@cleocode/core 2026.4.52 → 2026.4.54

package/dist/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAgCH,sCAAsC;AACtC,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,yCAAyC;IACzC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE;QACf,IAAI,EAAE,YAAY,GAAG,YAAY,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF;;;;OAIG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAaD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiCnE;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqE9F;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+FzF;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,IAAI,CAAC,CAiDf;AAID;;;;;GAKG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAwBtD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,WAAW,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0a7E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC,CAiB/F;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBnF;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EAAE,EACjB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,IAAI,CAAC,CAsFf"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAgCH,sCAAsC;AACtC,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,yCAAyC;IACzC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE;QACf,IAAI,EAAE,YAAY,GAAG,YAAY,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF;;;;OAIG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAaD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiCnE;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqE9F;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+FzF;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,IAAI,CAAC,CAiDf;AAID;;;;;GAKG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAwBtD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,WAAW,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0a7E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC,CAiB/F;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBnF;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EAAE,EACjB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,IAAI,CAAC,CAmFf"}

package/dist/internal.js

@@ -11140,44 +11140,6 @@ var init_platform_paths = __esm({
 });
 
 // packages/core/src/paths.ts
-var paths_exports = {};
-__export(paths_exports, {
-  getAgentOutputsAbsolute: () => getAgentOutputsAbsolute,
-  getAgentOutputsDir: () => getAgentOutputsDir,
-  getAgentsHome: () => getAgentsHome,
-  getArchivePath: () => getArchivePath,
-  getBackupDir: () => getBackupDir,
-  getClaudeAgentsDir: () => getClaudeAgentsDir,
-  getClaudeMemDbPath: () => getClaudeMemDbPath,
-  getCleoCacheDir: () => getCleoCacheDir,
-  getCleoCantWorkflowsDir: () => getCleoCantWorkflowsDir,
-  getCleoConfigDir: () => getCleoConfigDir,
-  getCleoDir: () => getCleoDir,
-  getCleoDirAbsolute: () => getCleoDirAbsolute,
-  getCleoDocsDir: () => getCleoDocsDir,
-  getCleoGlobalAgentsDir: () => getCleoGlobalAgentsDir,
-  getCleoGlobalJustfilePath: () => getCleoGlobalJustfilePath,
-  getCleoGlobalRecipesDir: () => getCleoGlobalRecipesDir,
-  getCleoHome: () => getCleoHome,
-  getCleoLogDir: () => getCleoLogDir,
-  getCleoPiExtensionsDir: () => getCleoPiExtensionsDir,
-  getCleoSchemasDir: () => getCleoSchemasDir,
-  getCleoTempDir: () => getCleoTempDir,
-  getCleoTemplatesDir: () => getCleoTemplatesDir,
-  getCleoTemplatesTildePath: () => getCleoTemplatesTildePath,
-  getConfigPath: () => getConfigPath,
-  getGlobalConfigPath: () => getGlobalConfigPath,
-  getLogPath: () => getLogPath,
-  getManifestArchivePath: () => getManifestArchivePath,
-  getManifestPath: () => getManifestPath,
-  getProjectRoot: () => getProjectRoot,
-  getSessionsPath: () => getSessionsPath,
-  getTaskPath: () => getTaskPath,
-  isAbsolutePath: () => isAbsolutePath,
-  isProjectInitialized: () => isProjectInitialized,
-  resolveProjectPath: () => resolveProjectPath,
-  worktreeScope: () => worktreeScope
-});
 import { AsyncLocalStorage } from "node:async_hooks";
 import { existsSync as existsSync3, readFileSync as readFileSync2 } from "node:fs";
 import { homedir } from "node:os";
@@ -11196,9 +11158,6 @@ function getCleoTemplatesDir() {
 function getCleoSchemasDir() {
   return join4(getCleoHome(), "schemas");
 }
-function getCleoDocsDir() {
-  return join4(getCleoHome(), "docs");
-}
 function getCleoDir(cwd) {
   if (cwd) {
     return getCleoDirAbsolute(cwd);
@@ -11270,15 +11229,6 @@ function getTaskPath(cwd) {
 function getConfigPath(cwd) {
   return join4(getCleoDirAbsolute(cwd), "config.json");
 }
-function getSessionsPath(cwd) {
-  return join4(getCleoDirAbsolute(cwd), "sessions.json");
-}
-function getArchivePath(cwd) {
-  return join4(getCleoDirAbsolute(cwd), "tasks-archive.json");
-}
-function getLogPath(cwd) {
-  return join4(getCleoDirAbsolute(cwd), "logs", "cleo.log");
-}
 function getBackupDir(cwd) {
   return join4(getCleoDirAbsolute(cwd), "backups", "operational");
 }
@@ -11482,6 +11432,54 @@ function insertJournalEntry(nativeDb, hash2, createdAt, name2) {
     `INSERT OR IGNORE INTO "__drizzle_migrations" ("hash", "created_at", "name") VALUES ('${hash2}', ${createdAt}, '${name2}')`
   );
 }
+function probeAndMarkApplied(nativeDb, migration, logSubsystem) {
+  const sqlStatements = Array.isArray(migration.sql) ? migration.sql : [migration.sql ?? ""];
+  const fullSql = sqlStatements.join("\n");
+  const alterColumnRegex = /ALTER\s+TABLE\s+[`"]?(\w+)[`"]?\s+ADD\s+COLUMN\s+[`"]?(\w+)[`"]?/gi;
+  const createTableRegex = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?[`"]?(\w+)[`"]?/gi;
+  const createIndexRegex = /CREATE\s+(?:UNIQUE\s+)?INDEX\s+(?:IF\s+NOT\s+EXISTS\s+)?[`"]?(\w+)[`"]?/gi;
+  const alterTargets = [];
+  for (const m2 of fullSql.matchAll(alterColumnRegex)) {
+    alterTargets.push({ table: m2[1], column: m2[2] });
+  }
+  const tableTargets = [];
+  for (const m2 of fullSql.matchAll(createTableRegex)) {
+    tableTargets.push(m2[1]);
+  }
+  const indexTargets = [];
+  for (const m2 of fullSql.matchAll(createIndexRegex)) {
+    indexTargets.push(m2[1]);
+  }
+  const totalTargets = alterTargets.length + tableTargets.length + indexTargets.length;
+  if (totalTargets === 0) {
+    return false;
+  }
+  const allAltersPresent = alterTargets.every(({ table, column }) => {
+    if (!tableExists(nativeDb, table)) return false;
+    const cols = nativeDb.prepare(`PRAGMA table_info(${table})`).all();
+    return cols.some((c) => c.name === column);
+  });
+  const allTablesPresent = tableTargets.every((t) => tableExists(nativeDb, t));
+  const allIndexesPresent = indexTargets.every((idx) => {
+    const rows = nativeDb.prepare(`SELECT name FROM sqlite_master WHERE type='index' AND name=?`).all(idx);
+    return rows.length > 0;
+  });
+  if (allAltersPresent && allTablesPresent && allIndexesPresent) {
+    insertJournalEntry(nativeDb, migration.hash, migration.folderMillis, migration.name ?? "");
+    const log12 = getLogger(logSubsystem);
+    log12.debug(
+      {
+        migration: migration.name,
+        alters: alterTargets.length,
+        tables: tableTargets.length,
+        indexes: indexTargets.length
+      },
+      `Migration ${migration.name} DDL already present in schema \u2014 marked applied.`
+    );
+    return true;
+  }
+  return false;
+}
 function reconcileJournal(nativeDb, migrationsFolder, existenceTable, logSubsystem) {
   if (tableExists(nativeDb, existenceTable) && !tableExists(nativeDb, "__drizzle_migrations")) {
     const migrations = readMigrationFiles({ migrationsFolder });
@@ -11518,11 +11516,11 @@ function reconcileJournal(nativeDb, migrationsFolder, existenceTable, logSubsyst
         const log12 = getLogger(logSubsystem);
         log12.warn(
           { orphaned: orphanedEntries.length },
-          `Detected stale migration journal entries from a previous CLEO version. Reconciling.`
+          `Detected stale migration journal entries from a previous CLEO version. Reconciling via DDL probe.`
         );
         nativeDb.exec('DELETE FROM "__drizzle_migrations"');
         for (const m2 of localMigrations) {
-          insertJournalEntry(nativeDb, m2.hash, m2.folderMillis, m2.name ?? "");
+          probeAndMarkApplied(nativeDb, m2, logSubsystem);
         }
       }
     }
@@ -14331,8 +14329,8 @@ async function cleanupMigrationArtifacts(backupPath) {
 }
 async function validateSqliteDatabase(dbPath) {
   try {
-    const { createRequire: createRequire15 } = await import("node:module");
-    const _req = createRequire15(import.meta.url);
+    const { createRequire: createRequire16 } = await import("node:module");
+    const _req = createRequire16(import.meta.url);
     const { DatabaseSync: DatabaseSync10 } = _req("node:sqlite");
     const db = new DatabaseSync10(dbPath, { readOnly: true });
     const integrityRow = db.prepare("PRAGMA integrity_check").get();
@@ -15049,7 +15047,6 @@ function runBrainMigrations(nativeDb, db) {
       "brain"
     );
   }
-  ensureColumns(nativeDb, "brain_observations", [{ name: "agent", ddl: "text" }], "brain");
   if (tableExists(nativeDb, "brain_page_edges")) {
     nativeDb.prepare(
       `UPDATE brain_page_edges
@@ -50708,6 +50705,7 @@ __export(scaffold_exports, {
   checkConfig: () => checkConfig,
   checkGitignore: () => checkGitignore,
   checkGlobalHome: () => checkGlobalHome,
+  checkGlobalIdentity: () => checkGlobalIdentity,
   checkGlobalTemplates: () => checkGlobalTemplates,
   checkLogDir: () => checkLogDir,
   checkMemoryBridge: () => checkMemoryBridge,
@@ -50724,6 +50722,7 @@ __export(scaffold_exports, {
   ensureContributorMcp: () => ensureContributorMcp,
   ensureGitignore: () => ensureGitignore,
   ensureGlobalHome: () => ensureGlobalHome,
+  ensureGlobalIdentity: () => ensureGlobalIdentity,
   ensureGlobalScaffold: () => ensureGlobalScaffold,
   ensureGlobalTemplates: () => ensureGlobalTemplates,
   ensureProjectContext: () => ensureProjectContext,
@@ -50741,6 +50740,7 @@ import { execFile as execFile3 } from "node:child_process";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { existsSync as existsSync40, constants as fsConstants3, readFileSync as readFileSync23, statSync as statSync8 } from "node:fs";
 import { access as access3, copyFile as copyFile2, mkdir as mkdir6, readdir as readdir2, readFile as readFile7, rm as rm2, writeFile as writeFile6 } from "node:fs/promises";
+import { createRequire as createRequire6 } from "node:module";
 import { homedir as getHomedir } from "node:os";
 import { dirname as dirname10, join as join41, resolve as resolve5 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
@@ -51596,6 +51596,102 @@ async function ensureCleoOsHub() {
     details: `pi-extensions: ${piResult.copied} created/${piResult.kept} kept, global-recipes: ${recipesResult.copied} created/${recipesResult.kept} kept`
   };
 }
+function resolveIdentitySourcePath() {
+  const monorepoPath = join41(
+    process.cwd(),
+    "packages",
+    "cleo-os",
+    "starter-bundle",
+    "CLEOOS-IDENTITY.md"
+  );
+  if (existsSync40(monorepoPath)) return monorepoPath;
+  try {
+    const require2 = createRequire6(import.meta.url);
+    const pkgJson = require2.resolve("@cleocode/cleo-os/package.json");
+    const pkgDir = pkgJson.replace(/\/package\.json$/, "");
+    const installedPath = join41(pkgDir, "starter-bundle", "CLEOOS-IDENTITY.md");
+    if (existsSync40(installedPath)) return installedPath;
+  } catch {
+  }
+  return null;
+}
+async function ensureGlobalIdentity(forceRefresh = false) {
+  const sourcePath = resolveIdentitySourcePath();
+  if (!sourcePath) {
+    return {
+      action: "skipped",
+      path: "",
+      details: "CLEOOS-IDENTITY.md source not found in monorepo or installed package"
+    };
+  }
+  const cleoHome = getCleoHome();
+  const dst = join41(cleoHome, "CLEOOS-IDENTITY.md");
+  try {
+    await mkdir6(cleoHome, { recursive: true });
+  } catch (err) {
+    return {
+      action: "skipped",
+      path: dst,
+      details: `Failed to create global cleo home: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  if (existsSync40(dst) && !forceRefresh) {
+    return { action: "skipped", path: dst, details: "identity already present" };
+  }
+  const existedBefore = existsSync40(dst);
+  try {
+    const content = readFileSync23(sourcePath, "utf-8");
+    await writeFile6(dst, content);
+    return {
+      action: existedBefore ? "repaired" : "created",
+      path: dst,
+      details: `from ${sourcePath}`
+    };
+  } catch (err) {
+    return {
+      action: "skipped",
+      path: dst,
+      details: `Failed to write identity: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+}
+function checkGlobalIdentity() {
+  const cleoHome = getCleoHome();
+  const identityPath = join41(cleoHome, "CLEOOS-IDENTITY.md");
+  if (!existsSync40(identityPath)) {
+    return {
+      id: "global_identity",
+      category: "global",
+      status: "failed",
+      message: "Global CLEOOS-IDENTITY.md not found \u2014 orchestrator persona missing",
+      details: { path: identityPath, exists: false },
+      fix: "cleo upgrade (auto-deploys identity)"
+    };
+  }
+  let size = 0;
+  try {
+    size = statSync8(identityPath).size;
+  } catch {
+  }
+  if (size === 0) {
+    return {
+      id: "global_identity",
+      category: "global",
+      status: "failed",
+      message: "Global CLEOOS-IDENTITY.md exists but is empty",
+      details: { path: identityPath, exists: true, size: 0 },
+      fix: "cleo upgrade --refresh-identity"
+    };
+  }
+  return {
+    id: "global_identity",
+    category: "global",
+    status: "passed",
+    message: "Global CLEOOS-IDENTITY.md present",
+    details: { path: identityPath, exists: true, size },
+    fix: ""
+  };
+}
 function checkGlobalHome() {
   const cleoHome = getCleoHome();
   if (!existsSync40(cleoHome)) {
@@ -55695,7 +55791,7 @@ __export(parser_exports, {
   parseFile: () => parseFile2
 });
 import { readFileSync as readFileSync64 } from "node:fs";
-import { createRequire as createRequire7 } from "node:module";
+import { createRequire as createRequire8 } from "node:module";
 import { relative as relative7 } from "node:path";
 function tryRequire(id) {
   try {
@@ -55896,7 +55992,7 @@ var init_parser3 = __esm({
   "packages/core/src/code/parser.ts"() {
     "use strict";
     init_tree_sitter_languages();
-    _require7 = createRequire7(import.meta.url);
+    _require7 = createRequire8(import.meta.url);
     _ParserClass = null;
     _QueryClass = null;
     _parserInstance = null;
@@ -56002,7 +56098,7 @@ __export(dependencies_exports, {
   getDependencySpecs: () => getDependencySpecs
 });
 import { execFileSync as execFileSync10 } from "node:child_process";
-import { createRequire as createRequire8 } from "node:module";
+import { createRequire as createRequire9 } from "node:module";
 import { dirname as dirname19 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 function tryExec(cmd, args, timeoutMs = 3e3) {
@@ -56275,7 +56371,7 @@ var init_dependencies = __esm({
   "packages/core/src/system/dependencies.ts"() {
     "use strict";
     init_platform();
-    _require8 = createRequire8(import.meta.url);
+    _require8 = createRequire9(import.meta.url);
     _dirname = dirname19(fileURLToPath5(import.meta.url));
     DEPENDENCY_SPECS = [
       // ── Required ────────────────────────────────────────────────────────────
@@ -57578,8 +57674,8 @@ import { platform as platform4 } from "node:os";
 import { basename as basename17, dirname as dirname23, join as join107 } from "node:path";
 async function resolveSeedAgentsDir() {
   try {
-    const { createRequire: createRequire15 } = await import("node:module");
-    const req = createRequire15(import.meta.url);
+    const { createRequire: createRequire16 } = await import("node:module");
+    const req = createRequire16(import.meta.url);
     const agentsPkgMain = req.resolve("@cleocode/agents/package.json");
     const agentsPkgRoot = dirname23(agentsPkgMain);
     const candidate = join107(agentsPkgRoot, "seed-agents");
@@ -57606,8 +57702,8 @@ async function resolveSeedAgentsDir() {
 async function initAgentDefinition(created, warnings) {
   let agentSourceDir = null;
   try {
-    const { createRequire: createRequire15 } = await import("node:module");
-    const req = createRequire15(import.meta.url);
+    const { createRequire: createRequire16 } = await import("node:module");
+    const req = createRequire16(import.meta.url);
     const agentsPkgMain = req.resolve("@cleocode/agents/package.json");
     const agentsPkgRoot = dirname23(agentsPkgMain);
     const candidate = join107(agentsPkgRoot, "cleo-subagent");
@@ -57673,8 +57769,8 @@ async function initCoreSkills(created, warnings) {
     const packageRoot = getPackageRoot();
     let ctSkillsRoot = null;
     try {
-      const { createRequire: createRequire15 } = await import("node:module");
-      const req = createRequire15(import.meta.url);
+      const { createRequire: createRequire16 } = await import("node:module");
+      const req = createRequire16(import.meta.url);
       const skillsPkgMain = req.resolve("@cleocode/skills/package.json");
       const skillsPkgRoot = dirname23(skillsPkgMain);
       if (existsSync108(join107(skillsPkgRoot, "skills.json"))) {
@@ -58182,8 +58278,8 @@ async function deployStarterBundle(cleoDir, created, warnings) {
   if (hasCantFiles) return;
   let starterBundleSrc = null;
   try {
-    const { createRequire: createRequire15 } = await import("node:module");
-    const req = createRequire15(import.meta.url);
+    const { createRequire: createRequire16 } = await import("node:module");
+    const req = createRequire16(import.meta.url);
     const cleoOsPkgMain = req.resolve("@cleocode/cleo-os/package.json");
     const cleoOsPkgRoot = dirname23(cleoOsPkgMain);
     const candidate = join107(cleoOsPkgRoot, "starter-bundle");
@@ -58223,20 +58319,20 @@ async function deployStarterBundle(cleoDir, created, warnings) {
       }
     }
   }
-  const identitySrc = join107(starterBundleSrc, "CLEOOS-IDENTITY.md");
-  const identityDst = join107(cleoDir, "CLEOOS-IDENTITY.md");
-  if (existsSync108(identitySrc) && !existsSync108(identityDst)) {
-    await copyFile4(identitySrc, identityDst);
-  }
   try {
-    const { getCleoHome: getCleoHome2 } = await Promise.resolve().then(() => (init_paths(), paths_exports));
-    const globalIdentityDst = join107(getCleoHome2(), "CLEOOS-IDENTITY.md");
-    if (existsSync108(identitySrc) && !existsSync108(globalIdentityDst)) {
-      await copyFile4(identitySrc, globalIdentityDst);
+    const { ensureGlobalIdentity: ensureGlobalIdentity2 } = await Promise.resolve().then(() => (init_scaffold(), scaffold_exports));
+    const identityResult = await ensureGlobalIdentity2();
+    if (identityResult.action === "created") {
+      created.push(`identity: ${identityResult.path}`);
+    } else if (identityResult.action === "skipped" && identityResult.details) {
+      warnings.push(`identity skipped: ${identityResult.details}`);
     }
-  } catch {
+  } catch (err) {
+    warnings.push(`identity deploy failed: ${err instanceof Error ? err.message : String(err)}`);
   }
-  created.push("starter-bundle: team + agent .cant files + identity deployed to .cleo/");
+  created.push(
+    "starter-bundle: team + agent .cant files deployed to .cleo/ (identity at global XDG)"
+  );
 }
 var DIR_SYMLINK_TYPE2;
 var init_init = __esm({
@@ -75836,8 +75932,8 @@ init_agent_outputs();
 // packages/core/src/migration/checksum.ts
 import { createHash as createHash8 } from "node:crypto";
 import { readFileSync as readFileSync34 } from "node:fs";
-import { createRequire as createRequire6 } from "node:module";
-var _require6 = createRequire6(import.meta.url);
+import { createRequire as createRequire7 } from "node:module";
+var _require6 = createRequire7(import.meta.url);
 var { DatabaseSync: DatabaseSync4 } = _require6("node:sqlite");
 async function computeChecksum2(filePath) {
   const content = readFileSync34(filePath);
@@ -88188,7 +88284,7 @@ init_schema_management();
 init_data_accessor();
 import { execFileSync as execFileSync11 } from "node:child_process";
 import { existsSync as existsSync92, readFileSync as readFileSync65, statSync as statSync19 } from "node:fs";
-import { createRequire as createRequire9 } from "node:module";
+import { createRequire as createRequire10 } from "node:module";
 import { join as join93 } from "node:path";
 
 // packages/core/src/validation/doctor/checks.ts
@@ -89002,7 +89098,7 @@ function calculateHealthStatus(checks) {
 
 // packages/core/src/system/health.ts
 init_dependencies();
-var _require9 = createRequire9(import.meta.url);
+var _require9 = createRequire10(import.meta.url);
 var databaseSyncCtor = (() => {
   try {
     return _require9("node:sqlite").DatabaseSync;
@@ -89550,6 +89646,7 @@ async function coreDoctorReport(projectRoot) {
   });
   checks.push(mapCheckResult(checkGlobalHome()));
   checks.push(mapCheckResult(checkGlobalTemplates()));
+  checks.push(mapCheckResult(checkGlobalIdentity()));
   checks.push(mapSchemaCheckResult(checkGlobalSchemas()));
   checks.push(mapCheckResult(checkLogDir(projectRoot)));
   const hookResults = await checkGitHooks(projectRoot);
@@ -97816,11 +97913,11 @@ init_paths();
 init_brain_sqlite();
 init_brain_search();
 import { existsSync as existsSync111 } from "node:fs";
-import { createRequire as createRequire10 } from "node:module";
+import { createRequire as createRequire11 } from "node:module";
 function typedAll3(db, sql16) {
   return db.prepare(sql16).all();
 }
-var _require10 = createRequire10(import.meta.url);
+var _require10 = createRequire11(import.meta.url);
 var { DatabaseSync: DatabaseSync5 } = _require10("node:sqlite");
 var VALID_OBSERVATION_TYPES = /* @__PURE__ */ new Set([
   "discovery",
@@ -100391,7 +100488,7 @@ init_backup();
 // packages/core/src/store/backup-pack.ts
 import crypto5 from "node:crypto";
 import fs4 from "node:fs";
-import { createRequire as createRequire11 } from "node:module";
+import { createRequire as createRequire12 } from "node:module";
 import os2 from "node:os";
 import path4 from "node:path";
 
@@ -103397,7 +103494,7 @@ function assertT310Ready(projectRoot) {
 }
 
 // packages/core/src/store/backup-pack.ts
-var _require11 = createRequire11(import.meta.url);
+var _require11 = createRequire12(import.meta.url);
 var { DatabaseSync: DatabaseSync6 } = _require11("node:sqlite");
 function resolveContractsSchemasDir() {
   const candidates = [
@@ -103896,9 +103993,9 @@ init_conduit_sqlite();
 init_global_salt();
 init_signaldock_sqlite();
 import { existsSync as existsSync117, mkdirSync as mkdirSync27, renameSync as renameSync9, unlinkSync as unlinkSync9 } from "node:fs";
-import { createRequire as createRequire12 } from "node:module";
+import { createRequire as createRequire13 } from "node:module";
 import { join as join114 } from "node:path";
-var _require12 = createRequire12(import.meta.url);
+var _require12 = createRequire13(import.meta.url);
 var { DatabaseSync: DatabaseSync7 } = _require12("node:sqlite");
 var PROJECT_TIER_TABLES = [
   "messages",
@@ -106058,6 +106155,16 @@ async function runUpgrade(options = {}) {
       }
     } catch {
     }
+    try {
+      const { ensureGlobalIdentity: ensureGlobalIdentity2 } = await Promise.resolve().then(() => (init_scaffold(), scaffold_exports));
+      const identityResult = await ensureGlobalIdentity2();
+      actions.push({
+        action: "global_identity",
+        status: identityResult.action === "created" || identityResult.action === "repaired" ? "applied" : "skipped",
+        details: `${identityResult.path} (${identityResult.details ?? identityResult.action})`
+      });
+    } catch {
+    }
     try {
       const skillsCreated = [];
       const skillsWarnings = [];
@@ -108699,11 +108806,11 @@ init_tasks_schema();
 var import__ = __toESM(require__(), 1);
 import crypto6 from "node:crypto";
 import fs6 from "node:fs";
-import { createRequire as createRequire13 } from "node:module";
+import { createRequire as createRequire14 } from "node:module";
 import os3 from "node:os";
 import path6 from "node:path";
 import { default as addFormatsImport2 } from "ajv-formats";
-var _require13 = createRequire13(import.meta.url);
+var _require13 = createRequire14(import.meta.url);
 var { DatabaseSync: DatabaseSync8 } = _require13("node:sqlite");
 var ajv2020Mod = import__.default;
 var Ajv2020 = typeof ajv2020Mod.default === "function" ? ajv2020Mod.default : import__.default;
@@ -110204,7 +110311,7 @@ async function decrypt(ciphertext, projectPath) {
 init_paths();
 import { randomBytes as randomBytes17 } from "node:crypto";
 import { existsSync as existsSync127, mkdirSync as mkdirSync32, readFileSync as readFileSync93, statSync as statSync21, writeFileSync as writeFileSync23 } from "node:fs";
-import { createRequire as createRequire14 } from "node:module";
+import { createRequire as createRequire15 } from "node:module";
 import { join as join122 } from "node:path";
 
 // packages/core/src/store/api-key-kdf.ts
@@ -110231,7 +110338,7 @@ function deriveApiKey(input) {
 init_conduit_sqlite();
 init_global_salt();
 init_signaldock_sqlite();
-var _require14 = createRequire14(import.meta.url);
+var _require14 = createRequire15(import.meta.url);
 var { DatabaseSync: DatabaseSync9 } = _require14("node:sqlite");
 var MACHINE_KEY_LENGTH = 32;
 function readMachineKey() {