@cleocode/core 2026.10.10-canary.2 → 2026.10.10

package/dist/store/decision-adr-links.d.ts

@@ -0,0 +1,152 @@
+/**
+ * Canonical accessors for `decision_adr_links` — the two-way link table
+ * between `D####` brain ledger decisions and curated ADR docs
+ * (T13359 · spec `cleodocs-rearch-design` §4/§10 · D11165).
+ *
+ * Every write goes through the functions here, on the `openDualScopeDb`
+ * chokepoint's drizzle handle ({@link getDb}) — gate 3 (no raw opens) and
+ * gate 28 (no raw writes to syncing tables).
+ *
+ * Semantics implemented here (the settled tiered methodology, spec §4):
+ *
+ *   - The `D####` ledger stays the operational authority; ADR docs are the
+ *     curated architecture record, authored when a decision graduates.
+ *     Neither tier is generated from the other — this table is the only
+ *     cross-reference, and it starts EMPTY (AC4: no ledger rewrite, no
+ *     backfill of the ~360 existing decisions).
+ *   - Identity is NATURAL over (decision_id, adr_slug): both devices derive
+ *     the same uid for one pair, so concurrent identical links coalesce via
+ *     `ON CONFLICT DO NOTHING` instead of breaking a unique index on apply
+ *     (spec §10).
+ *   - APPEND-ONLY: no DELETE exists. An unlink is a one-way monotonic latch
+ *     flipping `status` to 'revoked' — the row itself is the tombstone and
+ *     survives sync/restore. A revoked pair is never re-linked (rejection,
+ *     not resurrection), so the latch can never be observed half-flipped.
+ *     The latch is enforced at MERGE too (T13597): `SYNC_MERGE_RULES` marks
+ *     'revoked' absorbing with no leave op, so a concurrent same-uid link op
+ *     from another device is refused by the merge engine and cannot
+ *     resurrect the tombstone by LWW.
+ *   - Neither column is a DB-level FK: `decision_id` is a cross-DB soft
+ *     reference (the ledger lives in brain.db) and `adr_slug` is a mutable
+ *     doc alias (old slugs resolve through `conduit_doc_slug_aliases`).
+ *
+ * @module
+ * @task T13359
+ * @epic T13340
+ * @saga T13339
+ */
+import type { DecisionAdrLinkRow } from './schema/cleo-project/docs.js';
+/** Link states. The revoke latch only ever moves `linked` → `revoked`. */
+export declare const DECISION_ADR_LINK_STATUSES: readonly ["linked", "revoked"];
+/** A live link state. */
+export type DecisionAdrLinkStatus = (typeof DECISION_ADR_LINK_STATUSES)[number];
+/**
+ * The natural row uid of one (decision, ADR) pair. Both devices derive this
+ * same value, which is what makes concurrent identical links coalesce.
+ *
+ * @param decisionId - The `D####` ledger decision id.
+ * @param adrSlug - The ADR doc slug.
+ * @returns The canonical natural uid.
+ */
+export declare function decisionAdrLinkUid(decisionId: string, adrSlug: string): string;
+/** Input for {@link linkDecisionToAdr}. */
+export interface LinkDecisionToAdrInput {
+    /** The `D####` ledger decision id. */
+    readonly decisionId: string;
+    /** The ADR doc slug (`adr-NNN-…`). */
+    readonly adrSlug: string;
+    /** Agent id creating the link; omitted when unknown. */
+    readonly linkedBy?: string;
+}
+/** Outcome of a {@link linkDecisionToAdr} call. */
+export interface LinkDecisionToAdrResult {
+    /** The link row after the call. */
+    readonly row: DecisionAdrLinkRow;
+    /** True when this call inserted the row; false for an idempotent re-link. */
+    readonly inserted: boolean;
+}
+/**
+ * Link a `D####` decision to an ADR doc (append-only, natural identity).
+ *
+ * A repeat link of an already-linked pair is an idempotent no-op. A link of
+ * a REVOKED pair is refused: append-only means the tombstone latch never
+ * flips back, so re-linking would require resurrecting a dead row.
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param input - The link facts.
+ * @returns The link row and whether it was inserted.
+ */
+export declare function linkDecisionToAdr(projectRoot: string, input: LinkDecisionToAdrInput): Promise<LinkDecisionToAdrResult>;
+/** Input for {@link revokeDecisionAdrLink}. */
+export interface RevokeDecisionAdrLinkInput {
+    /** The `D####` ledger decision id. */
+    readonly decisionId: string;
+    /** The ADR doc slug. */
+    readonly adrSlug: string;
+    /** Agent id revoking the link; omitted when unknown. */
+    readonly revokedBy?: string;
+}
+/** Outcome of a {@link revokeDecisionAdrLink} call. */
+export interface RevokeDecisionAdrLinkResult {
+    /** The link row after the call. */
+    readonly row: DecisionAdrLinkRow;
+    /** True when this call flipped the latch; false for an idempotent re-revoke. */
+    readonly revoked: boolean;
+}
+/**
+ * Revoke a link as a TOMBSTONE LATCH (never a DELETE, never a resurrection).
+ *
+ * `status` flips `linked` → `revoked` exactly once and `updated_at` records
+ * the tombstone instant; the row survives sync and restore as the permanent
+ * record that this pair was once linked and then unlinked. Re-revoking an
+ * already-revoked pair is an idempotent no-op. Revoking a pair that was
+ * never linked is refused — a tombstone must reference a real link.
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param input - The revoke facts.
+ * @returns The link row and whether the latch flipped.
+ */
+export declare function revokeDecisionAdrLink(projectRoot: string, input: RevokeDecisionAdrLinkInput): Promise<RevokeDecisionAdrLinkResult>;
+/** Read one link row by its natural key, any state. */
+export declare function getDecisionAdrLink(projectRoot: string, decisionId: string, adrSlug: string): Promise<DecisionAdrLinkRow | null>;
+/**
+ * The ADR docs linked to one decision — the decision→ADR direction of the
+ * two-way surfacing (spec §4: decision lookups surface their ADRs).
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param decisionId - The `D####` ledger decision id.
+ * @param opts.includeRevoked - Also return tombstoned links (default false).
+ * @returns The link rows, ADR slug ascending.
+ */
+export declare function listAdrLinksForDecision(projectRoot: string, decisionId: string, opts?: {
+    includeRevoked?: boolean;
+}): Promise<DecisionAdrLinkRow[]>;
+/**
+ * The `D####` decisions linked to one ADR doc — the ADR→decision direction
+ * (`cleo docs fetch adr-NNN` surfaces its source decisions, spec §4 AC2).
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param adrSlug - The ADR doc slug.
+ * @param opts.includeRevoked - Also return tombstoned links (default false).
+ * @returns The link rows, decision id ascending.
+ */
+export declare function listDecisionLinksForAdr(projectRoot: string, adrSlug: string, opts?: {
+    includeRevoked?: boolean;
+}): Promise<DecisionAdrLinkRow[]>;
+/** Optional `linkedAdrs` field attached by {@link attachLinkedAdrs}. */
+export interface DecisionWithLinkedAdrs {
+    /** ADR doc slugs with a live link to this decision; absent when none. */
+    readonly linkedAdrs?: string[];
+}
+/**
+ * Attach each `D####` decision's linked ADR slugs — the decision→ADR
+ * direction of the two-way trace (spec §4: decision lookups surface their
+ * curated ADR records). Rows without a bare `D####` id pass through
+ * untouched.
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param decisions - Decision rows as returned by the brain store.
+ * @returns The same rows, with `linkedAdrs` added where links exist.
+ */
+export declare function attachLinkedAdrs<T extends object>(projectRoot: string, decisions: readonly T[]): Promise<Array<T & DecisionWithLinkedAdrs>>;
+//# sourceMappingURL=decision-adr-links.d.ts.map

package/dist/store/decision-adr-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-adr-links.d.ts","sourceRoot":"","sources":["../../src/store/decision-adr-links.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAMH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAIxE,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B,gCAAiC,CAAC;AAEzE,yBAAyB;AACzB,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAkBhF;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACtC,mCAAmC;IACnC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;;GAUG;AAEH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CAgElC;AAED,+CAA+C;AAC/C,MAAM,WAAW,0BAA0B;IACzC,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wBAAwB;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,uDAAuD;AACvD,MAAM,WAAW,2BAA2B;IAC1C,mCAAmC;IACnC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AAEH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAwDtC;AAED,uDAAuD;AACvD,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAUpC;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GAClC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAU/B;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GAClC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAU/B;AAED,wEAAwE;AACxE,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,SAAS,MAAM,EACrD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,CAAC,EAAE,GACtB,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAgB5C"}

package/dist/store/decision-adr-links.js

@@ -0,0 +1,258 @@
+/**
+ * Canonical accessors for `decision_adr_links` — the two-way link table
+ * between `D####` brain ledger decisions and curated ADR docs
+ * (T13359 · spec `cleodocs-rearch-design` §4/§10 · D11165).
+ *
+ * Every write goes through the functions here, on the `openDualScopeDb`
+ * chokepoint's drizzle handle ({@link getDb}) — gate 3 (no raw opens) and
+ * gate 28 (no raw writes to syncing tables).
+ *
+ * Semantics implemented here (the settled tiered methodology, spec §4):
+ *
+ *   - The `D####` ledger stays the operational authority; ADR docs are the
+ *     curated architecture record, authored when a decision graduates.
+ *     Neither tier is generated from the other — this table is the only
+ *     cross-reference, and it starts EMPTY (AC4: no ledger rewrite, no
+ *     backfill of the ~360 existing decisions).
+ *   - Identity is NATURAL over (decision_id, adr_slug): both devices derive
+ *     the same uid for one pair, so concurrent identical links coalesce via
+ *     `ON CONFLICT DO NOTHING` instead of breaking a unique index on apply
+ *     (spec §10).
+ *   - APPEND-ONLY: no DELETE exists. An unlink is a one-way monotonic latch
+ *     flipping `status` to 'revoked' — the row itself is the tombstone and
+ *     survives sync/restore. A revoked pair is never re-linked (rejection,
+ *     not resurrection), so the latch can never be observed half-flipped.
+ *     The latch is enforced at MERGE too (T13597): `SYNC_MERGE_RULES` marks
+ *     'revoked' absorbing with no leave op, so a concurrent same-uid link op
+ *     from another device is refused by the merge engine and cannot
+ *     resurrect the tombstone by LWW.
+ *   - Neither column is a DB-level FK: `decision_id` is a cross-DB soft
+ *     reference (the ledger lives in brain.db) and `adr_slug` is a mutable
+ *     doc alias (old slugs resolve through `conduit_doc_slug_aliases`).
+ *
+ * @module
+ * @task T13359
+ * @epic T13340
+ * @saga T13339
+ */
+import { ExitCode } from '@cleocode/contracts/exit-codes.js';
+import { and, eq } from 'drizzle-orm';
+import { CleoError } from '../errors.js';
+import { naturalRowUid } from './row-identity.js';
+import { decisionAdrLinks } from './schema/cleo-project/docs.js';
+import { getDb } from './sqlite.js';
+/** Link states. The revoke latch only ever moves `linked` → `revoked`. */
+export const DECISION_ADR_LINK_STATUSES = ['linked', 'revoked'];
+/** Bare `D####` ledger decision id shape (real brain ids, per T13358). */
+const DECISION_ID_PATTERN = /^D\d+$/;
+/**
+ * Refuse an invalid input at the write boundary.
+ *
+ * @param name - Field name for the message.
+ * @param value - The value to check.
+ */
+function requireNonEmpty(name, value) {
+    if (value.trim().length === 0) {
+        // @sync-invariant none:input-shape a blank identifier is refused before any write; nothing was written
+        throw new CleoError(ExitCode.VALIDATION_ERROR, `${name} must be a non-empty string`);
+    }
+}
+/**
+ * The natural row uid of one (decision, ADR) pair. Both devices derive this
+ * same value, which is what makes concurrent identical links coalesce.
+ *
+ * @param decisionId - The `D####` ledger decision id.
+ * @param adrSlug - The ADR doc slug.
+ * @returns The canonical natural uid.
+ */
+export function decisionAdrLinkUid(decisionId, adrSlug) {
+    return naturalRowUid('project', 'decision_adr_links', [decisionId, adrSlug]);
+}
+/**
+ * Link a `D####` decision to an ADR doc (append-only, natural identity).
+ *
+ * A repeat link of an already-linked pair is an idempotent no-op. A link of
+ * a REVOKED pair is refused: append-only means the tombstone latch never
+ * flips back, so re-linking would require resurrecting a dead row.
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param input - The link facts.
+ * @returns The link row and whether it was inserted.
+ */
+// @sync-invariant docs.decision-adr-links.revoke-monotonic the read of the existing row and the conditional insert are one causal step: the read refuses a tombstoned pair (no resurrection) and the natural uid + ON CONFLICT DO NOTHING makes a concurrent identical link coalesce into the same row
+export async function linkDecisionToAdr(projectRoot, input) {
+    requireNonEmpty('decisionId', input.decisionId);
+    requireNonEmpty('adrSlug', input.adrSlug);
+    if (!DECISION_ID_PATTERN.test(input.decisionId)) {
+        // @sync-invariant none:input-shape only bare D#### ledger ids may anchor a link; nothing was written
+        throw new CleoError(ExitCode.VALIDATION_ERROR, `decisionId must be a bare D#### ledger id (got '${input.decisionId}')`);
+    }
+    const db = await getDb(projectRoot);
+    const existing = await db
+        .select()
+        .from(decisionAdrLinks)
+        .where(and(eq(decisionAdrLinks.decisionId, input.decisionId), eq(decisionAdrLinks.adrSlug, input.adrSlug)))
+        .get();
+    if (existing) {
+        if (existing.status === 'revoked') {
+            // @sync-invariant docs.decision-adr-links.revoke-monotonic the revoke latch is one-way; re-linking a tombstoned pair would resurrect a dead row
+            throw new CleoError(ExitCode.VALIDATION_ERROR, `link ${input.decisionId} → ${input.adrSlug} was revoked; a revoked pair is never re-linked`);
+        }
+        return { row: existing, inserted: false };
+    }
+    const uid = decisionAdrLinkUid(input.decisionId, input.adrSlug);
+    const now = new Date().toISOString();
+    await db
+        .insert(decisionAdrLinks)
+        .values({
+        decisionId: input.decisionId,
+        adrSlug: input.adrSlug,
+        status: 'linked',
+        ...(input.linkedBy !== undefined ? { linkedBy: input.linkedBy } : {}),
+        createdAt: now,
+        updatedAt: now,
+        uid,
+    })
+        .onConflictDoNothing()
+        .run();
+    const row = await db
+        .select()
+        .from(decisionAdrLinks)
+        .where(and(eq(decisionAdrLinks.decisionId, input.decisionId), eq(decisionAdrLinks.adrSlug, input.adrSlug)))
+        .get();
+    if (!row) {
+        // @sync-invariant docs.decision-adr-links.revoke-monotonic a link insert that cannot be read back means the store lost the write; fail loudly instead of returning a phantom
+        throw new CleoError(ExitCode.GENERAL_ERROR, `link insert for ${input.decisionId} → ${input.adrSlug} could not be read back`);
+    }
+    return { row, inserted: true };
+}
+/**
+ * Revoke a link as a TOMBSTONE LATCH (never a DELETE, never a resurrection).
+ *
+ * `status` flips `linked` → `revoked` exactly once and `updated_at` records
+ * the tombstone instant; the row survives sync and restore as the permanent
+ * record that this pair was once linked and then unlinked. Re-revoking an
+ * already-revoked pair is an idempotent no-op. Revoking a pair that was
+ * never linked is refused — a tombstone must reference a real link.
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param input - The revoke facts.
+ * @returns The link row and whether the latch flipped.
+ */
+// @sync-invariant docs.decision-adr-links.revoke-monotonic the read-modify-write IS the one-way latch: flip linked→revoked exactly once, refuse if never linked; no DELETE exists on this table
+export async function revokeDecisionAdrLink(projectRoot, input) {
+    requireNonEmpty('decisionId', input.decisionId);
+    requireNonEmpty('adrSlug', input.adrSlug);
+    const db = await getDb(projectRoot);
+    const existing = await db
+        .select()
+        .from(decisionAdrLinks)
+        .where(and(eq(decisionAdrLinks.decisionId, input.decisionId), eq(decisionAdrLinks.adrSlug, input.adrSlug)))
+        .get();
+    if (!existing) {
+        // @sync-invariant docs.decision-adr-links.revoke-monotonic a tombstone must reference a real link; revoking a never-linked pair would fabricate history
+        throw new CleoError(ExitCode.NOT_FOUND, `link ${input.decisionId} → ${input.adrSlug} does not exist; nothing to revoke`);
+    }
+    if (existing.status === 'revoked') {
+        return { row: existing, revoked: false };
+    }
+    await db
+        .update(decisionAdrLinks)
+        .set({
+        status: 'revoked',
+        ...(input.revokedBy !== undefined ? { revokedBy: input.revokedBy } : {}),
+        updatedAt: new Date().toISOString(),
+    })
+        .where(and(eq(decisionAdrLinks.decisionId, input.decisionId), eq(decisionAdrLinks.adrSlug, input.adrSlug)))
+        .run();
+    const row = await db
+        .select()
+        .from(decisionAdrLinks)
+        .where(and(eq(decisionAdrLinks.decisionId, input.decisionId), eq(decisionAdrLinks.adrSlug, input.adrSlug)))
+        .get();
+    if (!row) {
+        // @sync-invariant docs.decision-adr-links.revoke-monotonic a revoked row must still exist — the tombstone is a surviving row, never a disappearance
+        throw new CleoError(ExitCode.GENERAL_ERROR, `link ${input.decisionId} → ${input.adrSlug} vanished during its revoke tombstone`);
+    }
+    return { row, revoked: true };
+}
+/** Read one link row by its natural key, any state. */
+export async function getDecisionAdrLink(projectRoot, decisionId, adrSlug) {
+    requireNonEmpty('decisionId', decisionId);
+    requireNonEmpty('adrSlug', adrSlug);
+    const db = await getDb(projectRoot);
+    const row = await db
+        .select()
+        .from(decisionAdrLinks)
+        .where(and(eq(decisionAdrLinks.decisionId, decisionId), eq(decisionAdrLinks.adrSlug, adrSlug)))
+        .get();
+    return row ?? null;
+}
+/**
+ * The ADR docs linked to one decision — the decision→ADR direction of the
+ * two-way surfacing (spec §4: decision lookups surface their ADRs).
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param decisionId - The `D####` ledger decision id.
+ * @param opts.includeRevoked - Also return tombstoned links (default false).
+ * @returns The link rows, ADR slug ascending.
+ */
+export async function listAdrLinksForDecision(projectRoot, decisionId, opts) {
+    requireNonEmpty('decisionId', decisionId);
+    const db = await getDb(projectRoot);
+    const rows = await db
+        .select()
+        .from(decisionAdrLinks)
+        .where(eq(decisionAdrLinks.decisionId, decisionId))
+        .all();
+    const filtered = opts?.includeRevoked === true ? rows : rows.filter((r) => r.status === 'linked');
+    return filtered.sort((a, b) => a.adrSlug.localeCompare(b.adrSlug));
+}
+/**
+ * The `D####` decisions linked to one ADR doc — the ADR→decision direction
+ * (`cleo docs fetch adr-NNN` surfaces its source decisions, spec §4 AC2).
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param adrSlug - The ADR doc slug.
+ * @param opts.includeRevoked - Also return tombstoned links (default false).
+ * @returns The link rows, decision id ascending.
+ */
+export async function listDecisionLinksForAdr(projectRoot, adrSlug, opts) {
+    requireNonEmpty('adrSlug', adrSlug);
+    const db = await getDb(projectRoot);
+    const rows = await db
+        .select()
+        .from(decisionAdrLinks)
+        .where(eq(decisionAdrLinks.adrSlug, adrSlug))
+        .all();
+    const filtered = opts?.includeRevoked === true ? rows : rows.filter((r) => r.status === 'linked');
+    return filtered.sort((a, b) => a.decisionId.localeCompare(b.decisionId));
+}
+/**
+ * Attach each `D####` decision's linked ADR slugs — the decision→ADR
+ * direction of the two-way trace (spec §4: decision lookups surface their
+ * curated ADR records). Rows without a bare `D####` id pass through
+ * untouched.
+ *
+ * @param projectRoot - Absolute path to the CLEO project root.
+ * @param decisions - Decision rows as returned by the brain store.
+ * @returns The same rows, with `linkedAdrs` added where links exist.
+ */
+export async function attachLinkedAdrs(projectRoot, decisions) {
+    const out = [];
+    for (const row of decisions) {
+        const id = 'id' in row ? row.id : undefined;
+        if (typeof id !== 'string' || !DECISION_ID_PATTERN.test(id)) {
+            out.push(row);
+            continue;
+        }
+        const links = await listAdrLinksForDecision(projectRoot, id);
+        if (links.length === 0) {
+            out.push(row);
+            continue;
+        }
+        out.push({ ...row, linkedAdrs: links.map((link) => link.adrSlug) });
+    }
+    return out;
+}
+//# sourceMappingURL=decision-adr-links.js.map

package/dist/store/decision-adr-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-adr-links.js","sourceRoot":"","sources":["../../src/store/decision-adr-links.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAC;AAKzE,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAErC;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,uGAAuG;QACvG,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,OAAe;IACpE,OAAO,aAAa,CAAC,SAAS,EAAE,oBAAoB,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC;AAoBD;;;;;;;;;;GAUG;AACH,uSAAuS;AACvS,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,KAA6B;IAE7B,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAChD,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,qGAAqG;QACrG,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,gBAAgB,EACzB,mDAAmD,KAAK,CAAC,UAAU,IAAI,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,EAAE;SACtB,MAAM,EAAE;SACR,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACjD,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAC5C,CACF;SACA,GAAG,EAAE,CAAC;IACT,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,gJAAgJ;YAChJ,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,gBAAgB,EACzB,QAAQ,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,OAAO,iDAAiD,CAC7F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,EAAE;SACL,MAAM,CAAC,gBAAgB,CAAC;SACxB,MAAM,CAAC;QACN,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,QAAQ;QAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,GAAG;KACJ,CAAC;SACD,mBAAmB,EAAE;SACrB,GAAG,EAAE,CAAC;IACT,MAAM,GAAG,GAAG,MAAM,EAAE;SACjB,MAAM,EAAE;SACR,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACjD,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAC5C,CACF;SACA,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,6KAA6K;QAC7K,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,aAAa,EACtB,mBAAmB,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,OAAO,yBAAyB,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAoBD;;;;;;;;;;;;GAYG;AACH,gMAAgM;AAChM,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,KAAiC;IAEjC,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAChD,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,EAAE;SACtB,MAAM,EAAE;SACR,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACjD,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAC5C,CACF;SACA,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,wJAAwJ;QACxJ,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,SAAS,EAClB,QAAQ,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,OAAO,oCAAoC,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,EAAE;SACL,MAAM,CAAC,gBAAgB,CAAC;SACxB,GAAG,CAAC;QACH,MAAM,EAAE,SAAS;QACjB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;SACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACjD,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAC5C,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,GAAG,GAAG,MAAM,EAAE;SACjB,MAAM,EAAE;SACR,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACjD,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAC5C,CACF;SACA,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,oJAAoJ;QACpJ,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,aAAa,EACtB,QAAQ,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,OAAO,uCAAuC,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,UAAkB,EAClB,OAAe;IAEf,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC1C,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,EAAE;SACjB,MAAM,EAAE;SACR,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;SAC9F,GAAG,EAAE,CAAC;IACT,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,UAAkB,EAClB,IAAmC;IAEnC,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;SAClD,GAAG,EAAE,CAAC;IACT,MAAM,QAAQ,GAAG,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAClG,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,OAAe,EACf,IAAmC;IAEnC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC5C,GAAG,EAAE,CAAC;IACT,MAAM,QAAQ,GAAG,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAClG,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAC3E,CAAC;AAQD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,SAAuB;IAEvB,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/store/row-identity-registry.d.ts

@@ -81,9 +81,10 @@ export declare const ROW_IDENTITY_EXEMPT: Readonly<Record<TableScope, Readonly<R
  * Since T12894 declared the brain text-keyed tables (11 project, 12 global),
  * T12895 the brain natural-key tables (3 project, 3 global) and T12896 the
  * brain integer-keyed tables (6 project, 6 global), T12915 declared the
- * agent registry (1 global; 6 more reclassified derived or local-only), and
+ * agent registry (1 global; 6 more reclassified derived or local-only),
  * T13354 declared the re-keyed conduit doc family (5 project, dropping 4
- * exemptions — contributors became derived and not syncing)
+ * exemptions — contributors became derived and not syncing), and T13467 the
+ * credential tables (4 global)
  * ({@link rowIdentityExemptionSummary} prints the live numbers):
  *
  * | category             | task   | project | global |
@@ -93,14 +94,13 @@ export declare const ROW_IDENTITY_EXEMPT: Readonly<Record<TableScope, Readonly<R
  * | planned              | T12896 | 2       | 1      |
  * | planned (conduit)    | T12913 | 8       | 0      |
  * | planned (lifecycle…) | T12914 | 16      | 0      |
- * | planned (agents…)    | T12915 | 0       | 4      |
  * | planned (nexus)      | T12916 | 0       | 8      |
  * | planned (skills)     | T12917 | 0       | 4      |
  * | planned (docs)       | T12919 | 3       | 0      |
  * | planned (misc)       | T12920 | 12      | 0      |
  * | twin-collapse        | T12535 | 30      | 0      |
  * | not-row-replicated   | T12918 | 1       | 1      |
- * | total                |        | 70      | 17     |
+ * | total                |        | 70      | 13     |
  *
  * @task T12897
  */

package/dist/store/row-identity-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"row-identity-registry.d.ts","sourceRoot":"","sources":["../../src/store/row-identity-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAkB,eAAe,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEvF,yCAAyC;AACzC,eAAO,MAAM,UAAU,QAAQ,CAAC;AAEhC,2EAA2E;AAC3E,eAAO,MAAM,eAAe,aAAa,CAAC;AA6P1C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC,CAmNjF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC,CAS/E,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,eAAe,GAAG,oBAAoB,CAAC;AAE9F;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,sBAAsB;IACtB,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAsDD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CACxC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,CA4HnE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAG3E,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAGjF,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAIvE;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU,GAAG;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC,CAWA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IACvE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACzC,GAAG,0BAA0B,EAAE,CAyD/B;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAE7F;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAQ7E"}
+{"version":3,"file":"row-identity-registry.d.ts","sourceRoot":"","sources":["../../src/store/row-identity-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAkB,eAAe,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEvF,yCAAyC;AACzC,eAAO,MAAM,UAAU,QAAQ,CAAC;AAEhC,2EAA2E;AAC3E,eAAO,MAAM,eAAe,aAAa,CAAC;AA6P1C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC,CA+PjF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC,CAS/E,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,eAAe,GAAG,oBAAoB,CAAC;AAE9F;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,sBAAsB;IACtB,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAqDD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CACxC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAwHnE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAG3E,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAGjF,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAIvE;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU,GAAG;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC,CAWA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IACvE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACzC,GAAG,0BAA0B,EAAE,CAyD/B;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAE7F;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAQ7E"}

package/dist/store/row-identity-registry.js

@@ -450,6 +450,15 @@ export const ROW_IDENTITY = {
             key: ['attachment_uid'],
             task: 'T13354',
         },
+        {
+            // Natural over the pair (spec §10): both devices derive one uid for one
+            // link, so concurrent identical links coalesce on apply. The revoke is
+            // a one-way tombstone latch on the same row, never a second row.
+            table: 'decision_adr_links',
+            kind: 'natural',
+            key: ['decision_id', 'adr_slug'],
+            task: 'T13359',
+        },
     ],
     global: [
         ...brainTextKeyed(),
@@ -482,6 +491,41 @@ export const ROW_IDENTITY = {
             localKey: 'id',
             task: 'T12915',
         },
+        // T13467 (uid spec D4 amended 2026-10-11): the credential tables are natural
+        // on their non-secret identifiers, so the same credential held on two
+        // devices is one row. Their INTEGER `id` is a local key; every other column
+        // is sealed on the home stream (§2.7), never sent in the clear.
+        {
+            table: 'accounts',
+            kind: 'natural',
+            key: ['provider', 'label'],
+            localKey: 'id',
+            task: 'T13467',
+        },
+        {
+            table: 'service_connections',
+            kind: 'natural',
+            key: ['provider', 'label'],
+            localKey: 'id',
+            task: 'T13467',
+        },
+        {
+            table: 'service_configs',
+            kind: 'natural',
+            key: ['provider'],
+            localKey: 'id',
+            task: 'T13467',
+        },
+        {
+            table: 'agent_service_grants',
+            kind: 'natural',
+            key: ['agent_id', 'service_connection_id'],
+            keyRefs: [
+                { column: 'agent_id', table: 'agent_registry_agents' },
+                { column: 'service_connection_id', table: 'service_connections' },
+            ],
+            task: 'T13467',
+        },
     ],
 };
 /**
@@ -523,7 +567,6 @@ function cluster(task) {
 }
 const CONDUIT = cluster('T12913');
 const LIFECYCLE_RELEASE_GIT = cluster('T12914');
-const AGENT_ACCOUNTS_SERVICE = cluster('T12915');
 const NEXUS_REGISTRY = cluster('T12916');
 const SKILLS = cluster('T12917');
 const DOCS = cluster('T12919');
@@ -638,7 +681,6 @@ export const ROW_IDENTITY_EXEMPT = {
     },
     global: {
         ...BRAIN_EXEMPT,
-        ...exempt(['accounts', 'agent_service_grants', 'service_configs', 'service_connections'], AGENT_ACCOUNTS_SERVICE),
         ...exempt([
             'nexus_audit_log',
             'nexus_devices',
@@ -661,9 +703,10 @@ export const ROW_IDENTITY_EXEMPT = {
  * Since T12894 declared the brain text-keyed tables (11 project, 12 global),
  * T12895 the brain natural-key tables (3 project, 3 global) and T12896 the
  * brain integer-keyed tables (6 project, 6 global), T12915 declared the
- * agent registry (1 global; 6 more reclassified derived or local-only), and
+ * agent registry (1 global; 6 more reclassified derived or local-only),
  * T13354 declared the re-keyed conduit doc family (5 project, dropping 4
- * exemptions — contributors became derived and not syncing)
+ * exemptions — contributors became derived and not syncing), and T13467 the
+ * credential tables (4 global)
  * ({@link rowIdentityExemptionSummary} prints the live numbers):
  *
  * | category             | task   | project | global |
@@ -673,20 +716,19 @@ export const ROW_IDENTITY_EXEMPT = {
  * | planned              | T12896 | 2       | 1      |
  * | planned (conduit)    | T12913 | 8       | 0      |
  * | planned (lifecycle…) | T12914 | 16      | 0      |
- * | planned (agents…)    | T12915 | 0       | 4      |
  * | planned (nexus)      | T12916 | 0       | 8      |
  * | planned (skills)     | T12917 | 0       | 4      |
  * | planned (docs)       | T12919 | 3       | 0      |
  * | planned (misc)       | T12920 | 12      | 0      |
  * | twin-collapse        | T12535 | 30      | 0      |
  * | not-row-replicated   | T12918 | 1       | 1      |
- * | total                |        | 70      | 17     |
+ * | total                |        | 70      | 13     |
  *
  * @task T12897
  */
 export const ROW_IDENTITY_EXEMPT_PINNED = {
     project: 70,
-    global: 17,
+    global: 13,
 };
 /**
  * sha256 of each scope's sorted exempt table names
@@ -698,7 +740,7 @@ export const ROW_IDENTITY_EXEMPT_PINNED = {
  */
 export const ROW_IDENTITY_EXEMPT_NAMES_SHA256 = {
     project: '03413c00c1a3a2be35c1b1c8729ceb8c89f28624e7919e6e12e2f06b5fba5ef6',
-    global: '60877c1f83b6b1e87bbce6f6e911720853337aa2b10eed7404c06a47e9bffd5c',
+    global: '615415a2502708e84007335451603d186c3051cb7e8a69c0b48f561e485edd84',
 };
 /**
  * sha256 (hex) of a set of table names, sorted and newline-joined.