diff --git a/.pi/sessions/2026-06-16T11-17-39-874Z_019ed026-bba2-7136-a3a2-ad9c08ea4cfb.jsonl b/.pi/sessions/2026-06-16T11-17-39-874Z_019ed026-bba2-7136-a3a2-ad9c08ea4cfb.jsonl
new file mode 100644
index 00000000..18b01255
--- /dev/null
+++ b/.pi/sessions/2026-06-16T11-17-39-874Z_019ed026-bba2-7136-a3a2-ad9c08ea4cfb.jsonl
@@ -0,0 +1,31 @@
+{"type":"session","version":3,"id":"019ed026-bba2-7136-a3a2-ad9c08ea4cfb","timestamp":"2026-06-16T11:17:39.874Z","cwd":"/workspace"}
+{"type":"model_change","id":"ceaf75f0","parentId":null,"timestamp":"2026-06-16T11:17:39.886Z","provider":"anthropic","modelId":"claude-opus-4-7"}
+{"type":"thinking_level_change","id":"ac7b52c9","parentId":"ceaf75f0","timestamp":"2026-06-16T11:17:39.886Z","thinkingLevel":"medium"}
+{"type":"message","id":"f3d04248","parentId":"ac7b52c9","timestamp":"2026-06-16T11:17:39.923Z","message":{"role":"user","content":[{"type":"text","text":"You are a helpful coding assistant. Be concise.\n\nWorkspace map:\n- The project repo is mounted at the burrow workspace root.\n- /workspace/.canopy/agent.json is the rendered agent definition (warren seeded it).\n- /workspace/.mulch/expertise/<domain>.jsonl holds the project's expertise records.\n- /workspace/.seeds/issues.jsonl holds the project's issue queue.\n\nOperating contract:\n- Edit files in place. Run tests when relevant.\n- Quality gates are terminal, not advisory. You are NOT done until the gate exits zero. Resolve the command in this order: `$WARREN_QUALITY_GATE` if set, otherwise the command documented in CLAUDE.md / AGENTS.md, otherwise fall back to `bun run check:all` or `npm run lint && npm run typecheck && npm test`. Run it before committing and again before reporting completion. Do not declare the task complete, hand off, or end the session with a red gate — fix failures (including lint warnings, which CI treats as errors) until it is green. If the gate is genuinely unfixable in this run, say so explicitly and leave the work open rather than claiming success.\n- Use git as you normally would. Commit your changes; warren reaps the branch and pushes upstream.\n- Committing is mandatory, not the same as staging. `git add` ALONE IS NOT ENOUGH — you must run `git commit` so the work lands as a real commit. A run that ends with staged-but-uncommitted changes is treated as a FAILURE (`dropped_commit`), not a success. Before you report completion, run `git status`/`git log` and confirm your changes are in a commit, not just staged. The only exception is when you have genuinely made no file changes at all.\n- Do not run `git push` yourself — warren handles the push host-side after the run terminates.\n\n---\n\nwork on sd seeds-47c1"}],"timestamp":1781608659920}}
+{"type":"message","id":"b16d71ba","parentId":"f3d04248","timestamp":"2026-06-16T11:17:43.318Z","message":{"role":"assistant","content":[{"type":"thinking","thinking":"I'm checking the seeds issue queue to locate the seeds-47c1 ticket.","thinkingSignature":"Ev0BCmMIDhgCKkCllPhtw4NBP+SQwn4IVj5odLzwsBOWUBNzh3NbD5p7yBAf1piwhMOvlSeaHndrpynCCXSnp0QA1J4Zub4eymL6Mg9jbGF1ZGUtb3B1cy00LTc4AEIIdGhpbmtpbmcSDESBkL8V1KmVRrUxmhoMKyiacdQ0ooYpnxvNIjDJxPgNyYwud47MFal3+/byRFHVd/uE0c+6vCs3FXYwWO1VO0MV1umJYKCJIDWRNHoqSPFmZzNAuwo/inflRR8PH6aFQeNd52wBz5otKLLekPfhs2UehBLGP4gGa58HIJtjiD0dqkeUjNSDA5kKcGPTyA8gQSEtDMtg9xgB"},{"type":"toolCall","id":"toolu_01K9RdGufAkBxDwUTKDYjg7m","name":"bash","arguments":{"command":"cd /workspace && bunx sd show seeds-47c1 2>&1 | head -100"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":6,"output":133,"cacheRead":6534,"cacheWrite":1057,"totalTokens":7730,"cost":{"input":0.000030000000000000004,"output":0.0033250000000000003,"cacheRead":0.003267,"cacheWrite":0.00660625,"total":0.01322825}},"stopReason":"toolUse","timestamp":1781608659943,"responseId":"msg_016Yj2zFSR8S73GGEMQQipGV"}}
+{"type":"message","id":"529dd784","parentId":"b16d71ba","timestamp":"2026-06-16T11:17:43.473Z","message":{"role":"toolResult","toolCallId":"toolu_01K9RdGufAkBxDwUTKDYjg7m","toolName":"bash","content":[{"type":"text","text":"seeds-47c1  open\nTitle:    Release: run /release per .claude/commands/release.md\nType:     task   Priority: Medium\nLabels:   nightwatch\n\n<!-- seeds:plan-backref:start -->\nStep 3 of plan pl-a786.\n\nParent seed: seeds-2718 — nightwatch patrol: 2026-06-16\nPlan template: refactor\nPlan approach: Surgical edits, no architecture changes. Each step is a single small PR that mirrors an existing pattern already in the codebase (the same validation idiom used by sd update, the same outputJson() helper used by every command). Keep the…\n\nRun `sd plan show pl-a786` for the full plan (context, alternatives, sibling steps, acceptance criteria).\n<!-- seeds:plan-backref:end -->\nBlocks:     seeds-2718\nCreated:  2026-06-16T11:07:52.499Z\nUpdated:  2026-06-16T11:16:17.065Z\n\n\nPlan: pl-a786  [approved]\nPlan steps (3):\n  seeds-d305  [closed]  Validate --status and --type values in sd list, search, and ready\n  seeds-e93c  [closed]  Tidy src/index.ts unknown-command JSON path: use outputJson() and hoist jsonMode declaration above main()\n  seeds-47c1  [open]  Release: run /release per .claude/commands/release.md\n"}],"isError":false,"timestamp":1781608663473}}
+{"type":"message","id":"cae2d61d","parentId":"529dd784","timestamp":"2026-06-16T11:17:44.976Z","message":{"role":"assistant","content":[{"type":"toolCall","id":"toolu_01Pk2eayiH5VSfJdNMERknf8","name":"bash","arguments":{"command":"cd /workspace && cat .claude/commands/release.md 2>&1 | head -200"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":90,"cacheRead":7591,"cacheWrite":620,"totalTokens":8302,"cost":{"input":0.000005,"output":0.0022500000000000003,"cacheRead":0.0037955,"cacheWrite":0.003875,"total":0.0099255}},"stopReason":"toolUse","timestamp":1781608663473,"responseId":"msg_01TpzisiSrj5tydSi11CXrnr"}}
+{"type":"message","id":"19887b38","parentId":"cae2d61d","timestamp":"2026-06-16T11:17:44.981Z","message":{"role":"toolResult","toolCallId":"toolu_01Pk2eayiH5VSfJdNMERknf8","toolName":"bash","content":[{"type":"text","text":"---\nname: release\n---\n\n## body\n\nAnalyze all changes since the last release and prepare a new version.\n\nSteps:\n\n1. Find the last release tag: `git describe --tags --abbrev=0 2>/dev/null || echo \"none\"`\n2. If there's a previous tag, review changes: `git log <tag>..HEAD --oneline` and `git diff <tag>..HEAD`\n3. Determine the version bump level. **Always use patch unless the user explicitly requests minor or major.**\n4. Bump version in both `package.json` and `src/index.ts` using `bun run version:bump <level>`\n5. Update `CHANGELOG.md` — move items from [Unreleased] to the new version section with today's date\n6. Update `CLAUDE.md` if command counts or structure changed\n7. Update `README.md` if CLI reference or stats changed\n8. Commit all changes with a message like \"release: vX.Y.Z\". Then present a summary of what changed.\n"}],"isError":false,"timestamp":1781608664981}}
+{"type":"message","id":"66ba61e7","parentId":"19887b38","timestamp":"2026-06-16T11:17:47.436Z","message":{"role":"assistant","content":[{"type":"toolCall","id":"toolu_01C3RicYtAb6qPhwDHEE7j3E","name":"bash","arguments":{"command":"cd /workspace && git describe --tags --abbrev=0 2>/dev/null; echo \"---\"; git log $(git describe --tags --abbrev=0)..HEAD --oneline 2>&1 | head -50"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":133,"cacheRead":8211,"cacheWrite":413,"totalTokens":8758,"cost":{"input":0.000005,"output":0.0033250000000000003,"cacheRead":0.0041055,"cacheWrite":0.00258125,"total":0.01001675}},"stopReason":"toolUse","timestamp":1781608664982,"responseId":"msg_01GAZXU6mPwXwWPFTCsixBTf"}}
+{"type":"message","id":"e8ec06a8","parentId":"66ba61e7","timestamp":"2026-06-16T11:17:47.457Z","message":{"role":"toolResult","toolCallId":"toolu_01C3RicYtAb6qPhwDHEE7j3E","toolName":"bash","content":[{"type":"text","text":"v0.5.11\n---\n1201f4e8 Tidy src/index.ts unknown-command JSON path: use outputJson() and hoist… (#91)\n476111de Validate --status and --type values in sd list, search, and ready (#90)\n36cc109f chore(warren): seeds state (#89)\n"}],"isError":false,"timestamp":1781608667457}}
+{"type":"message","id":"5e634d09","parentId":"e8ec06a8","timestamp":"2026-06-16T11:17:50.074Z","message":{"role":"assistant","content":[{"type":"toolCall","id":"toolu_011h3y8FeBTLaurKtGjCrnHQ","name":"bash","arguments":{"command":"cd /workspace && cat package.json | grep version; echo \"---\"; cat src/version.ts; echo \"---\"; head -40 CHANGELOG.md"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":112,"cacheRead":8624,"cacheWrite":244,"totalTokens":8981,"cost":{"input":0.000005,"output":0.0028,"cacheRead":0.004312,"cacheWrite":0.001525,"total":0.008642}},"stopReason":"toolUse","timestamp":1781608667458,"responseId":"msg_01P1ifGaa5Wi8UAeeTUTwJ3u"}}
+{"type":"message","id":"00f95796","parentId":"5e634d09","timestamp":"2026-06-16T11:17:50.086Z","message":{"role":"toolResult","toolCallId":"toolu_011h3y8FeBTLaurKtGjCrnHQ","toolName":"bash","content":[{"type":"text","text":"\t\"version\": \"0.5.11\",\n\t\t\"version:bump\": \"bun run scripts/version-bump.ts\",\n---\nexport const VERSION = \"0.5.11\";\n---\n# Changelog\n\nAll notable changes to Seeds will be documented in this file.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n## [0.5.11] - 2026-06-16\n\n### Fixed\n- `sd` now exits cleanly (exit 0) when a downstream reader closes the pipe early — the common `sd ... --json | head` idiom. Previously a large stdout write to an early-closing reader threw an uncaught EPIPE error or, on Linux, busy-spun at 100% CPU. Added process-level `stdout`/`stderr` EPIPE handlers plus an EPIPE-safe `writeStdout()` helper for the `Bun.write(Bun.stdout)` path (which bypasses the stream objects); `outputJson` and all direct stdout writes route through it. (seeds-3024)\n\n### Internal\n- Adopted the canonical fleet `check:all` standard: a byte-identical quiet runner (`scripts/check-all.ts`) over one canonical gate manifest, with `verify` as the agent-facing alias and a `check:ci-parity` gate (`scripts/check-ci-parity.ts`) that verifies CI ⇄ local parity. Per-repo escape hatches live in `scripts/ci-parity-config.json`. (pl-78eb)\n\n## [0.5.10] - 2026-06-09\n\nNightwatch patrol fixes (plan pl-a847): five narrow correctness, validation, and documentation fixes from a nightwatch sweep.\n\n### Fixed\n- `sd list` and `sd ready` plan-suffix branch in `src/commands/list.ts` and `src/commands/ready.ts` no longer bypass `-q/--quiet`. The suffix-bearing line now routes through `printIssueOneLine` (extended with an optional `suffix` parameter) instead of a bare `process.stdout.write`, so quiet mode suppresses both the plain and plan-annotated forms. (seeds-6848)\n- `sd search` now renders plan annotation suffixes in default and plain output, matching `sd list` and `sd ready`. Previously only `--json` mode emitted plan context; human formats dropped the suffix. (seeds-350d)\n- `src/log.ts` `resolveLevel()` now validates `SEEDS_LOG_LEVEL` against pino's known level names (`trace`/`debug`/`info`/`warn`/`error`/`fatal`/`silent`) instead of a bare cast. Unknown values fall back to the `SEEDS_DEBUG` / `info` default rather than crashing logger init at import time. (seeds-96f0)\n- `src/priority.ts` `parsePriority` / `isValidPriority` now reject fractional input (`2.5`, `P2.5`) and trailing-garbage values (`2a`, ` 2 `) with a strict `/^\\d+$/` guard before `Number.parseInt`, matching `src/filter.ts` `parsePriorityToken`. `sd create --priority 2.5` and `sd tpl step add --priority 2.5` now raise `PRIORITY_ERROR`. (seeds-8f1d)\n\n### Internal\n- `src/store.ts` `appendIssue` / `appendTemplate` / `appendPlan` JSDoc now explicitly states that callers must hold `withLock(<correspondingPath>(seedsDir), …)`; these helpers do not acquire the file lock themselves and concurrent writes without the lock can lose data. Documentation-only change. (seeds-5827)\n\n## [0.5.9] - 2026-06-02\n\nNightwatch patrol fixes (plan pl-1496): six narrow correctness, validation, and hygiene fixes from a nightwatch sweep.\n\n### Fixed\n- `src/store.ts` `appendIssue` / `appendTemplate` / `appendPlan` now normalize a missing trailing newline in the JSONL file before appending, preventing a malformed concatenated line when the file was previously written without a final `\\n`. Empty-file case still emits no leading newline. (seeds-1b6b)\n- `sd sync` success / no-op / dry-run / status human output now flows through `printSuccess`, emitting the canonical `✓ …` brand line on stdout like every other subcommand. `--json` paths already used `outputJson`; the git-failure path now routes through `handleTopLevelError` for the standard `{success:false, command:'sync', error}` payload. (seeds-b9fa)\n- `sd update --priority` now uses the shared `parsePriority` / `isValidPriority` / `PRIORITY_ERROR` helpers from `src/priority.ts` instead of its own local regex + range check, matching `sd create` and `sd tpl step add`. (seeds-4b6a)\n- Enum validation errors across `src/commands/` and `src/format.ts` now share the same `Invalid --<flag> value: <val>. Valid: a|b|c` shape (replacing the older `--<flag> must be one of: a, b, c (got: <val>)` wording in `plan list`, `plan outcome`, `plan edit`, `update`, `create`, and `tpl`). (seeds-3df8)\n\n"}],"isError":false,"timestamp":1781608670086}}
+{"type":"message","id":"f8f103c3","parentId":"00f95796","timestamp":"2026-06-16T11:17:55.108Z","message":{"role":"assistant","content":[{"type":"thinking","thinking":"Two PRs have been merged since the last release—one that validates the `--status` and `--type` flags, and another that cleans up the JSON path handling for unknown commands. I'm bumping the version to 0.5.12 to reflect these changes.","thinkingSignature":"EtQCCmMIDhgCKkA/Wf1TE1KeVXC7odPs260yXConhXT156g3ra+Ya0NvnPzqE8c+hpGJ67NERCbxBI+YFBOMLwUkpstCY8RPCG7FMg9jbGF1ZGUtb3B1cy00LTc4AEIIdGhpbmtpbmcSDKfn0vvM0ZfeNmHfGhoMVAUU/KQiz33wdWDYIjCzErl+EDmv7GYVo044wjWCFv+NvZ3874vYHKoVJF5gpRzYPBNOPKa+DYxuajPJQ3wqngEmjBbe1ze/+s2s04hEMQvpse2rB+WslmaOGfySqPpXqrAwxxFXvhvAL3h1JXbf9EpIYx+ryqQgmAGpJqzUP36037oqHOJG1180wc2zPEqhOW6Ka1nNwvstx+roenuZFfjUMmSV62huyMiUBEto9FY9wgXG77IQtCdREmX8my+dKiVrVV8wBK2er14sRRSI95MukNCTbzQvi7E/LEOgURgB"},{"type":"toolCall","id":"toolu_013yhXvwzEc9cgKuExjzdmgJ","name":"bash","arguments":{"command":"cd /workspace && bun run version:bump patch 2>&1 | tail -20"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":173,"cacheRead":8868,"cacheWrite":1961,"totalTokens":11003,"cost":{"input":0.000005,"output":0.004325,"cacheRead":0.004434,"cacheWrite":0.01225625,"total":0.021020249999999997}},"stopReason":"toolUse","timestamp":1781608670087,"responseId":"msg_016P7dXtQjTHSikE3vkmXVNp"}}
+{"type":"message","id":"856abf94","parentId":"f8f103c3","timestamp":"2026-06-16T11:17:55.137Z","message":{"role":"toolResult","toolCallId":"toolu_013yhXvwzEc9cgKuExjzdmgJ","toolName":"bash","content":[{"type":"text","text":"$ bun run scripts/version-bump.ts patch\nBumped 0.5.11 → 0.5.12\n\nNext steps:\n  1. Update CHANGELOG.md — move [Unreleased] items to [0.5.12]\n  2. git add package.json src/version.ts CHANGELOG.md\n  3. git commit -m \"chore: release v0.5.12\"\n  4. git tag v0.5.12\n  5. git push && git push --tags\n"}],"isError":false,"timestamp":1781608675136}}
+{"type":"message","id":"106b89be","parentId":"856abf94","timestamp":"2026-06-16T11:17:57.580Z","message":{"role":"assistant","content":[{"type":"toolCall","id":"toolu_01PS4mKPAi2DiKUmf4qUDVpK","name":"bash","arguments":{"command":"cd /workspace && git log v0.5.11..HEAD --format='%H %s' 2>&1; echo \"---\"; git show --stat 476111de 2>&1 | head -20; echo \"---\"; git show --stat 1201f4e8 2>&1 | head -20"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":149,"cacheRead":10829,"cacheWrite":332,"totalTokens":11311,"cost":{"input":0.000005,"output":0.003725,"cacheRead":0.0054145,"cacheWrite":0.002075,"total":0.0112195}},"stopReason":"toolUse","timestamp":1781608675138,"responseId":"msg_01TiLnb5Bt5GLhgYZYe6GmuT"}}
+{"type":"message","id":"02d9f926","parentId":"106b89be","timestamp":"2026-06-16T11:17:57.606Z","message":{"role":"toolResult","toolCallId":"toolu_01PS4mKPAi2DiKUmf4qUDVpK","toolName":"bash","content":[{"type":"text","text":"1201f4e8257788f80ec7e9d6dec697c78059b991 Tidy src/index.ts unknown-command JSON path: use outputJson() and hoist… (#91)\n476111de06bd3ed5432e390275168158ba6ac666 Validate --status and --type values in sd list, search, and ready (#90)\n36cc109f6788ee1ab74d559d8fc67b3016243b60 chore(warren): seeds state (#89)\n---\ncommit 476111de06bd3ed5432e390275168158ba6ac666\nAuthor: Jaymin West <jayminwest@gmail.com>\nDate:   Tue Jun 16 04:14:09 2026 -0700\n\n    Validate --status and --type values in sd list, search, and ready (#90)\n    \n    * feat(list/search/ready): validate --status and --type flag values (seeds-d305)\n    \n    Add up-front validation for --status and --type in sd list, search, and\n    ready, mirroring the idiom already used by sd update. Invalid values now\n    exit 1 with 'Invalid --<flag> value: X. Valid: a|b|c' on stderr (or a\n    {success:false, command, error} envelope under --json) instead of\n    silently filtering to an empty result.\n    \n    Tests cover both human and --json paths for each command.\n    \n    Refs: pl-a786 step 1\n    \n    * chore(warren): seeds state\n    \n---\ncommit 1201f4e8257788f80ec7e9d6dec697c78059b991\nAuthor: Jaymin West <jayminwest@gmail.com>\nDate:   Tue Jun 16 04:17:25 2026 -0700\n\n    Tidy src/index.ts unknown-command JSON path: use outputJson() and hoist… (#91)\n    \n    * refactor(cli): tidy unknown-command JSON path and hoist jsonMode\n    \n    Route the unknown-command JSON error envelope through outputJson() like\n    every other JSON output site, and hoist the top-level jsonMode constant\n    above main() so the closure read inside main() and the .catch() handler\n    both see a fully initialized binding (no TDZ window).\n    \n    Output is byte-identical: outputJson() emits the same two-space\n    JSON.stringify with a trailing newline.\n    \n    Closes seeds-e93c.\n    \n    * chore(warren): seeds state\n    \n"}],"isError":false,"timestamp":1781608677605}}
+{"type":"message","id":"51e038d8","parentId":"02d9f926","timestamp":"2026-06-16T11:18:03.656Z","message":{"role":"assistant","content":[{"type":"toolCall","id":"toolu_01LXpBqcAr8rqbwFn42QwoaX","name":"edit","arguments":{"path":"/workspace/CHANGELOG.md","edits":[{"oldText":"## [Unreleased]\n\n## [0.5.11]","newText":"## [Unreleased]\n\n## [0.5.12] - 2026-06-16\n\nNightwatch patrol fixes (plan pl-a786): two narrow validation and refactor fixes from a nightwatch sweep.\n\n### Fixed\n- `sd list`, `sd search`, and `sd ready` now validate `--status` and `--type` flag values up front, matching the idiom already used by `sd update`. Invalid values exit 1 with `Invalid --<flag> value: X. Valid: a|b|c` on stderr (or a `{success:false, command, error}` envelope under `--json`) instead of silently filtering to an empty result. (seeds-d305)\n\n### Internal\n- `src/index.ts` unknown-command JSON error envelope now routes through `outputJson()` like every other JSON output site, and the top-level `jsonMode` constant is hoisted above `main()` so the closure read inside `main()` and the `.catch()` handler both see a fully initialized binding (no TDZ window). Output is byte-identical. (seeds-e93c)\n\n## [0.5.11]"}]}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":501,"cacheRead":11161,"cacheWrite":943,"totalTokens":12606,"cost":{"input":0.000005,"output":0.012525000000000001,"cacheRead":0.0055804999999999995,"cacheWrite":0.0058937500000000006,"total":0.02400425}},"stopReason":"toolUse","timestamp":1781608677606,"responseId":"msg_01EyLbfC5xwUzaqHsX5dkWse"}}
+{"type":"message","id":"a33aca9d","parentId":"51e038d8","timestamp":"2026-06-16T11:18:03.672Z","message":{"role":"toolResult","toolCallId":"toolu_01LXpBqcAr8rqbwFn42QwoaX","toolName":"edit","content":[{"type":"text","text":"Successfully replaced 1 block(s) in /workspace/CHANGELOG.md."}],"details":{"diff":"     ...\n   6 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n   7 \n   8 ## [Unreleased]\n   9 \n+ 10 ## [0.5.12] - 2026-06-16\n+ 11 \n+ 12 Nightwatch patrol fixes (plan pl-a786): two narrow validation and refactor fixes from a nightwatch sweep.\n+ 13 \n+ 14 ### Fixed\n+ 15 - `sd list`, `sd search`, and `sd ready` now validate `--status` and `--type` flag values up front, matching the idiom already used by `sd update`. Invalid values exit 1 with `Invalid --<flag> value: X. Valid: a|b|c` on stderr (or a `{success:false, command, error}` envelope under `--json`) instead of silently filtering to an empty result. (seeds-d305)\n+ 16 \n+ 17 ### Internal\n+ 18 - `src/index.ts` unknown-command JSON error envelope now routes through `outputJson()` like every other JSON output site, and the top-level `jsonMode` constant is hoisted above `main()` so the closure read inside `main()` and the `.catch()` handler both see a fully initialized binding (no TDZ window). Output is byte-identical. (seeds-e93c)\n+ 19 \n  10 ## [0.5.11] - 2026-06-16\n  11 \n  12 ### Fixed\n  13 - `sd` now exits cleanly (exit 0) when a downstream reader closes the pipe early — the common `sd ... --json | head` idiom. Previously a large stdout write to an early-closing reader threw an uncaught EPIPE error or, on Linux, busy-spun at 100% CPU. Added process-level `stdout`/`stderr` EPIPE handlers plus an EPIPE-safe `writeStdout()` helper for the `Bun.write(Bun.stdout)` path (which bypasses the stream objects); `outputJson` and all direct stdout writes route through it. (seeds-3024)\n     ...","patch":"--- /workspace/CHANGELOG.md\n+++ /workspace/CHANGELOG.md\n@@ -6,8 +6,18 @@\n and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n \n ## [Unreleased]\n \n+## [0.5.12] - 2026-06-16\n+\n+Nightwatch patrol fixes (plan pl-a786): two narrow validation and refactor fixes from a nightwatch sweep.\n+\n+### Fixed\n+- `sd list`, `sd search`, and `sd ready` now validate `--status` and `--type` flag values up front, matching the idiom already used by `sd update`. Invalid values exit 1 with `Invalid --<flag> value: X. Valid: a|b|c` on stderr (or a `{success:false, command, error}` envelope under `--json`) instead of silently filtering to an empty result. (seeds-d305)\n+\n+### Internal\n+- `src/index.ts` unknown-command JSON error envelope now routes through `outputJson()` like every other JSON output site, and the top-level `jsonMode` constant is hoisted above `main()` so the closure read inside `main()` and the `.catch()` handler both see a fully initialized binding (no TDZ window). Output is byte-identical. (seeds-e93c)\n+\n ## [0.5.11] - 2026-06-16\n \n ### Fixed\n - `sd` now exits cleanly (exit 0) when a downstream reader closes the pipe early — the common `sd ... --json | head` idiom. Previously a large stdout write to an early-closing reader threw an uncaught EPIPE error or, on Linux, busy-spun at 100% CPU. Added process-level `stdout`/`stderr` EPIPE handlers plus an EPIPE-safe `writeStdout()` helper for the `Bun.write(Bun.stdout)` path (which bypasses the stream objects); `outputJson` and all direct stdout writes route through it. (seeds-3024)\n","firstChangedLine":10},"isError":false,"timestamp":1781608683672}}
+{"type":"message","id":"1cd98fca","parentId":"a33aca9d","timestamp":"2026-06-16T11:18:06.573Z","message":{"role":"assistant","content":[{"type":"text","text":"Check if README/CLAUDE.md need updates (no command count/structure changes here):"},{"type":"toolCall","id":"toolu_01Jn1y6ubtHRV1fBg1BLTTLt","name":"bash","arguments":{"command":"cd /workspace && grep -n \"0\\.5\\.11\\|0\\.5\\.10\" README.md CLAUDE.md 2>&1 | head"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":137,"cacheRead":12104,"cacheWrite":543,"totalTokens":12785,"cost":{"input":0.000005,"output":0.003425,"cacheRead":0.006052,"cacheWrite":0.00339375,"total":0.012875750000000002}},"stopReason":"toolUse","timestamp":1781608683673,"responseId":"msg_01Vog5fLYasY2XvLkShbAdLT"}}
+{"type":"message","id":"70f2d619","parentId":"1cd98fca","timestamp":"2026-06-16T11:18:06.579Z","message":{"role":"toolResult","toolCallId":"toolu_01Jn1y6ubtHRV1fBg1BLTTLt","toolName":"bash","content":[{"type":"text","text":"(no output)"}],"isError":false,"timestamp":1781608686579}}
+{"type":"message","id":"1f0b669d","parentId":"70f2d619","timestamp":"2026-06-16T11:18:12.866Z","message":{"role":"assistant","content":[{"type":"text","text":"No version refs in README/CLAUDE.md. Now run the quality gate:"},{"type":"toolCall","id":"toolu_0183jo9P97HymmKJTL2yXs6k","name":"bash","arguments":{"command":"cd /workspace && echo \"WARREN_QUALITY_GATE=$WARREN_QUALITY_GATE\""}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":128,"cacheRead":12647,"cacheWrite":153,"totalTokens":12929,"cost":{"input":0.000005,"output":0.0032,"cacheRead":0.0063235,"cacheWrite":0.0009562500000000001,"total":0.010484750000000001}},"stopReason":"toolUse","timestamp":1781608686580,"responseId":"msg_015wVPRDs22N3SuWkrRgA53z"}}
+{"type":"message","id":"2bbe2e80","parentId":"1f0b669d","timestamp":"2026-06-16T11:18:12.869Z","message":{"role":"toolResult","toolCallId":"toolu_0183jo9P97HymmKJTL2yXs6k","toolName":"bash","content":[{"type":"text","text":"WARREN_QUALITY_GATE=\n"}],"isError":false,"timestamp":1781608692869}}
+{"type":"message","id":"cb28b642","parentId":"2bbe2e80","timestamp":"2026-06-16T11:18:15.881Z","message":{"role":"assistant","content":[{"type":"toolCall","id":"toolu_016gAFvmoApZbKxPCwFdS3d4","name":"bash","arguments":{"command":"cd /workspace && bun run check:all 2>&1 | tail -40"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":85,"cacheRead":12800,"cacheWrite":156,"totalTokens":13042,"cost":{"input":0.000005,"output":0.002125,"cacheRead":0.0063999999999999994,"cacheWrite":0.0009750000000000001,"total":0.009505}},"stopReason":"toolUse","timestamp":1781608692870,"responseId":"msg_019BvpYcFE8s7PbPyRS5U4ZS"}}
+{"type":"message","id":"b58cf597","parentId":"cb28b642","timestamp":"2026-06-16T11:18:27.086Z","message":{"role":"toolResult","toolCallId":"toolu_016gAFvmoApZbKxPCwFdS3d4","toolName":"bash","content":[{"type":"text","text":"$ bun scripts/check-all.ts\n✗ lint            (0.0s)\n✗ typecheck       (0.0s)\n✓ check:agents    (0.0s)\n✓ check:dups      (0.4s)\n✗ check:deps      (0.0s)\n✓ check:size      (0.0s)\n✓ check:debt      (0.0s)\n✗ check:coverage  (10.4s)\n✓ check:ci-parity (0.2s)\n\n4 gate(s) failed: lint, typecheck, check:deps, check:coverage\n\n── lint ──\n  error: script \"lint\" exited with code 127\n  ↳ re-run: bun run lint  (or CHECK_ALL_VERBOSE=1 bun run check:all)\n── typecheck ──\n  error: script \"typecheck\" exited with code 127\n  ↳ re-run: bun run typecheck  (or CHECK_ALL_VERBOSE=1 bun run check:all)\n── check:deps ──\n  error: script \"check:deps\" exited with code 127\n  ↳ re-run: bun run check:deps  (or CHECK_ALL_VERBOSE=1 bun run check:all)\n── check:coverage ──\n  error: Cannot find package 'pino' from '/workspace/src/log.ts'\n  error: Cannot find package 'chalk' from '/workspace/src/output.ts'\n  error: Cannot find package 'ajv' from '/workspace/src/validation.ts'\n  error: Cannot find package 'chalk' from '/workspace/src/error-handler.ts'\n  error: Cannot find package 'chalk' from '/workspace/src/test-harness.ts'\n  error: Cannot find package 'yaml' from '/workspace/scripts/check-ci-parity.ts'\n  (pass) scan — synthetic violation > flags a file that exceeds its frozen budget [0.36ms]\n  error: script \"check:coverage\" exited with code 1\n  ↳ re-run: bun run check:coverage  (or CHECK_ALL_VERBOSE=1 bun run check:all)\nerror: script \"check:all\" exited with code 1\n"}],"isError":false,"timestamp":1781608707086}}
+{"type":"message","id":"515db0af","parentId":"b58cf597","timestamp":"2026-06-16T11:18:29.348Z","message":{"role":"assistant","content":[{"type":"text","text":"Dependencies not installed."},{"type":"toolCall","id":"toolu_011KBpLqyPjhp6bS8CLDMsc1","name":"bash","arguments":{"command":"cd /workspace && bun install 2>&1 | tail -10"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":92,"cacheRead":12956,"cacheWrite":800,"totalTokens":13849,"cost":{"input":0.000005,"output":0.0023,"cacheRead":0.006477999999999999,"cacheWrite":0.005,"total":0.013783}},"stopReason":"toolUse","timestamp":1781608707087,"responseId":"msg_015uZmqoJL1CGjzz4c2DDG6A"}}
+{"type":"message","id":"46844b8c","parentId":"515db0af","timestamp":"2026-06-16T11:18:30.572Z","message":{"role":"toolResult","toolCallId":"toolu_011KBpLqyPjhp6bS8CLDMsc1","toolName":"bash","content":[{"type":"text","text":"+ knip@6.14.2\n+ pino@10.3.1\n+ pino-pretty@13.1.3\n+ typescript@5.9.3\n+ yaml@2.9.0\n+ ajv@8.20.0\n+ chalk@5.6.2\n+ commander@14.0.3\n\n64 packages installed [1201.00ms]\n"}],"isError":false,"timestamp":1781608710572}}
+{"type":"message","id":"bbefefcc","parentId":"46844b8c","timestamp":"2026-06-16T11:18:34.316Z","message":{"role":"assistant","content":[{"type":"toolCall","id":"toolu_01JSMECYnk7eiXziWWTowaZB","name":"bash","arguments":{"command":"cd /workspace && bun run check:all 2>&1 | tail -20"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":85,"cacheRead":13756,"cacheWrite":215,"totalTokens":14057,"cost":{"input":0.000005,"output":0.002125,"cacheRead":0.0068779999999999996,"cacheWrite":0.0013437500000000001,"total":0.010351749999999998}},"stopReason":"toolUse","timestamp":1781608710573,"responseId":"msg_014mYTmwkqVdTWP7og4LNYY6"}}
+{"type":"message","id":"0136b1ed","parentId":"bbefefcc","timestamp":"2026-06-16T11:19:04.563Z","message":{"role":"toolResult","toolCallId":"toolu_01JSMECYnk7eiXziWWTowaZB","toolName":"bash","content":[{"type":"text","text":"$ bun scripts/check-all.ts\n✓ lint            (0.6s)\n✓ typecheck       (6.2s)\n✓ check:agents    (0.0s)\n✓ check:dups      (0.1s)\n✓ check:deps      (1.9s)\n✓ check:size      (0.0s)\n✓ check:debt      (0.0s)\n✓ check:coverage  (21.2s)\n✓ check:ci-parity (0.1s)\n\n9/9 gates passed (30.2s)\n"}],"isError":false,"timestamp":1781608744562}}
+{"type":"message","id":"4df2565e","parentId":"0136b1ed","timestamp":"2026-06-16T11:19:37.328Z","message":{"role":"assistant","content":[{"type":"text","text":"All gates green. Now close the seed and commit:"},{"type":"toolCall","id":"toolu_01UGXLuuyXwzLJM5uFrt69bF","name":"bash","arguments":{"command":"cd /workspace && bunx sd close seeds-47c1 2>&1 | tail -5 && bunx sd sync 2>&1 | tail -10"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":128,"cacheRead":13971,"cacheWrite":262,"totalTokens":14362,"cost":{"input":0.000005,"output":0.0032,"cacheRead":0.0069854999999999995,"cacheWrite":0.0016375,"total":0.011828}},"stopReason":"toolUse","timestamp":1781608744564,"responseId":"msg_01NmHYkbzQGNFvaNd3D5Uujx"}}
+{"type":"message","id":"53bbe20a","parentId":"4df2565e","timestamp":"2026-06-16T11:19:37.607Z","message":{"role":"toolResult","toolCallId":"toolu_01UGXLuuyXwzLJM5uFrt69bF","toolName":"bash","content":[{"type":"text","text":"✓ Closed seeds-47c1\n! Inside a git worktree — skipping commit. Issues are stored in the main repo.\n"}],"isError":false,"timestamp":1781608777607}}
+{"type":"message","id":"c3b3fb7d","parentId":"53bbe20a","timestamp":"2026-06-16T11:19:41.805Z","message":{"role":"assistant","content":[{"type":"toolCall","id":"toolu_018QCYuwbMhtxn7g3eGs9zj6","name":"bash","arguments":{"command":"cd /workspace && git status && echo \"---\" && git add -A && git commit -m \"release: v0.5.12\n\nPatch release covering plan pl-a786 nightwatch fixes:\n- seeds-d305: validate --status/--type in sd list, search, ready\n- seeds-e93c: tidy unknown-command JSON path in src/index.ts\n\nCloses seeds-47c1.\" 2>&1 | tail -15"}}],"api":"anthropic-messages","provider":"anthropic","model":"claude-opus-4-7","usage":{"input":1,"output":197,"cacheRead":14233,"cacheWrite":183,"totalTokens":14614,"cost":{"input":0.000005,"output":0.0049250000000000006,"cacheRead":0.0071164999999999996,"cacheWrite":0.00114375,"total":0.01319025}},"stopReason":"toolUse","timestamp":1781608777608,"responseId":"msg_014nvqiaxPU6gyg6fWY6upZ7"}}
diff --git a/.seeds/issues.jsonl b/.seeds/issues.jsonl
index 9e840e6a..59ffe4ad 100644
--- a/.seeds/issues.jsonl
+++ b/.seeds/issues.jsonl
@@ -226,7 +226,7 @@
 {"id":"seeds-5827","title":"Document withLock contract on store append helpers (JSDoc only)","status":"closed","type":"task","priority":4,"plan_step_index":4,"description":"<!-- seeds:plan-backref:start -->\nStep 5 of plan pl-a847.\n\nParent seed: seeds-1ea8 — nightwatch patrol: 2026-06-09\nPlan template: refactor\nPlan approach: Land one small, focused PR per finding. Each PR adds or extends a co-located *.test.ts before changing behavior. No new dependencies, no module reorganization, no public-API signature changes. Inconsistencies are resolved by making the…\n\nRun `sd plan show pl-a847` for the full plan (context, alternatives, sibling steps, acceptance criteria).\n<!-- seeds:plan-backref:end -->","createdAt":"2026-06-09T11:05:56.593Z","updatedAt":"2026-06-09T11:28:48.364Z","labels":["nightwatch"],"plan_id":"pl-a847","blocks":["seeds-a15c","seeds-1ea8"],"closedAt":"2026-06-09T11:28:48.364Z"}
 {"id":"seeds-a15c","title":"Release: run /release per .claude/commands/release.md","status":"closed","type":"task","priority":3,"plan_step_index":5,"description":"<!-- seeds:plan-backref:start -->\nStep 6 of plan pl-a847.\n\nParent seed: seeds-1ea8 — nightwatch patrol: 2026-06-09\nPlan template: refactor\nPlan approach: Land one small, focused PR per finding. Each PR adds or extends a co-located *.test.ts before changing behavior. No new dependencies, no module reorganization, no public-API signature changes. Inconsistencies are resolved by making the…\n\nRun `sd plan show pl-a847` for the full plan (context, alternatives, sibling steps, acceptance criteria).\n<!-- seeds:plan-backref:end -->","createdAt":"2026-06-09T11:05:56.593Z","updatedAt":"2026-06-09T11:32:51.756Z","labels":["nightwatch"],"plan_id":"pl-a847","blocks":["seeds-1ea8"],"closedAt":"2026-06-09T11:32:51.756Z"}
 {"id":"seeds-b4cf","title":"probe-label-alias-test","status":"open","type":"bug","priority":2,"createdAt":"2026-06-12T16:01:05.927Z","updatedAt":"2026-06-12T16:01:05.927Z","labels":["foo","bar"]}
-{"id":"seeds-2718","title":"nightwatch patrol: 2026-06-16","status":"open","type":"task","priority":3,"createdAt":"2026-06-16T11:07:13.938Z","updatedAt":"2026-06-16T11:16:17.065Z","labels":["patrol","nightwatch"],"plan_id":"pl-a786","blockedBy":["seeds-47c1"]}
+{"id":"seeds-2718","title":"nightwatch patrol: 2026-06-16","status":"open","type":"task","priority":3,"createdAt":"2026-06-16T11:07:13.938Z","updatedAt":"2026-06-16T11:20:00.484Z","labels":["patrol","nightwatch"],"plan_id":"pl-a786"}
 {"id":"seeds-d305","title":"Validate --status and --type values in sd list, search, and ready","status":"closed","type":"bug","priority":2,"plan_step_index":0,"description":"<!-- seeds:plan-backref:start -->\nStep 1 of plan pl-a786.\n\nParent seed: seeds-2718 — nightwatch patrol: 2026-06-16\nPlan template: refactor\nPlan approach: Surgical edits, no architecture changes. Each step is a single small PR that mirrors an existing pattern already in the codebase (the same validation idiom used by sd update, the same outputJson() helper used by every command). Keep the…\n\nRun `sd plan show pl-a786` for the full plan (context, alternatives, sibling steps, acceptance criteria).\n<!-- seeds:plan-backref:end -->","createdAt":"2026-06-16T11:07:52.499Z","updatedAt":"2026-06-16T11:13:00.112Z","labels":["nightwatch"],"plan_id":"pl-a786","blocks":["seeds-47c1","seeds-2718"],"closedAt":"2026-06-16T11:13:00.112Z"}
 {"id":"seeds-e93c","title":"Tidy src/index.ts unknown-command JSON path: use outputJson() and hoist jsonMode declaration above main()","status":"closed","type":"task","priority":3,"plan_step_index":1,"description":"<!-- seeds:plan-backref:start -->\nStep 2 of plan pl-a786.\n\nParent seed: seeds-2718 — nightwatch patrol: 2026-06-16\nPlan template: refactor\nPlan approach: Surgical edits, no architecture changes. Each step is a single small PR that mirrors an existing pattern already in the codebase (the same validation idiom used by sd update, the same outputJson() helper used by every command). Keep the…\n\nRun `sd plan show pl-a786` for the full plan (context, alternatives, sibling steps, acceptance criteria).\n<!-- seeds:plan-backref:end -->","createdAt":"2026-06-16T11:07:52.499Z","updatedAt":"2026-06-16T11:16:17.065Z","labels":["nightwatch"],"plan_id":"pl-a786","blocks":["seeds-47c1","seeds-2718"],"closedAt":"2026-06-16T11:16:17.065Z"}
-{"id":"seeds-47c1","title":"Release: run /release per .claude/commands/release.md","status":"open","type":"task","priority":2,"plan_step_index":2,"description":"<!-- seeds:plan-backref:start -->\nStep 3 of plan pl-a786.\n\nParent seed: seeds-2718 — nightwatch patrol: 2026-06-16\nPlan template: refactor\nPlan approach: Surgical edits, no architecture changes. Each step is a single small PR that mirrors an existing pattern already in the codebase (the same validation idiom used by sd update, the same outputJson() helper used by every command). Keep the…\n\nRun `sd plan show pl-a786` for the full plan (context, alternatives, sibling steps, acceptance criteria).\n<!-- seeds:plan-backref:end -->","createdAt":"2026-06-16T11:07:52.499Z","updatedAt":"2026-06-16T11:16:17.065Z","labels":["nightwatch"],"plan_id":"pl-a786","blocks":["seeds-2718"]}
+{"id":"seeds-47c1","title":"Release: run /release per .claude/commands/release.md","status":"closed","type":"task","priority":2,"plan_step_index":2,"description":"<!-- seeds:plan-backref:start -->\nStep 3 of plan pl-a786.\n\nParent seed: seeds-2718 — nightwatch patrol: 2026-06-16\nPlan template: refactor\nPlan approach: Surgical edits, no architecture changes. Each step is a single small PR that mirrors an existing pattern already in the codebase (the same validation idiom used by sd update, the same outputJson() helper used by every command). Keep the…\n\nRun `sd plan show pl-a786` for the full plan (context, alternatives, sibling steps, acceptance criteria).\n<!-- seeds:plan-backref:end -->","createdAt":"2026-06-16T11:07:52.499Z","updatedAt":"2026-06-16T11:20:00.484Z","labels":["nightwatch"],"plan_id":"pl-a786","blocks":["seeds-2718"],"closedAt":"2026-06-16T11:20:00.484Z"}
diff --git a/.seeds/plans.jsonl b/.seeds/plans.jsonl
index d8d14bae..320338d6 100644
--- a/.seeds/plans.jsonl
+++ b/.seeds/plans.jsonl
@@ -15,4 +15,4 @@
 {"id":"pl-78eb","seed":"seeds-67a6","template":"feature","status":"done","revision":1,"sections":{"context":"seeds already has the canonical terse check scripts (check:size/debt/dups/deps/agents/coverage) backed by l5-toolkit scripts and .jscpd.json/knip.json, but its check:all is a plain && chain that omits lint and typecheck and has no quiet runner, no `verify` alias, and no check:ci-parity. Conforming to docs/check-all-standard.md (os-eco-9048) means adopting the byte-identical runner (os-eco-5db7) and adding the missing gates. Depends on root tracker pl-760e steps 1-2.","approach":"Swap the && chain for the canonical quiet runner with a GATES manifest in the standard's order (folding in the already-present lint and typecheck scripts), then add the generalized ci-parity gate and the verify alias. seeds has no UI bundle or OpenAPI surface, so conditional gates are out of scope; only the core gate set applies.","steps":[{"title":"Add the canonical scripts/check-all.ts quiet runner copied byte-identical from templates/l5-toolkit/scripts/check-all.ts, with seeds's exported GATES manifest in the standard's order: lint, typecheck, check:agents, check:dups, check:deps, check:size, check:debt, check:coverage, check:ci-parity (last) -- note lint and typecheck must be ADDED to the manifest (they exist as scripts but are absent from the current && chain). Replace package.json check:all with `bun scripts/check-all.ts`, add `verify`: `bun run check:all`, and add scripts/check-all.test.ts. Confirm the quiet-output contract.","type":"task","priority":2,"blocks":[2]},{"title":"Add scripts/check-ci-parity.ts (with test) copied from templates/l5-toolkit/scripts, importing the GATES array from check-all.ts; add the check:ci-parity script as the final gate in the manifest. Reconcile any residual non-canonical gate name. Verify check:ci-parity passes against .github/workflows/ci.yml.","type":"task","priority":2,"blocks":[3]},{"title":"Wire .github/workflows/ci.yml to invoke the canonical gates (or `bun run check:all`) so the local manifest matches CI. Run `bun run check:all` and `bun run verify` green end-to-end with the quiet-output contract and a passing check:ci-parity.","type":"task","priority":2,"blocks":[]}],"acceptance":["check:all is `bun scripts/check-all.ts` with the byte-identical runner and a GATES manifest in the standard's order including lint and typecheck; verify aliases check:all.","scripts/check-ci-parity.ts imports GATES and passes against .github/workflows/ci.yml.","`bun run check:all` runs green with the quiet-output contract."]},"children":["seeds-3540","seeds-ef60","seeds-0483"],"createdAt":"2026-06-12T04:53:29.001Z","updatedAt":"2026-06-12T05:47:00.642Z","name":"Adopt canonical check:all standard (seeds)","outcome":"success","outcomeNote":"9/9 gates green; runner+parity byte-identical to l5-toolkit; biome bumped to ^2.4.14 for fleet baseline"}
 {"id":"pl-1496","seed":"seeds-6804","template":"refactor","status":"approved","revision":1,"sections":{"context":"Static scan of seeds@HEAD on 2026-06-02 surfaced a small cluster of quality issues that have crept in around shared CLI plumbing: an unused export, duplicated parsing logic, inconsistent error-message phrasing across commands, one command (`sd sync`) that bypasses the project's standard print/JSON-error helpers, an edge-case bug in the JSONL appenders, and stale knip configuration entries. None of these are urgent on their own, but each is a 'broken-window' that pulls the codebase away from its own conventions (CLAUDE.md: single source of truth for parsing/validation, output.ts owns user-facing prints, no dead exports, knip stays clean). Baseline gates are green: `bun run lint`, `bun run typecheck`, `bun test` (953 pass), `bun run check:size`, `bun run check:debt` all pass; `bunx knip` reports the unused exports and config hints fixed here.","behavior_invariant":"Every user-observable behavior of the `sd` CLI stays identical: identical exit codes, identical JSON payload shapes and key order for every command, identical human-readable text (modulo the consolidated `Valid: a|b|c` wording for invalid-enum errors, which is itself a stated normalization), identical lock semantics in `src/store.ts`, identical `.seeds/issues.jsonl|templates.jsonl|plans.jsonl` on-disk format. `bun test` must stay at 953 pass / 0 fail (plus any new regression tests added for the appender bug), `bun run lint` / `bun run typecheck` / `bun run check:size` / `bun run check:debt` must stay green, and `bunx knip` must report zero unused exports and zero configuration hints when the patrol lands.","approach":"Land each finding as its own small PR. Order independent fixes first (dead code, knip config, error-message wording) and dependent fixes later. No public API changes, no new commands, no dependency churn. Every behavior-changing fix (appender newline normalization, sync.ts output routing) ships with a regression test that fails before the fix and passes after. The final step is the standard /release per .claude/commands/release.md, gated on every preceding step.","steps":[{"title":"Drop unused MIN_PRIORITY / MAX_PRIORITY exports in src/priority.ts","type":"task","priority":3,"blocks":[],"labels":["nightwatch","dead-code"]},{"title":"Clean stale knip.json entries (pino-pretty, bun-types)","type":"task","priority":3,"blocks":[],"labels":["nightwatch","config"]},{"title":"Normalize 'Valid: a|b|c' wording across enum validation errors","type":"task","priority":3,"blocks":[],"labels":["nightwatch","consistency"]},{"title":"Replace local parsePriority in src/commands/update.ts with shared src/priority.ts helpers","type":"task","priority":3,"blocks":[],"labels":["nightwatch","duplication"]},{"title":"Route sd sync output through printSuccess + outputJson error path","type":"task","priority":3,"blocks":[],"labels":["nightwatch","consistency"]},{"title":"Fix appendIssue/appendTemplate/appendPlan trailing-newline edge case in src/store.ts","type":"bug","priority":2,"blocks":[],"labels":["nightwatch","bug"]},{"title":"Release: run /release per .claude/commands/release.md","type":"task","priority":3,"blocks":[],"labels":["nightwatch"]}],"acceptance":["bun run lint, bun run typecheck, bun test, bun run check:size, bun run check:debt, bun run check:agents all exit 0 on the final state.","bunx knip reports zero unused exports and zero configuration hints.","A new regression test in src/store.test.ts proves that appendIssue against a file with no trailing newline produces a well-formed JSONL file (two records on two lines, not concatenated on one).","`sd sync` (success, no-op, and git-failure paths) emits the standard '✓ ...' brand line on stdout (or printError on stderr) and, when --json is set, emits the canonical {success, command, ...} payload — verified by tests in src/commands/sync.test.ts.","All 'Invalid --X value: <val>. Valid: …' error messages in src/commands/ and src/format.ts use the same delimiter (`|`), verified by grep + a focused test."]},"children":["seeds-cee8","seeds-3918","seeds-3df8","seeds-4b6a","seeds-b9fa","seeds-1b6b","seeds-5787"],"createdAt":"2026-06-02T11:06:34.084Z","updatedAt":"2026-06-02T11:06:34.084Z","name":"nightwatch patrol 2026-06-02"}
 {"id":"pl-a847","seed":"seeds-1ea8","template":"refactor","status":"done","revision":1,"sections":{"context":"Code-patrol scan on 2026-06-09 surfaced five small quality issues across src/. (1) sd search lacks plan-annotation parity with sd list and sd ready in human/plain output. (2) The plan-suffix branch in sd list and sd ready writes via process.stdout.write and bypasses the -q/--quiet flag enforced through src/output.ts printIssueOneLine. (3) src/log.ts resolveLevel() casts SEEDS_LOG_LEVEL to pino.Level without validation, so an unknown value crashes logger init at import time. (4) src/priority.ts parsePriority + isValidPriority accept fractional input ('2.5' -> 2 via Number.parseInt) while src/filter.ts parsePriorityToken rejects it with a regex guard; the same flag is policed inconsistently across commands. (5) src/store.ts appendIssue / appendTemplate / appendPlan mutate JSONL files without acquiring the lock themselves and trust callers to wrap them in withLock — the contract is enforced by convention but absent from the JSDoc. None of these changes touch a public CLI flag, command name, or JSON payload key.","behavior_invariant":"User-visible CLI contract is preserved end-to-end: command names, flag names, exit codes, and --json payload shape (success, command, error, issues, count, query) stay identical to today. Human-format output keeps existing wording and counts. Priority semantics stay 0-4 / P0-P4 with the existing PRIORITY_ERROR message verbatim. Locking semantics and on-disk JSONL format are unchanged. Every test in src/ and scripts/ that passes today still passes; new regression tests cover the specific gaps being closed.","approach":"Land one small, focused PR per finding. Each PR adds or extends a co-located *.test.ts before changing behavior. No new dependencies, no module reorganization, no public-API signature changes. Inconsistencies are resolved by making the laxer call site match the stricter one (priority parsing) or by porting an existing helper (plan annotation in search). Quality gates (bun test, bun run lint, bun run typecheck, bun run check:size, bun run check:debt, bun run check:agents) must all pass on each PR. Per-step detail: STEP 1 — src/commands/list.ts default branch (~lines 145-158) and src/commands/ready.ts default branch (~lines 178-192) use `if (suffix) process.stdout.write(...) else printIssueOneLine(...)`; process.stdout.write skips the _quiet gate that printIssueOneLine respects. Fix: route the suffix-bearing line through an output.ts helper (e.g. extend printIssueOneLine to take an optional suffix, or add printIssueOneLineWithSuffix) so -q suppresses both branches. Add regression tests in list.test.ts and ready.test.ts using the existing test-harness capture. STEP 2 — src/commands/search.ts (~lines 135-165) calls issueJsonWithPlan for json mode but plain and default modes render via formatIssueOneLine without planLineSuffix, unlike list.ts and ready.ts. Port the same pattern: load planCtx (already imported elsewhere in the file or via loadPlanContext), build planForIssue, append planLineSuffix in plain and default. Add a search.test.ts case verifying a seed under an active plan renders the suffix. STEP 3 — src/log.ts resolveLevel() does `const explicit = process.env.SEEDS_LOG_LEVEL as pino.Level | undefined` — replace the bare cast with a check against pino.levels.values keys (trace/debug/info/warn/error/fatal/silent). Unknown values fall back to the SEEDS_DEBUG / info default. Add a log.test.ts case for an unknown level. STEP 4 — src/priority.ts parsePriority: after stripping the optional P/p prefix, validate the remaining substring matches /^\\d+$/ before Number.parseInt; return NaN otherwise so callers raise PRIORITY_ERROR. Mirrors src/filter.ts parsePriorityToken. Extend priority.test.ts to cover '2.5', '2a', ' 2 ', 'P2.5', and confirm '2' and 'P2' still pass. STEP 5 — src/store.ts: add JSDoc to appendIssue, appendTemplate, appendPlan stating 'Caller must hold withLock(<correspondingPath>(seedsDir), …) — these helpers do not acquire the file lock themselves; concurrent writes without the lock can lose data.' No code change; documentation-drift fix. STEP 6 — release per .claude/commands/release.md once all five fixes are merged.","steps":[{"title":"Fix -q/--quiet bypass in sd list and sd ready plan-suffix branch","type":"bug","priority":2,"blocks":[6],"labels":["nightwatch"]},{"title":"Add plan annotation parity to sd search (default + plain formats)","type":"task","priority":3,"blocks":[6],"labels":["nightwatch"]},{"title":"Validate SEEDS_LOG_LEVEL in src/log.ts resolveLevel()","type":"bug","priority":3,"blocks":[6],"labels":["nightwatch"]},{"title":"Reject fractional --priority input in src/priority.ts","type":"bug","priority":3,"blocks":[6],"labels":["nightwatch"]},{"title":"Document withLock contract on store append helpers (JSDoc only)","type":"task","priority":4,"blocks":[6],"labels":["nightwatch"]},{"title":"Release: run /release per .claude/commands/release.md","type":"task","priority":3,"blocks":[],"labels":["nightwatch"]}],"acceptance":["bun test, bun run lint, bun run typecheck all exit 0 after every step","bun run check:size, bun run check:debt, bun run check:agents all exit 0 after every step","sd list -q and sd ready -q produce no stdout when matching issues carry plan suffixes (new regression test in list.test.ts / ready.test.ts)","sd search --format plain (and default) renders plan suffixes identically to sd list, verified by a new search.test.ts case","Setting SEEDS_LOG_LEVEL to an unknown value does not throw at logger init; falls back to info (new log.test.ts case)","sd create --priority 2.5 and sd tpl step add --priority 2.5 are rejected with PRIORITY_ERROR; existing valid 0-4 and P0-P4 values still accepted (new priority.test.ts cases)","src/store.ts JSDoc on appendIssue / appendTemplate / appendPlan explicitly states the caller must hold withLock on the corresponding file path","No public API surface (function signatures, CLI flags, --json payload keys) changes","/release executed successfully and CHANGELOG.md updated for the patrol fixes"]},"children":["seeds-6848","seeds-350d","seeds-96f0","seeds-8f1d","seeds-5827","seeds-a15c"],"createdAt":"2026-06-09T11:05:56.593Z","updatedAt":"2026-06-09T11:32:51.756Z","name":"nightwatch patrol 2026-06-09 fixes"}
-{"id":"pl-a786","seed":"seeds-2718","template":"refactor","status":"approved","revision":1,"sections":{"context":"Nightwatch patrol on 2026-06-16 found three small consistency gaps. (1) sd list/search accept arbitrary --status values and sd list/search/ready accept arbitrary --type values without validation — invalid input silently filters to an empty result instead of erroring the way sd create/update/tpl/plan do (cf. src/commands/update.ts:87-88 for --status, src/commands/update.ts:117-118 for --type). (2) src/index.ts:194 emits the unknown-command JSON error via raw writeStdout(JSON.stringify(payload, null, 2)) instead of routing through outputJson(payload) like every other JSON output site. (3) src/index.ts declares `const jsonMode = process.argv.includes(\"--json\")` *after* the `main()` function definition even though main() reads jsonMode through closure — a TDZ-fragile ordering that should be hoisted above main(). All other gates are green (bun test 993/993, bun run check:all 9/9).","behavior_invariant":"Existing valid invocations of sd list/search/ready and the unknown-command JSON error path must keep emitting byte-identical output. Specifically: (a) sd list/search/ready with valid --status (open|in_progress|closed) and valid --type (task|bug|feature|epic) still pass through unchanged; (b) the unknown-command JSON envelope shape stays { success: false, command, error, suggestion? } with two-space JSON.stringify indentation and a trailing newline; (c) all 993 existing tests in bun test continue to pass; (d) bun run check:all stays 9/9.","approach":"Surgical edits, no architecture changes. Each step is a single small PR that mirrors an existing pattern already in the codebase (the same validation idiom used by sd update, the same outputJson() helper used by every command). Keep the new --status / --type error messages in the same `Invalid --<flag> value: X. Valid: a|b|c` shape as src/commands/update.ts so the wording stays uniform across the CLI surface.","steps":[{"title":"Validate --status and --type values in sd list, search, and ready","type":"bug","priority":2,"labels":["nightwatch"],"blocks":[3]},{"title":"Tidy src/index.ts unknown-command JSON path: use outputJson() and hoist jsonMode declaration above main()","type":"task","priority":3,"labels":["nightwatch"],"blocks":[3]},{"title":"Release: run /release per .claude/commands/release.md","type":"task","priority":2,"labels":["nightwatch"],"blocks":[]}],"acceptance":["bun test passes (>=993 tests, 0 failures)","bun run check:all is 9/9","sd list --status bogus, sd list --type bogus, sd search foo --status bogus, sd search foo --type bogus, sd ready --type bogus all exit 1 with `Invalid --<flag> value: bogus. Valid: ...` on stderr (and a {success:false, command, error} JSON envelope under --json)","Each updated command has at least one test covering the new validation failure on both human and --json output","Unknown-command JSON path in src/index.ts goes through outputJson() and `jsonMode` is declared above the `main()` function"]},"children":["seeds-d305","seeds-e93c","seeds-47c1"],"createdAt":"2026-06-16T11:07:52.499Z","updatedAt":"2026-06-16T11:07:52.499Z","name":"nightwatch patrol fixes 2026-06-16"}
+{"id":"pl-a786","seed":"seeds-2718","template":"refactor","status":"done","revision":1,"sections":{"context":"Nightwatch patrol on 2026-06-16 found three small consistency gaps. (1) sd list/search accept arbitrary --status values and sd list/search/ready accept arbitrary --type values without validation — invalid input silently filters to an empty result instead of erroring the way sd create/update/tpl/plan do (cf. src/commands/update.ts:87-88 for --status, src/commands/update.ts:117-118 for --type). (2) src/index.ts:194 emits the unknown-command JSON error via raw writeStdout(JSON.stringify(payload, null, 2)) instead of routing through outputJson(payload) like every other JSON output site. (3) src/index.ts declares `const jsonMode = process.argv.includes(\"--json\")` *after* the `main()` function definition even though main() reads jsonMode through closure — a TDZ-fragile ordering that should be hoisted above main(). All other gates are green (bun test 993/993, bun run check:all 9/9).","behavior_invariant":"Existing valid invocations of sd list/search/ready and the unknown-command JSON error path must keep emitting byte-identical output. Specifically: (a) sd list/search/ready with valid --status (open|in_progress|closed) and valid --type (task|bug|feature|epic) still pass through unchanged; (b) the unknown-command JSON envelope shape stays { success: false, command, error, suggestion? } with two-space JSON.stringify indentation and a trailing newline; (c) all 993 existing tests in bun test continue to pass; (d) bun run check:all stays 9/9.","approach":"Surgical edits, no architecture changes. Each step is a single small PR that mirrors an existing pattern already in the codebase (the same validation idiom used by sd update, the same outputJson() helper used by every command). Keep the new --status / --type error messages in the same `Invalid --<flag> value: X. Valid: a|b|c` shape as src/commands/update.ts so the wording stays uniform across the CLI surface.","steps":[{"title":"Validate --status and --type values in sd list, search, and ready","type":"bug","priority":2,"labels":["nightwatch"],"blocks":[3]},{"title":"Tidy src/index.ts unknown-command JSON path: use outputJson() and hoist jsonMode declaration above main()","type":"task","priority":3,"labels":["nightwatch"],"blocks":[3]},{"title":"Release: run /release per .claude/commands/release.md","type":"task","priority":2,"labels":["nightwatch"],"blocks":[]}],"acceptance":["bun test passes (>=993 tests, 0 failures)","bun run check:all is 9/9","sd list --status bogus, sd list --type bogus, sd search foo --status bogus, sd search foo --type bogus, sd ready --type bogus all exit 1 with `Invalid --<flag> value: bogus. Valid: ...` on stderr (and a {success:false, command, error} JSON envelope under --json)","Each updated command has at least one test covering the new validation failure on both human and --json output","Unknown-command JSON path in src/index.ts goes through outputJson() and `jsonMode` is declared above the `main()` function"]},"children":["seeds-d305","seeds-e93c","seeds-47c1"],"createdAt":"2026-06-16T11:07:52.499Z","updatedAt":"2026-06-16T11:20:00.484Z","name":"nightwatch patrol fixes 2026-06-16"}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 637818b8..ac7add11 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.12] - 2026-06-16
+
+Nightwatch patrol fixes (plan pl-a786): two narrow validation and refactor fixes from a nightwatch sweep.
+
+### Fixed
+- `sd list`, `sd search`, and `sd ready` now validate `--status` and `--type` flag values up front, matching the idiom already used by `sd update`. Invalid values exit 1 with `Invalid --<flag> value: X. Valid: a|b|c` on stderr (or a `{success:false, command, error}` envelope under `--json`) instead of silently filtering to an empty result. (seeds-d305)
+
+### Internal
+- `src/index.ts` unknown-command JSON error envelope now routes through `outputJson()` like every other JSON output site, and the top-level `jsonMode` constant is hoisted above `main()` so the closure read inside `main()` and the `.catch()` handler both see a fully initialized binding (no TDZ window). Output is byte-identical. (seeds-e93c)
+
 ## [0.5.11] - 2026-06-16
 
 ### Fixed
diff --git a/package.json b/package.json
index d24016c7..0cb9256d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@os-eco/seeds-cli",
-	"version": "0.5.11",
+	"version": "0.5.12",
 	"description": "Git-native issue tracker for AI agent workflows",
 	"type": "module",
 	"bin": {
diff --git a/src/version.ts b/src/version.ts
index f2eaadfe..59f7b7b3 100644
--- a/src/version.ts
+++ b/src/version.ts
@@ -1 +1 @@
-export const VERSION = "0.5.11";
+export const VERSION = "0.5.12";