@cleocode/core 2026.6.5 → 2026.6.7

package/dist/store/exodus/plan.d.ts

@@ -5,15 +5,58 @@
  * combined size, free-disk availability, staging directory — BEFORE any
  * writes occur. A `--dry-run` caller can print the plan and exit early.
  *
- * ## Disk pre-flight (AC8)
+ * ## Disk pre-flight (AC8 · right-sized T11838)
  *
- * `availableBytes >= 3 * totalSourceBytes` must hold before migration begins.
- * The check uses `statvfs` via `node:fs.statfsSync()` (Node 18+).
+ * The original gate required `availableBytes >= 3 * totalSourceBytes` — an
+ * over-estimate that blocked large-fleet migrations even with ample headroom:
+ * exodus never holds 3× the SUM of every source on disk at once. It copies one
+ * source into staging at a time (lock released before the next) and writes a
+ * single consolidated cleo.db whose size approximates the sum of source ROW data.
+ *
+ * The right-sized requirement is therefore
+ * `STAGING_HEADROOM_FACTOR * largestSourceBytes + consolidatedEstimate`, where
+ * `consolidatedEstimate ≈ totalSourceBytes` ({@link computeRequiredBytes}). The
+ * check uses `statvfs` via `node:fs.statfsSync()` (Node 18+).
  *
  * @task T11248 (E5 · SG-DB-SUBSTRATE-V2)
+ * @task T11838 (right-sized preflight + optional staging copy for large sources)
  * @saga T11242
  */
 import type { ExodusPlan, LegacyDbDescriptor } from './types.js';
+/**
+ * Headroom multiplier applied to the LARGEST single source when sizing the
+ * staging-copy footprint. The staging dir only ever holds ONE source backup at a
+ * time (its advisory lock is released before the next source is touched), so the
+ * peak staging footprint is the largest source plus a small slack for the
+ * write-then-rename journal + SQLite sidecars — hence `1.2×`, not `3×` of the SUM.
+ *
+ * @task T11838
+ */
+export declare const STAGING_HEADROOM_FACTOR: 1.2;
+/**
+ * Per-source byte threshold above which the full staging `copyFileSync` backup
+ * is skipped (the source is archived, not deleted, on success). Sized at 256 MiB
+ * — comfortably above the small project DBs (tasks/conduit/skills/signaldock are
+ * sub-MB to low-MB) but below the large global stores (a multi-GB `brain.db` or
+ * `nexus.db`) whose redundant full-file copy is the costly case T11838 removes.
+ *
+ * @task T11838
+ */
+export declare const STAGING_COPY_SKIP_THRESHOLD_BYTES: number;
+/**
+ * Compute the right-sized free-disk requirement for an exodus run (T11838).
+ *
+ * `STAGING_HEADROOM_FACTOR * largestSourceBytes` covers the peak staging-copy
+ * footprint (one source at a time, plus slack), and `totalSourceBytes` is the
+ * consolidated-cleo.db estimate (every source's row data lands there). The two
+ * are additive because staging and the consolidated DB coexist on disk until the
+ * sources are archived.
+ *
+ * @param totalSourceBytes   - Combined size of all source DB files in bytes.
+ * @param largestSourceBytes - Size of the single largest source DB in bytes.
+ * @returns The minimum free bytes the target filesystem must have.
+ */
+export declare function computeRequiredBytes(totalSourceBytes: number, largestSourceBytes: number): number;
 /**
  * Derive the staging directory name from the current ISO-8601 timestamp.
  *
@@ -31,7 +74,8 @@ export declare function deriveStagingDirName(): string;
  *   `process.cwd()`.
  * @returns {@link ExodusPlan} describing sources, disk availability, and paths.
  *
- * @task T11248 (AC8 — 3× disk pre-flight)
+ * @task T11248 (AC8 — disk pre-flight)
+ * @task T11838 (right-sized: largest-source factor + consolidated estimate)
  */
 export declare function buildExodusPlan(cwd?: string): ExodusPlan;
 /**

package/dist/store/exodus/plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA8EjE;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AA0BD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,UAAU,CA+BxD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAErE"}
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMjE;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAG,GAAY,CAAC;AAEpD;;;;;;;;GAQG;AACH,eAAO,MAAM,iCAAiC,QAAoB,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAEjG;AA8ED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AA0BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,UAAU,CAwCxD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAErE"}

package/dist/store/exodus/plan.js

@@ -5,12 +5,21 @@
  * combined size, free-disk availability, staging directory — BEFORE any
  * writes occur. A `--dry-run` caller can print the plan and exit early.
  *
- * ## Disk pre-flight (AC8)
+ * ## Disk pre-flight (AC8 · right-sized T11838)
  *
- * `availableBytes >= 3 * totalSourceBytes` must hold before migration begins.
- * The check uses `statvfs` via `node:fs.statfsSync()` (Node 18+).
+ * The original gate required `availableBytes >= 3 * totalSourceBytes` — an
+ * over-estimate that blocked large-fleet migrations even with ample headroom:
+ * exodus never holds 3× the SUM of every source on disk at once. It copies one
+ * source into staging at a time (lock released before the next) and writes a
+ * single consolidated cleo.db whose size approximates the sum of source ROW data.
+ *
+ * The right-sized requirement is therefore
+ * `STAGING_HEADROOM_FACTOR * largestSourceBytes + consolidatedEstimate`, where
+ * `consolidatedEstimate ≈ totalSourceBytes` ({@link computeRequiredBytes}). The
+ * check uses `statvfs` via `node:fs.statfsSync()` (Node 18+).
  *
  * @task T11248 (E5 · SG-DB-SUBSTRATE-V2)
+ * @task T11838 (right-sized preflight + optional staging copy for large sources)
  * @saga T11242
  */
 import { existsSync, readdirSync, statfsSync, statSync } from 'node:fs';
@@ -18,6 +27,45 @@ import { join } from 'node:path';
 import { getCleoHome, resolveCleoDir } from '../../paths.js';
 import { resolveDualScopeDbPath } from '../dual-scope-db.js';
 // ---------------------------------------------------------------------------
+// Disk pre-flight sizing constants (right-sized — T11838)
+// ---------------------------------------------------------------------------
+/**
+ * Headroom multiplier applied to the LARGEST single source when sizing the
+ * staging-copy footprint. The staging dir only ever holds ONE source backup at a
+ * time (its advisory lock is released before the next source is touched), so the
+ * peak staging footprint is the largest source plus a small slack for the
+ * write-then-rename journal + SQLite sidecars — hence `1.2×`, not `3×` of the SUM.
+ *
+ * @task T11838
+ */
+export const STAGING_HEADROOM_FACTOR = 1.2;
+/**
+ * Per-source byte threshold above which the full staging `copyFileSync` backup
+ * is skipped (the source is archived, not deleted, on success). Sized at 256 MiB
+ * — comfortably above the small project DBs (tasks/conduit/skills/signaldock are
+ * sub-MB to low-MB) but below the large global stores (a multi-GB `brain.db` or
+ * `nexus.db`) whose redundant full-file copy is the costly case T11838 removes.
+ *
+ * @task T11838
+ */
+export const STAGING_COPY_SKIP_THRESHOLD_BYTES = 256 * 1024 * 1024; // 256 MiB
+/**
+ * Compute the right-sized free-disk requirement for an exodus run (T11838).
+ *
+ * `STAGING_HEADROOM_FACTOR * largestSourceBytes` covers the peak staging-copy
+ * footprint (one source at a time, plus slack), and `totalSourceBytes` is the
+ * consolidated-cleo.db estimate (every source's row data lands there). The two
+ * are additive because staging and the consolidated DB coexist on disk until the
+ * sources are archived.
+ *
+ * @param totalSourceBytes   - Combined size of all source DB files in bytes.
+ * @param largestSourceBytes - Size of the single largest source DB in bytes.
+ * @returns The minimum free bytes the target filesystem must have.
+ */
+export function computeRequiredBytes(totalSourceBytes, largestSourceBytes) {
+    return Math.ceil(STAGING_HEADROOM_FACTOR * largestSourceBytes) + totalSourceBytes;
+}
+// ---------------------------------------------------------------------------
 // Legacy DB descriptors (AC2 — 6 per-machine source DBs mapped to 2 targets)
 // ---------------------------------------------------------------------------
 /**
@@ -137,17 +185,24 @@ function findExistingStaging(cleoDir) {
  *   `process.cwd()`.
  * @returns {@link ExodusPlan} describing sources, disk availability, and paths.
  *
- * @task T11248 (AC8 — 3× disk pre-flight)
+ * @task T11248 (AC8 — disk pre-flight)
+ * @task T11838 (right-sized: largest-source factor + consolidated estimate)
  */
 export function buildExodusPlan(cwd) {
     const cleoDir = resolveCleoDir(cwd);
     const sources = buildSourceDescriptors(cwd);
-    // Compute total source size (only existing files count toward the check)
-    const totalSourceBytes = sources.reduce((sum, s) => sum + safeFileBytes(s.path), 0);
-    // Disk pre-flight: check against the directory that will hold the staging data
-    // (the .cleo/ dir, which is where both the backup and staging live).
+    // Per-source sizes (only existing files contribute) — drive both the total
+    // and the largest-single-source factor of the right-sized preflight (T11838).
+    const sourceBytes = sources.map((s) => safeFileBytes(s.path));
+    const totalSourceBytes = sourceBytes.reduce((sum, b) => sum + b, 0);
+    const largestSourceBytes = sourceBytes.reduce((max, b) => Math.max(max, b), 0);
+    // Right-sized disk pre-flight (T11838): exodus never holds 3× the SUM of all
+    // sources at once — it stages ONE source at a time and writes one consolidated
+    // cleo.db (≈ totalSourceBytes). Check against the directory that will hold the
+    // staging data (the .cleo/ dir, where both backup + staging live).
+    const requiredBytes = computeRequiredBytes(totalSourceBytes, largestSourceBytes);
     const availableBytes = getAvailableBytes(cleoDir);
-    const diskPreflight = totalSourceBytes === 0 || availableBytes >= 3 * totalSourceBytes;
+    const diskPreflight = totalSourceBytes === 0 || availableBytes >= requiredBytes;
     // Staging directory — resume if a previous one exists
     const existingStaging = findExistingStaging(cleoDir);
     const stagingDir = existingStaging ?? join(cleoDir, deriveStagingDirName());
@@ -158,8 +213,11 @@ export function buildExodusPlan(cwd) {
     return {
         sources,
         totalSourceBytes,
+        largestSourceBytes,
+        requiredBytes,
         availableBytes,
         diskPreflight,
+        stagingCopyThresholdBytes: STAGING_COPY_SKIP_THRESHOLD_BYTES,
         stagingDir,
         resumeFromStaging,
         projectDbPath,

package/dist/store/exodus/plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/store/exodus/plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAG7D,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAY;IAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,OAAO;QACL,4DAA4D;QAC5D;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;YAC/B,WAAW,EAAE,SAAS;SACvB;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;YAC/B,WAAW,EAAE,SAAS;SACvB;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;YACjC,WAAW,EAAE,SAAS;SACvB;QACD,0DAA0D;QAC1D;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;YAChC,WAAW,EAAE,QAAQ;SACtB;QACD;YACE,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC;YACrC,WAAW,EAAE,QAAQ;SACtB;QACD;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;YACjC,WAAW,EAAE,QAAQ;SACtB;KACO,CAAC;AACb,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,2EAA2E;QAC3E,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;SACnB,WAAW,EAAE;SACb,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,kBAAkB,GAAG,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,OAAO;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;aACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,EAAE;aACN,OAAO,EAAE,CAAC,CAAC,oBAAoB;QAClC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAE5C,yEAAyE;IACzE,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAEpF,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,gBAAgB,KAAK,CAAC,IAAI,cAAc,IAAI,CAAC,GAAG,gBAAgB,CAAC;IAEvF,sDAAsD;IACtD,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC5E,MAAM,iBAAiB,GAAG,eAAe,KAAK,IAAI,CAAC;IAEnD,sCAAsC;IACtC,MAAM,aAAa,GAAG,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAEtD,OAAO;QACL,OAAO;QACP,gBAAgB;QAChB,cAAc;QACd,aAAa;QACb,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAA6B;IAC1D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/store/exodus/plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAG7D,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAY,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,UAAU;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,gBAAwB,EAAE,kBAA0B;IACvF,OAAO,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,kBAAkB,CAAC,GAAG,gBAAgB,CAAC;AACpF,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAY;IAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,OAAO;QACL,4DAA4D;QAC5D;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;YAC/B,WAAW,EAAE,SAAS;SACvB;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;YAC/B,WAAW,EAAE,SAAS;SACvB;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;YACjC,WAAW,EAAE,SAAS;SACvB;QACD,0DAA0D;QAC1D;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;YAChC,WAAW,EAAE,QAAQ;SACtB;QACD;YACE,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC;YACrC,WAAW,EAAE,QAAQ;SACtB;QACD;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;YACjC,WAAW,EAAE,QAAQ;SACtB;KACO,CAAC;AACb,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,2EAA2E;QAC3E,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;SACnB,WAAW,EAAE;SACb,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,kBAAkB,GAAG,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,OAAO;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;aACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,EAAE;aACN,OAAO,EAAE,CAAC,CAAC,oBAAoB;QAClC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAE5C,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/E,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,mEAAmE;IACnE,MAAM,aAAa,GAAG,oBAAoB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACjF,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,gBAAgB,KAAK,CAAC,IAAI,cAAc,IAAI,aAAa,CAAC;IAEhF,sDAAsD;IACtD,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC5E,MAAM,iBAAiB,GAAG,eAAe,KAAK,IAAI,CAAC;IAEnD,sCAAsC;IACtC,MAAM,aAAa,GAAG,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAEtD,OAAO;QACL,OAAO;QACP,gBAAgB;QAChB,kBAAkB;QAClB,aAAa;QACb,cAAc;QACd,aAAa;QACb,yBAAyB,EAAE,iCAAiC;QAC5D,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAA6B;IAC1D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/store/exodus/seal.d.ts

@@ -0,0 +1,69 @@
+/**
+ * `cleo exodus seal` core — certify an already-migrated install (T11837).
+ *
+ * Some installs were cut over to the consolidated `cleo.db` BEFORE the archive +
+ * completion-marker subsystem (T11777) existed: their data is fully in `cleo.db`
+ * but the legacy source DBs were never archived and no `exodus-complete` marker
+ * was written, so `exodus-on-open` keeps re-arming (the ~34s-per-command tax)
+ * unless muzzled by `CLEO_DISABLE_EXODUS_ON_OPEN`. `cleo exodus migrate` would
+ * complete the archival — but it routes through the heavy `verifyMigration`
+ * digest, which OOMs on a 1.7 GB-class legacy `brain.db`.
+ *
+ * `sealExodus` closes the loop WITHOUT a destructive re-migrate and WITHOUT the
+ * OOM digest: it gates on the memory-safe COUNT(*) deficit check
+ * ({@link computeCountParity}) — the SAME gate (`target >= source`) the archive
+ * path enforces — and, only when no rows are missing, archives the consumed
+ * legacy sources (reversible move) and writes the per-scope completion marker.
+ *
+ * @task T11837 (fleet-flow surface — seal an already-migrated install)
+ * @epic T11833 (EP-EXODUS-FLEET-HARDENING)
+ * @saga T11242 (SG-DB-SUBSTRATE-V2)
+ */
+import { type CountParityResult } from './count-parity.js';
+import type { ExodusPlan, ExodusScope } from './types.js';
+/** Scope selector for {@link sealExodus}. */
+export type SealScopeArg = ExodusScope | 'both';
+/** Per-scope outcome of a seal. */
+export interface SealScopeOutcome {
+    /** Scope certified. */
+    readonly scope: ExodusScope;
+    /** `true` if a completion marker already existed (re-seal is idempotent). */
+    readonly alreadySealed: boolean;
+    /** Per-source archive outcomes for this scope. */
+    readonly archived: ReadonlyArray<{
+        readonly name: string;
+        readonly action: 'archived' | 'absent';
+        readonly archivedTo: string | null;
+    }>;
+    /** Absolute path of the completion marker written. */
+    readonly markerPath: string;
+}
+/** Result of {@link sealExodus}. */
+export interface SealResult {
+    /** `true` when the seal proceeded; `false` when refused on a parity deficit. */
+    readonly ok: boolean;
+    /** Populated when `ok === false`: why the seal was refused. */
+    readonly refusedReason?: string;
+    /** The COUNT(*)-only parity sweep that gated the seal. */
+    readonly parity: CountParityResult;
+    /** Per-scope outcomes (empty when refused). */
+    readonly scopes: readonly SealScopeOutcome[];
+}
+/**
+ * Seal one or more scopes of an already-migrated install: gate on COUNT(*) parity
+ * (no digest), then archive the consumed legacy sources + write the completion
+ * marker. Refuses (archives nothing) if ANY table has a deficit — the data is not
+ * fully in `cleo.db` and the operator must run `cleo exodus migrate` first.
+ *
+ * Idempotent + reversible: archiving is a `rename` (never delete) and a re-seal
+ * over an already-sealed scope simply refreshes the marker.
+ *
+ * @param plan     - The exodus plan (`buildExodusPlan(cwd)`).
+ * @param scopeArg - Which scope(s) to seal.
+ * @param cwd      - Working directory used to resolve the project dir.
+ * @returns A {@link SealResult}.
+ *
+ * @task T11837
+ */
+export declare function sealExodus(plan: ExodusPlan, scopeArg: SealScopeArg, cwd: string | undefined): SealResult;
+//# sourceMappingURL=seal.d.ts.map

package/dist/store/exodus/seal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/seal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAE,KAAK,iBAAiB,EAAsB,MAAM,mBAAmB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI1D,6CAA6C;AAC7C,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,MAAM,CAAC;AAEhD,mCAAmC;AACnC,MAAM,WAAW,gBAAgB;IAC/B,uBAAuB;IACvB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;QACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KACpC,CAAC,CAAC;IACH,sDAAsD;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAOD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,YAAY,EACtB,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,UAAU,CAqCZ"}

package/dist/store/exodus/seal.js

@@ -0,0 +1,73 @@
+/**
+ * `cleo exodus seal` core — certify an already-migrated install (T11837).
+ *
+ * Some installs were cut over to the consolidated `cleo.db` BEFORE the archive +
+ * completion-marker subsystem (T11777) existed: their data is fully in `cleo.db`
+ * but the legacy source DBs were never archived and no `exodus-complete` marker
+ * was written, so `exodus-on-open` keeps re-arming (the ~34s-per-command tax)
+ * unless muzzled by `CLEO_DISABLE_EXODUS_ON_OPEN`. `cleo exodus migrate` would
+ * complete the archival — but it routes through the heavy `verifyMigration`
+ * digest, which OOMs on a 1.7 GB-class legacy `brain.db`.
+ *
+ * `sealExodus` closes the loop WITHOUT a destructive re-migrate and WITHOUT the
+ * OOM digest: it gates on the memory-safe COUNT(*) deficit check
+ * ({@link computeCountParity}) — the SAME gate (`target >= source`) the archive
+ * path enforces — and, only when no rows are missing, archives the consumed
+ * legacy sources (reversible move) and writes the per-scope completion marker.
+ *
+ * @task T11837 (fleet-flow surface — seal an already-migrated install)
+ * @epic T11833 (EP-EXODUS-FLEET-HARDENING)
+ * @saga T11242 (SG-DB-SUBSTRATE-V2)
+ */
+import { getLogger } from '../../logger.js';
+import { archiveSourceDb, hasExodusCompleteMarker, writeExodusCompleteMarker } from './archive.js';
+import { computeCountParity } from './count-parity.js';
+const log = getLogger('exodus-seal');
+/** Resolve a {@link SealScopeArg} to the concrete scopes it covers. */
+function resolveScopes(arg) {
+    return arg === 'both' ? ['project', 'global'] : [arg];
+}
+/**
+ * Seal one or more scopes of an already-migrated install: gate on COUNT(*) parity
+ * (no digest), then archive the consumed legacy sources + write the completion
+ * marker. Refuses (archives nothing) if ANY table has a deficit — the data is not
+ * fully in `cleo.db` and the operator must run `cleo exodus migrate` first.
+ *
+ * Idempotent + reversible: archiving is a `rename` (never delete) and a re-seal
+ * over an already-sealed scope simply refreshes the marker.
+ *
+ * @param plan     - The exodus plan (`buildExodusPlan(cwd)`).
+ * @param scopeArg - Which scope(s) to seal.
+ * @param cwd      - Working directory used to resolve the project dir.
+ * @returns A {@link SealResult}.
+ *
+ * @task T11837
+ */
+export function sealExodus(plan, scopeArg, cwd) {
+    // Memory-safe gate — NEVER the heavy verifyMigration digest (this whole epic
+    // exists to avoid OOMing it on a 1.7 GB-class legacy brain.db).
+    const parity = computeCountParity(plan.sources, plan.projectDbPath, plan.globalDbPath);
+    if (!parity.ok) {
+        const refusedReason = `Refusing to seal: ${parity.deficits.length} table(s) have FEWER rows in the ` +
+            `consolidated cleo.db than the legacy source — the data is NOT fully migrated. Run ` +
+            `\`cleo exodus migrate\` first. Deficits: ${parity.deficits
+                .map((d) => `${d.targetTable}(${d.sourceCount}→${d.targetCount})`)
+                .join(', ')}`;
+        log.error({ deficits: parity.deficits.length }, `exodus seal refused — ${refusedReason}`);
+        return { ok: false, refusedReason, parity, scopes: [] };
+    }
+    const outcomes = [];
+    for (const scope of resolveScopes(scopeArg)) {
+        const alreadySealed = hasExodusCompleteMarker(scope, cwd);
+        const scopeSources = plan.sources.filter((s) => s.targetScope === scope);
+        const archived = scopeSources.map((s) => {
+            const r = archiveSourceDb(s, cwd);
+            return { name: r.name, action: r.action, archivedTo: r.archivedTo };
+        });
+        const markerPath = writeExodusCompleteMarker(scope, scopeSources.map((s) => s.name), cwd);
+        log.info({ scope, alreadySealed, archived: archived.filter((a) => a.action === 'archived').length }, `exodus seal: scope '${scope}' certified (count-parity verified, ${parity.checked} tables)`);
+        outcomes.push({ scope, alreadySealed, archived, markerPath });
+    }
+    return { ok: true, parity, scopes: outcomes };
+}
+//# sourceMappingURL=seal.js.map

package/dist/store/exodus/seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../../src/store/exodus/seal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACnG,OAAO,EAA0B,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAG/E,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;AAiCrC,uEAAuE;AACvE,SAAS,aAAa,CAAC,GAAiB;IACtC,OAAO,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,UAAU,CACxB,IAAgB,EAChB,QAAsB,EACtB,GAAuB;IAEvB,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAEvF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,aAAa,GACjB,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,mCAAmC;YAC9E,oFAAoF;YACpF,4CAA4C,MAAM,CAAC,QAAQ;iBACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC;iBACjE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,yBAAyB,aAAa,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACtC,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,yBAAyB,CAC1C,KAAK,EACL,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAC/B,GAAG,CACJ,CAAC;QACF,GAAG,CAAC,IAAI,CACN,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,EAAE,EAC1F,uBAAuB,KAAK,uCAAuC,MAAM,CAAC,OAAO,UAAU,CAC5F,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAChD,CAAC"}

package/dist/store/exodus/types.d.ts

@@ -97,10 +97,33 @@ export interface ExodusPlan {
     readonly sources: LegacyDbDescriptor[];
     /** Combined size of all source DB files in bytes. */
     readonly totalSourceBytes: number;
+    /**
+     * Size of the SINGLE largest source DB file in bytes. The right-sized disk
+     * preflight is driven by this (the staging copy only ever holds one source at
+     * a time before its lock is released), NOT by {@link totalSourceBytes} (T11838).
+     */
+    readonly largestSourceBytes: number;
+    /**
+     * Right-sized free-disk requirement in bytes:
+     * `STAGING_HEADROOM_FACTOR * largestSourceBytes + consolidatedEstimate`, where
+     * `consolidatedEstimate ≈ totalSourceBytes` (all source rows land in the
+     * consolidated cleo.db). Replaces the historical `3 * totalSourceBytes`
+     * over-estimate that blocked large-fleet migrations (T11838).
+     */
+    readonly requiredBytes: number;
     /** Available disk bytes on the target filesystem. */
     readonly availableBytes: number;
-    /** Whether the 3× free-disk pre-flight passes. */
+    /** Whether the right-sized free-disk pre-flight passes. */
     readonly diskPreflight: boolean;
+    /**
+     * Per-source byte threshold above which the full {@link LegacyDbDescriptor}
+     * staging `copyFileSync` backup is SKIPPED (T11838). The legacy source is
+     * archived (renamed into `_archive/`), not deleted, on success — so a redundant
+     * full-file backup of a large source only doubles its disk + I/O cost. Sources
+     * at or below this threshold still get the staging backup (cheap rollback
+     * safety for the common small-fleet case).
+     */
+    readonly stagingCopyThresholdBytes: number;
     /** Absolute path to the staging directory. */
     readonly stagingDir: string;
     /** Whether a staging directory from a previous run was found (resume mode). */

package/dist/store/exodus/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,0CAA0C;AAC1C,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6DAA6D;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACvC,qDAAqD;IACrD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,qDAAqD;IACrD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAC/B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IACvC,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,2CAA2C;IAC3C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,EAAG,wCAAiD,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,0CAA0C;AAC1C,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6DAA6D;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACvC,qDAAqD;IACrD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC;;;;;;;OAOG;IACH,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAC/B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IACvC,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,2CAA2C;IAC3C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,EAAG,wCAAiD,CAAC"}

package/dist/store/exodus/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/store/exodus/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAqKH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,wCAAiD,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/store/exodus/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA4LH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,wCAAiD,CAAC"}

package/dist/store/exodus/verify-migration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-migration.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/verify-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAKH,OAAO,KAAK,EAIV,qBAAqB,EACtB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,KAAK,EAAe,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA2clE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,qBAAqB,CAqRvB"}
+{"version":3,"file":"verify-migration.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/verify-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAKH,OAAO,KAAK,EAIV,qBAAqB,EACtB,MAAM,qBAAqB,CAAC;AAU7B,OAAO,KAAK,EAAe,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAolBlE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,qBAAqB,CA+RvB"}

package/dist/store/exodus/verify-migration.js

@@ -45,6 +45,7 @@ import { createRequire } from 'node:module';
 import { MIGRATION_ENUM_DRIFT_SAMPLE_LIMIT } from '@cleocode/contracts';
 import { getLogger } from '../../logger.js';
 import { openCleoDbSnapshot } from '../open-cleo-db.js';
+import { buildDigestExpr, detectIsoGlobColumns, } from './column-transforms.js';
 import { resolveConsolidatedTableName, resolveTableTargetScope } from './table-name-map.js';
 const log = getLogger('verify-migration');
 const _require = createRequire(import.meta.url);
@@ -90,44 +91,89 @@ function orderByClause(db, tableName) {
  * 4). Returns `{ count: 0, hash: '' }` for virtual tables that cannot be
  * selected from, rather than throwing.
  *
+ * ## Source-side coercion (T11809 · AC2)
+ *
+ * When `transform` is provided (SOURCE side only), each column is SELECTed
+ * through {@link buildDigestExpr} — the SAME epoch→ISO / enum-normalize /
+ * non-finite-clamp transforms the migration applied — and aliased back to its
+ * original name so the canonical-key serialisation matches the (already
+ * canonical) target row. The TARGET side passes `transform === undefined` and
+ * digests its stored values raw.
+ *
  * @param db         - Database handle to query.
  * @param tableName  - Physical table name.
  * @param columns    - Explicit column list in canonical order, or `null` for
  *   `SELECT *` (used when there is no counterpart table to intersect with).
+ * @param transform  - Source-side transform spec, or `undefined` for the raw
+ *   (target-side) digest.
  * @returns `{ count, hash }` for the table.
  */
-function computeTableDigest(db, tableName, columns) {
-    const { createHash } = _require('node:crypto');
-    const hasher = createHash('sha256');
-    const orderBy = orderByClause(db, tableName);
-    const selectClause = columns !== null && columns.length > 0 ? columns.map((c) => `"${c}"`).join(', ') : '*';
-    let rows;
+function computeTableDigest(db, tableName, columns, transform) {
+    // Row count — a cheap, set-based `COUNT(*)` that never materialises rows.
+    //
+    // This is the value the data-continuity gate ({@link isDataContinuityOk})
+    // consumes to decide deficit/surplus, so it MUST stay independent of the heavy
+    // content digest below: the migrate-time verify can then pass/fail on counts
+    // alone even when the digest is large or streaming-slow (T11834).
+    let count = 0;
     try {
-        rows = db
-            .prepare(`SELECT ${selectClause} FROM "${tableName}" ORDER BY ${orderBy}`)
-            .all();
+        const row = db.prepare(`SELECT COUNT(*) AS c FROM "${tableName}"`).get();
+        count = Number(row?.c ?? 0);
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        log.warn({ tableName, err: msg }, 'computeTableDigest: SELECT failed (possibly a virtual/FTS table) — treating as 0 rows');
+        log.warn({ tableName, err: msg }, 'computeTableDigest: COUNT(*) failed (possibly a virtual/FTS table) — treating as 0 rows');
         return { count: 0, hash: '' };
     }
-    // Canonicalise each row's property order before hashing (T11782 · FIX A).
+    const { createHash } = _require('node:crypto');
+    const hasher = createHash('sha256');
+    const orderBy = orderByClause(db, tableName);
+    let selectClause;
+    if (columns !== null && columns.length > 0) {
+        selectClause = columns
+            .map((c) => {
+            if (transform === undefined)
+                return `"${c}"`;
+            // SOURCE side: route the raw value through the SAME transform migrate
+            // applied, aliased back to `c` so the row key matches the target side.
+            const srcType = transform.srcTypeByCol.get(c) ?? '';
+            const tgtCol = transform.tgtColByCol.get(c);
+            const expr = buildDigestExpr(transform.targetTableName, c, srcType, transform.isoGlobCols, tgtCol);
+            return `${expr} AS "${c}"`;
+        })
+            .join(', ');
+    }
+    else {
+        selectClause = '*';
+    }
+    // Content digest — STREAMED row-by-row through the statement iterator so peak
+    // heap stays bounded by ONE row regardless of table size (T11834).
+    //
+    // The prior implementation called `.all()`, materialising the ENTIRE table
+    // (SOURCE *and* TARGET) into a JS array — a multi-hundred-MB-to-GB allocation
+    // on a 697K-row / 1.7 GB-class table (e.g. `brain_weight_history`) that OOM'd
+    // the migrate-time verify and rolled back an otherwise-lossless cutover. The
+    // digest is a NON-FATAL diagnostic; the gate is driven by the `COUNT(*)` parity
+    // above + introduced-FK orphans, never this hash.
     //
-    // `JSON.stringify(row)` serialises object keys in the SQLite driver's row
-    // property-insertion order, which is NOT guaranteed identical between the
-    // SOURCE snapshot and the TARGET snapshot for the same logical row (the two
-    // handles may materialise columns in a different order). Identical data would
-    // then digest to a DIFFERENT hash, producing a false `hashMatch === false`
-    // and — historically — false-negative aborts. Passing the SORTED key array as
-    // `JSON.stringify`'s `replacer` forces a canonical, order-independent
-    // serialisation so identical rows always digest identically.
-    for (const row of rows) {
-        const rowObj = row;
-        hasher.update(JSON.stringify(rowObj, Object.keys(rowObj).sort()));
+    // Canonicalise each row's property order before hashing (T11782 · FIX A): pass
+    // the SORTED key array as `JSON.stringify`'s replacer so identical rows digest
+    // identically regardless of the driver's column-materialisation order on the
+    // two snapshots (otherwise a false `hashMatch === false`).
+    try {
+        const stmt = db.prepare(`SELECT ${selectClause} FROM "${tableName}" ORDER BY ${orderBy}`);
+        for (const row of stmt.iterate()) {
+            const rowObj = row;
+            hasher.update(JSON.stringify(rowObj, Object.keys(rowObj).sort()));
+        }
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        log.warn({ tableName, err: msg }, 'computeTableDigest: streamed SELECT failed (possibly a virtual/FTS table) — digest skipped (COUNT(*) parity still enforced)');
+        return { count, hash: '' };
     }
     return {
-        count: rows.length,
+        count,
         hash: hasher.digest('hex').slice(0, 32),
     };
 }
@@ -154,6 +200,40 @@ function sharedColumnsSorted(srcDb, srcTable, tgtDb, tgtTable) {
         return null;
     }
 }
+/**
+ * Build the source-side {@link DigestTransformSpec} for a source→target table
+ * pair: the source column type affinities, the target's ISO-GLOB columns, and
+ * the target column metadata (NOT-NULL flag + default + affinity), keyed by the
+ * consolidated target name (the transform lookup key). The target metadata
+ * drives the NULL→NOT-NULL-default `COALESCE` mirroring (T11836).
+ *
+ * Returns `undefined` (raw digest, no transform) when the source `PRAGMA
+ * table_info` cannot be read — best-effort, biased to surfacing a real
+ * difference rather than masking one.
+ *
+ * @param srcDb           - Source database handle.
+ * @param srcTable        - Physical legacy source table name.
+ * @param tgtDb           - Target database handle (consolidated cleo.db).
+ * @param targetTableName - Physical consolidated target table name.
+ * @returns A transform spec, or `undefined` when source metadata is unavailable.
+ */
+function buildSourceDigestTransform(srcDb, srcTable, tgtDb, targetTableName) {
+    try {
+        const srcTypeByCol = new Map(srcDb.prepare(`PRAGMA table_info("${srcTable}")`).all().map((r) => [r.name, r.type]));
+        const isoGlobCols = detectIsoGlobColumns(tgtDb, targetTableName);
+        // Target column metadata (notnull + dflt_value + type) — drives the
+        // NULL→NOT-NULL-default COALESCE migrate applies, so a stored type default
+        // for a NULL source value digests as a MATCH (T11836).
+        const tgtColByCol = new Map(tgtDb.prepare(`PRAGMA table_info("${targetTableName}")`).all().map((r) => [
+            r.name,
+            { notnull: r.notnull, dflt_value: r.dflt_value, type: r.type },
+        ]));
+        return { targetTableName, srcTypeByCol, isoGlobCols, tgtColByCol };
+    }
+    catch {
+        return undefined;
+    }
+}
 /**
  * List user tables in a DB (excluding SQLite internals + Drizzle journal).
  */
@@ -564,7 +644,12 @@ export function verifyMigration(sources, projectDbPath, globalDbPath, onProgress
                         continue;
                     }
                     const cols = sharedColumnsSorted(srcSnap.db, legacyTableName, targetSnap.db, targetTableName);
-                    const srcDigest = computeTableDigest(srcSnap.db, legacyTableName, cols);
+                    // Source-side coercion spec (T11809 · AC2): digest the SOURCE through
+                    // the SAME transforms migrate applied (epoch→ISO, enum-normalize,
+                    // non-finite clamp) so equal logical data digests EQUAL. The target
+                    // side already holds canonical values and is digested raw.
+                    const srcTransform = buildSourceDigestTransform(srcSnap.db, legacyTableName, targetSnap.db, targetTableName);
+                    const srcDigest = computeTableDigest(srcSnap.db, legacyTableName, cols, srcTransform);
                     const tgtDigest = computeTableDigest(targetSnap.db, targetTableName, cols);
                     const countMatch = srcDigest.count === tgtDigest.count;
                     const hashMatch = srcDigest.hash === tgtDigest.hash;