@cleocode/contracts 2026.5.108 → 2026.5.109

package/dist/__tests__/db-inventory.test.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Contract tests for the CLEO database inventory SSoT.
+ *
+ * Asserts the structural invariants the inventory MUST hold:
+ *
+ * 1. Every {@link DbInventoryEntry.role} is unique across the array.
+ * 2. Every {@link DbInventoryEntry.tier} is a valid member of the
+ *    {@link DbTier} union.
+ * 3. Every non-null {@link DbInventoryEntry.drizzleSchemaPath} resolves
+ *    to a real file on disk relative to the monorepo root.
+ * 4. Every non-null {@link DbInventoryEntry.migrationsDir} resolves to a
+ *    real directory on disk relative to the monorepo root.
+ * 5. The list is non-empty and covers the AC1-mandated role set.
+ *
+ * These invariants are the gating contract for downstream saga tasks
+ * (T10307 fleet survey, T10310 pragma drift, T10311 migration coverage,
+ * T10312 doctor integrity, T10320 cross-DB invariants). If this suite
+ * fails, the inventory has drifted from disk reality and CI MUST block.
+ *
+ * @task T10305
+ * @epic T10282
+ * @saga T10281
+ */
+export {};
+//# sourceMappingURL=db-inventory.test.d.ts.map

package/dist/__tests__/db-inventory.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-inventory.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/db-inventory.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG"}

package/dist/__tests__/db-inventory.test.js

@@ -0,0 +1,148 @@
+/**
+ * Contract tests for the CLEO database inventory SSoT.
+ *
+ * Asserts the structural invariants the inventory MUST hold:
+ *
+ * 1. Every {@link DbInventoryEntry.role} is unique across the array.
+ * 2. Every {@link DbInventoryEntry.tier} is a valid member of the
+ *    {@link DbTier} union.
+ * 3. Every non-null {@link DbInventoryEntry.drizzleSchemaPath} resolves
+ *    to a real file on disk relative to the monorepo root.
+ * 4. Every non-null {@link DbInventoryEntry.migrationsDir} resolves to a
+ *    real directory on disk relative to the monorepo root.
+ * 5. The list is non-empty and covers the AC1-mandated role set.
+ *
+ * These invariants are the gating contract for downstream saga tasks
+ * (T10307 fleet survey, T10310 pragma drift, T10311 migration coverage,
+ * T10312 doctor integrity, T10320 cross-DB invariants). If this suite
+ * fails, the inventory has drifted from disk reality and CI MUST block.
+ *
+ * @task T10305
+ * @epic T10282
+ * @saga T10281
+ */
+import { existsSync, statSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { describe, expect, it } from 'vitest';
+import { DB_INVENTORY } from '../db-inventory.js';
+/**
+ * Resolve the monorepo root from this test file.
+ *
+ * `__tests__/db-inventory.test.ts` lives at
+ * `packages/contracts/src/__tests__/` — four levels above the repo root.
+ */
+const THIS_FILE = fileURLToPath(import.meta.url);
+const REPO_ROOT = resolve(dirname(THIS_FILE), '..', '..', '..', '..');
+const VALID_TIERS = new Set(['project', 'global', 'derived']);
+/**
+ * Roles AC1 of T10305 explicitly requires the inventory to enumerate.
+ * The set must be covered exactly; extras are acceptable when documented.
+ */
+const REQUIRED_ROLES = [
+    'tasks',
+    'brain',
+    'conduit',
+    'manifest',
+    'llmtxt',
+    'nexus',
+    'signaldock-project',
+    'signaldock-global',
+    'telemetry',
+    'skills',
+    'global-brain',
+    'global-tasks',
+];
+describe('CLEO database inventory (T10305 SSoT)', () => {
+    it('is non-empty', () => {
+        expect(DB_INVENTORY.length).toBeGreaterThan(0);
+    });
+    it('covers every role required by T10305 AC1', () => {
+        const seen = new Set(DB_INVENTORY.map((e) => e.role));
+        for (const role of REQUIRED_ROLES) {
+            expect(seen.has(role), `inventory missing role '${role}'`).toBe(true);
+        }
+    });
+    it('has unique role IDs across all entries', () => {
+        const roles = DB_INVENTORY.map((e) => e.role);
+        const unique = new Set(roles);
+        expect(unique.size).toBe(roles.length);
+    });
+    it('uses only valid tier literals', () => {
+        for (const entry of DB_INVENTORY) {
+            expect(VALID_TIERS.has(entry.tier), `role '${entry.role}' has invalid tier '${entry.tier}'`).toBe(true);
+        }
+    });
+    it('uses valid path tokens in filePathTemplate', () => {
+        // Project tier MUST use <projectRoot>/ prefix; global tier MUST use
+        // $XDG_DATA_HOME/cleo/ prefix. Derived tier may use either.
+        for (const entry of DB_INVENTORY) {
+            const t = entry.filePathTemplate;
+            if (entry.tier === 'project') {
+                expect(t.startsWith('<projectRoot>/'), `project-tier entry '${entry.role}' uses non-canonical path '${t}'`).toBe(true);
+            }
+            else if (entry.tier === 'global') {
+                expect(t.startsWith('$XDG_DATA_HOME/cleo/'), `global-tier entry '${entry.role}' uses non-canonical path '${t}'`).toBe(true);
+            }
+        }
+    });
+    it('resolves every non-null drizzleSchemaPath to a real file', () => {
+        for (const entry of DB_INVENTORY) {
+            if (entry.drizzleSchemaPath === null)
+                continue;
+            const absolutePath = resolve(REPO_ROOT, entry.drizzleSchemaPath);
+            expect(existsSync(absolutePath), `role '${entry.role}' schema path missing: ${entry.drizzleSchemaPath}`).toBe(true);
+            expect(statSync(absolutePath).isFile(), `role '${entry.role}' schema path is not a file: ${entry.drizzleSchemaPath}`).toBe(true);
+        }
+    });
+    it('resolves every non-null migrationsDir to a real directory', () => {
+        for (const entry of DB_INVENTORY) {
+            if (entry.migrationsDir === null)
+                continue;
+            const absolutePath = resolve(REPO_ROOT, entry.migrationsDir);
+            expect(existsSync(absolutePath), `role '${entry.role}' migrations dir missing: ${entry.migrationsDir}`).toBe(true);
+            expect(statSync(absolutePath).isDirectory(), `role '${entry.role}' migrations path is not a directory: ${entry.migrationsDir}`).toBe(true);
+        }
+    });
+    it('omits migrationsDir only for derived or reserved roles', () => {
+        // A null migrationsDir is only valid for:
+        //  - derived tier (schema owned by upstream lib — e.g. manifest)
+        //  - reserved roles whose opener throws not-yet-implemented (e.g. llmtxt)
+        for (const entry of DB_INVENTORY) {
+            if (entry.migrationsDir !== null)
+                continue;
+            const isDerived = entry.tier === 'derived';
+            const isReserved = /reserved|not yet implemented/i.test(entry.openedVia);
+            expect(isDerived || isReserved, `role '${entry.role}' has null migrationsDir but is neither derived nor reserved`).toBe(true);
+        }
+    });
+    it('exposes a readonly array type at compile time', () => {
+        // Compile-time check: assigning to an index must be rejected.
+        // Runtime check: Object.isFrozen is not guaranteed by `readonly` but the
+        // type-system reject is the primary defence. We only assert the runtime
+        // shape is array-like here.
+        expect(Array.isArray(DB_INVENTORY)).toBe(true);
+    });
+    it('keeps each entry self-consistent (sample-fields populated)', () => {
+        // Sanity: every entry must populate the structural fields. The contract
+        // forbids `null` placeholders on non-optional fields.
+        const sampleRequiredKeys = [
+            'role',
+            'tier',
+            'filePathTemplate',
+            'ownerPackage',
+            'openedVia',
+            'concurrency',
+            'privacy',
+            'backupPath',
+            'documentedIn',
+        ];
+        for (const entry of DB_INVENTORY) {
+            for (const key of sampleRequiredKeys) {
+                const value = entry[key];
+                expect(typeof value === 'string' && value.length > 0, `role '${entry.role}' field '${String(key)}' is empty or non-string`).toBe(true);
+            }
+        }
+    });
+});
+//# sourceMappingURL=db-inventory.test.js.map

package/dist/__tests__/db-inventory.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-inventory.test.js","sourceRoot":"","sources":["../../src/__tests__/db-inventory.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAsC,MAAM,oBAAoB,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEtE,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,cAAc,GAAsB;IACxC,OAAO;IACP,OAAO;IACP,SAAS;IACT,UAAU;IACV,QAAQ;IACR,OAAO;IACP,oBAAoB;IACpB,mBAAmB;IACnB,WAAW;IACX,QAAQ;IACR,cAAc;IACd,cAAc;CACf,CAAC;AAEF,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,2BAA2B,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,CACJ,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAC3B,SAAS,KAAK,CAAC,IAAI,uBAAuB,KAAK,CAAC,IAAI,GAAG,CACxD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,oEAAoE;QACpE,4DAA4D;QAC5D,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,CACJ,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAC9B,uBAAuB,KAAK,CAAC,IAAI,8BAA8B,CAAC,GAAG,CACpE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,CACJ,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACpC,sBAAsB,KAAK,CAAC,IAAI,8BAA8B,CAAC,GAAG,CACnE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI;gBAAE,SAAS;YAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACjE,MAAM,CACJ,UAAU,CAAC,YAAY,CAAC,EACxB,SAAS,KAAK,CAAC,IAAI,0BAA0B,KAAK,CAAC,iBAAiB,EAAE,CACvE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,MAAM,CACJ,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAC/B,SAAS,KAAK,CAAC,IAAI,gCAAgC,KAAK,CAAC,iBAAiB,EAAE,CAC7E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;gBAAE,SAAS;YAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7D,MAAM,CACJ,UAAU,CAAC,YAAY,CAAC,EACxB,SAAS,KAAK,CAAC,IAAI,6BAA6B,KAAK,CAAC,aAAa,EAAE,CACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,MAAM,CACJ,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EACpC,SAAS,KAAK,CAAC,IAAI,yCAAyC,KAAK,CAAC,aAAa,EAAE,CAClF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,0CAA0C;QAC1C,iEAAiE;QACjE,0EAA0E;QAC1E,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;gBAAE,SAAS;YAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;YAC3C,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACzE,MAAM,CACJ,SAAS,IAAI,UAAU,EACvB,SAAS,KAAK,CAAC,IAAI,8DAA8D,CAClF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,8DAA8D;QAC9D,yEAAyE;QACzE,wEAAwE;QACxE,4BAA4B;QAC5B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,wEAAwE;QACxE,sDAAsD;QACtD,MAAM,kBAAkB,GAA0C;YAChE,MAAM;YACN,MAAM;YACN,kBAAkB;YAClB,cAAc;YACd,WAAW;YACX,aAAa;YACb,SAAS;YACT,YAAY;YACZ,cAAc;SACf,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,CACJ,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAC7C,SAAS,KAAK,CAAC,IAAI,YAAY,MAAM,CAAC,GAAG,CAAC,0BAA0B,CACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/task-type-narrowing.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * TaskType discriminator narrowing tests.
+ *
+ * Pins the post-ADR-083 §2.5 union shape (`'saga' | 'epic' | 'task' |
+ * 'subtask'`) so that:
+ *   - Adding/removing a tier in the canonical {@link TaskType} union breaks
+ *     this test loudly (caught at compile time AND runtime).
+ *   - Discriminated-union narrowing on `task.type === 'saga'` keeps working
+ *     for downstream consumers.
+ *
+ * @since SAGA T10326 · Epic T10277 · Task T10328 (W1.A)
+ */
+export {};
+//# sourceMappingURL=task-type-narrowing.test.d.ts.map

package/dist/__tests__/task-type-narrowing.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-type-narrowing.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/task-type-narrowing.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/__tests__/task-type-narrowing.test.js

@@ -0,0 +1,51 @@
+/**
+ * TaskType discriminator narrowing tests.
+ *
+ * Pins the post-ADR-083 §2.5 union shape (`'saga' | 'epic' | 'task' |
+ * 'subtask'`) so that:
+ *   - Adding/removing a tier in the canonical {@link TaskType} union breaks
+ *     this test loudly (caught at compile time AND runtime).
+ *   - Discriminated-union narrowing on `task.type === 'saga'` keeps working
+ *     for downstream consumers.
+ *
+ * @since SAGA T10326 · Epic T10277 · Task T10328 (W1.A)
+ */
+import { describe, expectTypeOf, it } from 'vitest';
+describe('TaskType discriminator', () => {
+    it('narrows when type === "saga"', () => {
+        const t = {
+            id: 'T1',
+            title: 'demo',
+            description: 'demo task',
+            status: 'pending',
+            priority: 'medium',
+            type: 'saga',
+            createdAt: '2026-01-01T00:00:00.000Z',
+        };
+        if (t.type === 'saga') {
+            expectTypeOf(t.type).toEqualTypeOf();
+        }
+    });
+    it('narrows when type === "epic"', () => {
+        const t = {
+            id: 'T2',
+            title: 'demo',
+            description: 'demo task',
+            status: 'pending',
+            priority: 'medium',
+            type: 'epic',
+            createdAt: '2026-01-01T00:00:00.000Z',
+        };
+        if (t.type === 'epic') {
+            expectTypeOf(t.type).toEqualTypeOf();
+        }
+    });
+    it('accepts all 4 tier values', () => {
+        const types = ['saga', 'epic', 'task', 'subtask'];
+        expectTypeOf(types).toEqualTypeOf();
+    });
+    it('TaskType is the 4-element union per ADR-083 §2.5', () => {
+        expectTypeOf().toEqualTypeOf();
+    });
+});
+//# sourceMappingURL=task-type-narrowing.test.js.map

package/dist/__tests__/task-type-narrowing.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-type-narrowing.test.js","sourceRoot":"","sources":["../../src/__tests__/task-type-narrowing.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAGpD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAS;YACd,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,0BAA0B;SACtC,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAU,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAS;YACd,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,0BAA0B;SACtC,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAU,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,KAAK,GAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9D,YAAY,CAAC,KAAK,CAAC,CAAC,aAAa,EAAc,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,YAAY,EAAY,CAAC,aAAa,EAAwC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/brain.d.ts

@@ -85,4 +85,107 @@ export interface SupersededEntry {
     /** Topic or category grouping these entries together. */
     grouping: string;
 }
+/**
+ * Result of a brain.db auto-recovery attempt.
+ *
+ * Returned by `recoverMalformedBrainDb()` (T10303) when the chokepoint
+ * detects malformation via `ERR_SQLITE_ERROR errcode=11` or a failing
+ * `PRAGMA integrity_check`/`PRAGMA quick_check`. The corrupt DB has been
+ * moved to a quarantine directory and the freshest validated snapshot has
+ * been copied to `.cleo/brain.db`.
+ *
+ * Consumers (the brain.db open chokepoint, telemetry, the upcoming T10302
+ * regression test) read this structure to decide whether to re-attempt the
+ * open and to emit user-facing diagnostics with the data-loss window.
+ */
+export interface BrainRecoveryResult {
+    /** Absolute path to the snapshot that was restored, or null if recovery failed. */
+    restoredFrom: string | null;
+    /**
+     * Approximate hours between the snapshot's timestamp and the recovery
+     * event. `null` when the snapshot timestamp could not be parsed.
+     * Used in the recovery warning to make the data-loss window legible.
+     */
+    dataLossWindowHours: number | null;
+    /**
+     * Number of `brain_observations` rows in the restored DB. Best-effort —
+     * `null` when the count query failed (table missing, FK violation, …).
+     */
+    observationsRecovered: number | null;
+    /** `true` if the restored DB passes `PRAGMA quick_check`. */
+    integrityOK: boolean;
+    /**
+     * Absolute path to the quarantine directory where the corrupt DB plus
+     * its `-wal`/`-shm` sidecars were moved before restore.
+     */
+    quarantineDir: string | null;
+}
+/**
+ * Per-table row counts probed from the restored brain.db.
+ *
+ * Best-effort — any individual count may be `null` when the table is
+ * missing (very old snapshot predating that schema rev) or when the count
+ * query throws. The values feed both the `cleo backup recover brain`
+ * envelope and the recovery runbook's user-facing diagnostics.
+ *
+ * @task T10304
+ * @epic T10286
+ * @saga T10281
+ */
+export interface BrainRecoveredRowCounts {
+    /** `brain_observations` row count, or `null` when the count failed. */
+    observations: number | null;
+    /** `brain_decisions` row count, or `null` when the count failed. */
+    decisions: number | null;
+    /** `brain_learnings` row count, or `null` when the count failed. */
+    learnings: number | null;
+}
+/**
+ * Envelope payload returned by `cleo backup recover brain`.
+ *
+ * The CLI verb (T10304) wraps {@link BrainRecoveryResult} from
+ * {@link recoverMalformedBrainDb} (T10303) and enriches it with per-table
+ * row counts plus the operator-friendly snapshot/quarantine paths required
+ * by the AC envelope shape.
+ *
+ * Surfaces:
+ * - `--dry-run` plan envelopes (with `restoredFrom` being the snapshot that
+ *   *would* be restored and `quarantinedTo` being the directory the corrupt
+ *   DB *would* be moved to).
+ * - Real-recovery envelopes after the pipeline has executed.
+ *
+ * @task T10304
+ * @epic T10286
+ * @saga T10281
+ */
+export interface BackupRecoverBrainResult {
+    /**
+     * Absolute path to the snapshot that was (or would be) restored. Empty
+     * string when no snapshot was available — the envelope's caller surfaces
+     * that as a failure mode.
+     */
+    restoredFrom: string;
+    /** Per-table row counts probed from the restored DB. */
+    rowsRecovered: BrainRecoveredRowCounts;
+    /**
+     * Approximate hours between the snapshot's timestamp and the recovery
+     * event. `null` when the snapshot timestamp could not be parsed (e.g.
+     * legacy `brain.db.PRE-DUP-FIX-*` fallback artifact).
+     */
+    dataLossWindowHours: number | null;
+    /** `true` when the restored DB passes `PRAGMA quick_check`. */
+    integrityOK: boolean;
+    /**
+     * Absolute path to the quarantine directory where the corrupt DB plus
+     * its `-wal`/`-shm` sidecars were moved. Empty string in `--dry-run`
+     * mode where no files were touched.
+     */
+    quarantinedTo: string;
+    /**
+     * `true` when invoked with `--dry-run` — indicates the envelope is a
+     * plan, NOT a record of mutations performed. Consumers MUST check this
+     * before treating `restoredFrom` as a post-condition.
+     */
+    dryRun: boolean;
+}
 //# sourceMappingURL=brain.d.ts.map

package/dist/brain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"brain.d.ts","sourceRoot":"","sources":["../src/brain.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,CAAC;AAExE;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,cAAc,GAAG,OAAO,GAAG,aAAa,CAAC;AAEvF,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,sDAAsD;AACtD,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,MAAM,EAAE,aAAa,CAAC;IACtB,8CAA8C;IAC9C,MAAM,EAAE,aAAa,CAAC;IACtB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,iEAAiE;AACjE,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,iDAAiD;IACjD,WAAW,EAAE,iBAAiB,CAAC;IAC/B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"brain.d.ts","sourceRoot":"","sources":["../src/brain.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,CAAC;AAExE;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,cAAc,GAAG,OAAO,GAAG,aAAa,CAAC;AAEvF,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,sDAAsD;AACtD,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,MAAM,EAAE,aAAa,CAAC;IACtB,8CAA8C;IAC9C,MAAM,EAAE,aAAa,CAAC;IACtB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,iEAAiE;AACjE,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,iDAAiD;IACjD,WAAW,EAAE,iBAAiB,CAAC;IAC/B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,6DAA6D;IAC7D,WAAW,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,uBAAuB;IACtC,uEAAuE;IACvE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,oEAAoE;IACpE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oEAAoE;IACpE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,+DAA+D;IAC/D,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAC;CACjB"}

package/dist/db-inventory.d.ts

@@ -0,0 +1,193 @@
+/**
+ * CLEO Database Inventory — SSoT type contract + immutable constant.
+ *
+ * @remarks
+ * This module exports the typed shape and the runtime constant for every
+ * SQLite database that CLEO manages. The runtime data is sourced from the
+ * canonical JSON inventory at `packages/core/src/store/db-inventory.json`
+ * via ESM JSON import (`with { type: 'json' }`). The JSON file is the
+ * single source of truth; this module re-exposes it with a typed contract.
+ *
+ * Downstream consumers:
+ *
+ * - **T10307 — Fleet survey** (`cleo doctor db-substrate`) iterates `DB_INVENTORY`
+ *   to enumerate every DB on disk across project + global tiers.
+ * - **T10310 — Pragma drift** validates that every open handle for each role
+ *   applies the pragma SSoT (`specs/sqlite-pragmas.json`).
+ * - **T10311 — Migration coverage** asserts that each entry's
+ *   `migrationsDir` exists and contains a `0000_*` baseline.
+ * - **T10312 — Doctor integrity** runs `PRAGMA integrity_check` against
+ *   every entry whose tier resolves to a present file on disk.
+ * - **T10320 — Cross-DB invariants** uses `ownerPackage` + `tier` to
+ *   classify which DBs must agree on shared identifiers (project_id,
+ *   agent_id, session_id, ...).
+ *
+ * Adding a new entry to the inventory is a charter amendment — update
+ * `db-inventory.json` AND `.cleo/adrs/ADR-068-cleo-database-charter.md`
+ * in the same PR (gated by `cleo check arch` Gate-4 SSoT-EXEMPT lint
+ * once T10282 ships its drift check).
+ *
+ * @see ADR-068 — CLEO Database Charter (canonical narrative)
+ * @see Saga T10281 — SG-BRAIN-DB-RESILIENCE (provenance)
+ * @see Epic T10282 — E1-DB-INVENTORY (this artifact)
+ * @see Research note `sg-brain-db-resilience-deep-audit-2026-05-23`
+ *
+ * @task T10305
+ * @epic T10282
+ * @saga T10281
+ */
+/**
+ * Canonical role names for every SQLite database in the CLEO charter.
+ *
+ * @remarks
+ * Mirrors the `openCleoDb('<role>', cwd)` chokepoint (ADR-068 §3) plus the
+ * three audit-discovered roles (`global-brain`, `global-tasks`, `manifest`)
+ * that exist on disk today but do not yet have a registered opener.
+ *
+ * - `tasks`              — project-tier task engine DB
+ * - `brain`              — project-tier memory DB (PII)
+ * - `conduit`            — project-tier agent message transport
+ * - `manifest`           — project-tier derived blob index (rebuildable)
+ * - `llmtxt`             — reserved project-tier llmtxt session store
+ * - `nexus`              — global-tier cross-project knowledge graph (PII)
+ * - `signaldock-project` — historical project-tier signaldock (post-ADR-037, merged into conduit)
+ * - `signaldock-global`  — global-tier canonical agent identity registry
+ * - `telemetry`          — global-tier opt-in command telemetry
+ * - `skills`             — global-tier per-user skill registry
+ * - `global-brain`       — global-tier brain.db observed on disk (audit §1.2 — provenance under investigation)
+ * - `global-tasks`       — global-tier tasks.db observed on disk (audit §1.2 — provenance under investigation)
+ *
+ * @public
+ */
+export type DbRole = 'tasks' | 'brain' | 'conduit' | 'manifest' | 'llmtxt' | 'nexus' | 'signaldock-project' | 'signaldock-global' | 'telemetry' | 'skills' | 'global-brain' | 'global-tasks';
+/**
+ * Lifecycle scope of a CLEO database.
+ *
+ * @remarks
+ * - `project` — file lives under `<projectRoot>/.cleo/`; lifecycle bound to one CLEO project.
+ * - `global`  — file lives under `$XDG_DATA_HOME/cleo/` (env-paths via `getCleoHome()`).
+ * - `derived` — file lives under the project tier but is rebuildable from a
+ *               non-DB source-of-truth (e.g. content-addressable blob store).
+ *               MAY be excluded from backup-pack.
+ *
+ * @public
+ */
+export type DbTier = 'project' | 'global' | 'derived';
+/**
+ * Privacy classification governing backup + cloud-export rules.
+ *
+ * @remarks
+ * - `local-only`               — never cloud-exported.
+ * - `local-only-pii`           — never cloud-exported; PII-class — requires
+ *                                explicit `cleo backup export --include-pii`.
+ * - `cloud-exportable-opt-in`  — may be exported only after explicit opt-in
+ *                                (e.g. `cleo diagnostics enable`).
+ *
+ * @public
+ */
+export type DbPrivacy = 'local-only' | 'local-only-pii' | 'cloud-exportable-opt-in';
+/**
+ * Concurrency model for the database.
+ *
+ * @remarks
+ * Every CLEO database today is `single-writer` (WAL mode with in-process
+ * serialization via the `openCleoDb` singleton). The field is enumerated so
+ * a future read-replica or multi-writer DB MUST be declared explicitly.
+ *
+ * @public
+ */
+export type DbConcurrency = 'single-writer' | 'multi-writer';
+/**
+ * One row in the CLEO database charter.
+ *
+ * @remarks
+ * Every field is required (no `null` placeholders) EXCEPT `drizzleSchemaPath`
+ * and `migrationsDir` — those MAY be `null` for:
+ *
+ * - `derived` databases whose schema is owned by an upstream library (e.g.
+ *   `manifest.db` is owned by `llmtxt/blob`'s `BlobFsAdapter` contract).
+ * - `reserved` roles whose opener throws `not yet implemented` (e.g.
+ *   `llmtxt.db`).
+ *
+ * Path templates use the substitution tokens:
+ *
+ * - `<projectRoot>`   — resolved at runtime from `CLEO_ROOT` env var or
+ *                       `process.cwd()` via `getCleoProjectDir()`.
+ * - `$XDG_DATA_HOME`  — resolved via env-paths through `getCleoHome()`.
+ *                       Linux: `~/.local/share/cleo/`; macOS:
+ *                       `~/Library/Application Support/cleo/`.
+ *
+ * @public
+ */
+export interface DbInventoryEntry {
+    /** Canonical role identifier used by `openCleoDb` and audit tooling. */
+    readonly role: DbRole;
+    /** Lifecycle scope — project, global, or derived. */
+    readonly tier: DbTier;
+    /**
+     * Filesystem path template with `<projectRoot>` / `$XDG_DATA_HOME` tokens.
+     * Substitution convention is documented on {@link DbInventoryEntry}.
+     */
+    readonly filePathTemplate: string;
+    /**
+     * Repo-relative path to the Drizzle schema TypeScript file. `null` when
+     * the schema is owned by an upstream library or the role is reserved.
+     */
+    readonly drizzleSchemaPath: string | null;
+    /**
+     * Repo-relative path to the Drizzle migrations directory (with trailing
+     * slash). `null` for `derived` rows or reserved roles. The path MUST
+     * exist on disk when non-null — enforced by the contracts test suite.
+     */
+    readonly migrationsDir: string | null;
+    /** npm package that owns the open + lifecycle for this database. */
+    readonly ownerPackage: string;
+    /**
+     * Human-readable description of HOW the database is opened. Typically
+     * a code excerpt like `openCleoDb('tasks', cwd)`. For databases without
+     * a registered opener, describes provenance / status.
+     */
+    readonly openedVia: string;
+    /** Concurrency model — see {@link DbConcurrency}. */
+    readonly concurrency: DbConcurrency;
+    /** Privacy classification — see {@link DbPrivacy}. */
+    readonly privacy: DbPrivacy;
+    /**
+     * Canonical backup path template. For `derived` rows this is the
+     * sentinel string `rebuildable-from-blob-store` (or similar) and the
+     * row is excluded from backup-pack staging.
+     */
+    readonly backupPath: string;
+    /**
+     * Provenance pointers — ADR row, related task IDs, audit section
+     * references. Comma-or-semicolon separated string of references.
+     */
+    readonly documentedIn: string;
+}
+/**
+ * Immutable canonical inventory of every CLEO SQLite database.
+ *
+ * @remarks
+ * Sourced from `packages/core/src/store/db-inventory.json` — the SSoT.
+ * Adding a new entry is a charter amendment per ADR-068 §"How to add a
+ * new database". The {@link db-inventory.test.ts} suite asserts:
+ *
+ * 1. Every `role` is unique across the array.
+ * 2. Every `drizzleSchemaPath` (when non-null) exists on disk.
+ * 3. Every `migrationsDir` (when non-null) exists on disk.
+ * 4. Every `tier` is a member of the {@link DbTier} union.
+ *
+ * @example Iterate every project-tier database
+ * ```typescript
+ * import { DB_INVENTORY } from '@cleocode/contracts';
+ *
+ * const projectDbs = DB_INVENTORY.filter((entry) => entry.tier === 'project');
+ * for (const entry of projectDbs) {
+ *   console.log(entry.role, entry.filePathTemplate);
+ * }
+ * ```
+ *
+ * @public
+ */
+export declare const DB_INVENTORY: readonly DbInventoryEntry[];
+//# sourceMappingURL=db-inventory.d.ts.map

package/dist/db-inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-inventory.d.ts","sourceRoot":"","sources":["../src/db-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAIH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,MAAM,GACd,OAAO,GACP,OAAO,GACP,SAAS,GACT,UAAU,GACV,QAAQ,GACR,OAAO,GACP,oBAAoB,GACpB,mBAAmB,GACnB,WAAW,GACX,QAAQ,GACR,cAAc,GACd,cAAc,CAAC;AAEnB;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,gBAAgB,GAAG,yBAAyB,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,cAAc,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,oEAAoE;IACpE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;IACpC,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,YAAY,EAAE,SAAS,gBAAgB,EAAyB,CAAC"}

package/dist/db-inventory.js

@@ -0,0 +1,69 @@
+/**
+ * CLEO Database Inventory — SSoT type contract + immutable constant.
+ *
+ * @remarks
+ * This module exports the typed shape and the runtime constant for every
+ * SQLite database that CLEO manages. The runtime data is sourced from the
+ * canonical JSON inventory at `packages/core/src/store/db-inventory.json`
+ * via ESM JSON import (`with { type: 'json' }`). The JSON file is the
+ * single source of truth; this module re-exposes it with a typed contract.
+ *
+ * Downstream consumers:
+ *
+ * - **T10307 — Fleet survey** (`cleo doctor db-substrate`) iterates `DB_INVENTORY`
+ *   to enumerate every DB on disk across project + global tiers.
+ * - **T10310 — Pragma drift** validates that every open handle for each role
+ *   applies the pragma SSoT (`specs/sqlite-pragmas.json`).
+ * - **T10311 — Migration coverage** asserts that each entry's
+ *   `migrationsDir` exists and contains a `0000_*` baseline.
+ * - **T10312 — Doctor integrity** runs `PRAGMA integrity_check` against
+ *   every entry whose tier resolves to a present file on disk.
+ * - **T10320 — Cross-DB invariants** uses `ownerPackage` + `tier` to
+ *   classify which DBs must agree on shared identifiers (project_id,
+ *   agent_id, session_id, ...).
+ *
+ * Adding a new entry to the inventory is a charter amendment — update
+ * `db-inventory.json` AND `.cleo/adrs/ADR-068-cleo-database-charter.md`
+ * in the same PR (gated by `cleo check arch` Gate-4 SSoT-EXEMPT lint
+ * once T10282 ships its drift check).
+ *
+ * @see ADR-068 — CLEO Database Charter (canonical narrative)
+ * @see Saga T10281 — SG-BRAIN-DB-RESILIENCE (provenance)
+ * @see Epic T10282 — E1-DB-INVENTORY (this artifact)
+ * @see Research note `sg-brain-db-resilience-deep-audit-2026-05-23`
+ *
+ * @task T10305
+ * @epic T10282
+ * @saga T10281
+ */
+import dbInventoryData from '../../core/src/store/db-inventory.json' with { type: 'json' };
+// Narrow the raw JSON to the typed shape. The runtime parity test
+// (`db-inventory.test.ts`) asserts every field is valid for every entry.
+const rawInventory = dbInventoryData;
+/**
+ * Immutable canonical inventory of every CLEO SQLite database.
+ *
+ * @remarks
+ * Sourced from `packages/core/src/store/db-inventory.json` — the SSoT.
+ * Adding a new entry is a charter amendment per ADR-068 §"How to add a
+ * new database". The {@link db-inventory.test.ts} suite asserts:
+ *
+ * 1. Every `role` is unique across the array.
+ * 2. Every `drizzleSchemaPath` (when non-null) exists on disk.
+ * 3. Every `migrationsDir` (when non-null) exists on disk.
+ * 4. Every `tier` is a member of the {@link DbTier} union.
+ *
+ * @example Iterate every project-tier database
+ * ```typescript
+ * import { DB_INVENTORY } from '@cleocode/contracts';
+ *
+ * const projectDbs = DB_INVENTORY.filter((entry) => entry.tier === 'project');
+ * for (const entry of projectDbs) {
+ *   console.log(entry.role, entry.filePathTemplate);
+ * }
+ * ```
+ *
+ * @public
+ */
+export const DB_INVENTORY = rawInventory.entries;
+//# sourceMappingURL=db-inventory.js.map

package/dist/db-inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-inventory.js","sourceRoot":"","sources":["../src/db-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,eAAe,MAAM,wCAAwC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AA8J3F,kEAAkE;AAClE,yEAAyE;AACzE,MAAM,YAAY,GAAG,eAAkC,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAgC,YAAY,CAAC,OAAO,CAAC"}