@cleocode/contracts 2026.9.16 → 2026.9.17

package/dist/portable-bundle.d.ts

@@ -0,0 +1,436 @@
+/**
+ * Portable bundle (manifest v2) — contract types for lossless machine migration.
+ *
+ * The v1 `.cleobundle` format (see `backup-manifest.ts`) snapshots a fixed list
+ * of pre-E6 database filenames. After the E6 cutover (ADR-068) none of those
+ * files is the live store any more, so a v1 export of a healthy project
+ * captured nothing but three JSON files and reported success. Manifest v2
+ * records what was actually exported, what was deliberately excluded (with its
+ * size), which secrets were omitted, and the per-table row counts that the
+ * import side re-counts to prove the restore is lossless.
+ *
+ * @task T12318
+ * @epic T12317
+ * @module portable-bundle
+ */
+import type { CredentialDescriptor, CredentialReentry } from './credential-transfer.js';
+/**
+ * Export scope for a portable bundle.
+ *
+ * - `project` — one project's `.cleo/` tree.
+ * - `global`  — the global CLEO home (and config home).
+ * - `all`     — `project` + `global`.
+ * - `machine` — `global` + every registered project that still exists and
+ *   holds a live store (temp and test-fixture paths are skipped).
+ */
+export type PortableBundleScope = 'project' | 'global' | 'all' | 'machine';
+/**
+ * Role of a SQLite database inside a bundle section.
+ *
+ * - `primary`   — the live consolidated store (`cleo.db`) for that scope.
+ * - `legacy`    — a pre-E6 per-domain file (`tasks.db`, `brain.db`, …) that
+ *   still exists on disk. Kept for provenance; nothing reads it after E6.
+ * - `auxiliary` — any other SQLite file found in the tree (e.g. the llmtxt or
+ *   blob-manifest stores, `*.bak` snapshots).
+ */
+export type PortableDatabaseRole = 'primary' | 'legacy' | 'auxiliary';
+/** A SQLite database captured with `VACUUM INTO` (consistent under WAL). */
+export interface PortableDatabaseEntry {
+    /** Path relative to the section root, POSIX separators (e.g. `cleo.db`). */
+    relPath: string;
+    /** Path inside the archive. */
+    bundlePath: string;
+    /** Primary / legacy / auxiliary classification. */
+    role: PortableDatabaseRole;
+    /** Byte size of the snapshot. */
+    size: number;
+    /** SHA-256 hex of the snapshot bytes. */
+    sha256: string;
+    /** Row count of every ordinary table, keyed by table name. */
+    rowCounts: Record<string, number>;
+    /**
+     * Tables that could not be counted, with the reason. Virtual tables are
+     * listed here (their data lives in shadow tables, which ARE counted).
+     */
+    uncountedTables: Record<string, string>;
+}
+/** A regular file captured byte-for-byte. */
+export interface PortableFileEntry {
+    /** Path relative to the section root, POSIX separators. */
+    relPath: string;
+    /** Path inside the archive. */
+    bundlePath: string;
+    /** Byte size. */
+    size: number;
+    /** SHA-256 hex of the file bytes. */
+    sha256: string;
+    /** True when the file was classified as a secret (only present in encrypted bundles). */
+    secret: boolean;
+}
+/** A symbolic link inside the root whose target also stays inside the root. */
+export interface PortableSymlinkEntry {
+    /** Link path relative to the section root. */
+    relPath: string;
+    /** Link target exactly as stored (relative targets stay relative). */
+    target: string;
+}
+/** Material deliberately left out of the bundle. */
+export interface PortableExclusion {
+    /** Path relative to the section root (a directory or a file). */
+    relPath: string;
+    /** Why it was excluded. */
+    reason: string;
+    /** Bytes measured under this path (a lower bound when `sizeComplete` is false). */
+    bytes: number;
+    /** Files measured under this path (a lower bound when `sizeComplete` is false). */
+    fileCount: number;
+    /** False when measurement stopped at its entry budget; `bytes` is then a lower bound. */
+    sizeComplete: boolean;
+}
+/**
+ * Credential material (`portable-secret`, ADR-093) that an UNENCRYPTED bundle
+ * left out, and what the user must re-enter on the target machine.
+ *
+ * - a whole secret file: `relPath` is the file, `table`/`columns` are absent;
+ * - credential COLUMNS inside a database: `relPath` is the database, and the
+ *   listed columns were cleared (set to NULL/empty) in `rows` rows of `table`.
+ *   The rows themselves (identities, sessions) are kept.
+ */
+export interface PortableReentryItem {
+    /** Secret file, or the database holding the redacted columns (relative to the section root). */
+    relPath: string;
+    /** Table whose credential columns were cleared (column redaction only). */
+    table?: string;
+    /** Cleared columns (column redaction only). */
+    columns?: string[];
+    /** Rows whose credential columns were cleared (column redaction only). */
+    rows?: number;
+    /** What must be redone on the target machine. */
+    remedy: string;
+    /**
+     * The individual credentials behind this item, each with the one command
+     * that re-enters it (T12326). Present when the store's credentials are
+     * enumerable; absent for opaque secret files and tables with no re-entry
+     * command.
+     */
+    credentials?: CredentialReentry[];
+}
+/**
+ * Credentials sealed under the bundle passphrase for one section (encrypted
+ * bundles only, T12326). The payload holds the credential VALUES, never the
+ * machine-key: the importing device re-encrypts them under its own key.
+ */
+export interface PortableSealedCredentials {
+    /** Archive path of the sealed payload. */
+    bundlePath: string;
+    /** Payload size in bytes. */
+    size: number;
+    /** SHA-256 of the payload. */
+    sha256: string;
+    /** Credentials carried (identities only). */
+    credentials: CredentialDescriptor[];
+    /** Credentials the exporting device could not decrypt; the target must re-enter them. */
+    reentry: CredentialReentry[];
+}
+/** Common shape of one exported root (a project `.cleo/`, the CLEO home, the config home). */
+export interface PortableSectionBase {
+    /** Absolute path of the root on the source machine. */
+    originalRoot: string;
+    /** Archive directory holding this section's files. */
+    bundlePrefix: string;
+    /** SQLite snapshots. */
+    databases: PortableDatabaseEntry[];
+    /** Byte-for-byte files. */
+    files: PortableFileEntry[];
+    /** Symlinks recreated on import (targets inside the root only). */
+    symlinks: PortableSymlinkEntry[];
+    /** Deliberately excluded material, with sizes. */
+    excluded: PortableExclusion[];
+    /** Credentials left out because the bundle is not encrypted (empty for encrypted bundles). */
+    requiresReentry: PortableReentryItem[];
+    /** Credentials sealed under the passphrase (encrypted bundles with credentials only). */
+    sealedCredentials?: PortableSealedCredentials;
+}
+/** One legacy table that holds more rows than its consolidated counterpart. */
+export interface PortableLegacyEvidence {
+    /** Legacy database (relative path, e.g. `tasks.db`). */
+    database: string;
+    /** Table in the legacy database. */
+    table: string;
+    /** Rows in the legacy table. */
+    legacyRows: number;
+    /** Consolidated table it maps to in the primary store. */
+    primaryTable: string;
+    /** Rows in the primary table (0 when the primary store or table is absent). */
+    primaryRows: number;
+    /**
+     * Rows in a same-named UNPREFIXED table inside the primary store (e.g. a
+     * bare `tasks` table in `cleo.db`), when it exists and differs from
+     * `primaryTable`. Pre-cutover data sometimes lives there instead.
+     */
+    primaryUnprefixedRows?: number;
+}
+/**
+ * Whether a root holds data that exists ONLY in pre-E6 legacy files (never
+ * migrated into `cleo.db`). Export preserves those files losslessly; it does
+ * not migrate them.
+ */
+export interface PortableUnmigratedLegacyReport {
+    /** True when any legacy table holds more rows than its consolidated counterpart. */
+    detected: boolean;
+    /** Per-table evidence. */
+    evidence: PortableLegacyEvidence[];
+}
+/** The key per-project record counts surfaced in results (subset of `rowCounts`). */
+export type PortableKeyCounts = Record<string, number>;
+/** One project's `.cleo/` directory. */
+export interface PortableProjectSection extends PortableSectionBase {
+    /** Absolute project root on the source machine (parent of `.cleo/`). */
+    originalPath: string;
+    /** `projectId` from `.cleo/project-info.json`, else the registry row's id (machine scope), else null. */
+    projectId: string | null;
+    /** Project name (project-info.json `name`, else the directory basename). */
+    name: string;
+    /** Counts of the key tables (tasks, sessions, brain records) in the primary store. */
+    keyCounts: PortableKeyCounts;
+    /** Data present only in legacy per-domain files. */
+    unmigratedLegacyData: PortableUnmigratedLegacyReport;
+}
+/** The global CLEO home plus the config home. */
+export interface PortableGlobalSection {
+    /** `<cleoHome>` content. */
+    home: PortableSectionBase;
+    /** `<configHome>` content, or null when the directory does not exist. */
+    config: PortableSectionBase | null;
+    /** Counts of the key tables in the global primary store. */
+    keyCounts: PortableKeyCounts;
+    /** Data present only in legacy per-domain files of the CLEO home. */
+    unmigratedLegacyData: PortableUnmigratedLegacyReport;
+}
+/**
+ * Why `machine` scope skipped a registered project.
+ *
+ * - `path-missing`   — the registered directory no longer exists.
+ * - `no-live-store`  — `.cleo/` has neither `cleo.db` nor any legacy per-domain store.
+ * - `temp-path`      — the path is a temp or test-fixture directory.
+ * - `duplicate-path` — resolves to a project already included.
+ * - `is-global-home` — its `.cleo/` resolves to the global CLEO home (exported as the global section).
+ */
+export type PortableSkipReason = 'path-missing' | 'no-live-store' | 'temp-path' | 'duplicate-path' | 'is-global-home';
+/** A registered project that `machine` scope did not export, and why. */
+export interface PortableSkippedProject {
+    /** Registered absolute path. */
+    path: string;
+    /** Registered projectId (may be empty for malformed rows). */
+    projectId: string;
+    /** Reason code. */
+    reason: PortableSkipReason;
+}
+/** Root of `manifest.json` in a v2 portable bundle. */
+export interface PortableBundleManifest {
+    /** Format marker. */
+    format: 'cleo-portable-bundle';
+    /** Manifest version; major 2 distinguishes it from v1 `.cleobundle` manifests. */
+    manifestVersion: '2.0.0';
+    /** Provenance. */
+    backup: {
+        /** ISO-8601 creation time. */
+        createdAt: string;
+        /** CLEO version that wrote the bundle. */
+        cleoVersion: string;
+        /** Export scope. */
+        scope: PortableBundleScope;
+        /** Advisory label (the export name). */
+        label: string;
+        /** Host name of the source machine (advisory). */
+        sourceHost: string;
+        /** Whether the archive is encrypted. */
+        encrypted: boolean;
+        /** Whether secrets are present in the archive (true only when encrypted). */
+        secretsIncluded: boolean;
+        /** Memory tables are always included (ADR-093); recorded so readers need not infer it. */
+        memoriesIncluded: true;
+    };
+    /** Global section, present for `global` / `all` / `machine`. */
+    global: PortableGlobalSection | null;
+    /** Project sections. */
+    projects: PortableProjectSection[];
+    /** Registered projects skipped by `machine` scope. */
+    skippedProjects: PortableSkippedProject[];
+    /** Integrity block. */
+    integrity: {
+        /** Always sha256. */
+        algorithm: 'sha256';
+        /** SHA-256 of this manifest serialised with `manifestHash` set to "". */
+        manifestHash: string;
+    };
+}
+/** Result of exporting a portable bundle. */
+export interface PortableExportResult {
+    /** Absolute path of the written bundle. */
+    bundlePath: string;
+    /** Bundle size in bytes. */
+    size: number;
+    /** Export scope. */
+    scope: PortableBundleScope;
+    /** Whether the bundle is encrypted. */
+    encrypted: boolean;
+    /** Whether secrets were included. */
+    secretsIncluded: boolean;
+    /**
+     * Memory disclosure (ADR-093): memories are always exported, encrypted or
+     * not. `counts` sums the memory tables across every database in the bundle.
+     */
+    memory: {
+        /** Always true. */
+        included: true;
+        /** Whether they are protected by bundle encryption. */
+        encrypted: boolean;
+        /** Summed row counts per memory table. */
+        counts: Record<string, number>;
+        /** Plain-language notice (recommends `--encrypt` when unencrypted). */
+        notice: string;
+    };
+    /** Per-section summary. */
+    sections: Array<{
+        /** `global-home`, `global-config`, or `project`. */
+        kind: 'global-home' | 'global-config' | 'project';
+        /** Source root. */
+        root: string;
+        /** Project name (projects only). */
+        name?: string;
+        /** Number of databases captured. */
+        databases: number;
+        /** Number of files captured. */
+        files: number;
+        /** Key table counts. */
+        keyCounts?: PortableKeyCounts;
+        /** Legacy-only data report (global home and projects). */
+        unmigratedLegacyData?: PortableUnmigratedLegacyReport;
+        /** Excluded material with sizes. */
+        excluded: PortableExclusion[];
+        /** Credentials left out (unencrypted bundles). */
+        requiresReentry: PortableReentryItem[];
+    }>;
+    /** Machine scope: included/skipped tallies. */
+    machine?: {
+        /** Registered projects considered. */
+        registered: number;
+        /** Projects exported. */
+        included: number;
+        /** Skipped projects grouped by reason. */
+        skippedByReason: Partial<Record<PortableSkipReason, number>>;
+    };
+}
+/** Per-table comparison of manifest vs restored row counts. */
+export interface PortableTableComparison {
+    /** Table name. */
+    table: string;
+    /** Row count recorded at export. */
+    expected: number;
+    /** Row count re-counted after restore (null when uncountable). */
+    actual: number | null;
+}
+/** An absolute path encountered while relocating, reported by location. */
+export interface PortablePathFinding {
+    /** Where it was found: `<db relPath>:<table>.<column>` or a file relPath. */
+    location: string;
+    /** Number of values (rows or occurrences) affected. */
+    count: number;
+    /** Example value (truncated). */
+    example?: string;
+}
+/** Relocation report for one project. */
+export interface PortableRelocationReport {
+    /** Original project root. */
+    fromRoot: string;
+    /** New project root. */
+    toRoot: string;
+    /** Values rewritten from the old root to the new one. */
+    rewritten: PortablePathFinding[];
+    /** Values that still reference the old root and were deliberately left (historical record). */
+    leftUnderOldRoot: PortablePathFinding[];
+    /** Absolute paths outside the old root, left unchanged. */
+    leftOutsideRoot: PortablePathFinding[];
+    /**
+     * Rewritten locators whose new target does not exist on this machine at
+     * import time (e.g. the repository has not been cloned there yet, or the
+     * project was re-rooted into a subdirectory that does not contain it).
+     */
+    rewrittenTargetMissing: PortablePathFinding[];
+}
+/** Restore outcome for one section. */
+export interface PortableImportSectionResult {
+    /** Section kind. */
+    kind: 'global-home' | 'global-config' | 'project';
+    /** Source root recorded in the bundle. */
+    originalRoot: string;
+    /** Destination root written. */
+    destinationRoot: string;
+    /** Project name (projects only). */
+    name?: string;
+    /** projectId (projects only). */
+    projectId?: string | null;
+    /** Files written. */
+    filesWritten: number;
+    /** Databases written. */
+    databasesWritten: number;
+    /** Tables compared across all databases in the section. */
+    tablesCompared: number;
+    /**
+     * Files and databases whose placed SHA-256 was compared with the manifest.
+     * Entries rewritten by relocation are excluded (listed in `hashSkipped`).
+     */
+    hashesCompared: number;
+    /** Placed entries whose SHA-256 differs from the manifest (empty = byte-identical). */
+    hashMismatches: string[];
+    /** Entries not hash-compared because relocation rewrote them by design. */
+    hashSkipped: string[];
+    /** Tables whose restored count differs from the manifest (empty = lossless). */
+    mismatches: Array<PortableTableComparison & {
+        database: string;
+    }>;
+    /** Key counts, expected vs actual. */
+    keyCounts: Array<PortableTableComparison>;
+    /** Relocation report (projects placed at a different root only). */
+    relocation?: PortableRelocationReport;
+    /** Legacy-only data carried over unmigrated (projects only). */
+    unmigratedLegacyData?: PortableUnmigratedLegacyReport;
+    /** Global registry update for this project (projects only). */
+    registry?: {
+        /** Outcome. */
+        status: 'updated' | 'registered' | 'unchanged' | 'not-in-registry' | 'skipped' | 'failed';
+        /** Detail. */
+        detail: string;
+    };
+}
+/** Result of importing a portable bundle. */
+export interface PortableImportResult {
+    /** Bundle imported. */
+    bundlePath: string;
+    /** Scope recorded in the bundle. */
+    scope: PortableBundleScope;
+    /** Per-section outcomes. */
+    sections: PortableImportSectionResult[];
+    /** True when every table count matched and every non-relocated entry is byte-identical. */
+    lossless: boolean;
+    /** Whether secrets were present in the bundle. */
+    secretsIncluded: boolean;
+    /** Credentials the user must re-enter (unencrypted bundles). */
+    requiresReentry: Array<PortableReentryItem & {
+        section: string;
+    }>;
+    /**
+     * Sealed credentials re-encrypted under the target machine-key, and those
+     * that could not be (each with its re-entry command). Encrypted bundles only.
+     */
+    credentials?: {
+        restored: Array<CredentialDescriptor & {
+            section: string;
+        }>;
+        reentry: Array<CredentialReentry & {
+            section: string;
+        }>;
+    };
+}
+//# sourceMappingURL=portable-bundle.d.ts.map

package/dist/portable-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable-bundle.d.ts","sourceRoot":"","sources":["../src/portable-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAMxF;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAM3E;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEtE,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,IAAI,EAAE,oBAAoB,CAAC;IAC3B,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,6CAA6C;AAC7C,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yFAAyF;IACzF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,+EAA+E;AAC/E,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpC,yFAAyF;IACzF,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAMD,8FAA8F;AAC9F,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,2BAA2B;IAC3B,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,mEAAmE;IACnE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,kDAAkD;IAClD,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,8FAA8F;IAC9F,eAAe,EAAE,mBAAmB,EAAE,CAAC;IACvC,yFAAyF;IACzF,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;CAC/C;AAED,+EAA+E;AAC/E,MAAM,WAAW,sBAAsB;IACrC,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,oFAAoF;IACpF,QAAQ,EAAE,OAAO,CAAC;IAClB,0BAA0B;IAC1B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;CACpC;AAED,qFAAqF;AACrF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEvD,wCAAwC;AACxC,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC;IACrB,yGAAyG;IACzG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,SAAS,EAAE,iBAAiB,CAAC;IAC7B,oDAAoD;IACpD,oBAAoB,EAAE,8BAA8B,CAAC;CACtD;AAED,iDAAiD;AACjD,MAAM,WAAW,qBAAqB;IACpC,4BAA4B;IAC5B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,yEAAyE;IACzE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,4DAA4D;IAC5D,SAAS,EAAE,iBAAiB,CAAC;IAC7B,qEAAqE;IACrE,oBAAoB,EAAE,8BAA8B,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,yEAAyE;AACzE,MAAM,WAAW,sBAAsB;IACrC,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAMD,uDAAuD;AACvD,MAAM,WAAW,sBAAsB;IACrC,qBAAqB;IACrB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,kFAAkF;IAClF,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB;IAClB,MAAM,EAAE;QACN,8BAA8B;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,0CAA0C;QAC1C,WAAW,EAAE,MAAM,CAAC;QACpB,oBAAoB;QACpB,KAAK,EAAE,mBAAmB,CAAC;QAC3B,wCAAwC;QACxC,KAAK,EAAE,MAAM,CAAC;QACd,kDAAkD;QAClD,UAAU,EAAE,MAAM,CAAC;QACnB,wCAAwC;QACxC,SAAS,EAAE,OAAO,CAAC;QACnB,6EAA6E;QAC7E,eAAe,EAAE,OAAO,CAAC;QACzB,0FAA0F;QAC1F,gBAAgB,EAAE,IAAI,CAAC;KACxB,CAAC;IACF,gEAAgE;IAChE,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACrC,wBAAwB;IACxB,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,sDAAsD;IACtD,eAAe,EAAE,sBAAsB,EAAE,CAAC;IAC1C,uBAAuB;IACvB,SAAS,EAAE;QACT,qBAAqB;QACrB,SAAS,EAAE,QAAQ,CAAC;QACpB,yEAAyE;QACzE,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAMD,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACnC,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,qCAAqC;IACrC,eAAe,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,MAAM,EAAE;QACN,mBAAmB;QACnB,QAAQ,EAAE,IAAI,CAAC;QACf,uDAAuD;QACvD,SAAS,EAAE,OAAO,CAAC;QACnB,0CAA0C;QAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,uEAAuE;QACvE,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,2BAA2B;IAC3B,QAAQ,EAAE,KAAK,CAAC;QACd,oDAAoD;QACpD,IAAI,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAAC;QAClD,mBAAmB;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,oCAAoC;QACpC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,oCAAoC;QACpC,SAAS,EAAE,MAAM,CAAC;QAClB,gCAAgC;QAChC,KAAK,EAAE,MAAM,CAAC;QACd,wBAAwB;QACxB,SAAS,CAAC,EAAE,iBAAiB,CAAC;QAC9B,0DAA0D;QAC1D,oBAAoB,CAAC,EAAE,8BAA8B,CAAC;QACtD,oCAAoC;QACpC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;QAC9B,kDAAkD;QAClD,eAAe,EAAE,mBAAmB,EAAE,CAAC;KACxC,CAAC,CAAC;IACH,+CAA+C;IAC/C,OAAO,CAAC,EAAE;QACR,sCAAsC;QACtC,UAAU,EAAE,MAAM,CAAC;QACnB,yBAAyB;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,0CAA0C;QAC1C,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;KAC9D,CAAC;CACH;AAED,+DAA+D;AAC/D,MAAM,WAAW,uBAAuB;IACtC,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,yCAAyC;AACzC,MAAM,WAAW,wBAAwB;IACvC,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,+FAA+F;IAC/F,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;IACxC,2DAA2D;IAC3D,eAAe,EAAE,mBAAmB,EAAE,CAAC;IACvC;;;;OAIG;IACH,sBAAsB,EAAE,mBAAmB,EAAE,CAAC;CAC/C;AAED,uCAAuC;AACvC,MAAM,WAAW,2BAA2B;IAC1C,oBAAoB;IACpB,IAAI,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAAC;IAClD,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qBAAqB;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gFAAgF;IAChF,UAAU,EAAE,KAAK,CAAC,uBAAuB,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,sCAAsC;IACtC,SAAS,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1C,oEAAoE;IACpE,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,gEAAgE;IAChE,oBAAoB,CAAC,EAAE,8BAA8B,CAAC;IACtD,+DAA+D;IAC/D,QAAQ,CAAC,EAAE;QACT,eAAe;QACf,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,iBAAiB,GAAG,SAAS,GAAG,QAAQ,CAAC;QAC1F,cAAc;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACnC,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,4BAA4B;IAC5B,QAAQ,EAAE,2BAA2B,EAAE,CAAC;IACxC,2FAA2F;IAC3F,QAAQ,EAAE,OAAO,CAAC;IAClB,kDAAkD;IAClD,eAAe,EAAE,OAAO,CAAC;IACzB,gEAAgE;IAChE,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE;;;OAGG;IACH,WAAW,CAAC,EAAE;QACZ,QAAQ,EAAE,KAAK,CAAC,oBAAoB,GAAG;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC5D,OAAO,EAAE,KAAK,CAAC,iBAAiB,GAAG;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACzD,CAAC;CACH"}

package/dist/portable-bundle.js

@@ -0,0 +1,17 @@
+/**
+ * Portable bundle (manifest v2) — contract types for lossless machine migration.
+ *
+ * The v1 `.cleobundle` format (see `backup-manifest.ts`) snapshots a fixed list
+ * of pre-E6 database filenames. After the E6 cutover (ADR-068) none of those
+ * files is the live store any more, so a v1 export of a healthy project
+ * captured nothing but three JSON files and reported success. Manifest v2
+ * records what was actually exported, what was deliberately excluded (with its
+ * size), which secrets were omitted, and the per-table row counts that the
+ * import side re-counts to prove the restore is lossless.
+ *
+ * @task T12318
+ * @epic T12317
+ * @module portable-bundle
+ */
+export {};
+//# sourceMappingURL=portable-bundle.js.map

package/dist/portable-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable-bundle.js","sourceRoot":"","sources":["../src/portable-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/contracts",
-  "version": "2026.9.16",
+  "version": "2026.9.17",
   "description": "Domain types, interfaces, and contracts for the CLEO ecosystem",
   "type": "module",
   "main": "./dist/index.js",
@@ -194,7 +194,7 @@
   "dependencies": {
     "zod": "^4.3.6",
     "zod-to-json-schema": "^3.25.2",
-    "@cleocode/lafs": "2026.9.16"
+    "@cleocode/lafs": "2026.9.17"
   },
   "scripts": {
     "build": "tsc -b --force && node scripts/copy-assets.mjs && node scripts/emit-schemas.mjs",