@cleocode/contracts 2026.5.103 → 2026.5.105

package/dist/render/list.js

@@ -0,0 +1,39 @@
+/**
+ * Typed render contracts — list (flat) and grouped-list.
+ *
+ * Part of the Human Render Contract (Epic T10114, ADR-077). The list shape is
+ * the canonical wire format for ordered or grouped sequential output —
+ * presenters render each item according to `renderItem` (or a default).
+ *
+ * @epic T10114
+ * @task T10140
+ */
+/**
+ * Runtime type guard for `ListResponse<T>`.
+ *
+ * Checks the envelope shape only — does not inspect item payloads against `T`.
+ *
+ * @param value — candidate value to inspect.
+ * @returns `true` iff `value` matches the `ListResponse<T>` envelope shape.
+ */
+export function isListResponse(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const v = value;
+    return Array.isArray(v.items) && typeof v.total === 'number';
+}
+/**
+ * Runtime type guard for `GroupedListResponse<T>`.
+ *
+ * Checks the envelope shape only — does not inspect item payloads against `T`.
+ *
+ * @param value — candidate value to inspect.
+ * @returns `true` iff `value` matches the `GroupedListResponse<T>` envelope shape.
+ */
+export function isGroupedListResponse(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const v = value;
+    return Array.isArray(v.groups) && typeof v.total === 'number';
+}
+//# sourceMappingURL=list.js.map

package/dist/render/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/render/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAsDH;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAI,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAI,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;AAChE,CAAC"}

package/dist/render/table.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Typed render contracts — table (column-schema-driven rows).
+ *
+ * Part of the Human Render Contract (Epic T10114, ADR-077). The table shape is
+ * the canonical wire format for tabular CLI output — presenters consume the
+ * schema to compute widths, headers, and per-cell formatting.
+ *
+ * @epic T10114
+ * @task T10139
+ */
+/**
+ * Horizontal alignment hint for a column.
+ */
+export type ColumnAlign = 'left' | 'right' | 'center';
+/**
+ * Schema entry for a single table column.
+ *
+ * `key` MUST be a string-typed property on the row payload `T`. Presenters
+ * are expected to extract `row[column.key]` and pipe it through `format` when
+ * one is supplied.
+ *
+ * @typeParam T — caller-defined row payload shape.
+ */
+export interface TableColumn<T> {
+    /** Property key on the row payload. */
+    readonly key: keyof T & string;
+    /** Display header rendered above the column. */
+    readonly header: string;
+    /** Optional alignment hint. Defaults to `'left'`. */
+    readonly align?: ColumnAlign;
+    /** Optional fixed width (character count) hint. */
+    readonly width?: number;
+    /**
+     * Optional per-cell formatter. Receives the raw value at `row[key]` and
+     * returns the display string. When absent, presenters call `String(value)`.
+     */
+    readonly format?: (value: unknown) => string;
+}
+/**
+ * Column-schema metadata that accompanies every table response.
+ *
+ * @typeParam T — caller-defined row payload shape.
+ */
+export interface TableSchema<T> {
+    /** Ordered list of column descriptors. Rendering order matches this order. */
+    readonly columns: ReadonlyArray<TableColumn<T>>;
+}
+/**
+ * Top-level envelope returned by a table-shaped renderer.
+ *
+ * @typeParam T — caller-defined row payload shape.
+ */
+export interface TableResponse<T> {
+    /** Row payloads in the order they should be rendered. */
+    readonly rows: ReadonlyArray<T>;
+    /** Column schema — drives presenter formatting. */
+    readonly schema: TableSchema<T>;
+    /**
+     * Total row count. May exceed `rows.length` when the response is paginated
+     * or truncated; presenters use this to render "showing N of M" hints.
+     */
+    readonly total: number;
+}
+/**
+ * Runtime type guard for `TableResponse<T>`.
+ *
+ * Checks the envelope shape only — does not inspect row payloads against `T`.
+ *
+ * @param value — candidate value to inspect.
+ * @returns `true` iff `value` matches the `TableResponse<T>` envelope shape.
+ */
+export declare function isTableResponse<T>(value: unknown): value is TableResponse<T>;
+//# sourceMappingURL=table.d.ts.map

package/dist/render/table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/render/table.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEtD;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,uCAAuC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IAC7B,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CAC9C;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;CACjD;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAChC,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC,CAQ5E"}

package/dist/render/table.js

@@ -0,0 +1,32 @@
+/**
+ * Typed render contracts — table (column-schema-driven rows).
+ *
+ * Part of the Human Render Contract (Epic T10114, ADR-077). The table shape is
+ * the canonical wire format for tabular CLI output — presenters consume the
+ * schema to compute widths, headers, and per-cell formatting.
+ *
+ * @epic T10114
+ * @task T10139
+ */
+/**
+ * Runtime type guard for `TableResponse<T>`.
+ *
+ * Checks the envelope shape only — does not inspect row payloads against `T`.
+ *
+ * @param value — candidate value to inspect.
+ * @returns `true` iff `value` matches the `TableResponse<T>` envelope shape.
+ */
+export function isTableResponse(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const v = value;
+    if (!Array.isArray(v.rows))
+        return false;
+    if (typeof v.total !== 'number')
+        return false;
+    const schema = v.schema;
+    if (typeof schema !== 'object' || schema === null)
+        return false;
+    return Array.isArray(schema.columns);
+}
+//# sourceMappingURL=table.js.map

package/dist/render/table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"table.js","sourceRoot":"","sources":["../../src/render/table.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA2DH;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAI,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,MAA6C,CAAC;IAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC"}

package/dist/render/tree.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Typed render contracts — tree (flattened hierarchy).
+ *
+ * Part of the Human Render Contract (Epic T10114, ADR-077). The flat-tree shape
+ * is the canonical wire format for hierarchical task / saga / epic listings —
+ * presenters re-materialise the parent/child structure from `parentId` + `depth`.
+ *
+ * @epic T10114
+ * @task T10138
+ */
+/**
+ * Discriminator for a node's place in the task hierarchy.
+ *
+ * Matches the CLEO 4-tier task model (Saga → Epic → Task → Subtask).
+ */
+export type TreeNodeKind = 'saga' | 'epic' | 'task' | 'subtask';
+/**
+ * Lifecycle status of a tree node.
+ *
+ * Mirrors the canonical task status union used across CLEO.
+ */
+export type TreeNodeStatus = 'pending' | 'in_progress' | 'done' | 'blocked' | 'cancelled' | 'archived';
+/**
+ * One row in a flattened tree response.
+ *
+ * `parentId === null` identifies the root. `depth` is the integer distance
+ * from the root (root is `0`). `metadata` is the caller-defined payload —
+ * presenters MUST NOT assume any specific shape beyond `T`.
+ *
+ * @typeParam T — caller-defined metadata payload attached to the node.
+ */
+export interface FlatTreeNode<T> {
+    /** Stable, unique identifier (typically a CLEO task ID such as `T1234`). */
+    readonly id: string;
+    /** Parent identifier, or `null` if this row is the root. */
+    readonly parentId: string | null;
+    /** Integer distance from the root (root = `0`). */
+    readonly depth: number;
+    /** Discriminator slot in the CLEO 4-tier model. */
+    readonly kind: TreeNodeKind;
+    /** Lifecycle status. */
+    readonly status: TreeNodeStatus;
+    /** Display title — short enough to render on a single line. */
+    readonly title: string;
+    /** Caller-defined metadata payload. */
+    readonly metadata: T;
+}
+/**
+ * Top-level envelope returned by a tree-shaped renderer.
+ *
+ * @typeParam T — caller-defined metadata payload attached to each node.
+ */
+export interface TreeResponse<T> {
+    /** Flattened list of nodes in pre-order traversal. */
+    readonly tree: ReadonlyArray<FlatTreeNode<T>>;
+    /** Identifier of the root node — must match a node in `tree` with `parentId === null`. */
+    readonly root: string;
+    /** Total number of nodes — equal to `tree.length`. */
+    readonly totalNodes: number;
+    /** Maximum `depth` seen across `tree`. `0` for a single-node tree. */
+    readonly maxDepth: number;
+}
+/**
+ * Caller-supplied options that shape a tree response.
+ *
+ * All fields are optional. Presenters interpret unset fields as "no constraint"
+ * (e.g. unset `depth` means render the full tree).
+ */
+export interface RenderTreeOptions {
+    /** Cap the maximum depth rendered. */
+    readonly depth?: number;
+    /** Restrict the rendered node kinds. */
+    readonly kinds?: ReadonlyArray<TreeNodeKind>;
+    /** When `true`, presenters may emit unicode icons next to each row. */
+    readonly icons?: boolean;
+    /** When set, collapse subtrees beyond this child-count threshold. */
+    readonly foldAt?: number;
+    /** When `true`, presenters MAY annotate inter-task dependencies. */
+    readonly withDeps?: boolean;
+    /** When `true`, presenters MAY annotate blocker relationships. */
+    readonly withBlockers?: boolean;
+}
+/**
+ * Runtime type guard for `TreeResponse<T>`.
+ *
+ * Verifies the envelope shape without inspecting node payloads — the generic
+ * `T` cannot be checked at runtime, so callers must layer per-node validation
+ * separately if they need stronger guarantees.
+ *
+ * @param value — candidate value to inspect.
+ * @returns `true` iff `value` matches the `TreeResponse<T>` envelope shape.
+ */
+export declare function isTreeResponse<T>(value: unknown): value is TreeResponse<T>;
+//# sourceMappingURL=tree.d.ts.map

package/dist/render/tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree.d.ts","sourceRoot":"","sources":["../../src/render/tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,aAAa,GACb,MAAM,GACN,SAAS,GACT,WAAW,GACX,UAAU,CAAC;AAEf;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mDAAmD;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,wBAAwB;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,0FAA0F;IAC1F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,sCAAsC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IAC7C,uEAAuE;IACvE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,CAS1E"}

package/dist/render/tree.js

@@ -0,0 +1,30 @@
+/**
+ * Typed render contracts — tree (flattened hierarchy).
+ *
+ * Part of the Human Render Contract (Epic T10114, ADR-077). The flat-tree shape
+ * is the canonical wire format for hierarchical task / saga / epic listings —
+ * presenters re-materialise the parent/child structure from `parentId` + `depth`.
+ *
+ * @epic T10114
+ * @task T10138
+ */
+/**
+ * Runtime type guard for `TreeResponse<T>`.
+ *
+ * Verifies the envelope shape without inspecting node payloads — the generic
+ * `T` cannot be checked at runtime, so callers must layer per-node validation
+ * separately if they need stronger guarantees.
+ *
+ * @param value — candidate value to inspect.
+ * @returns `true` iff `value` matches the `TreeResponse<T>` envelope shape.
+ */
+export function isTreeResponse(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const v = value;
+    return (Array.isArray(v.tree) &&
+        typeof v.root === 'string' &&
+        typeof v.totalNodes === 'number' &&
+        typeof v.maxDepth === 'number');
+}
+//# sourceMappingURL=tree.js.map

package/dist/render/tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree.js","sourceRoot":"","sources":["../../src/render/tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAqFH;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAI,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAC/B,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/contracts",
-  "version": "2026.5.103",
+  "version": "2026.5.105",
   "description": "Domain types, interfaces, and contracts for the CLEO ecosystem",
   "type": "module",
   "main": "./dist/index.js",
@@ -138,7 +138,7 @@
   "dependencies": {
     "zod": "^4.3.6",
     "zod-to-json-schema": "^3.25.2",
-    "@cleocode/lafs": "2026.5.103"
+    "@cleocode/lafs": "2026.5.105"
   },
   "scripts": {
     "build": "tsc -b --force && node scripts/emit-schemas.mjs",

package/src/boundary.ts

@@ -318,9 +318,9 @@ export const BOUNDARY_REGISTRY: readonly BoundaryEntry[] = [
       'Verified-dead code: 531 LOC Rust crate referenced ONLY by packages/core/src/llm/rust/__tests__/. Production transports (chat-completions/gemini/openai) import StreamingThinkScrubber from the TS think-scrubber.js path. CLEO_USE_RUST gate is never set in any workflow. Scheduled for deletion in T10205; see ADR-078 implementation tasks.',
   },
   {
-    module: 'conduit-core',
+    module: 'cleo-conduit-core',
     intent: 'data-manifest',
-    rustCore: 'crates/conduit-core',
+    rustCore: 'crates/cleo-conduit-core',
     canonicalHome: 'cleocode',
     perfBudget: {
       latency_p50_ms: 10,
@@ -331,7 +331,7 @@ export const BOUNDARY_REGISTRY: readonly BoundaryEntry[] = [
     },
     amendments: [],
     rationale:
-      'Conduit serde-types crate (681 LOC) — stable contract surface consumed by cant-core, signaldock-protocol, signaldock-core, integration-tests, AND external /mnt/projects/signaldock-core + /mnt/projects/signaldock/backend via git deps. Mirrors @cleocode/contracts/conduit.ts. Forced KEEP+publish=true: deleting breaks production, and signaldock-protocol publish requires it.',
+      'Conduit serde-types crate (681 LOC) — renamed from conduit-core to cleo-conduit-core (T10185, saga T10180) because conduit-core is squatted on crates.io. Stable contract surface consumed by cant-core, signaldock-protocol, signaldock-core, integration-tests, AND external /mnt/projects/signaldock-core + /mnt/projects/signaldock/backend via git deps. Mirrors @cleocode/contracts/conduit.ts. Forced KEEP+publish=true: deleting breaks production, and signaldock-protocol publish requires it.',
   },
   {
     module: 'integration-tests',
@@ -348,7 +348,7 @@ export const BOUNDARY_REGISTRY: readonly BoundaryEntry[] = [
     },
     amendments: [],
     rationale:
-      'Internal Rust test harness (241 LOC) over lafs-core/conduit-core/cant-core/cant-router/signaldock-core. publish=false intentional — test code never ships.',
+      'Internal Rust test harness (241 LOC) over lafs-core/cleo-conduit-core/cant-core/cant-router/signaldock-core. publish=false intentional — test code never ships.',
   },
   {
     module: 'lafs-core',
@@ -366,7 +366,7 @@ export const BOUNDARY_REGISTRY: readonly BoundaryEntry[] = [
     },
     amendments: [],
     rationale:
-      'LAFS envelope serialization core (1,432 LOC) consumed by conduit-core, signaldock-protocol, lafs-napi, integration-tests. Mirrors @cleocode/lafs/src/envelope.ts. Flip publish=true to expose canonical envelope spec as a Rust library.',
+      'LAFS envelope serialization core (1,432 LOC) consumed by cleo-conduit-core, signaldock-protocol, lafs-napi, integration-tests. Mirrors @cleocode/lafs/src/envelope.ts. Flip publish=true to expose canonical envelope spec as a Rust library.',
   },
   {
     module: 'lafs-napi',

package/src/errors.ts

@@ -519,3 +519,74 @@ export function isErrorResult(result: {
 }): result is { success: false; error: string } {
   return !result.success;
 }
+
+/**
+ * Structured details payload attached to {@link ChangesetYamlInvalidError}.
+ *
+ * Carries the offending file path, the 1-based line number where the YAML
+ * parser bailed (when determinable), and an optional snippet of the parsed
+ * region to surface in CLI output and CI logs.
+ *
+ * @task T10105
+ * @epic E-RELEASE-PLAN-CHANGELOG
+ */
+export interface ChangesetYamlInvalidDetails {
+  /** Absolute or process-relative path to the offending `.md` file. */
+  file: string;
+  /** 1-based line number reported by the YAML parser; `null` when unknown. */
+  line: number | null;
+  /** Optional short excerpt around the failure (≤ 120 chars). */
+  snippet?: string;
+  /** Underlying parser message, propagated verbatim for diagnostics. */
+  parserMessage: string;
+}
+
+/**
+ * Thrown when `cleo release plan` (or the lint script) encounters a `.changeset/*.md`
+ * file whose YAML frontmatter cannot be parsed.
+ *
+ * Replaces the pre-T10105 silent-skip behaviour where a single malformed
+ * file (e.g. an unquoted colon in `summary:`) caused the aggregator to
+ * silently drop ALL changeset entries for that release. The v2026.5.100
+ * ship lost the v5.100/v5.101/v5.103 CHANGELOG entries to exactly this
+ * vector — see Saga T10099 SG-RELEASE-AUDIT-V2.
+ *
+ * @remarks
+ * Carries `exitCode` aligned with {@link ExitCode.VALIDATION_ERROR} (6) so
+ * the CLI surfaces a deterministic non-zero exit when invoked from CI.
+ *
+ * @example
+ * ```typescript
+ * throw new ChangesetYamlInvalidError({
+ *   file: '.changeset/bad.md',
+ *   line: 4,
+ *   parserMessage: 'Nested mappings are not allowed in compact mappings',
+ * });
+ * ```
+ *
+ * @task T10105
+ * @epic E-RELEASE-PLAN-CHANGELOG
+ * @saga T10099
+ */
+export class ChangesetYamlInvalidError extends Error {
+  /** Stable LAFS error code string for envelope emission. */
+  readonly code = 'E_CHANGESET_YAML_INVALID';
+  /** Numeric exit code aligned with {@link ExitCode.VALIDATION_ERROR} (6). */
+  readonly exitCode: ExitCode = ExitCode.VALIDATION_ERROR;
+  /** Structured payload describing the offending file + location. */
+  readonly details: ChangesetYamlInvalidDetails;
+
+  /**
+   * @param details - Structured failure context including file path and
+   *   line number. The constructor builds a deterministic human-readable
+   *   message of the form `<file>:<line> invalid YAML frontmatter: <msg>`.
+   */
+  constructor(details: ChangesetYamlInvalidDetails) {
+    const linePart = details.line !== null ? `:${details.line}` : '';
+    super(
+      `E_CHANGESET_YAML_INVALID: ${details.file}${linePart} invalid YAML frontmatter: ${details.parserMessage}`,
+    );
+    this.name = 'ChangesetYamlInvalidError';
+    this.details = details;
+  }
+}

package/src/exit-codes.ts

@@ -266,6 +266,19 @@ export const E_EVIDENCE_INSUFFICIENT = 'E_EVIDENCE_INSUFFICIENT' as const;
 export const E_PLAN_NOT_FOUND = 'E_PLAN_NOT_FOUND' as const;
 /** Generic release-plan validation failure (e.g. schema). Exit code 6. */
 export const E_RELEASE_PLAN_INVALID = 'E_RELEASE_PLAN_INVALID' as const;
+/**
+ * `cleo release plan` (or the lint script) encountered a `.changeset/*.md`
+ * file whose YAML frontmatter cannot be parsed. Exit code 6 (VALIDATION_ERROR).
+ *
+ * Replaces the pre-T10105 silent-skip that caused the v2026.5.100 ship to
+ * lose v5.100/v5.101/v5.103 CHANGELOG entries when a single changeset had
+ * an unquoted colon in `summary:`.
+ *
+ * @task T10105
+ * @epic E-RELEASE-PLAN-CHANGELOG
+ * @saga T10099
+ */
+export const E_CHANGESET_YAML_INVALID = 'E_CHANGESET_YAML_INVALID' as const;
 /**
  * Release row exists but is not in the status FSM state required by the
  * caller (R-051 — `cleo release open` requires status='planned'). Exit code 6.

package/src/index.ts

@@ -349,9 +349,10 @@ export {
   TASK_SEVERITIES,
   TASK_SIZES,
 } from './enums.js';
-export type { SagaInvariantErrorCode } from './errors.js';
+export type { ChangesetYamlInvalidDetails, SagaInvariantErrorCode } from './errors.js';
 // === Error Utilities ===
 export {
+  ChangesetYamlInvalidError,
   ClassifierUnregisteredAgentError,
   createErrorResult,
   createSuccessResult,
@@ -397,6 +398,8 @@ export {
 } from './evidence-record-schema.js';
 // === Exit Codes ===
 export {
+  // T10105 / Saga T10099 — fail-loud changeset parse
+  E_CHANGESET_YAML_INVALID,
   // SPEC-T9345 release pipeline v2 error code names (T9525)
   E_CHANNEL_MISMATCH,
   E_DIRTY_TREE,
@@ -1480,6 +1483,15 @@ export {
   TASK_KIND,
   TaskKindSchema,
 } from './release/plan.js';
+// === Release ship-e2e-smoke (T10103) ===
+export type {
+  ShipE2eSmokeFinalState,
+  ShipE2eSmokeParams,
+  ShipE2eSmokeResult,
+  ShipE2eSmokeStep,
+  ShipE2eSmokeStepName,
+  ShipE2eSmokeStepStatus,
+} from './release/ship-e2e-smoke.js';
 // === Release Version Bump ===
 export type {
   BumpResult,
@@ -1490,6 +1502,8 @@ export type {
   VersionBumpTarget,
   VersionBumpTargetSource,
 } from './release/version-bump.js';
+// === Human Render Contract (Epic T10114, ADR-077) ===
+export * from './render/index.js';
 // === Result Types (Dashboard, Stats, Log, Context, Sequence, Analysis, Deps) ===
 export type {
   BottleneckTask,

package/src/release/ship-e2e-smoke.ts

@@ -0,0 +1,113 @@
+/**
+ * Ship E2E Smoke contracts — types for the `cleo release ship-e2e-smoke`
+ * one-shot walker that exercises the full release lifecycle end-to-end.
+ *
+ * The smoke runs `plan` → `open` → wait-for-PR-merge → wait-for-tag →
+ * verify-npm-published. Each step records its status, duration, and any
+ * side-effect identifier (PR number, tag SHA, npm version) for downstream
+ * inspection. The aggregate envelope reports the final lifecycle state
+ * reached so failures can be resumed.
+ *
+ * Dry-run is the default; `--execute` flips the runner to perform real
+ * mutations. Both modes return the same envelope shape so consumers can
+ * diff a dry-run preview against a real run.
+ *
+ * @task T10103
+ * @epic E-CLEO-RELEASE-VERBS
+ * @saga T10099
+ */
+
+/**
+ * The discrete steps the smoke walker executes, in order. The aggregate
+ * envelope records one entry per step with status + duration.
+ */
+export type ShipE2eSmokeStepName =
+  | 'plan'
+  | 'open'
+  | 'wait-for-pr'
+  | 'wait-for-tag'
+  | 'verify-npm-published';
+
+/** Outcome of a single smoke step. */
+export type ShipE2eSmokeStepStatus =
+  /** Step completed successfully (or, in dry-run, would have run). */
+  | 'ok'
+  /** Step was skipped — e.g. dry-run mode shortcuts post-plan. */
+  | 'skipped'
+  /** Step failed; the smoke envelope's success flag will be false. */
+  | 'failed';
+
+/** Per-step result attached to the smoke envelope. */
+export interface ShipE2eSmokeStep {
+  /** The step name. */
+  name: ShipE2eSmokeStepName;
+  /** Outcome. */
+  status: ShipE2eSmokeStepStatus;
+  /** Wall-clock duration in milliseconds. */
+  durationMs: number;
+  /**
+   * Optional human-readable detail string captured at step completion
+   * (e.g. "plan written to .cleo/release/v2026.5.104.plan.json",
+   * "PR #524 merged", "tag v2026.5.104 found", "npm @cleocode/cleo@…
+   * published").
+   */
+  detail?: string;
+  /**
+   * Optional error message when `status === 'failed'`. Single-line so
+   * the envelope stays compact for CLI consumers.
+   */
+  error?: string;
+}
+
+/**
+ * Final lifecycle state the smoke reached. Mirrors the `releases.status`
+ * column values plus a synthetic `npm-published` terminal state captured
+ * by the verify step.
+ */
+export type ShipE2eSmokeFinalState =
+  | 'not-started'
+  | 'planned'
+  | 'pr-opened'
+  | 'pr-merged'
+  | 'tag-pushed'
+  | 'npm-published';
+
+/** Parameters accepted by the smoke walker. */
+export interface ShipE2eSmokeParams {
+  /** Candidate release version (e.g. "v2026.6.0" or "2026.6.0"). */
+  version: string;
+  /** Epic task ID that scopes the release (forwarded to `release plan`). */
+  epicId: string;
+  /**
+   * When false (default), no side effects — every step reports what it
+   * WOULD do. When true, each step performs its real mutation.
+   */
+  execute: boolean;
+  /**
+   * Total wall-clock budget across all polling waits, in milliseconds.
+   * Default 30 minutes when omitted. Per-step waits MUST respect this
+   * shared budget so a stuck PR doesn't hang the whole smoke.
+   */
+  totalTimeoutMs?: number;
+  /**
+   * Poll interval for wait-* steps, in milliseconds. Default 5_000.
+   * Lowered in tests via DI to keep the suite fast.
+   */
+  pollIntervalMs?: number;
+}
+
+/** Top-level envelope returned by the smoke walker. */
+export interface ShipE2eSmokeResult {
+  /** True when every step completed (or was intentionally skipped). */
+  success: boolean;
+  /** Echo of the version under smoke. */
+  version: string;
+  /** True when --execute was passed; false for dry-run preview. */
+  executed: boolean;
+  /** Ordered step log. */
+  steps: ShipE2eSmokeStep[];
+  /** Lifecycle state at smoke termination. */
+  finalState: ShipE2eSmokeFinalState;
+  /** Total wall-clock duration across all steps, in milliseconds. */
+  totalDurationMs: number;
+}