utf8");
@@ -40014,10 +40150,10 @@ var init_export = __esm({
 // packages/cleo/src/cli/commands/find.ts
 var find_exports = {};
 __export(find_exports, {
-  findCommand: () => findCommand2
+  findCommand: () => findCommand3
 });
 import { createPage } from "@cleocode/core";
-var findCommand2;
+var findCommand3;
 var init_find = __esm({
   "packages/cleo/src/cli/commands/find.ts"() {
     "use strict";
@@ -40025,7 +40161,7 @@ var init_find = __esm({
     init_dist();
     init_cli();
     init_renderers();
-    findCommand2 = defineCommand({
+    findCommand3 = defineCommand({
       meta: { name: "find", description: "Fuzzy search tasks by title/description" },
       args: {
         query: {
@@ -40099,7 +40235,7 @@ __export(gc_exports, {
   gcCommand: () => gcCommand
 });
 import { homedir as homedir4, tmpdir } from "node:os";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 import { pruneOrphanTempDirs, pruneOrphanWorktrees } from "@cleocode/core/gc/cleanup.js";
 import { runGC } from "@cleocode/core/gc/runner.js";
 import { readGCState } from "@cleocode/core/gc/state.js";
@@ -40138,7 +40274,7 @@ var init_gc = __esm({
         }
       },
       async run({ args }) {
-        const cleoDir = args["cleo-dir"] ?? join13(homedir4(), ".cleo");
+        const cleoDir = args["cleo-dir"] ?? join14(homedir4(), ".cleo");
         const dryRun = args["dry-run"];
         try {
           const gcResult = await runGC({ cleoDir, dryRun });
@@ -40180,8 +40316,8 @@ var init_gc = __esm({
         }
       },
       async run({ args }) {
-        const cleoDir = args["cleo-dir"] ?? join13(homedir4(), ".cleo");
-        const statePath = join13(cleoDir, "gc-state.json");
+        const cleoDir = args["cleo-dir"] ?? join14(homedir4(), ".cleo");
+        const statePath = join14(cleoDir, "gc-state.json");
         try {
           const state = await readGCState(statePath);
           const diskStr = state.lastDiskUsedPct !== null ? `${state.lastDiskUsedPct.toFixed(1)}%` : "unknown";
@@ -40234,8 +40370,8 @@ var init_gc = __esm({
         }
       },
       async run({ args }) {
-        const xdgData = process.env["XDG_DATA_HOME"] ?? join13(homedir4(), ".local", "share");
-        const worktreesRoot = args["worktrees-root"] ?? join13(xdgData, "cleo", "worktrees");
+        const xdgData = process.env["XDG_DATA_HOME"] ?? join14(homedir4(), ".local", "share");
+        const worktreesRoot = args["worktrees-root"] ?? join14(xdgData, "cleo", "worktrees");
         const projectHash = args["project-hash"];
         const dryRun = args["dry-run"];
         const preserveRaw = args["preserve-tasks"];
@@ -40345,8 +40481,8 @@ __export(generate_changelog_exports, {
   generateChangelogCommand: () => generateChangelogCommand
 });
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname7, join as join14 } from "node:path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "node:fs";
+import { dirname as dirname7, join as join15 } from "node:path";
 import { CleoError as CleoError4, formatError as formatError6, getConfigPath, getProjectRoot as getProjectRoot25 } from "@cleocode/core";
 function getChangelogSource(cwd) {
   const configPath = getConfigPath(cwd);
@@ -40511,8 +40647,8 @@ var init_generate_changelog = __esm({
           const targetPlatform = args.platform;
           const dryRun = args["dry-run"] === true;
           const sourceFile = getChangelogSource();
-          const sourcePath = join14(getProjectRoot25(), sourceFile);
-          if (!existsSync10(sourcePath)) {
+          const sourcePath = join15(getProjectRoot25(), sourceFile);
+          if (!existsSync11(sourcePath)) {
             throw new CleoError4(4 /* NOT_FOUND */, `Changelog source not found: ${sourcePath}`);
           }
           const sourceContent = readFileSync11(sourcePath, "utf-8");
@@ -40524,7 +40660,7 @@ var init_generate_changelog = __esm({
             const outputPath = platformConfig?.path ?? getDefaultOutputPath(targetPlatform);
             const content = generateForPlatform(targetPlatform, sourceContent, repoSlug, limit);
             if (!dryRun) {
-              const fullPath = join14(getProjectRoot25(), outputPath);
+              const fullPath = join15(getProjectRoot25(), outputPath);
               mkdirSync4(dirname7(fullPath), { recursive: true });
               writeFileSync3(fullPath, content, "utf-8");
             }
@@ -40545,7 +40681,7 @@ var init_generate_changelog = __esm({
                 limit
               );
               if (!dryRun) {
-                const fullPath = join14(getProjectRoot25(), platformConfig.path);
+                const fullPath = join15(getProjectRoot25(), platformConfig.path);
                 mkdirSync4(dirname7(fullPath), { recursive: true });
                 writeFileSync3(fullPath, content, "utf-8");
               }
@@ -40842,18 +40978,18 @@ __export(init_exports, {
   getGitignoreTemplate: () => getGitignoreTemplate,
   initCommand: () => initCommand
 });
-import { existsSync as existsSync11, readFileSync as readFileSync12 } from "node:fs";
-import { join as join15 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync12 } from "node:fs";
+import { join as join16 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { CleoError as CleoError5, formatError as formatError7, initProject as initProject2 } from "@cleocode/core";
 function getGitignoreTemplate() {
   try {
     const thisFile = fileURLToPath4(import.meta.url);
-    const packageRoot = join15(thisFile, "..", "..", "..", "..");
-    const localTemplatePath = join15(packageRoot, "templates", "cleo-gitignore");
-    const monorepoTemplatePath = join15(packageRoot, "..", "..", "templates", "cleo-gitignore");
-    const templatePath = existsSync11(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
-    if (existsSync11(templatePath)) {
+    const packageRoot = join16(thisFile, "..", "..", "..", "..");
+    const localTemplatePath = join16(packageRoot, "templates", "cleo-gitignore");
+    const monorepoTemplatePath = join16(packageRoot, "..", "..", "templates", "cleo-gitignore");
+    const templatePath = existsSync12(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
+    if (existsSync12(templatePath)) {
       return readFileSync12(templatePath, "utf-8");
     }
   } catch {
@@ -41801,19 +41937,19 @@ async function readStdin() {
   if (process.stdin.isTTY) {
     return "";
   }
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve7, reject) => {
     let data = "";
     process.stdin.setEncoding("utf-8");
     process.stdin.on("data", (chunk) => {
       data += chunk;
     });
     process.stdin.on("end", () => {
-      resolve5(data.trim());
+      resolve7(data.trim());
     });
     process.stdin.on("error", reject);
   });
 }
-var showCommand7, listCommand10, findCommand3, statsCommand3, appendCommand, archiveCommand2, manifestCommand;
+var showCommand7, listCommand10, findCommand4, statsCommand3, appendCommand, archiveCommand2, manifestCommand;
 var init_manifest = __esm({
   "packages/cleo/src/cli/commands/manifest.ts"() {
     "use strict";
@@ -41899,7 +42035,7 @@ var init_manifest = __esm({
         );
       }
     });
-    findCommand3 = defineCommand({
+    findCommand4 = defineCommand({
       meta: {
         name: "find",
         description: "Full-text search manifest entries"
@@ -42108,7 +42244,7 @@ var init_manifest = __esm({
       subCommands: {
         show: showCommand7,
         list: listCommand10,
-        find: findCommand3,
+        find: findCommand4,
         stats: statsCommand3,
         append: appendCommand,
         archive: archiveCommand2
@@ -42160,9 +42296,9 @@ __export(memory_exports, {
   memoryCommand: () => memoryCommand
 });
 import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync12, mkdirSync as mkdirSync5, readdirSync as readdirSync3, readFileSync as readFileSync13, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync5, readdirSync as readdirSync3, readFileSync as readFileSync13, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 import {
   getBrainDb as getBrainDb2,
   getBrainNativeDb as getBrainNativeDb3,
@@ -42202,7 +42338,7 @@ ${body}`).digest("hex").slice(0, 16);
 }
 function loadImportHashes(stateFile) {
   try {
-    if (!existsSync12(stateFile)) return /* @__PURE__ */ new Set();
+    if (!existsSync13(stateFile)) return /* @__PURE__ */ new Set();
     const raw = readFileSync13(stateFile, "utf-8");
     const parsed = JSON.parse(raw);
     return new Set(parsed.hashes);
@@ -42212,7 +42348,7 @@ function loadImportHashes(stateFile) {
 }
 function saveImportHashes(stateFile, hashes) {
   const dir = stateFile.slice(0, stateFile.lastIndexOf("/"));
-  if (!existsSync12(dir)) mkdirSync5(dir, { recursive: true });
+  if (!existsSync13(dir)) mkdirSync5(dir, { recursive: true });
   writeFileSync4(stateFile, JSON.stringify({ hashes: [...hashes] }, null, 2), "utf-8");
 }
 function makeMemorySubcommand(opts) {
@@ -42232,7 +42368,7 @@ function makeMemorySubcommand(opts) {
     }
   });
 }
-var storeCommand, findCommand4, statsCommand4, observeCommand, timelineCommand, fetchCommand2, decisionFindCommand, decisionStoreCommand, linkCommand, traceCommand, relatedCommand, contextCommand2, graphStatsCommand, graphShowCommand, graphNeighborsCommand, graphAddCommand, graphRemoveCommand, reasonWhyCommand, reasonSimilarCommand, searchHybridCommand, codeLinksCommand, codeAutoLinkCommand, codeMemoriesForCodeCommand, codeForMemoryCommand, consolidateCommand, dreamCommand, reflectCommand, dedupScanCommand, importCommand3, doctorCommand3, llmStatusCommand, verifyCommand, pendingVerifyCommand, tierStatsCommand, tierPromoteCommand, tierDemoteCommand, precompactFlushCommand, backfillRunCommand, backfillApproveCommand, backfillRollbackCommand, backfillCommand2, digestCommand, recentCommand, diaryReadCommand, diaryWriteCommand, diaryCommand, watchCommand2, tierCommand, sweepCommand, memoryCommand;
+var storeCommand, findCommand5, statsCommand4, observeCommand, timelineCommand, fetchCommand2, decisionFindCommand, decisionStoreCommand, linkCommand, traceCommand, relatedCommand, contextCommand2, graphStatsCommand, graphShowCommand, graphNeighborsCommand, graphAddCommand, graphRemoveCommand, reasonWhyCommand, reasonSimilarCommand, searchHybridCommand, codeLinksCommand, codeAutoLinkCommand, codeMemoriesForCodeCommand, codeForMemoryCommand, consolidateCommand, dreamCommand, reflectCommand, dedupScanCommand, importCommand3, doctorCommand3, llmStatusCommand, verifyCommand, pendingVerifyCommand, tierStatsCommand, tierPromoteCommand, tierDemoteCommand, precompactFlushCommand, backfillRunCommand, backfillApproveCommand, backfillRollbackCommand, backfillCommand2, digestCommand, recentCommand, diaryReadCommand, diaryWriteCommand, diaryCommand, watchCommand2, tierCommand, sweepCommand, memoryCommand;
 var init_memory3 = __esm({
   "packages/cleo/src/cli/commands/memory.ts"() {
     "use strict";
@@ -42324,7 +42460,7 @@ var init_memory3 = __esm({
         }
       }
     });
-    findCommand4 = defineCommand({
+    findCommand5 = defineCommand({
       meta: {
         name: "find",
         description: "Search BRAIN memory (all tables, or filter by --type pattern|learning)"
@@ -43304,16 +43440,16 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const sourceDir = args.from ?? join16(homedir5(), ".claude", "projects", "-mnt-projects-cleocode", "memory");
+        const sourceDir = args.from ?? join17(homedir5(), ".claude", "projects", "-mnt-projects-cleocode", "memory");
         const isDryRun = !!args["dry-run"];
         const projectRoot = getProjectRoot26();
-        const stateFile = join16(projectRoot, CLEO_DIR_NAME, MIGRATE_MEMORY_HASHES_JSON);
-        if (!existsSync12(sourceDir)) {
+        const stateFile = join17(projectRoot, CLEO_DIR_NAME, MIGRATE_MEMORY_HASHES_JSON);
+        if (!existsSync13(sourceDir)) {
           cliError(`Source directory not found: ${sourceDir}`, "E_NOT_FOUND", { name: "E_NOT_FOUND" });
           process.exit(1);
           return;
         }
-        const files = readdirSync3(sourceDir).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").map((f) => join16(sourceDir, f));
+        const files = readdirSync3(sourceDir).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").map((f) => join17(sourceDir, f));
         const importedHashes = isDryRun ? /* @__PURE__ */ new Set() : loadImportHashes(stateFile);
         const stats = { total: files.length, imported: 0, skipped: 0, errors: 0 };
         const importedEntries = [];
@@ -44109,8 +44245,8 @@ data: ${JSON.stringify(event)}
             cursor = data.nextCursor;
           }
           if (!running) break;
-          await new Promise((resolve5) => {
-            const timer = setTimeout(resolve5, intervalMs);
+          await new Promise((resolve7) => {
+            const timer = setTimeout(resolve7, intervalMs);
             timer.unref?.();
           });
         }
@@ -44179,7 +44315,7 @@ data: ${JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString() })}
       meta: { name: "memory", description: "BRAIN memory operations (patterns, learnings)" },
       subCommands: {
         store: storeCommand,
-        find: findCommand4,
+        find: findCommand5,
         stats: statsCommand4,
         observe: observeCommand,
         timeline: timelineCommand,
@@ -45677,13 +45813,13 @@ var init_nexus4 = __esm({
           if (!skipPrompt) {
             const { createInterface: createInterface2 } = await import("node:readline");
             const rl = createInterface2({ input: process.stdin, output: process.stdout });
-            const confirmed = await new Promise((resolve5) => {
+            const confirmed = await new Promise((resolve7) => {
               rl.question(
                 `
 [nexus] Delete ${matchCount} project(s) from the registry? [y/N] `,
                 (answer) => {
                   rl.close();
-                  resolve5(answer.trim().toLowerCase() === "y");
+                  resolve7(answer.trim().toLowerCase() === "y");
                 }
               );
             });
@@ -50758,7 +50894,7 @@ __export(revert_exports, {
   revertCommand: () => revertCommand
 });
 import { readFile as readFile3 } from "node:fs/promises";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 import { cwd as processCwd } from "node:process";
 import { E_RECEIPT_NOT_FOUND } from "@cleocode/core/sentient/chain-walker.js";
 import { SENTIENT_STATE_FILE } from "@cleocode/core/sentient/daemon.js";
@@ -50823,7 +50959,7 @@ async function loadOwnerAttestation(attestationFilePath) {
   return obj;
 }
 async function loadOwnerPubkeys(projectRoot) {
-  const path5 = join17(projectRoot, OWNER_PUBKEYS_FILE);
+  const path5 = join18(projectRoot, OWNER_PUBKEYS_FILE);
   try {
     const raw = await readFile3(path5, "utf-8");
     const parsed = JSON.parse(raw);
@@ -50906,7 +51042,7 @@ var init_revert = __esm({
         if (attestation && allowedPubkeys.size > 0 && !allowedPubkeys.has(attestation.ownerPubkey)) {
           emitFailure2(
             E_OWNER_ATTESTATION_REQUIRED,
-            `Attestation pubkey "${attestation.ownerPubkey}" is not in the owner allowlist at ${join17(projectRoot, OWNER_PUBKEYS_FILE)}`,
+            `Attestation pubkey "${attestation.ownerPubkey}" is not in the owner allowlist at ${join18(projectRoot, OWNER_PUBKEYS_FILE)}`,
             jsonMode
           );
         }
@@ -50959,7 +51095,7 @@ ${lines}`
             identity,
             includeHuman
           });
-          const statePath = join17(projectRoot, SENTIENT_STATE_FILE);
+          const statePath = join18(projectRoot, SENTIENT_STATE_FILE);
           const state = await readSentientState(statePath);
           emitSuccess(
             {
@@ -51194,7 +51330,7 @@ __export(self_update_exports, {
 });
 import { execFile } from "node:child_process";
 import { readFile as readFile4 } from "node:fs/promises";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 import * as readline2 from "node:readline";
 import { promisify } from "node:util";
 import {
@@ -51209,7 +51345,7 @@ import {
 async function getCurrentVersion() {
   const cleoHome = getCleoHome();
   try {
-    const content = await readFile4(join18(cleoHome, "VERSION"), "utf-8");
+    const content = await readFile4(join19(cleoHome, "VERSION"), "utf-8");
     return (content.split("\n")[0] ?? "unknown").trim();
   } catch {
     return "unknown";
@@ -51263,7 +51399,7 @@ async function writeRuntimeVersionMetadata(mode, source, version) {
   ];
   await import("node:fs/promises").then(
     ({ writeFile: writeFile3, mkdir: mkdir3 }) => mkdir3(cleoHome, { recursive: true }).then(
-      () => writeFile3(join18(cleoHome, "VERSION"), `${lines.join("\n")}
+      () => writeFile3(join19(cleoHome, "VERSION"), `${lines.join("\n")}
 `, "utf-8")
     )
   );
@@ -51301,11 +51437,11 @@ async function runPostUpdateDiagnostics(opts) {
         input: process.stdin,
         output: process.stdout
       });
-      shouldMigrate = await new Promise((resolve5) => {
+      shouldMigrate = await new Promise((resolve7) => {
         rl.question("  Do you want to run the upgrade now? [Y/n] ", (answer) => {
           rl.close();
           const clean = answer.trim().toLowerCase();
-          resolve5(clean === "" || clean === "y" || clean === "yes");
+          resolve7(clean === "" || clean === "y" || clean === "yes");
         });
       });
     }
@@ -51674,7 +51810,7 @@ var sentient_exports = {};
 __export(sentient_exports, {
   sentientCommand: () => sentientCommand
 });
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { cwd as processCwd2 } from "node:process";
 import {
   getSentientDaemonStatus as getSentientDaemonStatus2,
@@ -51740,7 +51876,7 @@ var init_sentient3 = __esm({
             return;
           }
           if (dryRun) {
-            const statePath2 = join19(projectRoot, SENTIENT_STATE_FILE2);
+            const statePath2 = join20(projectRoot, SENTIENT_STATE_FILE2);
             const outcome = await safeRunTick({ projectRoot, statePath: statePath2, dryRun: true });
             emitSuccess2(
               { dryRun: true, outcome },
@@ -51856,7 +51992,7 @@ Logs:  ${logPath}`
         const jsonMode = args.json === true;
         const dryRun = args["dry-run"] === true;
         try {
-          const statePath = join19(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join20(projectRoot, SENTIENT_STATE_FILE2);
           const outcome = await safeRunTick({ projectRoot, statePath, dryRun });
           emitSuccess2(
             { outcome, dryRun },
@@ -51925,7 +52061,7 @@ Logs:  ${logPath}`
             return;
           }
           await db.update(tasks).set({ status: "pending", updatedAt: now }).where(eq2(tasks.id, id)).run();
-          const statePath = join19(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join20(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           await patchSentientState(statePath, {
             tier2Stats: {
@@ -51977,7 +52113,7 @@ Logs:  ${logPath}`
             return;
           }
           await db.update(tasks).set({ status: "cancelled", cancellationReason: reason, cancelledAt: now, updatedAt: now }).where(eq2(tasks.id, id)).run();
-          const statePath = join19(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join20(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           await patchSentientState(statePath, {
             tier2Stats: {
@@ -52022,7 +52158,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot5(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join19(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join20(projectRoot, SENTIENT_STATE_FILE2);
           const outcome = await safeRunProposeTick({ projectRoot, statePath });
           emitSuccess2(
             { outcome },
@@ -52042,7 +52178,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot5(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join19(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join20(projectRoot, SENTIENT_STATE_FILE2);
           const updated = await patchSentientState(statePath, { tier2Enabled: true });
           emitSuccess2({ tier2Enabled: updated.tier2Enabled }, jsonMode, "Tier-2 proposals enabled");
         } catch (err) {
@@ -52061,7 +52197,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot5(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join19(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join20(projectRoot, SENTIENT_STATE_FILE2);
           const updated = await patchSentientState(statePath, { tier2Enabled: false });
           emitSuccess2({ tier2Enabled: updated.tier2Enabled }, jsonMode, "Tier-2 proposals disabled");
         } catch (err) {
@@ -52092,7 +52228,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot5(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join19(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join20(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           emitSuccess2(
             {
@@ -52404,7 +52540,7 @@ async function promptOwnerAuthPassword(sessionName) {
     terminal: true
   });
   process.stderr.write(`[cleo] Enter owner-auth password for session "${sessionName}": `);
-  const password = await new Promise((resolve5) => {
+  const password = await new Promise((resolve7) => {
     if (process.stdin.setRawMode) {
       process.stdin.setRawMode(
         true
@@ -52422,10 +52558,10 @@ async function promptOwnerAuthPassword(sessionName) {
           );
         }
         process.stderr.write("\n");
-        resolve5(pw);
+        resolve7(pw);
       } else if (ch === "") {
         process.stderr.write("\n[cleo] Cancelled.\n");
-        resolve5("");
+        resolve7("");
       } else if (ch === "\x7F" || ch === "\b") {
         pw = pw.slice(0, -1);
       } else {
@@ -52439,7 +52575,7 @@ async function promptOwnerAuthPassword(sessionName) {
   const token = deriveOwnerAuthToken(sessionName, password);
   return token;
 }
-var startCommand8, endCommand, handoffCommand2, statusCommand11, resumeCommand2, findCommand5, listCommand19, gcCommand2, showCommand13, driftCommand, contextDriftCommand, suspendCommand, recordAssumptionCommand, recordDecisionCommand, decisionLogCommand, sessionCommand;
+var startCommand8, endCommand, handoffCommand2, statusCommand11, resumeCommand2, findCommand6, listCommand19, gcCommand2, showCommand13, driftCommand, contextDriftCommand, suspendCommand, recordAssumptionCommand, recordDecisionCommand, decisionLogCommand, sessionCommand;
 var init_session4 = __esm({
   "packages/cleo/src/cli/commands/session.ts"() {
     "use strict";
@@ -52667,7 +52803,7 @@ var init_session4 = __esm({
         );
       }
     });
-    findCommand5 = defineCommand({
+    findCommand6 = defineCommand({
       meta: {
         name: "find",
         description: "Find sessions (lightweight discovery \u2014 minimal fields, low context cost)"
@@ -52969,7 +53105,7 @@ var init_session4 = __esm({
         handoff: handoffCommand2,
         status: statusCommand11,
         resume: resumeCommand2,
-        find: findCommand5,
+        find: findCommand6,
         list: listCommand19,
         gc: gcCommand2,
         show: showCommand13,
@@ -54390,7 +54526,7 @@ __export(transcript_exports, {
   transcriptCommand: () => transcriptCommand
 });
 import { homedir as homedir6 } from "node:os";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 import { getProjectRoot as getProjectRoot32 } from "@cleocode/core";
 import {
   parseDurationMs,
@@ -54444,7 +54580,7 @@ var init_transcript = __esm({
           }
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join20(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join21(homedir6(), ".claude", "projects");
         try {
           const result = await scanTranscripts(projectsDir);
           cliOutput(
@@ -54750,7 +54886,7 @@ var init_transcript = __esm({
           process.exit(2);
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join20(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join21(homedir6(), ".claude", "projects");
         try {
           const pruneResult = await pruneTranscripts({
             olderThanMs,
@@ -55209,6 +55345,30 @@ var verify_exports = {};
 __export(verify_exports, {
   verifyCommand: () => verifyCommand3
 });
+import { spawnSync as spawnSync2 } from "node:child_process";
+import { existsSync as existsSync14 } from "node:fs";
+import { join as join22, resolve as resolve6 } from "node:path";
+function resolveVerifierScript2(taskId, projectRoot) {
+  const id = taskId.toLowerCase();
+  const candidates = [
+    join22(projectRoot, "scripts", `verify-${taskId}-fu.mjs`),
+    join22(projectRoot, "scripts", `verify-${taskId}.mjs`),
+    join22(projectRoot, "scripts", `verify-${id}-fu.mjs`),
+    join22(projectRoot, "scripts", `verify-${id}.mjs`)
+  ];
+  for (const candidate of candidates) {
+    if (existsSync14(candidate)) return candidate;
+  }
+  return null;
+}
+function runVerifier(verifierPath) {
+  const result = spawnSync2("node", [verifierPath], { encoding: "utf8" });
+  return {
+    exitCode: result.status ?? 1,
+    stdout: result.stdout ?? "",
+    stderr: result.stderr ?? ""
+  };
+}
 var verifyCommand3;
 var init_verify = __esm({
   "packages/cleo/src/cli/commands/verify.ts"() {
@@ -55255,6 +55415,11 @@ var init_verify = __esm({
         "shared-evidence": {
           type: "boolean",
           description: "Acknowledge that the same evidence atom is applied to >3 distinct tasks in this session (T1502 / ADR-059). Without this flag, such reuse triggers a warning; in strict mode (CLEO_STRICT_EVIDENCE=1) it is a hard reject."
+        },
+        "acceptance-check": {
+          type: "string",
+          description: "Run the task acceptance verifier before any gate write. Resolves scripts/verify-<taskId>-fu.mjs (or pass an explicit path). Blocks if verifier exits non-zero. (T9192 / ADR-070)",
+          required: false
         }
       },
       async run({ args, cmd }) {
@@ -55262,6 +55427,53 @@ var init_verify = __esm({
           await showUsage(cmd);
           return;
         }
+        const acceptanceCheckRaw = args["acceptance-check"];
+        const shouldRunAcceptanceCheck = acceptanceCheckRaw !== void 0 && acceptanceCheckRaw !== false;
+        if (shouldRunAcceptanceCheck) {
+          const projectRoot = resolve6(process.cwd());
+          let verifierPath = null;
+          if (typeof acceptanceCheckRaw === "string" && acceptanceCheckRaw.length > 0) {
+            const explicit = resolve6(projectRoot, acceptanceCheckRaw);
+            verifierPath = existsSync14(explicit) ? explicit : null;
+            if (!verifierPath) {
+              process.stderr.write(
+                `Error: --acceptance-check path not found: ${explicit}
+  T9192 / ADR-070: verifier script must exist before gate writes are allowed.
+`
+              );
+              process.exitCode = 1;
+              return;
+            }
+          } else {
+            verifierPath = resolveVerifierScript2(String(args.taskId), projectRoot);
+          }
+          if (!verifierPath) {
+            process.stderr.write(
+              `Error: --acceptance-check: no verifier script found for ${args.taskId}.
+  Looked for: scripts/verify-${args.taskId}-fu.mjs, scripts/verify-${args.taskId}.mjs
+  T9192 / ADR-070: create the verifier script before using --acceptance-check.
+`
+            );
+            process.exitCode = 1;
+            return;
+          }
+          const { exitCode, stdout, stderr: stderr2 } = runVerifier(verifierPath);
+          process.stdout.write(stdout);
+          if (stderr2) process.stderr.write(stderr2);
+          if (exitCode !== 0) {
+            process.stderr.write(
+              `
+E_ACCEPTANCE_VERIFIER_FAILED: verifier exited ${exitCode}.
+  Verifier: ${verifierPath}
+  Gate writes blocked until verifier exits 0. (T9192 / ADR-070)
+`
+            );
+            process.exitCode = exitCode;
+            return;
+          }
+          process.stdout.write(`Verifier passed (exit 0). Proceeding with gate operation.
+`);
+        }
         const isWrite = !!(args.gate || args.all || args.reset);
         const useExplain = !isWrite && args.explain === true;
         const operation = isWrite ? "gate.set" : useExplain ? "verify.explain" : "gate.status";
@@ -55293,15 +55505,15 @@ __export(web_exports, {
 });
 import { execFileSync as execFileSync4, spawn } from "node:child_process";
 import { mkdir as mkdir2, open, readFile as readFile5, rm, stat, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join21 } from "node:path";
+import { join as join23 } from "node:path";
 import { CleoError as CleoError12, formatError as formatError9, getCleoHome as getCleoHome2 } from "@cleocode/core";
 function getWebPaths() {
   const cleoHome = getCleoHome2();
   return {
-    pidFile: join21(cleoHome, "web-server.pid"),
-    configFile: join21(cleoHome, "web-server.json"),
-    logDir: join21(cleoHome, "logs"),
-    logFile: join21(cleoHome, "logs", "web-server.log")
+    pidFile: join23(cleoHome, "web-server.pid"),
+    configFile: join23(cleoHome, "web-server.json"),
+    logDir: join23(cleoHome, "logs"),
+    logFile: join23(cleoHome, "logs", "web-server.log")
   };
 }
 function isProcessRunning(pid) {
@@ -55340,7 +55552,7 @@ async function startWebServer(port, host) {
     throw new CleoError12(1 /* GENERAL_ERROR */, `Server already running (PID: ${status.pid})`);
   }
   const projectRoot = process.env["CLEO_ROOT"] ?? process.cwd();
-  const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join21(projectRoot, "packages", "studio", "build");
+  const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join23(projectRoot, "packages", "studio", "build");
   await mkdir2(logDir, { recursive: true });
   await writeFile2(
     configFile,
@@ -55350,7 +55562,7 @@ async function startWebServer(port, host) {
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
     })
   );
-  const webIndexPath = join21(studioDir, "index.js");
+  const webIndexPath = join23(studioDir, "index.js");
   try {
     await stat(webIndexPath);
   } catch {
@@ -55398,7 +55610,7 @@ Logs: ${logFile}`
       }
     } catch {
     }
-    await new Promise((resolve5) => setTimeout(resolve5, 500));
+    await new Promise((resolve7) => setTimeout(resolve7, 500));
   }
   if (!started) {
     try {
@@ -55475,7 +55687,7 @@ var init_web = __esm({
           }
           for (let i = 0; i < 60; i++) {
             if (!isProcessRunning(status.pid)) break;
-            await new Promise((resolve5) => setTimeout(resolve5, 500));
+            await new Promise((resolve7) => setTimeout(resolve7, 500));
           }
           if (isProcessRunning(status.pid)) {
             try {
@@ -55527,7 +55739,7 @@ var init_web = __esm({
             }
             for (let i = 0; i < 60; i++) {
               if (!isProcessRunning(status.pid)) break;
-              await new Promise((resolve5) => setTimeout(resolve5, 500));
+              await new Promise((resolve7) => setTimeout(resolve7, 500));
             }
             if (isProcessRunning(status.pid)) {
               try {
@@ -55622,7 +55834,7 @@ init_dist();
 init_field_context();
 init_format_context();
 import { readFileSync as readFileSync15 } from "node:fs";
-import { dirname as dirname8, join as join22 } from "node:path";
+import { dirname as dirname8, join as join24 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 
 // packages/cleo/src/cli/generated/command-manifest.ts
@@ -55657,6 +55869,12 @@ var COMMAND_MANIFEST = [
     description: "Manage and validate Architecture Decision Records in .cleo/adrs/",
     load: async () => (await Promise.resolve().then(() => (init_adr(), adr_exports))).adrCommand
   },
+  {
+    exportName: "agentOutputsCommand",
+    name: "agent-outputs",
+    description: "Agent output document management \u2014 find/search via DocsAccessor (find subcommand)",
+    load: async () => (await Promise.resolve().then(() => (init_agent_outputs(), agent_outputs_exports))).agentOutputsCommand
+  },
   {
     exportName: "agentCommand",
     name: "agent",
@@ -55684,7 +55902,7 @@ var COMMAND_MANIFEST = [
   {
     exportName: "auditCommand",
     name: "audit",
-    description: "Git-backed audit tooling (lineage reconstruction, integrity checks)",
+    description: "Git-backed audit tooling (lineage reconstruction, integrity checks). ",
     load: async () => (await Promise.resolve().then(() => (init_audit2(), audit_exports))).auditCommand
   },
   {
@@ -56681,7 +56899,7 @@ Or via NodeSource: https://github.com/nodesource/distributions
   }
 }
 function getPackageVersion() {
-  const pkgPath = join22(dirname8(fileURLToPath5(import.meta.url)), "../../package.json");
+  const pkgPath = join24(dirname8(fileURLToPath5(import.meta.url)), "../../package.json");
   const pkg = JSON.parse(readFileSync15(pkgPath, "utf-8"));
   return pkg.version;
 }