@cleocode/core 2026.3.42 → 2026.3.43

package/dist/compliance/protocol-enforcement.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Protocol Enforcement for CLEO
+ *
+ * Validates RCASD-IVTR+C lifecycle compliance with exit codes 60-70.
+ * Intercepts domain operations to enforce protocol requirements before execution.
+ *
+ * Moved from src/mcp/lib/protocol-enforcement.ts to core for proper layering.
+ *
+ * @task T2918
+ * @task T5707
+ * @epic T2908
+ */
+import { type ProtocolValidationResult, type ProtocolViolation } from './protocol-rules.js';
+import { type ProtocolRequest, type ProtocolResponse } from './protocol-types.js';
+/**
+ * Protocol types aligned with RCASD-IVTR+C lifecycle
+ */
+export declare enum ProtocolType {
+    RESEARCH = "research",
+    CONSENSUS = "consensus",
+    SPECIFICATION = "specification",
+    DECOMPOSITION = "decomposition",
+    IMPLEMENTATION = "implementation",
+    CONTRIBUTION = "contribution",
+    RELEASE = "release",
+    VALIDATION = "validation",
+    TESTING = "testing"
+}
+/**
+ * Violation log entry
+ */
+export interface ViolationLogEntry {
+    timestamp: string;
+    taskId?: string;
+    protocol: ProtocolType;
+    violations: ProtocolViolation[];
+    score: number;
+    blocked: boolean;
+}
+/**
+ * Main protocol enforcement class
+ */
+export declare class ProtocolEnforcer {
+    private violations;
+    private strictMode;
+    constructor(strictMode?: boolean);
+    /**
+     * Validate protocol compliance for a manifest entry
+     */
+    validateProtocol(protocol: ProtocolType, manifestEntry: Record<string, unknown>, additionalData?: Record<string, unknown>): Promise<ProtocolValidationResult>;
+    /**
+     * Validate a single rule
+     */
+    private validateRule;
+    /**
+     * Check lifecycle gate prerequisites
+     */
+    checkLifecycleGate(_taskId: string, targetStage: string, lifecycleManifest?: Record<string, unknown>): Promise<{
+        passed: boolean;
+        missingPrerequisites: string[];
+        message: string;
+    }>;
+    /**
+     * Record a protocol violation
+     */
+    recordViolation(protocol: ProtocolType, violations: ProtocolViolation[], score: number, taskId?: string): void;
+    /**
+     * Get recent violations
+     */
+    getViolations(limit?: number): ViolationLogEntry[];
+    /**
+     * Calculate penalty for violation severity
+     */
+    private calculatePenalty;
+    /**
+     * Middleware function for domain router
+     *
+     * Intercepts operations and validates protocol compliance before execution.
+     */
+    enforceProtocol(request: ProtocolRequest, next: () => Promise<ProtocolResponse>): Promise<ProtocolResponse>;
+    /**
+     * Determine if operation requires protocol validation
+     */
+    private requiresProtocolValidation;
+    /**
+     * Detect protocol type from request/response
+     */
+    private detectProtocol;
+    /**
+     * Extract manifest entry from response
+     */
+    private extractManifestEntry;
+    /**
+     * Set strict mode
+     */
+    setStrictMode(strict: boolean): void;
+    /**
+     * Get strict mode status
+     */
+    isStrictMode(): boolean;
+}
+/**
+ * Default protocol enforcer instance
+ */
+export declare const protocolEnforcer: ProtocolEnforcer;
+//# sourceMappingURL=protocol-enforcement.d.ts.map

package/dist/compliance/protocol-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-enforcement.d.ts","sourceRoot":"","sources":["../../src/compliance/protocol-enforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAGL,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAoB,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEpG;;GAEG;AACH,oBAAY,YAAY;IACtB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,OAAO,YAAY;CACpB;AAiCD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,YAAY,CAAC;IACvB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,UAAU,CAAU;gBAEhB,UAAU,GAAE,OAAc;IAItC;;OAEG;IACG,gBAAgB,CACpB,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,OAAO,CAAC,wBAAwB,CAAC;IAoCpC;;OAEG;YACW,YAAY;IA0B1B;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,OAAO,CAAC;QACT,MAAM,EAAE,OAAO,CAAC;QAChB,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAoCF;;OAEG;IACH,eAAe,CACb,QAAQ,EAAE,YAAY,EACtB,UAAU,EAAE,iBAAiB,EAAE,EAC/B,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,GACd,IAAI;IAkBP;;OAEG;IACH,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAIlD;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;OAIG;IACG,eAAe,CACnB,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,GACpC,OAAO,CAAC,gBAAgB,CAAC;IA+D5B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAelC;;OAEG;IACH,OAAO,CAAC,cAAc;IAoCtB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IAIpC;;OAEG;IACH,YAAY,IAAI,OAAO;CAGxB;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,kBAAyB,CAAC"}

package/dist/compliance/protocol-rules.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Protocol Rule Definitions for CLEO
+ *
+ * Defines validation rules for all 9 RCASD-IVTR+C protocols.
+ * Moved from src/mcp/lib/protocol-rules.ts to core for proper layering.
+ *
+ * @task T2918
+ * @task T5707
+ * @epic T2908
+ */
+/**
+ * RFC 2119 requirement levels
+ */
+export type RequirementLevel = 'MUST' | 'SHOULD' | 'MAY';
+/**
+ * Violation severity
+ */
+export type ViolationSeverity = 'error' | 'warning';
+/**
+ * Protocol rule definition
+ */
+export interface ProtocolRule {
+    /** Rule identifier (e.g., RSCH-001) */
+    id: string;
+    /** RFC 2119 level */
+    level: RequirementLevel;
+    /** Rule description */
+    message: string;
+    /** Suggested fix command */
+    fix: string;
+    /** Validation function */
+    validate: (manifestEntry: Record<string, unknown>, additionalData?: Record<string, unknown>) => Promise<boolean> | boolean;
+}
+/**
+ * Protocol violation result
+ */
+export interface ProtocolViolation {
+    requirement: string;
+    severity: ViolationSeverity;
+    message: string;
+    fix: string;
+}
+/**
+ * Protocol validation result
+ */
+export interface ProtocolValidationResult {
+    valid: boolean;
+    violations: ProtocolViolation[];
+    score: number;
+}
+/**
+ * Protocol rule registry
+ */
+export declare const PROTOCOL_RULES: Record<string, ProtocolRule[]>;
+//# sourceMappingURL=protocol-rules.d.ts.map

package/dist/compliance/protocol-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-rules.d.ts","sourceRoot":"","sources":["../../src/compliance/protocol-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,qBAAqB;IACrB,KAAK,EAAE,gBAAgB,CAAC;IACxB,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,0BAA0B;IAC1B,QAAQ,EAAE,CACR,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACrC,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AA8uBD;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,CAUzD,CAAC"}

package/dist/compliance/protocol-types.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Protocol enforcement types used by the RCASD-IVTR+C protocol system.
+ *
+ * These types are used by protocol-enforcement.ts, protocol-rules.ts,
+ * verification-gates.ts, and gate-validators.ts. Previously defined in
+ * src/mcp/lib/exit-codes.ts (deprecated), now canonical in core.
+ *
+ * @task T5707
+ * @epic T5701
+ */
+/**
+ * Error severity levels for protocol/gate validation.
+ */
+export declare enum ErrorSeverity {
+    INFO = "info",
+    WARNING = "warning",
+    ERROR = "error",
+    CRITICAL = "critical"
+}
+/**
+ * Error category for grouping protocol/gate violations.
+ */
+export declare enum ErrorCategory {
+    GENERAL = "general",
+    HIERARCHY = "hierarchy",
+    CONCURRENCY = "concurrency",
+    SESSION = "session",
+    VERIFICATION = "verification",
+    CONTEXT = "context",
+    PROTOCOL = "protocol",
+    NEXUS = "nexus",
+    LIFECYCLE = "lifecycle",
+    SPECIAL = "special"
+}
+/**
+ * Protocol-specific exit codes used by the RCASD-IVTR+C enforcement system.
+ *
+ * These map to the protocol violation range (60-70) and lifecycle enforcement
+ * range (80-84) defined in the MCP server specification. The values here
+ * align with the protocol enforcement layer's own exit code semantics,
+ * which differ from the canonical CLI exit codes in src/types/exit-codes.ts.
+ *
+ * The canonical CLI ExitCode enum at src/types/exit-codes.ts maps range 60-67
+ * to orchestrator errors, while this enum maps them to protocol violations.
+ * Both are valid in their respective contexts — CLI vs protocol enforcement.
+ */
+export declare enum ProtocolExitCode {
+    SUCCESS = 0,
+    E_GENERAL_ERROR = 1,
+    E_INVALID_INPUT = 2,
+    E_FILE_ERROR = 3,
+    E_NOT_FOUND = 4,
+    E_DEPENDENCY_ERROR = 5,
+    E_VALIDATION_ERROR = 6,
+    E_PARENT_NOT_FOUND = 10,
+    E_DEPTH_EXCEEDED = 11,
+    E_SIBLING_LIMIT = 12,
+    E_CIRCULAR_REFERENCE = 14,
+    E_SESSION_REQUIRED = 36,
+    E_PROTOCOL_RESEARCH = 60,
+    E_PROTOCOL_CONSENSUS = 61,
+    E_PROTOCOL_SPECIFICATION = 62,
+    E_PROTOCOL_DECOMPOSITION = 63,
+    E_PROTOCOL_IMPLEMENTATION = 64,
+    E_PROTOCOL_CONTRIBUTION = 65,
+    E_PROTOCOL_RELEASE = 66,
+    E_PROTOCOL_GENERIC = 67,
+    E_PROTOCOL_VALIDATION = 68,
+    E_TESTS_SKIPPED = 69,
+    E_LIFECYCLE_GATE_FAILED = 80
+}
+/**
+ * Request shape used by the protocol enforcement system.
+ * Minimal interface matching the fields needed by ProtocolEnforcer.
+ */
+export interface ProtocolRequest {
+    gateway: 'query' | 'mutate';
+    domain: string;
+    operation: string;
+    params?: Record<string, unknown>;
+}
+/**
+ * Response shape used by the protocol enforcement system.
+ */
+export interface ProtocolResponse {
+    _meta: {
+        gateway: string;
+        domain: string;
+        operation: string;
+        timestamp: string;
+        duration_ms: number;
+        [key: string]: unknown;
+    };
+    success: boolean;
+    data?: unknown;
+    partial?: boolean;
+    error?: {
+        code: string;
+        exitCode?: number;
+        message: string;
+        details?: Record<string, unknown>;
+        fix?: string;
+        alternatives?: Array<{
+            action: string;
+            command: string;
+        }>;
+    };
+}
+//# sourceMappingURL=protocol-types.d.ts.map

package/dist/compliance/protocol-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-types.d.ts","sourceRoot":"","sources":["../../src/compliance/protocol-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;GAEG;AACH,oBAAY,aAAa;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,oBAAY,aAAa;IACvB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,SAAS,cAAc;IACvB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;GAWG;AACH,oBAAY,gBAAgB;IAE1B,OAAO,IAAI;IAGX,eAAe,IAAI;IACnB,eAAe,IAAI;IACnB,YAAY,IAAI;IAChB,WAAW,IAAI;IACf,kBAAkB,IAAI;IACtB,kBAAkB,IAAI;IAGtB,kBAAkB,KAAK;IACvB,gBAAgB,KAAK;IACrB,eAAe,KAAK;IACpB,oBAAoB,KAAK;IACzB,kBAAkB,KAAK;IAGvB,mBAAmB,KAAK;IACxB,oBAAoB,KAAK;IACzB,wBAAwB,KAAK;IAC7B,wBAAwB,KAAK;IAC7B,yBAAyB,KAAK;IAC9B,uBAAuB,KAAK;IAC5B,kBAAkB,KAAK;IACvB,kBAAkB,KAAK;IACvB,qBAAqB,KAAK;IAC1B,eAAe,KAAK;IAGpB,uBAAuB,KAAK;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE;QACL,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,YAAY,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC3D,CAAC;CACH"}

package/dist/compliance/store.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Shared COMPLIANCE.jsonl storage helpers.
+ *
+ * Keeps file-path resolution and JSONL parsing in one place so all callers
+ * read/write compliance entries consistently.
+ *
+ * @task T4801
+ */
+export type ComplianceJsonlEntry = Record<string, unknown>;
+/** Resolve COMPLIANCE.jsonl path for a project root. */
+export declare function getComplianceJsonlPath(projectRoot: string): string;
+/**
+ * Read COMPLIANCE.jsonl entries.
+ * Invalid JSON lines are skipped to preserve append-only log resilience.
+ */
+export declare function readComplianceJsonl(projectRoot: string): ComplianceJsonlEntry[];
+/** Append one entry to COMPLIANCE.jsonl, creating directories as needed. */
+export declare function appendComplianceJsonl(projectRoot: string, entry: ComplianceJsonlEntry): void;
+//# sourceMappingURL=store.d.ts.map

package/dist/compliance/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/compliance/store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE3D,wDAAwD;AACxD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,EAAE,CA2B/E;AAED,4EAA4E;AAC5E,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAQ5F"}

package/dist/config/build-config.d.ts

@@ -0,0 +1,31 @@
+/**
+ * BUILD CONFIGURATION - AUTO-GENERATED FILE
+ *
+ * This file is generated by dev/generate-build-config.js
+ * DO NOT EDIT MANUALLY - Changes will be overwritten on next build
+ *
+ * Source of truth: package.json
+ * Generated at: 2026-03-18T09:06:32.935Z
+ *
+ * @task T5245
+ * @auto-generated
+ */
+export declare const BUILD_CONFIG: {
+    readonly name: "@cleocode/cleo";
+    readonly version: "2026.3.36";
+    readonly description: "CLEO V2 - TypeScript task management CLI for AI coding agents";
+    readonly repository: {
+        readonly owner: "kryptobaseddev";
+        readonly name: "cleo";
+        readonly fullName: "kryptobaseddev/cleo";
+        readonly url: "https://github.com/kryptobaseddev/cleo.git";
+        readonly issuesUrl: "https://github.com/kryptobaseddev/cleo/issues";
+    };
+    readonly buildDate: "2026-03-18T09:06:32.935Z";
+    readonly templates: {
+        readonly issueTemplatesDir: "templates/issue-templates";
+    };
+};
+export type BuildConfig = typeof BUILD_CONFIG;
+export type RepositoryConfig = BuildConfig['repository'];
+//# sourceMappingURL=build-config.d.ts.map

package/dist/config/build-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-config.d.ts","sourceRoot":"","sources":["../../src/config/build-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;CAef,CAAC;AAGX,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC;AAC9C,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Configuration engine for CLEO V2.
+ *
+ * Resolution priority: CLI flags > Environment vars > Project config > Global config > Defaults
+ *
+ * @epic T4454
+ * @task T4458
+ */
+import type { CleoConfig, ResolvedValue } from '@cleocode/contracts';
+/**
+ * Load and merge configuration from all sources.
+ * Priority: defaults < global config < project config < environment vars
+ */
+export declare function loadConfig(cwd?: string): Promise<CleoConfig>;
+/**
+ * Get a single config value with source tracking.
+ * Returns the value and which source it came from.
+ */
+export declare function getConfigValue<T>(path: string, cwd?: string): Promise<ResolvedValue<T>>;
+/**
+ * Get a raw config value from the project config file only (no cascade).
+ * Returns undefined if the key is not found.
+ * Used by the engine layer for simple key lookups without source tracking.
+ * @task T4789
+ */
+export declare function getRawConfigValue(key: string, cwd?: string): Promise<unknown>;
+/**
+ * Get the full raw project config (no cascade).
+ * Returns null if no config file exists.
+ * @task T4789
+ */
+export declare function getRawConfig(cwd?: string): Promise<Record<string, unknown> | null>;
+/**
+ * Parse a string value into its appropriate JS type.
+ * Handles booleans, null, integers, floats, and JSON.
+ * @task T4789
+ */
+export declare function parseConfigValue(value: unknown): unknown;
+/**
+ * Set a config value in the project or global config file (dot-notation supported).
+ * Creates intermediate objects as needed. Parses string values into
+ * appropriate types (boolean, number, null, JSON).
+ * @task T4789
+ * @task T4795
+ */
+export declare function setConfigValue(key: string, value: unknown, cwd?: string, opts?: {
+    global?: boolean;
+}): Promise<{
+    key: string;
+    value: unknown;
+    scope: 'project' | 'global';
+}>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAgB,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAwJnF;;;GAGG;AACH,wBAAsB,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAkClE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAgC7F;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQnF;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAExF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAYxD;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,GAAG,CAAC,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAC1B,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC,CAmBvE"}

package/dist/constants.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Centralized constants for CLEO core modules.
+ */
+/**
+ * Configuration files relative to .cleo/ that MUST remain tracked by project git.
+ * These are JSON/text config files only — NOT databases.
+ * SQLite databases (tasks.db) are excluded: they must be gitignored to
+ * prevent data-loss from merge conflicts (see ADR-013).
+ *
+ * If any of these files are gitignored, cleo doctor reports a critical finding.
+ */
+export declare const CORE_PROTECTED_FILES: readonly ["config.json", ".gitignore", "project-info.json", "project-context.json"];
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,qFAKvB,CAAC"}

package/dist/context/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Context window monitoring core module.
+ * @task T4535
+ * @epic T4454
+ */
+/** Get context status. */
+export declare function getContextStatus(opts: {
+    session?: string;
+    cwd?: string;
+}): Promise<Record<string, unknown>>;
+/** Check context threshold (returns exit code info). */
+export declare function checkContextThreshold(opts: {
+    session?: string;
+    cwd?: string;
+}): Promise<Record<string, unknown> & {
+    exitCode?: number;
+}>;
+/** List all context state files. */
+export declare function listContextSessions(cwd?: string): Promise<Record<string, unknown>>;
+//# sourceMappingURL=index.d.ts.map

package/dist/context/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA+BH,0BAA0B;AAC1B,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAmCnC;AAED,wDAAwD;AACxD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+B3D;AAED,oCAAoC;AACpC,wBAAsB,mBAAmB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA4CxF"}

package/dist/engine-result.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Canonical EngineResult type used by dispatch engines and core modules.
+ *
+ * This type was originally defined in src/dispatch/engines/_error.ts.
+ * Moved to core so that core modules can reference it without
+ * importing from the dispatch layer.
+ *
+ * @task T5715
+ * @epic T5701
+ */
+import type { LAFSPage } from '@cleocode/lafs-protocol';
+/**
+ * Canonical EngineResult type used by all engines and core engine-compat modules.
+ */
+export interface EngineResult<T = unknown> {
+    success: boolean;
+    data?: T;
+    page?: LAFSPage;
+    error?: {
+        code: string;
+        message: string;
+        exitCode?: number;
+        details?: unknown;
+        fix?: string;
+        alternatives?: Array<{
+            action: string;
+            command: string;
+        }>;
+    };
+}
+//# sourceMappingURL=engine-result.d.ts.map

package/dist/engine-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-result.d.ts","sourceRoot":"","sources":["../src/engine-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,YAAY,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC3D,CAAC;CACH"}

package/dist/error-catalog.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Unified Error Catalog -- single source of truth for all CLEO error definitions.
+ *
+ * Merges previously scattered error registries (error-registry.ts, _error.ts,
+ * mcp/lib/exit-codes.ts) into one canonical catalog keyed by ExitCode.
+ *
+ * Consumers should import from here instead of the legacy registries.
+ *
+ * @task T5240
+ */
+import type { LAFSErrorCategory } from '@cleocode/lafs-protocol';
+/**
+ * A single entry in the unified error catalog.
+ */
+export interface ErrorDefinition {
+    /** Numeric exit code from ExitCode enum. */
+    code: number;
+    /** Machine-readable name (matches ExitCode enum key). */
+    name: string;
+    /** LAFS error category for protocol conformance. */
+    category: LAFSErrorCategory;
+    /** Default human-readable message. */
+    message: string;
+    /** Default fix suggestion (copy-paste command or instruction). */
+    fix?: string;
+    /** HTTP status code for API/MCP responses. */
+    httpStatus: number;
+    /** Whether retry may succeed. */
+    recoverable: boolean;
+    /** LAFS-style string error code (E_CLEO_*). */
+    lafsCode: string;
+}
+/**
+ * The unified error catalog. Keyed by numeric ExitCode value.
+ */
+export declare const ERROR_CATALOG: ReadonlyMap<number, ErrorDefinition>;
+/**
+ * Look up an error definition by exit code.
+ */
+export declare function getErrorDefinition(code: number): ErrorDefinition | undefined;
+/**
+ * Look up an error definition by LAFS string code.
+ */
+export declare function getErrorDefinitionByLafsCode(lafsCode: string): ErrorDefinition | undefined;
+/**
+ * Get all error definitions as an array.
+ */
+export declare function getAllErrorDefinitions(): ErrorDefinition[];
+//# sourceMappingURL=error-catalog.d.ts.map

package/dist/error-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-catalog.d.ts","sourceRoot":"","sources":["../src/error-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,WAAW,EAAE,OAAO,CAAC;IACrB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAeD;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAijC9D,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAE5E;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAK1F;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,eAAe,EAAE,CAE1D"}

package/dist/error-registry.d.ts

@@ -0,0 +1,58 @@
+/**
+ * CLEO error code to LAFS canonical error code mapping.
+ *
+ * Maps CLEO's numeric exit codes (ExitCode enum) to LAFS error registry
+ * string codes for protocol conformance.
+ *
+ * @deprecated Use `src/core/error-catalog.ts` instead. This registry is retained
+ * for backward compatibility but will be removed in a future release.
+ * Import from `error-catalog.ts` for the unified, complete error catalog.
+ *
+ * @task T4671
+ * @epic T4663
+ */
+import { ExitCode } from '@cleocode/contracts';
+import type { LAFSErrorCategory } from '@cleocode/lafs-protocol';
+/**
+ * Entry in the CLEO-to-LAFS error registry.
+ *
+ * @task T4671
+ * @epic T4663
+ */
+export interface CleoRegistryEntry {
+    exitCode: ExitCode;
+    lafsCode: string;
+    category: LAFSErrorCategory;
+    description: string;
+    retryable: boolean;
+    httpStatus: number;
+}
+/**
+ * Look up a registry entry by CLEO exit code.
+ *
+ * @task T4671
+ * @epic T4663
+ */
+export declare function getRegistryEntry(exitCode: ExitCode): CleoRegistryEntry | undefined;
+/**
+ * Look up a registry entry by LAFS string code.
+ *
+ * @task T4671
+ * @epic T4663
+ */
+export declare function getRegistryEntryByLafsCode(lafsCode: string): CleoRegistryEntry | undefined;
+/**
+ * Get the full CLEO error registry for conformance testing.
+ *
+ * @task T4671
+ * @epic T4663
+ */
+export declare function getCleoErrorRegistry(): CleoRegistryEntry[];
+/**
+ * Check if a LAFS code is registered in the CLEO error registry.
+ *
+ * @task T4671
+ * @epic T4663
+ */
+export declare function isCleoRegisteredCode(lafsCode: string): boolean;
+//# sourceMappingURL=error-registry.d.ts.map

package/dist/error-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-registry.d.ts","sourceRoot":"","sources":["../src/error-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAgWD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,iBAAiB,GAAG,SAAS,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAE1F;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,EAAE,CAE1D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE9D"}

package/dist/errors.d.ts

@@ -0,0 +1,66 @@
+/**
+ * CLEO error types with exit code integration, LAFS error shape,
+ * and RFC 9457 Problem Details support.
+ *
+ * @epic T4654
+ * @task T4655
+ * @task T5240
+ */
+import { ExitCode } from '@cleocode/contracts';
+import type { LAFSError } from '@cleocode/lafs-protocol';
+/**
+ * RFC 9457 Problem Details object.
+ * Structured error representation for API/MCP responses.
+ *
+ * @task T5240
+ */
+export interface ProblemDetails {
+    type: string;
+    title: string;
+    status: number;
+    detail: string;
+    instance?: string;
+    extensions?: Record<string, unknown>;
+}
+/**
+ * Structured error class for CLEO operations.
+ * Carries an exit code, human-readable message, and optional fix suggestions.
+ * Produces LAFS-conformant error shapes via toLAFSError() and RFC 9457
+ * Problem Details via toProblemDetails().
+ */
+export declare class CleoError extends Error {
+    readonly code: ExitCode;
+    readonly fix?: string;
+    readonly alternatives?: Array<{
+        action: string;
+        command: string;
+    }>;
+    constructor(code: ExitCode, message: string, options?: {
+        fix?: string;
+        alternatives?: Array<{
+            action: string;
+            command: string;
+        }>;
+        cause?: unknown;
+    });
+    /**
+     * Produce a LAFS-conformant error object.
+     *
+     * @task T4655
+     */
+    toLAFSError(): LAFSError;
+    /**
+     * Produce an RFC 9457 Problem Details object.
+     *
+     * @task T5240
+     */
+    toProblemDetails(): ProblemDetails;
+    /** Structured JSON representation for LAFS output (backward compatible). */
+    toJSON(): Record<string, unknown>;
+    /**
+     * Derive HTTP status from exit code range.
+     * Used as fallback when catalog lookup misses.
+     */
+    private getHttpStatus;
+}
+//# sourceMappingURL=errors.d.ts.map