@cleocode/cleo 2026.4.101 → 2026.4.102

package/migrations/drizzle-tasks/20260421000001_t1118-owner-auth-token/migration.sql

@@ -0,0 +1,10 @@
+-- T1118 L4a — Add owner_auth_token column to sessions table.
+--
+-- Stores the HMAC-SHA256 token derived from (session_id, owner_password)
+-- when a session is started with `cleo session start --owner-auth`.
+-- Override calls must present a matching --auth-token to pass L4a.
+--
+-- The column is nullable: sessions without --owner-auth have no token
+-- and the L4a gate is skipped (backwards compatible).
+
+ALTER TABLE `sessions` ADD COLUMN `owner_auth_token` TEXT;

package/migrations/drizzle-tasks/20260421000001_t1126-sentient-proposal-index/migration.sql

@@ -0,0 +1,18 @@
+-- T1126 — partial index for Tier-2 proposal rate-limiter COUNT query.
+--
+-- The proposal-rate-limiter.ts COUNT query filters on:
+--   labels_json LIKE '%sentient-tier2%'
+--   date(created_at) = date('now')
+--   status IN ('proposed', 'pending', 'active', 'done')
+--
+-- Without this index the query scans the entire tasks table every tick.
+-- The partial index covers only rows that could match the LIKE predicate,
+-- making the daily-cap check O(log n) instead of O(n).
+--
+-- Drizzle ORM schema note: partial indexes with .where() are not yet
+-- supported in the sqliteTable callback style used by tasks-schema.ts.
+-- This migration is the canonical source of truth for the index.
+
+CREATE INDEX IF NOT EXISTS `idx_tasks_sentient_proposals_today`
+ON `tasks` (date(`created_at`))
+WHERE `labels_json` LIKE '%sentient-tier2%';

package/migrations/drizzle-tasks/20260421000002_t1126-sentient-proposal-index/migration.sql

@@ -0,0 +1,18 @@
+-- T1126 — partial index for Tier-2 proposal rate-limiter COUNT query.
+--
+-- The proposal-rate-limiter.ts COUNT query filters on:
+--   labels_json LIKE '%sentient-tier2%'
+--   date(created_at) = date('now')
+--   status IN ('proposed', 'pending', 'active', 'done')
+--
+-- Without this index the query scans the entire tasks table every tick.
+-- The partial index covers only rows that could match the LIKE predicate,
+-- making the daily-cap check O(log n) instead of O(n).
+--
+-- Drizzle ORM schema note: partial indexes with .where() are not yet
+-- supported in the sqliteTable callback style used by tasks-schema.ts.
+-- This migration is the canonical source of truth for the index.
+
+CREATE INDEX IF NOT EXISTS `idx_tasks_sentient_proposals_today`
+ON `tasks` (date(`created_at`))
+WHERE `labels_json` LIKE '%sentient-tier2%';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/cleo",
-  "version": "2026.4.101",
+  "version": "2026.4.102",
   "description": "CLEO CLI — the assembled product consuming @cleocode/core",
   "type": "module",
   "main": "./dist/cli/index.js",
@@ -17,7 +17,7 @@
     "graphology": "^0.26.0",
     "graphology-communities-louvain": "^2.0.2",
     "graphology-types": "^0.24.8",
-    "llmtxt": "^2026.4.6",
+    "llmtxt": "^2026.4.13",
     "node-cron": "^4.2.1",
     "tree-sitter": "0.21.1",
     "tree-sitter-c": "0.23.2",
@@ -29,14 +29,14 @@
     "tree-sitter-ruby": "^0.23.1",
     "tree-sitter-rust": "0.23.1",
     "tree-sitter-typescript": "^0.23.2",
-    "@cleocode/contracts": "2026.4.101",
-    "@cleocode/caamp": "2026.4.101",
-    "@cleocode/lafs": "2026.4.101",
-    "@cleocode/core": "2026.4.101",
-    "@cleocode/cant": "2026.4.101",
-    "@cleocode/nexus": "2026.4.101",
-    "@cleocode/playbooks": "2026.4.101",
-    "@cleocode/runtime": "2026.4.101"
+    "@cleocode/caamp": "2026.4.102",
+    "@cleocode/contracts": "2026.4.102",
+    "@cleocode/core": "2026.4.102",
+    "@cleocode/lafs": "2026.4.102",
+    "@cleocode/cant": "2026.4.102",
+    "@cleocode/nexus": "2026.4.102",
+    "@cleocode/playbooks": "2026.4.102",
+    "@cleocode/runtime": "2026.4.102"
   },
   "engines": {
     "node": ">=24.0.0"