@cleocode/contracts 2026.5.111 → 2026.5.113

package/dist/invariants/__tests__/registry.test.js

@@ -0,0 +1,113 @@
+/**
+ * Unit tests for the central invariants registry (T10335).
+ *
+ * The registry is the SSoT for system-wide invariants surfaced via the
+ * SG-SUBSTRATE-RECONCILIATION saga. Downstream R-tasks (R2 ORC codes,
+ * R4 CI gate, R5 release refactor, R6 doctor audit, R8 docs renderer)
+ * all key off the metadata shape asserted below.
+ *
+ * @epic T10327 — E-INVARIANT-REGISTRY-SSOT
+ * @saga T10326 — SG-SUBSTRATE-RECONCILIATION
+ * @task T10335 — R1: registry + ADR-073 I1-I8
+ */
+import { describe, expect, it } from 'vitest';
+import { E_SAGA_INVARIANT_VIOLATION_I3, E_SAGA_INVARIANT_VIOLATION_I5, E_SAGA_INVARIANT_VIOLATION_I7, } from '../../errors.js';
+import { ADR_073_INVARIANTS, getInvariant, getInvariantsByAdr, INVARIANTS_REGISTRY, } from '../index.js';
+/**
+ * Map from ADR-073 invariant code → expected LAFS error code in
+ * `packages/contracts/src/errors.ts`. R2/R4 will extend this mapping with
+ * ADR-070 ORC codes once they land — for now the registry only knows
+ * about the three saga-runtime guards.
+ *
+ * NOTE: I4 / I6 / I8 deliberately have no error code today — they are
+ * UNENFORCED warnings. The R4 CI gate (T10338) is the right home for the
+ * strict "every error has an error code" assertion; this test only
+ * validates the subset we already have wired.
+ */
+const ADR_073_ERROR_CODE_MAP = {
+    I3: E_SAGA_INVARIANT_VIOLATION_I3,
+    I5: E_SAGA_INVARIANT_VIOLATION_I5,
+    I7: E_SAGA_INVARIANT_VIOLATION_I7,
+};
+describe('INVARIANTS_REGISTRY — central registry shape', () => {
+    it('exposes at least 8 entries (ADR-073 I1-I8 baseline)', () => {
+        const entries = Object.values(INVARIANTS_REGISTRY);
+        expect(entries.length).toBeGreaterThanOrEqual(8);
+    });
+    it('registers all eight ADR-073 invariants under predictable keys', () => {
+        for (let i = 1; i <= 8; i++) {
+            const key = `ADR-073.I${i}`;
+            expect(INVARIANTS_REGISTRY[key]).toBeDefined();
+            expect(INVARIANTS_REGISTRY[key]?.adr).toBe('ADR-073');
+            expect(INVARIANTS_REGISTRY[key]?.code).toBe(`I${i}`);
+        }
+    });
+    it('every entry carries a non-empty name and description', () => {
+        for (const entry of Object.values(INVARIANTS_REGISTRY)) {
+            expect(entry.name.length).toBeGreaterThan(0);
+            expect(entry.description.length).toBeGreaterThan(0);
+        }
+    });
+    it('every severity:"error" invariant has a non-null runtimeGate', () => {
+        const errorTier = Object.values(INVARIANTS_REGISTRY).filter((e) => e.severity === 'error');
+        expect(errorTier.length).toBeGreaterThan(0);
+        for (const entry of errorTier) {
+            expect(entry.runtimeGate).not.toBeNull();
+            // Triple is fully populated when present.
+            if (entry.runtimeGate !== null) {
+                expect(entry.runtimeGate.module.length).toBeGreaterThan(0);
+                expect(entry.runtimeGate.functionName.length).toBeGreaterThan(0);
+            }
+        }
+    });
+});
+describe('getInvariant — lookup helper', () => {
+    it('returns the ADR-073.I3 entry with the expected runtime guard', () => {
+        const i3 = getInvariant('ADR-073.I3');
+        expect(i3).toBeDefined();
+        expect(i3?.adr).toBe('ADR-073');
+        expect(i3?.code).toBe('I3');
+        expect(i3?.severity).toBe('error');
+        expect(i3?.runtimeGate?.functionName).toBe('assertSagaInvariantI3');
+        expect(i3?.runtimeGate?.module).toBe('packages/core/src/sagas/enforcement.ts');
+    });
+    it('returns undefined for an unregistered key', () => {
+        expect(getInvariant('ADR-999.X1')).toBeUndefined();
+    });
+});
+describe('getInvariantsByAdr — per-ADR enumeration', () => {
+    it('returns all eight ADR-073 invariants in declaration order', () => {
+        const adr073 = getInvariantsByAdr('ADR-073');
+        expect(adr073).toHaveLength(8);
+        expect(adr073.map((e) => e.code)).toEqual(['I1', 'I2', 'I3', 'I4', 'I5', 'I6', 'I7', 'I8']);
+    });
+    it('returns an empty array for an unknown ADR', () => {
+        expect(getInvariantsByAdr('ADR-DOES-NOT-EXIST')).toEqual([]);
+    });
+});
+describe('ADR_073_INVARIANTS — exported convenience binding', () => {
+    it('matches the entries surfaced via getInvariantsByAdr', () => {
+        expect(ADR_073_INVARIANTS).toHaveLength(8);
+        const enumerated = getInvariantsByAdr('ADR-073');
+        expect(enumerated).toHaveLength(ADR_073_INVARIANTS.length);
+        for (let i = 0; i < ADR_073_INVARIANTS.length; i++) {
+            expect(enumerated[i]?.code).toBe(ADR_073_INVARIANTS[i]?.code);
+        }
+    });
+});
+describe('error-code cross-reference (subset — R4 T10338 owns full strict gate)', () => {
+    it('every ADR-073 invariant with a runtimeGate has a known LAFS error code', () => {
+        // TODO(T10338 / R4): replace this targeted subset with a strict registry-wide
+        // assertion that walks every severity:"error" entry and confirms a matching
+        // LAFS error code (E_<ADR>_INVARIANT_VIOLATION_<CODE>) exists in errors.ts.
+        const adr073 = getInvariantsByAdr('ADR-073');
+        for (const entry of adr073) {
+            if (entry.runtimeGate !== null) {
+                const expected = ADR_073_ERROR_CODE_MAP[entry.code];
+                expect(expected).toBeDefined();
+                expect(typeof expected).toBe('string');
+            }
+        }
+    });
+});
+//# sourceMappingURL=registry.test.js.map

package/dist/invariants/__tests__/registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.js","sourceRoot":"","sources":["../../../src/invariants/__tests__/registry.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;GAUG;AACH,MAAM,sBAAsB,GAA2B;IACrD,EAAE,EAAE,6BAA6B;IACjC,EAAE,EAAE,6BAA6B;IACjC,EAAE,EAAE,6BAA6B;CAClC,CAAC;AAEF,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,SAAS,GAA0B,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAChF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAC9B,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACzC,0CAA0C;YAC1C,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAC3D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,EAAE,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,kBAAkB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACrF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpD,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC/B,MAAM,CAAC,OAAO,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/invariants/adr-056-release.d.ts

@@ -0,0 +1,42 @@
+/**
+ * ADR-056 decisions D1-D6 registered against the central invariants
+ * registry (`./index.ts`).
+ *
+ * The six decisions govern the per-domain SQLite SSoT topology + the
+ * release-completion invariant (archiveReason enum + post-release gate).
+ *
+ *   - D1 — Database topology: keep per-domain split (no consolidation).
+ *   - D2 — Naming convention `<domain>-schema.ts` + `<domain>-sqlite.ts`.
+ *   - D3 — Migration runner SSoT under `migration-manager.ts`.
+ *   - D4 — `archiveReason` 6-value enum with tombstone semantics.
+ *   - D5 — Post-release reconciliation: registry-driven `cleo verify --release`.
+ *   - D6 — Commit-message lint for release commits.
+ *
+ * D4 carries a runtime guard (the `assertArchiveReason` function in
+ * `@cleocode/contracts` tasks/archive module) and surfaces as the
+ * `E_ARCHIVE_REASON_TOMBSTONE` LAFS error code on tombstone-write attempts.
+ * D5 carries a registry-driven runtime gate at
+ * `packages/core/src/release/invariants/registry.ts` (the per-release
+ * executable invariants subsystem this central entry catalogues). D1, D2,
+ * D3, D6 are topology / convention / CI-hook decisions — they carry
+ * `lintRule` or `runtimeGate:null` markers per the per-decision
+ * enforcement surface, matching the ADR-073 pattern for I1, I2, I4, I6, I8.
+ *
+ * @epic T10327 — E-INVARIANT-REGISTRY-SSOT
+ * @saga T10326 — SG-SUBSTRATE-RECONCILIATION
+ * @task T10339 — R5: release-registry consumes central substrate
+ * @see ADR-056-db-ssot-and-release-completion-invariant.md §Decision
+ * @see packages/core/src/release/invariants/registry.ts — D5 executable subsystem
+ */
+import type { RegisteredInvariant } from './index.js';
+/**
+ * ADR-056 invariants D1-D6 in declaration order.
+ *
+ * Severity mapping (see `RegisteredInvariant` JSDoc for tier semantics):
+ * - D1, D2, D3, D6 → `info` (topology / convention / CI hook concerns).
+ * - D4 → `error` (tombstone-write rejection — `E_ARCHIVE_REASON_TOMBSTONE`).
+ * - D5 → `warning` (post-release gate produces follow-up tasks rather than
+ *   throwing — failures are caught + recorded via the audit log).
+ */
+export declare const ADR_056_INVARIANTS: readonly RegisteredInvariant[];
+//# sourceMappingURL=adr-056-release.d.ts.map

package/dist/invariants/adr-056-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adr-056-release.d.ts","sourceRoot":"","sources":["../../src/invariants/adr-056-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAuBtD;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,mBAAmB,EA0F3D,CAAC"}

package/dist/invariants/adr-056-release.js

@@ -0,0 +1,143 @@
+/**
+ * ADR-056 decisions D1-D6 registered against the central invariants
+ * registry (`./index.ts`).
+ *
+ * The six decisions govern the per-domain SQLite SSoT topology + the
+ * release-completion invariant (archiveReason enum + post-release gate).
+ *
+ *   - D1 — Database topology: keep per-domain split (no consolidation).
+ *   - D2 — Naming convention `<domain>-schema.ts` + `<domain>-sqlite.ts`.
+ *   - D3 — Migration runner SSoT under `migration-manager.ts`.
+ *   - D4 — `archiveReason` 6-value enum with tombstone semantics.
+ *   - D5 — Post-release reconciliation: registry-driven `cleo verify --release`.
+ *   - D6 — Commit-message lint for release commits.
+ *
+ * D4 carries a runtime guard (the `assertArchiveReason` function in
+ * `@cleocode/contracts` tasks/archive module) and surfaces as the
+ * `E_ARCHIVE_REASON_TOMBSTONE` LAFS error code on tombstone-write attempts.
+ * D5 carries a registry-driven runtime gate at
+ * `packages/core/src/release/invariants/registry.ts` (the per-release
+ * executable invariants subsystem this central entry catalogues). D1, D2,
+ * D3, D6 are topology / convention / CI-hook decisions — they carry
+ * `lintRule` or `runtimeGate:null` markers per the per-decision
+ * enforcement surface, matching the ADR-073 pattern for I1, I2, I4, I6, I8.
+ *
+ * @epic T10327 — E-INVARIANT-REGISTRY-SSOT
+ * @saga T10326 — SG-SUBSTRATE-RECONCILIATION
+ * @task T10339 — R5: release-registry consumes central substrate
+ * @see ADR-056-db-ssot-and-release-completion-invariant.md §Decision
+ * @see packages/core/src/release/invariants/registry.ts — D5 executable subsystem
+ */
+/**
+ * Module path that hosts the `assertArchiveReason` runtime guard.
+ *
+ * Held as a constant so the D4 entry shares one source-of-truth pointer —
+ * touching the path once propagates to every guard ref.
+ */
+const ARCHIVE_REASON_MODULE = 'packages/contracts/src/tasks/archive.ts';
+/**
+ * Module path that hosts the release-invariants registry — the executable
+ * subsystem catalogued by D5. The registry exposes `registerInvariant`,
+ * `getInvariants`, and `runInvariants`; the archive-reason invariant is its
+ * first customer.
+ */
+const RELEASE_INVARIANTS_REGISTRY_MODULE = 'packages/core/src/release/invariants/registry.ts';
+/**
+ * Repo-rooted path to the release commit-msg lint script (D6 enforcement).
+ */
+const RELEASE_COMMIT_MSG_HOOK = 'scripts/hooks/commit-msg-release-lint.mjs';
+/**
+ * ADR-056 invariants D1-D6 in declaration order.
+ *
+ * Severity mapping (see `RegisteredInvariant` JSDoc for tier semantics):
+ * - D1, D2, D3, D6 → `info` (topology / convention / CI hook concerns).
+ * - D4 → `error` (tombstone-write rejection — `E_ARCHIVE_REASON_TOMBSTONE`).
+ * - D5 → `warning` (post-release gate produces follow-up tasks rather than
+ *   throwing — failures are caught + recorded via the audit log).
+ */
+export const ADR_056_INVARIANTS = Object.freeze([
+    {
+        adr: 'ADR-056',
+        code: 'D1',
+        name: 'Database topology: keep per-domain split',
+        description: 'CLEO retains the six per-domain SQLite databases (tasks, brain, conduit, nexus, signaldock, telemetry) documented in DATABASE-ERDS.md. Consolidation is rejected to preserve per-DB WAL throughput, per-DB rollback granularity, and avoid single-writer contention during multi-agent waves.',
+        severity: 'info',
+        // D1 is a topology decision; the absence of consolidation is its only
+        // enforcement surface. No runtime guard, no lint script.
+        runtimeGate: null,
+        lintRule: null,
+        doctorAudit: null,
+        tests: [],
+    },
+    {
+        adr: 'ADR-056',
+        code: 'D2',
+        name: 'Store-layer naming convention',
+        description: 'New always-on store-layer domains MUST use the kebab-case pair `packages/core/src/store/<domain>-schema.ts` (Drizzle defs) + `packages/core/src/store/<domain>-sqlite.ts` (open/init/CRUD). Opt-in / isolated domains MAY use the folder variant `packages/core/src/<domain>/{schema,sqlite}.ts` (currently telemetry only).',
+        severity: 'info',
+        // D2 is a naming-convention decision; enforced by code review and the
+        // ADR-073/ADR-056 doctor audit. No runtime guard.
+        runtimeGate: null,
+        lintRule: null,
+        doctorAudit: null,
+        tests: [],
+    },
+    {
+        adr: 'ADR-056',
+        code: 'D3',
+        name: 'Migration runner SSoT under migration-manager.ts',
+        description: 'All six SQLite databases MUST be initialized via `packages/core/src/migration/migration-manager.ts` (`migrateWithRetry()` + `reconcileJournal()`). Per-DB bespoke runners are prohibited for new domains. Rust Diesel migrations for cloud signaldock-storage MUST NOT touch the local SQLite signaldock.db at runtime.',
+        severity: 'info',
+        // D3 is enforced by the absence of bespoke runners — every domain's
+        // `<domain>-sqlite.ts` open path delegates to migration-manager. No
+        // single runtime guard; per-DB chokepoints are the enforcement surface.
+        runtimeGate: null,
+        lintRule: null,
+        doctorAudit: null,
+        tests: [],
+    },
+    {
+        adr: 'ADR-056',
+        code: 'D4',
+        name: 'archiveReason 6-value enum with tombstone semantics',
+        description: "The tasks.archive_reason column is constrained to exactly six values (verified, reconciled, superseded, shadowed, cancelled, completed-unverified) via SQLite CHECK constraint AND Zod z.enum validation. Writing 'completed-unverified' from non-migration code MUST throw E_ARCHIVE_REASON_TOMBSTONE — the tombstone is reserved for the T1408 backfill migration only.",
+        severity: 'error',
+        runtimeGate: {
+            module: ARCHIVE_REASON_MODULE,
+            functionName: 'assertArchiveReason',
+        },
+        lintRule: null,
+        doctorAudit: null,
+        tests: ['packages/contracts/src/tasks/__tests__/archive.test.ts'],
+    },
+    {
+        adr: 'ADR-056',
+        code: 'D5',
+        name: 'Post-release reconciliation: registry-driven cleo verify --release',
+        description: 'Post-release reconciliation flows through the executable invariants registry at packages/core/src/release/invariants/registry.ts. Customers register via registerInvariant() and the CLI runs every entry on `cleo verify --release <tag>`. First customer: archive-reason-invariant.ts (stamps verified tasks done; creates follow-up tasks for unverified references).',
+        severity: 'warning',
+        runtimeGate: {
+            module: RELEASE_INVARIANTS_REGISTRY_MODULE,
+            functionName: 'runInvariants',
+        },
+        lintRule: null,
+        doctorAudit: null,
+        tests: ['packages/core/src/release/invariants/__tests__/archive-reason-invariant.test.ts'],
+    },
+    {
+        adr: 'ADR-056',
+        code: 'D6',
+        name: 'Commit-message lint for release commits',
+        description: 'Every commit whose subject matches `^(chore|feat)\\(release\\):` MUST contain at least one `T\\d+` task reference in the commit body. Enforced by scripts/hooks/commit-msg-release-lint.mjs (T1410). Bypass via CLEO_OWNER_OVERRIDE=1 with audited justification.',
+        severity: 'info',
+        // D6 is a CI-hook concern. The hook itself is the enforcement surface
+        // — represented here via lintRule for cross-reference rendering.
+        runtimeGate: null,
+        lintRule: {
+            lintScript: RELEASE_COMMIT_MSG_HOOK,
+        },
+        doctorAudit: null,
+        tests: [],
+    },
+]);
+//# sourceMappingURL=adr-056-release.js.map

package/dist/invariants/adr-056-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adr-056-release.js","sourceRoot":"","sources":["../../src/invariants/adr-056-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,yCAAyC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,kCAAkC,GAAG,kDAAkD,CAAC;AAE9F;;GAEG;AACH,MAAM,uBAAuB,GAAG,2CAA2C,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAmC,MAAM,CAAC,MAAM,CAAC;IAC9E;QACE,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,0CAA0C;QAChD,WAAW,EACT,+RAA+R;QACjS,QAAQ,EAAE,MAAM;QAChB,sEAAsE;QACtE,yDAAyD;QACzD,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,EAAE;KACV;IACD;QACE,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,+BAA+B;QACrC,WAAW,EACT,8TAA8T;QAChU,QAAQ,EAAE,MAAM;QAChB,sEAAsE;QACtE,kDAAkD;QAClD,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,EAAE;KACV;IACD;QACE,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,kDAAkD;QACxD,WAAW,EACT,yTAAyT;QAC3T,QAAQ,EAAE,MAAM;QAChB,oEAAoE;QACpE,oEAAoE;QACpE,wEAAwE;QACxE,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,EAAE;KACV;IACD;QACE,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qDAAqD;QAC3D,WAAW,EACT,2WAA2W;QAC7W,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE;YACX,MAAM,EAAE,qBAAqB;YAC7B,YAAY,EAAE,qBAAqB;SACpC;QACD,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,CAAC,wDAAwD,CAAC;KAClE;IACD;QACE,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,oEAAoE;QAC1E,WAAW,EACT,0WAA0W;QAC5W,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE;YACX,MAAM,EAAE,kCAAkC;YAC1C,YAAY,EAAE,eAAe;SAC9B;QACD,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,CAAC,iFAAiF,CAAC;KAC3F;IACD;QACE,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EACT,mQAAmQ;QACrQ,QAAQ,EAAE,MAAM;QAChB,sEAAsE;QACtE,iEAAiE;QACjE,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE;YACR,UAAU,EAAE,uBAAuB;SACpC;QACD,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,EAAE;KACV;CACF,CAAC,CAAC"}

package/dist/invariants/adr-070-orchestration.d.ts

@@ -0,0 +1,73 @@
+/**
+ * ADR-070 ORC-### orchestration invariants registered against the central
+ * invariants registry (`./index.ts`).
+ *
+ * ORC codes govern the three-tier spawn topology — Orchestrator (HITL
+ * interface) → Lead (phase coordinator) → Worker (leaf task) — defined by
+ * ADR-070 and refined by ADR-083 §2 (Cleo persona + recursion bounds).
+ *
+ * Severity mapping (see `RegisteredInvariant` JSDoc for tier semantics):
+ *
+ * - **ORC-012** (thin-agent inversion-of-control) is the only ORC rule with
+ *   a hard-enforced runtime gate today (`enforceThinAgent` +
+ *   `ThinAgentViolationError`). It surfaces as
+ *   `E_THIN_AGENT_VIOLATION` (LAFS error code + exit 68). Tier: `error`.
+ * - **ORC-001..ORC-009** are the skill-injection rules shipped through
+ *   `ct-orchestrator/SKILL.md`. They constrain the Orchestrator's runtime
+ *   behaviour (no code writes, dependency-ordered spawning, 10 K context
+ *   budget, etc.) but live as prompt-time invariants rather than dispatch
+ *   guards. Tier: `warning`, `runtimeGate: null` — the gap is documented
+ *   explicitly so the R6 doctor audit (T10340) can surface it.
+ * - **ORC-010** (Lead-interposition: a Worker spawn for an Epic-child Task
+ *   requires a preceding Lead spawn) and **ORC-011** (Orchestrator-depth
+ *   ≤ 3) are filed against ADR-083 §2.4 + §6 but the dispatch-time gate
+ *   has not yet shipped (tracked T10278 + T10279). They are registered
+ *   here as `warning` with `runtimeGate: null` so the gap surfaces in the
+ *   audit pipeline.
+ * - **ORC-013** (worktree provisioning per ADR-055 / D009) IS enforced at
+ *   `createWorktree` time via `assertCanonicalWorktreeLocation` — it
+ *   carries `severity: 'error'` and a runtime gate. The companion CI gate
+ *   `lint-worktree-location.mjs` is recorded under `lintRule`.
+ * - **ORC-014** (Lead-bypass detection at session end) IS enforced by
+ *   `endSession` via `LeadBypassDetectedError`. Tier: `error`.
+ *
+ * @epic T10327 — E-INVARIANT-REGISTRY-SSOT
+ * @saga T10326 — SG-SUBSTRATE-RECONCILIATION
+ * @task T10336 — R2 (ADR-070 ORC codes)
+ * @see ADR-070-three-tier-orchestration.md
+ * @see ADR-083-section-2.4 — Cleo persona + recursion bounds
+ */
+import type { RegisteredInvariant } from './index.js';
+/**
+ * ADR-070 ORC-### invariants in declaration order.
+ *
+ * The 14 entries cover:
+ *  - ORC-001..ORC-009 — ct-orchestrator skill behavioural constraints.
+ *  - ORC-010..ORC-011 — ADR-083 §2.4 recursion-bound gaps (filed,
+ *    runtime gate unimplemented — tracked T10278 / T10279).
+ *  - ORC-012 — thin-agent inversion-of-control (hard-enforced).
+ *  - ORC-013 — worktree provisioning per ADR-055 / D009 (hard-enforced).
+ *  - ORC-014 — Lead-bypass detection at session end (hard-enforced).
+ *
+ * Every `severity: 'warning'` entry with `runtimeGate: null` carries an
+ * explicit description of WHY the gate is absent, satisfying the gap-
+ * documentation invariant asserted in the unit test below.
+ */
+export declare const ADR_070_INVARIANTS: readonly RegisteredInvariant[];
+/** Sentinel referenced by the unit test — keep in sync with array length. */
+export declare const ADR_070_INVARIANT_COUNT: number;
+/** Sentinel — minimum entries the central registry must merge from this file. */
+export declare const ADR_070_MIN_ENTRIES = 14;
+/**
+ * Export the prompt-only module reference so other ADR-070 ORC modules can
+ * cross-reference the canonical skill location without restating the path.
+ * @internal
+ */
+export declare const ADR_070_PROMPT_SOURCE = "packages/skills/skills/ct-orchestrator/SKILL.md";
+/**
+ * Re-export for symmetry with the spawn-prompt builder consumers — used by
+ * the R8 docs renderer to chase the prompt-injection source for ORC-006.
+ * @internal
+ */
+export declare const ADR_070_SPAWN_PROMPT_MODULE = "packages/core/src/orchestration/spawn-prompt.ts";
+//# sourceMappingURL=adr-070-orchestration.d.ts.map

package/dist/invariants/adr-070-orchestration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adr-070-orchestration.d.ts","sourceRoot":"","sources":["../../src/invariants/adr-070-orchestration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA2CtD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,mBAAmB,EAsM3D,CAAC;AAEH,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,QAA4B,CAAC;AAEjE,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,oDAAwB,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,oDAAsB,CAAC"}