@cleocode/core 2026.6.5 → 2026.6.7

package/dist/store/exodus/count-parity.js

@@ -0,0 +1,124 @@
+/**
+ * Memory-safe COUNT(*)-only exodus parity — the deficit gate WITHOUT the content
+ * digest (T11837).
+ *
+ * `verifyMigration` is the full parity guard (row counts + content digest + FK +
+ * enum drift), but its content digest streams every row of every table. For the
+ * fleet-flow surface — `cleo exodus seal` (certify an already-migrated install)
+ * and `cleo doctor exodus` (health report) — we only need the DEFICIT gate that
+ * `isDataContinuityOk` actually enforces: per-table `target COUNT(*) >= source
+ * COUNT(*)`. That is a set-based query SQLite answers without materialising a
+ * single row, so it is safe to run against a 1.7 GB-class legacy `brain.db`
+ * (where the digest would be expensive). A SURPLUS (target > source — the live
+ * consolidated DB has moved ahead of the frozen legacy snapshot) is NOT loss and
+ * is tolerated, exactly as in `isDataContinuityOk`.
+ *
+ * This is intentionally a SEPARATE primitive from `verifyMigration` — sealing an
+ * already-migrated install must never re-run the heavy digest that this whole
+ * fleet-hardening epic (T11833) exists to avoid.
+ *
+ * @task T11837 (fleet-flow surface — count-only parity for seal + health)
+ * @epic T11833 (EP-EXODUS-FLEET-HARDENING)
+ * @saga T11242 (SG-DB-SUBSTRATE-V2)
+ */
+import { existsSync } from 'node:fs';
+import { getLogger } from '../../logger.js';
+import { openCleoDbSnapshot } from '../open-cleo-db.js';
+import { resolveConsolidatedTableName, resolveTableTargetScope } from './table-name-map.js';
+const log = getLogger('exodus-count-parity');
+/** List user tables (excluding SQLite internals + Drizzle journal). */
+function listTables(db) {
+    return db
+        .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' AND name NOT LIKE '__drizzle_%' ORDER BY name")
+        .all().map((r) => r.name);
+}
+/** `true` if `tableName` exists in `db`. */
+function tableExists(db, tableName) {
+    const escaped = tableName.replace(/'/g, "''");
+    return (db.prepare(`SELECT 1 FROM sqlite_master WHERE type='table' AND name='${escaped}'`).get() !==
+        undefined);
+}
+/** Memory-safe `COUNT(*)`. Returns `null` for a virtual/FTS table that cannot be counted. */
+function rowCount(db, tableName) {
+    try {
+        const row = db.prepare(`SELECT COUNT(*) AS c FROM "${tableName}"`).get();
+        return Number(row?.c ?? 0);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Compute COUNT(*)-only parity for every legacy source table against the
+ * consolidated dual-scope target — the deficit gate, never the heavy digest.
+ *
+ * Opens all DBs read-only. A table whose consolidated counterpart is ABSENT with
+ * source rows is a deficit (`targetCount: 0`). Derived/FTS/internal tables that
+ * map to `skip`, and virtual tables that cannot be counted, are skipped.
+ *
+ * @param sources       - Legacy source descriptors (from `buildExodusPlan()`).
+ * @param projectDbPath - Absolute path to the consolidated project `cleo.db`.
+ * @param globalDbPath  - Absolute path to the consolidated global `cleo.db`.
+ * @returns A {@link CountParityResult}; `ok === false` when any table has a deficit.
+ *
+ * @task T11837
+ */
+export function computeCountParity(sources, projectDbPath, globalDbPath) {
+    const entries = [];
+    let skipped = 0;
+    if (!existsSync(projectDbPath) || !existsSync(globalDbPath)) {
+        return { ok: false, entries: [], deficits: [], checked: 0, skipped: 0 };
+    }
+    const projectSnap = openCleoDbSnapshot(projectDbPath, { readOnly: true });
+    const globalSnap = openCleoDbSnapshot(globalDbPath, { readOnly: true });
+    try {
+        for (const src of sources) {
+            if (!existsSync(src.path))
+                continue;
+            const srcSnap = openCleoDbSnapshot(src.path, { readOnly: true });
+            try {
+                for (const legacyTable of listTables(srcSnap.db)) {
+                    const resolution = resolveConsolidatedTableName(src.name, legacyTable);
+                    if (resolution.kind === 'skip') {
+                        skipped++;
+                        continue;
+                    }
+                    const targetTable = resolution.targetName;
+                    const scope = resolveTableTargetScope(src.name, legacyTable, src.targetScope);
+                    const targetSnap = scope === 'project' ? projectSnap : globalSnap;
+                    const sourceCount = rowCount(srcSnap.db, legacyTable);
+                    if (sourceCount === null) {
+                        skipped++;
+                        continue;
+                    }
+                    const targetCount = tableExists(targetSnap.db, targetTable)
+                        ? (rowCount(targetSnap.db, targetTable) ?? 0)
+                        : 0;
+                    const deficit = targetCount < sourceCount ? sourceCount - targetCount : 0;
+                    entries.push({
+                        sourceDb: src.name,
+                        sourceTable: legacyTable,
+                        targetTable,
+                        scope,
+                        sourceCount,
+                        targetCount,
+                        deficit,
+                    });
+                }
+            }
+            finally {
+                srcSnap.close();
+            }
+        }
+    }
+    finally {
+        projectSnap.close();
+        globalSnap.close();
+    }
+    const deficits = entries.filter((e) => e.deficit > 0);
+    if (deficits.length > 0) {
+        log.warn({ deficitCount: deficits.length, sample: deficits.slice(0, 5) }, `exodus count-parity: ${deficits.length} table(s) have FEWER rows in the consolidated target than the legacy source`);
+    }
+    return { ok: deficits.length === 0, entries, deficits, checked: entries.length, skipped };
+}
+//# sourceMappingURL=count-parity.js.map

package/dist/store/exodus/count-parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"count-parity.js","sourceRoot":"","sources":["../../../src/store/exodus/count-parity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAG5F,MAAM,GAAG,GAAG,SAAS,CAAC,qBAAqB,CAAC,CAAC;AAkC7C,uEAAuE;AACvE,SAAS,UAAU,CAAC,EAAgB;IAClC,OACE,EAAE;SACC,OAAO,CACN,8HAA8H,CAC/H;SACA,GAAG,EACP,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,4CAA4C;AAC5C,SAAS,WAAW,CAAC,EAAgB,EAAE,SAAiB;IACtD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,CACL,EAAE,CAAC,OAAO,CAAC,4DAA4D,OAAO,GAAG,CAAC,CAAC,GAAG,EAAE;QACxF,SAAS,CACV,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,SAAS,QAAQ,CAAC,EAAgB,EAAE,SAAiB;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,8BAA8B,SAAS,GAAG,CAAC,CAAC,GAAG,EAEzD,CAAC;QACd,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAsC,EACtC,aAAqB,EACrB,YAAoB;IAEpB,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAExE,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACpC,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC;gBACH,KAAK,MAAM,WAAW,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;oBACjD,MAAM,UAAU,GAAG,4BAA4B,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBACvE,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC/B,OAAO,EAAE,CAAC;wBACV,SAAS;oBACX,CAAC;oBACD,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;oBAC1C,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;oBAC9E,MAAM,UAAU,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;oBAElE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;oBACtD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;wBACzB,OAAO,EAAE,CAAC;wBACV,SAAS;oBACX,CAAC;oBACD,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC;wBACzD,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;wBAC7C,CAAC,CAAC,CAAC,CAAC;oBACN,MAAM,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC1E,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,GAAG,CAAC,IAAI;wBAClB,WAAW,EAAE,WAAW;wBACxB,WAAW;wBACX,KAAK;wBACL,WAAW;wBACX,WAAW;wBACX,OAAO;qBACR,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CACN,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAC/D,wBAAwB,QAAQ,CAAC,MAAM,6EAA6E,CACrH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAC5F,CAAC"}

package/dist/store/exodus/health.d.ts

@@ -0,0 +1,70 @@
+/**
+ * `cleo doctor exodus` core — read-only exodus health report (T11837).
+ *
+ * The fleet pre-check the owner flow opens with: a single, read-only snapshot of
+ * where each scope stands so an operator (or the rollout automation) can route
+ * the next step — already-sealed, migrated-but-unsealed (→ `cleo exodus seal`),
+ * fresh-needs-migration, or no-cleo-data — and so any LARGE legacy DB is flagged
+ * for individual attention before the streamed-verify build touches it.
+ *
+ * Pure assembly over existing primitives (`buildExodusPlan`, `runExodusStatus`,
+ * `hasExodusCompleteMarker`, `detectStrandedResidue`, {@link computeCountParity}).
+ * Never writes; never runs the heavy digest.
+ *
+ * @task T11837 (fleet-flow surface — exodus health-check)
+ * @epic T11833 (EP-EXODUS-FLEET-HARDENING)
+ * @saga T11242 (SG-DB-SUBSTRATE-V2)
+ */
+import type { ExodusScope } from './types.js';
+/** Per-scope migration state. */
+export type ExodusScopeState = 'sealed' | 'migrated-unsealed' | 'needs-migration' | 'no-cleo-data';
+/** One legacy source DB's presence + size. */
+export interface ExodusSourceHealth {
+    readonly name: string;
+    readonly path: string;
+    readonly present: boolean;
+    readonly bytes: number;
+    /** `true` when `bytes >= LARGE_DB_BYTES` (route through streamed-verify build). */
+    readonly large: boolean;
+}
+/** Health of one scope (project | global). */
+export interface ExodusScopeHealth {
+    readonly scope: ExodusScope;
+    readonly state: ExodusScopeState;
+    readonly consolidatedExists: boolean;
+    readonly markerPresent: boolean;
+    readonly legacySources: readonly ExodusSourceHealth[];
+    readonly strandedResidue: readonly string[];
+}
+/** Full read-only exodus health report. */
+export interface ExodusHealth {
+    readonly project: ExodusScopeHealth;
+    readonly global: ExodusScopeHealth;
+    /** Disk pre-flight (current 3×-of-sum policy). */
+    readonly diskHeadroomOk: boolean;
+    readonly availableBytes: number;
+    readonly requiredBytes: number;
+    /** Whether `CLEO_DISABLE_EXODUS_ON_OPEN` is set (the fleet brake). */
+    readonly killSwitchSet: boolean;
+    /** COUNT(*)-only data-continuity across present sources (no digest). */
+    readonly dataParityOk: boolean;
+    readonly dataDeficits: number;
+    /** Legacy DBs ≥ 500 MB across both scopes (need individual attention). */
+    readonly largeLegacyDbs: ReadonlyArray<{
+        name: string;
+        scope: ExodusScope;
+        bytes: number;
+    }>;
+    /** Actionable next-step recommendations. */
+    readonly recommendations: readonly string[];
+}
+/**
+ * Build a read-only exodus health report for the current project + global scope.
+ *
+ * @param cwd - Working directory used to resolve the project `.cleo/` dir.
+ * @returns The assembled {@link ExodusHealth}.
+ *
+ * @task T11837
+ */
+export declare function buildExodusHealth(cwd: string | undefined): ExodusHealth;
+//# sourceMappingURL=health.d.ts.map

package/dist/store/exodus/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9C,iCAAiC;AACjC,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,mBAAmB,GACnB,iBAAiB,GACjB,cAAc,CAAC;AAEnB,8CAA8C;AAC9C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACtD,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,kDAAkD;IAClD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F,4CAA4C;IAC5C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CA+GvE"}

package/dist/store/exodus/health.js

@@ -0,0 +1,130 @@
+/**
+ * `cleo doctor exodus` core — read-only exodus health report (T11837).
+ *
+ * The fleet pre-check the owner flow opens with: a single, read-only snapshot of
+ * where each scope stands so an operator (or the rollout automation) can route
+ * the next step — already-sealed, migrated-but-unsealed (→ `cleo exodus seal`),
+ * fresh-needs-migration, or no-cleo-data — and so any LARGE legacy DB is flagged
+ * for individual attention before the streamed-verify build touches it.
+ *
+ * Pure assembly over existing primitives (`buildExodusPlan`, `runExodusStatus`,
+ * `hasExodusCompleteMarker`, `detectStrandedResidue`, {@link computeCountParity}).
+ * Never writes; never runs the heavy digest.
+ *
+ * @task T11837 (fleet-flow surface — exodus health-check)
+ * @epic T11833 (EP-EXODUS-FLEET-HARDENING)
+ * @saga T11242 (SG-DB-SUBSTRATE-V2)
+ */
+import { existsSync, statSync } from 'node:fs';
+import { hasExodusCompleteMarker } from './archive.js';
+import { computeCountParity } from './count-parity.js';
+import { buildExodusPlan } from './plan.js';
+/** Legacy DBs at or above this size are flagged for individual rollout attention. */
+const LARGE_DB_BYTES = 500 * 1024 * 1024;
+/**
+ * Build a read-only exodus health report for the current project + global scope.
+ *
+ * @param cwd - Working directory used to resolve the project `.cleo/` dir.
+ * @returns The assembled {@link ExodusHealth}.
+ *
+ * @task T11837
+ */
+export function buildExodusHealth(cwd) {
+    const plan = buildExodusPlan(cwd);
+    const anyLegacyPresent = plan.sources.some((s) => existsSync(s.path));
+    // COUNT(*)-only parity (no digest). Trivially ok when no legacy sources remain.
+    const parity = anyLegacyPresent
+        ? computeCountParity(plan.sources, plan.projectDbPath, plan.globalDbPath)
+        : { ok: true, entries: [], deficits: [], checked: 0, skipped: 0 };
+    const consolidatedExistsByScope = {
+        project: existsSync(plan.projectDbPath),
+        global: existsSync(plan.globalDbPath),
+    };
+    const buildScope = (scope) => {
+        const sources = plan.sources
+            .filter((s) => s.targetScope === scope)
+            .map((s) => {
+            const present = existsSync(s.path);
+            let bytes = 0;
+            if (present) {
+                try {
+                    bytes = statSync(s.path).size;
+                }
+                catch {
+                    bytes = 0;
+                }
+            }
+            return { name: s.name, path: s.path, present, bytes, large: bytes >= LARGE_DB_BYTES };
+        });
+        const markerPresent = hasExodusCompleteMarker(scope, cwd);
+        const legacyPresent = sources.some((s) => s.present);
+        const consolidatedExists = consolidatedExistsByScope[scope];
+        const scopeEntries = parity.entries.filter((e) => e.scope === scope);
+        const scopeHasDeficit = scopeEntries.some((e) => e.deficit > 0);
+        const scopeHasData = scopeEntries.some((e) => e.targetCount > 0);
+        let state;
+        if (markerPresent) {
+            state = 'sealed';
+        }
+        else if (legacyPresent && consolidatedExists && scopeHasData && !scopeHasDeficit) {
+            state = 'migrated-unsealed';
+        }
+        else if (legacyPresent) {
+            state = 'needs-migration';
+        }
+        else {
+            state = 'no-cleo-data';
+        }
+        // Stranded residue is only meaningful once a marker exists for the scope.
+        const stranded = sources.filter((s) => s.present && markerPresent).map((s) => s.name);
+        return {
+            scope,
+            state,
+            consolidatedExists,
+            markerPresent,
+            legacySources: sources,
+            strandedResidue: stranded,
+        };
+    };
+    const project = buildScope('project');
+    const global = buildScope('global');
+    const largeLegacyDbs = [
+        ...project.legacySources
+            .filter((s) => s.large)
+            .map((s) => ({ name: s.name, scope: 'project', bytes: s.bytes })),
+        ...global.legacySources
+            .filter((s) => s.large)
+            .map((s) => ({ name: s.name, scope: 'global', bytes: s.bytes })),
+    ];
+    const recommendations = [];
+    for (const sc of [project, global]) {
+        if (sc.state === 'migrated-unsealed') {
+            recommendations.push(`${sc.scope}: data is consolidated but unsealed — run \`cleo exodus seal --scope ${sc.scope}\` to archive legacy DBs + stop on-open re-firing.`);
+        }
+        else if (sc.state === 'needs-migration') {
+            recommendations.push(`${sc.scope}: legacy data not yet consolidated — run \`cleo exodus migrate --scope ${sc.scope}\`.`);
+        }
+        else if (sc.strandedResidue.length > 0) {
+            recommendations.push(`${sc.scope}: ${sc.strandedResidue.length} stranded legacy DB(s) after a sealed cutover — run \`cleo doctor exodus-residue --fix\`.`);
+        }
+    }
+    if (largeLegacyDbs.length > 0) {
+        recommendations.push(`${largeLegacyDbs.length} large legacy DB(s) (≥500 MB) — migrate these only with the streamed-verify build (T11834) to avoid the verify OOM.`);
+    }
+    if (!parity.ok) {
+        recommendations.push(`${parity.deficits.length} table(s) show a row deficit in cleo.db — DO NOT seal; run \`cleo exodus migrate\` first.`);
+    }
+    return {
+        project,
+        global,
+        diskHeadroomOk: plan.diskPreflight,
+        availableBytes: plan.availableBytes,
+        requiredBytes: 3 * plan.totalSourceBytes,
+        killSwitchSet: process.env.CLEO_DISABLE_EXODUS_ON_OPEN === '1',
+        dataParityOk: parity.ok,
+        dataDeficits: parity.deficits.length,
+        largeLegacyDbs,
+        recommendations,
+    };
+}
+//# sourceMappingURL=health.js.map

package/dist/store/exodus/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/store/exodus/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,qFAAqF;AACrF,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAgDzC;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAuB;IACvD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEtE,gFAAgF;IAChF,MAAM,MAAM,GAAG,gBAAgB;QAC7B,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC;QACzE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAEpE,MAAM,yBAAyB,GAAiC;QAC9D,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;QACvC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;KACtC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,KAAkB,EAAqB,EAAE;QAC3D,MAAM,OAAO,GAAyB,IAAI,CAAC,OAAO;aAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,GAAG,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,cAAc,EAAE,CAAC;QACxF,CAAC,CAAC,CAAC;QACL,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAEjE,IAAI,KAAuB,CAAC;QAC5B,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,GAAG,QAAQ,CAAC;QACnB,CAAC;aAAM,IAAI,aAAa,IAAI,kBAAkB,IAAI,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;YACnF,KAAK,GAAG,mBAAmB,CAAC;QAC9B,CAAC;aAAM,IAAI,aAAa,EAAE,CAAC;YACzB,KAAK,GAAG,iBAAiB,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,cAAc,CAAC;QACzB,CAAC;QAED,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEtF,OAAO;YACL,KAAK;YACL,KAAK;YACL,kBAAkB;YAClB,aAAa;YACb,aAAa,EAAE,OAAO;YACtB,eAAe,EAAE,QAAQ;SAC1B,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,cAAc,GAAG;QACrB,GAAG,OAAO,CAAC,aAAa;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,SAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5E,GAAG,MAAM,CAAC,aAAa;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;KAC5E,CAAC;IAEF,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;YACrC,eAAe,CAAC,IAAI,CAClB,GAAG,EAAE,CAAC,KAAK,wEAAwE,EAAE,CAAC,KAAK,oDAAoD,CAChJ,CAAC;QACJ,CAAC;aAAM,IAAI,EAAE,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;YAC1C,eAAe,CAAC,IAAI,CAClB,GAAG,EAAE,CAAC,KAAK,0EAA0E,EAAE,CAAC,KAAK,KAAK,CACnG,CAAC;QACJ,CAAC;aAAM,IAAI,EAAE,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,eAAe,CAAC,IAAI,CAClB,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,eAAe,CAAC,MAAM,2FAA2F,CACrI,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,eAAe,CAAC,IAAI,CAClB,GAAG,cAAc,CAAC,MAAM,qHAAqH,CAC9I,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,eAAe,CAAC,IAAI,CAClB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,2FAA2F,CACrH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB;QACxC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;QAC9D,YAAY,EAAE,MAAM,CAAC,EAAE;QACvB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACpC,cAAc;QACd,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/store/exodus/index.d.ts

@@ -9,8 +9,11 @@
  * @saga T11242
  */
 export { type ArchivedSourceResult, type ArchiveMigratedSourcesResult, archiveMigratedSources, archiveSourceDb, archiveStrandedResidue, detectStrandedResidue, type ExodusCompleteMarker, exodusArchiveDir, exodusMarkerPath, hasExodusCompleteMarker, type StrandedResidueEntry, writeExodusCompleteMarker, } from './archive.js';
+export { type CountParityEntry, type CountParityResult, computeCountParity, } from './count-parity.js';
+export { buildExodusHealth, type ExodusHealth, type ExodusScopeHealth, type ExodusScopeState, type ExodusSourceHealth, } from './health.js';
 export { clearExodusJournal, runExodusMigrate } from './migrate.js';
 export { buildExodusPlan, deriveStagingDirName, sourcesPresent } from './plan.js';
+export { type SealResult, type SealScopeArg, type SealScopeOutcome, sealExodus, } from './seal.js';
 export { runExodusStatus } from './status.js';
 export { isDerivedOrInternalTable, resolveConsolidatedTableName, reverseLookup, type TableNameResolution, } from './table-name-map.js';
 export { EXODUS_TARGET_SCHEMA_VERSION, type ExodusJournal, type ExodusMigrateResult, type ExodusPlan, type ExodusScope, type ExodusStatusResult, type ExodusVerifyResult, type JournalTableEntry, type LegacyDbDescriptor, type TableCopyResult, type TableMigrationStatus, type VerifyTableResult, } from './types.js';

package/dist/store/exodus/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,EACb,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EACL,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,UAAU,GACX,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,EACb,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/store/exodus/index.js

@@ -9,8 +9,11 @@
  * @saga T11242
  */
 export { archiveMigratedSources, archiveSourceDb, archiveStrandedResidue, detectStrandedResidue, exodusArchiveDir, exodusMarkerPath, hasExodusCompleteMarker, writeExodusCompleteMarker, } from './archive.js';
+export { computeCountParity, } from './count-parity.js';
+export { buildExodusHealth, } from './health.js';
 export { clearExodusJournal, runExodusMigrate } from './migrate.js';
 export { buildExodusPlan, deriveStagingDirName, sourcesPresent } from './plan.js';
+export { sealExodus, } from './seal.js';
 export { runExodusStatus } from './status.js';
 export { isDerivedOrInternalTable, resolveConsolidatedTableName, reverseLookup, } from './table-name-map.js';
 export { EXODUS_TARGET_SCHEMA_VERSION, } from './types.js';

package/dist/store/exodus/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAGL,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EAErB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EAEvB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,GAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,GAY7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAGL,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EAErB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EAEvB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAGL,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,GAKlB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAIL,UAAU,GACX,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,GAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,GAY7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/store/exodus/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AAmBH,OAAO,KAAK,EAEV,mBAAmB,EACnB,UAAU,EAMX,MAAM,YAAY,CAAC;AAiEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAiB9D;AAw9BD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,UAAU,EAChB,iBAAiB,UAAQ,EACzB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAoK9B"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AA8BH,OAAO,KAAK,EAEV,mBAAmB,EACnB,UAAU,EAMX,MAAM,YAAY,CAAC;AAiEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAiB9D;AAknBD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,UAAU,EAChB,iBAAiB,UAAQ,EACzB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA6L9B"}