@cleocode/cleo 2026.9.25 → 2026.9.26

package/dist/cli/index.js

@@ -395,6 +395,16 @@ function resolveFieldContext(opts) {
   };
   return resolveFieldExtraction(input2);
 }
+async function withoutOutputPointer(step) {
+  const saved = currentContext;
+  const { field: _field, ...rest } = saved;
+  currentContext = rest;
+  try {
+    return await step();
+  } finally {
+    currentContext = saved;
+  }
+}
 var currentContext;
 var init_field_context = __esm({
   "packages/cleo/src/cli/field-context.ts"() {
@@ -1234,7 +1244,6 @@ var init_tree = __esm({
 // packages/animations/src/render/index.ts
 var init_render = __esm({
   "packages/animations/src/render/index.ts"() {
-    "use strict";
     init_legend();
     init_tree();
   }
@@ -1352,6 +1361,7 @@ var init_spinner_handle = __esm({
 var init_src = __esm({
   "packages/animations/src/index.ts"() {
     init_animate_context();
+    init_render();
     init_spinner_handle();
   }
 });
@@ -4968,7 +4978,7 @@ var init_output_contracts_data = __esm({
               // T12503: the optimistic-concurrency version agents pass to --if-match.
               updatedAt: {
                 type: ["string", "null"],
-                description: "Task version for optimistic concurrency: pass it to `cleo update|complete --if-match`."
+                description: "Task version for optimistic concurrency: pass it to `cleo update|complete --if-match`. A stale version fails with E_CONFLICT (23); E_TASK_RENAMED (26) when sync re-numbered the task you read (details.expected is its new id)."
               },
               // T12502: the human assignee and the agent claim lease are separate.
               assignee: {
@@ -16454,6 +16464,7 @@ var init_exit_codes = __esm({
       ExitCode2[ExitCode2["VERSION_CONFLICT"] = 23] = "VERSION_CONFLICT";
       ExitCode2[ExitCode2["SESSION_UNBOUND"] = 24] = "SESSION_UNBOUND";
       ExitCode2[ExitCode2["WORKTREE_LOCKED"] = 25] = "WORKTREE_LOCKED";
+      ExitCode2[ExitCode2["TASK_RENAMED"] = 26] = "TASK_RENAMED";
       ExitCode2[ExitCode2["SESSION_EXISTS"] = 30] = "SESSION_EXISTS";
       ExitCode2[ExitCode2["SESSION_NOT_FOUND"] = 31] = "SESSION_NOT_FOUND";
       ExitCode2[ExitCode2["SCOPE_CONFLICT"] = 32] = "SCOPE_CONFLICT";
@@ -22728,7 +22739,28 @@ var init_nexus_account = __esm({
       "E_NEXUS_REVOKE_FAILED",
       "E_NEXUS_REQUEST_FAILED",
       "E_NEXUS_NOT_A_PROJECT",
-      "E_NEXUS_INVALID_LABEL"
+      "E_NEXUS_INVALID_LABEL",
+      // Device credentials (cleo-nexus device contract §3.3, §4.0.4; T12868).
+      /** No answer from the API (network error or timeout). */
+      "E_NEXUS_UNREACHABLE",
+      /** `cleo login nexus` while a revoke of this device is unconfirmed (§3.3, v2.9). */
+      "E_NEXUS_REVOKE_PENDING",
+      /** The device was signed out (E9, E11): 401 `device-signed-out`. */
+      "E_NEXUS_DEVICE_SIGNED_OUT",
+      /** The device was revoked (E10, E12): 401 `device-revoked`. */
+      "E_NEXUS_DEVICE_REVOKED",
+      /** A credential replaced or revoked elsewhere, or a `rotation-conflict` (R2). */
+      "E_NEXUS_CREDENTIAL_COMPROMISED",
+      /** The device credential lacks the scope (a read-only device): 403 `insufficient-scope`. */
+      "E_NEXUS_INSUFFICIENT_SCOPE",
+      /** A replica attach from a second device: 409 `replica-copied`. */
+      "E_NEXUS_REPLICA_COPIED",
+      /** Another cleo process holds the device file or an upgrade in flight; retry. */
+      "E_NEXUS_BUSY",
+      /** Several accounts hold a device credential on one origin and none was named. */
+      "E_NEXUS_ACCOUNT_AMBIGUOUS",
+      /** An option that needs device credentials (`--read-only`) without `CLEO_NEXUS_DEVICE=1`. */
+      "E_NEXUS_DEVICE_REQUIRED"
     ];
     nexusAccountUserSchema = z25.object({
       id: z25.string(),
@@ -37997,8 +38029,8 @@ async function loadPlaybookByName(name) {
     return null;
   }
   try {
-    const { getProjectRoot: getProjectRoot74 } = await import("@cleocode/core/internal");
-    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot74();
+    const { getProjectRoot: getProjectRoot75 } = await import("@cleocode/core/internal");
+    const projectRoot = __playbookRuntimeOverrides.projectRoot ?? getProjectRoot75();
     const resolved = resolvePlaybook(name, {
       projectRoot,
       globalPlaybooksDir: __playbookRuntimeOverrides.globalPlaybooksDir,
@@ -38043,7 +38075,7 @@ async function buildDefaultDispatcher() {
   if (__playbookRuntimeOverrides.dispatcher) return __playbookRuntimeOverrides.dispatcher;
   const { orchestrateSpawnExecute: orchestrateSpawnExecute2 } = await import("@cleocode/runtime/gateway");
   const {
-    getProjectRoot: getProjectRoot74,
+    getProjectRoot: getProjectRoot75,
     createToolGuard,
     runSkillNodeOrSpawn,
     maybeCreatePiRunner,
@@ -38051,7 +38083,7 @@ async function buildDefaultDispatcher() {
     hasCantbookProfilePin,
     DEFAULT_DETERMINISTIC_DENIED_COMMANDS
   } = await import("@cleocode/core/internal");
-  const projectRoot = getProjectRoot74();
+  const projectRoot = getProjectRoot75();
   const tools = createToolGuard({
     allowedRoots: [projectRoot],
     deniedCommands: DEFAULT_DETERMINISTIC_DENIED_COMMANDS,
@@ -38144,12 +38176,12 @@ async function buildDefaultDeterministicRunner() {
     return void 0;
   }
   const {
-    getProjectRoot: getProjectRoot74,
+    getProjectRoot: getProjectRoot75,
     createToolGuard,
     createGuardedDeterministicRunner,
     DEFAULT_DETERMINISTIC_DENIED_COMMANDS
   } = await import("@cleocode/core/internal");
-  const projectRoot = getProjectRoot74();
+  const projectRoot = getProjectRoot75();
   const tools = createToolGuard({
     allowedRoots: [projectRoot],
     deniedCommands: DEFAULT_DETERMINISTIC_DENIED_COMMANDS,
@@ -38307,8 +38339,8 @@ var init_playbook2 = __esm({
             projectRoot = __playbookRuntimeOverrides.projectRoot;
           } else {
             try {
-              const { getProjectRoot: getProjectRoot74 } = await import("@cleocode/core/internal");
-              projectRoot = getProjectRoot74();
+              const { getProjectRoot: getProjectRoot75 } = await import("@cleocode/core/internal");
+              projectRoot = getProjectRoot75();
             } catch {
               projectRoot = void 0;
             }
@@ -38373,14 +38405,14 @@ var init_playbook2 = __esm({
         const deterministicRunner = await buildDefaultDeterministicRunner();
         let result;
         try {
-          const { getProjectRoot: getProjectRoot74 } = await import("@cleocode/core/internal");
+          const { getProjectRoot: getProjectRoot75 } = await import("@cleocode/core/internal");
           const opts = {
             db,
             playbook: parsed.definition,
             playbookHash: parsed.sourceHash,
             initialContext,
             dispatcher,
-            projectRoot: getProjectRoot74()
+            projectRoot: getProjectRoot75()
           };
           if (deterministicRunner !== void 0) opts.deterministicRunner = deterministicRunner;
           if (__playbookRuntimeOverrides.approvalSecret !== void 0) {
@@ -38739,6 +38771,7 @@ async function orchestratePivotOp(params) {
     else if (code === 38) errorCode = "E_NOT_ACTIVE";
     else if (code === 35) errorCode = "E_TASK_CLAIMED";
     else if (code === 24) errorCode = "E_SESSION_UNBOUND";
+    else if (code === 26) errorCode = "E_TASK_RENAMED";
     const cleo = err instanceof CleoError ? err : void 0;
     return {
       success: false,
@@ -45718,11 +45751,11 @@ var init_security = __esm({
 });
 
 // packages/cleo/src/dispatch/middleware/sanitizer.ts
-function createSanitizer(getProjectRoot74) {
+function createSanitizer(getProjectRoot75) {
   return async (req, next) => {
     if (req.params) {
       try {
-        const root = getProjectRoot74 ? getProjectRoot74() : void 0;
+        const root = getProjectRoot75 ? getProjectRoot75() : void 0;
         req.params = sanitizeParams(req.params, root, {
           domain: req.domain,
           operation: req.operation
@@ -45824,14 +45857,14 @@ var init_session_resolver = __esm({
 });
 
 // packages/cleo/src/dispatch/middleware/store-write-guard.ts
-function createStoreWriteGuard(getProjectRoot74) {
+function createStoreWriteGuard(getProjectRoot75) {
   return async (req, next) => {
     if (req.gateway !== "mutate" || ALLOWED_WHILE_READ_ONLY.has(`${req.domain}.${req.operation}`)) {
       return next();
     }
     let projectRoot;
     try {
-      projectRoot = getProjectRoot74();
+      projectRoot = getProjectRoot75();
     } catch {
       return next();
     }
@@ -46258,6 +46291,7 @@ var init_cli = __esm({
       E_CONFLICT: 23,
       E_SESSION_UNBOUND: 24,
       E_WORKTREE_LOCKED: 25,
+      E_TASK_RENAMED: 26,
       E_TWIN_COLLAPSE_FAILED: 55,
       E_SESSION_EXISTS: 30,
       E_SESSION_NOT_FOUND: 31,
@@ -50613,7 +50647,7 @@ function nexusApiUrlArg(args) {
 function failNexus(err, operation) {
   const code = err instanceof Error && "code" in err && typeof err.code === "string" ? err.code : void 0;
   const fix = err instanceof Error && "fix" in err && typeof err.fix === "string" ? err.fix : void 0;
-  const exitCode = code === "E_NEXUS_INVALID_API_URL" || code === "E_NEXUS_INVALID_LABEL" ? 6 : 1;
+  const exitCode = code === "E_NEXUS_INVALID_API_URL" || code === "E_NEXUS_INVALID_LABEL" || code === "E_NEXUS_DEVICE_REQUIRED" ? 6 : 1;
   cliError(
     err instanceof Error ? err.message : String(err),
     exitCode,
@@ -50631,16 +50665,52 @@ async function runNexusLogin(args, openBrowser2) {
     /* webpackIgnore: true */
     "@cleocode/core/cloud/nexus-auth.js"
   );
+  const { isNexusDeviceEnabled } = await import(
+    /* webpackIgnore: true */
+    "@cleocode/core/cloud/nexus-device.js"
+  );
   const noBrowser = negatedFlag(args, "browser");
+  const hooks2 = {
+    apiUrl: nexusApiUrlArg(args),
+    onCode: (code) => {
+      writeDeviceCodePrompt(code, SERVICE_NAME);
+      if (!noBrowser) openBrowser2(code.verificationUriComplete ?? code.verificationUri);
+    },
+    onPending: writeDeviceCodePending
+  };
+  const readOnly = args["read-only"] === true;
+  const name = typeof args["name"] === "string" && args["name"] !== "" ? args["name"] : void 0;
+  if (readOnly && !isNexusDeviceEnabled()) {
+    throw Object.assign(
+      new Error(
+        "--read-only needs device credentials, which are not enabled; nothing was signed in"
+      ),
+      {
+        code: "E_NEXUS_DEVICE_REQUIRED",
+        fix: "set CLEO_NEXUS_DEVICE=1 to enrol a read-only device, or log in without --read-only"
+      }
+    );
+  }
   try {
-    const result = await loginToNexus({
-      apiUrl: nexusApiUrlArg(args),
-      onCode: (code) => {
-        writeDeviceCodePrompt(code, SERVICE_NAME);
-        if (!noBrowser) openBrowser2(code.verificationUriComplete ?? code.verificationUri);
-      },
-      onPending: writeDeviceCodePending
-    });
+    let result;
+    if (isNexusDeviceEnabled()) {
+      const { loginToNexusDevice } = await import(
+        /* webpackIgnore: true */
+        "@cleocode/core/cloud/nexus-enrol.js"
+      );
+      result = await loginToNexusDevice({
+        ...hooks2,
+        readOnly,
+        ...name !== void 0 ? { name } : {}
+      });
+    } else {
+      if (name !== void 0) {
+        process.stderr.write(
+          "warning: --name needs device credentials (CLEO_NEXUS_DEVICE=1); ignored\n"
+        );
+      }
+      result = await loginToNexus(hooks2);
+    }
     writeDeviceCodeApproved(SERVICE_NAME);
     for (const warning of result.warnings) process.stderr.write(`warning: ${warning}
 `);
@@ -50653,7 +50723,8 @@ async function runNexusLogin(args, openBrowser2) {
 function nexusLoginSummary(r) {
   const who = r.user?.email ?? "your account";
   const org = r.organization ? ` (${r.organization.name})` : "";
-  return `Signed in to ${r.apiUrl} as ${who}${org}.`;
+  const device = r.device ? ` This machine is device ${r.device.deviceId}${r.device.name ? ` (${r.device.name})` : ""}, profile ${r.device.profile ?? "unknown"}.` : "";
+  return `Signed in to ${r.apiUrl} as ${who}${org}.${device}`;
 }
 var SERVICE_NAME, NEXUS_API_URL_ARG;
 var init_nexus_account_cli = __esm({
@@ -51542,6 +51613,14 @@ var init_login = __esm({
         description: "Open the verification URL in a browser (nexus). --no-browser only prints it (SSH, containers).",
         default: true
       },
+      "read-only": {
+        type: "boolean",
+        description: "nexus with CLEO_NEXUS_DEVICE=1: enrol this machine with the read-only device profile (account, devices and project reads only). Refused without CLEO_NEXUS_DEVICE=1."
+      },
+      name: {
+        type: "string",
+        description: "nexus with CLEO_NEXUS_DEVICE=1: device name shown on cleocode.dev (default: OS, arch and a short id; never the hostname)."
+      },
       auth: {
         type: "string",
         description: "Auth method: 'oauth' (browser) or 'api_key'. Inferred from the provider when omitted."
@@ -52846,14 +52925,14 @@ var init_backup = __esm({
           return;
         }
         const { exportPortableBundle, PortableBundleError } = await import("@cleocode/core/store/portable-bundle.js");
-        const { getProjectRoot: getProjectRoot74 } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot75 } = await import("@cleocode/core");
         const passphrase = args.encrypt === true ? await resolvePassphrase() : void 0;
         if (args.encrypt === true && passphrase === void 0) return;
         const encSuffix = args.encrypt === true ? "enc." : "";
         try {
           const result = await exportPortableBundle({
             scope,
-            projectRoot: scope === "project" || scope === "all" ? getProjectRoot74() : void 0,
+            projectRoot: scope === "project" || scope === "all" ? getProjectRoot75() : void 0,
             outputPath: args.out ?? `./${args.name}.${encSuffix}cleobundle.tar.gz`,
             encrypt: args.encrypt === true,
             passphrase,
@@ -52910,12 +52989,12 @@ var init_backup = __esm({
           );
           return;
         }
-        const { getProjectRoot: getProjectRoot74, getCleoHome: getCleoHome8, getCleoVersion } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot75, getCleoHome: getCleoHome8, getCleoVersion } = await import("@cleocode/core");
         const { BundleError, cleanupStaging, unpackBundle } = await import("@cleocode/core/store/backup-unpack.js");
         const { regenerateConfigJson, regenerateProjectContextJson, regenerateProjectInfoJson } = await import("@cleocode/core/store/regenerators.js");
         const { regenerateAndCompare } = await import("@cleocode/core/store/restore-json-merge.js");
         const { buildConflictReport, writeConflictReport } = await import("@cleocode/core/store/restore-conflict-report.js");
-        const projectRoot = getProjectRoot74();
+        const projectRoot = getProjectRoot75();
         const { assertOwnerStoreRewriteConfirmed } = await import("@cleocode/core/store/worktree-isolation-guard.js");
         try {
           assertOwnerStoreRewriteConfirmed("backup import", path2.join(projectRoot, ".cleo"), {
@@ -63477,6 +63556,40 @@ var init_doctor_db_substrate = __esm({
   }
 });
 
+// packages/cleo/src/cli/commands/doctor-dep-cycles.ts
+var doctor_dep_cycles_exports = {};
+__export(doctor_dep_cycles_exports, {
+  doctorDepCyclesCommand: () => doctorDepCyclesCommand
+});
+import { scanDependencyCycles } from "@cleocode/core/doctor/dependency-cycles.js";
+import { getProjectRoot as getProjectRoot45 } from "@cleocode/core/paths.js";
+var doctorDepCyclesCommand;
+var init_doctor_dep_cycles = __esm({
+  "packages/cleo/src/cli/commands/doctor-dep-cycles.ts"() {
+    "use strict";
+    init_define_cli_command();
+    init_renderers();
+    doctorDepCyclesCommand = defineCommand({
+      meta: {
+        name: "dep-cycles",
+        description: "Report task dependency cycles already stored (edges written before the T12886 cycle guard) with a repair plan: the edges whose removal breaks every cycle, each with its `cleo update <id> --remove-depends <dep>` command. Read-only; never removes an edge."
+      },
+      args: {
+        json: { type: "boolean", description: "Output as JSON" },
+        human: { type: "boolean", description: "Force human-readable output" },
+        quiet: { type: "boolean", description: "Suppress non-essential output" }
+      },
+      async run() {
+        const report = await scanDependencyCycles(getProjectRoot45());
+        cliOutput(report, { command: "doctor", operation: "doctor.dep-cycles.run" });
+        if (report.cycleCount > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
+          process.exitCode = 2;
+        }
+      }
+    });
+  }
+});
+
 // packages/cleo/src/cli/commands/doctor-exodus-residue.ts
 var doctor_exodus_residue_exports = {};
 __export(doctor_exodus_residue_exports, {
@@ -63794,7 +63907,7 @@ var doctor_legacy_backups_exports = {};
 __export(doctor_legacy_backups_exports, {
   doctorLegacyBackupsCommand: () => doctorLegacyBackupsCommand
 });
-import { getProjectRoot as getProjectRoot45 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot46 } from "@cleocode/core";
 import { pruneLegacyBackups, scanLegacyBackups } from "@cleocode/core/doctor/legacy-backups.js";
 function parsePositiveInt(raw, fallback) {
   if (raw === void 0 || raw === null) return fallback;
@@ -63838,7 +63951,7 @@ var init_doctor_legacy_backups = __esm({
       async run({ args }) {
         const softRetentionDays = parsePositiveInt(args["soft-retention-days"], 30);
         const hardRetentionDays = parsePositiveInt(args["hard-retention-days"], 90);
-        const projectRoot = getProjectRoot45();
+        const projectRoot = getProjectRoot46();
         let result;
         if (args.prune === true) {
           const dryRun = args["dry-run"] !== false;
@@ -63904,7 +64017,7 @@ var doctor_malformed_ids_exports = {};
 __export(doctor_malformed_ids_exports, {
   doctorMalformedIdsCommand: () => doctorMalformedIdsCommand
 });
-import { getProjectRoot as getProjectRoot46 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot47 } from "@cleocode/core";
 import { scanMalformedTaskIds } from "@cleocode/core/doctor/malformed-task-ids.js";
 var doctorMalformedIdsCommand;
 var init_doctor_malformed_ids = __esm({
@@ -63927,7 +64040,7 @@ var init_doctor_malformed_ids = __esm({
         quiet: { type: "boolean", description: "Suppress non-essential output" }
       },
       async run({ args }) {
-        const report = await scanMalformedTaskIds(getProjectRoot46(), { fix: args.fix === true });
+        const report = await scanMalformedTaskIds(getProjectRoot47(), { fix: args.fix === true });
         cliOutput(report, {
           command: "doctor",
           operation: "doctor.malformed-ids.run"
@@ -63954,7 +64067,7 @@ import {
   repairMalformedManifestRows,
   rollbackManifestRepair
 } from "@cleocode/core/memory/pipeline-manifest-sqlite.js";
-import { getProjectRoot as getProjectRoot47 } from "@cleocode/core/paths.js";
+import { getProjectRoot as getProjectRoot48 } from "@cleocode/core/paths.js";
 var doctorManifestRowsCommand;
 var init_doctor_manifest_rows = __esm({
   "packages/cleo/src/cli/commands/doctor-manifest-rows.ts"() {
@@ -63985,7 +64098,7 @@ var init_doctor_manifest_rows = __esm({
         quiet: { type: "boolean", description: "Suppress non-essential output" }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot47();
+        const projectRoot = getProjectRoot48();
         if (typeof args.rollback === "string" && args.rollback !== "") {
           const result = await rollbackManifestRepair(args.rollback, projectRoot);
           cliOutput(result, { command: "doctor", operation: "doctor.manifest-rows.rollback" });
@@ -64087,7 +64200,7 @@ var doctor_nexus_residency_exports = {};
 __export(doctor_nexus_residency_exports, {
   doctorNexusResidencyCommand: () => doctorNexusResidencyCommand
 });
-import { getCleoHome as getCleoHome6, getProjectRoot as getProjectRoot48 } from "@cleocode/core";
+import { getCleoHome as getCleoHome6, getProjectRoot as getProjectRoot49 } from "@cleocode/core";
 import { scanNexusSchemaResidency } from "@cleocode/core/doctor/nexus-schema-residency.js";
 var doctorNexusResidencyCommand;
 var init_doctor_nexus_residency = __esm({
@@ -64106,7 +64219,7 @@ var init_doctor_nexus_residency = __esm({
         quiet: { type: "boolean", description: "Suppress non-essential output" }
       },
       async run() {
-        const result = scanNexusSchemaResidency(getProjectRoot48(), getCleoHome6());
+        const result = scanNexusSchemaResidency(getProjectRoot49(), getCleoHome6());
         cliOutput(result, {
           command: "doctor",
           operation: "doctor.nexus-residency.run"
@@ -64124,7 +64237,7 @@ var doctor_project_identity_exports = {};
 __export(doctor_project_identity_exports, {
   doctorProjectIdentityCommand: () => doctorProjectIdentityCommand
 });
-import { getProjectRoot as getProjectRoot49 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot50 } from "@cleocode/core";
 import {
   inspectProjectIdentity,
   inspectProjectNameDrift,
@@ -64149,7 +64262,7 @@ var init_doctor_project_identity = __esm({
         quiet: { type: "boolean", description: "Suppress non-essential output" }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot49();
+        const projectRoot = getProjectRoot50();
         if (!args.resolve) {
           const report = inspectProjectIdentity(projectRoot);
           const nameDrift = await inspectProjectNameDrift(projectRoot);
@@ -64688,7 +64801,7 @@ var doctor_repair_exports = {};
 __export(doctor_repair_exports, {
   doctorRepairCommand: () => doctorRepairCommand
 });
-import { getLogger as getLogger21, getProjectRoot as getProjectRoot50 } from "@cleocode/core";
+import { getLogger as getLogger21, getProjectRoot as getProjectRoot51 } from "@cleocode/core";
 import { repairMalformedDbs } from "@cleocode/core/store/repair-malformed-dbs.js";
 var doctorRepairCommand;
 var init_doctor_repair = __esm({
@@ -64737,7 +64850,7 @@ var init_doctor_repair = __esm({
           return;
         }
         const result = repairMalformedDbs({
-          projectRoot: getProjectRoot50(),
+          projectRoot: getProjectRoot51(),
           roles: roleArg.length > 0 ? [roleArg] : void 0,
           dryRun,
           logger: getLogger21("doctor-repair"),
@@ -64939,7 +65052,7 @@ var doctor_superseded_store_exports = {};
 __export(doctor_superseded_store_exports, {
   doctorSupersededStoreCommand: () => doctorSupersededStoreCommand
 });
-import { getProjectRoot as getProjectRoot51 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot52 } from "@cleocode/core";
 import { scanSupersededStores } from "@cleocode/core/doctor/superseded-store.js";
 import { reconcileSupersededStores } from "@cleocode/core/store/exodus/index.js";
 var doctorSupersededStoreCommand;
@@ -64972,7 +65085,7 @@ var init_doctor_superseded_store = __esm({
       },
       async run({ args }) {
         if (args.reconcile === true) {
-          const receipt = await reconcileSupersededStores(getProjectRoot51(), {
+          const receipt = await reconcileSupersededStores(getProjectRoot52(), {
             dryRun: args["dry-run"] === true,
             additive: args.additive === true
           });
@@ -64994,7 +65107,7 @@ var init_doctor_superseded_store = __esm({
           );
           return;
         }
-        const result = scanSupersededStores(getProjectRoot51());
+        const result = scanSupersededStores(getProjectRoot52());
         cliOutput(result, {
           command: "doctor",
           operation: "doctor.superseded-store.run"
@@ -65095,7 +65208,7 @@ import {
   rollbackTwinCollapse
 } from "@cleocode/core/doctor/twin-collapse.js";
 import { CleoError as CleoError8 } from "@cleocode/core/errors";
-import { getProjectRoot as getProjectRoot52 } from "@cleocode/core/paths.js";
+import { getProjectRoot as getProjectRoot53 } from "@cleocode/core/paths.js";
 function reportTwinCollapseError(error, retry) {
   if (retry && !(error instanceof CleoError8)) throw error;
   const message = error instanceof Error ? error.message : String(error);
@@ -65166,7 +65279,7 @@ var init_doctor_twin_collapse = __esm({
         quiet: { type: "boolean", description: "Suppress non-essential output" }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot52();
+        const projectRoot = getProjectRoot53();
         const guard = { cwd: process.cwd(), confirmOwnerStore: args["confirm-owner-store"] === true };
         const actions = twinCollapseActions(args);
         if (actions.length > 1) {
@@ -65244,7 +65357,7 @@ __export(doctor_worktree_stores_exports, {
   doctorWorktreeStoresCommand: () => doctorWorktreeStoresCommand
 });
 import { scanWorktreeStores } from "@cleocode/core/doctor/worktree-stores.js";
-import { getProjectRoot as getProjectRoot53, resolveStoreOwnerRoot } from "@cleocode/core/paths.js";
+import { getProjectRoot as getProjectRoot54, resolveStoreOwnerRoot } from "@cleocode/core/paths.js";
 var doctorWorktreeStoresCommand;
 var init_doctor_worktree_stores = __esm({
   "packages/cleo/src/cli/commands/doctor-worktree-stores.ts"() {
@@ -65266,7 +65379,7 @@ var init_doctor_worktree_stores = __esm({
         quiet: { type: "boolean", description: "Suppress non-essential output" }
       },
       async run({ args }) {
-        const projectRoot = resolveStoreOwnerRoot(getProjectRoot53());
+        const projectRoot = resolveStoreOwnerRoot(getProjectRoot54());
         const result = scanWorktreeStores(projectRoot, { skipCompare: args["skip-compare"] === true });
         cliOutput(result, {
           command: "doctor",
@@ -65418,7 +65531,7 @@ import {
   resumePreparedKnowledgeRepair,
   runKnowledgeDoctor as runKnowledgeDoctor2
 } from "@cleocode/core/doctor/knowledge.js";
-import { getProjectRoot as getProjectRoot54 } from "@cleocode/core/paths.js";
+import { getProjectRoot as getProjectRoot55 } from "@cleocode/core/paths.js";
 var doctorKnowledgeSubcommand;
 var init_doctor_knowledge = __esm({
   "packages/cleo/src/cli/commands/doctor-knowledge.ts"() {
@@ -65493,7 +65606,7 @@ var init_doctor_knowledge = __esm({
       },
       async run({ args }) {
         const startedAt = Date.now();
-        const root = getProjectRoot54();
+        const root = getProjectRoot55();
         let context;
         let pending;
         try {
@@ -65661,7 +65774,7 @@ import { join as join24 } from "node:path";
 import {
   ensureGlobalAgentRegistryDb,
   getGlobalAgentRegistryNativeDb,
-  getProjectRoot as getProjectRoot55,
+  getProjectRoot as getProjectRoot56,
   installAgentFromCant
 } from "@cleocode/core/internal";
 function sha256Hex(bytes) {
@@ -65849,7 +65962,7 @@ var init_migrate_agents_v2 = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot55();
+        const projectRoot = getProjectRoot56();
         const verbose = args.quiet !== true;
         if (verbose) {
           humanInfo("Scanning .cleo/cant/agents/ and .cleo/agents/ for unregistered agents...");
@@ -65893,7 +66006,7 @@ __export(doctor_exports, {
 });
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join25 } from "node:path";
-import { getProjectRoot as getProjectRoot56, pushWarning as pushWarning5 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot57, pushWarning as pushWarning5 } from "@cleocode/core";
 import { renderInvariantAuditLines } from "@cleocode/core/doctor/invariant-audit-render.js";
 import {
   quarantineRogueCleoDir,
@@ -66013,6 +66126,7 @@ var init_doctor = __esm({
     init_doctor_acceptance_drift();
     init_doctor_credentials();
     init_doctor_db_substrate();
+    init_doctor_dep_cycles();
     init_doctor_exodus();
     init_doctor_exodus_residue();
     init_doctor_fk_check();
@@ -66079,6 +66193,8 @@ var init_doctor = __esm({
         "acceptance-drift": doctorAcceptanceDriftCommand,
         // T12790 — evidence bindings whose AC row is gone (no FK): report + --fix (audited)
         "ac-bindings": doctorAcBindingsCommand,
+        // T12886 — stored task dependency cycles + repair plan (read-only)
+        "dep-cycles": doctorDepCyclesCommand,
         // T12158 — tables nexus resolves by bare name must actually live where it assumes
         "nexus-residency": doctorNexusResidencyCommand,
         // T12113 (gh#1222) — evidence-tool semaphore holders + orphan reaping
@@ -66297,7 +66413,7 @@ var init_doctor = __esm({
             const { join: pathJoin } = await import("node:path");
             const { existsSync: existsSync22 } = await import("node:fs");
             const { detectAndHealCoreWorktreeLeak } = await import("@cleocode/worktree");
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             let gitRoot = projectRoot;
             try {
               gitRoot = execFile2("git", ["rev-parse", "--show-toplevel"], {
@@ -66349,7 +66465,7 @@ var init_doctor = __esm({
           }
           if (args.brain) {
             const { computeBrainHealthDashboard } = await import("@cleocode/core/memory/brain-health-dashboard.js");
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const dashboard = await computeBrainHealthDashboard(projectRoot);
             cliOutput(dashboard, { command: "doctor", operation: "doctor.brain" });
             if (dashboard.hasP0Failure) {
@@ -66358,7 +66474,7 @@ var init_doctor = __esm({
             return;
           }
           if (args["scan-test-fixtures-in-prod"]) {
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const matches = await scanTestFixturesInProd(projectRoot);
             const dryRun = args["dry-run"] !== false && args.quarantine !== true;
             const quarantined = !dryRun && matches.length > 0 ? await quarantineTestFixtures(projectRoot, matches) : void 0;
@@ -66446,7 +66562,7 @@ var init_doctor = __esm({
             progress.complete("Comprehensive diagnostics complete");
           } else if (args["scan-rogue-cleo-dirs"]) {
             progress.step(0, "Scanning for rogue .cleo/ directories");
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const reports = scanRogueCleoDirs(projectRoot);
             progress.complete(
               `Found ${reports.length} rogue .cleo/ director${reports.length === 1 ? "y" : "ies"}`
@@ -66455,7 +66571,7 @@ var init_doctor = __esm({
           } else if (args["quarantine-rogue-cleo-dirs"]) {
             const isDryRun = args["dry-run"] === true;
             progress.step(0, `${isDryRun ? "[DRY RUN] " : ""}Scanning for rogue .cleo/ directories`);
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const reports = scanRogueCleoDirs(projectRoot);
             if (reports.length === 0) {
               progress.complete("No rogue .cleo/ directories found \u2014 nothing to quarantine");
@@ -66509,7 +66625,7 @@ var init_doctor = __esm({
             const { detectAndRemoveLegacyGlobalFiles, detectAndRemoveStrayProjectNexus } = await import("@cleocode/core/store/cleanup-legacy.js");
             const { getCleoHome: getCleoHome8 } = await import("@cleocode/core");
             const cleoHome = getCleoHome8();
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const legacyResult = detectAndRemoveLegacyGlobalFiles(cleoHome);
             const strayResult = detectAndRemoveStrayProjectNexus(projectRoot);
             const isDryRun = args["dry-run"] === true;
@@ -66542,7 +66658,7 @@ var init_doctor = __esm({
           } else if (args["audit-worktree-orphans"]) {
             progress.step(0, "Comprehensive worktree anomaly audit (T9808 / council D009)");
             const { auditWorktreeOrphansComprehensive, scanWorktreeOrphansBudgeted } = await import("@cleocode/core/doctor/worktree-orphans.js");
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const timeoutSecs = args["timeout"] !== void 0 ? Number.parseInt(String(args["timeout"]), 10) : 30;
             const timeoutMs = Number.isFinite(timeoutSecs) && timeoutSecs > 0 ? timeoutSecs * 1e3 : 3e4;
             const maxEntriesPerLevel = args["max-entries-per-level"] !== void 0 ? Number.parseInt(String(args["max-entries-per-level"]), 10) : 500;
@@ -66599,7 +66715,7 @@ var init_doctor = __esm({
               `${isDryRun ? "[DRY RUN] " : ""}Scanning + pruning worktree-orphan .cleo/ directories`
             );
             const { pruneWorktreeOrphans, scanWorktreeOrphansBudgeted } = await import("@cleocode/core/doctor/worktree-orphans.js");
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const timeoutSecs = args["timeout"] !== void 0 ? Number.parseInt(String(args["timeout"]), 10) : 30;
             const timeoutMs = Number.isFinite(timeoutSecs) && timeoutSecs > 0 ? timeoutSecs * 1e3 : 3e4;
             const maxEntriesPerLevel = args["max-entries-per-level"] !== void 0 ? Number.parseInt(String(args["max-entries-per-level"]), 10) : 500;
@@ -66678,7 +66794,7 @@ var init_doctor = __esm({
               `${isDryRun ? "[DRY RUN] " : ""}Migrating .cleo/worktree-include \u2192 .worktreeinclude`
             );
             const { migrateWorktreeIncludeFile } = await import("@cleocode/core");
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const result = await migrateWorktreeIncludeFile(projectRoot, { dryRun: isDryRun });
             progress.complete(`Migration ${result.action}`);
             cliOutput(result, { command: "doctor", operation: "doctor.migrate-worktree-include" });
@@ -66697,7 +66813,7 @@ var init_doctor = __esm({
             const stepLabel = isFocusedAlias ? "Auditing Saga hierarchy for ADR-073 invariants" : "Walking central INVARIANTS_REGISTRY";
             progress.step(0, stepLabel);
             const { auditInvariantRegistry } = await import("@cleocode/core/doctor/invariant-audit.js");
-            const projectRoot = getProjectRoot56();
+            const projectRoot = getProjectRoot57();
             const result = await auditInvariantRegistry(projectRoot, { adrFilter });
             const operation = isFocusedAlias ? "doctor.audit-sagas" : "doctor.audit-invariants";
             const summary = `Invariant audit complete \u2014 ${result.totalCount} entries walked, ${result.errorCount} error / ${result.warningCount} warning / ${result.infoCount} info violation(s), ${result.notApplicableCount} not-applicable, ${result.documentedCount} documented`;
@@ -66719,7 +66835,7 @@ var init_doctor = __esm({
               { command: "doctor", operation: "admin.health" }
             );
             try {
-              const projectRoot = getProjectRoot56();
+              const projectRoot = getProjectRoot57();
               const conflicts = readMigrationConflicts(projectRoot);
               if (conflicts.length > 0) {
                 progress.complete(
@@ -66750,7 +66866,7 @@ var init_doctor = __esm({
               progress.complete("Health check complete");
             }
             try {
-              const projectRoot = getProjectRoot56();
+              const projectRoot = getProjectRoot57();
               const { auditSagaHierarchy } = await import("@cleocode/core/doctor/saga-audit.js");
               const sagaAudit = await auditSagaHierarchy(projectRoot);
               if (sagaAudit.sagas.length === 0) {
@@ -66777,6 +66893,26 @@ Saga Hierarchy (${sagaAudit.sagas.length} saga(s), ${sagaAudit.count} violation(
               humanLine(`
 Saga Hierarchy: audit skipped (${msg})`);
             }
+            try {
+              const { scanDependencyCycles: scanDependencyCycles2 } = await import("@cleocode/core/doctor/dependency-cycles.js");
+              const cycles = await scanDependencyCycles2(getProjectRoot57());
+              humanLine(
+                `
+Dependency cycles: ${cycles.cycleCount} (${cycles.edgeCount} edge(s) checked)`
+              );
+              for (const c of cycles.components) humanLine(`  ${c.cycle.join(" \u2192 ")}`);
+              if (cycles.repairPlan.length > 0) {
+                humanLine("  Repair plan (review first; `cleo doctor dep-cycles` for JSON):");
+                for (const r of cycles.repairPlan) humanLine(`    ${r.command}`);
+              }
+              if (cycles.cycleCount > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
+                process.exitCode = 2;
+              }
+            } catch (err) {
+              const msg = err instanceof Error ? err.message : String(err);
+              humanLine(`
+Dependency cycles: check skipped (${msg})`);
+            }
           }
         } catch (err) {
           progress.error("Health check failed");
@@ -66798,7 +66934,7 @@ async function batchEntry(taskId, result, args) {
     return { taskId, completed: false, error: code, message, next: fix };
   }
   const params = completeDispatchParams({ ...args, taskId, "if-match": void 0 });
-  const done = await dispatchRaw("mutate", "tasks", "complete", params);
+  const done = await withoutOutputPointer(() => dispatchRaw("mutate", "tasks", "complete", params));
   const recordedGates = result.data.recordedGates;
   if (done.success) return { taskId, recordedGates, completed: true };
   const failure = { error: "E_DONE_BLOCKED", message: done.error?.message, next: done.error?.fix };
@@ -66834,6 +66970,7 @@ var init_done = __esm({
   "packages/cleo/src/cli/commands/done.ts"() {
     "use strict";
     init_cli();
+    init_field_context();
     init_define_cli_command();
     init_renderers();
     init_complete();
@@ -66869,8 +67006,8 @@ var init_done = __esm({
           process.exitCode = 2;
           return;
         }
-        const { getProjectRoot: getProjectRoot74 } = await import("@cleocode/core/paths.js");
-        const options = { projectRoot: getProjectRoot74(), ...parsed.options };
+        const { getProjectRoot: getProjectRoot75 } = await import("@cleocode/core/paths.js");
+        const options = { projectRoot: getProjectRoot75(), ...parsed.options };
         const requested = [
           ...new Set([args.taskId, ...args._ ?? []].map(String))
         ];
@@ -66920,11 +67057,13 @@ var init_done = __esm({
           process.exitCode = recorded.error.exitCode ?? 1;
           return;
         }
-        const completed = await dispatchRaw(
-          "mutate",
-          "tasks",
-          "complete",
-          completeDispatchParams({ ...args, "if-match": void 0 })
+        const completed = await withoutOutputPointer(
+          () => dispatchRaw(
+            "mutate",
+            "tasks",
+            "complete",
+            completeDispatchParams({ ...args, "if-match": void 0 })
+          )
         );
         if (!completed.success) {
           const details = {
@@ -68230,7 +68369,7 @@ __export(gateway_exports, {
   gatewayOpenapiSubCommand: () => gatewayOpenapiSubCommand
 });
 import { resolve as resolve8 } from "node:path";
-import { generateOpenApi, getProjectRoot as getProjectRoot57 } from "@cleocode/core";
+import { generateOpenApi, getProjectRoot as getProjectRoot58 } from "@cleocode/core";
 var gatewayOpenapiSubCommand, gatewayCommand;
 var init_gateway = __esm({
   "packages/cleo/src/cli/commands/gateway.ts"() {
@@ -68262,7 +68401,7 @@ var init_gateway = __esm({
         const pathCount = Object.keys(doc.paths).length;
         if (typeof args.out === "string" && args.out.length > 0) {
           const { writeFileSync: writeFileSync8 } = await import("node:fs");
-          const target = resolve8(getProjectRoot57(), args.out);
+          const target = resolve8(getProjectRoot58(), args.out);
           writeFileSync8(target, json2, "utf8");
           cliOutput(
             { out: target, pathCount, version: doc.info.version, openapi: doc.openapi },
@@ -68723,7 +68862,7 @@ var go_exports = {};
 __export(go_exports, {
   goCommand: () => goCommand
 });
-import { getProjectRoot as getProjectRoot58, go } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot59, go } from "@cleocode/core";
 var goCommand;
 var init_go = __esm({
   "packages/cleo/src/cli/commands/go.ts"() {
@@ -68749,7 +68888,7 @@ var init_go = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot58();
+        const projectRoot = getProjectRoot59();
         const { getCurrentSessionId, resolveBoundSessionId } = await import("@cleocode/core/internal");
         let sessionId = getCurrentSessionId(projectRoot) ?? void 0;
         if (sessionId === void 0) {
@@ -68777,7 +68916,7 @@ var goal_exports = {};
 __export(goal_exports, {
   goalCommand: () => goalCommand
 });
-import { getProjectRoot as getProjectRoot59, goal } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot60, goal } from "@cleocode/core";
 function resolveGoalKind(task) {
   if (typeof task === "string" && task.length > 0) {
     if (!isValidGoalTargetTaskId(task)) {
@@ -68824,7 +68963,7 @@ var init_goal2 = __esm({
         }
         const record = await goal.createGoal(
           { goalKind: kindResult.kind, intent, turnBudget: resolveTurnBudget(args.turns) },
-          getProjectRoot59()
+          getProjectRoot60()
         );
         cliOutput(record, { command: "goal set", operation: "goal.set" });
       }
@@ -68835,7 +68974,7 @@ var init_goal2 = __esm({
         description: "Show the current agent's active goal (per-agent scoped)."
       },
       async run() {
-        const record = await goal.getActiveGoal(getProjectRoot59());
+        const record = await goal.getActiveGoal(getProjectRoot60());
         cliOutput(record ?? { active: null }, { command: "goal status", operation: "goal.status" });
       }
     });
@@ -68857,7 +68996,7 @@ var init_goal2 = __esm({
           });
           return;
         }
-        const cwd = getProjectRoot59();
+        const cwd = getProjectRoot60();
         const parent = await goal.getActiveGoal(cwd);
         if (!parent) {
           cliError(
@@ -68905,7 +69044,7 @@ var init_goal2 = __esm({
           });
           return;
         }
-        const cwd = getProjectRoot59();
+        const cwd = getProjectRoot60();
         const result = await goal.advanceGoalWithPersist(goalId, { cwd });
         if (!result) {
           cliError(`Goal '${goalId}' not found.`, 4 /* NOT_FOUND */, { name: "E_NOT_FOUND" });
@@ -68930,7 +69069,7 @@ var init_goal2 = __esm({
           });
           return;
         }
-        const cwd = getProjectRoot59();
+        const cwd = getProjectRoot60();
         const active = await goal.getActiveGoal(cwd);
         if (!active) {
           cliError(
@@ -69977,7 +70116,7 @@ var hygiene_exports = {};
 __export(hygiene_exports, {
   hygieneCommand: () => hygieneCommand
 });
-import { getProjectRoot as getProjectRoot60 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot61 } from "@cleocode/core";
 import { runSpawnReadinessHygieneCli } from "@cleocode/core/hygiene/validate-spawn-readiness.js";
 var hygieneCommand;
 var init_hygiene = __esm({
@@ -70006,7 +70145,7 @@ var init_hygiene = __esm({
             }
           },
           async run({ args }) {
-            const projectRoot = args["project-root"] || getProjectRoot60() || process.cwd();
+            const projectRoot = args["project-root"] || getProjectRoot61() || process.cwd();
             const worktreePath = args["worktree-path"];
             await runSpawnReadinessHygieneCli(projectRoot, worktreePath);
           }
@@ -71349,7 +71488,7 @@ var llm_cost_exports = {};
 __export(llm_cost_exports, {
   costCommand: () => costCommand
 });
-import { getProjectRoot as getProjectRoot61 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot62 } from "@cleocode/core/internal";
 import { computeCost } from "@cleocode/core/llm/usage-pricing";
 function resolveSessionId(raw) {
   if (raw === "current") {
@@ -71422,7 +71561,7 @@ var init_llm_cost = __esm({
           process.exit(6);
         }
         const sessionId = resolveSessionId(rawSessionId);
-        const projectRoot = getProjectRoot61(process.cwd());
+        const projectRoot = getProjectRoot62(process.cwd());
         let breakdown;
         try {
           breakdown = await loadSessionCostBreakdown(projectRoot, sessionId);
@@ -72811,7 +72950,7 @@ var memory_exports = {};
 __export(memory_exports, {
   memoryCommand: () => memoryCommand
 });
-import { getProjectRoot as getProjectRoot62 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot63 } from "@cleocode/core";
 import {
   getBrainDb as getBrainDb2,
   getDreamStatus,
@@ -73769,7 +73908,7 @@ var init_memory3 = __esm({
       },
       args: {},
       async run() {
-        const root = getProjectRoot62();
+        const root = getProjectRoot63();
         try {
           const result = await runConsolidation(root);
           cliOutput(result, { command: "memory-consolidate", operation: "memory.consolidate" });
@@ -73793,7 +73932,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot62();
+        const root = getProjectRoot63();
         if (args.status) {
           try {
             const status = await getDreamStatus(root);
@@ -73830,7 +73969,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot62();
+        const root = getProjectRoot63();
         try {
           const { runObserver, runReflector } = await import("@cleocode/core/memory");
           const observerResult = await runObserver(root, args.session, {
@@ -73870,7 +74009,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot62();
+        const root = getProjectRoot63();
         await getBrainDb2(root);
         const { getBrainNativeDb: getBrainNativeDb3 } = await import("@cleocode/core/internal");
         const nativeDb = getBrainNativeDb3();
@@ -73908,7 +74047,7 @@ var init_memory3 = __esm({
       },
       async run({ args }) {
         const core2 = await import("@cleocode/core/internal");
-        const nexusDb = await core2.getNexusDb(getProjectRoot62());
+        const nexusDb = await core2.getNexusDb(getProjectRoot63());
         const result = args.restore ? await core2.restorePrunedTraits(
           nexusDb,
           String(args.restore),
@@ -73938,7 +74077,7 @@ var init_memory3 = __esm({
           return;
         }
         const core2 = await import("@cleocode/core/internal");
-        const nexusDb = await core2.getNexusDb(getProjectRoot62());
+        const nexusDb = await core2.getNexusDb(getProjectRoot63());
         const previous = await core2.setUserProfileTraitScope(nexusDb, String(args.key), scope);
         if (previous === null) {
           cliError(`No user-profile trait "${args.key}"`, "E_NOT_FOUND", { name: "E_NOT_FOUND" });
@@ -73962,7 +74101,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot62();
+        const root = getProjectRoot63();
         try {
           await getBrainDb2(root);
           const { totalDuplicateRows, groups } = await scanDuplicateEntries();
@@ -74008,7 +74147,7 @@ var init_memory3 = __esm({
       async run({ args }) {
         const sourceDir = args.from;
         const isDryRun = !!args["dry-run"];
-        const projectRoot = getProjectRoot62();
+        const projectRoot = getProjectRoot63();
         try {
           const result = await importMemoryFiles({
             sourceDir,
@@ -74159,7 +74298,7 @@ var init_memory3 = __esm({
       },
       args: {},
       async run() {
-        const root = getProjectRoot62();
+        const root = getProjectRoot63();
         try {
           await getBrainDb2(root);
           const result = await getTierStats(root);
@@ -74202,7 +74341,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot62();
+        const root = getProjectRoot63();
         const targetTier = args.to;
         const reason = args.reason;
         const validTiers = ["medium", "long"];
@@ -74268,7 +74407,7 @@ var init_memory3 = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot62();
+        const root = getProjectRoot63();
         const targetTier = args.to;
         const reason = args.reason;
         const validTiers = ["short", "medium"];
@@ -74741,7 +74880,7 @@ var migrate_claude_mem_exports = {};
 __export(migrate_claude_mem_exports, {
   migrateClaudeMemCommand: () => migrateClaudeMemCommand
 });
-import { getProjectRoot as getProjectRoot63, migrateClaudeMem } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot64, migrateClaudeMem } from "@cleocode/core/internal";
 import { ingestLooseAgentOutputs, ingestRcasdDirectories } from "@cleocode/core/memory";
 import { getDb as getDb2 } from "@cleocode/core/store/sqlite";
 var storageCommand, claudeMemCommand, manifestIngestCommand, migrateClaudeMemCommand;
@@ -74804,7 +74943,7 @@ var init_migrate_claude_mem = __esm({
         }
       },
       async run({ args }) {
-        const root = getProjectRoot63();
+        const root = getProjectRoot64();
         try {
           const result = await migrateClaudeMem(root, {
             sourcePath: args.source,
@@ -74853,7 +74992,7 @@ var init_migrate_claude_mem = __esm({
         }
       },
       async run({ args }) {
-        const projectRoot = getProjectRoot63();
+        const projectRoot = getProjectRoot64();
         try {
           const db = await getDb2(projectRoot);
           const rcasdFlag = Boolean(args.rcasd);
@@ -74971,7 +75110,7 @@ __export(nexus_exports, {
 import { statSync as statSync2 } from "node:fs";
 import { appendFile as appendFile2, mkdir as mkdir5 } from "node:fs/promises";
 import path4 from "node:path";
-import { getProjectRoot as getProjectRoot64 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot65 } from "@cleocode/core";
 import { getSymbolImpact } from "@cleocode/core/nexus";
 import { runNexusAnalysis } from "@cleocode/core/nexus/analyze-orchestrator.js";
 import {
@@ -75142,7 +75281,7 @@ var init_nexus3 = __esm({
       async run({ args }) {
         applyJsonFlag2(args.json);
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const startTime = Date.now();
         if (args.path) {
           let isDir = false;
@@ -75202,7 +75341,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648), so the coun
           process.exitCode = 2 /* INVALID_INPUT */;
           return;
         }
-        const currentRoot = getProjectRoot64();
+        const currentRoot = getProjectRoot65();
         if (args.path && path4.resolve(repoPath) !== path4.resolve(currentRoot)) {
           cliError(
             `nexus status cannot report on '${repoPath}' from this project.
@@ -75756,7 +75895,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "clusters", { projectId, repoPath });
         const durationMs = Date.now() - startTime;
@@ -75800,7 +75939,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "flows", { projectId, repoPath });
         const durationMs = Date.now() - startTime;
@@ -75843,7 +75982,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         void appendDeprecationTelemetry("nexus.context", "cleo graph context");
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = getProjectRoot64();
+        const repoPath = getProjectRoot65();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const limit = parseInt(args.limit, 10);
         const symbolName = args.symbol;
@@ -75906,7 +76045,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         const startTime = Date.now();
         const whyFlag = !!args.why;
         const projectIdOverride = args["project-id"];
-        const repoPath = getProjectRoot64();
+        const repoPath = getProjectRoot65();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const maxDepth = Math.min(parseInt(args.depth, 10), 5);
         const symbolName = args.symbol;
@@ -76010,7 +76149,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         const projectIdOverride = args["project-id"];
         const full = !!args.full;
         const ctx = getFormatContext();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         if (args.incremental)
           humanWarn(
             "[nexus] --incremental is deprecated and has no effect: incremental is the default."
@@ -76140,7 +76279,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const name = args.name;
         const response = await dispatchRaw("mutate", "nexus", "projects.register", {
           path: repoPath,
@@ -76659,7 +76798,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "refresh-bridge", {
           repoPath,
@@ -76765,7 +76904,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const projectIdOverride = args["project-id"];
         const beforeRef = args.before ?? "HEAD~1";
         const afterRef = args.after ?? "HEAD";
@@ -76883,7 +77022,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         applyJsonFlag2(args.json);
         const startTime = Date.now();
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "route-map", { projectId });
         const durationMs = Date.now() - startTime;
@@ -76939,7 +77078,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         const startTime = Date.now();
         const routeSymbol = args.routeSymbol;
         const projectIdOverride = args["project-id"];
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("query", "nexus", "shape-check", { routeSymbol, projectId });
         const durationMs = Date.now() - startTime;
@@ -77335,7 +77474,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const projectIdOverride = args["project-id"];
         const projectId = projectIdOverride ?? Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "contracts-sync", {
@@ -77445,7 +77584,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
       async run({ args }) {
         applyJsonFlag2(args.json);
         const startTime = Date.now();
-        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot64();
+        const repoPath = args.path ? path4.resolve(args.path) : getProjectRoot65();
         const projectId = Buffer.from(repoPath).toString("base64url").slice(0, 32);
         const response = await dispatchRaw("mutate", "nexus", "contracts-link-tasks", {
           projectId,
@@ -77529,7 +77668,7 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
         const isIncremental = !!args.incremental;
         try {
           const result = await runNexusWiki({
-            projectRoot: getProjectRoot64(),
+            projectRoot: getProjectRoot65(),
             outputDir,
             communityFilter,
             incremental: isIncremental
@@ -77879,7 +78018,7 @@ __export(orchestrate_exports, {
 });
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { orchestration } from "@cleocode/core";
-import { BUILD_CONFIG as BUILD_CONFIG2, getProjectRoot as getProjectRoot65 } from "@cleocode/core/internal";
+import { BUILD_CONFIG as BUILD_CONFIG2, getProjectRoot as getProjectRoot66 } from "@cleocode/core/internal";
 function formatRollupTable(rollup) {
   const waves = "waves" in rollup ? rollup.waves : [rollup];
   const lines = [];
@@ -78022,7 +78161,7 @@ var init_orchestrate3 = __esm({
       },
       async run({ args }) {
         const rateWindowHours = args.window !== void 0 ? Number.parseFloat(String(args.window)) : void 0;
-        const metrics = await orchestration.collectOrchestrateDashboard(getProjectRoot65(), {
+        const metrics = await orchestration.collectOrchestrateDashboard(getProjectRoot66(), {
           ...rateWindowHours !== void 0 && Number.isFinite(rateWindowHours) && rateWindowHours > 0 ? { rateWindowHours } : {}
         });
         cliOutput(metrics, {
@@ -79482,7 +79621,7 @@ __export(project_exports, {
 import { resolve as resolve9 } from "node:path";
 import {
   CleoError as CleoError11,
-  getProjectRoot as getProjectRoot66,
+  getProjectRoot as getProjectRoot67,
   moveProject,
   projectLifecycle,
   renameProject,
@@ -79504,7 +79643,7 @@ function emitEngineFailure(error, operation) {
 }
 function resolveRootOrFail(operation) {
   try {
-    return getProjectRoot66();
+    return getProjectRoot67();
   } catch (err) {
     const code = err instanceof CleoError11 && typeof err.details?.["code"] === "string" ? err.details["code"] : "E_NOT_CLEO_PROJECT";
     emitEngineFailure(
@@ -80332,7 +80471,7 @@ var refresh_memory_exports = {};
 __export(refresh_memory_exports, {
   refreshMemoryCommand: () => refreshMemoryCommand
 });
-import { getProjectRoot as getProjectRoot67 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot68 } from "@cleocode/core";
 var refreshMemoryCommand;
 var init_refresh_memory = __esm({
   "packages/cleo/src/cli/commands/refresh-memory.ts"() {
@@ -80345,7 +80484,7 @@ var init_refresh_memory = __esm({
         description: "Regenerate .cleo/memory-bridge.md from brain.db"
       },
       async run() {
-        const projectDir = getProjectRoot67();
+        const projectDir = getProjectRoot68();
         const { writeMemoryBridge } = await import("@cleocode/core/internal");
         const result = await writeMemoryBridge(projectDir);
         if (result.written) {
@@ -81931,7 +82070,7 @@ import fs3 from "node:fs";
 import path5 from "node:path";
 import {
   CleoError as CleoError13,
-  getProjectRoot as getProjectRoot68,
+  getProjectRoot as getProjectRoot69,
   getTaskAccessor as getTaskAccessor3,
   parseConflictReport,
   setAtPath
@@ -81952,7 +82091,7 @@ var init_restore = __esm({
         description: "Apply manually-resolved conflicts from .cleo/restore-conflicts.md"
       },
       async run() {
-        const projectRoot = getProjectRoot68();
+        const projectRoot = getProjectRoot69();
         const reportPath = path5.join(projectRoot, CLEO_DIR_NAME3, RESTORE_CONFLICTS_MD);
         if (!fs3.existsSync(reportPath)) {
           humanLine("No pending restore conflicts. Nothing to finalize.");
@@ -82881,8 +83020,8 @@ var init_saga = __esm({
         }
       },
       async run({ args }) {
-        const { sagas: sagas2, getProjectRoot: getProjectRoot74 } = await import("@cleocode/core");
-        const projectRoot = getProjectRoot74();
+        const { sagas: sagas2, getProjectRoot: getProjectRoot75 } = await import("@cleocode/core");
+        const projectRoot = getProjectRoot75();
         const sagaId = typeof args.sagaId === "string" && args.sagaId.length > 0 ? args.sagaId : void 0;
         const result = await sagas2.sagaNext(projectRoot, { sagaId });
         cliOutput(result.success ? result.data : result, { command: "saga", operation: "saga.next" });
@@ -84713,7 +84852,7 @@ var sequence_exports = {};
 __export(sequence_exports, {
   sequenceCommand: () => sequenceCommand
 });
-import { getProjectRoot as getProjectRoot69 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot70 } from "@cleocode/core/internal";
 var showCommand12, checkCommand7, repairCommand3, sequenceCommand;
 var init_sequence = __esm({
   "packages/cleo/src/cli/commands/sequence.ts"() {
@@ -84749,7 +84888,7 @@ var init_sequence = __esm({
       meta: { name: "repair", description: "Reset counter to max + 1 if behind" },
       async run() {
         const { repairSequence } = await import("@cleocode/core/internal");
-        const projectRoot = getProjectRoot69();
+        const projectRoot = getProjectRoot70();
         const repair = await repairSequence(projectRoot);
         const result = {
           repaired: repair.repaired,
@@ -85346,8 +85485,8 @@ var init_session4 = __esm({
         "audit-scope": { type: "string", description: "Audit log scope (global|local)" }
       },
       async run({ args }) {
-        const { detectSessionDrift, getProjectRoot: getProjectRoot74 } = await import("@cleocode/core");
-        const projectRoot = await getProjectRoot74();
+        const { detectSessionDrift, getProjectRoot: getProjectRoot75 } = await import("@cleocode/core");
+        const projectRoot = await getProjectRoot75();
         const scope = args["audit-scope"] === "local" ? "local" : "global";
         const report = await detectSessionDrift({ projectRoot, auditScope: scope });
         cliOutput(report, { command: "session drift", operation: "session.drift" });
@@ -88048,13 +88187,13 @@ var init_telemetry2 = __esm({
 // packages/cleo/src/cli/commands/templates/lib.ts
 import { readFileSync as readFileSync13 } from "node:fs";
 import { isAbsolute as isAbsolute3, resolve as resolve10 } from "node:path";
-import { getProjectRoot as getProjectRoot70 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot71 } from "@cleocode/core";
 import { resolveSourcePathAbsolute } from "@cleocode/core/templates/registry";
 function resolveProjectRoot6(raw) {
   if (typeof raw === "string" && raw.length > 0) {
     return isAbsolute3(raw) ? raw : resolve10(process.cwd(), raw);
   }
-  return getProjectRoot70();
+  return getProjectRoot71();
 }
 function readTemplateSource(entry) {
   const sourceAbsolute = resolveSourcePathAbsolute(entry);
@@ -88838,7 +88977,7 @@ __export(token_exports, {
   tokenCommand: () => tokenCommand
 });
 import { readFileSync as readFileSync17 } from "node:fs";
-import { getProjectRoot as getProjectRoot71, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot72, measureTokenExchange, recordTokenExchange as recordTokenExchange2 } from "@cleocode/core/internal";
 function readPayload(args, textKey, fileKey) {
   const text = args[textKey];
   const file = args[fileKey];
@@ -89002,7 +89141,7 @@ var init_token = __esm({
           domain: args.domain,
           operation: args.operation
         };
-        const result = args.record ? await recordTokenExchange2(getProjectRoot71(), input2) : await measureTokenExchange(input2);
+        const result = args.record ? await recordTokenExchange2(getProjectRoot72(), input2) : await measureTokenExchange(input2);
         cliOutput(result, {
           command: "token",
           operation: args.record ? "admin.token.record" : "token.estimate"
@@ -89038,7 +89177,7 @@ __export(transcript_exports, {
 });
 import { homedir as homedir3 } from "node:os";
 import { join as join35 } from "node:path";
-import { getProjectRoot as getProjectRoot72 } from "@cleocode/core";
+import { getProjectRoot as getProjectRoot73 } from "@cleocode/core";
 import {
   parseDurationMs,
   pruneTranscripts,
@@ -89068,7 +89207,7 @@ var init_transcript = __esm({
       async run({ args }) {
         if (args.pending) {
           try {
-            const projectRoot = getProjectRoot72();
+            const projectRoot = getProjectRoot73();
             const { scanPendingTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
             const pending = await scanPendingTranscripts(projectRoot);
             cliOutput(
@@ -89165,7 +89304,7 @@ var init_transcript = __esm({
       async run({ args }) {
         const tier = args.tier ?? "warm";
         const dryRun = args["dry-run"] ?? false;
-        const projectRoot = getProjectRoot72();
+        const projectRoot = getProjectRoot73();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { findSessionTranscriptPath, listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -89281,7 +89420,7 @@ var init_transcript = __esm({
         const dryRun = args["dry-run"] ?? false;
         const olderThanHours = args["older-than-hours"] ? Number.parseInt(args["older-than-hours"], 10) : 24;
         const limit = args.limit ? Number.parseInt(args.limit, 10) : void 0;
-        const projectRoot = getProjectRoot72();
+        const projectRoot = getProjectRoot73();
         try {
           const { extractTranscript } = await import("@cleocode/core/memory/transcript-extractor.js");
           const { listAllTranscripts } = await import("@cleocode/core/memory/transcript-scanner.js");
@@ -91219,9 +91358,9 @@ var init_verify = __esm({
             return;
           }
           const { recordTaskDone } = await import("@cleocode/core/tasks/done-record.js");
-          const { getProjectRoot: getProjectRoot74 } = await import("@cleocode/core/paths.js");
+          const { getProjectRoot: getProjectRoot75 } = await import("@cleocode/core/paths.js");
           const r = await recordTaskDone(args.taskId, {
-            projectRoot: getProjectRoot74(),
+            projectRoot: getProjectRoot75(),
             ...parsed.options,
             ...args.agent ? { agent: args.agent } : {}
           });
@@ -91644,9 +91783,9 @@ var init_workgraph2 = __esm({
       },
       async run({ args }) {
         const { generatePlanningDoc } = await import("@cleocode/core/workgraph");
-        const { getProjectRoot: getProjectRoot74 } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot75 } = await import("@cleocode/core");
         const { cliOutput: cliOutput2 } = await Promise.resolve().then(() => (init_renderers(), renderers_exports));
-        const projectRoot = getProjectRoot74();
+        const projectRoot = getProjectRoot75();
         const audience = String(args.audience) === "agent" ? "agent" : "maintainer";
         const result = await generatePlanningDoc(projectRoot, {
           sagaId: String(args.sagaId),
@@ -91663,9 +91802,9 @@ var init_workgraph2 = __esm({
       async run() {
         const { validateWorkGraphStructure } = await import("@cleocode/core/workgraph");
         const { taskList: taskList2 } = await import("@cleocode/core/internal");
-        const { getProjectRoot: getProjectRoot74 } = await import("@cleocode/core");
+        const { getProjectRoot: getProjectRoot75 } = await import("@cleocode/core");
         const { cliOutput: cliOutput2 } = await Promise.resolve().then(() => (init_renderers(), renderers_exports));
-        const projectRoot = getProjectRoot74();
+        const projectRoot = getProjectRoot75();
         const listResult = await taskList2(projectRoot, { limit: 5e3 });
         const tasks = listResult.success ? listResult.data?.tasks ?? [] : [];
         const nodes = tasks.map((t) => ({
@@ -91684,9 +91823,9 @@ var init_workgraph2 = __esm({
         description: "One-shot saga-to-saga workgraph dashboard (tracking checklist)"
       },
       async run() {
-        const { sagas: sagas2, getProjectRoot: getProjectRoot74 } = await import("@cleocode/core");
+        const { sagas: sagas2, getProjectRoot: getProjectRoot75 } = await import("@cleocode/core");
         const { cliOutput: cliOutput2 } = await Promise.resolve().then(() => (init_renderers(), renderers_exports));
-        const projectRoot = getProjectRoot74();
+        const projectRoot = getProjectRoot75();
         const listResult = await sagas2.sagaList(projectRoot);
         if (!listResult.success) {
           cliOutput2(listResult, { command: "workgraph", operation: "workgraph.status" });
@@ -91752,7 +91891,7 @@ __export(worktree_exports, {
   worktreeCommand: () => worktreeCommand
 });
 import readline4 from "node:readline";
-import { getProjectRoot as getProjectRoot73, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
+import { getProjectRoot as getProjectRoot74, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
 async function promptYesNo2(question) {
   return new Promise((resolve13) => {
     const rl = readline4.createInterface({ input: process.stdin, output: process.stdout });
@@ -91857,7 +91996,7 @@ var init_worktree3 = __esm({
         const staleDays = staleDaysRaw !== void 0 ? Number.parseInt(staleDaysRaw, 10) : void 0;
         const idleDaysRaw = typeof args["idle-days"] === "string" ? args["idle-days"] : void 0;
         const idleDays = idleDaysRaw !== void 0 ? Number.parseInt(idleDaysRaw, 10) : void 0;
-        const projectRoot = getProjectRoot73();
+        const projectRoot = getProjectRoot74();
         const listResult = await listWorktrees2({
           projectRoot,
           ...staleDays !== void 0 && !Number.isNaN(staleDays) ? { staleDays } : {}
@@ -92475,6 +92614,12 @@ var COMMAND_MANIFEST = [
     description: "Walk every DB in the inventory + report integrity, row counts, orphan dirs. ",
     load: async () => (await Promise.resolve().then(() => (init_doctor_db_substrate(), doctor_db_substrate_exports))).doctorDbSubstrateCommand
   },
+  {
+    exportName: "doctorDepCyclesCommand",
+    name: "dep-cycles",
+    description: "Report task dependency cycles already stored (edges written before the T12886 cycle ",
+    load: async () => (await Promise.resolve().then(() => (init_doctor_dep_cycles(), doctor_dep_cycles_exports))).doctorDepCyclesCommand
+  },
   {
     exportName: "doctorExodusResidueCommand",
     name: "exodus-residue",
@@ -93823,7 +93968,7 @@ async function runStartupMaintenance() {
     detectAndRemoveStrayProjectNexus,
     getGlobalSalt,
     getLogger: getLogger22,
-    getProjectRoot: getProjectRoot74,
+    getProjectRoot: getProjectRoot75,
     isCleanupMarkerSet,
     isMissingProjectError,
     migrateSignaldockToConduit,
@@ -93833,7 +93978,7 @@ async function runStartupMaintenance() {
   } = await import("@cleocode/core/internal");
   let projectRootForCleanup = "";
   try {
-    projectRootForCleanup = getProjectRoot74();
+    projectRootForCleanup = getProjectRoot75();
   } catch {
   }
   if (!isCleanupMarkerSet(CLI_VERSION, projectRootForCleanup)) {
@@ -93853,7 +93998,7 @@ async function runStartupMaintenance() {
   const isInitInvocation = process.argv.slice(2).some((a) => a === "init");
   if (!isInitInvocation) {
     try {
-      const _projectRootForMigration = getProjectRoot74();
+      const _projectRootForMigration = getProjectRoot75();
       if (needsSignaldockToConduitMigration(_projectRootForMigration)) {
         const migrationResult = await migrateSignaldockToConduit(_projectRootForMigration);
         if (migrationResult.status === "failed") {