@cleocode/adapters 2026.10.10-canary.2 → 2026.10.10-rc.ci.679

package/dist/index.js

@@ -10661,6 +10661,59 @@ var init_operations_registry = __esm({
           }
         ]
       },
+      // ── docs.link-decision / docs.unlink-decision (T13598) ──────────────────
+      {
+        gateway: "mutate",
+        domain: "docs",
+        operation: "link-decision",
+        description: "docs.link-decision (mutate) \u2014 link a D#### decision to the ADR doc that ratifies it (decision_adr_links); idempotent, refuses a revoked pair (T13598)",
+        tier: 1,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: ["adrSlug", "decisionId"],
+        params: [
+          {
+            name: "adrSlug",
+            type: "string",
+            required: true,
+            description: "Slug of the ADR doc",
+            cli: { positional: true }
+          },
+          {
+            name: "decisionId",
+            type: "string",
+            required: true,
+            description: "The D#### brain ledger decision id the ADR ratifies",
+            cli: { positional: true }
+          }
+        ]
+      },
+      {
+        gateway: "mutate",
+        domain: "docs",
+        operation: "unlink-decision",
+        description: "docs.unlink-decision (mutate) \u2014 revoke a decision-to-ADR link as a permanent tombstone; the pair can never be re-linked (T13598)",
+        tier: 1,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: ["adrSlug", "decisionId"],
+        params: [
+          {
+            name: "adrSlug",
+            type: "string",
+            required: true,
+            description: "Slug of the ADR doc",
+            cli: { positional: true }
+          },
+          {
+            name: "decisionId",
+            type: "string",
+            required: true,
+            description: "The D#### brain ledger decision id to unlink",
+            cli: { positional: true }
+          }
+        ]
+      },
       // ── docs.supersede (T10162) ──────────────────────────────────────────────
       {
         gateway: "mutate",
@@ -11897,6 +11950,12 @@ var init_operations_registry = __esm({
             required: false,
             description: "Require the unified-hooks pilot for this stable promotion"
           },
+          {
+            name: "hooksV1Waiver",
+            type: "string",
+            required: false,
+            description: "Audited reason to ship a source change that opens the hooks-v1 gate without the promotion"
+          },
           {
             name: "dryRun",
             type: "boolean",
@@ -14707,6 +14766,21 @@ var init_sync_write_invariants = __esm({
         [],
         "the projection keeps the max-HLC head; a losing concurrent head is recorded (conflict_count/last_conflict_json), never silently shadowed"
       ),
+      // T13359 (D11165) — decisions-vs-ADRs link table; the natural composite key
+      // makes identical links merge to one row, and the revoke is a one-way latch.
+      // T13597: enforced at merge, not just by the local accessor — 'revoked' is an
+      // absorbing state with no leave op, so a concurrent same-uid link op cannot
+      // flip a tombstoned row back to 'linked' on any replica.
+      implemented(
+        rule(
+          "docs.decision-adr-links.revoke-monotonic",
+          "T13597",
+          "decision_adr_links",
+          ["status", "revoked_by"],
+          [],
+          "status flips linked\u2192revoked exactly once (the row is the tombstone, never DELETEd); the merge engine refuses a non-absorbing status write onto a revoked row, so a concurrent re-link can never resurrect the pair"
+        )
+      ),
       // §3.6.0 identity-layer rows.
       {
         id: "identity.local-minting",
@@ -16272,6 +16346,8 @@ var init_plan = __esm({
       releaseKind: ReleaseKindSchema,
       /** Explicit hooks-v1 stable promotion; ordinary and hotfix releases are exempt. */
       hooksV1Promotion: z17.boolean().optional(),
+      /** Audited reason for shipping a source change that opens the hooks-v1 gate without the promotion (T13555). */
+      hooksV1Waiver: NonEmptyString.optional(),
       /** ISO-8601 timestamp the plan was written. */
       createdAt: Iso8601,
       /** Identifier of the actor that wrote the plan (agent name or operator). */