@cleocode/cleo 2026.5.101 → 2026.5.103

package/dist/cli/index.js

@@ -1531,6 +1531,13 @@ var init_attachment_schema = __esm({
   }
 });
 
+// packages/contracts/src/boundary.ts
+var init_boundary = __esm({
+  "packages/contracts/src/boundary.ts"() {
+    "use strict";
+  }
+});
+
 // packages/contracts/src/branch-lock.ts
 var init_branch_lock = __esm({
   "packages/contracts/src/branch-lock.ts"() {
@@ -3912,6 +3919,38 @@ var init_operations_registry = __esm({
           }
         ]
       },
+      {
+        gateway: "mutate",
+        domain: "tasks",
+        operation: "saga.detach",
+        description: "tasks.saga.detach (mutate) \u2014 remove a Saga member relation (task_relations type=groups); idempotent; appends to .cleo/audit/saga-detach.jsonl (T10118)",
+        tier: 0,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: ["sagaId", "memberId"],
+        params: [
+          {
+            name: "sagaId",
+            type: "string",
+            required: true,
+            description: "Saga task ID",
+            cli: { positional: true }
+          },
+          {
+            name: "memberId",
+            type: "string",
+            required: true,
+            description: "Member task ID to detach from the Saga",
+            cli: { positional: true }
+          },
+          {
+            name: "reason",
+            type: "string",
+            required: false,
+            description: "Human-readable reason recorded in the audit log entry"
+          }
+        ]
+      },
       {
         gateway: "query",
         domain: "tasks",
@@ -3961,6 +4000,56 @@ var init_operations_registry = __esm({
           }
         ]
       },
+      {
+        // T10117 — detach I5-violating parentId and re-attach via task_relations
+        // type=groups (ADR-073 §1.2 invariant I5). Idempotent.
+        gateway: "mutate",
+        domain: "tasks",
+        operation: "saga.repair",
+        description: "tasks.saga.repair (mutate) \u2014 detach I5-violating parentId and re-attach via task_relations type=groups; idempotent",
+        tier: 0,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: ["sagaId"],
+        params: [
+          {
+            name: "sagaId",
+            type: "string",
+            required: true,
+            description: "Saga task ID (must have label=saga)",
+            cli: { positional: true }
+          }
+        ]
+      },
+      {
+        // T10121 — idempotent cron-safe saga auto-close repair. Re-applies
+        // T10116 logic for sagas whose members reached 100% terminal via paths
+        // OTHER than completeTask (bulk SQL, crash recovery, manual edits).
+        // Supersedes T10098 standalone scope.
+        gateway: "mutate",
+        domain: "tasks",
+        operation: "saga.reconcile",
+        description: "tasks.saga.reconcile (mutate) \u2014 idempotent cron-safe saga auto-close repair; per-saga advisory lock + audit log; supersedes T10098",
+        tier: 0,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: [],
+        params: [
+          {
+            name: "sagaId",
+            type: "string",
+            required: false,
+            description: "Optional saga task ID. Omit to walk every saga.",
+            cli: { positional: true }
+          },
+          {
+            name: "dryRun",
+            type: "boolean",
+            required: false,
+            description: "Report what would happen without mutating rows or writing audit log"
+          }
+        ]
+      },
       {
         gateway: "mutate",
         domain: "tasks",
@@ -11081,6 +11170,7 @@ var init_src2 = __esm({
   "packages/contracts/src/index.ts"() {
     init_acceptance_gate_schema();
     init_attachment_schema();
+    init_boundary();
     init_branch_lock();
     init_changesets();
     init_cli_category();
@@ -30688,6 +30778,16 @@ var init_sticky2 = __esm({
 // packages/cleo/src/dispatch/domains/tasks.ts
 import { getLogger as getLogger15, getProjectRoot as getProjectRoot18 } from "@cleocode/core";
 import { createAttachmentStore as createAttachmentStore4 } from "@cleocode/core/internal";
+import {
+  sagaAdd as coreSagaAdd,
+  sagaCreate as coreSagaCreate,
+  detachSagaMember as coreSagaDetach,
+  sagaList as coreSagaList,
+  sagaMembers as coreSagaMembers,
+  reconcileSaga as coreSagaReconcile,
+  repairSaga as coreSagaRepair,
+  sagaRollup as coreSagaRollup
+} from "@cleocode/core/sagas";
 async function fetchTaskAttachments(projectRoot, taskId) {
   try {
     const store = createAttachmentStore4();
@@ -30709,136 +30809,49 @@ async function fetchTaskAttachments(projectRoot, taskId) {
   }
 }
 async function sagaCreate(params) {
-  const projectRoot = getProjectRoot18();
   const title = typeof params.title === "string" ? params.title : "";
   const description = typeof params.description === "string" ? params.description : void 0;
   const acceptance = Array.isArray(params.acceptance) ? params.acceptance : void 0;
   return wrapCoreResult(
-    await addTaskWithSessionScope(projectRoot, {
-      title,
-      description,
-      labels: ["saga"],
-      type: "epic",
-      acceptance
-    }),
+    await coreSagaCreate(getProjectRoot18(), { title, description, acceptance }),
     "saga.create"
   );
 }
 async function sagaAdd(params) {
-  const projectRoot = getProjectRoot18();
   const sagaId = typeof params.sagaId === "string" ? params.sagaId : "";
   const epicId = typeof params.epicId === "string" ? params.epicId : "";
-  if (!sagaId || !epicId) {
-    return lafsError("E_INVALID_INPUT", "sagaId and epicId are required", "saga.add");
-  }
-  const sagaResult = await taskShow(projectRoot, sagaId);
-  if (!sagaResult.success || !sagaResult.data) {
-    return lafsError("E_NOT_FOUND", `Saga not found: ${sagaId}`, "saga.add");
-  }
-  const sagaTask = sagaResult.data.task;
-  const sagaLabels = sagaTask?.labels ?? [];
-  if (!sagaLabels.includes("saga")) {
-    return lafsError("E_INVALID_INPUT", `Task ${sagaId} does not have label='saga'`, "saga.add");
-  }
-  const epicResult = await taskShow(projectRoot, epicId);
-  if (!epicResult.success || !epicResult.data) {
-    return lafsError("E_NOT_FOUND", `Epic not found: ${epicId}`, "saga.add");
-  }
-  const epicType = epicResult.data.task?.type;
-  if (epicType !== "epic") {
-    return lafsError(
-      "E_INVALID_INPUT",
-      `Task ${epicId} has type='${String(epicType)}', expected type='epic'`,
-      "saga.add"
-    );
-  }
-  const relResult = await taskRelatesAdd(projectRoot, sagaId, epicId, "groups", void 0);
-  if (!relResult.success) {
-    return lafsError(
-      "E_GENERAL",
-      relResult.error?.message ?? "Failed to link Epic to Saga",
-      "saga.add"
-    );
-  }
-  return lafsSuccess({ sagaId, epicId, added: relResult.data?.added ?? true }, "saga.add");
+  return wrapCoreResult(await coreSagaAdd(getProjectRoot18(), { sagaId, epicId }), "saga.add");
+}
+async function sagaDetach(params) {
+  const sagaId = typeof params.sagaId === "string" ? params.sagaId : "";
+  const memberId = typeof params.memberId === "string" ? params.memberId : "";
+  const reason = typeof params.reason === "string" ? params.reason : void 0;
+  return wrapCoreResult(
+    await coreSagaDetach(getProjectRoot18(), { sagaId, memberId, reason }),
+    "saga.detach"
+  );
 }
 async function sagaList() {
-  const projectRoot = getProjectRoot18();
-  const result = await taskList(projectRoot, { type: "epic", label: "saga" });
-  if (!result.success) {
-    return lafsError("E_GENERAL", result.error?.message ?? "Failed to list Sagas", "saga.list");
-  }
-  const tasks = result.data?.tasks ?? [];
-  const topLevel = tasks.filter((t) => {
-    const parentId = t.parentId;
-    return !parentId;
-  });
-  return lafsSuccess({ sagas: topLevel, total: topLevel.length }, "saga.list");
+  return wrapCoreResult(await coreSagaList(getProjectRoot18()), "saga.list");
 }
 async function sagaMembers(params) {
-  const projectRoot = getProjectRoot18();
   const sagaId = typeof params.sagaId === "string" ? params.sagaId : "";
-  if (!sagaId) {
-    return lafsError("E_INVALID_INPUT", "sagaId is required", "saga.members");
-  }
-  const result = await taskRelates(projectRoot, sagaId);
-  if (!result.success) {
-    return lafsError(
-      "E_GENERAL",
-      result.error?.message ?? "Failed to list Saga members",
-      "saga.members"
-    );
-  }
-  const relations = result.data?.relations ?? [];
-  const members = relations.filter((r) => r.type === "groups");
-  return lafsSuccess(
-    {
-      sagaId,
-      members: members.map((r) => ({ epicId: r.taskId, type: r.type, reason: r.reason })),
-      total: members.length
-    },
-    "saga.members"
-  );
+  return wrapCoreResult(await coreSagaMembers(getProjectRoot18(), { sagaId }), "saga.members");
 }
 async function sagaRollup(params) {
-  const projectRoot = getProjectRoot18();
   const sagaId = typeof params.sagaId === "string" ? params.sagaId : "";
-  if (!sagaId) {
-    return lafsError("E_INVALID_INPUT", "sagaId is required", "saga.rollup");
-  }
-  const relResult = await taskRelates(projectRoot, sagaId);
-  if (!relResult.success) {
-    return lafsError(
-      "E_GENERAL",
-      relResult.error?.message ?? "Failed to fetch Saga members for rollup",
-      "saga.rollup"
-    );
-  }
-  const members = (relResult.data?.relations ?? []).filter((r) => r.type === "groups");
-  const total = members.length;
-  if (total === 0) {
-    return lafsSuccess(
-      { sagaId, total: 0, done: 0, active: 0, blocked: 0, pending: 0, completionPct: 0 },
-      "saga.rollup"
-    );
-  }
-  const shows = await Promise.all(members.map((m) => taskShow(projectRoot, m.taskId)));
-  let done = 0;
-  let active = 0;
-  let blocked = 0;
-  let pending = 0;
-  for (const r of shows) {
-    if (!r.success) continue;
-    const status = r.data?.task?.status ?? "pending";
-    if (status === "done") done++;
-    else if (status === "active") active++;
-    else if (status === "blocked") blocked++;
-    else pending++;
-  }
-  const completionPct = total > 0 ? Math.round(done / total * 100) : 0;
-  return lafsSuccess(
-    { sagaId, total, done, active, blocked, pending, completionPct },
-    "saga.rollup"
+  return wrapCoreResult(await coreSagaRollup(getProjectRoot18(), { sagaId }), "saga.rollup");
+}
+async function sagaRepair(params) {
+  const sagaId = typeof params.sagaId === "string" ? params.sagaId : "";
+  return wrapCoreResult(await coreSagaRepair(getProjectRoot18(), { sagaId }), "saga.repair");
+}
+async function sagaReconcile(params) {
+  const sagaId = typeof params.sagaId === "string" && params.sagaId.length > 0 ? params.sagaId : void 0;
+  const dryRun = params.dryRun === true;
+  return wrapCoreResult(
+    await coreSagaReconcile(getProjectRoot18(), { sagaId, dryRun }),
+    "saga.reconcile"
   );
 }
 var _tasksTypedHandler, QUERY_OPS11, MUTATE_OPS10, TasksHandler;
@@ -31296,7 +31309,13 @@ var init_tasks3 = __esm({
       "unclaim",
       // Saga sub-domain (ADR-073)
       "saga.create",
-      "saga.add"
+      "saga.add",
+      // T10117 — repair an I5-violating saga (detach parentId, write groups edge).
+      "saga.repair",
+      // T10118 — repair verb for ADR-073 §1.2 I7 violations (detach saga member).
+      "saga.detach",
+      // T10121 — idempotent cron-safe auto-close repair (supersedes T10098 scope).
+      "saga.reconcile"
     ]);
     TasksHandler = class {
       // -----------------------------------------------------------------------
@@ -31393,6 +31412,36 @@ var init_tasks3 = __esm({
               startTime
             );
           }
+          if (operation === "saga.repair") {
+            const envelope = await sagaRepair(params ?? {});
+            return wrapResult(
+              envelopeToEngineResult(envelope),
+              "mutate",
+              "tasks",
+              operation,
+              startTime
+            );
+          }
+          if (operation === "saga.detach") {
+            const envelope = await sagaDetach(params ?? {});
+            return wrapResult(
+              envelopeToEngineResult(envelope),
+              "mutate",
+              "tasks",
+              operation,
+              startTime
+            );
+          }
+          if (operation === "saga.reconcile") {
+            const envelope = await sagaReconcile(params ?? {});
+            return wrapResult(
+              envelopeToEngineResult(envelope),
+              "mutate",
+              "tasks",
+              operation,
+              startTime
+            );
+          }
         } catch (error) {
           getLogger15("domain:tasks").error(
             { gateway: "mutate", domain: "tasks", operation, err: error },
@@ -31465,7 +31514,13 @@ var init_tasks3 = __esm({
             "unclaim",
             // Saga sub-domain (ADR-073)
             "saga.create",
-            "saga.add"
+            "saga.add",
+            // T10117 — repair an I5-violating saga.
+            "saga.repair",
+            // T10118 — repair verb for ADR-073 §1.2 I7 violations
+            "saga.detach",
+            // T10121 — idempotent cron-safe auto-close repair.
+            "saga.reconcile"
           ]
         };
       }
@@ -40645,6 +40700,10 @@ var init_complete = __esm({
         if (Array.isArray(unblockedTasks) && unblockedTasks.length > 0) {
           output2["unblockedTasks"] = unblockedTasks;
         }
+        const worktreeAutoComplete = data?.worktreeAutoComplete;
+        if (worktreeAutoComplete && typeof worktreeAutoComplete === "object") {
+          output2["worktreeAutoComplete"] = worktreeAutoComplete;
+        }
         cliOutput(output2, { command: "complete", operation: "tasks.complete" });
       }
     });
@@ -45844,6 +45903,20 @@ var init_doctor = __esm({
           type: "boolean",
           description: "Audit orphaned CLEO-generated temp directories and report what cleo gc --temp would remove (T9043)"
         },
+        /**
+         * T10119: audit every Saga (`type='epic'` + `label='saga'`) for
+         * ADR-073 §1.2 invariant violations (I5/I7 + depth ladder) and
+         * auto-close drift. Read-only; non-zero exit when any I-invariant
+         * fails so the check is CI-gateable.
+         *
+         * @task T10119
+         * @saga T10113
+         * @epic T10209
+         */
+        "audit-sagas": {
+          type: "boolean",
+          description: "Audit every Saga for ADR-073 \xA71.2 invariant violations (I5/I7/depth) + auto-close drift (T10119)"
+        },
         /**
          * T9983: migrate the worktree-include file location from
          * `<root>/.cleo/worktree-include` (legacy) to `<root>/.worktreeinclude`
@@ -46250,6 +46323,17 @@ var init_doctor = __esm({
             if (checkResult.details?.["orphans"] && checkResult.details["orphans"].length > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
               process.exitCode = 2;
             }
+          } else if (args["audit-sagas"]) {
+            progress.step(0, "Auditing Saga hierarchy for ADR-073 invariants");
+            const { auditSagaHierarchy } = await import("@cleocode/core/doctor/saga-audit.js");
+            const projectRoot = getProjectRoot33();
+            const result = await auditSagaHierarchy(projectRoot);
+            const summary = `Saga audit complete \u2014 ${result.sagas.length} saga(s) inspected, ${result.count} invariant violation(s), ${result.driftCount} drift warning(s)`;
+            progress.complete(summary);
+            cliOutput(result, { command: "doctor", operation: "doctor.audit-sagas" });
+            if (result.count > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
+              process.exitCode = 2;
+            }
           } else {
             progress.step(0, "Checking CLEO directory");
             await dispatchFromCli(
@@ -46290,6 +46374,34 @@ var init_doctor = __esm({
             } catch {
               progress.complete("Health check complete");
             }
+            try {
+              const projectRoot = getProjectRoot33();
+              const { auditSagaHierarchy } = await import("@cleocode/core/doctor/saga-audit.js");
+              const sagaAudit = await auditSagaHierarchy(projectRoot);
+              if (sagaAudit.sagas.length === 0) {
+                humanLine("\nSaga Hierarchy: no sagas found in tasks.db");
+              } else {
+                const header = `
+Saga Hierarchy (${sagaAudit.sagas.length} saga(s), ${sagaAudit.count} violation(s), ${sagaAudit.driftCount} drift warning(s)):`;
+                humanLine(header);
+                for (const s of sagaAudit.sagas) {
+                  const violationSuffix = s.violations.length > 0 ? `, ${s.violations.length} violation(s)` : "";
+                  humanLine(
+                    `  ${s.sagaId} \xB7 status=${s.status} \xB7 ${s.doneCount}/${s.memberCount} members done${violationSuffix}`
+                  );
+                  for (const v of s.violations) {
+                    humanLine(`    [${v.kind}] ${v.message}`);
+                  }
+                }
+              }
+              if (sagaAudit.count > 0 && (process.exitCode === void 0 || process.exitCode === 0)) {
+                process.exitCode = 2;
+              }
+            } catch (err) {
+              const msg = err instanceof Error ? err.message : String(err);
+              humanLine(`
+Saga Hierarchy: audit skipped (${msg})`);
+            }
           }
         } catch (err) {
           progress.error("Health check failed");
@@ -59755,7 +59867,7 @@ __export(saga_exports, {
   sagaCommand: () => sagaCommand
 });
 import { parseAcceptanceCriteria } from "@cleocode/core";
-var createCommand3, addCommand11, listCommand22, membersCommand, rollupCommand2, sagaCommand;
+var createCommand3, addCommand11, detachCommand2, listCommand22, membersCommand, repairCommand, reconcileCommand5, rollupCommand2, sagaCommand;
 var init_saga = __esm({
   "packages/cleo/src/cli/commands/saga.ts"() {
     "use strict";
@@ -59827,6 +59939,38 @@ var init_saga = __esm({
         );
       }
     });
+    detachCommand2 = defineCommand({
+      meta: {
+        name: "detach",
+        description: "Remove a Saga member relation (task_relations type=groups) \u2014 idempotent, audit-logged"
+      },
+      args: {
+        sagaId: {
+          type: "positional",
+          description: "Saga task ID",
+          required: true
+        },
+        memberId: {
+          type: "positional",
+          description: "Member task ID to detach from the Saga",
+          required: true
+        },
+        reason: {
+          type: "string",
+          description: "Human-readable reason recorded in the audit log entry",
+          required: false
+        }
+      },
+      async run({ args }) {
+        await dispatchFromCli(
+          "mutate",
+          "tasks",
+          "saga.detach",
+          { sagaId: args.sagaId, memberId: args.memberId, reason: args.reason },
+          { command: "saga", operation: "tasks.saga.detach" }
+        );
+      }
+    });
     listCommand22 = defineCommand({
       meta: {
         name: "list",
@@ -59858,6 +60002,56 @@ var init_saga = __esm({
         );
       }
     });
+    repairCommand = defineCommand({
+      meta: {
+        name: "repair",
+        description: "Detach an I5-violating parentId from a Saga and re-attach via task_relations.type='groups' (ADR-073 \xA71.2). Idempotent."
+      },
+      args: {
+        sagaId: {
+          type: "positional",
+          description: "Saga task ID (must have label=saga)",
+          required: true
+        }
+      },
+      async run({ args }) {
+        await dispatchFromCli(
+          "mutate",
+          "tasks",
+          "saga.repair",
+          { sagaId: args.sagaId },
+          { command: "saga", operation: "tasks.saga.repair" }
+        );
+      }
+    });
+    reconcileCommand5 = defineCommand({
+      meta: {
+        name: "reconcile",
+        description: "Idempotent cron-safe saga auto-close repair \u2014 re-applies T10116 logic for state changed outside completeTask"
+      },
+      args: {
+        sagaId: {
+          type: "positional",
+          description: "Optional saga task ID. Omit to walk every saga.",
+          required: false
+        },
+        "dry-run": {
+          type: "boolean",
+          description: "Report what would happen without mutating rows or writing audit log",
+          required: false
+        }
+      },
+      async run({ args }) {
+        const sagaId = typeof args.sagaId === "string" && args.sagaId.length > 0 ? args.sagaId : void 0;
+        await dispatchFromCli(
+          "mutate",
+          "tasks",
+          "saga.reconcile",
+          { sagaId, dryRun: args["dry-run"] === true },
+          { command: "saga", operation: "tasks.saga.reconcile" }
+        );
+      }
+    });
     rollupCommand2 = defineCommand({
       meta: {
         name: "rollup",
@@ -59886,9 +60080,12 @@ var init_saga = __esm({
       subCommands: {
         create: createCommand3,
         add: addCommand11,
+        detach: detachCommand2,
         list: listCommand22,
         members: membersCommand,
-        rollup: rollupCommand2
+        rollup: rollupCommand2,
+        repair: repairCommand,
+        reconcile: reconcileCommand5
       },
       async run({ cmd, rawArgs }) {
         const firstArg = rawArgs?.find((a) => !a.startsWith("-"));
@@ -61464,7 +61661,7 @@ __export(sequence_exports, {
   sequenceCommand: () => sequenceCommand
 });
 import { getProjectRoot as getProjectRoot40 } from "@cleocode/core/internal";
-var showCommand12, checkCommand6, repairCommand, sequenceCommand;
+var showCommand12, checkCommand6, repairCommand2, sequenceCommand;
 var init_sequence = __esm({
   "packages/cleo/src/cli/commands/sequence.ts"() {
     "use strict";
@@ -61495,7 +61692,7 @@ var init_sequence = __esm({
         );
       }
     });
-    repairCommand = defineCommand({
+    repairCommand2 = defineCommand({
       meta: { name: "repair", description: "Reset counter to max + 1 if behind" },
       async run() {
         const { repairSequence } = await import("@cleocode/core/internal");
@@ -61519,7 +61716,7 @@ var init_sequence = __esm({
       subCommands: {
         show: showCommand12,
         check: checkCommand6,
-        repair: repairCommand
+        repair: repairCommand2
       },
       async run({ cmd, rawArgs }) {
         const firstArg = rawArgs?.find((a) => !a.startsWith("-"));
@@ -64246,7 +64443,7 @@ var sync_exports = {};
 __export(sync_exports, {
   syncCommand: () => syncCommand6
 });
-var linksRemoveCommand, linksCommand2, reconcileCommand5, syncCommand6;
+var linksRemoveCommand, linksCommand2, reconcileCommand6, syncCommand6;
 var init_sync = __esm({
   "packages/cleo/src/cli/commands/sync.ts"() {
     "use strict";
@@ -64308,7 +64505,7 @@ var init_sync = __esm({
         );
       }
     });
-    reconcileCommand5 = defineCommand({
+    reconcileCommand6 = defineCommand({
       meta: {
         name: "reconcile",
         description: "Reconcile external tasks from a JSON file against CLEO tasks"
@@ -64363,7 +64560,7 @@ var init_sync = __esm({
       meta: { name: "sync", description: "External task synchronisation management" },
       subCommands: {
         links: linksCommand2,
-        reconcile: reconcileCommand5
+        reconcile: reconcileCommand6
       },
       async run({ cmd, rawArgs }) {
         const firstArg = rawArgs?.find((a) => !a.startsWith("-"));