@cleocode/cleo 2026.5.88 → 2026.5.90

package/dist/cli/index.js

@@ -7324,6 +7324,31 @@ var init_registry = __esm({
           }
         ]
       },
+      // T9742 — skill.migrate: legacy XDG store → ~/.cleo/skills/
+      {
+        gateway: "mutate",
+        domain: "tools",
+        operation: "skill.migrate",
+        description: "tools.skill.migrate (mutate) \u2014 migrate ~/.local/share/agents/skills into ~/.cleo/skills (SSoT); supports --dry-run preview + --rollback restore",
+        tier: 2,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: [],
+        params: [
+          {
+            name: "dryRun",
+            type: "boolean",
+            required: false,
+            description: "Preview the plan without writing anything"
+          },
+          {
+            name: "rollback",
+            type: "boolean",
+            required: false,
+            description: "Restore the legacy tree from the most recent backup tarball"
+          }
+        ]
+      },
       // T9690 — skill.stats: Sphere B telemetry rollup
       {
         gateway: "query",
@@ -26037,16 +26062,16 @@ async function orchestrateRejectOp(params) {
 async function orchestrateClassify(request, context, projectRoot) {
   try {
     const { getCleoCantWorkflowsDir } = await import("@cleocode/core/internal");
-    const { readFileSync: readFileSync19, readdirSync: readdirSync4, existsSync: existsSync18 } = await import("node:fs");
+    const { readFileSync: readFileSync18, readdirSync: readdirSync4, existsSync: existsSync17 } = await import("node:fs");
     const { join: join33 } = await import("node:path");
     const workflowsDir = getCleoCantWorkflowsDir();
     const combined = `${request} ${context ?? ""}`.toLowerCase();
     const matches = [];
-    if (existsSync18(workflowsDir)) {
+    if (existsSync17(workflowsDir)) {
       const files = readdirSync4(workflowsDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync19(join33(workflowsDir, file), "utf-8");
+          const src = readFileSync18(join33(workflowsDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -26062,11 +26087,11 @@ async function orchestrateClassify(request, context, projectRoot) {
       }
     }
     const localCantDir = join33(projectRoot, CLEO_DIR_NAME, WORKFLOWS_SUBDIR);
-    if (existsSync18(localCantDir)) {
+    if (existsSync17(localCantDir)) {
       const files = readdirSync4(localCantDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync19(join33(localCantDir, file), "utf-8");
+          const src = readFileSync18(join33(localCantDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -29913,6 +29938,7 @@ import {
   toolsSkillImportHermes,
   toolsSkillInstall,
   toolsSkillList,
+  toolsSkillMigrate,
   toolsSkillPrecedenceResolve,
   toolsSkillPrecedenceShow,
   toolsSkillPruneTelemetry,
@@ -30016,6 +30042,7 @@ var init_tools = __esm({
             "skill.uninstall",
             "skill.refresh",
             "skill.import.hermes",
+            "skill.migrate",
             "skill.prune.telemetry",
             // provider
             "provider.inject",
@@ -30301,6 +30328,14 @@ var init_tools = __esm({
             const result = await toolsSkillImportHermes({ hermesHome, dryRun });
             return wrapResult(result, "mutate", "tools", "skill.import.hermes", startTime);
           }
+          // T9742 — skill.migrate: legacy XDG store → ~/.cleo/skills/ (SSoT)
+          case "migrate": {
+            const result = await toolsSkillMigrate({
+              dryRun: params?.dryRun === true,
+              rollback: params?.rollback === true
+            });
+            return wrapResult(result, "mutate", "tools", "skill.migrate", startTime);
+          }
           // T9693 — skill.prune.telemetry: retention sweep on skill_usage
           case "prune.telemetry": {
             const olderThanDays = typeof params?.olderThanDays === "number" ? params.olderThanDays : void 0;
@@ -33228,12 +33263,12 @@ var init_agent = __esm({
             transportConfig: {},
             isActive: true
           });
-          const { existsSync: existsSync18, mkdirSync: mkdirSync7, writeFileSync: writeFileSync7 } = await import("node:fs");
+          const { existsSync: existsSync17, mkdirSync: mkdirSync7, writeFileSync: writeFileSync7 } = await import("node:fs");
           const { join: join33 } = await import("node:path");
           const cantDir = join33(CLEO_DIR_NAME, AGENTS_SUBDIR);
           const cantPath = join33(cantDir, `${agentId}.cant`);
           let cantScaffolded = false;
-          if (!existsSync18(cantPath)) {
+          if (!existsSync17(cantPath)) {
             mkdirSync7(cantDir, { recursive: true });
             const role = classification ?? "specialist";
             const cantContent = `---
@@ -33293,7 +33328,7 @@ agent ${agentId}:
               data: {
                 agentId: credential.agentId,
                 displayName: credential.displayName,
-                cantFile: cantScaffolded ? cantPath : existsSync18(cantPath) ? cantPath : null,
+                cantFile: cantScaffolded ? cantPath : existsSync17(cantPath) ? cantPath : null,
                 cantScaffolded
               }
             },
@@ -33414,7 +33449,7 @@ agent ${agentId}:
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { getDb: getDb3 } = await import("@cleocode/core/internal");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync18, readFileSync: readFileSync19 } = await import("node:fs");
+          const { existsSync: existsSync17, readFileSync: readFileSync18 } = await import("node:fs");
           const { join: join33 } = await import("node:path");
           await getDb3();
           const registry = new AgentRegistryAccessor(getProjectRoot23());
@@ -33436,8 +33471,8 @@ agent ${agentId}:
           let profile = null;
           let cantValidation = null;
           const cantPath = args.cant ?? join33(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          if (existsSync18(cantPath)) {
-            profile = readFileSync19(cantPath, "utf-8");
+          if (existsSync17(cantPath)) {
+            profile = readFileSync18(cantPath, "utf-8");
             try {
               const cantModule = await import("@cleocode/cant");
               const validate = "validate" in cantModule ? cantModule.validate : null;
@@ -33968,7 +34003,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { getDb: getDb3 } = await import("@cleocode/core/internal");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync18 } = await import("node:fs");
+          const { existsSync: existsSync17 } = await import("node:fs");
           const { join: join33 } = await import("node:path");
           const { execFile: execFile2 } = await import("node:child_process");
           const { promisify: promisify2 } = await import("node:util");
@@ -33990,7 +34025,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           await registry.update(args.agentId, { isActive: true });
           await registry.markUsed(args.agentId);
           const cantPath = join33(CLEO_DIR_NAME, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          const hasProfile = existsSync18(cantPath);
+          const hasProfile = existsSync17(cantPath);
           const runtime = await createRuntime(registry, {
             agentId: args.agentId,
             pollIntervalMs: 5e3,
@@ -34848,11 +34883,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       async run({ args }) {
         let tempDir = null;
         try {
-          const { existsSync: existsSync18, mkdirSync: mkdirSync7, statSync, readdirSync: readdirSync4, copyFileSync } = await import("node:fs");
+          const { existsSync: existsSync17, mkdirSync: mkdirSync7, statSync, readdirSync: readdirSync4, copyFileSync } = await import("node:fs");
           const { join: join33, basename, resolve: resolve9, extname } = await import("node:path");
           const { tmpdir: tmpdir2 } = await import("node:os");
           const resolvedPath = resolve9(args.path);
-          if (!existsSync18(resolvedPath)) {
+          if (!existsSync17(resolvedPath)) {
             cliOutput(
               {
                 success: false,
@@ -34872,11 +34907,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           if (stat3.isFile() && ext === ".cant") {
             cantPath = resolvedPath;
           } else if (stat3.isFile() && ext === ".cantz") {
-            const { execFileSync: execFileSync6 } = await import("node:child_process");
+            const { execFileSync: execFileSync5 } = await import("node:child_process");
             tempDir = join33(tmpdir2(), `cleo-agent-install-${Date.now()}`);
             mkdirSync7(tempDir, { recursive: true });
             try {
-              execFileSync6("unzip", ["-o", "-q", resolvedPath, "-d", tempDir], {
+              execFileSync5("unzip", ["-o", "-q", resolvedPath, "-d", tempDir], {
                 encoding: "utf-8",
                 timeout: 3e4
               });
@@ -34913,7 +34948,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             }
             const agentName = topLevel[0];
             const personaPath = join33(tempDir, agentName, "persona.cant");
-            if (!existsSync18(personaPath)) {
+            if (!existsSync17(personaPath)) {
               cliOutput(
                 {
                   success: false,
@@ -34932,7 +34967,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           } else if (stat3.isDirectory()) {
             const agentName = basename(resolvedPath);
             const personaPath = join33(resolvedPath, "persona.cant");
-            if (!existsSync18(personaPath)) {
+            if (!existsSync17(personaPath)) {
               cliOutput(
                 {
                   success: false,
@@ -35067,11 +35102,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync18, statSync } = await import("node:fs");
+          const { existsSync: existsSync17, statSync } = await import("node:fs");
           const { resolve: resolve9, basename, dirname: dirname13 } = await import("node:path");
-          const { execFileSync: execFileSync6 } = await import("node:child_process");
+          const { execFileSync: execFileSync5 } = await import("node:child_process");
           const resolvedDir = resolve9(args.dir);
-          if (!existsSync18(resolvedDir) || !statSync(resolvedDir).isDirectory()) {
+          if (!existsSync17(resolvedDir) || !statSync(resolvedDir).isDirectory()) {
             cliOutput(
               {
                 success: false,
@@ -35087,7 +35122,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const { join: join33 } = await import("node:path");
           const personaPath = join33(resolvedDir, "persona.cant");
-          if (!existsSync18(personaPath)) {
+          if (!existsSync17(personaPath)) {
             cliOutput(
               {
                 success: false,
@@ -35106,7 +35141,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           const archivePath = resolve9(archiveName);
           const parentDir = dirname13(resolvedDir);
           try {
-            execFileSync6("zip", ["-r", archivePath, agentName], {
+            execFileSync5("zip", ["-r", archivePath, agentName], {
               cwd: parentDir,
               encoding: "utf-8",
               timeout: 3e4
@@ -35203,7 +35238,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync18, mkdirSync: mkdirSync7, writeFileSync: writeFileSync7 } = await import("node:fs");
+          const { existsSync: existsSync17, mkdirSync: mkdirSync7, writeFileSync: writeFileSync7 } = await import("node:fs");
           const { join: join33 } = await import("node:path");
           const { homedir: homedir8 } = await import("node:os");
           const name = args.name;
@@ -35270,7 +35305,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             targetRoot = join33(getProjectRoot23(), CLEO_DIR_NAME, CANT_AGENTS_SUBDIR);
           }
           const agentDir = join33(targetRoot, name);
-          if (existsSync18(agentDir)) {
+          if (existsSync17(agentDir)) {
             cliOutput(
               {
                 success: false,
@@ -35415,15 +35450,15 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync18, readFileSync: readFileSync19, mkdirSync: mkdirSync7 } = await import("node:fs");
+          const { existsSync: existsSync17, readFileSync: readFileSync18, mkdirSync: mkdirSync7 } = await import("node:fs");
           const { resolve: resolve9, join: join33 } = await import("node:path");
           const specPath = resolve9(args.spec);
-          if (!existsSync18(specPath)) {
+          if (!existsSync17(specPath)) {
             cliError(`spec file not found: ${specPath}`, 4, { name: "E_NOT_FOUND" });
             process.exitCode = 4;
             return;
           }
-          const specContent = readFileSync19(specPath, "utf-8");
+          const specContent = readFileSync18(specPath, "utf-8");
           const projectRoot = getProjectRoot23();
           const outputDir = args["output-dir"] ? resolve9(args["output-dir"]) : join33(projectRoot, ".cleo", "cant", "agents");
           mkdirSync7(outputDir, { recursive: true });
@@ -37951,11 +37986,11 @@ var init_caamp = __esm({
         }
         if (args["dry-run"]) {
           const { parseCaampBlocks } = await import("@cleocode/caamp");
-          const { existsSync: existsSync18 } = await import("node:fs");
+          const { existsSync: existsSync17 } = await import("node:fs");
           const { readFile: readFile7 } = await import("node:fs/promises");
           const dryResults = [];
           for (const filePath of filePaths) {
-            if (!existsSync18(filePath)) {
+            if (!existsSync17(filePath)) {
               dryResults.push({ filePath, exists: false, blockCount: 0, wouldRemove: 0 });
               continue;
             }
@@ -38502,10 +38537,10 @@ var init_check2 = __esm({
         }
       },
       async run({ args }) {
-        const { readFileSync: readFileSync19 } = await import("node:fs");
+        const { readFileSync: readFileSync18 } = await import("node:fs");
         let chain;
         try {
-          chain = JSON.parse(readFileSync19(args.file, "utf8"));
+          chain = JSON.parse(readFileSync18(args.file, "utf8"));
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
           cliError(`Failed to read or parse chain file: ${message}`, 2, {
@@ -44663,8 +44698,8 @@ var init_event = __esm({
           }
           for (const file of filesToTail) {
             const agentId = file.replace(".jsonl", "");
-            const { readFileSync: readFileSync19 } = await import("node:fs");
-            const content = readFileSync19(join21(eventsDir, file), "utf-8");
+            const { readFileSync: readFileSync18 } = await import("node:fs");
+            const content = readFileSync18(join21(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -44759,8 +44794,8 @@ var init_event = __esm({
         const printAgentLog = async (file) => {
           const agentId = file.replace(".jsonl", "");
           try {
-            const { readFileSync: readFileSync19 } = await import("node:fs");
-            const content = readFileSync19(join21(eventsDir, file), "utf-8");
+            const { readFileSync: readFileSync18 } = await import("node:fs");
+            const content = readFileSync18(join21(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -59144,6 +59179,12 @@ import {
 import { safeRunProposeTick } from "@cleocode/core/sentient/propose-tick.js";
 import { patchSentientState, readSentientState as readSentientState2 } from "@cleocode/core/sentient/state.js";
 import { safeRunTick } from "@cleocode/core/sentient/tick.js";
+import {
+  getSkillPatch,
+  getSkillReview,
+  listSkillReviews,
+  markSkillPatchRejected
+} from "@cleocode/core/store/skills-store.js";
 function resolveProjectRoot6(arg) {
   return arg && arg.length > 0 ? arg : processCwd3();
 }
@@ -59807,29 +59848,7 @@ ${b64List.map((k, i) => `  ${i + 1}. ${k}`).join("\n")}`
         const limit = args.limit ? Number.parseInt(args.limit, 10) : 50;
         const pendingOnly = args.pending === true;
         try {
-          const { openSkillsDb } = await import("@cleocode/core/store/skills-db.js");
-          const { skills: skills2, skillReviews, skillPatches } = await import("@cleocode/core/store/skills-schema.js");
-          const db = await openSkillsDb();
-          const reviews = db.select().from(skillReviews).orderBy(skillReviews.reviewedAt).limit(Number.isInteger(limit) && limit > 0 ? limit : 50).all();
-          const entries = [];
-          for (const review of reviews) {
-            const { eq: eq2, desc } = await import("drizzle-orm");
-            const skillRow = db.select().from(skills2).where(eq2(skills2.name, review.skillName)).limit(1).all()[0];
-            const latestPatch = db.select().from(skillPatches).where(eq2(skillPatches.skillName, review.skillName)).orderBy(desc(skillPatches.proposedAt)).limit(1).all()[0];
-            if (pendingOnly && latestPatch?.status !== "proposed") {
-              continue;
-            }
-            entries.push({
-              reviewId: review.id,
-              skillName: review.skillName,
-              reviewedAt: review.reviewedAt,
-              outcome: review.outcome,
-              summary: review.summary ?? null,
-              patchId: latestPatch?.id ?? null,
-              patchStatus: latestPatch?.status ?? null,
-              isCanonical: skillRow?.sourceType === "canonical"
-            });
-          }
+          const entries = await listSkillReviews({ pendingOnly, limit });
           emitSuccess2(
             { entries, count: entries.length, pendingOnly },
             jsonMode,
@@ -59872,12 +59891,8 @@ ${b64List.map((k, i) => `  ${i + 1}. ${k}`).join("\n")}`
           return;
         }
         try {
-          const { openSkillsDb } = await import("@cleocode/core/store/skills-db.js");
-          const { skills: skills2, skillReviews, skillPatches } = await import("@cleocode/core/store/skills-schema.js");
-          const { eq: eq2 } = await import("drizzle-orm");
-          const db = await openSkillsDb();
-          const review = db.select().from(skillReviews).where(eq2(skillReviews.id, reviewId)).get();
-          if (!review) {
+          const detail = await getSkillReview(reviewId);
+          if (!detail.review) {
             emitFailure3(
               "E_NOT_FOUND",
               `No skill_reviews row for id=${reviewId}`,
@@ -59886,17 +59901,15 @@ ${b64List.map((k, i) => `  ${i + 1}. ${k}`).join("\n")}`
             );
             return;
           }
-          const skillRow = db.select().from(skills2).where(eq2(skills2.name, review.skillName)).limit(1).all()[0];
-          const patches = db.select().from(skillPatches).where(eq2(skillPatches.reviewId, reviewId)).all();
           emitSuccess2(
             {
-              review,
-              patches,
-              isCanonical: skillRow?.sourceType === "canonical",
-              skillRow: skillRow ?? null
+              review: detail.review,
+              patches: detail.patches,
+              isCanonical: detail.isCanonical,
+              skillRow: detail.skillRow
             },
             jsonMode,
-            `Review ${reviewId} for ${review.skillName}: ${review.outcome}`,
+            `Review ${reviewId} for ${detail.review.skillName}: ${detail.review.outcome}`,
             "sentient.review-status.show"
           );
         } catch (err) {
@@ -59935,11 +59948,8 @@ ${b64List.map((k, i) => `  ${i + 1}. ${k}`).join("\n")}`
           return;
         }
         try {
-          const { openSkillsDb } = await import("@cleocode/core/store/skills-db.js");
-          const { skills: skills2, skillPatches } = await import("@cleocode/core/store/skills-schema.js");
-          const { eq: eq2 } = await import("drizzle-orm");
-          const db = await openSkillsDb();
-          const patch = db.select().from(skillPatches).where(eq2(skillPatches.id, patchId)).get();
+          const detail = await getSkillPatch(patchId);
+          const patch = detail.patch;
           if (!patch) {
             emitFailure3(
               "E_NOT_FOUND",
@@ -59958,7 +59968,7 @@ ${b64List.map((k, i) => `  ${i + 1}. ${k}`).join("\n")}`
             );
             return;
           }
-          const skillRow = db.select().from(skills2).where(eq2(skills2.name, patch.skillName)).limit(1).all()[0];
+          const skillRow = detail.skillRow;
           if (!skillRow) {
             emitFailure3(
               "E_NOT_FOUND",
@@ -60036,12 +60046,8 @@ ${b64List.map((k, i) => `  ${i + 1}. ${k}`).join("\n")}`
           return;
         }
         try {
-          const { openSkillsDb } = await import("@cleocode/core/store/skills-db.js");
-          const { skillPatches } = await import("@cleocode/core/store/skills-schema.js");
-          const { eq: eq2 } = await import("drizzle-orm");
-          const db = await openSkillsDb();
-          const patch = db.select().from(skillPatches).where(eq2(skillPatches.id, patchId)).get();
-          if (!patch) {
+          const detail = await getSkillPatch(patchId);
+          if (!detail.patch) {
             emitFailure3(
               "E_NOT_FOUND",
               `No skill_patches row for id=${patchId}`,
@@ -60050,19 +60056,19 @@ ${b64List.map((k, i) => `  ${i + 1}. ${k}`).join("\n")}`
             );
             return;
           }
-          if (patch.status !== "proposed") {
+          if (detail.patch.status !== "proposed") {
             emitFailure3(
               "E_VALIDATION",
-              `patch ${patchId} is not in 'proposed' state (status='${patch.status}')`,
+              `patch ${patchId} is not in 'proposed' state (status='${detail.patch.status}')`,
               jsonMode,
               "sentient.review-status.reject"
             );
             return;
           }
-          db.update(skillPatches).set({ status: "rejected" }).where(eq2(skillPatches.id, patchId)).run();
+          await markSkillPatchRejected(patchId);
           const reason = args.reason ?? "rejected by operator";
           emitSuccess2(
-            { patchId, skillName: patch.skillName, status: "rejected", reason },
+            { patchId, skillName: detail.patch.skillName, status: "rejected", reason },
             jsonMode,
             `Patch ${patchId} rejected (${reason})`,
             "sentient.review-status.reject"
@@ -61490,12 +61496,12 @@ var skills_exports = {};
 __export(skills_exports, {
   skillsCommand: () => skillsCommand2
 });
-import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync16, readFileSync as readFileSync16 } from "node:fs";
-import { resolve as resolvePath2 } from "node:path";
-import { cwd as processCwd4 } from "node:process";
-import { AgentsSkillsRealDirError, runDoctorAdopt, runDoctorBridge } from "@cleocode/caamp";
-import { withProvenance } from "@cleocode/core/sentient";
+import {
+  AgentsSkillsRealDirError,
+  skills as coreSkills,
+  runDoctorAdopt,
+  runDoctorBridge
+} from "@cleocode/core";
 function buildSkillsDoctorAdoptAdapters() {
   return {
     loadRegisteredNames: async () => {
@@ -61522,7 +61528,7 @@ function buildSkillsDoctorAdoptAdapters() {
     }
   };
 }
-var listCommand23, searchCommand4, findCommand7, validateCommand8, infoCommand, installCommand3, uninstallCommand2, enableCommand2, disableCommand2, refreshCommand, dispatchCommand, catalogCommand, precedenceCommand, depsCommand4, doctorBridgeCommand, doctorAdoptOrphansCommand, statsCommand6, importHermesCommand, pruneTelemetryCommand, spawnProvidersCommand, doctorDiagnoseCommand, doctorCommand4, proposePatchCommand, skillsCommand2;
+var listCommand23, searchCommand4, findCommand7, validateCommand8, infoCommand, installCommand3, uninstallCommand2, enableCommand2, disableCommand2, refreshCommand, dispatchCommand, catalogCommand, precedenceCommand, depsCommand4, doctorBridgeCommand, doctorAdoptOrphansCommand, statsCommand6, importHermesCommand, migrateCommand2, pruneTelemetryCommand, spawnProvidersCommand, doctorDiagnoseCommand, doctorCommand4, proposePatchCommand, skillsCommand2;
 var init_skills2 = __esm({
   "packages/cleo/src/cli/commands/skills.ts"() {
     "use strict";
@@ -62034,6 +62040,42 @@ var init_skills2 = __esm({
         );
       }
     });
+    migrateCommand2 = defineCommand({
+      meta: {
+        name: "migrate",
+        description: "Migrate legacy skills (~/.local/share/agents/skills) into ~/.cleo/skills (SSoT)"
+      },
+      args: {
+        "dry-run": {
+          type: "boolean",
+          description: "Preview the plan without writing anything"
+        },
+        rollback: {
+          type: "boolean",
+          description: "Restore from the most recent backup tarball"
+        },
+        json: {
+          type: "boolean",
+          description: "Emit LAFS JSON envelope (default)"
+        },
+        human: {
+          type: "boolean",
+          description: "Emit a coloured human-readable summary instead of JSON"
+        }
+      },
+      async run({ args }) {
+        await dispatchFromCli(
+          "mutate",
+          "tools",
+          "skill.migrate",
+          {
+            dryRun: args["dry-run"] === true,
+            rollback: args.rollback === true
+          },
+          { command: "skills", operation: "tools.skill.migrate" }
+        );
+      }
+    });
     pruneTelemetryCommand = defineCommand({
       meta: {
         name: "prune-telemetry",
@@ -62168,119 +62210,60 @@ var init_skills2 = __esm({
       async run({ args }) {
         const skillName = String(args["skill-name"]);
         const diffPath = String(args.diff);
-        const title = typeof args.title === "string" && args.title.length > 0 ? args.title : `skill(${skillName}): proposed patch`;
-        const body = typeof args.body === "string" && args.body.length > 0 ? args.body : [
-          `Auto-improve patch for canonical skill **${skillName}**.`,
-          "",
-          `Diff source: \`${diffPath}\``,
-          "",
-          "This PR was opened via `cleo skill propose-patch` (T9714).",
-          "Sphere A canonical skills are owner-CI-only \u2014 the local",
-          "sentient daemon CANNOT mutate them in place; this PR is the",
-          "audited path for incorporating a council-approved patch."
-        ].join("\n");
-        const base = typeof args.base === "string" && args.base.length > 0 ? args.base : "main";
+        const title = typeof args.title === "string" ? args.title : void 0;
+        const body = typeof args.body === "string" ? args.body : void 0;
+        const base = typeof args.base === "string" ? args.base : void 0;
         const dryRun = args["dry-run"] === true;
-        const jsonMode = args.json === true;
-        const resolvedDiff = resolvePath2(processCwd4(), diffPath);
-        if (!existsSync16(resolvedDiff)) {
-          cliError(
-            `Diff file not found at '${resolvedDiff}'`,
-            "E_NOT_FOUND",
-            { name: "E_NOT_FOUND" },
-            { operation: "tools.skill.propose-patch" }
-          );
-          process.exit(1);
-          return;
-        }
-        const diffBytes = readFileSync16(resolvedDiff, "utf8");
-        if (diffBytes.length === 0) {
+        void (args.json === true);
+        const result = await coreSkills.proposeCanonicalPatch({
+          skillName,
+          diffPath,
+          title,
+          body,
+          base,
+          dryRun
+        });
+        if (result.kind === "error") {
           cliError(
-            `Diff file '${resolvedDiff}' is empty`,
-            "E_PATCH_EMPTY",
-            { name: "E_PATCH_EMPTY" },
+            result.message,
+            result.code,
+            { name: result.code },
             { operation: "tools.skill.propose-patch" }
           );
           process.exit(1);
           return;
         }
-        if (!dryRun) {
-          try {
-            execFileSync4("gh", ["--version"], { stdio: "pipe" });
-          } catch {
-            cliError(
-              "gh CLI not found or not authenticated \u2014 install gh and run `gh auth login`",
-              "E_GH_UNAVAILABLE",
-              { name: "E_GH_UNAVAILABLE" },
-              { operation: "tools.skill.propose-patch" }
-            );
-            process.exit(1);
-            return;
-          }
-        }
-        const timestamp2 = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-        const branchName = `propose-patch/skill-${skillName}-${timestamp2}`;
-        const steps = [
-          `git checkout -b ${branchName}`,
-          `git apply ${resolvedDiff}`,
-          `git add -A`,
-          `git commit -m "skill(${skillName}): propose patch"`,
-          `git push -u origin ${branchName}`,
-          `gh pr create --base ${base} --head ${branchName} --title "${title}" --body <stdin>`
-        ];
-        if (dryRun) {
+        if (result.kind === "dry-run") {
           cliOutput(
             {
-              skillName,
-              diffPath: resolvedDiff,
-              branchName,
-              base,
-              steps,
+              skillName: result.skillName,
+              diffPath: result.diffPath,
+              branchName: result.branchName,
+              base: result.base,
+              steps: result.steps,
               dryRun: true
             },
             {
               command: "skills",
-              message: `[dry-run] would open PR for ${skillName} on branch ${branchName}`,
+              message: `[dry-run] would open PR for ${result.skillName} on branch ${result.branchName}`,
               operation: "tools.skill.propose-patch"
             }
           );
           return;
         }
-        try {
-          const result = await withProvenance("pr-generator", async () => {
-            execFileSync4("git", ["checkout", "-b", branchName], { stdio: "pipe" });
-            execFileSync4("git", ["apply", resolvedDiff], { stdio: "pipe" });
-            execFileSync4("git", ["add", "-A"], { stdio: "pipe" });
-            execFileSync4("git", ["commit", "-m", `skill(${skillName}): propose patch`], {
-              stdio: "pipe"
-            });
-            execFileSync4("git", ["push", "-u", "origin", branchName], { stdio: "pipe" });
-            const prUrl = execFileSync4(
-              "gh",
-              ["pr", "create", "--base", base, "--head", branchName, "--title", title, "--body", body],
-              { stdio: "pipe" }
-            ).toString("utf8").trim();
-            return { prUrl, branchName };
-          });
-          cliOutput(
-            { skillName, prUrl: result.prUrl, branchName: result.branchName, base },
-            {
-              command: "skills",
-              message: `Opened PR ${result.prUrl}`,
-              operation: "tools.skill.propose-patch"
-            }
-          );
-        } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
-          cliError(
-            `propose-patch failed: ${message}`,
-            "E_PROPOSE_PATCH_FAILED",
-            { name: "E_PROPOSE_PATCH_FAILED" },
-            { operation: "tools.skill.propose-patch" }
-          );
-          process.exit(1);
-        }
-        void jsonMode;
+        cliOutput(
+          {
+            skillName: result.skillName,
+            prUrl: result.prUrl,
+            branchName: result.branchName,
+            base: result.base
+          },
+          {
+            command: "skills",
+            message: `Opened PR ${result.prUrl}`,
+            operation: "tools.skill.propose-patch"
+          }
+        );
       }
     });
     skillsCommand2 = defineCommand({
@@ -62305,6 +62288,7 @@ var init_skills2 = __esm({
         "propose-patch": proposePatchCommand,
         stats: statsCommand6,
         "import-hermes": importHermesCommand,
+        migrate: migrateCommand2,
         "prune-telemetry": pruneTelemetryCommand
       },
       async run({ cmd, rawArgs }) {
@@ -63085,10 +63069,10 @@ var init_sync = __esm({
         }
       },
       async run({ args }) {
-        const { readFileSync: readFileSync19 } = await import("node:fs");
+        const { readFileSync: readFileSync18 } = await import("node:fs");
         let externalTasks;
         try {
-          externalTasks = JSON.parse(readFileSync19(args.file, "utf8"));
+          externalTasks = JSON.parse(readFileSync18(args.file, "utf8"));
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
           cliError(`Failed to read or parse external tasks file: ${message}`, 2, {
@@ -63474,12 +63458,12 @@ var token_exports = {};
 __export(token_exports, {
   tokenCommand: () => tokenCommand
 });
-import { readFileSync as readFileSync17 } from "node:fs";
+import { readFileSync as readFileSync16 } from "node:fs";
 import { getProjectRoot as getProjectRoot40, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
 function readPayload(args, textKey, fileKey) {
   const text = args[textKey];
   const file = args[fileKey];
-  if (file) return readFileSync17(file, "utf-8");
+  if (file) return readFileSync16(file, "utf-8");
   return text;
 }
 var filterArgs, summaryCommand3, listCommand25, showCommand16, deleteCommand3, clearCommand2, estimateCommand, tokenCommand;
@@ -63681,7 +63665,7 @@ import {
   pruneTranscripts,
   scanTranscripts
 } from "@cleocode/core/gc/transcript.js";
-var scanCommand, extractCommand, migrateCommand2, pruneCommand2, transcriptCommand;
+var scanCommand, extractCommand, migrateCommand3, pruneCommand2, transcriptCommand;
 var init_transcript = __esm({
   "packages/cleo/src/cli/commands/transcript.ts"() {
     "use strict";
@@ -63880,7 +63864,7 @@ var init_transcript = __esm({
         }
       }
     });
-    migrateCommand2 = defineCommand({
+    migrateCommand3 = defineCommand({
       meta: {
         name: "migrate",
         description: "Backfill extraction from existing ~/.claude/projects/ session JSONLs (T733)"
@@ -64076,7 +64060,7 @@ var init_transcript = __esm({
       subCommands: {
         scan: scanCommand,
         extract: extractCommand,
-        migrate: migrateCommand2,
+        migrate: migrateCommand3,
         prune: pruneCommand2
       },
       async run({ cmd, rawArgs }) {
@@ -64697,7 +64681,7 @@ var web_exports = {};
 __export(web_exports, {
   webCommand: () => webCommand
 });
-import { execFileSync as execFileSync5, spawn as spawn3 } from "node:child_process";
+import { execFileSync as execFileSync4, spawn as spawn3 } from "node:child_process";
 import { mkdir as mkdir4, open, readFile as readFile6, rm, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
 import { join as join30 } from "node:path";
 import { CleoError as CleoError12, formatError as formatError9, getCleoHome as getCleoHome5 } from "@cleocode/core";
@@ -64761,7 +64745,7 @@ async function startWebServer(port, host) {
     await stat2(webIndexPath);
   } catch {
     try {
-      execFileSync5("pnpm", ["--filter", "@cleocode/studio", "run", "build"], {
+      execFileSync4("pnpm", ["--filter", "@cleocode/studio", "run", "build"], {
         cwd: projectRoot,
         stdio: "ignore"
       });
@@ -65262,7 +65246,7 @@ var init_worktree3 = __esm({
 init_dist();
 init_field_context();
 init_format_context();
-import { readFileSync as readFileSync18 } from "node:fs";
+import { readFileSync as readFileSync17 } from "node:fs";
 import { dirname as dirname12, join as join32 } from "node:path";
 import { fileURLToPath as fileURLToPath8 } from "node:url";
 
@@ -66388,14 +66372,14 @@ function didYouMean(input2, candidates, maxDistance = 2) {
 }
 
 // packages/cleo/src/cli/lib/first-run-detection.ts
-import { existsSync as existsSync17 } from "node:fs";
+import { existsSync as existsSync16 } from "node:fs";
 import { join as join31 } from "node:path";
 async function detectFirstRun() {
   const envKey = process.env["ANTHROPIC_API_KEY"];
   if (typeof envKey === "string" && envKey.length > 0) return false;
   const { getCleoPlatformPaths } = await import("@cleocode/paths");
   const configPath = join31(getCleoPlatformPaths().config, "config.json");
-  if (existsSync17(configPath)) return false;
+  if (existsSync16(configPath)) return false;
   try {
     const { getCredentialPool } = await import("@cleocode/core/llm/credential-pool.js");
     const pool = getCredentialPool();
@@ -66484,7 +66468,7 @@ Or via NodeSource: https://github.com/nodesource/distributions
 }
 function getPackageVersion() {
   const pkgPath = join32(dirname12(fileURLToPath8(import.meta.url)), "../../package.json");
-  const pkg = JSON.parse(readFileSync18(pkgPath, "utf-8"));
+  const pkg = JSON.parse(readFileSync17(pkgPath, "utf-8"));
   return pkg.version;
 }
 var CLI_VERSION = getPackageVersion();