@cleocode/contracts 2026.5.123 → 2026.5.125

package/src/boundary.ts

@@ -770,7 +770,7 @@ export const BOUNDARY_REGISTRY: readonly BoundaryEntry[] = [
   },
   {
     module: 'paths',
-    intent: 'data-manifest',
+    intent: 'orchestration-glue',
     tsWrapper: 'packages/paths',
     canonicalHome: 'cleocode',
     perfBudget: {
@@ -780,9 +780,9 @@ export const BOUNDARY_REGISTRY: readonly BoundaryEntry[] = [
       panic_unwind: 'forbidden',
       root_escape: 'forbidden',
     },
-    amendments: [],
+    amendments: ['adr-067-project-root-resolution'],
     rationale:
-      'XDG paths SSoT (588 LOC) consumed by 9 packages. Leaf data-manifest with no logic beyond path resolution; TS-only.',
+      'XDG paths SSoT (588 LOC) consumed by 9 packages. Upgraded from data-manifest to orchestration-glue (T10295, T11026): the ID-aware resolver surface — resolveProjectByCwd + resolveCanonicalCleoDir — introduces projectId↔path lookup logic with cross-mount canonicalization and strict-mode enforcement. Still TS-only; no Rust port warranted.',
   },
   {
     module: 'playbooks',

package/src/dispatch/__tests__/operation-envelope-snapshots.test.ts

@@ -225,6 +225,12 @@ describe('operation envelope registry snapshots (T10615)', () => {
               "required": false,
               "type": "boolean",
             },
+            {
+              "cli": undefined,
+              "name": "relations",
+              "required": false,
+              "type": "boolean",
+            },
           ],
           "requiredParams": [
             "taskId",

package/src/exit-codes.ts

@@ -404,6 +404,26 @@ export const E_INVALID_PIPELINE_STAGE = 'E_INVALID_PIPELINE_STAGE' as const;
  */
 export const E_AC_COVERAGE_INCOMPLETE = 'E_AC_COVERAGE_INCOMPLETE' as const;
 
+/**
+ * E_CWD_WALKUP_FORBIDDEN — `getCleoDirAbsolute(cwd)` was called while
+ * `CLEO_PATHS_STRICT=1` is set. The caller MUST migrate to
+ * `resolveProjectByCwd(cwd)` + `resolveCanonicalCleoDir(projectId)`
+ * instead of relying on CWD-walk-up path resolution.
+ *
+ * This is the enforcement mechanism for the T10297 migration — once all
+ * callers are migrated, the strict gate will be made the default and
+ * `getCleoDirAbsolute` will be removed entirely.
+ *
+ * `error.details.fix` carries the exact migration commands.
+ *
+ * Maps to {@link ExitCode.CONFIG_ERROR} (8) at the CLI boundary.
+ *
+ * @task T11022
+ * @epic T10296
+ * @saga T10295
+ */
+export const E_CWD_WALKUP_FORBIDDEN = 'E_CWD_WALKUP_FORBIDDEN' as const;
+
 /** Check if an exit code represents an error (1-99). */
 export function isErrorCode(code: ExitCode): boolean {
   return code >= 1 && code < 100;

package/src/index.ts

@@ -548,6 +548,8 @@ export {
   E_CHANGESET_YAML_INVALID,
   // SPEC-T9345 release pipeline v2 error code names (T9525)
   E_CHANNEL_MISMATCH,
+  // T11022 / Saga T10295 — CWD-walk-up forbidden under CLEO_PATHS_STRICT=1
+  E_CWD_WALKUP_FORBIDDEN,
   E_DIRTY_TREE,
   E_EPIC_EMPTY,
   E_EPIC_EMPTY_LEAF_NO_EVIDENCE,