@cleocode/cleo 2026.4.144 → 2026.4.146

package/dist/cli/index.js

@@ -1291,12 +1291,61 @@ var init_task_evidence = __esm({
   }
 });
 
+// packages/contracts/src/tasks/archive.ts
+import { z as z6 } from "zod";
+function isArchiveTombstoneAllowed() {
+  const env = globalThis?.process?.env;
+  return env?.[ARCHIVE_REASON_TOMBSTONE_ENV] === "1";
+}
+function assertArchiveReason(reason, taskId) {
+  const parsed = ArchiveReason.parse(reason);
+  if (parsed === ARCHIVE_REASON_TOMBSTONE && !isArchiveTombstoneAllowed()) {
+    throw new ArchiveReasonTombstoneError(taskId);
+  }
+  return parsed;
+}
+var ArchiveReason, ArchiveReasonSchema, ARCHIVE_REASON_VALUES, ARCHIVE_REASON_TOMBSTONE, ArchiveReasonTombstoneError, ARCHIVE_REASON_TOMBSTONE_ENV;
+var init_archive = __esm({
+  "packages/contracts/src/tasks/archive.ts"() {
+    "use strict";
+    ArchiveReason = z6.enum([
+      "verified",
+      "reconciled",
+      "superseded",
+      "shadowed",
+      "cancelled",
+      "completed-unverified"
+    ]);
+    ArchiveReasonSchema = ArchiveReason;
+    ARCHIVE_REASON_VALUES = ArchiveReason.options;
+    ARCHIVE_REASON_TOMBSTONE = "completed-unverified";
+    ArchiveReasonTombstoneError = class extends Error {
+      code = "E_ARCHIVE_REASON_TOMBSTONE";
+      taskId;
+      constructor(taskId) {
+        super(
+          taskId ? `archiveReason='completed-unverified' is a tombstone \u2014 only migration backfill may write it (taskId=${taskId})` : "archiveReason='completed-unverified' is a tombstone \u2014 only migration backfill may write it"
+        );
+        this.name = "ArchiveReasonTombstoneError";
+        this.taskId = taskId;
+      }
+    };
+    ARCHIVE_REASON_TOMBSTONE_ENV = "CLEO_ARCHIVE_ALLOW_TOMBSTONE";
+  }
+});
+
 // packages/contracts/src/index.ts
 var src_exports = {};
 __export(src_exports, {
   ADR_STATUSES: () => ADR_STATUSES,
   AGENT_INSTANCE_STATUSES: () => AGENT_INSTANCE_STATUSES,
   AGENT_TYPES: () => AGENT_TYPES,
+  ARCHIVE_REASON_TOMBSTONE: () => ARCHIVE_REASON_TOMBSTONE,
+  ARCHIVE_REASON_TOMBSTONE_ENV: () => ARCHIVE_REASON_TOMBSTONE_ENV,
+  ARCHIVE_REASON_VALUES: () => ARCHIVE_REASON_VALUES,
+  ArchiveReason: () => ArchiveReason,
+  ArchiveReasonSchema: () => ArchiveReasonSchema,
+  ArchiveReasonTombstoneError: () => ArchiveReasonTombstoneError,
   BRAIN_OBSERVATION_TYPES: () => BRAIN_OBSERVATION_TYPES,
   BRANCH_LOCK_ERROR_CODES: () => BRANCH_LOCK_ERROR_CODES,
   ClassifierUnregisteredAgentError: () => ClassifierUnregisteredAgentError,
@@ -1323,6 +1372,7 @@ __export(src_exports, {
   acceptanceGateResultSchema: () => acceptanceGateResultSchema,
   acceptanceGateSchema: () => acceptanceGateSchema,
   acceptanceItemSchema: () => acceptanceItemSchema,
+  assertArchiveReason: () => assertArchiveReason,
   assertPeerIdentity: () => assertPeerIdentity,
   attachmentMetadataSchema: () => attachmentMetadataSchema,
   attachmentRefSchema: () => attachmentRefSchema,
@@ -1345,6 +1395,7 @@ __export(src_exports, {
   getExitCodeName: () => getExitCodeName,
   httpGateSchema: () => httpGateSchema,
   implDiffRecordSchema: () => implDiffRecordSchema,
+  isArchiveTombstoneAllowed: () => isArchiveTombstoneAllowed,
   isErrorCode: () => isErrorCode,
   isErrorResult: () => isErrorResult,
   isErrorType: () => isErrorType,
@@ -1394,6 +1445,7 @@ var init_src = __esm({
     init_session_journal();
     init_status_registry();
     init_task_evidence();
+    init_archive();
   }
 });
 
@@ -11514,8 +11566,8 @@ async function releaseIvtrAutoSuggest(taskId, projectRoot) {
   const cwd = projectRoot ?? resolveProjectRoot2();
   try {
     const accessor = await getAccessor4(cwd);
-    const taskResult = await accessor.queryTasks({ id: taskId });
-    const taskRecord = (taskResult?.tasks ?? [])[0];
+    const tasks = await accessor.loadTasks([taskId]);
+    const taskRecord = tasks[0];
     if (!taskRecord) {
       return engineError("E_NOT_FOUND", `Task ${taskId} not found`);
     }
@@ -16710,7 +16762,7 @@ var init_admin = __esm({
         try {
           const envelope = await typedDispatch(_adminTypedHandler, mutateKey(operation), params ?? {});
           if (operation === "adr.sync") {
-            const data = envelope.data;
+            const data = envelope.success ? envelope.data : void 0;
             if (data && "valid" in data && !data.valid) {
               const errors = Array.isArray(data.errors) ? data.errors : [];
               return {
@@ -17513,7 +17565,6 @@ var init_check = __esm({
         return lafsSuccess(result.data ?? {}, "archive.stats");
       },
       "chain.validate": async (params) => {
-        const _projectRoot = getProjectRoot3();
         if (!params.chain) {
           return lafsError("E_INVALID_INPUT", "chain is required", "chain.validate");
         }
@@ -17603,6 +17654,21 @@ var init_check = __esm({
           "test.run"
         );
       },
+      "test.coverage": async (_params) => {
+        const projectRoot = getProjectRoot3();
+        const result = validateTestCoverage(projectRoot);
+        if (!result.success) {
+          return lafsError(
+            String(result.error?.code ?? "E_INTERNAL"),
+            result.error?.message ?? "Unknown error",
+            "test.coverage"
+          );
+        }
+        return lafsSuccess(
+          result.data ?? { lineCoverage: 0, branchCoverage: 0, functionCoverage: 0, threshold: 0 },
+          "test.coverage"
+        );
+      },
       "compliance.sync": async (params) => {
         const projectRoot = getProjectRoot3();
         const { syncComplianceMetrics } = await import("@cleocode/core/internal");
@@ -17652,11 +17718,20 @@ var init_check = __esm({
       async query(operation, params) {
         const startTime = Date.now();
         try {
-          const envelope = await typedDispatch(_checkTypedHandler, operation, params ?? {});
+          const envelope = await typedDispatch(
+            _checkTypedHandler,
+            operation,
+            params ?? {}
+          );
           return {
             meta: dispatchMeta("query", "check", operation, startTime),
             success: envelope.success,
-            ...envelope.success ? { data: envelope.data } : { error: envelope.error }
+            ...envelope.success ? { data: envelope.data } : {
+              error: {
+                code: envelope.error?.code !== void 0 ? String(envelope.error.code) : "E_INTERNAL",
+                message: envelope.error?.message ?? "Unknown error"
+              }
+            }
           };
         } catch (error) {
           const message = error instanceof Error ? error.message : String(error);
@@ -17670,11 +17745,20 @@ var init_check = __esm({
       async mutate(operation, params) {
         const startTime = Date.now();
         try {
-          const envelope = await typedDispatch(_checkTypedHandler, operation, params ?? {});
+          const envelope = await typedDispatch(
+            _checkTypedHandler,
+            operation,
+            params ?? {}
+          );
           return {
             meta: dispatchMeta("mutate", "check", operation, startTime),
             success: envelope.success,
-            ...envelope.success ? { data: envelope.data } : { error: envelope.error }
+            ...envelope.success ? { data: envelope.data } : {
+              error: {
+                code: envelope.error?.code !== void 0 ? String(envelope.error.code) : "E_INTERNAL",
+                message: envelope.error?.message ?? "Unknown error"
+              }
+            }
           };
         } catch (error) {
           const message = error instanceof Error ? error.message : String(error);
@@ -17720,13 +17804,25 @@ function envelopeToEngineResult2(envelope) {
   return {
     success: false,
     error: {
-      code: envelope.error?.code ?? "E_INTERNAL",
+      code: envelope.error?.code !== void 0 ? String(envelope.error.code) : "E_INTERNAL",
       message: envelope.error?.message ?? "Unknown error"
     }
   };
 }
+async function _resolveCredential(agentId) {
+  const { AgentRegistryAccessor, getDb: getDb3 } = await import("@cleocode/core/internal");
+  await getDb3();
+  const registry = new AgentRegistryAccessor(process.cwd());
+  const credential = agentId ? await registry.get(agentId) : await registry.getActive();
+  if (!credential) {
+    throw new Error(
+      "No agent credential found. Run: cleo agent register --id <id> --api-key <key>"
+    );
+  }
+  return credential;
+}
 async function getStatusImpl(agentId) {
-  const credential = await this.resolveCredential(agentId);
+  const credential = await _resolveCredential(agentId);
   const pollerRunning = activePoller !== null && activeAgentId === credential.agentId;
   const { LocalTransport } = await import("@cleocode/core/conduit");
   if (LocalTransport.isAvailable(process.cwd())) {
@@ -17785,7 +17881,7 @@ async function getStatusImpl(agentId) {
   };
 }
 async function peekImpl(agentId, limit) {
-  const credential = await this.resolveCredential(agentId);
+  const credential = await _resolveCredential(agentId);
   const { LocalTransport } = await import("@cleocode/core/conduit");
   if (LocalTransport.isAvailable(process.cwd())) {
     const transport = new LocalTransport();
@@ -17854,7 +17950,7 @@ async function startPollingImpl(agentId, pollIntervalMs, groupConversationIds) {
       }
     };
   }
-  const credential = await this.resolveCredential(agentId);
+  const credential = await _resolveCredential(agentId);
   const { AgentPoller } = await import("@cleocode/runtime");
   const { LocalTransport } = await import("@cleocode/core/conduit");
   let transport;
@@ -17916,7 +18012,7 @@ async function subscribeTopicImpl(topicName, agentId, _filter) {
       error: { code: "E_ARGS", message: 'Must specify "topicName"' }
     };
   }
-  const credential = await this.resolveCredential(agentId);
+  const credential = await _resolveCredential(agentId);
   const { LocalTransport } = await import("@cleocode/core/conduit");
   if (!LocalTransport.isAvailable(process.cwd())) {
     return {
@@ -17957,7 +18053,7 @@ async function publishToTopicImpl(topicName, content, kind, payload, agentId) {
       error: { code: "E_ARGS", message: 'Must specify "content"' }
     };
   }
-  const credential = await this.resolveCredential(agentId);
+  const credential = await _resolveCredential(agentId);
   const { LocalTransport } = await import("@cleocode/core/conduit");
   if (!LocalTransport.isAvailable(process.cwd())) {
     return {
@@ -17995,7 +18091,7 @@ async function listenTopicImpl(topicName, agentId, limit, since) {
     };
   }
   const startMs = Date.now();
-  const credential = await this.resolveCredential(agentId);
+  const credential = await _resolveCredential(agentId);
   const { LocalTransport } = await import("@cleocode/core/conduit");
   if (!LocalTransport.isAvailable(process.cwd())) {
     return {
@@ -18040,7 +18136,7 @@ async function sendMessageImpl(content, to, conversationId, agentId) {
       error: { code: "E_ARGS", message: 'Must specify "to" (agent ID) or "conversationId"' }
     };
   }
-  const credential = await this.resolveCredential(agentId);
+  const credential = await _resolveCredential(agentId);
   const { LocalTransport } = await import("@cleocode/core/conduit");
   if (LocalTransport.isAvailable(process.cwd())) {
     const transport = new LocalTransport();
@@ -19243,7 +19339,8 @@ import {
   getBrainDb,
   getBrainNativeDb,
   resolveAnthropicApiKey,
-  resolveAnthropicApiKeySource
+  resolveAnthropicApiKeySource,
+  typedAll
 } from "@cleocode/core/internal";
 import {
   approveBackfillRun,
@@ -20226,29 +20323,29 @@ var init_memory2 = __esm({
                 }
                 let stdpWeights = [];
                 try {
-                  const edgeRows = nativeDb.prepare(
+                  const stmt = nativeDb.prepare(
                     `SELECT from_id, to_id, edge_type, weight,
+                        COALESCE(reinforcement_count, 0) AS reinforcement_count,
+                        last_reinforced_at
+                 FROM brain_page_edges
+                 WHERE (from_id = ? OR to_id = ?)
+                   AND plasticity_class IN ('hebbian', 'stdp')
+                 ORDER BY weight DESC
+                 LIMIT 20`
+                  );
+                  stdpWeights = typedAll(stmt, entryId, entryId);
+                } catch {
+                  try {
+                    const stmt = nativeDb.prepare(
+                      `SELECT from_id, to_id, edge_type, weight,
                           COALESCE(reinforcement_count, 0) AS reinforcement_count,
                           last_reinforced_at
                    FROM brain_page_edges
-                   WHERE (from_id = ? OR to_id = ?)
-                     AND plasticity_class IN ('hebbian', 'stdp')
+                   WHERE from_id = ? OR to_id = ?
                    ORDER BY weight DESC
                    LIMIT 20`
-                  ).all(entryId, entryId);
-                  stdpWeights = edgeRows;
-                } catch {
-                  try {
-                    const edgeRows = nativeDb.prepare(
-                      `SELECT from_id, to_id, edge_type, weight,
-                            COALESCE(reinforcement_count, 0) AS reinforcement_count,
-                            last_reinforced_at
-                     FROM brain_page_edges
-                     WHERE from_id = ? OR to_id = ?
-                     ORDER BY weight DESC
-                     LIMIT 20`
-                    ).all(entryId, entryId);
-                    stdpWeights = edgeRows;
+                    );
+                    stdpWeights = typedAll(stmt, entryId, entryId);
                   } catch {
                   }
                 }
@@ -21634,7 +21731,15 @@ async function nexusProfileUpsert(trait) {
   try {
     const nexusDb = await getNexusDb();
     const existing = await getUserProfileTrait(nexusDb, trait.traitKey);
-    await upsertUserProfileTrait(nexusDb, trait);
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const fullTrait = {
+      ...trait,
+      firstObservedAt: existing?.firstObservedAt ?? now,
+      lastReinforcedAt: now,
+      reinforcementCount: existing ? existing.reinforcementCount + 1 : 1,
+      supersededBy: existing?.supersededBy ?? null
+    };
+    await upsertUserProfileTrait(nexusDb, fullTrait);
     return engineSuccess({ created: existing === null });
   } catch (error) {
     return engineError("E_INTERNAL", error instanceof Error ? error.message : String(error));
@@ -30430,7 +30535,7 @@ function envelopeToEngineResult3(envelope) {
   return {
     success: false,
     error: {
-      code: envelope.error?.code ?? "E_INTERNAL",
+      code: envelope.error?.code !== void 0 ? String(envelope.error.code) : "E_INTERNAL",
       message: envelope.error?.message ?? "Unknown error"
     }
   };
@@ -55613,6 +55718,74 @@ var reasonCommand = defineCommand({
   }
 });
 
+// packages/cleo/src/cli/commands/reconcile.ts
+import { release } from "@cleocode/core";
+var releaseSubcommand = defineCommand({
+  meta: {
+    name: "release",
+    description: "Run post-release invariants for a release tag"
+  },
+  args: {
+    tag: {
+      type: "string",
+      description: "Release tag to reconcile (e.g. v2026.4.145)",
+      required: true
+    },
+    "dry-run": {
+      type: "boolean",
+      description: "Preview mutations without writing to tasks.db or audit log",
+      default: false
+    },
+    json: {
+      type: "boolean",
+      description: "Emit raw JSON instead of human-readable summary",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const dryRun = args["dry-run"] === true;
+    const report = await release.runInvariants(args.tag, {
+      dryRun,
+      cwd: process.cwd()
+    });
+    if (args.json) {
+      process.stdout.write(`${JSON.stringify(report, null, 2)}
+`);
+    } else {
+      const lines = [];
+      lines.push(`reconcile release ${report.tag}${dryRun ? " (dry-run)" : ""}`);
+      lines.push(
+        `  total: processed=${report.processed} reconciled=${report.reconciled} unreconciled=${report.unreconciled} errors=${report.errors}`
+      );
+      for (const r of report.results) {
+        lines.push(`  [${r.severity}] ${r.id}: ${r.message}`);
+      }
+      process.stdout.write(`${lines.join("\n")}
+`);
+    }
+    if (report.errors > 0) {
+      process.exit(1);
+    }
+    if (report.unreconciled > 0) {
+      process.exit(2);
+    }
+  }
+});
+var reconcileCommand2 = defineCommand({
+  meta: {
+    name: "reconcile",
+    description: "Reconcile state against external sources (release tags, schema, etc.)"
+  },
+  subCommands: {
+    release: releaseSubcommand
+  },
+  async run({ cmd, rawArgs }) {
+    const firstArg = rawArgs?.find((a) => !a.startsWith("-"));
+    if (firstArg && cmd.subCommands && firstArg in cmd.subCommands) return;
+    await showUsage(cmd);
+  }
+});
+
 // packages/cleo/src/cli/commands/refresh-memory.ts
 import { getProjectRoot as getProjectRoot27 } from "@cleocode/core";
 var refreshMemoryCommand = defineCommand({
@@ -60041,7 +60214,7 @@ var linksCommand2 = defineCommand({
     );
   }
 });
-var reconcileCommand2 = defineCommand({
+var reconcileCommand3 = defineCommand({
   meta: {
     name: "reconcile",
     description: "Reconcile external tasks from a JSON file against CLEO tasks"
@@ -60094,7 +60267,7 @@ var syncCommand5 = defineCommand({
   meta: { name: "sync", description: "External task synchronisation management" },
   subCommands: {
     links: linksCommand2,
-    reconcile: reconcileCommand2
+    reconcile: reconcileCommand3
   },
   async run({ cmd, rawArgs }) {
     const firstArg = rawArgs?.find((a) => !a.startsWith("-"));
@@ -61708,6 +61881,7 @@ subCommands["playbook"] = playbookCommand;
 subCommands["promote"] = promoteCommand;
 subCommands["provider"] = providerCommand;
 subCommands["reason"] = reasonCommand;
+subCommands["reconcile"] = reconcileCommand2;
 subCommands["refresh-memory"] = refreshMemoryCommand;
 subCommands["relates"] = relatesCommand;
 subCommands["release"] = releaseCommand;