v3.20.0

Added

• CLI verbs for the omni vault cutover — get, buckets, dupes, stats counts. Surface existing vault capability on the CLI so omni vault <verb> (and omni memory <verb>) can route to the context-vault connector when omni-legacy retires. get <id|identity-key> fetches a single entry by ULID or identity key (resolves bare keys against --kind); buckets lists registered buckets with live entry counts; dupes runs a read-only near-duplicate scan via findDuplicates (now exported at @context-vault/core/consolidation); stats counts reports totals by category and kind (matches the legacy omni vault stats shape). Critical semantics preserved: the legacy analytics recall maps to the existing stats recall — not aliased onto cv's semantic recall (hybridSearch) verb; likewise legacy snapshot (DB backups) is intentionally not aliased onto cv create_snapshot (topic gather). See specs/omni-vault-cutover-mapping.md. Tests: test/integration/cli-parity.test.js.
• context-vault doctor save/search roundtrip canary. New Save/search roundtrip check captures an event entry against the live vault, searches for it via hybridSearch, asserts the body roundtrips intact, then deletes the file, vec row, and DB row in a finally block. Detects the 2026-04-19 silent-save drift class (saves returning success while writes don't persist) on every doctor run instead of waiting 44 hours for a user to notice. Uses kind=event so the canary is never embedded — the check stays stable when embeddings are degraded.