@cleocode/cleo 2026.2.5

package/dist/store/data-accessor.js

@@ -0,0 +1,149 @@
+/**
+ * DataAccessor: File-level storage abstraction for core modules.
+ *
+ * Core modules operate on whole-file data structures (TaskFile, ArchiveFile, SessionsFile).
+ * The DataAccessor abstracts WHERE that data is stored (JSON files vs SQLite)
+ * while preserving the read-modify-write pattern that core business logic relies on.
+ *
+ * This is the DRY/SOLID injection point: core modules accept a DataAccessor parameter
+ * instead of calling readJson/saveJson directly.
+ *
+ * Two implementations:
+ * - JsonDataAccessor: reads/writes .cleo/*.json files (current behavior)
+ * - SqliteDataAccessor: materializes/dematerializes from SQLite tables
+ *
+ * @epic T4454
+ */
+/**
+ * Create a DataAccessor for the given working directory.
+ * Auto-detects engine from .cleo/config.json (storage.engine field).
+ *
+ * ALL accessors returned are safety-enabled by default via SafetyDataAccessor wrapper.
+ * Use CLEO_DISABLE_SAFETY=true to bypass (emergency only).
+ *
+ * @param engine - Force a specific engine, or undefined for auto-detect
+ * @param cwd - Working directory (defaults to process.cwd())
+ */
+export async function createDataAccessor(engine, cwd) {
+    const resolvedEngine = engine ?? (await detectEngine(cwd));
+    // Create the inner accessor based on engine
+    let inner;
+    switch (resolvedEngine) {
+        case 'sqlite': {
+            const { createSqliteDataAccessor } = await import('./sqlite-data-accessor.js');
+            inner = await createSqliteDataAccessor(cwd);
+            break;
+        }
+        case 'dual': {
+            // Dual mode: write to both, read from SQLite with JSON fallback
+            const { createJsonDataAccessor } = await import('./json-data-accessor.js');
+            const { createSqliteDataAccessor } = await import('./sqlite-data-accessor.js');
+            inner = createDualDataAccessor(await createJsonDataAccessor(cwd), await createSqliteDataAccessor(cwd));
+            break;
+        }
+        case 'json':
+        default: {
+            const { createJsonDataAccessor } = await import('./json-data-accessor.js');
+            inner = await createJsonDataAccessor(cwd);
+            break;
+        }
+    }
+    // Always wrap with safety - cannot be bypassed at factory level
+    const { wrapWithSafety } = await import('./safety-data-accessor.js');
+    return wrapWithSafety(inner, cwd);
+}
+/** Convenience: get a DataAccessor with auto-detected engine. */
+export async function getAccessor(cwd) {
+    return createDataAccessor(undefined, cwd);
+}
+// ---- Internal helpers ----
+async function detectEngine(cwd) {
+    try {
+        const { existsSync, readFileSync } = await import('node:fs');
+        const { getCleoDirAbsolute } = await import('../core/paths.js');
+        const cleoDir = getCleoDirAbsolute(cwd);
+        const configPath = (await import('node:path')).join(cleoDir, 'config.json');
+        if (existsSync(configPath)) {
+            const config = JSON.parse(readFileSync(configPath, 'utf-8'));
+            const engine = config?.storage?.engine;
+            if (engine === 'sqlite' || engine === 'dual' || engine === 'json') {
+                return engine;
+            }
+        }
+        // Auto-detect: if tasks.db exists, use sqlite
+        const dbPath = (await import('node:path')).join(cleoDir, 'tasks.db');
+        if (existsSync(dbPath)) {
+            return 'sqlite';
+        }
+    }
+    catch {
+        // Fall through to default
+    }
+    return 'json';
+}
+/**
+ * Dual-write DataAccessor.
+ * Writes to both JSON and SQLite. Reads from SQLite, falls back to JSON.
+ */
+function createDualDataAccessor(json, sqlite) {
+    return {
+        engine: 'dual',
+        async loadTaskFile() {
+            try {
+                return await sqlite.loadTaskFile();
+            }
+            catch {
+                return await json.loadTaskFile();
+            }
+        },
+        async saveTaskFile(data) {
+            await Promise.allSettled([
+                json.saveTaskFile(data),
+                sqlite.saveTaskFile(data),
+            ]);
+        },
+        // Deprecated aliases
+        async loadTodoFile() {
+            return this.loadTaskFile();
+        },
+        async saveTodoFile(data) {
+            return this.saveTaskFile(data);
+        },
+        async loadArchive() {
+            try {
+                return await sqlite.loadArchive();
+            }
+            catch {
+                return await json.loadArchive();
+            }
+        },
+        async saveArchive(data) {
+            await Promise.allSettled([
+                json.saveArchive(data),
+                sqlite.saveArchive(data),
+            ]);
+        },
+        async loadSessions() {
+            try {
+                return await sqlite.loadSessions();
+            }
+            catch {
+                return await json.loadSessions();
+            }
+        },
+        async saveSessions(data) {
+            await Promise.allSettled([
+                json.saveSessions(data),
+                sqlite.saveSessions(data),
+            ]);
+        },
+        async appendLog(entry) {
+            // Logs always go to JSONL file (append-only, both backends)
+            await json.appendLog(entry);
+        },
+        async close() {
+            await Promise.allSettled([json.close(), sqlite.close()]);
+        },
+    };
+}
+//# sourceMappingURL=data-accessor.js.map

package/dist/store/data-accessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-accessor.js","sourceRoot":"","sources":["../../src/store/data-accessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAyEH;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAmC,EACnC,GAAY;IAEZ,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,4CAA4C;IAC5C,IAAI,KAAmB,CAAC;IACxB,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC/E,KAAK,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,gEAAgE;YAChE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAC3E,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC/E,KAAK,GAAG,sBAAsB,CAC5B,MAAM,sBAAsB,CAAC,GAAG,CAAC,EACjC,MAAM,wBAAwB,CAAC,GAAG,CAAC,CACpC,CAAC;YACF,MAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAC3E,KAAK,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM;QACR,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACrE,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAY;IAC5C,OAAO,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,6BAA6B;AAE7B,KAAK,UAAU,YAAY,CAAC,GAAY;IACtC,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAE5E,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;YACvC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAClE,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAkB,EAAE,MAAoB;IACtE,OAAO;QACL,MAAM,EAAE,MAAe;QAEvB,KAAK,CAAC,YAAY;YAChB,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACnC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,IAAI;YACrB,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;gBACvB,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,KAAK,CAAC,YAAY;YAChB,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,IAAc;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,WAAW;YACf,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,IAAI;YACpB,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;gBACtB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;aACzB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACnC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,IAAI;YACrB,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;gBACvB,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,4DAA4D;YAC5D,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,KAAK,CAAC,KAAK;YACT,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/store/data-safety-central.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Centralized Data Safety Manager
+ *
+ * SINGLE POINT OF SAFETY for ALL CLEO data operations.
+ *
+ * Design Principles:
+ * - All data operations MUST flow through this layer
+ * - Zero-config safety: works automatically for all callers
+ * - Atomic operations: verify + checkpoint + log in single transaction
+ * - Recoverable: every operation leaves system in valid state
+ *
+ * This eliminates the need for wrapper functions and ensures safety
+ * at the architectural level, not as an afterthought.
+ *
+ * @task T4739
+ * @epic T4732
+ */
+import type { DataAccessor } from './data-accessor.js';
+import type { TaskFile } from '../types/task.js';
+import type { SessionsFile } from '../types/session.js';
+import type { ArchiveFile } from './data-accessor.js';
+/** Safety violation error */
+export declare class DataSafetyError extends Error {
+    code: 'COLLISION' | 'WRITE_FAILED' | 'VERIFICATION_FAILED' | 'SEQUENCE_INVALID';
+    context?: Record<string, unknown> | undefined;
+    constructor(message: string, code: 'COLLISION' | 'WRITE_FAILED' | 'VERIFICATION_FAILED' | 'SEQUENCE_INVALID', context?: Record<string, unknown> | undefined);
+}
+/** Safety configuration - can be overridden per-operation */
+export interface SafetyOptions {
+    /** Verify data was written (default: true) */
+    verify: boolean;
+    /** Create git checkpoint (default: true) */
+    checkpoint: boolean;
+    /** Validate sequence (default: true) */
+    validateSequence: boolean;
+    /** Strict mode - throw on any issue (default: true) */
+    strict: boolean;
+}
+/** Statistics for monitoring */
+interface SafetyStats {
+    writes: number;
+    verifications: number;
+    checkpoints: number;
+    errors: number;
+    lastCheckpoint: Date | null;
+}
+/** Get current safety statistics */
+export declare function getSafetyStats(): SafetyStats;
+/** Reset safety statistics (for testing) */
+export declare function resetSafetyStats(): void;
+/**
+ * Safe wrapper for DataAccessor.saveTaskFile()
+ *
+ * Performs:
+ * 1. Sequence validation
+ * 2. Write operation
+ * 3. Verification (read back and validate)
+ * 4. Git checkpoint
+ */
+export declare function safeSaveTaskFile(accessor: DataAccessor, data: TaskFile, cwd?: string, options?: Partial<SafetyOptions>): Promise<void>;
+/** @deprecated Use safeSaveTaskFile instead. */
+export declare const safeSaveTodoFile: typeof safeSaveTaskFile;
+/**
+ * Safe wrapper for DataAccessor.saveSessions()
+ */
+export declare function safeSaveSessions(accessor: DataAccessor, data: SessionsFile, cwd?: string, options?: Partial<SafetyOptions>): Promise<void>;
+/**
+ * Safe wrapper for DataAccessor.saveArchive()
+ */
+export declare function safeSaveArchive(accessor: DataAccessor, data: ArchiveFile, cwd?: string, options?: Partial<SafetyOptions>): Promise<void>;
+/**
+ * Safe wrapper for DataAccessor.appendLog()
+ *
+ * Note: Log appends are fire-and-forget (no verification)
+ * but we still checkpoint to ensure data is committed.
+ */
+export declare function safeAppendLog(accessor: DataAccessor, entry: Record<string, unknown>, cwd?: string, options?: Partial<SafetyOptions>): Promise<void>;
+/**
+ * Run comprehensive data integrity check.
+ * Validates all data files and sequence consistency.
+ */
+export declare function runDataIntegrityCheck(accessor: DataAccessor, cwd?: string): Promise<{
+    passed: boolean;
+    errors: string[];
+    warnings: string[];
+    stats: SafetyStats;
+}>;
+/**
+ * Force immediate checkpoint.
+ * Use before destructive operations.
+ */
+export declare function forceSafetyCheckpoint(context: string, cwd?: string): Promise<void>;
+/**
+ * Disable all safety for current process.
+ * DANGEROUS - only use for recovery operations.
+ */
+export declare function disableSafety(): void;
+/**
+ * Re-enable safety after being disabled.
+ */
+export declare function enableSafety(): void;
+export {};
+//# sourceMappingURL=data-safety-central.d.ts.map

package/dist/store/data-safety-central.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-safety-central.d.ts","sourceRoot":"","sources":["../../src/store/data-safety-central.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAOtD,6BAA6B;AAC7B,qBAAa,eAAgB,SAAQ,KAAK;IAG/B,IAAI,EAAE,WAAW,GAAG,cAAc,GAAG,qBAAqB,GAAG,kBAAkB;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,WAAW,GAAG,cAAc,GAAG,qBAAqB,GAAG,kBAAkB,EAC/E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,UAAU,EAAE,OAAO,CAAC;IACpB,wCAAwC;IACxC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAC;CACjB;AASD,gCAAgC;AAChC,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAUD,oCAAoC;AACpC,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,4CAA4C;AAC5C,wBAAgB,gBAAgB,IAAI,IAAI,CAMvC;AAoID;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,EACd,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,gDAAgD;AAChD,eAAO,MAAM,gBAAgB,yBAAmB,CAAC;AAEjD;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,YAAY,EAClB,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,YAAY,EACtB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC,CAuDD;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,IAAI,CAWpC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,IAAI,CASnC"}

package/dist/store/data-safety-central.js

@@ -0,0 +1,291 @@
+/**
+ * Centralized Data Safety Manager
+ *
+ * SINGLE POINT OF SAFETY for ALL CLEO data operations.
+ *
+ * Design Principles:
+ * - All data operations MUST flow through this layer
+ * - Zero-config safety: works automatically for all callers
+ * - Atomic operations: verify + checkpoint + log in single transaction
+ * - Recoverable: every operation leaves system in valid state
+ *
+ * This eliminates the need for wrapper functions and ensures safety
+ * at the architectural level, not as an afterthought.
+ *
+ * @task T4739
+ * @epic T4732
+ */
+import { gitCheckpoint } from './git-checkpoint.js';
+import { checkSequence, repairSequence, } from '../core/sequence/index.js';
+/** Safety violation error */
+export class DataSafetyError extends Error {
+    code;
+    context;
+    constructor(message, code, context) {
+        super(message);
+        this.code = code;
+        this.context = context;
+        this.name = 'DataSafetyError';
+    }
+}
+const DEFAULT_SAFETY = {
+    verify: true,
+    checkpoint: true,
+    validateSequence: true,
+    strict: true,
+};
+const stats = {
+    writes: 0,
+    verifications: 0,
+    checkpoints: 0,
+    errors: 0,
+    lastCheckpoint: null,
+};
+/** Get current safety statistics */
+export function getSafetyStats() {
+    return { ...stats };
+}
+/** Reset safety statistics (for testing) */
+export function resetSafetyStats() {
+    stats.writes = 0;
+    stats.verifications = 0;
+    stats.checkpoints = 0;
+    stats.errors = 0;
+    stats.lastCheckpoint = null;
+}
+/**
+ * Verify sequence integrity before write.
+ * Auto-repairs if sequence is behind database.
+ */
+async function ensureSequenceValid(cwd, options) {
+    if (!options?.validateSequence)
+        return;
+    const check = await checkSequence(cwd);
+    if (!check.valid) {
+        console.warn(`[SAFETY] Sequence behind: counter=${check.counter}, maxId=T${check.maxIdInData}. Repairing...`);
+        const repair = await repairSequence(cwd);
+        if (!repair.repaired && options.strict) {
+            throw new DataSafetyError(`Sequence repair failed: ${repair.message}`, 'SEQUENCE_INVALID', { check, repair });
+        }
+    }
+}
+/**
+ * Create a checkpoint after successful write.
+ * Non-blocking - failures are logged but don't fail the operation.
+ */
+async function checkpoint(context, cwd, options) {
+    if (!options?.checkpoint)
+        return;
+    try {
+        await gitCheckpoint('auto', context, cwd);
+        stats.checkpoints++;
+        stats.lastCheckpoint = new Date();
+    }
+    catch (err) {
+        // Checkpoint failures are non-fatal but logged
+        console.warn(`[SAFETY] Checkpoint failed (non-fatal): ${String(err)}`);
+    }
+}
+/**
+ * Verify TaskFile was written correctly.
+ * Reads back and validates basic structure.
+ */
+async function verifyTaskFile(data, accessor, options) {
+    if (!options?.verify)
+        return;
+    stats.verifications++;
+    const readBack = await accessor.loadTaskFile();
+    // Basic structural validation
+    if (!readBack.tasks) {
+        throw new DataSafetyError('TaskFile verification failed: tasks array missing after write', 'VERIFICATION_FAILED', { expected: data.tasks?.length, actual: readBack.tasks });
+    }
+    // Task count validation
+    if (readBack.tasks.length !== data.tasks?.length) {
+        throw new DataSafetyError(`TaskFile verification failed: task count mismatch. Expected ${data.tasks?.length}, got ${readBack.tasks.length}`, 'VERIFICATION_FAILED', { expected: data.tasks?.length, actual: readBack.tasks.length });
+    }
+    // Verify specific tasks if we know what we wrote
+    if (data.tasks && data.tasks.length > 0) {
+        const lastTask = data.tasks[data.tasks.length - 1];
+        const found = readBack.tasks.find(t => t.id === lastTask.id);
+        if (!found && options.strict) {
+            throw new DataSafetyError(`TaskFile verification failed: last written task ${lastTask.id} not found`, 'VERIFICATION_FAILED', { taskId: lastTask.id });
+        }
+    }
+}
+/**
+ * Verify SessionsFile was written correctly.
+ */
+async function verifySessionsFile(data, accessor, options) {
+    if (!options?.verify)
+        return;
+    stats.verifications++;
+    const readBack = await accessor.loadSessions();
+    if (readBack.sessions.length !== data.sessions.length) {
+        throw new DataSafetyError(`SessionsFile verification failed: count mismatch. Expected ${data.sessions.length}, got ${readBack.sessions.length}`, 'VERIFICATION_FAILED', { expected: data.sessions.length, actual: readBack.sessions.length });
+    }
+}
+/**
+ * Verify ArchiveFile was written correctly.
+ */
+async function verifyArchiveFile(data, accessor, options) {
+    if (!options?.verify)
+        return;
+    stats.verifications++;
+    const readBack = await accessor.loadArchive();
+    if (!readBack) {
+        throw new DataSafetyError('ArchiveFile verification failed: file not found after write', 'VERIFICATION_FAILED');
+    }
+    if (readBack.archivedTasks.length !== data.archivedTasks.length) {
+        throw new DataSafetyError(`ArchiveFile verification failed: count mismatch. Expected ${data.archivedTasks.length}, got ${readBack.archivedTasks.length}`, 'VERIFICATION_FAILED', { expected: data.archivedTasks.length, actual: readBack.archivedTasks.length });
+    }
+}
+/**
+ * Safe wrapper for DataAccessor.saveTaskFile()
+ *
+ * Performs:
+ * 1. Sequence validation
+ * 2. Write operation
+ * 3. Verification (read back and validate)
+ * 4. Git checkpoint
+ */
+export async function safeSaveTaskFile(accessor, data, cwd, options) {
+    const opts = { ...DEFAULT_SAFETY, ...options };
+    // 1. Validate sequence
+    await ensureSequenceValid(cwd, opts);
+    // 2. Perform write
+    await accessor.saveTaskFile(data);
+    stats.writes++;
+    // 3. Verify write
+    await verifyTaskFile(data, accessor, opts);
+    // 4. Checkpoint
+    const taskCount = data.tasks?.length ?? 0;
+    await checkpoint(`saved TaskFile (${taskCount} tasks)`, cwd, opts);
+}
+/** @deprecated Use safeSaveTaskFile instead. */
+export const safeSaveTodoFile = safeSaveTaskFile;
+/**
+ * Safe wrapper for DataAccessor.saveSessions()
+ */
+export async function safeSaveSessions(accessor, data, cwd, options) {
+    const opts = { ...DEFAULT_SAFETY, ...options };
+    await accessor.saveSessions(data);
+    stats.writes++;
+    await verifySessionsFile(data, accessor, opts);
+    await checkpoint(`saved Sessions (${data.sessions.length} sessions)`, cwd, opts);
+}
+/**
+ * Safe wrapper for DataAccessor.saveArchive()
+ */
+export async function safeSaveArchive(accessor, data, cwd, options) {
+    const opts = { ...DEFAULT_SAFETY, ...options };
+    await accessor.saveArchive(data);
+    stats.writes++;
+    await verifyArchiveFile(data, accessor, opts);
+    await checkpoint(`saved Archive (${data.archivedTasks.length} tasks)`, cwd, opts);
+}
+/**
+ * Safe wrapper for DataAccessor.appendLog()
+ *
+ * Note: Log appends are fire-and-forget (no verification)
+ * but we still checkpoint to ensure data is committed.
+ */
+export async function safeAppendLog(accessor, entry, cwd, options) {
+    const opts = { ...DEFAULT_SAFETY, ...options, verify: false }; // Logs don't need verification
+    await accessor.appendLog(entry);
+    stats.writes++;
+    await checkpoint('log entry', cwd, opts);
+}
+/**
+ * Run comprehensive data integrity check.
+ * Validates all data files and sequence consistency.
+ */
+export async function runDataIntegrityCheck(accessor, cwd) {
+    const errors = [];
+    const warnings = [];
+    // 1. Check sequence
+    try {
+        const seqCheck = await checkSequence(cwd);
+        if (!seqCheck.valid) {
+            errors.push(`Sequence invalid: counter=${seqCheck.counter}, maxId=T${seqCheck.maxIdInData}`);
+            // Try to repair
+            const repair = await repairSequence(cwd);
+            if (repair.repaired) {
+                warnings.push(`Auto-repaired sequence: ${repair.oldCounter} -> ${repair.newCounter}`);
+            }
+            else {
+                errors.push('Sequence auto-repair failed');
+            }
+        }
+    }
+    catch (err) {
+        errors.push(`Sequence check failed: ${String(err)}`);
+    }
+    // 2. Verify data files can be loaded
+    try {
+        const tasks = await accessor.loadTaskFile();
+        if (!tasks.tasks) {
+            errors.push('TaskFile missing tasks array');
+        }
+    }
+    catch (err) {
+        errors.push(`TaskFile load failed: ${String(err)}`);
+    }
+    try {
+        const sessions = await accessor.loadSessions();
+        if (!sessions.sessions) {
+            errors.push('SessionsFile missing sessions array');
+        }
+    }
+    catch (err) {
+        errors.push(`SessionsFile load failed: ${String(err)}`);
+    }
+    // 3. Check for checkpoint recency
+    if (stats.lastCheckpoint) {
+        const minutesSinceCheckpoint = (Date.now() - stats.lastCheckpoint.getTime()) / 60000;
+        if (minutesSinceCheckpoint > 60) {
+            warnings.push(`Last checkpoint was ${Math.round(minutesSinceCheckpoint)} minutes ago`);
+        }
+    }
+    return {
+        passed: errors.length === 0,
+        errors,
+        warnings,
+        stats: getSafetyStats(),
+    };
+}
+/**
+ * Force immediate checkpoint.
+ * Use before destructive operations.
+ */
+export async function forceSafetyCheckpoint(context, cwd) {
+    console.log(`[SAFETY] Forcing checkpoint: ${context}`);
+    await gitCheckpoint('manual', context, cwd);
+}
+/**
+ * Disable all safety for current process.
+ * DANGEROUS - only use for recovery operations.
+ */
+export function disableSafety() {
+    console.warn('[SAFETY] ⚠️  ALL SAFETY CHECKS DISABLED ⚠️');
+    console.warn('[SAFETY] This should only be used for emergency recovery!');
+    // Set all safety options to false
+    Object.assign(DEFAULT_SAFETY, {
+        verify: false,
+        checkpoint: false,
+        validateSequence: false,
+        strict: false,
+    });
+}
+/**
+ * Re-enable safety after being disabled.
+ */
+export function enableSafety() {
+    console.log('[SAFETY] Safety checks re-enabled');
+    Object.assign(DEFAULT_SAFETY, {
+        verify: true,
+        checkpoint: true,
+        validateSequence: true,
+        strict: true,
+    });
+}
+//# sourceMappingURL=data-safety-central.js.map

package/dist/store/data-safety-central.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-safety-central.js","sourceRoot":"","sources":["../../src/store/data-safety-central.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,aAAa,EACb,cAAc,GACf,MAAM,2BAA2B,CAAC;AAEnC,6BAA6B;AAC7B,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAG/B;IACA;IAHT,YACE,OAAe,EACR,IAA+E,EAC/E,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAA2E;QAC/E,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAcD,MAAM,cAAc,GAAkB;IACpC,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,IAAI;IAChB,gBAAgB,EAAE,IAAI;IACtB,MAAM,EAAE,IAAI;CACb,CAAC;AAWF,MAAM,KAAK,GAAgB;IACzB,MAAM,EAAE,CAAC;IACT,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF,oCAAoC;AACpC,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,gBAAgB;IAC9B,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACjB,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC;IACxB,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;IACtB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACjB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAY,EAAE,OAAuB;IACtE,IAAI,CAAC,OAAO,EAAE,gBAAgB;QAAE,OAAO;IAEvC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,qCAAqC,KAAK,CAAC,OAAO,YAAY,KAAK,CAAC,WAAW,gBAAgB,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CACvB,2BAA2B,MAAM,CAAC,OAAO,EAAE,EAC3C,kBAAkB,EAClB,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,GAAY,EAAE,OAAuB;IAC9E,IAAI,CAAC,OAAO,EAAE,UAAU;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1C,KAAK,CAAC,WAAW,EAAE,CAAC;QACpB,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+CAA+C;QAC/C,OAAO,CAAC,IAAI,CAAC,2CAA2C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,IAAc,EAAE,QAAsB,EAAE,OAAuB;IAC3F,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,KAAK,CAAC,aAAa,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE/C,8BAA8B;IAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,eAAe,CACvB,+DAA+D,EAC/D,qBAAqB,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QACjD,MAAM,IAAI,eAAe,CACvB,+DAA+D,IAAI,CAAC,KAAK,EAAE,MAAM,SAAS,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EACjH,qBAAqB,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAS,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CACvB,mDAAmD,QAAS,CAAC,EAAE,YAAY,EAC3E,qBAAqB,EACrB,EAAE,MAAM,EAAE,QAAS,CAAC,EAAE,EAAE,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAID;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAkB,EAAE,QAAsB,EAAE,OAAuB;IACnG,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,KAAK,CAAC,aAAa,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE/C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CACvB,8DAA8D,IAAI,CAAC,QAAQ,CAAC,MAAM,SAAS,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EACrH,qBAAqB,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAAC,IAAiB,EAAE,QAAsB,EAAE,OAAuB;IACjG,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,KAAK,CAAC,aAAa,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,eAAe,CACvB,6DAA6D,EAC7D,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CACvB,6DAA6D,IAAI,CAAC,aAAa,CAAC,MAAM,SAAS,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,EAC9H,qBAAqB,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAsB,EACtB,IAAc,EACd,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,uBAAuB;IACvB,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAErC,mBAAmB;IACnB,MAAM,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,kBAAkB;IAClB,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE3C,gBAAgB;IAChB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;IAC1C,MAAM,UAAU,CAAC,mBAAmB,SAAS,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAsB,EACtB,IAAkB,EAClB,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,MAAM,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,UAAU,CAAC,mBAAmB,IAAI,CAAC,QAAQ,CAAC,MAAM,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAsB,EACtB,IAAiB,EACjB,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,UAAU,CAAC,kBAAkB,IAAI,CAAC,aAAa,CAAC,MAAM,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAsB,EACtB,KAA8B,EAC9B,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,+BAA+B;IAE9F,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAsB,EACtB,GAAY;IAOZ,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,6BAA6B,QAAQ,CAAC,OAAO,YAAY,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAE7F,gBAAgB;YAChB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,kCAAkC;IAClC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,sBAAsB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC;QACrF,IAAI,sBAAsB,GAAG,EAAE,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,MAAM;QACN,QAAQ;QACR,KAAK,EAAE,cAAc,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,GAAY;IAEZ,OAAO,CAAC,GAAG,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAE1E,kCAAkC;IAClC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;QAC5B,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,KAAK;QACjB,gBAAgB,EAAE,KAAK;QACvB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;QAC5B,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/store/data-safety.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Data Safety Module - Critical protection layer for CLEO data operations.
+ *
+ * Implements:
+ * - Write verification (verify data was actually persisted)
+ * - Collision detection (prevent duplicate task IDs)
+ * - Sequence validation (ensure sequence counter matches database)
+ * - Auto-checkpoint integration (git commit after writes)
+ *
+ * @task T4739
+ * @epic T4732
+ */
+import type { Task } from '../types/task.js';
+import type { Session } from '../types/session.js';
+/** Safety configuration options. */
+export interface SafetyConfig {
+    /** Enable write verification (default: true) */
+    verifyWrites: boolean;
+    /** Enable collision detection (default: true) */
+    detectCollisions: boolean;
+    /** Enable sequence validation (default: true) */
+    validateSequence: boolean;
+    /** Enable auto-checkpoint (default: true) */
+    autoCheckpoint: boolean;
+    /** Throw on safety violations (default: true) */
+    strictMode: boolean;
+}
+/** Safety violation error. */
+export declare class SafetyError extends Error {
+    code: string;
+    details?: Record<string, unknown> | undefined;
+    constructor(message: string, code: string, details?: Record<string, unknown> | undefined);
+}
+/**
+ * Check if a task ID already exists (collision detection).
+ * @throws SafetyError if task exists and strict mode is enabled
+ */
+export declare function checkTaskExists(taskId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
+/**
+ * Verify a task was actually written to the database.
+ * @throws SafetyError if verification fails
+ */
+export declare function verifyTaskWrite(taskId: string, expectedData?: Partial<Task>, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
+/**
+ * Validate and repair sequence if necessary.
+ * @returns true if sequence was valid or successfully repaired
+ */
+export declare function validateAndRepairSequence(cwd?: string, config?: Partial<SafetyConfig>): Promise<{
+    valid: boolean;
+    repaired: boolean;
+    oldCounter?: number;
+    newCounter?: number;
+}>;
+/**
+ * Trigger auto-checkpoint after successful write.
+ */
+export declare function triggerCheckpoint(context: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<void>;
+/**
+ * Safely create a task with all safety mechanisms.
+ * Wraps the actual createTask operation.
+ */
+export declare function safeCreateTask(createFn: () => Promise<Task>, task: Task, cwd?: string, config?: Partial<SafetyConfig>): Promise<Task>;
+/**
+ * Safely update a task with all safety mechanisms.
+ */
+export declare function safeUpdateTask(updateFn: () => Promise<Task | null>, taskId: string, updates: Partial<Task>, cwd?: string, config?: Partial<SafetyConfig>): Promise<Task | null>;
+/**
+ * Safely delete a task with all safety mechanisms.
+ */
+export declare function safeDeleteTask(deleteFn: () => Promise<boolean>, taskId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
+/**
+ * Verify session write.
+ */
+export declare function verifySessionWrite(sessionId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
+/**
+ * Safely create a session with all safety mechanisms.
+ */
+export declare function safeCreateSession(createFn: () => Promise<Session>, session: Session, cwd?: string, config?: Partial<SafetyConfig>): Promise<Session>;
+/**
+ * Force a checkpoint before destructive operations.
+ * Use this before migrations, bulk updates, etc.
+ */
+export declare function forceCheckpointBeforeOperation(operation: string, cwd?: string): Promise<void>;
+/**
+ * Run comprehensive data integrity check.
+ * Reports all issues found.
+ */
+export declare function runDataIntegrityCheck(cwd?: string): Promise<{
+    passed: boolean;
+    issues: string[];
+    repairs: string[];
+}>;
+//# sourceMappingURL=data-safety.d.ts.map

package/dist/store/data-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-safety.d.ts","sourceRoot":"","sources":["../../src/store/data-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,oCAAoC;AACpC,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,YAAY,EAAE,OAAO,CAAC;IACtB,iDAAiD;IACjD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iDAAiD;IACjD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,6CAA6C;IAC7C,cAAc,EAAE,OAAO,CAAC;IACxB,iDAAiD;IACjD,UAAU,EAAE,OAAO,CAAC;CACrB;AAUD,8BAA8B;AAC9B,qBAAa,WAAY,SAAQ,KAAK;IAG3B,IAAI,EAAE,MAAM;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,EAC5B,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAyClB;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAoC1F;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC7B,IAAI,EAAE,IAAI,EACV,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,EACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EACtB,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAmBtB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAkClB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAwBlB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAChC,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC,CA+BD"}