@cleocode/core 2026.6.5 → 2026.6.7

package/dist/docs/export-document.js

@@ -11251,6 +11251,87 @@ var init_nexus_scope_map = __esm({
   }
 });
 
+// packages/contracts/src/operations/output-contracts-data.ts
+var TASK_MUTATION_DATA_SCHEMA, tasksAddOutputContract, tasksAddBatchOutputContract, tasksUpdateOutputContract, tasksCompleteOutputContract;
+var init_output_contracts_data = __esm({
+  "packages/contracts/src/operations/output-contracts-data.ts"() {
+    "use strict";
+    TASK_MUTATION_DATA_SCHEMA = {
+      type: "object",
+      required: ["count", "created", "updated", "deleted"],
+      additionalProperties: true,
+      properties: {
+        count: { type: "number", description: "Number of records the mutation affected." },
+        created: {
+          type: "array",
+          description: 'Task IDs created by the mutation (bare strings, e.g. "T11692"). Empty for update/delete-only mutations.',
+          items: { type: "string" }
+        },
+        updated: {
+          type: "array",
+          description: "Task IDs updated by the mutation (bare strings). Empty for create/delete-only mutations.",
+          items: { type: "string" }
+        },
+        deleted: {
+          type: "array",
+          description: "Task IDs deleted by the mutation (bare strings). Empty for create/update-only mutations.",
+          items: { type: "string" }
+        },
+        ids: {
+          type: "array",
+          description: "Deprecated alias for the non-empty bucket. Prefer created/updated/deleted.",
+          items: { type: "string" }
+        },
+        dryRun: { type: "boolean", description: "True when this was a preview-only mutation." },
+        status: { type: "string", description: "Post-mutation task status (add/update/complete)." }
+      }
+    };
+    tasksAddOutputContract = {
+      operation: "tasks.add",
+      shapeNote: 'The created task ID (bare string) is at /data/created/0 \u2014 NOT /data/created/0/id. Example: /data/created/0 \u2192 "T11692".',
+      dataSchema: { ...TASK_MUTATION_DATA_SCHEMA },
+      fieldPointers: ["/data/created/0", "/data/count"]
+    };
+    tasksAddBatchOutputContract = {
+      operation: "tasks.add-batch",
+      shapeNote: "Atomic batch insert. Each created task ID (bare string) is in /data/created (array). Dry-run projections are at root: /data/wouldCreate and /data/insertedCount (=0). NOT under /data/dryRunSummary.",
+      dataSchema: {
+        type: "object",
+        required: ["count", "created", "updated", "deleted"],
+        additionalProperties: true,
+        properties: {
+          ...TASK_MUTATION_DATA_SCHEMA.properties,
+          wouldCreate: {
+            type: "number",
+            description: "Dry-run: predicted write count. Present only when dryRun=true."
+          },
+          insertedCount: {
+            type: "number",
+            description: "Dry-run: always 0 (no DB write). Present only when dryRun=true."
+          },
+          wouldAffect: {
+            type: "number",
+            description: "Dry-run: generic affected count. Present only when dryRun=true."
+          }
+        }
+      },
+      fieldPointers: ["/data/created/0", "/data/count", "/data/wouldCreate", "/data/insertedCount"]
+    };
+    tasksUpdateOutputContract = {
+      operation: "tasks.update",
+      shapeNote: "The updated task ID (bare string) is at /data/updated/0 \u2014 NOT /data/updated/0/id. Use /data/status for the post-mutation status.",
+      dataSchema: { ...TASK_MUTATION_DATA_SCHEMA },
+      fieldPointers: ["/data/updated/0", "/data/status", "/data/count"]
+    };
+    tasksCompleteOutputContract = {
+      operation: "tasks.complete",
+      shapeNote: "Completion is a status mutation \u2014 the task ID (bare string) is at /data/updated/0 (status=done). Use /data/status for the post-mutation status.",
+      dataSchema: { ...TASK_MUTATION_DATA_SCHEMA },
+      fieldPointers: ["/data/updated/0", "/data/status", "/data/count"]
+    };
+  }
+});
+
 // packages/contracts/src/peer.ts
 var init_peer = __esm({
   "packages/contracts/src/peer.ts"() {
@@ -12512,6 +12593,7 @@ var init_src = __esm({
     init_docs();
     init_operations();
     init_nexus_scope_map();
+    init_output_contracts_data();
     init_params();
     init_tasks();
     init_peer();
@@ -22514,8 +22596,8 @@ function probeAndMarkApplied(nativeDb, migration, logSubsystem) {
   });
   if (allAltersPresent && allTablesPresent && allIndexesPresent && allTriggersPresent) {
     insertJournalEntry(nativeDb, migration.hash, migration.folderMillis, migration.name ?? "");
-    const log8 = getLogger(logSubsystem);
-    log8.debug(
+    const log10 = getLogger(logSubsystem);
+    log10.debug(
       {
         migration: migration.name,
         alters: alterTargets.length,
@@ -22555,14 +22637,14 @@ function reconcileJournal(nativeDb, migrationsFolder, existenceTable2, logSubsys
     if (hasOrphanedEntries) {
       const dbHashes = new Set(dbEntries.map((e) => e.hash));
       const allLocalHashesPresentInDb = localMigrations.every((m) => dbHashes.has(m.hash));
-      const log8 = getLogger(logSubsystem);
+      const log10 = getLogger(logSubsystem);
       if (allLocalHashesPresentInDb) {
-        log8.debug(
+        log10.debug(
           { extra: orphanedEntries.length },
           `Migration journal has ${orphanedEntries.length} entries for migrations not known to this install (DB is ahead). Skipping reconciliation.`
         );
       } else {
-        log8.warn(
+        log10.warn(
           { orphaned: orphanedEntries.length },
           `Detected ${orphanedEntries.length} true-orphan journal entries from a previous CLEO lineage. Reconciling via DDL probe.`
         );
@@ -22598,8 +22680,8 @@ function reconcileJournal(nativeDb, migrationsFolder, existenceTable2, logSubsys
       if (alterMatches.length === 0) {
         const stripped = fullSql.replace(/--[^\n]*/g, "").replace(/\/\*[\s\S]*?\*\//g, "").trim();
         if (stripped === "") {
-          const log8 = getLogger(logSubsystem);
-          log8.debug(
+          const log10 = getLogger(logSubsystem);
+          log10.debug(
             { migration: migration.name },
             `Migration ${migration.name} is a comment-only baseline marker \u2014 marking applied on existing DB.`
           );
@@ -22636,8 +22718,8 @@ function reconcileJournal(nativeDb, migrationsFolder, existenceTable2, logSubsys
         }
       }
       if (missingColumns.length === 0) {
-        const log8 = getLogger(logSubsystem);
-        log8.warn(
+        const log10 = getLogger(logSubsystem);
+        log10.warn(
           { migration: migration.name, columns: alterMatches },
           `Detected partially-applied migration ${migration.name} \u2014 columns exist but journal entry missing. Auto-reconciling.`
         );
@@ -22645,8 +22727,8 @@ function reconcileJournal(nativeDb, migrationsFolder, existenceTable2, logSubsys
         continue;
       }
       if (existingColumns.length > 0 && missingColumns.length > 0) {
-        const log8 = getLogger(logSubsystem);
-        log8.warn(
+        const log10 = getLogger(logSubsystem);
+        log10.warn(
           {
             migration: migration.name,
             existingColumns: existingColumns.map((c) => `${c.table}.${c.column}`),
@@ -22658,12 +22740,12 @@ function reconcileJournal(nativeDb, migrationsFolder, existenceTable2, logSubsys
           if (!tableExists(nativeDb, table)) continue;
           try {
             nativeDb.exec(`ALTER TABLE ${table} ADD COLUMN ${column}${ddl ? ` ${ddl}` : ""}`);
-            log8.warn(
+            log10.warn(
               { migration: migration.name, table, column },
               `T920: Added missing column ${table}.${column} to complete partial migration.`
             );
           } catch {
-            log8.warn(
+            log10.warn(
               { migration: migration.name, table, column },
               `T920: Could not add missing column ${table}.${column} \u2014 will let Drizzle migrate() handle it.`
             );
@@ -22683,8 +22765,8 @@ function reconcileJournal(nativeDb, migrationsFolder, existenceTable2, logSubsys
     for (const entry of unnamedEntries) {
       const migrationName = hashToName.get(entry.hash);
       if (!migrationName) continue;
-      const log8 = getLogger(logSubsystem);
-      log8.debug(
+      const log10 = getLogger(logSubsystem);
+      log10.debug(
         { id: entry.id, hash: entry.hash, name: migrationName },
         `Backfilling missing name on journal entry id=${entry.id} (Drizzle v1 beta legacy compat).`
       );
@@ -22825,13 +22907,13 @@ function ensureColumns(nativeDb, tableName, requiredColumns, logSubsystem, conte
   const existingCols = new Set(columns.map((c) => c.name));
   for (const req of requiredColumns) {
     if (!existingCols.has(req.name)) {
-      const log8 = getLogger(logSubsystem);
+      const log10 = getLogger(logSubsystem);
       const message = `Adding missing column ${tableName}.${req.name} via ALTER TABLE`;
       const fields = { column: req.name, context };
       if (context === "fresh") {
-        log8.error(fields, `${message} \u2014 MIGRATION DEFECT (fresh DB should not need repair)`);
+        log10.error(fields, `${message} \u2014 MIGRATION DEFECT (fresh DB should not need repair)`);
       } else {
-        log8.warn(fields, message);
+        log10.warn(fields, message);
       }
       nativeDb.exec(`ALTER TABLE ${tableName} ADD COLUMN ${req.name} ${req.ddl}`);
     }
@@ -32023,103 +32105,314 @@ var init_table_name_map = __esm({
   }
 });
 
-// packages/core/src/store/exodus/types.ts
-var EXODUS_TARGET_SCHEMA_VERSION;
-var init_types = __esm({
-  "packages/core/src/store/exodus/types.ts"() {
-    "use strict";
-    EXODUS_TARGET_SCHEMA_VERSION = "drizzle-v1.0.0-rc.3/dual-scope/2026-05";
-  }
-});
-
-// packages/core/src/store/exodus/migrate.ts
-import {
-  copyFileSync as copyFileSync3,
-  existsSync as existsSync7,
-  mkdirSync as mkdirSync2,
-  readFileSync as readFileSync3,
-  renameSync as renameSync2,
-  unlinkSync as unlinkSync2,
-  writeFileSync as writeFileSync3
-} from "node:fs";
-import { join as join9 } from "node:path";
-function getSqliteVersion(db) {
-  try {
-    const row = db.prepare("SELECT sqlite_version() AS v").get();
-    return row?.v ?? "unknown";
-  } catch {
-    return "unknown";
-  }
-}
+// packages/core/src/store/exodus/count-parity.ts
+import { existsSync as existsSync7 } from "node:fs";
 function listTables(db) {
-  const rows = db.prepare(
+  return db.prepare(
     "SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' AND name NOT LIKE '__drizzle_%' ORDER BY name"
-  ).all();
-  return rows.map((r) => r.name);
+  ).all().map((r) => r.name);
 }
-function writeJournal(stagingDir, journal) {
-  const journalPath = join9(stagingDir, JOURNAL_FILENAME);
-  const tmpPath = `${journalPath}.tmp`;
-  writeFileSync3(tmpPath, JSON.stringify(journal, null, 2) + "\n", "utf8");
-  renameSync2(tmpPath, journalPath);
+function tableExists2(db, tableName) {
+  const escaped = tableName.replace(/'/g, "''");
+  return db.prepare(`SELECT 1 FROM sqlite_master WHERE type='table' AND name='${escaped}'`).get() !== void 0;
 }
-function readJournal(stagingDir) {
-  const journalPath = join9(stagingDir, JOURNAL_FILENAME);
-  if (!existsSync7(journalPath)) return null;
+function rowCount(db, tableName) {
   try {
-    return JSON.parse(readFileSync3(journalPath, "utf8"));
+    const row = db.prepare(`SELECT COUNT(*) AS c FROM "${tableName}"`).get();
+    return Number(row?.c ?? 0);
   } catch {
     return null;
   }
 }
-function clearExodusJournal(stagingDir) {
-  const journalPath = join9(stagingDir, JOURNAL_FILENAME);
+function computeCountParity(sources, projectDbPath, globalDbPath) {
+  const entries = [];
+  let skipped = 0;
+  if (!existsSync7(projectDbPath) || !existsSync7(globalDbPath)) {
+    return { ok: false, entries: [], deficits: [], checked: 0, skipped: 0 };
+  }
+  const projectSnap = openCleoDbSnapshot(projectDbPath, { readOnly: true });
+  const globalSnap = openCleoDbSnapshot(globalDbPath, { readOnly: true });
   try {
-    if (!existsSync7(journalPath)) return false;
-    unlinkSync2(journalPath);
-    log2.info(
-      { stagingDir },
-      "exodus: cleared migrate journal after abort/rollback \u2014 a retry will RE-COPY all tables"
-    );
-    return true;
-  } catch (err) {
+    for (const src of sources) {
+      if (!existsSync7(src.path)) continue;
+      const srcSnap = openCleoDbSnapshot(src.path, { readOnly: true });
+      try {
+        for (const legacyTable of listTables(srcSnap.db)) {
+          const resolution = resolveConsolidatedTableName(src.name, legacyTable);
+          if (resolution.kind === "skip") {
+            skipped++;
+            continue;
+          }
+          const targetTable = resolution.targetName;
+          const scope = resolveTableTargetScope(src.name, legacyTable, src.targetScope);
+          const targetSnap = scope === "project" ? projectSnap : globalSnap;
+          const sourceCount = rowCount(srcSnap.db, legacyTable);
+          if (sourceCount === null) {
+            skipped++;
+            continue;
+          }
+          const targetCount = tableExists2(targetSnap.db, targetTable) ? rowCount(targetSnap.db, targetTable) ?? 0 : 0;
+          const deficit = targetCount < sourceCount ? sourceCount - targetCount : 0;
+          entries.push({
+            sourceDb: src.name,
+            sourceTable: legacyTable,
+            targetTable,
+            scope,
+            sourceCount,
+            targetCount,
+            deficit
+          });
+        }
+      } finally {
+        srcSnap.close();
+      }
+    }
+  } finally {
+    projectSnap.close();
+    globalSnap.close();
+  }
+  const deficits = entries.filter((e) => e.deficit > 0);
+  if (deficits.length > 0) {
     log2.warn(
-      { err, stagingDir },
-      'exodus: failed to clear migrate journal after rollback (a retry may skip already-"done" tables)'
+      { deficitCount: deficits.length, sample: deficits.slice(0, 5) },
+      `exodus count-parity: ${deficits.length} table(s) have FEWER rows in the consolidated target than the legacy source`
     );
-    return false;
   }
+  return { ok: deficits.length === 0, entries, deficits, checked: entries.length, skipped };
 }
-function initJournal(sqliteVersion) {
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  return {
-    version: 1,
-    cleoVersion: getCleoVersion(),
-    targetSchemaVersion: EXODUS_TARGET_SCHEMA_VERSION,
-    nodeVersion: process.version,
-    sqliteVersion,
-    startedAt: now,
-    updatedAt: now,
-    tables: []
-  };
+var log2;
+var init_count_parity = __esm({
+  "packages/core/src/store/exodus/count-parity.ts"() {
+    "use strict";
+    init_logger2();
+    init_open_cleo_db();
+    init_table_name_map();
+    log2 = getLogger("exodus-count-parity");
+  }
+});
+
+// packages/core/src/store/exodus/plan.ts
+import { existsSync as existsSync8, readdirSync as readdirSync2, statfsSync, statSync as statSync2 } from "node:fs";
+import { join as join9 } from "node:path";
+function computeRequiredBytes(totalSourceBytes, largestSourceBytes) {
+  return Math.ceil(STAGING_HEADROOM_FACTOR * largestSourceBytes) + totalSourceBytes;
 }
-function lockPath(dbPath) {
-  return `${dbPath}${LOCK_SENTINEL_SUFFIX}`;
+function buildSourceDescriptors(cwd) {
+  const cleoDir = resolveCleoDir(cwd);
+  const cleoHome = getCleoHome();
+  return [
+    // Project-tier — go into consolidated project-scope cleo.db
+    {
+      name: "tasks",
+      path: join9(cleoDir, "tasks.db"),
+      targetScope: "project"
+    },
+    {
+      name: "brain (project)",
+      path: join9(cleoDir, "brain.db"),
+      targetScope: "project"
+    },
+    {
+      name: "conduit",
+      path: join9(cleoDir, "conduit.db"),
+      targetScope: "project"
+    },
+    // Global-tier — go into consolidated global-scope cleo.db
+    {
+      name: "nexus",
+      path: join9(cleoHome, "nexus.db"),
+      targetScope: "global"
+    },
+    {
+      name: "signaldock",
+      path: join9(cleoHome, "signaldock.db"),
+      targetScope: "global"
+    },
+    {
+      name: "skills",
+      path: join9(cleoHome, "skills.db"),
+      targetScope: "global"
+    }
+  ];
 }
-function acquireAdvisoryLock(dbPath) {
-  const lp = lockPath(dbPath);
-  writeFileSync3(lp, JSON.stringify({ pid: process.pid, ts: (/* @__PURE__ */ new Date()).toISOString() }), "utf8");
+function safeFileBytes(filePath) {
+  try {
+    return statSync2(filePath).size;
+  } catch {
+    return 0;
+  }
 }
-function releaseAdvisoryLock(dbPath) {
+function getAvailableBytes(dir) {
   try {
-    unlinkSync2(lockPath(dbPath));
+    const result = statfsSync(dir);
+    return (result.bavail ?? result.bfree ?? 0) * (result.bsize ?? 4096);
   } catch {
+    return 0;
   }
 }
-function makeAttachAlias(name2, index2) {
-  const safe = name2.replace(/[^a-z0-9]/gi, "_").replace(/_+/g, "_").slice(0, 20);
-  return `_src_${safe}_${index2}`;
+function deriveStagingDirName() {
+  const iso = (/* @__PURE__ */ new Date()).toISOString().replace(/[:]/g, "").replace(/\..+Z$/, "Z");
+  return `exodus-staging-${iso}`;
+}
+function findExistingStaging(cleoDir) {
+  try {
+    const entries = readdirSync2(cleoDir, { withFileTypes: true });
+    const stagingDirs = entries.filter((e) => e.isDirectory() && e.name.startsWith("exodus-staging-")).map((e) => e.name).sort().reverse();
+    if (stagingDirs.length > 0) {
+      return join9(cleoDir, stagingDirs[0]);
+    }
+  } catch {
+  }
+  return null;
+}
+function buildExodusPlan(cwd) {
+  const cleoDir = resolveCleoDir(cwd);
+  const sources = buildSourceDescriptors(cwd);
+  const sourceBytes = sources.map((s) => safeFileBytes(s.path));
+  const totalSourceBytes = sourceBytes.reduce((sum, b) => sum + b, 0);
+  const largestSourceBytes = sourceBytes.reduce((max, b) => Math.max(max, b), 0);
+  const requiredBytes = computeRequiredBytes(totalSourceBytes, largestSourceBytes);
+  const availableBytes = getAvailableBytes(cleoDir);
+  const diskPreflight = totalSourceBytes === 0 || availableBytes >= requiredBytes;
+  const existingStaging = findExistingStaging(cleoDir);
+  const stagingDir = existingStaging ?? join9(cleoDir, deriveStagingDirName());
+  const resumeFromStaging = existingStaging !== null;
+  const projectDbPath = resolveDualScopeDbPath("project", cwd);
+  const globalDbPath = resolveDualScopeDbPath("global");
+  return {
+    sources,
+    totalSourceBytes,
+    largestSourceBytes,
+    requiredBytes,
+    availableBytes,
+    diskPreflight,
+    stagingCopyThresholdBytes: STAGING_COPY_SKIP_THRESHOLD_BYTES,
+    stagingDir,
+    resumeFromStaging,
+    projectDbPath,
+    globalDbPath
+  };
+}
+function sourcesPresent(sources) {
+  return sources.some((s) => existsSync8(s.path));
+}
+var STAGING_HEADROOM_FACTOR, STAGING_COPY_SKIP_THRESHOLD_BYTES;
+var init_plan2 = __esm({
+  "packages/core/src/store/exodus/plan.ts"() {
+    "use strict";
+    init_paths();
+    init_dual_scope_db();
+    STAGING_HEADROOM_FACTOR = 1.2;
+    STAGING_COPY_SKIP_THRESHOLD_BYTES = 256 * 1024 * 1024;
+  }
+});
+
+// packages/core/src/store/exodus/health.ts
+import { existsSync as existsSync9, statSync as statSync3 } from "node:fs";
+function buildExodusHealth(cwd) {
+  const plan = buildExodusPlan(cwd);
+  const anyLegacyPresent = plan.sources.some((s) => existsSync9(s.path));
+  const parity = anyLegacyPresent ? computeCountParity(plan.sources, plan.projectDbPath, plan.globalDbPath) : { ok: true, entries: [], deficits: [], checked: 0, skipped: 0 };
+  const consolidatedExistsByScope = {
+    project: existsSync9(plan.projectDbPath),
+    global: existsSync9(plan.globalDbPath)
+  };
+  const buildScope = (scope) => {
+    const sources = plan.sources.filter((s) => s.targetScope === scope).map((s) => {
+      const present = existsSync9(s.path);
+      let bytes = 0;
+      if (present) {
+        try {
+          bytes = statSync3(s.path).size;
+        } catch {
+          bytes = 0;
+        }
+      }
+      return { name: s.name, path: s.path, present, bytes, large: bytes >= LARGE_DB_BYTES };
+    });
+    const markerPresent = hasExodusCompleteMarker(scope, cwd);
+    const legacyPresent = sources.some((s) => s.present);
+    const consolidatedExists = consolidatedExistsByScope[scope];
+    const scopeEntries = parity.entries.filter((e) => e.scope === scope);
+    const scopeHasDeficit = scopeEntries.some((e) => e.deficit > 0);
+    const scopeHasData = scopeEntries.some((e) => e.targetCount > 0);
+    let state;
+    if (markerPresent) {
+      state = "sealed";
+    } else if (legacyPresent && consolidatedExists && scopeHasData && !scopeHasDeficit) {
+      state = "migrated-unsealed";
+    } else if (legacyPresent) {
+      state = "needs-migration";
+    } else {
+      state = "no-cleo-data";
+    }
+    const stranded = sources.filter((s) => s.present && markerPresent).map((s) => s.name);
+    return {
+      scope,
+      state,
+      consolidatedExists,
+      markerPresent,
+      legacySources: sources,
+      strandedResidue: stranded
+    };
+  };
+  const project = buildScope("project");
+  const global = buildScope("global");
+  const largeLegacyDbs = [
+    ...project.legacySources.filter((s) => s.large).map((s) => ({ name: s.name, scope: "project", bytes: s.bytes })),
+    ...global.legacySources.filter((s) => s.large).map((s) => ({ name: s.name, scope: "global", bytes: s.bytes }))
+  ];
+  const recommendations = [];
+  for (const sc of [project, global]) {
+    if (sc.state === "migrated-unsealed") {
+      recommendations.push(
+        `${sc.scope}: data is consolidated but unsealed \u2014 run \`cleo exodus seal --scope ${sc.scope}\` to archive legacy DBs + stop on-open re-firing.`
+      );
+    } else if (sc.state === "needs-migration") {
+      recommendations.push(
+        `${sc.scope}: legacy data not yet consolidated \u2014 run \`cleo exodus migrate --scope ${sc.scope}\`.`
+      );
+    } else if (sc.strandedResidue.length > 0) {
+      recommendations.push(
+        `${sc.scope}: ${sc.strandedResidue.length} stranded legacy DB(s) after a sealed cutover \u2014 run \`cleo doctor exodus-residue --fix\`.`
+      );
+    }
+  }
+  if (largeLegacyDbs.length > 0) {
+    recommendations.push(
+      `${largeLegacyDbs.length} large legacy DB(s) (\u2265500 MB) \u2014 migrate these only with the streamed-verify build (T11834) to avoid the verify OOM.`
+    );
+  }
+  if (!parity.ok) {
+    recommendations.push(
+      `${parity.deficits.length} table(s) show a row deficit in cleo.db \u2014 DO NOT seal; run \`cleo exodus migrate\` first.`
+    );
+  }
+  return {
+    project,
+    global,
+    diskHeadroomOk: plan.diskPreflight,
+    availableBytes: plan.availableBytes,
+    requiredBytes: 3 * plan.totalSourceBytes,
+    killSwitchSet: process.env.CLEO_DISABLE_EXODUS_ON_OPEN === "1",
+    dataParityOk: parity.ok,
+    dataDeficits: parity.deficits.length,
+    largeLegacyDbs,
+    recommendations
+  };
 }
+var LARGE_DB_BYTES;
+var init_health2 = __esm({
+  "packages/core/src/store/exodus/health.ts"() {
+    "use strict";
+    init_archive2();
+    init_count_parity();
+    init_plan2();
+    LARGE_DB_BYTES = 500 * 1024 * 1024;
+  }
+});
+
+// packages/core/src/store/exodus/column-transforms.ts
 function typeDefaultLiteral(colType) {
   const upper = colType.toUpperCase();
   if (upper.includes("INT")) return "0";
@@ -32137,13 +32430,6 @@ function numericClampExpr(targetTableName, col, srcRef) {
   const fn = NUMERIC_CLAMPS.get(key);
   return fn ? fn(srcRef) : null;
 }
-function epochUnitForSource(sourceName) {
-  const key = sourceName.toLowerCase();
-  for (const [pattern, unit] of SOURCE_EPOCH_UNITS) {
-    if (key === pattern || key.startsWith(pattern)) return unit;
-  }
-  return "seconds";
-}
 function buildEpochToIsoExpr(srcRef) {
   return `CASE WHEN ${srcRef} IS NULL THEN NULL WHEN ${srcRef} < ${EPOCH_SECONDS_THRESHOLD} THEN strftime('%Y-%m-%dT%H:%M:%fZ', ${srcRef}, 'unixepoch') ELSE strftime('%Y-%m-%dT%H:%M:%fZ', ${srcRef}/1000.0, 'unixepoch') END`;
 }
@@ -32160,16 +32446,256 @@ function detectIsoGlobColumns(db, tableName, targetSchema = "main") {
   }
   return isoColumns;
 }
-function buildSelectExpr(attachAlias, legacyTable, targetTableName, col, srcType, tgtInfo, isoGlobCols) {
-  const srcRef = `"${attachAlias}"."${legacyTable}"."${col}"`;
-  const srcUpper = srcType.toUpperCase();
-  const isIntegerSource = srcUpper.includes("INT") || srcUpper === "" || srcUpper === "NUMERIC";
-  const isNotNullWithoutDefault = tgtInfo.notnull === 1 && tgtInfo.dflt_value === null;
-  if (isoGlobCols.has(col) && isIntegerSource) {
-    const isoExpr = buildEpochToIsoExpr(srcRef);
-    if (isNotNullWithoutDefault) {
-      return `COALESCE(${isoExpr}, '') AS "${col}"`;
-    }
+function isIntegerSourceType(srcType) {
+  const upper = srcType.toUpperCase();
+  return upper.includes("INT") || upper === "" || upper === "NUMERIC";
+}
+function maybeCoalesceNotNull(expr, tgtCol) {
+  if (tgtCol === void 0) return expr;
+  const isNotNullWithoutDefault = tgtCol.notnull === 1 && tgtCol.dflt_value === null;
+  if (!isNotNullWithoutDefault) return expr;
+  return `COALESCE(${expr}, ${typeDefaultLiteral(tgtCol.type)})`;
+}
+function buildDigestExpr(targetTableName, col, srcType, isoGlobCols, tgtCol) {
+  const srcRef = `"${col}"`;
+  if (isoGlobCols.has(col) && isIntegerSourceType(srcType)) {
+    return maybeCoalesceNotNull(buildEpochToIsoExpr(srcRef), tgtCol);
+  }
+  const clampExpr = numericClampExpr(targetTableName, col, srcRef);
+  if (clampExpr !== null) return maybeCoalesceNotNull(clampExpr, tgtCol);
+  const normExpr = enumNormExpr(targetTableName, col, srcRef);
+  if (normExpr !== null) return maybeCoalesceNotNull(normExpr, tgtCol);
+  return maybeCoalesceNotNull(srcRef, tgtCol);
+}
+var ENUM_NORMALIZATIONS, NUMERIC_CLAMPS, ISO_CHECK_REGEX, EPOCH_SECONDS_THRESHOLD;
+var init_column_transforms = __esm({
+  "packages/core/src/store/exodus/column-transforms.ts"() {
+    "use strict";
+    ENUM_NORMALIZATIONS = /* @__PURE__ */ new Map([
+      // --- task_commits.link_source -------------------------------------------
+      // 'commit-message' → 'commit-subject' (pre-T9506 legacy value)
+      [
+        "tasks_task_commits.link_source",
+        (src) => `CASE ${src} WHEN 'commit-message' THEN 'commit-subject' ELSE ${src} END`
+      ],
+      // --- architecture_decisions.status (case + date-suffix normalization) ----
+      // 'Accepted', 'ACCEPTED', 'approved', 'Accepted (2026-04-18)', … → 'accepted'
+      // 'Proposed', 'PROPOSED' → 'proposed'
+      // 'Superseded', 'SUPERSEDED' → 'superseded'
+      [
+        "tasks_architecture_decisions.status",
+        (src) => `CASE WHEN lower(${src}) = 'accepted' OR lower(${src}) LIKE 'accepted %' OR lower(${src}) = 'approved' THEN 'accepted' WHEN lower(${src}) = 'proposed' THEN 'proposed' WHEN lower(${src}) = 'superseded' THEN 'superseded' WHEN lower(${src}) = 'deprecated' THEN 'deprecated' ELSE ${src} END`
+      ],
+      // --- brain_* enum normalizations REMOVED (T11647) -----------------------
+      // The brain memory family now lands in the consolidated cleo.db in its LEGACY
+      // RUNTIME shape — INTEGER epoch timestamps and, critically, NO SQL CHECK
+      // constraints (the `text({ enum })` unions are enforced only at the
+      // application layer, exactly as the runtime `drizzle-brain` tables are). With
+      // no brain CHECK constraint to satisfy, exodus MUST copy every brain enum
+      // value VERBATIM — coercing them (e.g. source_type 'observer-compressed'/
+      // 'sleep-consolidation' → 'agent', type 'observation'/'proposal'/'pattern' →
+      // nearest) would now be unnecessary data CORRUPTION, not a constraint fix.
+      // The previous brain entries (brain_observations.{source_type,type},
+      // brain_decisions.{confirmation_state,decision_category,confidence,outcome,
+      // decided_by}) are therefore deleted. The non-brain entries below still apply
+      // because those consolidated tables retain their CHECK constraints.
+      // --- tasks_token_usage.transport (T11548 → REMOVED T11649) ---------------
+      // NO normalization. 'mcp' is a first-class transport origin (MCP-gateway
+      // requests) and is preserved verbatim. The consolidated CHECK enum was WIDENED
+      // to include 'mcp' (canonical TOKEN_USAGE_TRANSPORTS SSoT + forward migration
+      // 20260602000002_t11649-token-usage-transport-mcp), so the value lands without
+      // coercion. The earlier 'mcp' → 'agent' mapping was a silent semantic alteration
+      // of ~194 rows (count-preserving, NOT integrity-preserving) — see T11649.
+      // (brain_decisions.{decision_category,confidence} normalizations removed —
+      //  T11647: brain target = runtime shape with no CHECK; copy values verbatim.)
+      // --- tasks_commits.conventional_type (T11548 + T11578) -------------------
+      // The consolidated CHECK enum is feat/fix/chore/docs/refactor/test/build/ci/
+      // perf/revert/breaking. Real git history carries non-conventional subjects:
+      //   - 'style'           → 'chore' (pre-T11548 mapping; no 'style' in enum).
+      //   - 'merge'/'release' → 'chore' (T11578): merge + release commits are
+      //     maintenance-class; the precise semantic is preserved by the dedicated
+      //     `is_merge_commit` / `is_release_commit` boolean columns, so collapsing
+      //     `conventional_type` to the maintenance catch-all 'chore' is lossless at
+      //     the row grain. Without this the 'merge'/'release' rows violate the CHECK,
+      //     `INSERT OR IGNORE` drops the WHOLE commits table, and the exodus-on-open
+      //     data-continuity gate aborts the cutover (T11578 CI regression).
+      //   - any OTHER out-of-enum value → 'chore' (defensive: future non-conventional
+      //     subjects must never re-break the zero-deficit gate; the boolean flags and
+      //     raw subject text remain the precise provenance).
+      [
+        "tasks_commits.conventional_type",
+        (src) => `CASE WHEN ${src} IS NULL THEN NULL WHEN ${src} IN ('feat', 'fix', 'chore', 'docs', 'refactor', 'test', 'build', 'ci', 'perf', 'revert', 'breaking') THEN ${src} ELSE 'chore' END`
+      ],
+      // --- tasks_task_relations.relation_type (T11548) -------------------------
+      // 'grouped-by' → 'groups' (enum: related/blocks/duplicates/absorbs/fixes/extends/
+      // supersedes/groups). 4 rows.
+      [
+        "tasks_task_relations.relation_type",
+        (src) => `CASE ${src} WHEN 'grouped-by' THEN 'groups' ELSE ${src} END`
+      ],
+      // --- tasks_lifecycle_stages.stage_name (T11548) --------------------------
+      // Legacy camelCase / past-tense values → canonical snake_case stage names.
+      // 'implemented' → 'implementation', 'qaPassed' → 'validation',
+      // 'testsPassed' → 'testing'. 3 rows.
+      [
+        "tasks_lifecycle_stages.stage_name",
+        (src) => `CASE ${src} WHEN 'implemented' THEN 'implementation' WHEN 'qaPassed' THEN 'validation' WHEN 'testsPassed' THEN 'testing' ELSE ${src} END`
+      ],
+      // --- tasks_architecture_decisions.gate_status (T11548) ------------------
+      // 'passed (T5313 consensus)' → 'passed', 'approved' → 'passed'
+      // (enum: pending/passed/failed/waived). 2 rows.
+      [
+        "tasks_architecture_decisions.gate_status",
+        (src) => `CASE WHEN ${src} LIKE 'passed%' THEN 'passed' WHEN ${src} = 'approved' THEN 'passed' ELSE ${src} END`
+      ],
+      // --- tasks_evidence_ac_bindings.binding_type (T11548) -------------------
+      // Values with a 'validator:...' prefix → 'direct'
+      // (enum: direct/satisfies/coverage). 3 rows.
+      // Strip the namespace prefix introduced before the enum was tightened.
+      [
+        "tasks_evidence_ac_bindings.binding_type",
+        (src) => `CASE WHEN ${src} LIKE 'validator:%' THEN 'direct' ELSE ${src} END`
+      ]
+      // (brain_decisions.{outcome,decided_by} normalizations removed — T11647:
+      //  brain target = runtime shape with no CHECK; legacy values like 'accepted',
+      //  'rejected', 'prime' now survive VERBATIM instead of being coerced.)
+    ]);
+    NUMERIC_CLAMPS = /* @__PURE__ */ new Map([
+      // --- brain_weight_history.delta_weight (T11782) -------------------------
+      // +Inf → 1.0 (max canonical reinforcement), -Inf → -1.0 (max canonical
+      // depression), NaN → 0.0 (no-op delta). Finite values pass through.
+      [
+        "brain_weight_history.delta_weight",
+        (src) => `CASE WHEN ${src} = 9e999 THEN 1.0 WHEN ${src} = -9e999 THEN -1.0 WHEN ${src} != ${src} THEN 0.0 ELSE ${src} END`
+      ]
+    ]);
+    ISO_CHECK_REGEX = /CHECK\s*\(\s*"([^"]+)"\s+IS\s+NULL\s+OR\s+"[^"]+"\s+GLOB\s+'\[0-9/gi;
+    EPOCH_SECONDS_THRESHOLD = 1e11;
+  }
+});
+
+// packages/core/src/store/exodus/types.ts
+var EXODUS_TARGET_SCHEMA_VERSION;
+var init_types = __esm({
+  "packages/core/src/store/exodus/types.ts"() {
+    "use strict";
+    EXODUS_TARGET_SCHEMA_VERSION = "drizzle-v1.0.0-rc.3/dual-scope/2026-05";
+  }
+});
+
+// packages/core/src/store/exodus/migrate.ts
+import {
+  copyFileSync as copyFileSync3,
+  existsSync as existsSync10,
+  mkdirSync as mkdirSync2,
+  readFileSync as readFileSync3,
+  renameSync as renameSync2,
+  statSync as statSync4,
+  unlinkSync as unlinkSync2,
+  writeFileSync as writeFileSync3
+} from "node:fs";
+import { join as join10 } from "node:path";
+function getSqliteVersion(db) {
+  try {
+    const row = db.prepare("SELECT sqlite_version() AS v").get();
+    return row?.v ?? "unknown";
+  } catch {
+    return "unknown";
+  }
+}
+function listTables2(db) {
+  const rows = db.prepare(
+    "SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' AND name NOT LIKE '__drizzle_%' ORDER BY name"
+  ).all();
+  return rows.map((r) => r.name);
+}
+function writeJournal(stagingDir, journal) {
+  const journalPath = join10(stagingDir, JOURNAL_FILENAME);
+  const tmpPath = `${journalPath}.tmp`;
+  writeFileSync3(tmpPath, JSON.stringify(journal, null, 2) + "\n", "utf8");
+  renameSync2(tmpPath, journalPath);
+}
+function readJournal(stagingDir) {
+  const journalPath = join10(stagingDir, JOURNAL_FILENAME);
+  if (!existsSync10(journalPath)) return null;
+  try {
+    return JSON.parse(readFileSync3(journalPath, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function clearExodusJournal(stagingDir) {
+  const journalPath = join10(stagingDir, JOURNAL_FILENAME);
+  try {
+    if (!existsSync10(journalPath)) return false;
+    unlinkSync2(journalPath);
+    log3.info(
+      { stagingDir },
+      "exodus: cleared migrate journal after abort/rollback \u2014 a retry will RE-COPY all tables"
+    );
+    return true;
+  } catch (err) {
+    log3.warn(
+      { err, stagingDir },
+      'exodus: failed to clear migrate journal after rollback (a retry may skip already-"done" tables)'
+    );
+    return false;
+  }
+}
+function initJournal(sqliteVersion) {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  return {
+    version: 1,
+    cleoVersion: getCleoVersion(),
+    targetSchemaVersion: EXODUS_TARGET_SCHEMA_VERSION,
+    nodeVersion: process.version,
+    sqliteVersion,
+    startedAt: now,
+    updatedAt: now,
+    tables: []
+  };
+}
+function lockPath(dbPath) {
+  return `${dbPath}${LOCK_SENTINEL_SUFFIX}`;
+}
+function acquireAdvisoryLock(dbPath) {
+  const lp = lockPath(dbPath);
+  writeFileSync3(lp, JSON.stringify({ pid: process.pid, ts: (/* @__PURE__ */ new Date()).toISOString() }), "utf8");
+}
+function releaseAdvisoryLock(dbPath) {
+  try {
+    unlinkSync2(lockPath(dbPath));
+  } catch {
+  }
+}
+function safeStatBytes(filePath) {
+  try {
+    return statSync4(filePath).size;
+  } catch {
+    return 0;
+  }
+}
+function makeAttachAlias(name2, index2) {
+  const safe = name2.replace(/[^a-z0-9]/gi, "_").replace(/_+/g, "_").slice(0, 20);
+  return `_src_${safe}_${index2}`;
+}
+function epochUnitForSource(sourceName) {
+  const key = sourceName.toLowerCase();
+  for (const [pattern, unit] of SOURCE_EPOCH_UNITS) {
+    if (key === pattern || key.startsWith(pattern)) return unit;
+  }
+  return "seconds";
+}
+function buildSelectExpr(attachAlias, legacyTable, targetTableName, col, srcType, tgtInfo, isoGlobCols) {
+  const srcRef = `"${attachAlias}"."${legacyTable}"."${col}"`;
+  const srcUpper = srcType.toUpperCase();
+  const isIntegerSource = srcUpper.includes("INT") || srcUpper === "" || srcUpper === "NUMERIC";
+  const isNotNullWithoutDefault = tgtInfo.notnull === 1 && tgtInfo.dflt_value === null;
+  if (isoGlobCols.has(col) && isIntegerSource) {
+    const isoExpr = buildEpochToIsoExpr(srcRef);
+    if (isNotNullWithoutDefault) {
+      return `COALESCE(${isoExpr}, '') AS "${col}"`;
+    }
     return `${isoExpr} AS "${col}"`;
   }
   const clampExpr = numericClampExpr(targetTableName, col, srcRef);
@@ -32197,7 +32723,7 @@ function buildSelectExpr(attachAlias, legacyTable, targetTableName, col, srcType
 function copyTableFromAttached(targetNativeDb, srcNativeDb, attachAlias, legacyTableName, sourceName, targetSchema = "main") {
   const resolution = resolveConsolidatedTableName(sourceName, legacyTableName);
   if (resolution.kind === "skip") {
-    log2.warn(
+    log3.warn(
       { legacyTableName, sourceName, reason: resolution.reason },
       `Exodus: explicitly skipping table \u2014 ${resolution.reason}`
     );
@@ -32216,7 +32742,7 @@ function copyTableFromAttached(targetNativeDb, srcNativeDb, attachAlias, legacyT
   ).get();
   if (!existsRow) {
     const reason = `consolidated target '${targetTableName}' not found (mapped from legacy '${legacyTableName}')`;
-    log2.warn(
+    log3.warn(
       { legacyTableName, targetTableName, sourceName, attachAlias, targetSchema },
       `Exodus: ${reason}`
     );
@@ -32227,13 +32753,13 @@ function copyTableFromAttached(targetNativeDb, srcNativeDb, attachAlias, legacyT
   const sharedColumns = srcPragma.map((r) => r.name).filter((col) => tgtColMap.has(col));
   if (sharedColumns.length === 0) {
     const reason = `no overlapping columns between source '${legacyTableName}' and target '${targetTableName}'`;
-    log2.warn({ legacyTableName, targetTableName, sourceName }, `Exodus: ${reason}`);
+    log3.warn({ legacyTableName, targetTableName, sourceName }, `Exodus: ${reason}`);
     return { rowsCopied: 0, skipped: true, reason };
   }
   const srcOnlyColumns = srcPragma.map((r) => r.name).filter((c) => !tgtColMap.has(c));
   const tgtOnlyColumns = tgtPragma.map((r) => r.name).filter((c) => !srcColumns.has(c));
   if (srcOnlyColumns.length > 0 || tgtOnlyColumns.length > 0) {
-    log2.info(
+    log3.info(
       { legacyTableName, targetTableName, sourceName, srcOnlyColumns, tgtOnlyColumns },
       "Exodus: column drift detected \u2014 copying intersection, dropping src-only cols, using defaults for tgt-only cols"
     );
@@ -32248,7 +32774,7 @@ function copyTableFromAttached(targetNativeDb, srcNativeDb, attachAlias, legacyT
       return isoGlobCols.has(col) && (upper.includes("INT") || upper === "" || upper === "NUMERIC");
     });
     if (coercedCols.length > 0) {
-      log2.info(
+      log3.info(
         {
           legacyTableName,
           targetTableName,
@@ -32264,7 +32790,7 @@ function copyTableFromAttached(targetNativeDb, srcNativeDb, attachAlias, legacyT
     (col) => ENUM_NORMALIZATIONS.has(`${targetTableName}.${col}`)
   );
   if (normalizedCols.length > 0) {
-    log2.info(
+    log3.info(
       { legacyTableName, targetTableName, sourceName, normalizedCols },
       `Exodus: applying enum-value normalization for ${normalizedCols.length} column(s) (T11547)`
     );
@@ -32273,7 +32799,7 @@ function copyTableFromAttached(targetNativeDb, srcNativeDb, attachAlias, legacyT
     (col) => NUMERIC_CLAMPS.has(`${targetTableName}.${col}`)
   );
   if (clampedCols.length > 0) {
-    log2.info(
+    log3.info(
       { legacyTableName, targetTableName, sourceName, clampedCols },
       `Exodus: applying non-finite numeric clamp for ${clampedCols.length} column(s) (T11782)`
     );
@@ -32305,25 +32831,37 @@ function copyTableFromAttached(targetNativeDb, srcNativeDb, attachAlias, legacyT
   ];
   const colList = allInsertCols.map((c) => `"${c}"`).join(", ");
   const selectList = allSelectExprs.join(", ");
+  const existingBeforeRow = targetNativeDb.prepare(`SELECT COUNT(*) AS c FROM "${targetSchema}"."${targetTableName}"`).get();
+  const existingBefore = Number(existingBeforeRow?.c ?? 0);
   const stmt = targetNativeDb.prepare(
     `INSERT OR IGNORE INTO "${targetSchema}"."${targetTableName}" (${colList}) SELECT ${selectList} FROM "${attachAlias}"."${legacyTableName}"`
   );
   const result = stmt.run();
   const rowsCopied = result.changes ?? 0;
   if (rowsCopied < sourceCount) {
-    const dropped = sourceCount - rowsCopied;
-    if (rowsCopied === 0) {
-      const reason = `INSERT OR IGNORE dropped ALL ${sourceCount} rows from '${legacyTableName}'\u2192'${targetTableName}' (rowsCopied=0, sourceCount=${sourceCount}). Likely a CHECK/type constraint violation \u2014 check epoch coercion or enum values.`;
-      log2.error(
-        { legacyTableName, targetTableName, sourceName, sourceCount, rowsCopied },
-        `Exodus: ${reason}`
+    const presentAccountedFor = existingBefore + rowsCopied;
+    if (presentAccountedFor >= sourceCount) {
+      log3.info(
+        { legacyTableName, targetTableName, sourceName, sourceCount, rowsCopied, existingBefore },
+        `Exodus: '${legacyTableName}'\u2192'${targetTableName}' \u2014 ${sourceCount - rowsCopied} of ${sourceCount} row(s) already present in target (idempotent PK dedup), ${rowsCopied} newly copied; no loss`
       );
-      return { rowsCopied: 0, skipped: false, reason };
+      return { rowsCopied, skipped: false };
     }
-    log2.warn(
-      { legacyTableName, targetTableName, sourceName, sourceCount, rowsCopied, dropped },
-      `Exodus: INSERT OR IGNORE dropped ${dropped}/${sourceCount} rows from '${legacyTableName}'\u2192'${targetTableName}' \u2014 may be idempotent-resume dedup or a constraint violation; verify will confirm`
+    const missing = sourceCount - presentAccountedFor;
+    const reason = `INSERT OR IGNORE lost ${missing} of ${sourceCount} rows from '${legacyTableName}'\u2192'${targetTableName}' (rowsCopied=${rowsCopied}, existingBefore=${existingBefore}) \u2014 a CHECK/NOT NULL/type/enum constraint rejected them (NOT PK dedup); inspect epoch coercion + enum normalization. verify will confirm.`;
+    log3.error(
+      {
+        legacyTableName,
+        targetTableName,
+        sourceName,
+        sourceCount,
+        rowsCopied,
+        existingBefore,
+        missing
+      },
+      `Exodus: ${reason}`
     );
+    return { rowsCopied, skipped: false, reason };
   }
   return { rowsCopied, skipped: false };
 }
@@ -32331,10 +32869,10 @@ function checkSchemaVersion(journal, forceCrossVersion) {
   if (journal.targetSchemaVersion !== EXODUS_TARGET_SCHEMA_VERSION) {
     const msg = `Schema version mismatch: journal=${journal.targetSchemaVersion}, expected=${EXODUS_TARGET_SCHEMA_VERSION}`;
     if (forceCrossVersion) {
-      log2.warn(msg + " (--force-cross-version: continuing anyway)");
+      log3.warn(msg + " (--force-cross-version: continuing anyway)");
       return true;
     }
-    log2.error(msg + " \u2014 pass --force-cross-version to override");
+    log3.error(msg + " \u2014 pass --force-cross-version to override");
     return false;
   }
   return true;
@@ -32342,18 +32880,19 @@ function checkSchemaVersion(journal, forceCrossVersion) {
 async function runExodusMigrate(plan, forceCrossVersion = false, onProgress) {
   const { sources, stagingDir, diskPreflight, projectDbPath, globalDbPath } = plan;
   if (!diskPreflight) {
+    const shortfall = Math.max(0, plan.requiredBytes - plan.availableBytes);
     return {
       ok: false,
       tables: [],
       stagingDir,
       backupPaths: [],
-      error: `Insufficient disk space: need \u22653\xD7 source size (${plan.totalSourceBytes} bytes source, ${plan.availableBytes} bytes available). Free up space or use a different storage location.`
+      error: `Insufficient disk space for exodus: need \u2265${plan.requiredBytes} bytes (\u2248${STAGING_HEADROOM_FACTOR}\xD7 largest source ${plan.largestSourceBytes} + consolidated estimate ${plan.totalSourceBytes}), but only ${plan.availableBytes} bytes are free on the target filesystem \u2014 ${shortfall} bytes short. Free up at least ${shortfall} bytes (e.g. \`cleo backup prune\`, clear caches), or move the .cleo/ directory to a larger volume, then retry.`
     };
   }
   mkdirSync2(stagingDir, { recursive: true });
   let sqliteVersion = "unknown";
   for (const src of sources) {
-    if (existsSync7(src.path)) {
+    if (existsSync10(src.path)) {
       const snap = openCleoDbSnapshot(src.path, { readOnly: true });
       sqliteVersion = getSqliteVersion(snap.db);
       snap.close();
@@ -32394,9 +32933,15 @@ async function runExodusMigrate(plan, forceCrossVersion = false, onProgress) {
     };
     var extractNativeDb = extractNativeDb2;
     for (const src of sources) {
-      if (!existsSync7(src.path)) continue;
-      const backupDest = join9(stagingDir, `${src.name.replace(/[^a-z0-9-]/g, "_")}-backup.db`);
-      if (!existsSync7(backupDest)) {
+      if (!existsSync10(src.path)) continue;
+      const backupDest = join10(stagingDir, `${src.name.replace(/[^a-z0-9-]/g, "_")}-backup.db`);
+      const srcBytes = safeStatBytes(src.path);
+      const skipStagingCopy = srcBytes > plan.stagingCopyThresholdBytes;
+      if (skipStagingCopy) {
+        onProgress?.(
+          `Skipping full staging copy of ${src.name} (${srcBytes} bytes > ${plan.stagingCopyThresholdBytes} threshold) \u2014 source is archived, not deleted, on success.`
+        );
+      } else if (!existsSync10(backupDest)) {
         onProgress?.(`Backing up ${src.name} \u2192 staging dir\u2026`);
         copyFileSync3(src.path, backupDest);
         backupPaths.push(backupDest);
@@ -32414,8 +32959,8 @@ async function runExodusMigrate(plan, forceCrossVersion = false, onProgress) {
     });
     const projectNative = extractNativeDb2(projectHandle);
     const globalNative = extractNativeDb2(globalHandle);
-    const projectSources = sources.filter((s) => s.targetScope === "project" && existsSync7(s.path));
-    const globalSources = sources.filter((s) => s.targetScope === "global" && existsSync7(s.path));
+    const projectSources = sources.filter((s) => s.targetScope === "project" && existsSync10(s.path));
+    const globalSources = sources.filter((s) => s.targetScope === "global" && existsSync10(s.path));
     await migrateScope(
       "project",
       projectSources,
@@ -32440,7 +32985,7 @@ async function runExodusMigrate(plan, forceCrossVersion = false, onProgress) {
     return { ok: true, tables: allTableResults, stagingDir, backupPaths };
   } catch (err) {
     const error = err instanceof Error ? err.message : String(err);
-    log2.error({ err }, "Exodus migration failed");
+    log3.error({ err }, "Exodus migration failed");
     return { ok: false, tables: allTableResults, stagingDir, backupPaths, error };
   } finally {
     try {
@@ -32460,7 +33005,7 @@ async function migrateScope(scope, sources, targetNativeDb, journal, stagingDir,
   if (sources.length === 0) return;
   onProgress?.(`Migrating ${scope}-scope sources\u2026`);
   targetNativeDb.exec("PRAGMA foreign_keys = OFF");
-  log2.info({ scope }, "Exodus: foreign_keys=OFF for bulk copy (T11533 FK-defer)");
+  log3.info({ scope }, "Exodus: foreign_keys=OFF for bulk copy (T11533 FK-defer)");
   try {
     for (let i = 0; i < sources.length; i++) {
       const src = sources[i];
@@ -32477,7 +33022,7 @@ async function migrateScope(scope, sources, targetNativeDb, journal, stagingDir,
       }
       const snap = openCleoDbSnapshot(src.path, { readOnly: true });
       try {
-        const tables = listTables(snap.db);
+        const tables = listTables2(snap.db);
         targetNativeDb.exec("BEGIN");
         let txOpen = true;
         try {
@@ -32527,7 +33072,7 @@ async function migrateScope(scope, sources, targetNativeDb, journal, stagingDir,
               }
             } catch (err) {
               const msg = err instanceof Error ? err.message : String(err);
-              log2.warn({ tableName, sourceDb: src.name, err }, "Table copy failed \u2014 skipping");
+              log3.warn({ tableName, sourceDb: src.name, err }, "Table copy failed \u2014 skipping");
               status = "skipped";
               errorMsg = msg;
               skipped = true;
@@ -32575,7 +33120,7 @@ async function migrateScope(scope, sources, targetNativeDb, journal, stagingDir,
           targetNativeDb.exec(`DETACH DATABASE "${attachAlias}"`);
           onProgress?.(`  [${src.name}] Detached "${attachAlias}"`);
         } catch (detachErr) {
-          log2.warn(
+          log3.warn(
             { attachAlias, sourceDb: src.name, err: detachErr },
             "DETACH failed \u2014 alias will be released on DB close"
           );
@@ -32585,7 +33130,7 @@ async function migrateScope(scope, sources, targetNativeDb, journal, stagingDir,
             targetNativeDb.exec(`DETACH DATABASE "${crossAlias}"`);
             onProgress?.(`  [${src.name}] Cross-scope target detached "${crossAlias}"`);
           } catch (detachErr) {
-            log2.warn(
+            log3.warn(
               { crossAlias, sourceDb: src.name, err: detachErr },
               "Cross-scope DETACH failed \u2014 alias will be released on DB close"
             );
@@ -32597,28 +33142,28 @@ async function migrateScope(scope, sources, targetNativeDb, journal, stagingDir,
     try {
       const orphans = targetNativeDb.prepare("PRAGMA foreign_key_check").all();
       if (orphans.length > 0) {
-        log2.warn(
+        log3.warn(
           { scope, orphanCount: orphans.length, sample: orphans.slice(0, 5) },
           `Exodus: PRAGMA foreign_key_check found ${orphans.length} orphan row(s) after bulk copy \u2014 these are genuine data orphans (not ordering artifacts)`
         );
       } else {
-        log2.info({ scope }, "Exodus: PRAGMA foreign_key_check PASSED \u2014 no orphan rows");
+        log3.info({ scope }, "Exodus: PRAGMA foreign_key_check PASSED \u2014 no orphan rows");
       }
     } catch (checkErr) {
-      log2.warn(
+      log3.warn(
         { scope, err: checkErr },
         "Exodus: PRAGMA foreign_key_check failed (non-fatal) \u2014 target schema may not have FK constraints enabled"
       );
     }
     try {
       targetNativeDb.exec("PRAGMA foreign_keys = ON");
-      log2.info({ scope }, "Exodus: foreign_keys=ON restored after bulk copy");
+      log3.info({ scope }, "Exodus: foreign_keys=ON restored after bulk copy");
     } catch (fkErr) {
-      log2.warn({ scope, err: fkErr }, "Exodus: could not restore foreign_keys=ON (non-fatal)");
+      log3.warn({ scope, err: fkErr }, "Exodus: could not restore foreign_keys=ON (non-fatal)");
     }
   }
 }
-var log2, LOCK_SENTINEL_SUFFIX, JOURNAL_FILENAME, ENUM_NORMALIZATIONS, NUMERIC_CLAMPS, ISO_CHECK_REGEX, SOURCE_EPOCH_UNITS, EPOCH_SECONDS_THRESHOLD;
+var log3, LOCK_SENTINEL_SUFFIX, JOURNAL_FILENAME, SOURCE_EPOCH_UNITS;
 var init_migrate = __esm({
   "packages/core/src/store/exodus/migrate.ts"() {
     "use strict";
@@ -32626,110 +33171,13 @@ var init_migrate = __esm({
     init_ensure_config();
     init_dual_scope_db();
     init_open_cleo_db();
+    init_column_transforms();
+    init_plan2();
     init_table_name_map();
     init_types();
-    log2 = getLogger("exodus-migrate");
+    log3 = getLogger("exodus-migrate");
     LOCK_SENTINEL_SUFFIX = ".exodus-lock";
     JOURNAL_FILENAME = "exodus-journal.json";
-    ENUM_NORMALIZATIONS = /* @__PURE__ */ new Map([
-      // --- task_commits.link_source -------------------------------------------
-      // 'commit-message' → 'commit-subject' (pre-T9506 legacy value)
-      [
-        "tasks_task_commits.link_source",
-        (src) => `CASE ${src} WHEN 'commit-message' THEN 'commit-subject' ELSE ${src} END`
-      ],
-      // --- architecture_decisions.status (case + date-suffix normalization) ----
-      // 'Accepted', 'ACCEPTED', 'approved', 'Accepted (2026-04-18)', … → 'accepted'
-      // 'Proposed', 'PROPOSED' → 'proposed'
-      // 'Superseded', 'SUPERSEDED' → 'superseded'
-      [
-        "tasks_architecture_decisions.status",
-        (src) => `CASE WHEN lower(${src}) = 'accepted' OR lower(${src}) LIKE 'accepted %' OR lower(${src}) = 'approved' THEN 'accepted' WHEN lower(${src}) = 'proposed' THEN 'proposed' WHEN lower(${src}) = 'superseded' THEN 'superseded' WHEN lower(${src}) = 'deprecated' THEN 'deprecated' ELSE ${src} END`
-      ],
-      // --- brain_* enum normalizations REMOVED (T11647) -----------------------
-      // The brain memory family now lands in the consolidated cleo.db in its LEGACY
-      // RUNTIME shape — INTEGER epoch timestamps and, critically, NO SQL CHECK
-      // constraints (the `text({ enum })` unions are enforced only at the
-      // application layer, exactly as the runtime `drizzle-brain` tables are). With
-      // no brain CHECK constraint to satisfy, exodus MUST copy every brain enum
-      // value VERBATIM — coercing them (e.g. source_type 'observer-compressed'/
-      // 'sleep-consolidation' → 'agent', type 'observation'/'proposal'/'pattern' →
-      // nearest) would now be unnecessary data CORRUPTION, not a constraint fix.
-      // The previous brain entries (brain_observations.{source_type,type},
-      // brain_decisions.{confirmation_state,decision_category,confidence,outcome,
-      // decided_by}) are therefore deleted. The non-brain entries below still apply
-      // because those consolidated tables retain their CHECK constraints.
-      // --- tasks_token_usage.transport (T11548 → REMOVED T11649) ---------------
-      // NO normalization. 'mcp' is a first-class transport origin (MCP-gateway
-      // requests) and is preserved verbatim. The consolidated CHECK enum was WIDENED
-      // to include 'mcp' (canonical TOKEN_USAGE_TRANSPORTS SSoT + forward migration
-      // 20260602000002_t11649-token-usage-transport-mcp), so the value lands without
-      // coercion. The earlier 'mcp' → 'agent' mapping was a silent semantic alteration
-      // of ~194 rows (count-preserving, NOT integrity-preserving) — see T11649.
-      // (brain_decisions.{decision_category,confidence} normalizations removed —
-      //  T11647: brain target = runtime shape with no CHECK; copy values verbatim.)
-      // --- tasks_commits.conventional_type (T11548 + T11578) -------------------
-      // The consolidated CHECK enum is feat/fix/chore/docs/refactor/test/build/ci/
-      // perf/revert/breaking. Real git history carries non-conventional subjects:
-      //   - 'style'           → 'chore' (pre-T11548 mapping; no 'style' in enum).
-      //   - 'merge'/'release' → 'chore' (T11578): merge + release commits are
-      //     maintenance-class; the precise semantic is preserved by the dedicated
-      //     `is_merge_commit` / `is_release_commit` boolean columns, so collapsing
-      //     `conventional_type` to the maintenance catch-all 'chore' is lossless at
-      //     the row grain. Without this the 'merge'/'release' rows violate the CHECK,
-      //     `INSERT OR IGNORE` drops the WHOLE commits table, and the exodus-on-open
-      //     data-continuity gate aborts the cutover (T11578 CI regression).
-      //   - any OTHER out-of-enum value → 'chore' (defensive: future non-conventional
-      //     subjects must never re-break the zero-deficit gate; the boolean flags and
-      //     raw subject text remain the precise provenance).
-      [
-        "tasks_commits.conventional_type",
-        (src) => `CASE WHEN ${src} IS NULL THEN NULL WHEN ${src} IN ('feat', 'fix', 'chore', 'docs', 'refactor', 'test', 'build', 'ci', 'perf', 'revert', 'breaking') THEN ${src} ELSE 'chore' END`
-      ],
-      // --- tasks_task_relations.relation_type (T11548) -------------------------
-      // 'grouped-by' → 'groups' (enum: related/blocks/duplicates/absorbs/fixes/extends/
-      // supersedes/groups). 4 rows.
-      [
-        "tasks_task_relations.relation_type",
-        (src) => `CASE ${src} WHEN 'grouped-by' THEN 'groups' ELSE ${src} END`
-      ],
-      // --- tasks_lifecycle_stages.stage_name (T11548) --------------------------
-      // Legacy camelCase / past-tense values → canonical snake_case stage names.
-      // 'implemented' → 'implementation', 'qaPassed' → 'validation',
-      // 'testsPassed' → 'testing'. 3 rows.
-      [
-        "tasks_lifecycle_stages.stage_name",
-        (src) => `CASE ${src} WHEN 'implemented' THEN 'implementation' WHEN 'qaPassed' THEN 'validation' WHEN 'testsPassed' THEN 'testing' ELSE ${src} END`
-      ],
-      // --- tasks_architecture_decisions.gate_status (T11548) ------------------
-      // 'passed (T5313 consensus)' → 'passed', 'approved' → 'passed'
-      // (enum: pending/passed/failed/waived). 2 rows.
-      [
-        "tasks_architecture_decisions.gate_status",
-        (src) => `CASE WHEN ${src} LIKE 'passed%' THEN 'passed' WHEN ${src} = 'approved' THEN 'passed' ELSE ${src} END`
-      ],
-      // --- tasks_evidence_ac_bindings.binding_type (T11548) -------------------
-      // Values with a 'validator:...' prefix → 'direct'
-      // (enum: direct/satisfies/coverage). 3 rows.
-      // Strip the namespace prefix introduced before the enum was tightened.
-      [
-        "tasks_evidence_ac_bindings.binding_type",
-        (src) => `CASE WHEN ${src} LIKE 'validator:%' THEN 'direct' ELSE ${src} END`
-      ]
-      // (brain_decisions.{outcome,decided_by} normalizations removed — T11647:
-      //  brain target = runtime shape with no CHECK; legacy values like 'accepted',
-      //  'rejected', 'prime' now survive VERBATIM instead of being coerced.)
-    ]);
-    NUMERIC_CLAMPS = /* @__PURE__ */ new Map([
-      // --- brain_weight_history.delta_weight (T11782) -------------------------
-      // +Inf → 1.0 (max canonical reinforcement), -Inf → -1.0 (max canonical
-      // depression), NaN → 0.0 (no-op delta). Finite values pass through.
-      [
-        "brain_weight_history.delta_weight",
-        (src) => `CASE WHEN ${src} = 9e999 THEN 1.0 WHEN ${src} = -9e999 THEN -1.0 WHEN ${src} != ${src} THEN 0.0 ELSE ${src} END`
-      ]
-    ]);
-    ISO_CHECK_REGEX = /CHECK\s*\(\s*"([^"]+)"\s+IS\s+NULL\s+OR\s+"[^"]+"\s+GLOB\s+'\[0-9/gi;
     SOURCE_EPOCH_UNITS = /* @__PURE__ */ new Map([
       ["conduit", "seconds"],
       ["brain", "milliseconds"],
@@ -32740,120 +33188,58 @@ var init_migrate = __esm({
       ["nexus", "milliseconds"],
       ["skills", "milliseconds"]
     ]);
-    EPOCH_SECONDS_THRESHOLD = 1e11;
   }
 });
 
-// packages/core/src/store/exodus/plan.ts
-import { existsSync as existsSync8, readdirSync as readdirSync2, statfsSync, statSync as statSync2 } from "node:fs";
-import { join as join10 } from "node:path";
-function buildSourceDescriptors(cwd) {
-  const cleoDir = resolveCleoDir(cwd);
-  const cleoHome = getCleoHome();
-  return [
-    // Project-tier — go into consolidated project-scope cleo.db
-    {
-      name: "tasks",
-      path: join10(cleoDir, "tasks.db"),
-      targetScope: "project"
-    },
-    {
-      name: "brain (project)",
-      path: join10(cleoDir, "brain.db"),
-      targetScope: "project"
-    },
-    {
-      name: "conduit",
-      path: join10(cleoDir, "conduit.db"),
-      targetScope: "project"
-    },
-    // Global-tier — go into consolidated global-scope cleo.db
-    {
-      name: "nexus",
-      path: join10(cleoHome, "nexus.db"),
-      targetScope: "global"
-    },
-    {
-      name: "signaldock",
-      path: join10(cleoHome, "signaldock.db"),
-      targetScope: "global"
-    },
-    {
-      name: "skills",
-      path: join10(cleoHome, "skills.db"),
-      targetScope: "global"
-    }
-  ];
-}
-function safeFileBytes(filePath) {
-  try {
-    return statSync2(filePath).size;
-  } catch {
-    return 0;
-  }
+// packages/core/src/store/exodus/seal.ts
+function resolveScopes(arg) {
+  return arg === "both" ? ["project", "global"] : [arg];
 }
-function getAvailableBytes(dir) {
-  try {
-    const result = statfsSync(dir);
-    return (result.bavail ?? result.bfree ?? 0) * (result.bsize ?? 4096);
-  } catch {
-    return 0;
+function sealExodus(plan, scopeArg, cwd) {
+  const parity = computeCountParity(plan.sources, plan.projectDbPath, plan.globalDbPath);
+  if (!parity.ok) {
+    const refusedReason = `Refusing to seal: ${parity.deficits.length} table(s) have FEWER rows in the consolidated cleo.db than the legacy source \u2014 the data is NOT fully migrated. Run \`cleo exodus migrate\` first. Deficits: ${parity.deficits.map((d) => `${d.targetTable}(${d.sourceCount}\u2192${d.targetCount})`).join(", ")}`;
+    log4.error({ deficits: parity.deficits.length }, `exodus seal refused \u2014 ${refusedReason}`);
+    return { ok: false, refusedReason, parity, scopes: [] };
   }
-}
-function deriveStagingDirName() {
-  const iso = (/* @__PURE__ */ new Date()).toISOString().replace(/[:]/g, "").replace(/\..+Z$/, "Z");
-  return `exodus-staging-${iso}`;
-}
-function findExistingStaging(cleoDir) {
-  try {
-    const entries = readdirSync2(cleoDir, { withFileTypes: true });
-    const stagingDirs = entries.filter((e) => e.isDirectory() && e.name.startsWith("exodus-staging-")).map((e) => e.name).sort().reverse();
-    if (stagingDirs.length > 0) {
-      return join10(cleoDir, stagingDirs[0]);
-    }
-  } catch {
+  const outcomes = [];
+  for (const scope of resolveScopes(scopeArg)) {
+    const alreadySealed = hasExodusCompleteMarker(scope, cwd);
+    const scopeSources = plan.sources.filter((s) => s.targetScope === scope);
+    const archived = scopeSources.map((s) => {
+      const r = archiveSourceDb(s, cwd);
+      return { name: r.name, action: r.action, archivedTo: r.archivedTo };
+    });
+    const markerPath = writeExodusCompleteMarker(
+      scope,
+      scopeSources.map((s) => s.name),
+      cwd
+    );
+    log4.info(
+      { scope, alreadySealed, archived: archived.filter((a) => a.action === "archived").length },
+      `exodus seal: scope '${scope}' certified (count-parity verified, ${parity.checked} tables)`
+    );
+    outcomes.push({ scope, alreadySealed, archived, markerPath });
   }
-  return null;
+  return { ok: true, parity, scopes: outcomes };
 }
-function buildExodusPlan(cwd) {
-  const cleoDir = resolveCleoDir(cwd);
-  const sources = buildSourceDescriptors(cwd);
-  const totalSourceBytes = sources.reduce((sum, s) => sum + safeFileBytes(s.path), 0);
-  const availableBytes = getAvailableBytes(cleoDir);
-  const diskPreflight = totalSourceBytes === 0 || availableBytes >= 3 * totalSourceBytes;
-  const existingStaging = findExistingStaging(cleoDir);
-  const stagingDir = existingStaging ?? join10(cleoDir, deriveStagingDirName());
-  const resumeFromStaging = existingStaging !== null;
-  const projectDbPath = resolveDualScopeDbPath("project", cwd);
-  const globalDbPath = resolveDualScopeDbPath("global");
-  return {
-    sources,
-    totalSourceBytes,
-    availableBytes,
-    diskPreflight,
-    stagingDir,
-    resumeFromStaging,
-    projectDbPath,
-    globalDbPath
-  };
-}
-function sourcesPresent(sources) {
-  return sources.some((s) => existsSync8(s.path));
-}
-var init_plan2 = __esm({
-  "packages/core/src/store/exodus/plan.ts"() {
+var log4;
+var init_seal = __esm({
+  "packages/core/src/store/exodus/seal.ts"() {
     "use strict";
-    init_paths();
-    init_dual_scope_db();
+    init_logger2();
+    init_archive2();
+    init_count_parity();
+    log4 = getLogger("exodus-seal");
   }
 });
 
 // packages/core/src/store/exodus/status.ts
-import { existsSync as existsSync9, readdirSync as readdirSync3, readFileSync as readFileSync4, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync11, readdirSync as readdirSync3, readFileSync as readFileSync4, statSync as statSync5 } from "node:fs";
 import { join as join11 } from "node:path";
 function readJournal2(stagingDir) {
   const p = join11(stagingDir, JOURNAL_FILENAME2);
-  if (!existsSync9(p)) return null;
+  if (!existsSync11(p)) return null;
   try {
     return JSON.parse(readFileSync4(p, "utf8"));
   } catch {
@@ -32869,7 +33255,7 @@ function findStagingDirs(cleoDir) {
 }
 function safeBytes(p) {
   try {
-    return statSync3(p).size;
+    return statSync5(p).size;
   } catch {
     return 0;
   }
@@ -32885,15 +33271,15 @@ function runExodusStatus(cwd) {
   const sourcesInfo = plan.sources.map((s) => ({
     name: s.name,
     path: s.path,
-    exists: existsSync9(s.path),
+    exists: existsSync11(s.path),
     bytes: safeBytes(s.path)
   }));
   return {
     hasStaging: latestStaging !== null,
     stagingDir: latestStaging,
     journal,
-    projectDbExists: existsSync9(projectDbPath),
-    globalDbExists: existsSync9(globalDbPath),
+    projectDbExists: existsSync11(projectDbPath),
+    globalDbExists: existsSync11(globalDbPath),
     sourcesPresent: sourcesInfo.some((s) => s.exists),
     sources: sourcesInfo
   };
@@ -32910,7 +33296,7 @@ var init_status = __esm({
 });
 
 // packages/core/src/store/exodus/verify-migration.ts
-import { existsSync as existsSync10 } from "node:fs";
+import { existsSync as existsSync12 } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
 function orderByClause(db, tableName) {
   try {
@@ -32923,28 +33309,56 @@ function orderByClause(db, tableName) {
   }
   return "rowid";
 }
-function computeTableDigest(db, tableName, columns) {
+function computeTableDigest(db, tableName, columns, transform) {
+  let count = 0;
+  try {
+    const row = db.prepare(`SELECT COUNT(*) AS c FROM "${tableName}"`).get();
+    count = Number(row?.c ?? 0);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    log5.warn(
+      { tableName, err: msg },
+      "computeTableDigest: COUNT(*) failed (possibly a virtual/FTS table) \u2014 treating as 0 rows"
+    );
+    return { count: 0, hash: "" };
+  }
   const { createHash: createHash3 } = _require("node:crypto");
   const hasher = createHash3("sha256");
   const orderBy = orderByClause(db, tableName);
-  const selectClause = columns !== null && columns.length > 0 ? columns.map((c) => `"${c}"`).join(", ") : "*";
-  let rows;
+  let selectClause;
+  if (columns !== null && columns.length > 0) {
+    selectClause = columns.map((c) => {
+      if (transform === void 0) return `"${c}"`;
+      const srcType = transform.srcTypeByCol.get(c) ?? "";
+      const tgtCol = transform.tgtColByCol.get(c);
+      const expr = buildDigestExpr(
+        transform.targetTableName,
+        c,
+        srcType,
+        transform.isoGlobCols,
+        tgtCol
+      );
+      return `${expr} AS "${c}"`;
+    }).join(", ");
+  } else {
+    selectClause = "*";
+  }
   try {
-    rows = db.prepare(`SELECT ${selectClause} FROM "${tableName}" ORDER BY ${orderBy}`).all();
+    const stmt = db.prepare(`SELECT ${selectClause} FROM "${tableName}" ORDER BY ${orderBy}`);
+    for (const row of stmt.iterate()) {
+      const rowObj = row;
+      hasher.update(JSON.stringify(rowObj, Object.keys(rowObj).sort()));
+    }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    log3.warn(
+    log5.warn(
       { tableName, err: msg },
-      "computeTableDigest: SELECT failed (possibly a virtual/FTS table) \u2014 treating as 0 rows"
+      "computeTableDigest: streamed SELECT failed (possibly a virtual/FTS table) \u2014 digest skipped (COUNT(*) parity still enforced)"
     );
-    return { count: 0, hash: "" };
-  }
-  for (const row of rows) {
-    const rowObj = row;
-    hasher.update(JSON.stringify(rowObj, Object.keys(rowObj).sort()));
+    return { count, hash: "" };
   }
   return {
-    count: rows.length,
+    count,
     hash: hasher.digest("hex").slice(0, 32)
   };
 }
@@ -32962,13 +33376,30 @@ function sharedColumnsSorted(srcDb, srcTable, tgtDb, tgtTable) {
     return null;
   }
 }
-function listTables2(db) {
+function buildSourceDigestTransform(srcDb, srcTable, tgtDb, targetTableName) {
+  try {
+    const srcTypeByCol = new Map(
+      srcDb.prepare(`PRAGMA table_info("${srcTable}")`).all().map((r) => [r.name, r.type])
+    );
+    const isoGlobCols = detectIsoGlobColumns(tgtDb, targetTableName);
+    const tgtColByCol = new Map(
+      tgtDb.prepare(`PRAGMA table_info("${targetTableName}")`).all().map((r) => [
+        r.name,
+        { notnull: r.notnull, dflt_value: r.dflt_value, type: r.type }
+      ])
+    );
+    return { targetTableName, srcTypeByCol, isoGlobCols, tgtColByCol };
+  } catch {
+    return void 0;
+  }
+}
+function listTables3(db) {
   const rows = db.prepare(
     "SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' AND name NOT LIKE '__drizzle_%' ORDER BY name"
   ).all();
   return rows.map((r) => r.name);
 }
-function tableExists2(db, tableName) {
+function tableExists3(db, tableName) {
   try {
     const escaped = tableName.replace(/'/g, "''");
     return db.prepare(`SELECT 1 FROM sqlite_master WHERE type='table' AND name='${escaped}'`).get() !== void 0;
@@ -33046,7 +33477,7 @@ function foreignKeyCheck(db, scope) {
   try {
     const rows = db.prepare("PRAGMA foreign_key_check").all();
     if (rows.length > 0) {
-      log3.warn(
+      log5.warn(
         { scope, count: rows.length, sample: rows.slice(0, 5) },
         `verifyMigration: PRAGMA foreign_key_check found ${rows.length} orphan row(s)`
       );
@@ -33058,7 +33489,7 @@ function foreignKeyCheck(db, scope) {
       fkid: r.fkid
     }));
   } catch (err) {
-    log3.warn({ scope, err }, "verifyMigration: PRAGMA foreign_key_check failed (non-fatal)");
+    log5.warn({ scope, err }, "verifyMigration: PRAGMA foreign_key_check failed (non-fatal)");
     return [];
   }
 }
@@ -33095,13 +33526,13 @@ function sourceOrphanSignatures(db, sourceName, scope) {
     const rows = db.prepare("PRAGMA foreign_key_check").all();
     for (const r of rows) sigs.add(orphanSignature(db, r, sourceName));
     if (rows.length > 0) {
-      log3.warn(
+      log5.warn(
         { scope, count: rows.length, sample: rows.slice(0, 5) },
         `verifyMigration: source already has ${rows.length} pre-existing FK orphan(s) \u2014 these are tolerated (carried forward losslessly, flagged for data-hygiene)`
       );
     }
   } catch (err) {
-    log3.warn({ scope, err }, "verifyMigration: source PRAGMA foreign_key_check failed (non-fatal)");
+    log5.warn({ scope, err }, "verifyMigration: source PRAGMA foreign_key_check failed (non-fatal)");
   }
   return sigs;
 }
@@ -33113,7 +33544,7 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
   const preExistingForeignKeyViolations = [];
   const failureLines = [];
   const sourceOrphanSigs = /* @__PURE__ */ new Set();
-  if (!existsSync10(projectDbPath)) {
+  if (!existsSync12(projectDbPath)) {
     return {
       ok: false,
       tables: [],
@@ -33124,7 +33555,7 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
       error: `Consolidated project cleo.db not found at ${projectDbPath}. Run 'cleo exodus migrate' first.`
     };
   }
-  if (!existsSync10(globalDbPath)) {
+  if (!existsSync12(globalDbPath)) {
     return {
       ok: false,
       tables: [],
@@ -33139,7 +33570,7 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
   const globalSnap = openCleoDbSnapshot(globalDbPath, { readOnly: true });
   try {
     for (const src of sources) {
-      if (!existsSync10(src.path)) {
+      if (!existsSync12(src.path)) {
         onProgress?.(`Skipping ${src.name} (not present)`);
         continue;
       }
@@ -33148,9 +33579,9 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
         for (const sig of sourceOrphanSignatures(srcSnap.db, src.name, `source:${src.name}`)) {
           sourceOrphanSigs.add(sig);
         }
-        const sourceTables = listTables2(srcSnap.db);
-        const projectTables = new Set(listTables2(projectSnap.db));
-        const globalTables = new Set(listTables2(globalSnap.db));
+        const sourceTables = listTables3(srcSnap.db);
+        const projectTables = new Set(listTables3(projectSnap.db));
+        const globalTables = new Set(listTables3(globalSnap.db));
         for (const legacyTableName of sourceTables) {
           onProgress?.(`Verifying ${src.name}.${legacyTableName}\u2026`);
           const resolution = resolveConsolidatedTableName(src.name, legacyTableName);
@@ -33209,7 +33640,13 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
             targetSnap.db,
             targetTableName
           );
-          const srcDigest = computeTableDigest(srcSnap.db, legacyTableName, cols);
+          const srcTransform = buildSourceDigestTransform(
+            srcSnap.db,
+            legacyTableName,
+            targetSnap.db,
+            targetTableName
+          );
+          const srcDigest = computeTableDigest(srcSnap.db, legacyTableName, cols, srcTransform);
           const tgtDigest = computeTableDigest(targetSnap.db, targetTableName, cols);
           const countMatch = srcDigest.count === tgtDigest.count;
           const hashMatch = srcDigest.hash === tgtDigest.hash;
@@ -33218,7 +33655,7 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
               `[${scope}] ${src.name}.${legacyTableName} \u2192 ${targetTableName}: DEFICIT \u2014 source=${srcDigest.count} rows, target=${tgtDigest.count} rows (${srcDigest.count - tgtDigest.count} missing), hashMatch=${hashMatch}`
             );
           } else if (tgtDigest.count > srcDigest.count) {
-            log3.warn(
+            log5.warn(
               {
                 scope,
                 source: src.name,
@@ -33255,7 +33692,7 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
     targetOrphans.push(...foreignKeyCheck(globalSnap.db, "global"));
     foreignKeyViolations.push(...targetOrphans);
     for (const fk of targetOrphans) {
-      const orphanDb = tableExists2(projectSnap.db, fk.table) ? projectSnap.db : globalSnap.db;
+      const orphanDb = tableExists3(projectSnap.db, fk.table) ? projectSnap.db : globalSnap.db;
       const sig = orphanSignature(orphanDb, fk);
       const preExisting = sourceOrphanSigs.has(sig);
       if (preExisting) {
@@ -33268,7 +33705,7 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
       }
     }
     if (preExistingForeignKeyViolations.length > 0) {
-      log3.warn(
+      log5.warn(
         {
           count: preExistingForeignKeyViolations.length,
           sample: preExistingForeignKeyViolations.slice(0, 5)
@@ -33278,7 +33715,7 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
     }
   } catch (err) {
     const error = err instanceof Error ? err.message : String(err);
-    log3.error({ err }, "verifyMigration failed");
+    log5.error({ err }, "verifyMigration failed");
     return {
       ok: false,
       tables,
@@ -33295,7 +33732,7 @@ function verifyMigration(sources, projectDbPath, globalDbPath, onProgress) {
   if (failureLines.length > 0) {
     const error = `verifyMigration FAILED: ${failureLines.length} issue(s):
 ${failureLines.map((l) => `  \u2022 ${l}`).join("\n")}`;
-    log3.error({ failureCount: failureLines.length }, error);
+    log5.error({ failureCount: failureLines.length }, error);
     return {
       ok: false,
       tables,
@@ -33315,15 +33752,16 @@ ${failureLines.map((l) => `  \u2022 ${l}`).join("\n")}`;
     enumDrift
   };
 }
-var log3, _require, CHECK_ENUM_REGEX;
+var log5, _require, CHECK_ENUM_REGEX;
 var init_verify_migration = __esm({
   "packages/core/src/store/exodus/verify-migration.ts"() {
     "use strict";
     init_src();
     init_logger2();
     init_open_cleo_db();
+    init_column_transforms();
     init_table_name_map();
-    log3 = getLogger("verify-migration");
+    log5 = getLogger("verify-migration");
     _require = createRequire3(import.meta.url);
     CHECK_ENUM_REGEX = /CHECK\s*\(\s*"([^"]+)"\s+(?:IS\s+NULL\s+OR\s+"[^"]+"\s+)?IN\s*\(([^)]*)\)\s*\)/gi;
   }
@@ -33366,8 +33804,10 @@ __export(exodus_exports, {
   archiveMigratedSources: () => archiveMigratedSources,
   archiveSourceDb: () => archiveSourceDb,
   archiveStrandedResidue: () => archiveStrandedResidue,
+  buildExodusHealth: () => buildExodusHealth,
   buildExodusPlan: () => buildExodusPlan,
   clearExodusJournal: () => clearExodusJournal,
+  computeCountParity: () => computeCountParity,
   deriveStagingDirName: () => deriveStagingDirName,
   detectStrandedResidue: () => detectStrandedResidue,
   exodusArchiveDir: () => exodusArchiveDir,
@@ -33379,6 +33819,7 @@ __export(exodus_exports, {
   runExodusMigrate: () => runExodusMigrate,
   runExodusStatus: () => runExodusStatus,
   runExodusVerify: () => runExodusVerify,
+  sealExodus: () => sealExodus,
   sourcesPresent: () => sourcesPresent,
   verifyMigration: () => verifyMigration,
   writeExodusCompleteMarker: () => writeExodusCompleteMarker
@@ -33387,8 +33828,11 @@ var init_exodus = __esm({
   "packages/core/src/store/exodus/index.ts"() {
     "use strict";
     init_archive2();
+    init_count_parity();
+    init_health2();
     init_migrate();
     init_plan2();
+    init_seal();
     init_status();
     init_table_name_map();
     init_types();
@@ -33404,7 +33848,7 @@ __export(on_open_exports, {
   isDataContinuityOk: () => isDataContinuityOk,
   maybeRunExodusOnOpen: () => maybeRunExodusOnOpen
 });
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync13 } from "node:fs";
 function isDisabledByEnv() {
   const v = process.env.CLEO_DISABLE_EXODUS_ON_OPEN;
   return v === "1" || v === "true";
@@ -33430,7 +33874,7 @@ function rollbackConsolidatedToEmpty(nativeDb, scope) {
       "SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' AND name NOT LIKE '__drizzle_%'"
     ).all().map((r) => r.name);
   } catch (err) {
-    log4.error({ err, scope }, "exodus-on-open: failed to enumerate tables for rollback");
+    log6.error({ err, scope }, "exodus-on-open: failed to enumerate tables for rollback");
     return;
   }
   try {
@@ -33440,7 +33884,7 @@ function rollbackConsolidatedToEmpty(nativeDb, scope) {
       try {
         nativeDb.exec(`DELETE FROM "${table}"`);
       } catch (err) {
-        log4.warn({ err, table, scope }, "exodus-on-open: failed to clear table during rollback");
+        log6.warn({ err, table, scope }, "exodus-on-open: failed to clear table during rollback");
       }
     }
     nativeDb.exec("COMMIT");
@@ -33449,7 +33893,7 @@ function rollbackConsolidatedToEmpty(nativeDb, scope) {
       nativeDb.exec("ROLLBACK");
     } catch {
     }
-    log4.error({ err, scope }, "exodus-on-open: rollback transaction failed");
+    log6.error({ err, scope }, "exodus-on-open: rollback transaction failed");
   } finally {
     try {
       nativeDb.exec("PRAGMA foreign_keys = ON");
@@ -33469,7 +33913,7 @@ async function rollbackBothScopes(scope, projectDbPath, globalDbPath) {
         rollbackConsolidatedToEmpty(native, s);
       }
     } catch (err) {
-      log4.warn(
+      log6.warn(
         { err, scope: s, openingScope: scope },
         "exodus-on-open: could not roll back scope (best-effort)"
       );
@@ -33485,7 +33929,7 @@ function isDataContinuityOk(result) {
   const deficits = result.tables.filter((t) => t.targetCount < t.sourceCount);
   const surpluses = result.tables.filter((t) => t.targetCount > t.sourceCount);
   if (surpluses.length > 0) {
-    log4.warn(
+    log6.warn(
       {
         surpluses: surpluses.map((t) => ({
           table: t.targetTable,
@@ -33519,7 +33963,7 @@ async function maybeRunExodusOnOpen(scope, dbPath, nativeDb, cwd) {
   const { buildExodusPlan: buildExodusPlan2, runExodusMigrate: runExodusMigrate2, verifyMigration: verifyMigration2, clearExodusJournal: clearExodusJournal2 } = await Promise.resolve().then(() => (init_exodus(), exodus_exports));
   const plan = buildExodusPlan2(cwd);
   const scopeSources = plan.sources.filter((s) => s.targetScope === scope);
-  if (!scopeSources.some((s) => existsSync11(s.path))) {
+  if (!scopeSources.some((s) => existsSync13(s.path))) {
     return {
       outcome: "skipped",
       reason: `no legacy ${scope}-scope source DBs present (fresh install or cross-scope-only)`
@@ -33532,11 +33976,11 @@ async function maybeRunExodusOnOpen(scope, dbPath, nativeDb, cwd) {
       if (!consolidatedIsEmpty(nativeDb, scope)) {
         return { outcome: "skipped", reason: "migrated by a concurrent process (lock winner)" };
       }
-      log4.info(
+      log6.info(
         {
           scope,
           dbPath,
-          sources: plan.sources.filter((s) => existsSync11(s.path)).map((s) => s.name)
+          sources: plan.sources.filter((s) => existsSync13(s.path)).map((s) => s.name)
         },
         "exodus-on-open: consolidated cleo.db is empty and legacy data present \u2014 auto-migrating"
       );
@@ -33545,23 +33989,23 @@ async function maybeRunExodusOnOpen(scope, dbPath, nativeDb, cwd) {
         const migrateResult = await runExodusMigrate2(
           plan,
           false,
-          (msg) => log4.debug({ scope }, `exodus-on-open: ${msg}`)
+          (msg) => log6.debug({ scope }, `exodus-on-open: ${msg}`)
         );
         if (!migrateResult.ok) {
           await rollbackBothScopes(scope, plan.projectDbPath, plan.globalDbPath);
           clearExodusJournal2(migrateResult.stagingDir);
           const reason = `migration failed: ${migrateResult.error ?? "unknown error"} \u2014 legacy DBs kept as source`;
-          log4.error({ scope, error: migrateResult.error }, `exodus-on-open: ${reason}`);
+          log6.error({ scope, error: migrateResult.error }, `exodus-on-open: ${reason}`);
           return { outcome: "aborted", reason };
         }
         const verifyResult = verifyMigration2(
           plan.sources,
           plan.projectDbPath,
           plan.globalDbPath,
-          (msg) => log4.debug({ scope }, `exodus-on-open verify: ${msg}`)
+          (msg) => log6.debug({ scope }, `exodus-on-open verify: ${msg}`)
         );
         if (!verifyResult.ok) {
-          log4.warn(
+          log6.warn(
             {
               scope,
               enumDrift: verifyResult.enumDrift.length,
@@ -33575,7 +34019,7 @@ async function maybeRunExodusOnOpen(scope, dbPath, nativeDb, cwd) {
           clearExodusJournal2(plan.stagingDir);
           const deficits = verifyResult.tables.filter((t) => t.targetCount < t.sourceCount).map((t) => `${t.targetTable}(${t.sourceCount}\u2192${t.targetCount})`);
           const reason = `parity verification failed \u2014 cutover aborted, legacy DBs kept as source. count deficits: [${deficits.join(", ")}]; INTRODUCED fk orphans: ${verifyResult.introducedForeignKeyViolations.length} (pre-existing source orphans tolerated: ${verifyResult.preExistingForeignKeyViolations.length}). ` + `${verifyResult.error ?? ""}`.trim();
-          log4.error(
+          log6.error(
             {
               scope,
               countDeficits: deficits,
@@ -33587,14 +34031,14 @@ async function maybeRunExodusOnOpen(scope, dbPath, nativeDb, cwd) {
           return { outcome: "aborted", reason };
         }
         const rowsCopied = migrateResult.tables.filter((t) => !t.skipped).reduce((n, t) => n + t.rowsCopied, 0);
-        log4.info(
+        log6.info(
           { scope, rowsCopied, tables: migrateResult.tables.length },
           "exodus-on-open: parity verified \u2014 legacy data migrated into consolidated cleo.db"
         );
         try {
-          const consumed = plan.sources.filter((s) => existsSync11(s.path));
+          const consumed = plan.sources.filter((s) => existsSync13(s.path));
           const archiveResult = archiveMigratedSources(consumed, cwd);
-          log4.info(
+          log6.info(
             {
               scope,
               archived: archiveResult.sources.filter((s) => s.action === "archived").length,
@@ -33603,7 +34047,7 @@ async function maybeRunExodusOnOpen(scope, dbPath, nativeDb, cwd) {
             "exodus-on-open: archived legacy sources + sealed completion marker(s)"
           );
         } catch (err) {
-          log4.error(
+          log6.error(
             { err, scope },
             "exodus-on-open: post-migration archive/marker step failed (migration itself succeeded \u2014 legacy DBs left in place, will be re-checked by `cleo doctor exodus-residue`)"
           );
@@ -33625,14 +34069,14 @@ async function maybeRunExodusOnOpen(scope, dbPath, nativeDb, cwd) {
 function _isExodusInProgress() {
   return _exodusInProgress;
 }
-var log4, _exodusInProgress;
+var log6, _exodusInProgress;
 var init_on_open = __esm({
   "packages/core/src/store/exodus/on-open.ts"() {
     "use strict";
     init_logger2();
     init_lock();
     init_archive2();
-    log4 = getLogger("exodus-on-open");
+    log6 = getLogger("exodus-on-open");
     _exodusInProgress = false;
   }
 });
@@ -33647,7 +34091,7 @@ __export(dual_scope_db_exports, {
   resolveDualScopeDbPath: () => resolveDualScopeDbPath,
   upsertIdempotent: () => upsertIdempotent
 });
-import { existsSync as existsSync12, mkdirSync as mkdirSync3 } from "node:fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync3 } from "node:fs";
 import { createRequire as createRequire4 } from "node:module";
 import { dirname as dirname5, join as join12 } from "node:path";
 function cacheKey(scope, dbPath) {
@@ -33695,10 +34139,10 @@ async function openDualScopeDb(scope, cwd) {
   const dbPath = resolveDualScopeDbPath(scope, cwd);
   return scope === "project" ? openDualScopeDbAtPath("project", dbPath, cwd) : openDualScopeDbAtPath("global", dbPath, cwd);
 }
-async function openDedicatedDualScopeDb(scope, dbPath, log8) {
-  log8.debug({ scope, dbPath }, "opening DEDICATED (non-cached) dual-scope cleo.db (T11782 FIX D)");
+async function openDedicatedDualScopeDb(scope, dbPath, log10) {
+  log10.debug({ scope, dbPath }, "opening DEDICATED (non-cached) dual-scope cleo.db (T11782 FIX D)");
   const dir = dirname5(dbPath);
-  if (!existsSync12(dir)) {
+  if (!existsSync14(dir)) {
     mkdirSync3(dir, { recursive: true });
   }
   const DatabaseSyncCtor = getDatabaseSyncCtor();
@@ -33716,7 +34160,7 @@ async function openDedicatedDualScopeDb(scope, dbPath, log8) {
     existenceTable(scope),
     `dual-scope-db[${scope}]`
   );
-  log8.debug({ scope, dbPath }, "DEDICATED dual-scope cleo.db ready (T11782 FIX D)");
+  log10.debug({ scope, dbPath }, "DEDICATED dual-scope cleo.db ready (T11782 FIX D)");
   return {
     db,
     scope,
@@ -33741,14 +34185,14 @@ async function openDualScopeDbAtPath(scope, dbPath, exodusCwd, options) {
       return existing.handle;
     }
   }
-  const log8 = getLogger("dual-scope-db");
+  const log10 = getLogger("dual-scope-db");
   if (dedicated) {
-    return openDedicatedDualScopeDb(scope, dbPath, log8);
+    return openDedicatedDualScopeDb(scope, dbPath, log10);
   }
   const initPromise = (async () => {
-    log8.debug({ scope, dbPath }, "opening dual-scope cleo.db");
+    log10.debug({ scope, dbPath }, "opening dual-scope cleo.db");
     const dir = dirname5(dbPath);
-    if (!existsSync12(dir)) {
+    if (!existsSync14(dir)) {
       mkdirSync3(dir, { recursive: true });
     }
     const DatabaseSyncCtor = getDatabaseSyncCtor();
@@ -33766,7 +34210,7 @@ async function openDualScopeDbAtPath(scope, dbPath, exodusCwd, options) {
       existenceTable(scope),
       `dual-scope-db[${scope}]`
     );
-    log8.debug({ scope, dbPath }, "dual-scope cleo.db ready");
+    log10.debug({ scope, dbPath }, "dual-scope cleo.db ready");
     const handle = {
       db,
       scope,
@@ -33790,7 +34234,7 @@ async function openDualScopeDbAtPath(scope, dbPath, exodusCwd, options) {
         const result = await maybeRunExodusOnOpen2(scope, dbPath, nativeDb, exodusCwd);
         if (result.outcome === "migrated" || result.outcome === "aborted") {
           if (result.outcome === "aborted") {
-            log8.warn(
+            log10.warn(
               { scope, reason: result.reason },
               "exodus-on-open aborted; consolidated cleo.db left empty, legacy kept as source"
             );
@@ -33798,7 +34242,7 @@ async function openDualScopeDbAtPath(scope, dbPath, exodusCwd, options) {
           return scope === "project" ? openDualScopeDbAtPath("project", dbPath) : openDualScopeDbAtPath("global", dbPath);
         }
       } catch (err) {
-        log8.warn(
+        log10.warn(
           { err, scope },
           "exodus-on-open hook failed (non-fatal); re-opening consolidated handle"
         );
@@ -34382,7 +34826,7 @@ __export(nexus_sqlite_exports, {
   resetNexusDbState: () => resetNexusDbState,
   resolveNexusMigrationsFolder: () => resolveNexusMigrationsFolder
 });
-import { copyFileSync as copyFileSync4, existsSync as existsSync13 } from "node:fs";
+import { copyFileSync as copyFileSync4, existsSync as existsSync15 } from "node:fs";
 import { join as join13 } from "node:path";
 function getNexusDbPath(cwd) {
   return resolveDualScopeDbPath("project", cwd);
@@ -34424,12 +34868,12 @@ function detectAndWarnOnNestedNexus() {
   } catch {
     return false;
   }
-  if (!existsSync13(nestedPath)) return false;
+  if (!existsSync15(nestedPath)) return false;
   if (_warnedNestedPaths.has(nestedPath)) return false;
   _warnedNestedPaths.add(nestedPath);
   const canonicalPath = getNexusDbPath();
-  const log8 = getLogger("nexus-sqlite");
-  log8.warn(
+  const log10 = getLogger("nexus-sqlite");
+  log10.warn(
     {
       nestedPath,
       canonicalPath,
@@ -34444,7 +34888,7 @@ function detectAndWarnOnNestedNexus() {
 function _resetNestedNexusWarningGate() {
   _warnedNestedPaths.clear();
 }
-function tableExists3(nativeDb, tableName) {
+function tableExists4(nativeDb, tableName) {
   const result = nativeDb.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name=?").get(tableName);
   return !!result;
 }
@@ -34453,7 +34897,7 @@ function objectExists(nativeDb, type, name2) {
   return !!result;
 }
 function ensureNexusFts5(nativeDb) {
-  if (!tableExists3(nativeDb, "nexus_nodes")) return;
+  if (!tableExists4(nativeDb, "nexus_nodes")) return;
   if (!objectExists(nativeDb, "table", "nexus_symbols_fts")) {
     nativeDb.exec(`
       CREATE VIRTUAL TABLE nexus_symbols_fts USING fts5(
@@ -34499,7 +34943,7 @@ function ensureNexusFts5(nativeDb) {
   `);
 }
 function ensureNexusRelationWeights(nativeDb) {
-  if (!tableExists3(nativeDb, "nexus_relations")) return;
+  if (!tableExists4(nativeDb, "nexus_relations")) return;
   nativeDb.exec(`
     CREATE TABLE IF NOT EXISTS nexus_relation_weights (
       relation_id       TEXT PRIMARY KEY NOT NULL,
@@ -34581,9 +35025,9 @@ function ensureNexusRelationWeights(nativeDb) {
 }
 function runNexusMigrations(nativeDb, db) {
   const migrationsFolder = resolveNexusMigrationsFolder();
-  if (tableExists3(nativeDb, "nexus_nodes") && _nexusDbPath) {
+  if (tableExists4(nativeDb, "nexus_nodes") && _nexusDbPath) {
     const backupPath = _nexusDbPath.replace(/\.db$/, "-pre-cleo.db.bak");
-    if (!existsSync13(backupPath)) {
+    if (!existsSync15(backupPath)) {
       try {
         copyFileSync4(_nexusDbPath, backupPath);
       } catch {
@@ -34715,7 +35159,7 @@ var init_nexus_sqlite = __esm({
 
 // packages/core/src/paths.ts
 import { AsyncLocalStorage } from "node:async_hooks";
-import { existsSync as existsSync14, readFileSync as readFileSync5, statSync as statSync4 } from "node:fs";
+import { existsSync as existsSync16, readFileSync as readFileSync5, statSync as statSync6 } from "node:fs";
 import { createRequire as createRequire5 } from "node:module";
 import { homedir } from "node:os";
 import { basename as basename4, dirname as dirname6, join as join14, resolve as resolve3 } from "node:path";
@@ -34809,7 +35253,7 @@ function _resolveProjectByCwdFromNexus(cwd) {
   try {
     const cleoHome = getCleoHome();
     const globalDbPath = join14(cleoHome, "cleo.db");
-    if (!existsSync14(globalDbPath)) return null;
+    if (!existsSync16(globalDbPath)) return null;
     const start = resolve3(cwd ?? process.cwd());
     let current = start;
     const DatabaseSync3 = _getDatabaseSyncCtor();
@@ -34848,7 +35292,7 @@ function _findCleoDirRoot(cwd) {
     const isDangerousRoot = current === homeRoot || current === "/" || current === "";
     if (!isDangerousRoot) {
       try {
-        if (statSync4(join14(current, ".cleo")).isDirectory()) {
+        if (statSync6(join14(current, ".cleo")).isDirectory()) {
           return current;
         }
       } catch {
@@ -34922,7 +35366,7 @@ function _cwdHasGitAncestor(cwd) {
   while (true) {
     const gitMarker = join14(current, ".git");
     try {
-      if (existsSync14(gitMarker)) {
+      if (existsSync16(gitMarker)) {
         return true;
       }
     } catch {
@@ -34935,15 +35379,15 @@ function _cwdHasGitAncestor(cwd) {
 function _resolveMainRepoFromGitlink(gitlinkDir) {
   try {
     const gitLinkPath = join14(gitlinkDir, ".git");
-    if (!existsSync14(gitLinkPath)) return null;
-    const stat2 = statSync4(gitLinkPath);
+    if (!existsSync16(gitLinkPath)) return null;
+    const stat2 = statSync6(gitLinkPath);
     if (!stat2.isFile()) return null;
     const gitLinkContent = readFileSync5(gitLinkPath, "utf-8").trim();
     const match = gitLinkContent.match(/^gitdir:\s*(.+)$/m);
     if (!match) return null;
     const gitdir = match[1].trim();
     const mainRepo = dirname6(dirname6(dirname6(gitdir)));
-    if (existsSync14(join14(mainRepo, ".cleo")) && validateProjectRoot(mainRepo)) {
+    if (existsSync16(join14(mainRepo, ".cleo")) && validateProjectRoot(mainRepo)) {
       return mainRepo;
     }
   } catch {
@@ -34952,19 +35396,19 @@ function _resolveMainRepoFromGitlink(gitlinkDir) {
 }
 function validateProjectRoot(candidate) {
   const cleoDir = join14(candidate, ".cleo");
-  if (!existsSync14(cleoDir)) {
+  if (!existsSync16(cleoDir)) {
     return false;
   }
   const projectInfoPath = join14(cleoDir, "project-info.json");
-  if (existsSync14(projectInfoPath)) {
+  if (existsSync16(projectInfoPath)) {
     try {
       const raw = readFileSync5(projectInfoPath, "utf-8");
       const parsed = JSON.parse(raw);
       if (typeof parsed === "object" && parsed !== null && "projectId" in parsed && typeof parsed["projectId"] === "string" && parsed["projectId"] !== "") {
         const gitMarker = join14(candidate, ".git");
-        if (existsSync14(gitMarker)) {
+        if (existsSync16(gitMarker)) {
           try {
-            if (!statSync4(gitMarker).isDirectory()) {
+            if (!statSync6(gitMarker).isDirectory()) {
               return false;
             }
           } catch {
@@ -34977,10 +35421,10 @@ function validateProjectRoot(candidate) {
     }
   }
   const gitDir = join14(candidate, ".git");
-  if (existsSync14(gitDir)) {
+  if (existsSync16(gitDir)) {
     let isRealGitDir = false;
     try {
-      const stat2 = statSync4(gitDir);
+      const stat2 = statSync6(gitDir);
       isRealGitDir = stat2.isDirectory();
     } catch {
       isRealGitDir = false;
@@ -35027,16 +35471,16 @@ function getProjectRoot(cwd) {
     const cleoDir = join14(current, ".cleo");
     const gitDir = join14(current, ".git");
     const isDangerousRoot = current === homeRoot || current === "/" || current === "";
-    if (existsSync14(cleoDir) && !isDangerousRoot) {
+    if (existsSync16(cleoDir) && !isDangerousRoot) {
       if (validateProjectRoot(current)) {
         return current;
       }
       skippedCleoDirs.push(current);
     }
-    if (existsSync14(gitDir) && !isDangerousRoot) {
+    if (existsSync16(gitDir) && !isDangerousRoot) {
       let isRealGitDir = false;
       try {
-        isRealGitDir = statSync4(gitDir).isDirectory();
+        isRealGitDir = statSync6(gitDir).isDirectory();
       } catch {
         isRealGitDir = false;
       }
@@ -35089,7 +35533,7 @@ function isAbsolutePath(path2) {
 function _readProjectNameFromInfo(projectRoot) {
   try {
     const infoPath = join14(projectRoot, ".cleo", "project-info.json");
-    if (!existsSync14(infoPath)) return void 0;
+    if (!existsSync16(infoPath)) return void 0;
     const raw = readFileSync5(infoPath, "utf-8");
     const data = JSON.parse(raw);
     return typeof data.name === "string" && data.name.length > 0 ? data.name : void 0;
@@ -35363,7 +35807,7 @@ __export(config_exports, {
   parseConfigValue: () => parseConfigValue,
   setConfigValue: () => setConfigValue
 });
-import { existsSync as existsSync15 } from "node:fs";
+import { existsSync as existsSync17 } from "node:fs";
 import { mkdir as mkdir3, writeFile } from "node:fs/promises";
 import { dirname as dirname7 } from "node:path";
 function getNestedValue(obj, path2) {
@@ -35487,7 +35931,7 @@ function parseConfigValue(value) {
 }
 async function setConfigValue(key, value, cwd, opts) {
   const configPath = opts?.global ? getGlobalConfigPath() : getConfigPath(cwd);
-  if (!existsSync15(configPath)) {
+  if (!existsSync17(configPath)) {
     const dir = dirname7(configPath);
     await mkdir3(dir, { recursive: true });
     await writeFile(configPath, "{}", "utf-8");
@@ -35501,7 +35945,7 @@ async function setConfigValue(key, value, cwd, opts) {
 async function applyStrictnessPreset(preset, cwd, opts) {
   const definition = STRICTNESS_PRESETS[preset];
   const configPath = opts?.global ? getGlobalConfigPath() : getConfigPath(cwd);
-  if (!existsSync15(configPath)) {
+  if (!existsSync17(configPath)) {
     const dir = dirname7(configPath);
     await mkdir3(dir, { recursive: true });
     await writeFile(configPath, "{}", "utf-8");
@@ -35847,7 +36291,7 @@ function brainTablesAreConsolidatedShape(nativeDb) {
   return createdAt !== void 0 && createdAt.type.toUpperCase() !== "INTEGER";
 }
 function establishLegacyBrainSchema(nativeDb, db) {
-  const log8 = getLogger("brain-schema");
+  const log10 = getLogger("brain-schema");
   if (brainTablesAreConsolidatedShape(nativeDb)) {
     const fkRow = nativeDb.prepare("PRAGMA foreign_keys").get();
     const fkWasOn = fkRow?.foreign_keys === 1;
@@ -35857,7 +36301,7 @@ function establishLegacyBrainSchema(nativeDb, db) {
         try {
           nativeDb.exec(`DROP TABLE IF EXISTS \`${table}\``);
         } catch (err) {
-          log8.warn(
+          log10.warn(
             { table, err },
             "Failed to drop consolidated brain table during legacy rebuild."
           );
@@ -35866,7 +36310,7 @@ function establishLegacyBrainSchema(nativeDb, db) {
     } finally {
       nativeDb.exec(`PRAGMA foreign_keys=${fkWasOn ? "ON" : "OFF"}`);
     }
-    log8.debug(
+    log10.debug(
       { count: CONSOLIDATED_BRAIN_TABLES.length },
       "Dropped consolidated (exodus-target) brain tables \u2014 rebuilding in legacy runtime shape."
     );
@@ -35877,7 +36321,7 @@ function establishLegacyBrainSchema(nativeDb, db) {
       nativeDb,
       migrationsFolder
     );
-    log8.debug(
+    log10.debug(
       { marked, applied },
       "brain consolidated cleo.db reconcile (T11647) \u2014 marked already-present migrations applied + executed the missing unprefixed-table migrations directly."
     );
@@ -36427,7 +36871,7 @@ async function upsertTask(db, row, archiveFields, allowOrphanParent = false) {
       if (allowOrphanParent) {
         row = { ...row, parentId: null };
       } else {
-        log5.warn(
+        log7.warn(
           { taskId: row.id, parentId: row.parentId },
           "upsertTask: parentId references a non-existent task \u2014 parent relationship may be lost"
         );
@@ -36610,13 +37054,13 @@ async function loadRelationsForTasks(db, tasks2) {
     task.relates = relations && relations.length > 0 ? relations : [];
   }
 }
-var log5;
+var log7;
 var init_db_helpers = __esm({
   "packages/core/src/store/db-helpers.ts"() {
     "use strict";
     init_logger2();
     init_tasks_schema();
-    log5 = getLogger("db-helpers");
+    log7 = getLogger("db-helpers");
   }
 });
 
@@ -36758,7 +37202,7 @@ var init_sqlite2 = __esm({
 });
 
 // packages/core/src/store/agent-registry-store.ts
-import { existsSync as existsSync16 } from "node:fs";
+import { existsSync as existsSync18 } from "node:fs";
 import { join as join16 } from "node:path";
 function getGlobalAgentRegistryDbPath() {
   const cleoHome = getCleoHome();
@@ -36803,7 +37247,7 @@ function writeAgentRegistrySchemaVersionSentinel(db) {
 }
 async function ensureGlobalAgentRegistryDb() {
   const dbPath = getGlobalAgentRegistryDbPath();
-  const alreadyExists = existsSync16(dbPath);
+  const alreadyExists = existsSync18(dbPath);
   const dualHandle = await openDualScopeDb("global");
   const nativeDb = dualHandle.db.$client ?? null;
   if (!nativeDb) {
@@ -36852,7 +37296,7 @@ var init_agent_registry_store = __esm({
 });
 
 // packages/core/src/store/conduit-sqlite.ts
-import { existsSync as existsSync17 } from "node:fs";
+import { existsSync as existsSync19 } from "node:fs";
 import { createRequire as createRequire7 } from "node:module";
 function _getDrizzle2() {
   if (_drizzle3 === null) {
@@ -36883,7 +37327,7 @@ async function ensureConduitDb(projectRoot) {
   }
   if (_initPromise3) return _initPromise3;
   _initPromise3 = (async () => {
-    const alreadyExists = existsSync17(dbPath);
+    const alreadyExists = existsSync19(dbPath);
     const dualHandle = await openDualScopeDb("project", projectRoot);
     const nativeDb = dualHandle.db.$client ?? null;
     if (!nativeDb) {
@@ -37177,10 +37621,10 @@ var init_skills_db = __esm({
 import {
   chmodSync,
   copyFileSync as copyFileSync5,
-  existsSync as existsSync18,
+  existsSync as existsSync20,
   mkdirSync as mkdirSync5,
   readdirSync as readdirSync4,
-  statSync as statSync5,
+  statSync as statSync7,
   unlinkSync as unlinkSync3
 } from "node:fs";
 import { join as join18 } from "node:path";
@@ -37219,7 +37663,7 @@ async function openAgentRegistryDbForSnapshot() {
 async function openTelemetryDbForSnapshot() {
   try {
     const path2 = join18(getCleoHome(), "telemetry.db");
-    if (!existsSync18(path2)) return null;
+    if (!existsSync20(path2)) return null;
   } catch {
     return null;
   }
@@ -37234,7 +37678,7 @@ function buildRawFileVacuumOpener(entry) {
   return async (cwd) => {
     const path2 = resolveInventoryPath(entry, cwd);
     if (!path2) return null;
-    if (!existsSync18(path2)) return null;
+    if (!existsSync20(path2)) return null;
     try {
       const { DatabaseSync: DatabaseSync3 } = await import("node:sqlite");
       return new DatabaseSync3(path2, { readOnly: true });
@@ -37325,7 +37769,7 @@ function rotateSnapshots(backupDir, prefix) {
     const files = readdirSync4(backupDir).filter((f) => pattern.test(f)).map((f) => ({
       name: f,
       path: join18(backupDir, f),
-      mtimeMs: statSync5(join18(backupDir, f)).mtimeMs
+      mtimeMs: statSync7(join18(backupDir, f)).mtimeMs
     })).sort((a, b) => a.mtimeMs - b.mtimeMs);
     while (files.length >= MAX_SNAPSHOTS) {
       const oldest = files.shift();
@@ -37384,12 +37828,12 @@ function listSqliteBackupsForPrefix(prefix, cwd) {
   try {
     const cleoDir = getCleoDir(cwd);
     const backupDir = join18(cleoDir, "backups", "sqlite");
-    if (!existsSync18(backupDir)) return [];
+    if (!existsSync20(backupDir)) return [];
     const pattern = snapshotPattern(prefix);
     return readdirSync4(backupDir).filter((f) => pattern.test(f)).map((f) => ({
       name: f,
       path: join18(backupDir, f),
-      mtimeMs: statSync5(join18(backupDir, f)).mtimeMs
+      mtimeMs: statSync7(join18(backupDir, f)).mtimeMs
     })).sort((a, b) => b.mtimeMs - a.mtimeMs);
   } catch {
     return [];
@@ -37572,7 +38016,7 @@ __export(sqlite_exports, {
   resolveMigrationsFolder: () => resolveMigrationsFolder,
   schema: () => tasks_schema_exports
 });
-import { copyFileSync as copyFileSync6, existsSync as existsSync19, renameSync as renameSync3, unlinkSync as unlinkSync4 } from "node:fs";
+import { copyFileSync as copyFileSync6, existsSync as existsSync21, renameSync as renameSync3, unlinkSync as unlinkSync4 } from "node:fs";
 import { createRequire as createRequire9 } from "node:module";
 import { eq as eq5 } from "drizzle-orm";
 function _getDrizzle3() {
@@ -37614,7 +38058,7 @@ function countBackupTasks(backupDb) {
 }
 async function autoRecoverFromBackup(nativeDb, dbPath, cwd) {
   const { openNativeDatabase: openNativeDatabase2 } = await Promise.resolve().then(() => (init_sqlite_native(), sqlite_native_exports));
-  const log8 = getLogger("sqlite");
+  const log10 = getLogger("sqlite");
   try {
     const countResult = nativeDb.prepare("SELECT COUNT(*) as cnt FROM tasks_tasks").get();
     const taskCount = countResult?.cnt ?? 0;
@@ -37640,13 +38084,13 @@ async function autoRecoverFromBackup(nativeDb, dbPath, cwd) {
       async () => {
         const currentTaskCount = await recountTasksFromDisk(dbPath);
         if (currentTaskCount > 0) {
-          log8.info(
+          log10.info(
             { dbPath, currentTaskCount },
             "Auto-recovery skipped: database was populated by a concurrent process while acquiring the first-open lock (T11662 double-checked re-query)."
           );
           return;
         }
-        log8.warn(
+        log10.warn(
           { dbPath, backupPath: newestBackup.path, backupTasks: backupTaskCount },
           `Empty database detected with ${backupTaskCount}-task backup available. Auto-recovering from backup. This likely happened because git-tracked WAL/SHM files were overwritten during a branch switch (T5188).`
         );
@@ -37666,7 +38110,7 @@ async function autoRecoverFromBackup(nativeDb, dbPath, cwd) {
         const tempPath = dbPath + ".recovery-tmp";
         copyFileSync6(newestBackup.path, tempPath);
         renameSync3(tempPath, dbPath);
-        log8.info(
+        log10.info(
           { dbPath, backupPath: newestBackup.path, restoredTasks: backupTaskCount },
           "Database auto-recovered from backup successfully."
         );
@@ -37683,7 +38127,7 @@ async function autoRecoverFromBackup(nativeDb, dbPath, cwd) {
       { stale: 6e5, retries: 30 }
     );
   } catch (err) {
-    log8.error({ err, dbPath }, "Auto-recovery from backup failed. Continuing with empty database.");
+    log10.error({ err, dbPath }, "Auto-recovery from backup failed. Continuing with empty database.");
   }
 }
 async function getDb(cwd) {
@@ -37783,7 +38227,7 @@ async function getSchemaVersion(cwd) {
   return result[0]?.value ?? null;
 }
 function dbExists(cwd) {
-  return existsSync19(resolveDualScopeDbPath("project", cwd));
+  return existsSync21(resolveDualScopeDbPath("project", cwd));
 }
 function getNativeDb() {
   return _nativeDb3;
@@ -38971,7 +39415,7 @@ var init_sqlite_data_accessor = __esm({
 });
 
 // packages/core/src/sequence/index.ts
-import { existsSync as existsSync20, readFileSync as readFileSync6, renameSync as renameSync4 } from "node:fs";
+import { existsSync as existsSync22, readFileSync as readFileSync6, renameSync as renameSync4 } from "node:fs";
 import { join as join20 } from "node:path";
 function getLegacySequenceJsonPath(cwd) {
   return join20(resolveOrCwd(cwd), ".cleo", ".sequence.json");
@@ -38988,7 +39432,7 @@ function isSeedSequence(value) {
   return value.counter === 0 && value.lastId === "T000" && value.checksum === "seed";
 }
 function readLegacySequenceFile(path2) {
-  if (!existsSync20(path2)) return null;
+  if (!existsSync22(path2)) return null;
   try {
     const parsed = JSON.parse(readFileSync6(path2, "utf-8"));
     return isValidSequenceState(parsed) ? parsed : null;
@@ -38997,10 +39441,10 @@ function readLegacySequenceFile(path2) {
   }
 }
 function renameLegacyFile(path2) {
-  if (!existsSync20(path2)) return;
+  if (!existsSync22(path2)) return;
   const migratedPath = `${path2}.migrated`;
   try {
-    if (!existsSync20(migratedPath)) {
+    if (!existsSync22(migratedPath)) {
       renameSync4(path2, migratedPath);
       return;
     }
@@ -39163,7 +39607,7 @@ var init_sequence = __esm({
 
 // packages/core/src/store/git-checkpoint.ts
 import { execFile as execFile2 } from "node:child_process";
-import { existsSync as existsSync21 } from "node:fs";
+import { existsSync as existsSync23 } from "node:fs";
 import { readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
 import { join as join21, resolve as resolve5 } from "node:path";
 import { promisify as promisify2 } from "node:util";
@@ -39189,7 +39633,7 @@ async function cleoGitCommand(args, cleoDir) {
   }
 }
 function isCleoGitInitialized(cleoDir) {
-  return existsSync21(join21(cleoDir, ".git", "HEAD"));
+  return existsSync23(join21(cleoDir, ".git", "HEAD"));
 }
 async function loadStateFileAllowlist(cwd) {
   try {
@@ -39233,14 +39677,14 @@ async function isCleoGitRepo(cleoDir) {
   return result.success && (result.stdout === "true" || isCleoGitInitialized(cleoDir));
 }
 function isMergeInProgress(cleoDir) {
-  return existsSync21(join21(cleoDir, ".git", "MERGE_HEAD"));
+  return existsSync23(join21(cleoDir, ".git", "MERGE_HEAD"));
 }
 async function isDetachedHead(cleoDir) {
   const result = await cleoGitCommand(["symbolic-ref", "HEAD"], cleoDir);
   return !result.success;
 }
 function isRebaseInProgress(cleoDir) {
-  return existsSync21(join21(cleoDir, ".git", "rebase-merge")) || existsSync21(join21(cleoDir, ".git", "rebase-apply"));
+  return existsSync23(join21(cleoDir, ".git", "rebase-merge")) || existsSync23(join21(cleoDir, ".git", "rebase-apply"));
 }
 async function recordCheckpointTime(cleoDir) {
   try {
@@ -39264,7 +39708,7 @@ async function getChangedStateFiles(cleoDir, cwd) {
   const allStateFiles = await getAllStateFiles(cwd);
   for (const stateFile of allStateFiles) {
     const fullPath = join21(cleoDir, stateFile);
-    if (!existsSync21(fullPath)) continue;
+    if (!existsSync23(fullPath)) continue;
     const diffResult = await cleoGitCommand(["diff", "--quiet", "--", stateFile], cleoDir);
     const cachedResult = await cleoGitCommand(
       ["diff", "--cached", "--quiet", "--", stateFile],
@@ -39291,7 +39735,7 @@ async function shouldCheckpoint(options) {
   const config = await loadCheckpointConfig(cwd);
   if (!config.enabled) return false;
   const cleoDir = getCleoDir(cwd);
-  if (!existsSync21(cleoDir)) return false;
+  if (!existsSync23(cleoDir)) return false;
   if (!isCleoGitInitialized(cleoDir)) return false;
   if (!await isCleoGitRepo(cleoDir)) return false;
   if (isMergeInProgress(cleoDir)) return false;
@@ -39369,7 +39813,7 @@ async function ensureSequenceValid(cwd, options) {
   if (!options?.validateSequence) return;
   const check = await checkSequence(cwd);
   if (!check.valid) {
-    log6.warn({ counter: check.counter, maxId: check.maxIdInData }, "Sequence behind, repairing");
+    log8.warn({ counter: check.counter, maxId: check.maxIdInData }, "Sequence behind, repairing");
     const repair = await repairSequence(cwd);
     if (!repair.repaired && options.strict) {
       throw new DataSafetyError(`Sequence repair failed: ${repair.message}`, "SEQUENCE_INVALID", {
@@ -39386,7 +39830,7 @@ async function checkpoint(context, cwd, options) {
     stats.checkpoints++;
     stats.lastCheckpoint = /* @__PURE__ */ new Date();
   } catch (err) {
-    log6.warn({ err }, "Checkpoint failed (non-fatal)");
+    log8.warn({ err }, "Checkpoint failed (non-fatal)");
   }
   vacuumIntoBackup({ cwd }).catch(() => {
   });
@@ -39448,7 +39892,7 @@ async function safeAppendLog(accessor, entry, cwd, options) {
   stats.writes++;
   await checkpoint("log entry", cwd, opts);
 }
-var log6, DataSafetyError, DEFAULT_SAFETY, stats;
+var log8, DataSafetyError, DEFAULT_SAFETY, stats;
 var init_data_safety_central = __esm({
   "packages/core/src/store/data-safety-central.ts"() {
     "use strict";
@@ -39458,7 +39902,7 @@ var init_data_safety_central = __esm({
     init_sqlite3();
     init_sqlite_backup();
     init_tasks_schema();
-    log6 = getLogger("data-safety");
+    log8 = getLogger("data-safety");
     DataSafetyError = class extends Error {
       constructor(message, code, context) {
         super(message);
@@ -39498,7 +39942,7 @@ function isSafetyDisabled() {
 }
 function wrapWithSafety(accessor, cwd) {
   if (isSafetyDisabled()) {
-    log7.warn(
+    log9.warn(
       "Safety disabled - emergency mode (CLEO_DISABLE_SAFETY=true). Data integrity checks bypassed."
     );
     return accessor;
@@ -39519,13 +39963,13 @@ function getSafetyStatus() {
     enabled: true
   };
 }
-var log7, SafetyDataAccessor;
+var log9, SafetyDataAccessor;
 var init_safety_data_accessor = __esm({
   "packages/core/src/store/safety-data-accessor.ts"() {
     "use strict";
     init_logger2();
     init_data_safety_central();
-    log7 = getLogger("data-safety");
+    log9 = getLogger("data-safety");
     SafetyDataAccessor = class {
       /** The underlying accessor being wrapped. */
       inner;
@@ -39549,7 +39993,7 @@ var init_safety_data_accessor = __esm({
           ...config
         };
         if (this.config.verbose) {
-          log7.debug({ engine: inner.engine }, "SafetyDataAccessor initialized");
+          log9.debug({ engine: inner.engine }, "SafetyDataAccessor initialized");
         }
       }
       /** The storage engine backing this accessor. */
@@ -39561,7 +40005,7 @@ var init_safety_data_accessor = __esm({
        */
       logVerbose(message) {
         if (this.config.verbose) {
-          log7.debug(message);
+          log9.debug(message);
         }
       }
       /**