@cleocode/core 2026.6.12 → 2026.6.14

package/dist/sessions/session-manifest-mirror.d.ts

@@ -0,0 +1,115 @@
+/**
+ * **session_manifest mirror writers** — best-effort GLOBAL-scope mirror of the
+ * per-project `tasks_sessions` rows (EP-SESSION-MANIFEST · epic T11638 · task T11639).
+ *
+ * ## What this module does
+ *
+ * The authoritative session row lives per-project in `tasks_sessions` (PROJECT
+ * scope `cleo.db`). These writers copy a compact projection of that row into the
+ * `session_manifest` table in the GLOBAL-scope `cleo.db` so the fleet has a single,
+ * machine-wide index of every session across every project — without ATTACHing N
+ * per-project DB files. The manifest is a MIRROR, never the source of truth.
+ *
+ * ## Three invariants (the ACs of T11639)
+ *
+ * 1. **Shared handle, never closed (AC3).** All writes go through the singleton
+ *    GLOBAL `cleo.db` handle returned by {@link openDualScopeDb}('global'). We NEVER
+ *    call `.close()` on it — closing the cached handle would pull the rug from under
+ *    every other global-scope reader/writer in the process.
+ * 2. **Best-effort — never throw into the caller (AC3).** Every public writer here
+ *    swallows ALL errors (log at debug + continue). A failure to mirror MUST NOT
+ *    fail the underlying `cleo session start|end` / handoff op. The mirror is an
+ *    observability convenience, not a correctness dependency.
+ * 3. **MIRROR, never authoritative (AC4).** {@link reconcileSessionManifestOnStart}
+ *    re-reads the AUTHORITATIVE project row and OVERWRITES the manifest row, so a
+ *    stale or partially-written manifest entry can never drift into being treated as
+ *    truth. Consumers needing exact session state read `tasks_sessions`.
+ *
+ * ## Identity (`project_id`)
+ *
+ * The mirror reuses the CANONICAL `nexus_project_registry.project_id` (12-hex) for
+ * the owning project — resolved via the nexus identity helper — never a freshly
+ * minted id. Nullable: a session started outside any resolvable registered project
+ * still mirrors with `project_id` NULL.
+ *
+ * ## Writer lease (operating rule 5)
+ *
+ * Global-scope writes acquire the writer lease ({@link withWriterLease}) for
+ * `(scope='global', lane='tasks')`, pinned to the global `cleo.db` path, so they
+ * serialize with the cold-open and every other chokepoint write — healing T5158.
+ *
+ * @module
+ * @task T11639
+ * @epic T11638
+ * @saga T11242
+ * @see ../store/schema/cleo-global/session-manifest.ts — the table decl
+ * @see ./index.ts — startSession/endSession call sites
+ */
+import type { Session } from '@cleocode/contracts';
+import { type DualScopeDbHandle } from '../store/dual-scope-db.js';
+import { sessionManifest } from '../store/schema/cleo-global/session-manifest.js';
+/**
+ * Ensure the GLOBAL `session_manifest` table exists and return the SHARED global
+ * `cleo.db` handle (AC1).
+ *
+ * This is the named "ensure" entry point referenced by EP-SESSION-MANIFEST. It
+ * opens (or re-uses) the singleton GLOBAL-scope handle via {@link openDualScopeDb},
+ * whose migrate step runs the `session_manifest` migration idempotently — so the
+ * table is guaranteed present after this resolves. The returned handle is the SHARED
+ * singleton: callers MUST NOT close it.
+ *
+ * @returns The shared GLOBAL-scope {@link DualScopeDbHandle} (table ensured).
+ * @task T11639
+ */
+export declare function ensureGlobalSignaldockDb(): Promise<DualScopeDbHandle<'global'>>;
+/**
+ * Best-effort mirror of a session into the GLOBAL `session_manifest` (AC3).
+ *
+ * Call on session start / end / handoff. Resolves the owning project's canonical
+ * `project_id`, ensures the table + shared handle, and upserts the mirror row. ANY
+ * failure (DB unopenable, write error, identity-resolution failure) is logged at
+ * debug and SWALLOWED — this NEVER throws into the caller, so a mirror failure
+ * cannot fail the underlying session op.
+ *
+ * @param projectRoot - Absolute path to the project whose session is being mirrored
+ *   (used to resolve the canonical `project_id` and `project_path`).
+ * @param session - The authoritative {@link Session} (post-mutation) to mirror.
+ * @task T11639
+ */
+export declare function mirrorSessionToManifest(projectRoot: string, session: Session): Promise<void>;
+/**
+ * Reconcile-on-start: re-read the AUTHORITATIVE project session row and OVERWRITE
+ * its manifest mirror so the manifest can never drift into authority (AC4).
+ *
+ * Called at session start (after the project row is persisted). It reads the
+ * canonical `tasks_sessions` row back from the PROJECT scope and re-projects it into
+ * the GLOBAL manifest — guaranteeing the mirror reflects the source of truth even if
+ * a prior mirror write was partial, stale, or raced. Best-effort: ANY failure is
+ * logged at debug and swallowed.
+ *
+ * @param projectRoot - Absolute path to the owning project.
+ * @param sessionId - The session whose manifest row is reconciled.
+ * @task T11639
+ */
+export declare function reconcileSessionManifestOnStart(projectRoot: string, sessionId: string): Promise<void>;
+/**
+ * Read a single `session_manifest` mirror row through the SHARED global handle.
+ *
+ * Primarily a test / introspection convenience — production consumers needing exact
+ * session state MUST read the authoritative `tasks_sessions`, not this mirror.
+ *
+ * @param sessionId - The session id to look up in the manifest.
+ * @returns The mirror row, or `null` when absent.
+ * @task T11639
+ */
+export declare function readSessionManifestRow(sessionId: string): Promise<typeof sessionManifest.$inferSelect | null>;
+/**
+ * Resolve the absolute on-disk path of the GLOBAL `cleo.db` (the manifest's home).
+ * Thin re-export of the scope→path resolver for callers that want the path without
+ * opening the handle.
+ *
+ * @returns The GLOBAL-scope `cleo.db` absolute path.
+ * @task T11639
+ */
+export declare function resolveGlobalManifestDbPath(): string;
+//# sourceMappingURL=session-manifest-mirror.d.ts.map

package/dist/sessions/session-manifest-mirror.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manifest-mirror.d.ts","sourceRoot":"","sources":["../../src/sessions/session-manifest-mirror.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EAEL,KAAK,iBAAiB,EAGvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAqBlF;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAKrF;AAuFD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,eAAe,CAAC,YAAY,GAAG,IAAI,CAAC,CAQrD;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD"}

package/dist/sessions/session-manifest-mirror.js

@@ -0,0 +1,250 @@
+/**
+ * **session_manifest mirror writers** — best-effort GLOBAL-scope mirror of the
+ * per-project `tasks_sessions` rows (EP-SESSION-MANIFEST · epic T11638 · task T11639).
+ *
+ * ## What this module does
+ *
+ * The authoritative session row lives per-project in `tasks_sessions` (PROJECT
+ * scope `cleo.db`). These writers copy a compact projection of that row into the
+ * `session_manifest` table in the GLOBAL-scope `cleo.db` so the fleet has a single,
+ * machine-wide index of every session across every project — without ATTACHing N
+ * per-project DB files. The manifest is a MIRROR, never the source of truth.
+ *
+ * ## Three invariants (the ACs of T11639)
+ *
+ * 1. **Shared handle, never closed (AC3).** All writes go through the singleton
+ *    GLOBAL `cleo.db` handle returned by {@link openDualScopeDb}('global'). We NEVER
+ *    call `.close()` on it — closing the cached handle would pull the rug from under
+ *    every other global-scope reader/writer in the process.
+ * 2. **Best-effort — never throw into the caller (AC3).** Every public writer here
+ *    swallows ALL errors (log at debug + continue). A failure to mirror MUST NOT
+ *    fail the underlying `cleo session start|end` / handoff op. The mirror is an
+ *    observability convenience, not a correctness dependency.
+ * 3. **MIRROR, never authoritative (AC4).** {@link reconcileSessionManifestOnStart}
+ *    re-reads the AUTHORITATIVE project row and OVERWRITES the manifest row, so a
+ *    stale or partially-written manifest entry can never drift into being treated as
+ *    truth. Consumers needing exact session state read `tasks_sessions`.
+ *
+ * ## Identity (`project_id`)
+ *
+ * The mirror reuses the CANONICAL `nexus_project_registry.project_id` (12-hex) for
+ * the owning project — resolved via the nexus identity helper — never a freshly
+ * minted id. Nullable: a session started outside any resolvable registered project
+ * still mirrors with `project_id` NULL.
+ *
+ * ## Writer lease (operating rule 5)
+ *
+ * Global-scope writes acquire the writer lease ({@link withWriterLease}) for
+ * `(scope='global', lane='tasks')`, pinned to the global `cleo.db` path, so they
+ * serialize with the cold-open and every other chokepoint write — healing T5158.
+ *
+ * @module
+ * @task T11639
+ * @epic T11638
+ * @saga T11242
+ * @see ../store/schema/cleo-global/session-manifest.ts — the table decl
+ * @see ./index.ts — startSession/endSession call sites
+ */
+import { eq } from 'drizzle-orm';
+import { getLogger } from '../logger.js';
+import { openDualScopeDb, resolveDualScopeDbPath, } from '../store/dual-scope-db.js';
+import { sessionManifest } from '../store/schema/cleo-global/session-manifest.js';
+import { withWriterLease } from '../store/writer-lease.js';
+/**
+ * Lazily-memoized module logger.
+ *
+ * Constructed on first use, never at import time: a top-level `getLogger(...)`
+ * executes the logger factory during module init, which — when this module is
+ * pulled into a test's mocked import graph — can reach a `vi.mock('../logger.js')`
+ * factory before its module-scoped spy `const` is initialized, throwing a TDZ
+ * `ReferenceError`. Deferring keeps import-time side-effect-free (operating rule 4),
+ * matching the pattern in `writer-lease.ts` / `dual-scope-db.ts`.
+ *
+ * @task T11639
+ */
+let _log = null;
+function log() {
+    if (_log === null)
+        _log = getLogger('session-manifest-mirror');
+    return _log;
+}
+/**
+ * Ensure the GLOBAL `session_manifest` table exists and return the SHARED global
+ * `cleo.db` handle (AC1).
+ *
+ * This is the named "ensure" entry point referenced by EP-SESSION-MANIFEST. It
+ * opens (or re-uses) the singleton GLOBAL-scope handle via {@link openDualScopeDb},
+ * whose migrate step runs the `session_manifest` migration idempotently — so the
+ * table is guaranteed present after this resolves. The returned handle is the SHARED
+ * singleton: callers MUST NOT close it.
+ *
+ * @returns The shared GLOBAL-scope {@link DualScopeDbHandle} (table ensured).
+ * @task T11639
+ */
+export async function ensureGlobalSignaldockDb() {
+    // openDualScopeDb('global') runs the consolidated GLOBAL migrations (which now
+    // include the session_manifest CREATE) under the cold-open lease, then caches +
+    // returns the singleton handle. Idempotent — a re-call returns the same handle.
+    return openDualScopeDb('global');
+}
+/**
+ * Build the `session_manifest` mirror row from an authoritative {@link Session}
+ * plus its resolved owning-project metadata.
+ *
+ * Pure projection — no I/O. `mirroredAt` is set to write time here so the row
+ * records WHEN the mirror was last refreshed (independent of session activity).
+ */
+function toManifestRow(session, projectId, projectPath) {
+    return {
+        sessionId: session.id,
+        projectId,
+        parentSessionId: session.parentSessionId ?? null,
+        name: session.name ?? null,
+        status: session.status ?? null,
+        projectPath,
+        startedAt: session.startedAt ?? null,
+        endedAt: session.endedAt ?? null,
+        mirroredAt: new Date().toISOString(),
+    };
+}
+/**
+ * Resolve the CANONICAL `nexus_project_registry.project_id` (12-hex) for a project
+ * root, best-effort. Returns `null` when the project is not resolvable (e.g. not a
+ * git repo / no canonical id) — the manifest row then carries a NULL `project_id`.
+ *
+ * Lazy `import()` of the nexus identity helper keeps this module's import graph
+ * light and avoids a cycle (the nexus layer transitively imports the store).
+ */
+async function resolveCanonicalProjectId(projectRoot) {
+    try {
+        const { canonicalProjectId } = await import('../nexus/identity.js');
+        const result = await canonicalProjectId(projectRoot);
+        return result.id ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write (upsert) a single `session_manifest` mirror row through the GLOBAL handle,
+ * under the writer lease. The PRIVATE core shared by the public best-effort writers.
+ *
+ * Throws on failure — the PUBLIC wrappers ({@link mirrorSessionToManifest} /
+ * {@link reconcileSessionManifestOnStart}) are responsible for swallowing.
+ */
+async function upsertManifestRow(handle, row) {
+    const db = handle.db;
+    // Operating rule 5: gate the GLOBAL-scope write through the writer lease, pinned
+    // to the global cleo.db path so the lease row lands in THIS file.
+    await withWriterLease('global', 'tasks', async () => {
+        await db
+            .insert(sessionManifest)
+            .values(row)
+            .onConflictDoUpdate({
+            target: sessionManifest.sessionId,
+            // Overwrite every mirrored column on conflict — the manifest is a pure
+            // projection, so the latest write fully replaces the prior projection.
+            set: {
+                projectId: row.projectId,
+                parentSessionId: row.parentSessionId,
+                name: row.name,
+                status: row.status,
+                projectPath: row.projectPath,
+                startedAt: row.startedAt,
+                endedAt: row.endedAt,
+                mirroredAt: row.mirroredAt,
+            },
+        })
+            .run();
+    }, { dbPath: handle.dbPath });
+}
+/**
+ * Best-effort mirror of a session into the GLOBAL `session_manifest` (AC3).
+ *
+ * Call on session start / end / handoff. Resolves the owning project's canonical
+ * `project_id`, ensures the table + shared handle, and upserts the mirror row. ANY
+ * failure (DB unopenable, write error, identity-resolution failure) is logged at
+ * debug and SWALLOWED — this NEVER throws into the caller, so a mirror failure
+ * cannot fail the underlying session op.
+ *
+ * @param projectRoot - Absolute path to the project whose session is being mirrored
+ *   (used to resolve the canonical `project_id` and `project_path`).
+ * @param session - The authoritative {@link Session} (post-mutation) to mirror.
+ * @task T11639
+ */
+export async function mirrorSessionToManifest(projectRoot, session) {
+    try {
+        const handle = await ensureGlobalSignaldockDb();
+        const projectId = await resolveCanonicalProjectId(projectRoot);
+        const row = toManifestRow(session, projectId, projectRoot);
+        await upsertManifestRow(handle, row);
+    }
+    catch (err) {
+        // Best-effort: a mirror failure MUST NOT fail the session op (AC3).
+        log().debug({ sessionId: session.id, err: err instanceof Error ? err.message : err }, 'session_manifest mirror write failed (non-fatal); session op unaffected');
+    }
+}
+/**
+ * Reconcile-on-start: re-read the AUTHORITATIVE project session row and OVERWRITE
+ * its manifest mirror so the manifest can never drift into authority (AC4).
+ *
+ * Called at session start (after the project row is persisted). It reads the
+ * canonical `tasks_sessions` row back from the PROJECT scope and re-projects it into
+ * the GLOBAL manifest — guaranteeing the mirror reflects the source of truth even if
+ * a prior mirror write was partial, stale, or raced. Best-effort: ANY failure is
+ * logged at debug and swallowed.
+ *
+ * @param projectRoot - Absolute path to the owning project.
+ * @param sessionId - The session whose manifest row is reconciled.
+ * @task T11639
+ */
+export async function reconcileSessionManifestOnStart(projectRoot, sessionId) {
+    try {
+        // Re-read the AUTHORITATIVE project row (source of truth) — never trust the
+        // manifest as input. Lazy import breaks the store→sessions cycle.
+        const { getSession } = await import('../store/session-store.js');
+        const authoritative = await getSession(sessionId, projectRoot);
+        if (!authoritative) {
+            // No project row → nothing authoritative to mirror. Leave the manifest as-is.
+            return;
+        }
+        const handle = await ensureGlobalSignaldockDb();
+        const projectId = await resolveCanonicalProjectId(projectRoot);
+        const row = toManifestRow(authoritative, projectId, projectRoot);
+        await upsertManifestRow(handle, row);
+    }
+    catch (err) {
+        log().debug({ sessionId, err: err instanceof Error ? err.message : err }, 'session_manifest reconcile-on-start failed (non-fatal); session op unaffected');
+    }
+}
+/**
+ * Read a single `session_manifest` mirror row through the SHARED global handle.
+ *
+ * Primarily a test / introspection convenience — production consumers needing exact
+ * session state MUST read the authoritative `tasks_sessions`, not this mirror.
+ *
+ * @param sessionId - The session id to look up in the manifest.
+ * @returns The mirror row, or `null` when absent.
+ * @task T11639
+ */
+export async function readSessionManifestRow(sessionId) {
+    const handle = await ensureGlobalSignaldockDb();
+    const rows = await handle.db
+        .select()
+        .from(sessionManifest)
+        .where(eq(sessionManifest.sessionId, sessionId))
+        .all();
+    return rows[0] ?? null;
+}
+/**
+ * Resolve the absolute on-disk path of the GLOBAL `cleo.db` (the manifest's home).
+ * Thin re-export of the scope→path resolver for callers that want the path without
+ * opening the handle.
+ *
+ * @returns The GLOBAL-scope `cleo.db` absolute path.
+ * @task T11639
+ */
+export function resolveGlobalManifestDbPath() {
+    return resolveDualScopeDbPath('global');
+}
+//# sourceMappingURL=session-manifest-mirror.js.map

package/dist/sessions/session-manifest-mirror.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manifest-mirror.js","sourceRoot":"","sources":["../../src/sessions/session-manifest-mirror.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAGH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAGL,eAAe,EACf,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;;;;;;;;;;GAWG;AACH,IAAI,IAAI,GAAwC,IAAI,CAAC;AACrD,SAAS,GAAG;IACV,IAAI,IAAI,KAAK,IAAI;QAAE,IAAI,GAAG,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,OAAgB,EAChB,SAAwB,EACxB,WAA0B;IAE1B,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,SAAS;QACT,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;QAChD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;QAC9B,WAAW;QACX,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;QAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,yBAAyB,CAAC,WAAmB;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAC9B,MAAmC,EACnC,GAAwC;IAExC,MAAM,EAAE,GAAiB,MAAM,CAAC,EAAE,CAAC;IACnC,iFAAiF;IACjF,kEAAkE;IAClE,MAAM,eAAe,CACnB,QAAQ,EACR,OAAO,EACP,KAAK,IAAI,EAAE;QACT,MAAM,EAAE;aACL,MAAM,CAAC,eAAe,CAAC;aACvB,MAAM,CAAC,GAAG,CAAC;aACX,kBAAkB,CAAC;YAClB,MAAM,EAAE,eAAe,CAAC,SAAS;YACjC,uEAAuE;YACvE,uEAAuE;YACvE,GAAG,EAAE;gBACH,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B;SACF,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC,EACD,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,OAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oEAAoE;QACpE,GAAG,EAAE,CAAC,KAAK,CACT,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EACxE,yEAAyE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB,EACnB,SAAiB;IAEjB,IAAI,CAAC;QACH,4EAA4E;QAC5E,kEAAkE;QAClE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,8EAA8E;YAC9E,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,EAAE,CAAC,KAAK,CACT,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAC5D,+EAA+E,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE;SACzB,MAAM,EAAE;SACR,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;SAC/C,GAAG,EAAE,CAAC;IACT,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC"}

package/dist/sessions/session-switch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-switch.d.ts","sourceRoot":"","sources":["../../src/sessions/session-switch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAiB,MAAM,qBAAqB,CAAC;AAMlE;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAiD5F"}
+{"version":3,"file":"session-switch.d.ts","sourceRoot":"","sources":["../../src/sessions/session-switch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAiB,MAAM,qBAAqB,CAAC;AAMlE;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAoD5F"}

package/dist/sessions/session-switch.js

@@ -25,8 +25,11 @@ export async function switchSession(projectRoot, sessionId) {
         throw new CleoError(ExitCode.SESSION_NOT_FOUND, `Session '${sessionId}' is archived and cannot be switched to`);
     }
     const now = new Date().toISOString();
-    // Suspend the current active session (if different from target)
-    const currentActive = await accessor.getActiveSession();
+    // Suspend the CALLER's current session (if different from target). T11640 —
+    // identity resolution (connection-handle → CLEO_SESSION_ID → most-recent-
+    // active) so a switch suspends the agent's OWN session, not whoever wrote the
+    // DB last.
+    const currentActive = await accessor.resolveCurrentSession();
     if (currentActive && currentActive.id !== sessionId) {
         currentActive.status = 'suspended';
         Object.assign(currentActive, { suspendedAt: now });

package/dist/sessions/session-switch.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-switch.js","sourceRoot":"","sources":["../../src/sessions/session-switch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,SAAiB;IACxE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE/C,sBAAsB;IACtB,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAE/D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,YAAY,SAAS,aAAa,CAAC,CAAC;IACtF,CAAC;IAED,IAAK,aAAa,CAAC,MAAiB,KAAK,UAAU,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,iBAAiB,EAC1B,YAAY,SAAS,yCAAyC,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,gEAAgE;IAChE,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IACxD,IAAI,aAAa,IAAI,aAAa,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACpD,aAAa,CAAC,MAAM,GAAG,WAAW,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YACxB,aAAa,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,QAAQ,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC;IAED,8BAA8B;IAC9B,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC;IAChC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,OAAO,GAAG,SAAS,CAAC;IAClC,aAAa,CAAC,WAAW,GAAG,CAAC,aAAa,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAEjE,6EAA6E;IAC7E,kDAAkD;IAClD,IAAI,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAK,EAAoB,CAAC;QACnF,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClD,MAAM,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAElD,OAAO,aAAa,CAAC;AACvB,CAAC"}
+{"version":3,"file":"session-switch.js","sourceRoot":"","sources":["../../src/sessions/session-switch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,SAAiB;IACxE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE/C,sBAAsB;IACtB,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAE/D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,YAAY,SAAS,aAAa,CAAC,CAAC;IACtF,CAAC;IAED,IAAK,aAAa,CAAC,MAAiB,KAAK,UAAU,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,iBAAiB,EAC1B,YAAY,SAAS,yCAAyC,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,4EAA4E;IAC5E,0EAA0E;IAC1E,8EAA8E;IAC9E,WAAW;IACX,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IAC7D,IAAI,aAAa,IAAI,aAAa,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACpD,aAAa,CAAC,MAAM,GAAG,WAAW,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YACxB,aAAa,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,QAAQ,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC;IAED,8BAA8B;IAC9B,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC;IAChC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,OAAO,GAAG,SAAS,CAAC;IAClC,aAAa,CAAC,WAAW,GAAG,CAAC,aAAa,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAEjE,6EAA6E;IAC7E,kDAAkD;IAClD,IAAI,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAK,EAAoB,CAAC;QACnF,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClD,MAAM,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAElD,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/setup/config-json-merge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-json-merge.d.ts","sourceRoot":"","sources":["../../src/setup/config-json-merge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CASjD,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,GAAG,EAAE,aAAa,GACjB,IAAI,CA4HN"}
+{"version":3,"file":"config-json-merge.d.ts","sourceRoot":"","sources":["../../src/setup/config-json-merge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAWjD,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,GAAG,EAAE,aAAa,GACjB,IAAI,CAwIN"}

package/dist/setup/config-json-merge.js

@@ -27,12 +27,14 @@
  */
 export const WIZARD_SECTION_IDS = new Set([
     'llm',
+    'models-roles',
     'identity',
     'harness',
     'sentient',
     'project-conventions',
     'brain',
     'integrations',
+    'telemetry',
     'verification',
 ]);
 /**
@@ -173,6 +175,18 @@ export function mergeConfigJson(parsed, out) {
                 out.sessionAutoStart = sectionOpts['sessionAutoStart'];
             }
         }
+        // models-roles section (T11726)
+        if ('defaultModel' in sectionOpts && out.defaultModel === undefined) {
+            if (typeof sectionOpts['defaultModel'] === 'string' && sectionOpts['defaultModel'] !== '') {
+                out.defaultModel = sectionOpts['defaultModel'];
+            }
+        }
+        if ('roleBindings' in sectionOpts && out.roleBindings === undefined) {
+            const rb = sectionOpts['roleBindings'];
+            if (rb !== null && typeof rb === 'object' && !Array.isArray(rb)) {
+                out.roleBindings = rb;
+            }
+        }
     }
 }
 //# sourceMappingURL=config-json-merge.js.map

package/dist/setup/config-json-merge.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-json-merge.js","sourceRoot":"","sources":["../../src/setup/config-json-merge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAS;IACrE,KAAK;IACL,UAAU;IACV,SAAS;IACT,UAAU;IACV,qBAAqB;IACrB,OAAO;IACP,cAAc;IACd,cAAc;CACf,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAC7B,MAA+C,EAC/C,GAAkB;IAElB,kEAAkE;IAClE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IAExB,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,mEAAmE;QACnE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACjD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI;YAAE,SAAS;QAEtE,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,YAAY;QAEZ,IAAI,UAAU,IAAI,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5D,IAAI,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;gBAClF,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAW,CAAC;YACnD,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,IAAI,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxD,IAAI,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC9E,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAW,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,WAAW,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtD,IAAI,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC5E,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,CAAW,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC9D,IAAI,OAAO,WAAW,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;gBACpF,GAAG,CAAC,SAAS,GAAG,WAAW,CAAC,WAAW,CAAW,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,eAAe,IAAI,WAAW,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtE,IAAI,OAAO,WAAW,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC5F,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC,eAAe,CAAW,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,YAAY,IAAI,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1D,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,IAAI,WAAW,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;gBACtC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,IAAI,WAAW,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1E,MAAM,CAAC,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gBACvD,GAAG,CAAC,eAAe,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,IAAI,WAAW,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1E,IAAI,OAAO,WAAW,CAAC,iBAAiB,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxD,GAAG,CAAC,eAAe,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,IAAI,cAAc,IAAI,WAAW,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpE,IAAI,OAAO,WAAW,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrD,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,IAAI,uBAAuB,IAAI,WAAW,IAAI,GAAG,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACtF,IAAI,OAAO,WAAW,CAAC,uBAAuB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9D,GAAG,CAAC,qBAAqB,GAAG,WAAW,CAAC,uBAAuB,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,IAAI,WAAW,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChF,MAAM,CAAC,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,IAAI,uBAAuB,IAAI,WAAW,IAAI,GAAG,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACtF,IAAI,OAAO,WAAW,CAAC,uBAAuB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9D,GAAG,CAAC,qBAAqB,GAAG,WAAW,CAAC,uBAAuB,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,IAAI,mBAAmB,IAAI,WAAW,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC9E,IAAI,OAAO,WAAW,CAAC,mBAAmB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1D,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,IAAI,WAAW,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChF,IACE,OAAO,WAAW,CAAC,oBAAoB,CAAC,KAAK,QAAQ;gBACrD,WAAW,CAAC,oBAAoB,CAAC,KAAK,EAAE,EACxC,CAAC;gBACD,GAAG,CAAC,kBAAkB,GAAG,WAAW,CAAC,oBAAoB,CAAW,CAAC;YACvE,CAAC;QACH,CAAC;QACD,IAAI,eAAe,IAAI,WAAW,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtE,IAAI,OAAO,WAAW,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;gBACtD,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,IAAI,aAAa,IAAI,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAClE,IAAI,OAAO,WAAW,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;gBACxF,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC,aAAa,CAAW,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,IAAI,WAAW,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChF,IAAI,OAAO,WAAW,CAAC,oBAAoB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC3D,GAAG,CAAC,kBAAkB,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,mBAAmB,IAAI,WAAW,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC9E,MAAM,CAAC,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBACjD,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,IAAI,kBAAkB,IAAI,WAAW,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5E,IAAI,OAAO,WAAW,CAAC,kBAAkB,CAAC,KAAK,SAAS,EAAE,CAAC;gBACzD,GAAG,CAAC,gBAAgB,GAAG,WAAW,CAAC,kBAAkB,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"config-json-merge.js","sourceRoot":"","sources":["../../src/setup/config-json-merge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAS;IACrE,KAAK;IACL,cAAc;IACd,UAAU;IACV,SAAS;IACT,UAAU;IACV,qBAAqB;IACrB,OAAO;IACP,cAAc;IACd,WAAW;IACX,cAAc;CACf,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAC7B,MAA+C,EAC/C,GAAkB;IAElB,kEAAkE;IAClE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IAExB,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,mEAAmE;QACnE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACjD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI;YAAE,SAAS;QAEtE,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,YAAY;QAEZ,IAAI,UAAU,IAAI,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5D,IAAI,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;gBAClF,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAW,CAAC;YACnD,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,IAAI,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxD,IAAI,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC9E,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAW,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,WAAW,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtD,IAAI,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC5E,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,CAAW,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC9D,IAAI,OAAO,WAAW,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;gBACpF,GAAG,CAAC,SAAS,GAAG,WAAW,CAAC,WAAW,CAAW,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,eAAe,IAAI,WAAW,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtE,IAAI,OAAO,WAAW,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC5F,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC,eAAe,CAAW,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,YAAY,IAAI,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1D,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,IAAI,WAAW,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;gBACtC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,IAAI,WAAW,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1E,MAAM,CAAC,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gBACvD,GAAG,CAAC,eAAe,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,IAAI,WAAW,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC1E,IAAI,OAAO,WAAW,CAAC,iBAAiB,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxD,GAAG,CAAC,eAAe,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,IAAI,cAAc,IAAI,WAAW,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpE,IAAI,OAAO,WAAW,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrD,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,IAAI,uBAAuB,IAAI,WAAW,IAAI,GAAG,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACtF,IAAI,OAAO,WAAW,CAAC,uBAAuB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9D,GAAG,CAAC,qBAAqB,GAAG,WAAW,CAAC,uBAAuB,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,IAAI,WAAW,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChF,MAAM,CAAC,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,IAAI,uBAAuB,IAAI,WAAW,IAAI,GAAG,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACtF,IAAI,OAAO,WAAW,CAAC,uBAAuB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9D,GAAG,CAAC,qBAAqB,GAAG,WAAW,CAAC,uBAAuB,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,IAAI,mBAAmB,IAAI,WAAW,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC9E,IAAI,OAAO,WAAW,CAAC,mBAAmB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1D,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,IAAI,WAAW,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChF,IACE,OAAO,WAAW,CAAC,oBAAoB,CAAC,KAAK,QAAQ;gBACrD,WAAW,CAAC,oBAAoB,CAAC,KAAK,EAAE,EACxC,CAAC;gBACD,GAAG,CAAC,kBAAkB,GAAG,WAAW,CAAC,oBAAoB,CAAW,CAAC;YACvE,CAAC;QACH,CAAC;QACD,IAAI,eAAe,IAAI,WAAW,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtE,IAAI,OAAO,WAAW,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;gBACtD,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,IAAI,aAAa,IAAI,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAClE,IAAI,OAAO,WAAW,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;gBACxF,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC,aAAa,CAAW,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,IAAI,WAAW,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChF,IAAI,OAAO,WAAW,CAAC,oBAAoB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC3D,GAAG,CAAC,kBAAkB,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,mBAAmB,IAAI,WAAW,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC9E,MAAM,CAAC,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBACjD,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,IAAI,kBAAkB,IAAI,WAAW,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5E,IAAI,OAAO,WAAW,CAAC,kBAAkB,CAAC,KAAK,SAAS,EAAE,CAAC;gBACzD,GAAG,CAAC,gBAAgB,GAAG,WAAW,CAAC,kBAAkB,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,gCAAgC;QAChC,IAAI,cAAc,IAAI,WAAW,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpE,IAAI,OAAO,WAAW,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC1F,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,cAAc,CAAW,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,IAAI,cAAc,IAAI,WAAW,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpE,MAAM,EAAE,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;YACvC,IAAI,EAAE,KAAK,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,YAAY,GAAG,EAAmC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/setup/index.d.ts

@@ -14,13 +14,15 @@
  * @epic T9402
  * @epic T9591
  */
+import { type LlmSectionDeps } from './sections/llm.js';
 import { WizardRunner, type WizardSectionRunner } from './wizard.js';
 export { mergeConfigJson, WIZARD_SECTION_IDS } from './config-json-merge.js';
 export { createBrainSection } from './sections/brain.js';
 export { createHarnessSection } from './sections/harness.js';
 export { createIdentitySection } from './sections/identity.js';
 export { createIntegrationsSection } from './sections/integrations.js';
-export { createLlmSection } from './sections/llm.js';
+export { createLlmSection, type LlmSectionDeps } from './sections/llm.js';
+export { createModelsRolesSection } from './sections/models-roles.js';
 export { createProjectConventionsSection } from './sections/project-conventions.js';
 export { createSentientSection } from './sections/sentient.js';
 export { createTelemetrySection } from './sections/telemetry.js';
@@ -32,28 +34,38 @@ export { StubWizardIO, WizardFatalError, WizardInterruptError, type WizardIO, ty
  * Order matters: `cleo setup` walks the list verbatim. The current
  * order is:
  *   1. `llm`                 — credentials are the prerequisite for everything else
- *   2. `identity`            — agent name / SOUL.md before any agent dispatch
- *   3. `sentient`            — daemon enablement after credentials exist
- *   4. `project-conventions` — strictness preset before harness/brain layering
- *   5. `harness`             — operator selects Pi vs Claude Code (T9425)
- *   6. `brain`               — BRAIN memory bridge mode (T9425)
- *   7. `integrations`        — SignalDock + Studio + Conduit (T9608)
- *   8. `telemetry`           — anonymous skills-usage telemetry (T9673)
- *   9. `verification`        — read-only health checks (T9594)
+ *   2. `models-roles`        — default model + per-role profiles (T11726)
+ *   3. `identity`            — agent name / SOUL.md before any agent dispatch
+ *   4. `sentient`            — daemon enablement after credentials exist
+ *   5. `project-conventions` — strictness preset before harness/brain layering
+ *   6. `harness`             — operator selects Pi vs Claude Code (T9425)
+ *   7. `brain`               — BRAIN memory bridge mode (T9425)
+ *   8. `integrations`        — SignalDock + Studio + Conduit (T9608)
+ *   9. `telemetry`           — anonymous skills-usage telemetry (T9673)
+ *  10. `verification`        — read-only health checks (T9594)
  *
+ * @param llmDeps - Optional dependencies forwarded to the `llm` section — most
+ *   notably the interactive OAuth token acquirer (T11727). The CLI surface
+ *   passes the real acquirer so the wizard OAuth path runs the inline engine;
+ *   programmatic callers omit it (OAuth path points the user at `cleo login`).
  * @returns Fresh array of section runner instances.
  * @task T9420
  * @task T9425
  * @task T9594
  * @task T9608
  * @task T9673
+ * @task T11726
+ * @task T11727
  */
-export declare function createBuiltinSections(): WizardSectionRunner[];
+export declare function createBuiltinSections(llmDeps?: LlmSectionDeps): WizardSectionRunner[];
 /**
  * Construct a {@link WizardRunner} pre-wired with the built-in sections.
  *
+ * @param llmDeps - Optional `llm` section dependencies (see
+ *   {@link createBuiltinSections}); forwards the interactive OAuth acquirer.
  * @returns A ready-to-run wizard runner.
  * @task T9420
+ * @task T11727
  */
-export declare function createDefaultWizardRunner(): WizardRunner;
+export declare function createDefaultWizardRunner(llmDeps?: LlmSectionDeps): WizardRunner;
 //# sourceMappingURL=index.d.ts.map

package/dist/setup/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,IAAI,mBAAmB,EAAE,CAY7D;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,YAAY,CAExD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAM1E,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,cAAmB,GAAG,mBAAmB,EAAE,CAazF;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAEpF"}

package/dist/setup/index.js

@@ -19,6 +19,7 @@ import { createHarnessSection } from './sections/harness.js';
 import { createIdentitySection } from './sections/identity.js';
 import { createIntegrationsSection } from './sections/integrations.js';
 import { createLlmSection } from './sections/llm.js';
+import { createModelsRolesSection } from './sections/models-roles.js';
 import { createProjectConventionsSection } from './sections/project-conventions.js';
 import { createSentientSection } from './sections/sentient.js';
 import { createTelemetrySection } from './sections/telemetry.js';
@@ -31,6 +32,7 @@ export { createHarnessSection } from './sections/harness.js';
 export { createIdentitySection } from './sections/identity.js';
 export { createIntegrationsSection } from './sections/integrations.js';
 export { createLlmSection } from './sections/llm.js';
+export { createModelsRolesSection } from './sections/models-roles.js';
 export { createProjectConventionsSection } from './sections/project-conventions.js';
 export { createSentientSection } from './sections/sentient.js';
 export { createTelemetrySection } from './sections/telemetry.js';
@@ -42,25 +44,33 @@ export { StubWizardIO, WizardFatalError, WizardInterruptError, WizardRunner, } f
  * Order matters: `cleo setup` walks the list verbatim. The current
  * order is:
  *   1. `llm`                 — credentials are the prerequisite for everything else
- *   2. `identity`            — agent name / SOUL.md before any agent dispatch
- *   3. `sentient`            — daemon enablement after credentials exist
- *   4. `project-conventions` — strictness preset before harness/brain layering
- *   5. `harness`             — operator selects Pi vs Claude Code (T9425)
- *   6. `brain`               — BRAIN memory bridge mode (T9425)
- *   7. `integrations`        — SignalDock + Studio + Conduit (T9608)
- *   8. `telemetry`           — anonymous skills-usage telemetry (T9673)
- *   9. `verification`        — read-only health checks (T9594)
+ *   2. `models-roles`        — default model + per-role profiles (T11726)
+ *   3. `identity`            — agent name / SOUL.md before any agent dispatch
+ *   4. `sentient`            — daemon enablement after credentials exist
+ *   5. `project-conventions` — strictness preset before harness/brain layering
+ *   6. `harness`             — operator selects Pi vs Claude Code (T9425)
+ *   7. `brain`               — BRAIN memory bridge mode (T9425)
+ *   8. `integrations`        — SignalDock + Studio + Conduit (T9608)
+ *   9. `telemetry`           — anonymous skills-usage telemetry (T9673)
+ *  10. `verification`        — read-only health checks (T9594)
  *
+ * @param llmDeps - Optional dependencies forwarded to the `llm` section — most
+ *   notably the interactive OAuth token acquirer (T11727). The CLI surface
+ *   passes the real acquirer so the wizard OAuth path runs the inline engine;
+ *   programmatic callers omit it (OAuth path points the user at `cleo login`).
  * @returns Fresh array of section runner instances.
  * @task T9420
  * @task T9425
  * @task T9594
  * @task T9608
  * @task T9673
+ * @task T11726
+ * @task T11727
  */
-export function createBuiltinSections() {
+export function createBuiltinSections(llmDeps = {}) {
     return [
-        createLlmSection(),
+        createLlmSection(llmDeps),
+        createModelsRolesSection(),
         createIdentitySection(),
         createSentientSection(),
         createProjectConventionsSection(),
@@ -74,10 +84,13 @@ export function createBuiltinSections() {
 /**
  * Construct a {@link WizardRunner} pre-wired with the built-in sections.
  *
+ * @param llmDeps - Optional `llm` section dependencies (see
+ *   {@link createBuiltinSections}); forwards the interactive OAuth acquirer.
  * @returns A ready-to-run wizard runner.
  * @task T9420
+ * @task T11727
  */
-export function createDefaultWizardRunner() {
-    return new WizardRunner(createBuiltinSections());
+export function createDefaultWizardRunner(llmDeps = {}) {
+    return new WizardRunner(createBuiltinSections(llmDeps));
 }
 //# sourceMappingURL=index.js.map

package/dist/setup/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,YAAY,EAA4B,MAAM,aAAa,CAAC;AAErE,gFAAgF;AAChF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,yBAAyB,GAE1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EAGpB,YAAY,GAKb,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,gBAAgB,EAAE;QAClB,qBAAqB,EAAE;QACvB,qBAAqB,EAAE;QACvB,+BAA+B,EAAE;QACjC,oBAAoB,EAAE;QACtB,kBAAkB,EAAE;QACpB,yBAAyB,EAAE;QAC3B,sBAAsB,EAAE;QACxB,yBAAyB,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,YAAY,EAA4B,MAAM,aAAa,CAAC;AAErE,gFAAgF;AAChF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,yBAAyB,GAE1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EAGpB,YAAY,GAKb,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAA0B,EAAE;IAChE,OAAO;QACL,gBAAgB,CAAC,OAAO,CAAC;QACzB,wBAAwB,EAAE;QAC1B,qBAAqB,EAAE;QACvB,qBAAqB,EAAE;QACvB,+BAA+B,EAAE;QACjC,oBAAoB,EAAE;QACtB,kBAAkB,EAAE;QACpB,yBAAyB,EAAE;QAC3B,sBAAsB,EAAE;QACxB,yBAAyB,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAA0B,EAAE;IACpE,OAAO,IAAI,YAAY,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1D,CAAC"}