@cleocode/cleo 2026.5.69 → 2026.5.71

package/dist/cli/index.js

@@ -16796,8 +16796,7 @@ import {
   getBrainDb,
   getBrainNativeDb,
   OAUTH_STATUS_PROVIDERS,
-  resolveAnthropicApiKey,
-  resolveAnthropicApiKeySource,
+  resolveCredentials,
   resolveProviderStatus,
   typedAll
 } from "@cleocode/core/internal";
@@ -17289,8 +17288,21 @@ var init_memory2 = __esm({
             }
             // T791 — LLM extraction backend status
             case "llm-status": {
-              const resolvedSource = resolveAnthropicApiKeySource();
-              const extractionEnabled = resolveAnthropicApiKey() !== null;
+              const _anthropicCred = resolveCredentials("anthropic");
+              const extractionEnabled = _anthropicCred.apiKey !== null;
+              const resolvedSource = (() => {
+                switch (_anthropicCred.source) {
+                  case "env":
+                    return "env";
+                  case "claude-creds":
+                    return "oauth";
+                  case "global-config":
+                  case "project-config":
+                    return "config";
+                  default:
+                    return "none";
+                }
+              })();
               const providers = OAUTH_STATUS_PROVIDERS.map(resolveProviderStatus);
               let lastExtractionRun = null;
               try {
@@ -24299,8 +24311,8 @@ async function loadPlaybookByName(name) {
     return null;
   }
   try {
-    const { getProjectRoot: getProjectRoot35 } = await import("@cleocode/core/internal");
-    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot35();
+    const { getProjectRoot: getProjectRoot33 } = await import("@cleocode/core/internal");
+    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot33();
     const resolved = resolvePlaybook(name, {
       projectRoot,
       globalPlaybooksDir: __playbookRuntimeOverrides.globalPlaybooksDir,
@@ -24344,8 +24356,8 @@ async function acquireDb() {
 async function buildDefaultDispatcher() {
   if (__playbookRuntimeOverrides.dispatcher) return __playbookRuntimeOverrides.dispatcher;
   const { orchestrateSpawnExecute: orchestrateSpawnExecute2 } = await Promise.resolve().then(() => (init_engine(), engine_exports));
-  const { getProjectRoot: getProjectRoot35 } = await import("@cleocode/core/internal");
-  const projectRoot = getProjectRoot35();
+  const { getProjectRoot: getProjectRoot33 } = await import("@cleocode/core/internal");
+  const projectRoot = getProjectRoot33();
   return {
     async dispatch(input) {
       try {
@@ -24535,8 +24547,8 @@ var init_playbook2 = __esm({
             projectRoot = __playbookRuntimeOverrides.projectRoot;
           } else {
             try {
-              const { getProjectRoot: getProjectRoot35 } = await import("@cleocode/core/internal");
-              projectRoot = getProjectRoot35();
+              const { getProjectRoot: getProjectRoot33 } = await import("@cleocode/core/internal");
+              projectRoot = getProjectRoot33();
             } catch {
               projectRoot = void 0;
             }
@@ -24600,14 +24612,14 @@ var init_playbook2 = __esm({
         const dispatcher = await buildDefaultDispatcher();
         let result;
         try {
-          const { getProjectRoot: getProjectRoot35 } = await import("@cleocode/core/internal");
+          const { getProjectRoot: getProjectRoot33 } = await import("@cleocode/core/internal");
           const opts = {
             db,
             playbook: parsed.definition,
             playbookHash: parsed.sourceHash,
             initialContext,
             dispatcher,
-            projectRoot: getProjectRoot35()
+            projectRoot: getProjectRoot33()
           };
           if (__playbookRuntimeOverrides.approvalSecret !== void 0) {
             opts.approvalSecret = __playbookRuntimeOverrides.approvalSecret;
@@ -24969,12 +24981,12 @@ async function orchestrateRejectOp(params) {
 async function orchestrateClassify(request, context, projectRoot) {
   try {
     const { getCleoCantWorkflowsDir } = await import("@cleocode/core/internal");
-    const { readFileSync: readFileSync17, readdirSync: readdirSync4, existsSync: existsSync16 } = await import("node:fs");
+    const { readFileSync: readFileSync17, readdirSync: readdirSync4, existsSync: existsSync14 } = await import("node:fs");
     const { join: join26 } = await import("node:path");
     const workflowsDir = getCleoCantWorkflowsDir();
     const combined = `${request} ${context ?? ""}`.toLowerCase();
     const matches = [];
-    if (existsSync16(workflowsDir)) {
+    if (existsSync14(workflowsDir)) {
       const files = readdirSync4(workflowsDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
@@ -24994,7 +25006,7 @@ async function orchestrateClassify(request, context, projectRoot) {
       }
     }
     const localCantDir = join26(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
-    if (existsSync16(localCantDir)) {
+    if (existsSync14(localCantDir)) {
       const files = readdirSync4(localCantDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
@@ -28122,9 +28134,7 @@ var init_tasks3 = __esm({
             scope: params.scope,
             severity: params.severity,
             // T1633: BRAIN duplicate-bypass flag
-            forceDuplicate: params.forceDuplicate,
-            // T9218 / ADR-070: mandatory verifier for high-consequence tasks
-            verifier: params.verifier
+            forceDuplicate: params.forceDuplicate
           }),
           "add"
         );
@@ -28163,7 +28173,11 @@ var init_tasks3 = __esm({
             // T1590: AC-immutability override reason
             reason: params.reason,
             // T9241: clear the free-text blockedBy reason
-            clearBlockedBy: params.clearBlockedBy
+            clearBlockedBy: params.clearBlockedBy,
+            // T9327: relates mutations
+            relates: params.relates,
+            addRelates: params.addRelates,
+            removeRelates: params.removeRelates
           }),
           "update"
         );
@@ -29516,11 +29530,11 @@ var init_security = __esm({
 });
 
 // packages/cleo/src/dispatch/middleware/sanitizer.ts
-function createSanitizer(getProjectRoot35) {
+function createSanitizer(getProjectRoot33) {
   return async (req, next) => {
     if (req.params) {
       try {
-        const root = getProjectRoot35 ? getProjectRoot35() : void 0;
+        const root = getProjectRoot33 ? getProjectRoot33() : void 0;
         req.params = sanitizeParams(req.params, root, {
           domain: req.domain,
           operation: req.operation
@@ -30377,17 +30391,13 @@ var init_add = __esm({
           description: "Justification for creating a critical-priority task without --depends (T1856). Records waiver in task metadata."
         },
         /**
-         * Path to an existing verifier script (T9218 / ADR-070).
-         *
-         * Required when creating tasks with priority=critical, size=large, or
-         * type=epic. The path must point to an existing .mjs file. Omitting
-         * this on high-consequence tasks causes rejection with E_VERIFIER_REQUIRED.
-         *
-         * Use `cleo verify backfill <taskId>` to generate a stub after creation.
+         * Related tasks — semantic relationships (non-dependency).
+         * Comma-separated task IDs with optional type suffix (e.g. "T001:blocks,T002:related").
+         * Default type is 'related'.
          */
-        verifier: {
+        relates: {
           type: "string",
-          description: "Path to existing verifier script for this task (required for priority=critical, size=large, type=epic) (T9218 / ADR-070)"
+          description: 'Comma-separated related task IDs with optional type suffix (e.g. "T001:blocks,T002")'
         }
       },
       async run({ args, cmd }) {
@@ -30411,6 +30421,12 @@ var init_add = __esm({
         }
         if (args.labels) params["labels"] = args.labels.split(",").map((s) => s.trim());
         if (args.depends) params["depends"] = args.depends.split(",").map((s) => s.trim());
+        if (args.relates) {
+          params["relates"] = args.relates.split(",").map((s) => {
+            const [taskId, relType = "related"] = s.trim().split(":");
+            return { taskId: taskId.trim(), type: relType.trim() };
+          });
+        }
         if (args.notes !== void 0) params["notes"] = args.notes;
         if (args.note !== void 0) params["notes"] = params["notes"] ?? args.note;
         if (args.position !== void 0)
@@ -30421,7 +30437,6 @@ var init_add = __esm({
         if (args.scope !== void 0) params["scope"] = args.scope;
         if (args.severity !== void 0) params["severity"] = args.severity;
         if (args["force-duplicate"] !== void 0) params["forceDuplicate"] = args["force-duplicate"];
-        if (args.verifier !== void 0) params["verifier"] = args.verifier;
         if (args.priority === "critical" && !args.depends && args["depends-waiver"] === void 0) {
           cliError(
             'Critical-priority tasks must declare at least one dependency (--depends) or provide a waiver (--depends-waiver "<reason>").',
@@ -31468,12 +31483,12 @@ var init_agent = __esm({
             transportConfig: {},
             isActive: true
           });
-          const { existsSync: existsSync16, mkdirSync: mkdirSync7, writeFileSync: writeFileSync6 } = await import("node:fs");
+          const { existsSync: existsSync14, mkdirSync: mkdirSync7, writeFileSync: writeFileSync6 } = await import("node:fs");
           const { join: join26 } = await import("node:path");
           const cantDir = join26(CLEO_DIR_NAME, AGENTS_SUBDIR);
           const cantPath = join26(cantDir, `${agentId}.cant`);
           let cantScaffolded = false;
-          if (!existsSync16(cantPath)) {
+          if (!existsSync14(cantPath)) {
             mkdirSync7(cantDir, { recursive: true });
             const role = classification ?? "specialist";
             const cantContent = `---
@@ -31533,7 +31548,7 @@ agent ${agentId}:
               data: {
                 agentId: credential.agentId,
                 displayName: credential.displayName,
-                cantFile: cantScaffolded ? cantPath : existsSync16(cantPath) ? cantPath : null,
+                cantFile: cantScaffolded ? cantPath : existsSync14(cantPath) ? cantPath : null,
                 cantScaffolded
               }
             },
@@ -31652,7 +31667,7 @@ agent ${agentId}:
         try {
           const { AgentRegistryAccessor, getDb: getDb3 } = await import("@cleocode/core/internal");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync16, readFileSync: readFileSync17 } = await import("node:fs");
+          const { existsSync: existsSync14, readFileSync: readFileSync17 } = await import("node:fs");
           const { join: join26 } = await import("node:path");
           await getDb3();
           const registry = new AgentRegistryAccessor(process.cwd());
@@ -31674,7 +31689,7 @@ agent ${agentId}:
           let profile = null;
           let cantValidation = null;
           const cantPath = args.cant ?? join26(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          if (existsSync16(cantPath)) {
+          if (existsSync14(cantPath)) {
             profile = readFileSync17(cantPath, "utf-8");
             try {
               const cantModule = await import("@cleocode/cant");
@@ -32198,7 +32213,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
         try {
           const { AgentRegistryAccessor, getDb: getDb3 } = await import("@cleocode/core/internal");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync16 } = await import("node:fs");
+          const { existsSync: existsSync14 } = await import("node:fs");
           const { join: join26 } = await import("node:path");
           const { execFile: execFile2 } = await import("node:child_process");
           const { promisify: promisify2 } = await import("node:util");
@@ -32220,7 +32235,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           await registry.update(args.agentId, { isActive: true });
           await registry.markUsed(args.agentId);
           const cantPath = join26(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          const hasProfile = existsSync16(cantPath);
+          const hasProfile = existsSync14(cantPath);
           const runtime = await createRuntime(registry, {
             agentId: args.agentId,
             pollIntervalMs: 5e3,
@@ -33068,11 +33083,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       async run({ args }) {
         let tempDir = null;
         try {
-          const { existsSync: existsSync16, mkdirSync: mkdirSync7, statSync, readdirSync: readdirSync4, copyFileSync } = await import("node:fs");
-          const { join: join26, basename, resolve: resolve7, extname } = await import("node:path");
+          const { existsSync: existsSync14, mkdirSync: mkdirSync7, statSync, readdirSync: readdirSync4, copyFileSync } = await import("node:fs");
+          const { join: join26, basename, resolve: resolve5, extname } = await import("node:path");
           const { tmpdir: tmpdir2 } = await import("node:os");
-          const resolvedPath = resolve7(args.path);
-          if (!existsSync16(resolvedPath)) {
+          const resolvedPath = resolve5(args.path);
+          if (!existsSync14(resolvedPath)) {
             cliOutput(
               {
                 success: false,
@@ -33133,7 +33148,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             }
             const agentName = topLevel[0];
             const personaPath = join26(tempDir, agentName, "persona.cant");
-            if (!existsSync16(personaPath)) {
+            if (!existsSync14(personaPath)) {
               cliOutput(
                 {
                   success: false,
@@ -33152,7 +33167,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           } else if (stat2.isDirectory()) {
             const agentName = basename(resolvedPath);
             const personaPath = join26(resolvedPath, "persona.cant");
-            if (!existsSync16(personaPath)) {
+            if (!existsSync14(personaPath)) {
               cliOutput(
                 {
                   success: false,
@@ -33287,11 +33302,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync16, statSync } = await import("node:fs");
-          const { resolve: resolve7, basename, dirname: dirname9 } = await import("node:path");
+          const { existsSync: existsSync14, statSync } = await import("node:fs");
+          const { resolve: resolve5, basename, dirname: dirname9 } = await import("node:path");
           const { execFileSync: execFileSync5 } = await import("node:child_process");
-          const resolvedDir = resolve7(args.dir);
-          if (!existsSync16(resolvedDir) || !statSync(resolvedDir).isDirectory()) {
+          const resolvedDir = resolve5(args.dir);
+          if (!existsSync14(resolvedDir) || !statSync(resolvedDir).isDirectory()) {
             cliOutput(
               {
                 success: false,
@@ -33307,7 +33322,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const { join: join26 } = await import("node:path");
           const personaPath = join26(resolvedDir, "persona.cant");
-          if (!existsSync16(personaPath)) {
+          if (!existsSync14(personaPath)) {
             cliOutput(
               {
                 success: false,
@@ -33323,7 +33338,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const agentName = basename(resolvedDir);
           const archiveName = `${agentName}.cantz`;
-          const archivePath = resolve7(archiveName);
+          const archivePath = resolve5(archiveName);
           const parentDir = dirname9(resolvedDir);
           try {
             execFileSync5("zip", ["-r", archivePath, agentName], {
@@ -33423,7 +33438,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync16, mkdirSync: mkdirSync7, writeFileSync: writeFileSync6 } = await import("node:fs");
+          const { existsSync: existsSync14, mkdirSync: mkdirSync7, writeFileSync: writeFileSync6 } = await import("node:fs");
           const { join: join26 } = await import("node:path");
           const { homedir: homedir9 } = await import("node:os");
           const name = args.name;
@@ -33490,7 +33505,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             targetRoot = join26(process.cwd(), CLEO_DIR_NAME, CANT_AGENTS_SUBDIR);
           }
           const agentDir = join26(targetRoot, name);
-          if (existsSync16(agentDir)) {
+          if (existsSync14(agentDir)) {
             cliOutput(
               {
                 success: false,
@@ -33634,17 +33649,17 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync16, readFileSync: readFileSync17, mkdirSync: mkdirSync7 } = await import("node:fs");
-          const { resolve: resolve7, join: join26 } = await import("node:path");
-          const specPath = resolve7(args.spec);
-          if (!existsSync16(specPath)) {
+          const { existsSync: existsSync14, readFileSync: readFileSync17, mkdirSync: mkdirSync7 } = await import("node:fs");
+          const { resolve: resolve5, join: join26 } = await import("node:path");
+          const specPath = resolve5(args.spec);
+          if (!existsSync14(specPath)) {
             cliError(`spec file not found: ${specPath}`, 4, { name: "E_NOT_FOUND" });
             process.exitCode = 4;
             return;
           }
           const specContent = readFileSync17(specPath, "utf-8");
           const projectRoot = process.cwd();
-          const outputDir = args["output-dir"] ? resolve7(args["output-dir"]) : join26(projectRoot, ".cleo", "cant", "agents");
+          const outputDir = args["output-dir"] ? resolve5(args["output-dir"]) : join26(projectRoot, ".cleo", "cant", "agents");
           mkdirSync7(outputDir, { recursive: true });
           if (args["dry-run"]) {
             cliOutput(
@@ -34042,11 +34057,8 @@ var audit_exports = {};
 __export(audit_exports, {
   auditCommand: () => auditCommand
 });
-import { spawnSync } from "node:child_process";
-import { existsSync as existsSync6 } from "node:fs";
-import { resolve as resolve3 } from "node:path";
-import { getProjectRoot as getProjectRoot19, reconstructLineage, resolveVerifierScript } from "@cleocode/core/internal";
-var reconstructCommand, verifierCommand, auditCommand;
+import { getProjectRoot as getProjectRoot19, reconstructLineage } from "@cleocode/core/internal";
+var reconstructCommand, auditCommand;
 var init_audit2 = __esm({
   "packages/cleo/src/cli/commands/audit.ts"() {
     "use strict";
@@ -34102,82 +34114,13 @@ var init_audit2 = __esm({
         });
       }
     });
-    verifierCommand = defineCommand({
-      meta: {
-        name: "verifier",
-        description: "Independent acceptance verifier re-run (ADR-070 auditor-loop). Resolves scripts/verify-<taskId>-fu.mjs and runs it independently. Does NOT trust prior Implementer claims. Exits non-zero if verifier fails."
-      },
-      args: {
-        taskId: {
-          type: "positional",
-          description: "Task ID whose acceptance verifier script to run independently (e.g. T9188)",
-          required: true
-        },
-        script: {
-          type: "string",
-          description: "Explicit path to the verifier script (overrides auto-resolution)"
-        }
-      },
-      async run({ args }) {
-        const taskId = String(args.taskId);
-        let projectRoot;
-        try {
-          projectRoot = getProjectRoot19(process.cwd()) ?? resolve3(process.cwd());
-        } catch {
-          projectRoot = resolve3(process.cwd());
-        }
-        let verifierPath;
-        if (args.script) {
-          const explicit = resolve3(projectRoot, String(args.script));
-          verifierPath = existsSync6(explicit) ? explicit : null;
-          if (!verifierPath) {
-            cliError(`Verifier script not found: ${explicit}`, 1, { name: "E_NOT_FOUND" });
-            process.exitCode = 1;
-            return;
-          }
-        } else {
-          verifierPath = resolveVerifierScript(taskId, projectRoot);
-        }
-        if (!verifierPath) {
-          cliError(
-            `No verifier script found for ${taskId}.
-  Looked for: scripts/verify-${taskId}-fu.mjs, scripts/verify-${taskId}.mjs
-  Create the verifier script per ADR-070 before running the auditor.`,
-            1,
-            { name: "E_NOT_FOUND" }
-          );
-          process.exitCode = 1;
-          return;
-        }
-        humanLine(`[AUDITOR] Independent verifier run for ${taskId}`);
-        humanLine(`[AUDITOR] Script: ${verifierPath}`);
-        humanLine("[AUDITOR] Note: Does NOT trust any prior Implementer claims.\n");
-        const result = spawnSync("node", [verifierPath], { encoding: "utf8", stdio: "inherit" });
-        const exitCode = result.status ?? 1;
-        if (exitCode === 0) {
-          humanLine(
-            `
-[AUDITOR] Audit pass. Verifier exit-code 0. Task ${taskId} acceptance verified.`
-          );
-        } else {
-          process.stderr.write(
-            `
-[AUDITOR] Audit fail. Verifier exit-code ${exitCode}. Task ${taskId} NOT verified.
-  E_ACCEPTANCE_VERIFIER_FAILED. Implementation must be re-worked. (ADR-070)
-`
-          );
-          process.exitCode = exitCode;
-        }
-      }
-    });
     auditCommand = defineCommand({
       meta: {
         name: "audit",
-        description: "Git-backed audit tooling (lineage reconstruction, integrity checks). Also provides independent acceptance verifier re-runs for the ADR-070 auditor-loop pattern (verifier subcommand \u2014 does not trust Implementer claims, runs script independently)."
+        description: "Git-backed audit tooling (lineage reconstruction, integrity checks). Independent re-verification of task completion claims is handled by `cleo verify <taskId> --explain` which re-validates ADR-051 evidence atoms."
       },
       subCommands: {
-        reconstruct: reconstructCommand,
-        verifier: verifierCommand
+        reconstruct: reconstructCommand
       },
       async run({ args: _args }) {
         await showUsage(auditCommand);
@@ -34186,144 +34129,6 @@ var init_audit2 = __esm({
   }
 });
 
-// packages/cleo/src/cli/commands/backfill.ts
-var backfill_exports = {};
-__export(backfill_exports, {
-  backfillCommand: () => backfillCommand
-});
-import { backfillTasks, getProjectRoot as getProjectRoot20, populateEmbeddings } from "@cleocode/core/internal";
-var backfillCommand;
-var init_backfill = __esm({
-  "packages/cleo/src/cli/commands/backfill.ts"() {
-    "use strict";
-    init_dist();
-    init_renderers();
-    backfillCommand = defineCommand({
-      meta: {
-        name: "backfill",
-        description: "Retroactively add acceptance criteria and verification metadata to existing tasks"
-      },
-      args: {
-        "dry-run": {
-          type: "boolean",
-          description: "Show what would be changed without modifying any tasks",
-          default: false
-        },
-        rollback: {
-          type: "boolean",
-          description: "Revert a previous backfill (clear auto-generated AC and verification)",
-          default: false
-        },
-        tasks: {
-          type: "string",
-          description: "Comma-separated list of task IDs to restrict backfill to (e.g. T001,T002)"
-        },
-        embeddings: {
-          type: "boolean",
-          description: "Retroactively generate embeddings for brain observations that lack them",
-          default: false
-        }
-      },
-      async run({ args }) {
-        const root = getProjectRoot20();
-        if (args.embeddings) {
-          try {
-            let lastLine = "";
-            const result = await populateEmbeddings(root, {
-              onProgress: (current, total) => {
-                if (process.stdout.isTTY) {
-                  humanProgress(`\rEmbedding ${current}/${total}...`);
-                } else {
-                  const line = `Embedding ${current}/${total}...`;
-                  if (line !== lastLine) {
-                    humanLine(line);
-                    lastLine = line;
-                  }
-                }
-              }
-            });
-            if (process.stdout.isTTY && result.processed + result.skipped + result.errors > 0) {
-              humanProgress("\n");
-            }
-            if (result.processed === 0 && result.skipped === 0 && result.errors === 0) {
-              cliOutput(
-                {
-                  processed: 0,
-                  skipped: 0,
-                  errors: 0,
-                  message: "No observations to embed (provider unavailable or nothing to backfill)."
-                },
-                { command: "backfill", operation: "admin.backfill", message: "Nothing to embed" }
-              );
-              return;
-            }
-            cliOutput(
-              { processed: result.processed, skipped: result.skipped, errors: result.errors },
-              {
-                command: "backfill",
-                operation: "admin.backfill",
-                message: `Processed ${result.processed}, skipped ${result.skipped}, errors ${result.errors}`
-              }
-            );
-          } catch (err) {
-            const message = err instanceof Error ? err.message : String(err);
-            cliError(
-              `Embedding backfill failed: ${message}`,
-              "E_INTERNAL",
-              {
-                name: "E_INTERNAL"
-              },
-              { operation: "admin.backfill" }
-            );
-            process.exit(1);
-          }
-          return;
-        }
-        const dryRun = !!args["dry-run"];
-        const rollback = !!args.rollback;
-        const taskIds = args.tasks?.trim() ? args.tasks.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
-        if (!dryRun && !rollback && !process.env["CLEO_NONINTERACTIVE"]) {
-          humanWarn(
-            "Warning: Backfill will modify tasks in-place. Run with --dry-run first to preview changes.\n  Set CLEO_NONINTERACTIVE=1 or pass --dry-run to suppress this warning.\n"
-          );
-        }
-        try {
-          const result = await backfillTasks(root, { dryRun, rollback, taskIds });
-          const output = {
-            dryRun,
-            rollback,
-            tasksScanned: result.tasksScanned,
-            tasksChanged: result.tasksChanged,
-            changes: result.changes
-          };
-          if (!rollback) {
-            output["acAdded"] = result.acAdded;
-            output["verificationAdded"] = result.verificationAdded;
-          }
-          const messagePrefix = dryRun ? "[dry run] " : rollback ? "[rollback] " : "";
-          const messageSuffix = result.changes.length === 0 ? "Nothing to do \u2014 all tasks already have AC and verification metadata." : `Scanned ${result.tasksScanned}, changed ${result.tasksChanged} task(s).`;
-          cliOutput(output, {
-            command: "backfill",
-            operation: "admin.backfill",
-            message: `${messagePrefix}${messageSuffix}`
-          });
-        } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
-          cliError(
-            `Backfill failed: ${message}`,
-            "E_INTERNAL",
-            {
-              name: "E_INTERNAL"
-            },
-            { operation: "admin.backfill" }
-          );
-          process.exit(1);
-        }
-      }
-    });
-  }
-});
-
 // packages/cleo/src/cli/commands/backup-inspect.ts
 var backup_inspect_exports = {};
 __export(backup_inspect_exports, {
@@ -34604,12 +34409,12 @@ async function promptPassphrase() {
       "Cannot prompt for passphrase: stdin is not a TTY. Set the CLEO_BACKUP_PASSPHRASE environment variable for non-interactive use."
     );
   }
-  return new Promise((resolve7) => {
+  return new Promise((resolve5) => {
     process.stdout.write("Passphrase: ");
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
     rl.question("", (answer) => {
       rl.close();
-      resolve7(answer.trim());
+      resolve5(answer.trim());
     });
   });
 }
@@ -34742,9 +34547,9 @@ var init_backup = __esm({
       },
       async run({ args }) {
         const scope = args.scope;
-        const { packBundle, getProjectRoot: getProjectRoot35 } = await import("@cleocode/core/internal");
+        const { packBundle, getProjectRoot: getProjectRoot33 } = await import("@cleocode/core/internal");
         const includesProject = scope === "project" || scope === "all";
-        const projectRoot = includesProject ? getProjectRoot35() : void 0;
+        const projectRoot = includesProject ? getProjectRoot33() : void 0;
         let passphrase;
         if (args.encrypt === true) {
           passphrase = process.env["CLEO_BACKUP_PASSPHRASE"];
@@ -35045,7 +34850,7 @@ import {
   exportBrainAsJson,
   getMemoryQualityReport,
   getPlasticityStats,
-  getProjectRoot as getProjectRoot21,
+  getProjectRoot as getProjectRoot20,
   purgeBrainNoise,
   runBrainMaintenance
 } from "@cleocode/core/internal";
@@ -35084,7 +34889,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args }) {
-        const root = getProjectRoot21();
+        const root = getProjectRoot20();
         try {
           const result = await runBrainMaintenance(root, {
             skipDecay: !!args["skip-decay"],
@@ -35155,7 +34960,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot21();
+        const root = getProjectRoot20();
         try {
           const result = await backfillBrainGraph(root);
           cliOutput(
@@ -35196,7 +35001,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot21();
+        const root = getProjectRoot20();
         try {
           const result = await purgeBrainNoise(root);
           cliOutput(
@@ -35242,7 +35047,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args }) {
-        const root = getProjectRoot21();
+        const root = getProjectRoot20();
         const limit = Number.parseInt(args.limit, 10) || 20;
         try {
           const stats = await getPlasticityStats(root, limit);
@@ -35292,7 +35097,7 @@ var init_brain2 = __esm({
         json: { type: "boolean", description: "Output results as JSON" }
       },
       async run({ args: _args }) {
-        const root = getProjectRoot21();
+        const root = getProjectRoot20();
         try {
           const report = await getMemoryQualityReport(root);
           cliOutput(
@@ -35341,7 +35146,7 @@ var init_brain2 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot21();
+        const root = getProjectRoot20();
         const format = args.format ?? "gexf";
         if (format !== "gexf" && format !== "json") {
           cliError(`Invalid format: ${format}. Use 'gexf' or 'json'.`, "E_VALIDATION", {
@@ -35421,7 +35226,7 @@ var briefing_exports = {};
 __export(briefing_exports, {
   briefingCommand: () => briefingCommand
 });
-import { existsSync as existsSync7, readFileSync as readFileSync7 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync7 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import { join as join7 } from "node:path";
 function resolveInjectionTemplatePath() {
@@ -35453,7 +35258,7 @@ function renderForAdapter(sectionName, content, format) {
 }
 async function runBriefingInject(sectionName, formatStr) {
   const templatePath = resolveInjectionTemplatePath();
-  if (!existsSync7(templatePath)) {
+  if (!existsSync6(templatePath)) {
     process.stderr.write(`[briefing inject] CLEO-INJECTION.md not found at ${templatePath}
 `);
     process.exitCode = 1;
@@ -35646,11 +35451,11 @@ var init_caamp = __esm({
         }
         if (args["dry-run"]) {
           const { parseCaampBlocks } = await import("@cleocode/caamp");
-          const { existsSync: existsSync16 } = await import("node:fs");
+          const { existsSync: existsSync14 } = await import("node:fs");
           const { readFile: readFile6 } = await import("node:fs/promises");
           const dryResults = [];
           for (const filePath of filePaths) {
-            if (!existsSync16(filePath)) {
+            if (!existsSync14(filePath)) {
               dryResults.push({ filePath, exists: false, blockCount: 0, wouldRemove: 0 });
               continue;
             }
@@ -35748,13 +35553,13 @@ var cant_exports = {};
 __export(cant_exports, {
   cantCommand: () => cantCommand
 });
-import { existsSync as existsSync8, mkdirSync as mkdirSync2, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname4, isAbsolute, join as join9, resolve as resolve4 } from "node:path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync2, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname4, isAbsolute, join as join9, resolve as resolve3 } from "node:path";
 function resolveFilePath(file) {
-  return isAbsolute(file) ? file : resolve4(process.cwd(), file);
+  return isAbsolute(file) ? file : resolve3(process.cwd(), file);
 }
 function ensureExists(filePath, operation) {
-  if (existsSync8(filePath)) return true;
+  if (existsSync7(filePath)) return true;
   cliError(`File not found: ${filePath}`, "E_FILE_READ");
   process.exitCode = 3;
   if (process.env["CLEO_DEBUG"]) humanWarn(`(operation: ${operation})`);
@@ -37909,7 +37714,7 @@ var daemon_exports = {};
 __export(daemon_exports, {
   daemonCommand: () => daemonCommand
 });
-import { existsSync as existsSync9 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { join as join10 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
@@ -37977,7 +37782,7 @@ async function showDaemonStatus(cleoDir, projectRoot) {
 function resolveDaemonInstallerScript() {
   const filePath = fileURLToPath3(import.meta.url);
   const candidate1 = join10(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
-  if (existsSync9(candidate1)) return candidate1;
+  if (existsSync8(candidate1)) return candidate1;
   const candidate2 = join10(
     filePath,
     "..",
@@ -38685,12 +38490,12 @@ var detect_drift_exports = {};
 __export(detect_drift_exports, {
   detectDriftCommand: () => detectDriftCommand
 });
-import { existsSync as existsSync10, readdirSync, readFileSync as readFileSync10 } from "node:fs";
+import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync10 } from "node:fs";
 import { dirname as dirname5, join as join11 } from "node:path";
 function findProjectRoot() {
   let currentDir = process.cwd();
   while (currentDir !== "/") {
-    if (existsSync10(join11(currentDir, "package.json"))) {
+    if (existsSync9(join11(currentDir, "package.json"))) {
       return currentDir;
     }
     const parent = dirname5(currentDir);
@@ -38714,7 +38519,7 @@ var init_detect_drift = __esm({
       },
       async run() {
         const projectRoot = findProjectRoot();
-        const isCleoRepo = existsSync10(join11(projectRoot, "packages", "cleo", "src"));
+        const isCleoRepo = existsSync9(join11(projectRoot, "packages", "cleo", "src"));
         const cleoSrcRoot = isCleoRepo ? join11(projectRoot, "packages", "cleo", "src") : join11(projectRoot, "src");
         const safeRead = (filePath) => {
           try {
@@ -38730,7 +38535,7 @@ var init_detect_drift = __esm({
             recommendations: []
           };
           const injPath = join11(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
-          if (existsSync10(injPath)) {
+          if (existsSync9(injPath)) {
             const content = safeRead(injPath);
             userResult.checks.push({
               name: "Agent injection",
@@ -38784,7 +38589,7 @@ var init_detect_drift = __esm({
           const specPath = join11(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
           const registryPath = join11(cleoSrcRoot, "dispatch", "registry.ts");
           const dispatchDomainsDir = join11(cleoSrcRoot, "dispatch", "domains");
-          if (!existsSync10(specPath)) {
+          if (!existsSync9(specPath)) {
             addCheck("Gateway-to-spec sync", "fail", "CLEO-OPERATION-CONSTITUTION.md missing", [
               {
                 severity: "error",
@@ -38794,7 +38599,7 @@ var init_detect_drift = __esm({
                 recommendation: "Create docs/specs/CLEO-OPERATION-CONSTITUTION.md with canonical operation definitions"
               }
             ]);
-          } else if (!existsSync10(registryPath) || !existsSync10(dispatchDomainsDir)) {
+          } else if (!existsSync9(registryPath) || !existsSync9(dispatchDomainsDir)) {
             addCheck("Gateway-to-spec sync", "fail", "Dispatch registry or domains missing", [
               {
                 severity: "error",
@@ -38854,7 +38659,7 @@ var init_detect_drift = __esm({
         try {
           const cliDir = join11(cleoSrcRoot, "cli", "commands");
           const coreDir = isCleoRepo ? join11(projectRoot, "packages", "core", "src") : join11(projectRoot, "src", "core");
-          if (!existsSync10(cliDir)) {
+          if (!existsSync9(cliDir)) {
             addCheck("CLI-to-core sync", "fail", "CLI commands directory missing", [
               {
                 severity: "error",
@@ -38863,7 +38668,7 @@ var init_detect_drift = __esm({
                 recommendation: "Verify TypeScript source structure is intact"
               }
             ]);
-          } else if (!existsSync10(coreDir)) {
+          } else if (!existsSync9(coreDir)) {
             addCheck("CLI-to-core sync", "fail", "Core directory missing", [
               {
                 severity: "error",
@@ -38881,7 +38686,7 @@ var init_detect_drift = __esm({
         }
         try {
           const domainsDir = join11(cleoSrcRoot, "dispatch", "domains");
-          if (!existsSync10(domainsDir)) {
+          if (!existsSync9(domainsDir)) {
             addCheck("Domain handler coverage", "fail", "Dispatch domains directory missing", [
               {
                 severity: "error",
@@ -38899,7 +38704,7 @@ var init_detect_drift = __esm({
         }
         try {
           const matrixPath = join11(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
-          if (!existsSync10(matrixPath)) {
+          if (!existsSync9(matrixPath)) {
             addCheck("Capability matrix", "fail", "Capability matrix missing", [
               {
                 severity: "error",
@@ -38916,7 +38721,7 @@ var init_detect_drift = __esm({
         }
         try {
           const schemaPath = join11(projectRoot, "src", "store", "schema.ts");
-          if (!existsSync10(schemaPath)) {
+          if (!existsSync9(schemaPath)) {
             addCheck("Schema validation", "fail", "Schema definition missing", [
               {
                 severity: "error",
@@ -38953,7 +38758,7 @@ var init_detect_drift = __esm({
           const visionPath = join11(projectRoot, "docs", "concepts", "CLEO-VISION.md");
           const specPath = join11(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
           const issues = [];
-          if (!existsSync10(visionPath)) {
+          if (!existsSync9(visionPath)) {
             issues.push({
               severity: "error",
               category: "vision",
@@ -38962,7 +38767,7 @@ var init_detect_drift = __esm({
               recommendation: "Create docs/concepts/CLEO-VISION.md with project vision"
             });
           }
-          if (!existsSync10(specPath)) {
+          if (!existsSync9(specPath)) {
             issues.push({
               severity: "error",
               category: "spec",
@@ -39007,7 +38812,7 @@ var init_detect_drift = __esm({
         }
         try {
           const injectionPath = join11(projectRoot, CLEO_DIR_NAME, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
-          if (!existsSync10(injectionPath)) {
+          if (!existsSync9(injectionPath)) {
             addCheck("Agent injection", "fail", "Agent injection template missing", [
               {
                 severity: "error",
@@ -39037,7 +38842,7 @@ var init_detect_drift = __esm({
         }
         try {
           const exitCodesPath = join11(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
-          if (!existsSync10(exitCodesPath)) {
+          if (!existsSync9(exitCodesPath)) {
             addCheck("Exit codes", "fail", "Exit codes definition missing", [
               {
                 severity: "error",
@@ -39211,14 +39016,14 @@ __export(docs_exports, {
   docsCommand: () => docsCommand
 });
 import { mkdir, readdir, readFile as readFile2, writeFile } from "node:fs/promises";
-import { dirname as dirname6, isAbsolute as isAbsolute2, join as join12, resolve as resolve5 } from "node:path";
+import { dirname as dirname6, isAbsolute as isAbsolute2, join as join12, resolve as resolve4 } from "node:path";
 import {
   buildDocsGraph,
   CleoError as CleoError3,
   exportDocument,
   formatError as formatError5,
   getAgentOutputsAbsolute,
-  getProjectRoot as getProjectRoot22,
+  getProjectRoot as getProjectRoot21,
   listDocVersions,
   mergeDocs,
   publishDocs,
@@ -39514,7 +39319,7 @@ var init_docs3 = __esm({
         const taskId = String(args.task);
         const includeAttachments = args["include-attachments"] !== false;
         const includeMemoryRefs = args["include-memory-refs"] === true;
-        const projectRoot = getProjectRoot22();
+        const projectRoot = getProjectRoot21();
         try {
           const result = await exportDocument({
             taskId,
@@ -39524,7 +39329,7 @@ var init_docs3 = __esm({
           });
           let writtenPath;
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
+            const outPath = isAbsolute2(args.out) ? args.out : resolve4(projectRoot, args.out);
             await mkdir(dirname6(outPath), { recursive: true });
             await writeFile(outPath, result.markdown, "utf8");
             writtenPath = outPath;
@@ -39577,7 +39382,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot22();
+        const projectRoot = getProjectRoot21();
         try {
           const result = await searchDocs2(String(args.query), {
             ownerId: args.owner ?? void 0,
@@ -39629,7 +39434,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot22();
+        const projectRoot = getProjectRoot21();
         const rawStrategy = args.strategy ?? "three-way";
         const strategy = rawStrategy === "cherry-pick" || rawStrategy === "multi-diff" ? rawStrategy : "three-way";
         try {
@@ -39638,7 +39443,7 @@ var init_docs3 = __esm({
             base: args.base ?? void 0
           });
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
+            const outPath = isAbsolute2(args.out) ? args.out : resolve4(projectRoot, args.out);
             await mkdir(dirname6(outPath), { recursive: true });
             await writeFile(outPath, result.merged, "utf8");
             humanInfo(`Wrote merged content to ${outPath}`);
@@ -39679,7 +39484,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot22();
+        const projectRoot = getProjectRoot21();
         const fmt = args.format ?? "mermaid";
         try {
           const result = await buildDocsGraph({ ownerId: String(args.for), projectRoot });
@@ -39709,7 +39514,7 @@ var init_docs3 = __esm({
             output = lines.join("\n");
           }
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
+            const outPath = isAbsolute2(args.out) ? args.out : resolve4(projectRoot, args.out);
             await mkdir(dirname6(outPath), { recursive: true });
             await writeFile(outPath, output, "utf8");
             humanInfo(`Wrote graph to ${outPath}`);
@@ -39749,7 +39554,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot22();
+        const projectRoot = getProjectRoot21();
         try {
           const result = await rankDocs({
             ownerId: String(args.for),
@@ -39788,7 +39593,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot22();
+        const projectRoot = getProjectRoot21();
         try {
           const result = await listDocVersions({
             ownerId: String(args.for),
@@ -39832,7 +39637,7 @@ var init_docs3 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot22();
+        const projectRoot = getProjectRoot21();
         try {
           const result = await publishDocs({
             ownerId: String(args.for),
@@ -40235,9 +40040,9 @@ __export(migrate_agents_v2_exports, {
   walkAgentsDir: () => walkAgentsDir
 });
 import { createHash as createHash2 } from "node:crypto";
-import { appendFileSync as appendFileSync2, existsSync as existsSync11, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync11 } from "node:fs";
+import { appendFileSync as appendFileSync2, existsSync as existsSync10, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync11 } from "node:fs";
 import { join as join13 } from "node:path";
-import { getProjectRoot as getProjectRoot23, installAgentFromCant } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot22, installAgentFromCant } from "@cleocode/core/internal";
 import { openCleoDb } from "@cleocode/core/store/open-cleo-db";
 function sha256Hex(bytes) {
   return createHash2("sha256").update(bytes).digest("hex");
@@ -40258,13 +40063,13 @@ function extractAgentName(source) {
 function appendAuditLog(projectRoot, entry) {
   const auditPath = join13(projectRoot, AUDIT_LOG_RELATIVE);
   const auditDir = join13(auditPath, "..");
-  if (!existsSync11(auditDir)) {
+  if (!existsSync10(auditDir)) {
     mkdirSync3(auditDir, { recursive: true });
   }
   appendFileSync2(auditPath, JSON.stringify(entry) + "\n", "utf8");
 }
 function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
-  if (!existsSync11(scanDir)) return;
+  if (!existsSync10(scanDir)) return;
   let files;
   try {
     files = readdirSync2(scanDir).filter((f) => f.endsWith(".cant"));
@@ -40383,7 +40188,7 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
 }
 function readMigrationConflicts(projectRoot) {
   const auditPath = join13(projectRoot, AUDIT_LOG_RELATIVE);
-  if (!existsSync11(auditPath)) return [];
+  if (!existsSync10(auditPath)) return [];
   let raw;
   try {
     raw = readFileSync11(auditPath, "utf8");
@@ -40424,7 +40229,7 @@ var init_migrate_agents_v2 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot23();
+        const projectRoot = getProjectRoot22();
         const verbose = args.quiet !== true;
         if (verbose) {
           humanInfo("Scanning .cleo/cant/agents/ and .cleo/agents/ for unregistered agents...");
@@ -40468,7 +40273,7 @@ __export(doctor_exports, {
 });
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join14 } from "node:path";
-import { getProjectRoot as getProjectRoot24, quarantineRogueCleoDir, scanRogueCleoDirs } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot23, quarantineRogueCleoDir, scanRogueCleoDirs } from "@cleocode/core/internal";
 async function scanTestFixturesInProd(projectRoot) {
   const { getDb: getDb3, getNativeDb } = await import("@cleocode/core/internal");
   await getDb3(projectRoot);
@@ -40690,7 +40495,7 @@ var init_doctor = __esm({
         try {
           if (args.brain) {
             const { computeBrainHealthDashboard } = await import("@cleocode/core/internal");
-            const projectRoot = getProjectRoot24();
+            const projectRoot = getProjectRoot23();
             const dashboard = await computeBrainHealthDashboard(projectRoot);
             cliOutput(dashboard, { command: "doctor", operation: "doctor.brain" });
             if (dashboard.hasP0Failure) {
@@ -40699,7 +40504,7 @@ var init_doctor = __esm({
             return;
           }
           if (args["scan-test-fixtures-in-prod"]) {
-            const projectRoot = getProjectRoot24();
+            const projectRoot = getProjectRoot23();
             const matches = await scanTestFixturesInProd(projectRoot);
             const dryRun = args["dry-run"] !== false && args.quarantine !== true;
             const quarantined = !dryRun && matches.length > 0 ? await quarantineTestFixtures(projectRoot, matches) : void 0;
@@ -40787,7 +40592,7 @@ var init_doctor = __esm({
             progress.complete("Comprehensive diagnostics complete");
           } else if (args["scan-rogue-cleo-dirs"]) {
             progress.step(0, "Scanning for rogue .cleo/ directories");
-            const projectRoot = getProjectRoot24();
+            const projectRoot = getProjectRoot23();
             const reports = scanRogueCleoDirs(projectRoot);
             progress.complete(
               `Found ${reports.length} rogue .cleo/ director${reports.length === 1 ? "y" : "ies"}`
@@ -40796,7 +40601,7 @@ var init_doctor = __esm({
           } else if (args["quarantine-rogue-cleo-dirs"]) {
             const isDryRun = args["dry-run"] === true;
             progress.step(0, `${isDryRun ? "[DRY RUN] " : ""}Scanning for rogue .cleo/ directories`);
-            const projectRoot = getProjectRoot24();
+            const projectRoot = getProjectRoot23();
             const reports = scanRogueCleoDirs(projectRoot);
             if (reports.length === 0) {
               progress.complete("No rogue .cleo/ directories found \u2014 nothing to quarantine");
@@ -40850,7 +40655,7 @@ var init_doctor = __esm({
             const { detectAndRemoveLegacyGlobalFiles, detectAndRemoveStrayProjectNexus } = await import("@cleocode/core/internal");
             const { getCleoHome: getCleoHome3 } = await import("@cleocode/core/internal");
             const cleoHome = getCleoHome3();
-            const projectRoot = getProjectRoot24();
+            const projectRoot = getProjectRoot23();
             const legacyResult = detectAndRemoveLegacyGlobalFiles(cleoHome);
             const strayResult = detectAndRemoveStrayProjectNexus(projectRoot);
             const isDryRun = args["dry-run"] === true;
@@ -40899,7 +40704,7 @@ var init_doctor = __esm({
               { command: "doctor", operation: "admin.health" }
             );
             try {
-              const projectRoot = getProjectRoot24();
+              const projectRoot = getProjectRoot23();
               const conflicts = readMigrationConflicts(projectRoot);
               if (conflicts.length > 0) {
                 progress.complete(
@@ -41842,9 +41647,9 @@ __export(generate_changelog_exports, {
   generateChangelogCommand: () => generateChangelogCommand
 });
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync12, mkdirSync as mkdirSync5, readFileSync as readFileSync12, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as readFileSync12, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname7, join as join17 } from "node:path";
-import { CleoError as CleoError4, formatError as formatError6, getConfigPath, getProjectRoot as getProjectRoot25 } from "@cleocode/core";
+import { CleoError as CleoError4, formatError as formatError6, getConfigPath, getProjectRoot as getProjectRoot24 } from "@cleocode/core";
 function getChangelogSource(cwd) {
   const configPath = getConfigPath(cwd);
   try {
@@ -41875,7 +41680,7 @@ function getDefaultOutputPath(platform) {
   }
 }
 function getGitHubRepoSlug(cwd) {
-  const projectRoot = getProjectRoot25(cwd);
+  const projectRoot = getProjectRoot24(cwd);
   try {
     const remoteUrl = execFileSync2("git", ["remote", "get-url", "origin"], {
       cwd: projectRoot,
@@ -42008,8 +41813,8 @@ var init_generate_changelog = __esm({
           const targetPlatform = args.platform;
           const dryRun = args["dry-run"] === true;
           const sourceFile = getChangelogSource();
-          const sourcePath = join17(getProjectRoot25(), sourceFile);
-          if (!existsSync12(sourcePath)) {
+          const sourcePath = join17(getProjectRoot24(), sourceFile);
+          if (!existsSync11(sourcePath)) {
             throw new CleoError4(4 /* NOT_FOUND */, `Changelog source not found: ${sourcePath}`);
           }
           const sourceContent = readFileSync12(sourcePath, "utf-8");
@@ -42021,7 +41826,7 @@ var init_generate_changelog = __esm({
             const outputPath = platformConfig?.path ?? getDefaultOutputPath(targetPlatform);
             const content = generateForPlatform(targetPlatform, sourceContent, repoSlug, limit);
             if (!dryRun) {
-              const fullPath = join17(getProjectRoot25(), outputPath);
+              const fullPath = join17(getProjectRoot24(), outputPath);
               mkdirSync5(dirname7(fullPath), { recursive: true });
               writeFileSync4(fullPath, content, "utf-8");
             }
@@ -42042,7 +41847,7 @@ var init_generate_changelog = __esm({
                 limit
               );
               if (!dryRun) {
-                const fullPath = join17(getProjectRoot25(), platformConfig.path);
+                const fullPath = join17(getProjectRoot24(), platformConfig.path);
                 mkdirSync5(dirname7(fullPath), { recursive: true });
                 writeFileSync4(fullPath, content, "utf-8");
               }
@@ -43181,7 +42986,7 @@ __export(init_exports, {
   getGitignoreTemplate: () => getGitignoreTemplate,
   initCommand: () => initCommand2
 });
-import { existsSync as existsSync13, readFileSync as readFileSync13 } from "node:fs";
+import { existsSync as existsSync12, readFileSync as readFileSync13 } from "node:fs";
 import { join as join18 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { CleoError as CleoError5, formatError as formatError7, initProject as initProject2 } from "@cleocode/core";
@@ -43191,8 +42996,8 @@ function getGitignoreTemplate() {
     const packageRoot = join18(thisFile, "..", "..", "..", "..");
     const localTemplatePath = join18(packageRoot, "templates", "cleo-gitignore");
     const monorepoTemplatePath = join18(packageRoot, "..", "..", "templates", "cleo-gitignore");
-    const templatePath = existsSync13(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
-    if (existsSync13(templatePath)) {
+    const templatePath = existsSync12(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
+    if (existsSync12(templatePath)) {
       return readFileSync13(templatePath, "utf-8");
     }
   } catch {
@@ -44079,7 +43884,7 @@ var llm_cost_exports = {};
 __export(llm_cost_exports, {
   costCommand: () => costCommand
 });
-import { getProjectRoot as getProjectRoot26 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot25 } from "@cleocode/core/internal";
 import { computeCost } from "@cleocode/core/llm/usage-pricing";
 function resolveSessionId(raw) {
   if (raw === "current") {
@@ -44152,7 +43957,7 @@ var init_llm_cost = __esm({
           process.exit(6);
         }
         const sessionId = resolveSessionId(rawSessionId);
-        const projectRoot = getProjectRoot26(process.cwd());
+        const projectRoot = getProjectRoot25(process.cwd());
         let breakdown;
         try {
           breakdown = await loadSessionCostBreakdown(projectRoot, sessionId);
@@ -44315,7 +44120,7 @@ async function _headlessPkceFlow(provider, authUrl) {
     `  After approving, paste the full redirect URL (http://localhost?code=\u2026&state=\u2026):
   `
   );
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve5, reject) => {
     let buf = "";
     process.stdin.setEncoding("utf8");
     process.stdin.once("data", (chunk) => {
@@ -44327,7 +44132,7 @@ async function _headlessPkceFlow(provider, authUrl) {
           reject(new Error('Redirect URL is missing the "code" parameter'));
           return;
         }
-        resolve7(code);
+        resolve5(code);
       } catch {
         reject(new Error(`Invalid redirect URL: ${buf}`));
       }
@@ -44335,7 +44140,7 @@ async function _headlessPkceFlow(provider, authUrl) {
   });
 }
 async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve5) => {
     const server = createServer((req, res) => {
       const url = new URL(req.url ?? "/", `http://localhost:${port}`);
       const code = url.searchParams.get("code");
@@ -44345,7 +44150,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       if (error) {
         res.end(`<h1>Authorization failed</h1><p>${error}</p><p>You may close this tab.</p>`);
         server.close();
-        resolve7({
+        resolve5({
           error: {
             code: "E_PKCE_AUTH_DENIED",
             codeName: "E_PKCE_AUTH_DENIED",
@@ -44357,7 +44162,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       if (!code || state !== expectedState) {
         res.end("<h1>Invalid callback</h1><p>You may close this tab.</p>");
         server.close();
-        resolve7({
+        resolve5({
           error: {
             code: "E_PKCE_INVALID_CALLBACK",
             codeName: "E_PKCE_INVALID_CALLBACK",
@@ -44368,7 +44173,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       }
       res.end("<h1>Authorized</h1><p>You may close this tab and return to your terminal.</p>");
       server.close();
-      resolve7({ code });
+      resolve5({ code });
     });
     server.listen(port, "localhost", () => {
       process.stderr.write("\n");
@@ -44501,7 +44306,7 @@ function _generateState() {
   return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
 function _findFreePort() {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve5, reject) => {
     const srv = createServer();
     srv.listen(0, "localhost", () => {
       const addr = srv.address();
@@ -44511,7 +44316,7 @@ function _findFreePort() {
         return;
       }
       const port = addr.port;
-      srv.close(() => resolve7(port));
+      srv.close(() => resolve5(port));
     });
     srv.on("error", reject);
   });
@@ -44978,14 +44783,14 @@ async function readStdin() {
   if (process.stdin.isTTY) {
     return "";
   }
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve5, reject) => {
     let data = "";
     process.stdin.setEncoding("utf-8");
     process.stdin.on("data", (chunk) => {
       data += chunk;
     });
     process.stdin.on("end", () => {
-      resolve7(data.trim());
+      resolve5(data.trim());
     });
     process.stdin.on("error", reject);
   });
@@ -45337,14 +45142,14 @@ __export(memory_exports, {
   memoryCommand: () => memoryCommand
 });
 import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync14, mkdirSync as mkdirSync6, readdirSync as readdirSync3, readFileSync as readFileSync14, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync6, readdirSync as readdirSync3, readFileSync as readFileSync14, writeFileSync as writeFileSync5 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { join as join19 } from "node:path";
 import {
   getBrainDb as getBrainDb2,
   getBrainNativeDb as getBrainNativeDb3,
   getDreamStatus,
-  getProjectRoot as getProjectRoot27,
+  getProjectRoot as getProjectRoot26,
   runConsolidation,
   triggerManualDream
 } from "@cleocode/core/internal";
@@ -45380,7 +45185,7 @@ ${body}`).digest("hex").slice(0, 16);
 }
 function loadImportHashes(stateFile) {
   try {
-    if (!existsSync14(stateFile)) return /* @__PURE__ */ new Set();
+    if (!existsSync13(stateFile)) return /* @__PURE__ */ new Set();
     const raw = readFileSync14(stateFile, "utf-8");
     const parsed = JSON.parse(raw);
     return new Set(parsed.hashes);
@@ -45390,7 +45195,7 @@ function loadImportHashes(stateFile) {
 }
 function saveImportHashes(stateFile, hashes) {
   const dir = stateFile.slice(0, stateFile.lastIndexOf("/"));
-  if (!existsSync14(dir)) mkdirSync6(dir, { recursive: true });
+  if (!existsSync13(dir)) mkdirSync6(dir, { recursive: true });
   writeFileSync5(stateFile, JSON.stringify({ hashes: [...hashes] }, null, 2), "utf-8");
 }
 function makeMemorySubcommand(opts) {
@@ -45410,7 +45215,7 @@ function makeMemorySubcommand(opts) {
     }
   });
 }
-var storeCommand, findCommand5, statsCommand4, observeCommand, timelineCommand, fetchCommand2, decisionFindCommand, decisionStoreCommand, linkCommand, traceCommand, relatedCommand, contextCommand3, graphStatsCommand, graphShowCommand, graphNeighborsCommand, graphAddCommand, graphRemoveCommand, reasonWhyCommand, reasonSimilarCommand, searchHybridCommand, codeLinksCommand, codeAutoLinkCommand, codeMemoriesForCodeCommand, codeForMemoryCommand, consolidateCommand, dreamCommand, reflectCommand, dedupScanCommand, importCommand3, doctorCommand3, llmStatusCommand, verifyCommand, pendingVerifyCommand, tierStatsCommand, tierPromoteCommand, tierDemoteCommand, precompactFlushCommand, backfillRunCommand, backfillApproveCommand, backfillRollbackCommand, backfillCommand2, digestCommand, recentCommand, diaryReadCommand, diaryWriteCommand, diaryCommand, watchCommand2, tierCommand, sweepCommand, memoryCommand;
+var storeCommand, findCommand5, statsCommand4, observeCommand, timelineCommand, fetchCommand2, decisionFindCommand, decisionStoreCommand, linkCommand, traceCommand, relatedCommand, contextCommand3, graphStatsCommand, graphShowCommand, graphNeighborsCommand, graphAddCommand, graphRemoveCommand, reasonWhyCommand, reasonSimilarCommand, searchHybridCommand, codeLinksCommand, codeAutoLinkCommand, codeMemoriesForCodeCommand, codeForMemoryCommand, consolidateCommand, dreamCommand, reflectCommand, dedupScanCommand, importCommand3, doctorCommand3, llmStatusCommand, verifyCommand, pendingVerifyCommand, tierStatsCommand, tierPromoteCommand, tierDemoteCommand, precompactFlushCommand, backfillRunCommand, backfillApproveCommand, backfillRollbackCommand, backfillCommand, digestCommand, recentCommand, diaryReadCommand, diaryWriteCommand, diaryCommand, watchCommand2, tierCommand, sweepCommand, memoryCommand;
 var init_memory3 = __esm({
   "packages/cleo/src/cli/commands/memory.ts"() {
     "use strict";
@@ -46305,7 +46110,7 @@ var init_memory3 = __esm({
       },
       args: {},
       async run() {
-        const root = getProjectRoot27();
+        const root = getProjectRoot26();
         try {
           const result = await runConsolidation(root);
           cliOutput(result, { command: "memory-consolidate", operation: "memory.consolidate" });
@@ -46329,7 +46134,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot26();
         if (args.status) {
           try {
             const status = await getDreamStatus(root);
@@ -46366,7 +46171,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot26();
         try {
           const { runObserver, runReflector } = await import("@cleocode/core/internal");
           const observerResult = await runObserver(root, args.session, {
@@ -46406,7 +46211,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot26();
         try {
           const { getBrainDb: getBrainDbInner, getBrainNativeDb: getBrainNativeDbInner } = await import("@cleocode/core/internal");
           await getBrainDbInner(root);
@@ -46504,9 +46309,9 @@ var init_memory3 = __esm({
       async run({ args }) {
         const sourceDir = args.from ?? join19(homedir6(), ".claude", "projects", "-mnt-projects-cleocode", "memory");
         const isDryRun = !!args["dry-run"];
-        const projectRoot = getProjectRoot27();
+        const projectRoot = getProjectRoot26();
         const stateFile = join19(projectRoot, CLEO_DIR_NAME, MIGRATE_MEMORY_HASHES_JSON);
-        if (!existsSync14(sourceDir)) {
+        if (!existsSync13(sourceDir)) {
           cliError(`Source directory not found: ${sourceDir}`, "E_NOT_FOUND", { name: "E_NOT_FOUND" });
           process.exit(1);
           return;
@@ -46717,7 +46522,7 @@ var init_memory3 = __esm({
       },
       args: {},
       async run() {
-        const root = getProjectRoot27();
+        const root = getProjectRoot26();
         try {
           await getBrainDb2(root);
           const nativeDb = getBrainNativeDb3();
@@ -46816,7 +46621,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot26();
         const targetTier = args.to;
         const reason = args.reason;
         const validTiers = ["medium", "long"];
@@ -46920,7 +46725,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot27();
+        const root = getProjectRoot26();
         const targetTier = args.to;
         const reason = args.reason;
         const validTiers = ["short", "medium"];
@@ -47079,7 +46884,7 @@ var init_memory3 = __esm({
         runId: args["runId"]
       })
     });
-    backfillCommand2 = defineCommand({
+    backfillCommand = defineCommand({
       meta: {
         name: "backfill",
         description: "Staged brain-graph backfill operations: run, approve, rollback (T1003)."
@@ -47307,8 +47112,8 @@ data: ${JSON.stringify(event)}
             cursor = data.nextCursor;
           }
           if (!running) break;
-          await new Promise((resolve7) => {
-            const timer = setTimeout(resolve7, intervalMs);
+          await new Promise((resolve5) => {
+            const timer = setTimeout(resolve5, intervalMs);
             timer.unref?.();
           });
         }
@@ -47412,7 +47217,7 @@ data: ${JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString() })}
         tier: tierCommand,
         // T1013 — new memory subcommands
         "precompact-flush": precompactFlushCommand,
-        backfill: backfillCommand2,
+        backfill: backfillCommand,
         digest: digestCommand,
         recent: recentCommand,
         diary: diaryCommand,
@@ -47434,7 +47239,7 @@ var migrate_claude_mem_exports = {};
 __export(migrate_claude_mem_exports, {
   migrateClaudeMemCommand: () => migrateClaudeMemCommand
 });
-import { getProjectRoot as getProjectRoot28, migrateClaudeMem } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot27, migrateClaudeMem } from "@cleocode/core/internal";
 import { ingestLooseAgentOutputs, ingestRcasdDirectories } from "@cleocode/core/memory";
 import { getDb as getDb2 } from "@cleocode/core/store/sqlite";
 var storageCommand, claudeMemCommand, manifestIngestCommand, migrateClaudeMemCommand;
@@ -47497,7 +47302,7 @@ var init_migrate_claude_mem = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot28();
+        const root = getProjectRoot27();
         try {
           const result = await migrateClaudeMem(root, {
             sourcePath: args.source,
@@ -47546,7 +47351,7 @@ var init_migrate_claude_mem = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot28();
+        const projectRoot = getProjectRoot27();
         try {
           const db = await getDb2(projectRoot);
           const rcasdFlag = Boolean(args.rcasd);
@@ -48491,7 +48296,7 @@ var init_nexus4 = __esm({
         const repoPath = args.path ? path4.resolve(args.path) : process.cwd();
         humanInfo(`[nexus] Analyzing: ${repoPath}${isIncremental ? " (incremental)" : ""}`);
         try {
-          const [{ getNexusDb, nexusSchema }, { runPipeline }, { getProjectRoot: getProjectRoot35 }, { eq: eq2 }] = await Promise.all([
+          const [{ getNexusDb, nexusSchema }, { runPipeline }, { getProjectRoot: getProjectRoot33 }, { eq: eq2 }] = await Promise.all([
             import("@cleocode/core/store/nexus-sqlite"),
             import("@cleocode/nexus/pipeline"),
             import("@cleocode/core/internal"),
@@ -48571,7 +48376,7 @@ var init_nexus4 = __esm({
               extensions: { duration_ms: durationMs }
             }
           );
-          void getProjectRoot35;
+          void getProjectRoot33;
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
           cliError(
@@ -48889,13 +48694,13 @@ var init_nexus4 = __esm({
           if (!skipPrompt) {
             const { createInterface: createInterface2 } = await import("node:readline");
             const rl = createInterface2({ input: process.stdin, output: process.stdout });
-            const confirmed = await new Promise((resolve7) => {
+            const confirmed = await new Promise((resolve5) => {
               rl.question(
                 `
 [nexus] Delete ${matchCount} project(s) from the registry? [y/N] `,
                 (answer) => {
                   rl.close();
-                  resolve7(answer.trim().toLowerCase() === "y");
+                  resolve5(answer.trim().toLowerCase() === "y");
                 }
               );
             });
@@ -52173,7 +51978,7 @@ var refresh_memory_exports = {};
 __export(refresh_memory_exports, {
   refreshMemoryCommand: () => refreshMemoryCommand
 });
-import { getProjectRoot as getProjectRoot29 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot28 } from "@cleocode/core";
 var refreshMemoryCommand;
 var init_refresh_memory = __esm({
   "packages/cleo/src/cli/commands/refresh-memory.ts"() {
@@ -52186,7 +51991,7 @@ var init_refresh_memory = __esm({
         description: "Regenerate .cleo/memory-bridge.md from brain.db"
       },
       async run() {
-        const projectDir = getProjectRoot29();
+        const projectDir = getProjectRoot28();
         const { writeMemoryBridge } = await import("@cleocode/core/internal");
         const result = await writeMemoryBridge(projectDir);
         if (result.written) {
@@ -53496,7 +53301,7 @@ __export(restore_exports, {
 import fs3 from "node:fs";
 import path5 from "node:path";
 import { CleoError as CleoError8, getTaskAccessor as getTaskAccessor3 } from "@cleocode/core";
-import { getProjectRoot as getProjectRoot30 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot29 } from "@cleocode/core/internal";
 function parseMarkdownValue(raw) {
   const trimmed = raw.trim();
   if (trimmed === "_(not present)_" || trimmed === "") return void 0;
@@ -53616,7 +53421,7 @@ var init_restore = __esm({
         description: "Apply manually-resolved conflicts from .cleo/restore-conflicts.md"
       },
       async run() {
-        const projectRoot = getProjectRoot30();
+        const projectRoot = getProjectRoot29();
         const reportPath = path5.join(projectRoot, CLEO_DIR_NAME, RESTORE_CONFLICTS_MD);
         if (!fs3.existsSync(reportPath)) {
           humanLine("No pending restore conflicts. Nothing to finalize.");
@@ -54514,11 +54319,11 @@ async function runPostUpdateDiagnostics(opts) {
         input: process.stdin,
         output: process.stdout
       });
-      shouldMigrate = await new Promise((resolve7) => {
+      shouldMigrate = await new Promise((resolve5) => {
         rl.question("  Do you want to run the upgrade now? [Y/n] ", (answer) => {
           rl.close();
           const clean = answer.trim().toLowerCase();
-          resolve7(clean === "" || clean === "y" || clean === "yes");
+          resolve5(clean === "" || clean === "y" || clean === "yes");
         });
       });
     }
@@ -55591,7 +55396,7 @@ var sequence_exports = {};
 __export(sequence_exports, {
   sequenceCommand: () => sequenceCommand
 });
-import { getProjectRoot as getProjectRoot31 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot30 } from "@cleocode/core/internal";
 var showCommand12, checkCommand6, repairCommand, sequenceCommand;
 var init_sequence = __esm({
   "packages/cleo/src/cli/commands/sequence.ts"() {
@@ -55627,7 +55432,7 @@ var init_sequence = __esm({
       meta: { name: "repair", description: "Reset counter to max + 1 if behind" },
       async run() {
         const { repairSequence } = await import("@cleocode/core/internal");
-        const projectRoot = getProjectRoot31();
+        const projectRoot = getProjectRoot30();
         const repair = await repairSequence(projectRoot);
         const result = {
           repaired: repair.repaired,
@@ -55681,7 +55486,7 @@ async function promptOwnerAuthPassword(sessionName) {
     terminal: true
   });
   process.stderr.write(`[cleo] Enter owner-auth password for session "${sessionName}": `);
-  const password = await new Promise((resolve7) => {
+  const password = await new Promise((resolve5) => {
     if (process.stdin.setRawMode) {
       process.stdin.setRawMode(
         true
@@ -55699,10 +55504,10 @@ async function promptOwnerAuthPassword(sessionName) {
           );
         }
         process.stderr.write("\n");
-        resolve7(pw);
+        resolve5(pw);
       } else if (ch === "") {
         process.stderr.write("\n[cleo] Cancelled.\n");
-        resolve7("");
+        resolve5("");
       } else if (ch === "\x7F" || ch === "\b") {
         pw = pw.slice(0, -1);
       } else {
@@ -56070,8 +55875,8 @@ var init_session4 = __esm({
         "audit-scope": { type: "string", description: "Audit log scope (global|local)" }
       },
       async run({ args }) {
-        const { detectSessionDrift, getProjectRoot: getProjectRoot35 } = await import("@cleocode/core");
-        const projectRoot = await getProjectRoot35();
+        const { detectSessionDrift, getProjectRoot: getProjectRoot33 } = await import("@cleocode/core");
+        const projectRoot = await getProjectRoot33();
         const scope = args["audit-scope"] === "local" ? "local" : "global";
         const report = await detectSessionDrift({ projectRoot, auditScope: scope });
         cliOutput(report, { command: "session drift", operation: "session.drift" });
@@ -57579,7 +57384,7 @@ __export(token_exports, {
   tokenCommand: () => tokenCommand
 });
 import { readFileSync as readFileSync15 } from "node:fs";
-import { getProjectRoot as getProjectRoot32, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot31, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
 function readPayload(args, textKey, fileKey) {
   const text = args[textKey];
   const file = args[fileKey];
@@ -57743,7 +57548,7 @@ var init_token = __esm({
           domain: args.domain,
           operation: args.operation
         };
-        const result = args.record ? await recordTokenExchange2(getProjectRoot32(), input) : await measureTokenExchange(input);
+        const result = args.record ? await recordTokenExchange2(getProjectRoot31(), input) : await measureTokenExchange(input);
         cliOutput(result, {
           command: "token",
           operation: args.record ? "admin.token.record" : "token.estimate"
@@ -57779,7 +57584,7 @@ __export(transcript_exports, {
 });
 import { homedir as homedir8 } from "node:os";
 import { join as join23 } from "node:path";
-import { getProjectRoot as getProjectRoot33 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot32 } from "@cleocode/core";
 import {
   parseDurationMs,
   pruneTranscripts,
@@ -57809,7 +57614,7 @@ var init_transcript = __esm({
       async run({ args }) {
         if (args.pending) {
           try {
-            const projectRoot = getProjectRoot33();
+            const projectRoot = getProjectRoot32();
             const { scanPendingTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
             const pending = await scanPendingTranscripts(projectRoot);
             cliOutput(
@@ -57906,7 +57711,7 @@ var init_transcript = __esm({
       async run({ args }) {
         const tier = args.tier ?? "warm";
         const dryRun = args["dry-run"] ?? false;
-        const projectRoot = getProjectRoot33();
+        const projectRoot = getProjectRoot32();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { findSessionTranscriptPath, listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -58018,7 +57823,7 @@ var init_transcript = __esm({
         const dryRun = args["dry-run"] ?? false;
         const olderThanHours = args["older-than-hours"] ? Number.parseInt(args["older-than-hours"], 10) : 24;
         const limit = args.limit ? Number.parseInt(args.limit, 10) : void 0;
-        const projectRoot = getProjectRoot33();
+        const projectRoot = getProjectRoot32();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -58376,6 +58181,23 @@ var init_update = __esm({
         "depends-waiver": {
           type: "string",
           description: "Justification for promoting a task to critical priority without --depends (T1856). Records waiver in task metadata."
+        },
+        /**
+         * Related tasks — semantic relationships (non-dependency).
+         * Comma-separated task IDs with optional type suffix (e.g. "T001:blocks,T002").
+         * Default type is 'related'. Replaces existing relates list.
+         */
+        relates: {
+          type: "string",
+          description: 'Set related tasks (comma-separated, optional type suffix: "T001:blocks,T002")'
+        },
+        "add-relates": {
+          type: "string",
+          description: "Add related tasks without overwriting existing (comma-separated, optional type suffix)"
+        },
+        "remove-relates": {
+          type: "string",
+          description: "Remove related tasks by taskId (comma-separated)"
         }
       },
       async run({ args, cmd }) {
@@ -58401,6 +58223,21 @@ var init_update = __esm({
           params["addDepends"] = args["add-depends"].split(",").map((s) => s.trim());
         if (args["remove-depends"])
           params["removeDepends"] = args["remove-depends"].split(",").map((s) => s.trim());
+        if (args.relates) {
+          params["relates"] = args.relates.split(",").map((s) => {
+            const [taskId, relType = "related"] = s.trim().split(":");
+            return { taskId: taskId.trim(), type: relType.trim() };
+          });
+        }
+        if (args["add-relates"]) {
+          params["addRelates"] = args["add-relates"].split(",").map((s) => {
+            const [taskId, relType = "related"] = s.trim().split(":");
+            return { taskId: taskId.trim(), type: relType.trim() };
+          });
+        }
+        if (args["remove-relates"]) {
+          params["removeRelates"] = args["remove-relates"].split(",").map((s) => s.trim());
+        }
         if (args.notes !== void 0) params["notes"] = args.notes;
         if (args.note !== void 0) params["notes"] = params["notes"] ?? args.note;
         if (args.acceptance)
@@ -58612,124 +58449,14 @@ var init_upgrade = __esm({
 // packages/cleo/src/cli/commands/verify.ts
 var verify_exports = {};
 __export(verify_exports, {
-  backfillCommand: () => backfillCommand3,
   verifyCommand: () => verifyCommand3
 });
-import { existsSync as existsSync15 } from "node:fs";
-import { resolve as resolve6 } from "node:path";
-import {
-  backfillAllPendingVerifiers,
-  backfillVerifier,
-  getProjectRoot as getProjectRoot34,
-  resolveVerifierScript as resolveVerifierScript2,
-  runVerifier
-} from "@cleocode/core";
-async function runBackfillSingle(taskId, projectRoot, force) {
-  const response = await dispatchRaw("query", "tasks", "show", { taskId });
-  if (!response.success) {
-    process.stderr.write(
-      `Error: could not fetch task ${taskId}: ${response.error?.message ?? "unknown error"}
-`
-    );
-    process.exitCode = 1;
-    return;
-  }
-  const task = response.data?.task;
-  if (!task) {
-    process.stderr.write(`Error: task ${taskId} not found.
-`);
-    process.exitCode = 1;
-    return;
-  }
-  const result = backfillVerifier(task, projectRoot, force);
-  if (result.status === "generated") {
-    cliOutput(result, { command: "verify", operation: "verify.scaffold" });
-  } else if (result.status === "skipped") {
-    process.stderr.write(
-      `Error: verifier already exists: ${result.path}
-  Use --force to overwrite. (T9218 idempotency guard)
-`
-    );
-    process.exitCode = 1;
-  } else {
-    process.stderr.write(`Error generating verifier for ${taskId}: ${result.error}
-`);
-    process.exitCode = 1;
-  }
-}
-async function runBackfillAll(projectRoot, force) {
-  const seen = /* @__PURE__ */ new Set();
-  const pending = [];
-  const queries = [
-    dispatchRaw("query", "tasks", "list", { priority: "critical", limit: 200 }),
-    dispatchRaw("query", "tasks", "list", { size: "large", limit: 200 }),
-    dispatchRaw("query", "tasks", "list", { type: "epic", limit: 200 })
-  ];
-  const results = await Promise.all(queries);
-  for (const response of results) {
-    if (!response.success) continue;
-    const tasks = response.data?.tasks ?? [];
-    for (const t of tasks) {
-      const id = String(t.id ?? "");
-      if (!id || seen.has(id)) continue;
-      seen.add(id);
-      pending.push(t);
-    }
-  }
-  const summary = backfillAllPendingVerifiers(pending, projectRoot, force);
-  if (summary.succeeded === 0 && summary.failed === 0 && summary.skipped === 0) {
-    cliOutput(
-      { message: "All critical/large/epic tasks already have verifier scripts. Nothing to do." },
-      { command: "verify", operation: "verify.scaffold-all" }
-    );
-    return;
-  }
-  cliOutput(summary, { command: "verify", operation: "verify.scaffold-all" });
-  if (summary.failed > 0) {
-    process.exitCode = 1;
-  }
-}
-var backfillCommand3, verifyCommand3;
+var verifyCommand3;
 var init_verify = __esm({
   "packages/cleo/src/cli/commands/verify.ts"() {
     "use strict";
     init_dist();
     init_cli();
-    init_renderers();
-    backfillCommand3 = defineCommand({
-      meta: {
-        name: "backfill",
-        description: "Auto-generate a verifier stub from AC text for a task lacking one (T9218 / ADR-070)"
-      },
-      args: {
-        taskId: {
-          type: "positional",
-          description: "Task ID to generate a verifier stub for (e.g. T9213). Omit when using --all-pending.",
-          required: false
-        },
-        "all-pending": {
-          type: "boolean",
-          description: "Process all critical/large/epic tasks that lack a verifier script (T9218)"
-        },
-        force: {
-          type: "boolean",
-          description: "Overwrite an existing verifier without error (idempotency override)"
-        }
-      },
-      async run({ args, cmd }) {
-        const projectRoot = getProjectRoot34();
-        const force = !!args.force;
-        if (args["all-pending"]) {
-          await runBackfillAll(projectRoot, force);
-          return;
-        }
-        if (!args.taskId) {
-          await showUsage(cmd);
-          return;
-        }
-        await runBackfillSingle(String(args.taskId), projectRoot, force);
-      }
-    });
     verifyCommand3 = defineCommand({
       meta: { name: "verify", description: "View or modify verification gates for a task" },
       args: {
@@ -58770,11 +58497,6 @@ var init_verify = __esm({
         "shared-evidence": {
           type: "boolean",
           description: "Acknowledge that the same evidence atom is applied to >3 distinct tasks in this session (T1502 / ADR-059). Without this flag, such reuse triggers a warning; in strict mode (CLEO_STRICT_EVIDENCE=1) it is a hard reject."
-        },
-        "acceptance-check": {
-          type: "string",
-          description: "Run the task acceptance verifier before any gate write. Resolves scripts/verify-<taskId>-fu.mjs (or pass an explicit path). Blocks if verifier exits non-zero. (T9192 / ADR-070)",
-          required: false
         }
       },
       async run({ args, cmd }) {
@@ -58782,67 +58504,6 @@ var init_verify = __esm({
           await showUsage(cmd);
           return;
         }
-        if (args.taskId === "backfill") {
-          const remainingArgs = process.argv.slice(process.argv.indexOf("backfill") + 1);
-          const taskIdArg = remainingArgs.find((a) => !a.startsWith("-"));
-          const allPending = remainingArgs.includes("--all-pending");
-          const force = remainingArgs.includes("--force");
-          const projectRoot = getProjectRoot34();
-          if (allPending) {
-            await runBackfillAll(projectRoot, force);
-          } else if (taskIdArg) {
-            await runBackfillSingle(taskIdArg, projectRoot, force);
-          } else {
-            await showUsage(cmd);
-          }
-          return;
-        }
-        const acceptanceCheckRaw = args["acceptance-check"];
-        const shouldRunAcceptanceCheck = acceptanceCheckRaw !== void 0 && acceptanceCheckRaw !== false;
-        if (shouldRunAcceptanceCheck) {
-          const projectRoot = resolve6(process.cwd());
-          let verifierPath = null;
-          if (typeof acceptanceCheckRaw === "string" && acceptanceCheckRaw.length > 0) {
-            const explicit = resolve6(projectRoot, acceptanceCheckRaw);
-            verifierPath = existsSync15(explicit) ? explicit : null;
-            if (!verifierPath) {
-              process.stderr.write(
-                `Error: --acceptance-check path not found: ${explicit}
-  T9192 / ADR-070: verifier script must exist before gate writes are allowed.
-`
-              );
-              process.exitCode = 1;
-              return;
-            }
-          } else {
-            verifierPath = resolveVerifierScript2(String(args.taskId), projectRoot);
-          }
-          if (!verifierPath) {
-            process.stderr.write(
-              `Error: --acceptance-check: no verifier script found for ${args.taskId}.
-  Looked for: scripts/verify-${args.taskId}-fu.mjs, scripts/verify-${args.taskId}.mjs
-  T9192 / ADR-070: create the verifier script before using --acceptance-check.
-`
-            );
-            process.exitCode = 1;
-            return;
-          }
-          const { exitCode, stdout, stderr: stderr2 } = runVerifier(verifierPath);
-          process.stdout.write(stdout);
-          if (stderr2) process.stderr.write(stderr2);
-          if (exitCode !== 0) {
-            process.stderr.write(
-              `
-E_ACCEPTANCE_VERIFIER_FAILED: verifier exited ${exitCode}.
-  Verifier: ${verifierPath}
-  Gate writes blocked until verifier exits 0. (T9192 / ADR-070)
-`
-            );
-            process.exitCode = exitCode;
-            return;
-          }
-          humanLine("Verifier passed (exit 0). Proceeding with gate operation.");
-        }
         const isWrite = !!(args.gate || args.all || args.reset);
         const useExplain = !isWrite && args.explain === true;
         const operation = isWrite ? "gate.set" : useExplain ? "verify.explain" : "gate.status";
@@ -58979,7 +58640,7 @@ Logs: ${logFile}`
       }
     } catch {
     }
-    await new Promise((resolve7) => setTimeout(resolve7, 500));
+    await new Promise((resolve5) => setTimeout(resolve5, 500));
   }
   if (!started) {
     try {
@@ -59056,7 +58717,7 @@ var init_web = __esm({
           }
           for (let i = 0; i < 60; i++) {
             if (!isProcessRunning(status.pid)) break;
-            await new Promise((resolve7) => setTimeout(resolve7, 500));
+            await new Promise((resolve5) => setTimeout(resolve5, 500));
           }
           if (isProcessRunning(status.pid)) {
             try {
@@ -59108,7 +58769,7 @@ var init_web = __esm({
             }
             for (let i = 0; i < 60; i++) {
               if (!isProcessRunning(status.pid)) break;
-              await new Promise((resolve7) => setTimeout(resolve7, 500));
+              await new Promise((resolve5) => setTimeout(resolve5, 500));
             }
             if (isProcessRunning(status.pid)) {
               try {
@@ -59274,12 +58935,6 @@ var COMMAND_MANIFEST = [
     description: "Git-backed audit tooling (lineage reconstruction, integrity checks). ",
     load: async () => (await Promise.resolve().then(() => (init_audit2(), audit_exports))).auditCommand
   },
-  {
-    exportName: "backfillCommand",
-    name: "backfill",
-    description: "Retroactively add acceptance criteria and verification metadata to existing tasks",
-    load: async () => (await Promise.resolve().then(() => (init_backfill(), backfill_exports))).backfillCommand
-  },
   {
     exportName: "backupInspectSubCommand",
     name: "inspect",
@@ -59946,12 +59601,6 @@ var COMMAND_MANIFEST = [
     description: "Unified project maintenance (storage migration, schema repair, structural fixes, doc refresh)",
     load: async () => (await Promise.resolve().then(() => (init_upgrade(), upgrade_exports))).upgradeCommand
   },
-  {
-    exportName: "backfillCommand",
-    name: "backfill",
-    description: "Auto-generate a verifier stub from AC text for a task lacking one (T9218 / ADR-070)",
-    load: async () => (await Promise.resolve().then(() => (init_verify(), verify_exports))).backfillCommand
-  },
   {
     exportName: "verifyCommand",
     name: "verify",
@@ -60401,7 +60050,7 @@ async function runStartupMaintenance() {
     detectAndRemoveStrayProjectNexus,
     getGlobalSalt,
     getLogger: getLogger17,
-    getProjectRoot: getProjectRoot35,
+    getProjectRoot: getProjectRoot33,
     isCleanupMarkerSet,
     migrateSignaldockToConduit,
     needsSignaldockToConduitMigration,
@@ -60410,7 +60059,7 @@ async function runStartupMaintenance() {
   } = await import("@cleocode/core/internal");
   let projectRootForCleanup = "";
   try {
-    projectRootForCleanup = getProjectRoot35();
+    projectRootForCleanup = getProjectRoot33();
   } catch {
   }
   if (!isCleanupMarkerSet(CLI_VERSION, projectRootForCleanup)) {
@@ -60430,7 +60079,7 @@ async function runStartupMaintenance() {
   const isInitInvocation = process.argv.slice(2).some((a) => a === "init");
   if (!isInitInvocation) {
     try {
-      const _projectRootForMigration = getProjectRoot35();
+      const _projectRootForMigration = getProjectRoot33();
       if (needsSignaldockToConduitMigration(_projectRootForMigration)) {
         const migrationResult = migrateSignaldockToConduit(_projectRootForMigration);
         if (migrationResult.status === "failed") {