@cleocode/core 2026.3.37 → 2026.3.39

package/dist/store/converters.js

@@ -1,120 +0,0 @@
-/**
- * Shared row <-> domain conversion functions for SQLite store modules.
- *
- * Eliminates duplication across sqlite-data-accessor.ts, task-store.ts,
- * and session-store.ts.
- */
-import { safeParseJson, safeParseJsonArray } from './parsers.js';
-/** Convert a database TaskRow to a domain Task object. */
-export function rowToTask(row) {
-    return {
-        id: row.id,
-        title: row.title,
-        status: row.status,
-        priority: row.priority,
-        type: row.type ?? undefined,
-        parentId: row.parentId ?? undefined,
-        phase: row.phase ?? undefined,
-        size: row.size ?? undefined,
-        position: row.position ?? undefined,
-        positionVersion: row.positionVersion ?? undefined,
-        description: row.description ?? '',
-        labels: safeParseJsonArray(row.labelsJson),
-        notes: safeParseJsonArray(row.notesJson),
-        acceptance: safeParseJsonArray(row.acceptanceJson),
-        files: safeParseJsonArray(row.filesJson),
-        depends: undefined, // Populated separately from task_dependencies
-        origin: row.origin ?? undefined,
-        blockedBy: row.blockedBy ?? undefined,
-        epicLifecycle: row.epicLifecycle ?? undefined,
-        noAutoComplete: row.noAutoComplete ?? undefined,
-        createdAt: row.createdAt,
-        updatedAt: row.updatedAt ?? undefined,
-        completedAt: row.completedAt ?? undefined,
-        cancelledAt: row.cancelledAt ?? undefined,
-        cancellationReason: row.cancellationReason ?? undefined,
-        verification: row.verificationJson ? safeParseJson(row.verificationJson) : undefined,
-        provenance: row.createdBy || row.modifiedBy || row.sessionId
-            ? {
-                createdBy: row.createdBy ?? null,
-                modifiedBy: row.modifiedBy ?? null,
-                sessionId: row.sessionId ?? null,
-            }
-            : undefined,
-    };
-}
-/** Convert a domain Task to a database row for insert/upsert. */
-export function taskToRow(task) {
-    return {
-        id: task.id,
-        title: task.title ?? '',
-        description: task.description ?? null,
-        status: task.status ?? 'pending',
-        priority: task.priority ?? 'medium',
-        type: task.type ?? null,
-        parentId: task.parentId ?? null,
-        phase: task.phase ?? null,
-        size: task.size ?? null,
-        position: task.position ?? null,
-        positionVersion: task.positionVersion ?? 0,
-        labelsJson: task.labels ? JSON.stringify(task.labels) : '[]',
-        notesJson: task.notes ? JSON.stringify(task.notes) : '[]',
-        acceptanceJson: task.acceptance ? JSON.stringify(task.acceptance) : '[]',
-        filesJson: task.files ? JSON.stringify(task.files) : '[]',
-        origin: task.origin ?? null,
-        blockedBy: task.blockedBy ?? null,
-        epicLifecycle: task.epicLifecycle ?? null,
-        noAutoComplete: task.noAutoComplete ?? null,
-        createdAt: task.createdAt ?? new Date().toISOString(),
-        updatedAt: task.updatedAt ?? null,
-        completedAt: task.completedAt ?? null,
-        cancelledAt: task.cancelledAt ?? null,
-        cancellationReason: task.cancellationReason ?? null,
-        verificationJson: task.verification ? JSON.stringify(task.verification) : null,
-        createdBy: task.provenance?.createdBy ?? null,
-        modifiedBy: task.provenance?.modifiedBy ?? null,
-        sessionId: task.provenance?.sessionId ?? null,
-    };
-}
-/** Convert a domain Task to a row suitable for archived tasks. */
-export function archivedTaskToRow(task) {
-    const row = taskToRow(task);
-    row.status = 'archived';
-    if (!row['archivedAt']) {
-        row['archivedAt'] = task.completedAt ?? new Date().toISOString();
-    }
-    return row;
-}
-/** Convert a SessionRow to a domain Session. */
-export function rowToSession(row) {
-    const taskWork = {
-        taskId: row.currentTask ?? null,
-        setAt: row.taskStartedAt ?? null,
-    };
-    return {
-        id: row.id,
-        name: row.name,
-        status: row.status,
-        scope: (safeParseJson(row.scopeJson) ?? { type: 'global' }),
-        taskWork,
-        startedAt: row.startedAt,
-        endedAt: row.endedAt ?? undefined,
-        agent: row.agent ?? undefined,
-        notes: safeParseJsonArray(row.notesJson),
-        tasksCompleted: safeParseJsonArray(row.tasksCompletedJson),
-        tasksCreated: safeParseJsonArray(row.tasksCreatedJson),
-        handoffJson: row.handoffJson ?? null,
-        // Session chain fields (T4959)
-        previousSessionId: row.previousSessionId ?? null,
-        nextSessionId: row.nextSessionId ?? null,
-        agentIdentifier: row.agentIdentifier ?? null,
-        handoffConsumedAt: row.handoffConsumedAt ?? null,
-        handoffConsumedBy: row.handoffConsumedBy ?? null,
-        debriefJson: row.debriefJson ?? null,
-        // Session stats fields
-        stats: row.statsJson ? safeParseJson(row.statsJson) : undefined,
-        resumeCount: row.resumeCount ?? undefined,
-        gradeMode: row.gradeMode ? Boolean(row.gradeMode) : undefined,
-    };
-}
-//# sourceMappingURL=converters.js.map

package/dist/store/converters.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"converters.js","sourceRoot":"","sources":["../../src/store/converters.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAKjE,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAoB;QAChC,QAAQ,EAAE,GAAG,CAAC,QAAwB;QACtC,IAAI,EAAG,GAAG,CAAC,IAAiB,IAAI,SAAS;QACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;QACnC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;QAC7B,IAAI,EAAG,GAAG,CAAC,IAAiB,IAAI,SAAS;QACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;QACnC,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,SAAS;QACjD,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;QACxC,UAAU,EAAE,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC;QAClD,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;QACxC,OAAO,EAAE,SAAS,EAAE,8CAA8C;QAClE,MAAM,EAAG,GAAG,CAAC,MAAyB,IAAI,SAAS;QACnD,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;QACrC,aAAa,EAAG,GAAG,CAAC,aAAuC,IAAI,SAAS;QACxE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;QAC/C,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;QACrC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACzC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACzC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;QACvD,YAAY,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;QACpF,UAAU,EACR,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,SAAS;YAC9C,CAAC,CAAC;gBACE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;gBAChC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;gBAClC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;aACjC;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,SAAS,CAAC,IAAoC;IAC5D,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;QAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ;QACnC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;QAC/B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,CAAC;QAC1C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QAC5D,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QACzD,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QACxE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;QACzC,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrD,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,IAAI;QACnD,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9E,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI;QAC7C,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,IAAI;QAC/C,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI;KAC9C,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,IAAU;IAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC;IACxB,IAAI,CAAE,GAA+B,CAAC,YAAY,CAAC,EAAE,CAAC;QACnD,GAA+B,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY,CAAC,GAAe;IAC1C,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QAC/B,KAAK,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;KACjC,CAAC;IACF,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAuB;QACnC,KAAK,EAAE,CAAC,aAAa,CAAe,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAiB;QACzF,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;QACjC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;QAC7B,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;QACxC,cAAc,EAAE,kBAAkB,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC1D,YAAY,EAAE,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACtD,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,+BAA+B;QAC/B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;QAChD,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;QACxC,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC5C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;QAChD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;QAChD,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,uBAAuB;QACvB,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAe,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACzC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9D,CAAC;AACJ,CAAC"}

package/dist/store/data-accessor.d.ts

@@ -1,20 +0,0 @@
-/**
- * DataAccessor re-export + factory functions.
- *
- * The DataAccessor interface is defined in @cleocode/contracts.
- * This module re-exports it and provides the concrete SQLite factory.
- *
- * @epic T4454
- */
-export type { ArchiveFields, ArchiveFile, DataAccessor, QueryTasksResult, TaskFieldUpdates, TaskQueryFilters, TransactionAccessor, } from '@cleocode/contracts';
-/**
- * Create a DataAccessor for the given working directory.
- * Always creates a SQLite accessor (ADR-006 canonical storage).
- *
- * ALL accessors returned are safety-enabled by default via SafetyDataAccessor wrapper.
- * Use CLEO_DISABLE_SAFETY=true to bypass (emergency only).
- */
-export declare function createDataAccessor(_engine?: 'sqlite', cwd?: string): Promise<import('@cleocode/contracts').DataAccessor>;
-/** Convenience: get a DataAccessor with auto-detected engine. */
-export declare function getAccessor(cwd?: string): Promise<import('@cleocode/contracts').DataAccessor>;
-//# sourceMappingURL=data-accessor.d.ts.map

package/dist/store/data-accessor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-accessor.d.ts","sourceRoot":"","sources":["../../src/store/data-accessor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,YAAY,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,CAAC,EAAE,QAAQ,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,qBAAqB,EAAE,YAAY,CAAC,CAMrD;AAED,iEAAiE;AACjE,wBAAsB,WAAW,CAC/B,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,qBAAqB,EAAE,YAAY,CAAC,CAErD"}

package/dist/store/data-accessor.js

@@ -1,26 +0,0 @@
-/**
- * DataAccessor re-export + factory functions.
- *
- * The DataAccessor interface is defined in @cleocode/contracts.
- * This module re-exports it and provides the concrete SQLite factory.
- *
- * @epic T4454
- */
-/**
- * Create a DataAccessor for the given working directory.
- * Always creates a SQLite accessor (ADR-006 canonical storage).
- *
- * ALL accessors returned are safety-enabled by default via SafetyDataAccessor wrapper.
- * Use CLEO_DISABLE_SAFETY=true to bypass (emergency only).
- */
-export async function createDataAccessor(_engine, cwd) {
-    const { createSqliteDataAccessor } = await import('./sqlite-data-accessor.js');
-    const inner = await createSqliteDataAccessor(cwd);
-    const { wrapWithSafety } = await import('./safety-data-accessor.js');
-    return wrapWithSafety(inner, cwd);
-}
-/** Convenience: get a DataAccessor with auto-detected engine. */
-export async function getAccessor(cwd) {
-    return createDataAccessor(undefined, cwd);
-}
-//# sourceMappingURL=data-accessor.js.map

package/dist/store/data-accessor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-accessor.js","sourceRoot":"","sources":["../../src/store/data-accessor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAkB,EAClB,GAAY;IAEZ,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAElD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACrE,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAY;IAEZ,OAAO,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC"}

package/dist/store/data-safety-central.d.ts

@@ -1,101 +0,0 @@
-/**
- * Centralized Data Safety Manager
- *
- * SINGLE POINT OF SAFETY for ALL CLEO data operations.
- *
- * Design Principles:
- * - All data operations MUST flow through this layer
- * - Zero-config safety: works automatically for all callers
- * - Atomic operations: verify + checkpoint + log in single transaction
- * - Recoverable: every operation leaves system in valid state
- *
- * This eliminates the need for wrapper functions and ensures safety
- * at the architectural level, not as an afterthought.
- *
- * @task T4739
- * @epic T4732
- */
-import type { Session } from '@cleocode/contracts';
-import type { ArchiveFile, DataAccessor } from './data-accessor.js';
-/** Safety violation error */
-export declare class DataSafetyError extends Error {
-    code: 'COLLISION' | 'WRITE_FAILED' | 'VERIFICATION_FAILED' | 'SEQUENCE_INVALID';
-    context?: Record<string, unknown> | undefined;
-    constructor(message: string, code: 'COLLISION' | 'WRITE_FAILED' | 'VERIFICATION_FAILED' | 'SEQUENCE_INVALID', context?: Record<string, unknown> | undefined);
-}
-/** Safety configuration - can be overridden per-operation */
-export interface SafetyOptions {
-    /** Verify data was written (default: true) */
-    verify: boolean;
-    /** Create git checkpoint (default: true) */
-    checkpoint: boolean;
-    /** Validate sequence (default: true) */
-    validateSequence: boolean;
-    /** Strict mode - throw on any issue (default: true) */
-    strict: boolean;
-}
-/** Statistics for monitoring */
-interface SafetyStats {
-    writes: number;
-    verifications: number;
-    checkpoints: number;
-    errors: number;
-    lastCheckpoint: Date | null;
-}
-/** Get current safety statistics */
-export declare function getSafetyStats(): SafetyStats;
-/** Reset safety statistics (for testing) */
-export declare function resetSafetyStats(): void;
-/**
- * Safe wrapper for DataAccessor.saveSessions()
- */
-export declare function safeSaveSessions(accessor: DataAccessor, data: Session[], cwd?: string, options?: Partial<SafetyOptions>): Promise<void>;
-/**
- * Safe wrapper for DataAccessor.saveArchive()
- */
-export declare function safeSaveArchive(accessor: DataAccessor, data: ArchiveFile, cwd?: string, options?: Partial<SafetyOptions>): Promise<void>;
-/**
- * Safe wrapper for single-task write operations (T5034).
- *
- * Performs:
- * 1. Sequence validation
- * 2. Write operation (caller-provided function)
- * 3. Git checkpoint
- *
- * Verification is lightweight — no full-file read-back. The write
- * itself is a targeted SQL operation that either succeeds or throws.
- */
-export declare function safeSingleTaskWrite(_accessor: DataAccessor, taskId: string, writeFn: () => Promise<void>, cwd?: string, options?: Partial<SafetyOptions>): Promise<void>;
-/**
- * Safe wrapper for DataAccessor.appendLog()
- *
- * Note: Log appends are fire-and-forget (no verification)
- * but we still checkpoint to ensure data is committed.
- */
-export declare function safeAppendLog(accessor: DataAccessor, entry: Record<string, unknown>, cwd?: string, options?: Partial<SafetyOptions>): Promise<void>;
-/**
- * Run comprehensive data integrity check.
- * Validates all data files and sequence consistency.
- */
-export declare function runDataIntegrityCheck(accessor: DataAccessor, cwd?: string): Promise<{
-    passed: boolean;
-    errors: string[];
-    warnings: string[];
-    stats: SafetyStats;
-}>;
-/**
- * Force immediate checkpoint.
- * Use before destructive operations.
- */
-export declare function forceSafetyCheckpoint(context: string, cwd?: string): Promise<void>;
-/**
- * Disable all safety for current process.
- * DANGEROUS - only use for recovery operations.
- */
-export declare function disableSafety(): void;
-/**
- * Re-enable safety after being disabled.
- */
-export declare function enableSafety(): void;
-export {};
-//# sourceMappingURL=data-safety-central.d.ts.map

package/dist/store/data-safety-central.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-safety-central.d.ts","sourceRoot":"","sources":["../../src/store/data-safety-central.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMpE,6BAA6B;AAC7B,qBAAa,eAAgB,SAAQ,KAAK;IAG/B,IAAI,EAAE,WAAW,GAAG,cAAc,GAAG,qBAAqB,GAAG,kBAAkB;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,WAAW,GAAG,cAAc,GAAG,qBAAqB,GAAG,kBAAkB,EAC/E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,UAAU,EAAE,OAAO,CAAC;IACpB,wCAAwC;IACxC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,MAAM,EAAE,OAAO,CAAC;CACjB;AASD,gCAAgC;AAChC,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAUD,oCAAoC;AACpC,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,4CAA4C;AAC5C,wBAAgB,gBAAgB,IAAI,IAAI,CAMvC;AAgGD;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,OAAO,EAAE,EACf,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,YAAY,EACvB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC5B,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,YAAY,EACtB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC,CAuDD;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIxF;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,IAAI,CAUpC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,IAAI,CASnC"}

package/dist/store/data-safety-central.js

@@ -1,269 +0,0 @@
-/**
- * Centralized Data Safety Manager
- *
- * SINGLE POINT OF SAFETY for ALL CLEO data operations.
- *
- * Design Principles:
- * - All data operations MUST flow through this layer
- * - Zero-config safety: works automatically for all callers
- * - Atomic operations: verify + checkpoint + log in single transaction
- * - Recoverable: every operation leaves system in valid state
- *
- * This eliminates the need for wrapper functions and ensures safety
- * at the architectural level, not as an afterthought.
- *
- * @task T4739
- * @epic T4732
- */
-import { getLogger } from '../logger.js';
-import { checkSequence, repairSequence } from '../sequence/index.js';
-import { gitCheckpoint } from './git-checkpoint.js';
-import { vacuumIntoBackup } from './sqlite-backup.js';
-const log = getLogger('data-safety');
-/** Safety violation error */
-export class DataSafetyError extends Error {
-    code;
-    context;
-    constructor(message, code, context) {
-        super(message);
-        this.code = code;
-        this.context = context;
-        this.name = 'DataSafetyError';
-    }
-}
-const DEFAULT_SAFETY = {
-    verify: true,
-    checkpoint: true,
-    validateSequence: true,
-    strict: true,
-};
-const stats = {
-    writes: 0,
-    verifications: 0,
-    checkpoints: 0,
-    errors: 0,
-    lastCheckpoint: null,
-};
-/** Get current safety statistics */
-export function getSafetyStats() {
-    return { ...stats };
-}
-/** Reset safety statistics (for testing) */
-export function resetSafetyStats() {
-    stats.writes = 0;
-    stats.verifications = 0;
-    stats.checkpoints = 0;
-    stats.errors = 0;
-    stats.lastCheckpoint = null;
-}
-/**
- * Verify sequence integrity before write.
- * Auto-repairs if sequence is behind database.
- */
-async function ensureSequenceValid(cwd, options) {
-    if (!options?.validateSequence)
-        return;
-    const check = await checkSequence(cwd);
-    if (!check.valid) {
-        log.warn({ counter: check.counter, maxId: check.maxIdInData }, 'Sequence behind, repairing');
-        const repair = await repairSequence(cwd);
-        if (!repair.repaired && options.strict) {
-            throw new DataSafetyError(`Sequence repair failed: ${repair.message}`, 'SEQUENCE_INVALID', {
-                check,
-                repair,
-            });
-        }
-    }
-}
-/**
- * Create a checkpoint after successful write.
- * Non-blocking - failures are logged but don't fail the operation.
- */
-async function checkpoint(context, cwd, options) {
-    if (!options?.checkpoint)
-        return;
-    try {
-        await gitCheckpoint('auto', context, cwd);
-        stats.checkpoints++;
-        stats.lastCheckpoint = new Date();
-    }
-    catch (err) {
-        // Checkpoint failures are non-fatal but logged
-        log.warn({ err }, 'Checkpoint failed (non-fatal)');
-    }
-    vacuumIntoBackup({ cwd }).catch(() => { }); // non-fatal SQLite snapshot
-}
-/**
- * Verify sessions were written correctly.
- */
-async function verifySessions(data, accessor, options) {
-    if (!options?.verify)
-        return;
-    stats.verifications++;
-    const readBack = await accessor.loadSessions();
-    if (readBack.length !== data.length) {
-        throw new DataSafetyError(`Sessions verification failed: count mismatch. Expected ${data.length}, got ${readBack.length}`, 'VERIFICATION_FAILED', { expected: data.length, actual: readBack.length });
-    }
-}
-/**
- * Verify ArchiveFile was written correctly.
- */
-async function verifyArchiveFile(data, accessor, options) {
-    if (!options?.verify)
-        return;
-    stats.verifications++;
-    const readBack = await accessor.loadArchive();
-    if (!readBack) {
-        throw new DataSafetyError('ArchiveFile verification failed: file not found after write', 'VERIFICATION_FAILED');
-    }
-    if (readBack.archivedTasks.length !== data.archivedTasks.length) {
-        throw new DataSafetyError(`ArchiveFile verification failed: count mismatch. Expected ${data.archivedTasks.length}, got ${readBack.archivedTasks.length}`, 'VERIFICATION_FAILED', { expected: data.archivedTasks.length, actual: readBack.archivedTasks.length });
-    }
-}
-/**
- * Safe wrapper for DataAccessor.saveSessions()
- */
-export async function safeSaveSessions(accessor, data, cwd, options) {
-    const opts = { ...DEFAULT_SAFETY, ...options };
-    await accessor.saveSessions(data);
-    stats.writes++;
-    await verifySessions(data, accessor, opts);
-    await checkpoint(`saved Sessions (${data.length} sessions)`, cwd, opts);
-}
-/**
- * Safe wrapper for DataAccessor.saveArchive()
- */
-export async function safeSaveArchive(accessor, data, cwd, options) {
-    const opts = { ...DEFAULT_SAFETY, ...options };
-    await accessor.saveArchive(data);
-    stats.writes++;
-    await verifyArchiveFile(data, accessor, opts);
-    await checkpoint(`saved Archive (${data.archivedTasks.length} tasks)`, cwd, opts);
-}
-/**
- * Safe wrapper for single-task write operations (T5034).
- *
- * Performs:
- * 1. Sequence validation
- * 2. Write operation (caller-provided function)
- * 3. Git checkpoint
- *
- * Verification is lightweight — no full-file read-back. The write
- * itself is a targeted SQL operation that either succeeds or throws.
- */
-export async function safeSingleTaskWrite(_accessor, taskId, writeFn, cwd, options) {
-    const opts = { ...DEFAULT_SAFETY, ...options };
-    // 1. Validate sequence
-    await ensureSequenceValid(cwd, opts);
-    // 2. Perform targeted write
-    await writeFn();
-    stats.writes++;
-    // 3. Checkpoint (lightweight — no full-file verify)
-    await checkpoint(`single-task ${taskId}`, cwd, opts);
-}
-/**
- * Safe wrapper for DataAccessor.appendLog()
- *
- * Note: Log appends are fire-and-forget (no verification)
- * but we still checkpoint to ensure data is committed.
- */
-export async function safeAppendLog(accessor, entry, cwd, options) {
-    const opts = { ...DEFAULT_SAFETY, ...options, verify: false }; // Logs don't need verification
-    await accessor.appendLog(entry);
-    stats.writes++;
-    await checkpoint('log entry', cwd, opts);
-}
-/**
- * Run comprehensive data integrity check.
- * Validates all data files and sequence consistency.
- */
-export async function runDataIntegrityCheck(accessor, cwd) {
-    const errors = [];
-    const warnings = [];
-    // 1. Check sequence
-    try {
-        const seqCheck = await checkSequence(cwd);
-        if (!seqCheck.valid) {
-            errors.push(`Sequence invalid: counter=${seqCheck.counter}, maxId=T${seqCheck.maxIdInData}`);
-            // Try to repair
-            const repair = await repairSequence(cwd);
-            if (repair.repaired) {
-                warnings.push(`Auto-repaired sequence: ${repair.oldCounter} -> ${repair.newCounter}`);
-            }
-            else {
-                errors.push('Sequence auto-repair failed');
-            }
-        }
-    }
-    catch (err) {
-        errors.push(`Sequence check failed: ${String(err)}`);
-    }
-    // 2. Verify task data can be queried
-    try {
-        const count = await accessor.countTasks();
-        if (count < 0) {
-            errors.push('Task count returned negative value');
-        }
-    }
-    catch (err) {
-        errors.push(`Task data query failed: ${String(err)}`);
-    }
-    try {
-        const sessions = await accessor.loadSessions();
-        if (!Array.isArray(sessions)) {
-            errors.push('Sessions data is not an array');
-        }
-    }
-    catch (err) {
-        errors.push(`Sessions load failed: ${String(err)}`);
-    }
-    // 3. Check for checkpoint recency
-    if (stats.lastCheckpoint) {
-        const minutesSinceCheckpoint = (Date.now() - stats.lastCheckpoint.getTime()) / 60000;
-        if (minutesSinceCheckpoint > 60) {
-            warnings.push(`Last checkpoint was ${Math.round(minutesSinceCheckpoint)} minutes ago`);
-        }
-    }
-    return {
-        passed: errors.length === 0,
-        errors,
-        warnings,
-        stats: getSafetyStats(),
-    };
-}
-/**
- * Force immediate checkpoint.
- * Use before destructive operations.
- */
-export async function forceSafetyCheckpoint(context, cwd) {
-    log.info({ context }, 'Forcing checkpoint');
-    await gitCheckpoint('manual', context, cwd);
-    vacuumIntoBackup({ cwd, force: true }).catch(() => { }); // non-fatal SQLite snapshot
-}
-/**
- * Disable all safety for current process.
- * DANGEROUS - only use for recovery operations.
- */
-export function disableSafety() {
-    log.warn('All safety checks disabled - emergency recovery mode');
-    // Set all safety options to false
-    Object.assign(DEFAULT_SAFETY, {
-        verify: false,
-        checkpoint: false,
-        validateSequence: false,
-        strict: false,
-    });
-}
-/**
- * Re-enable safety after being disabled.
- */
-export function enableSafety() {
-    log.info('Safety checks re-enabled');
-    Object.assign(DEFAULT_SAFETY, {
-        verify: true,
-        checkpoint: true,
-        validateSequence: true,
-        strict: true,
-    });
-}
-//# sourceMappingURL=data-safety-central.js.map

package/dist/store/data-safety-central.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-safety-central.js","sourceRoot":"","sources":["../../src/store/data-safety-central.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGrE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;AAErC,6BAA6B;AAC7B,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAG/B;IACA;IAHT,YACE,OAAe,EACR,IAA+E,EAC/E,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAA2E;QAC/E,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAcD,MAAM,cAAc,GAAkB;IACpC,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,IAAI;IAChB,gBAAgB,EAAE,IAAI;IACtB,MAAM,EAAE,IAAI;CACb,CAAC;AAWF,MAAM,KAAK,GAAgB;IACzB,MAAM,EAAE,CAAC;IACT,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF,oCAAoC;AACpC,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,gBAAgB;IAC9B,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACjB,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC;IACxB,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;IACtB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACjB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAY,EAAE,OAAuB;IACtE,IAAI,CAAC,OAAO,EAAE,gBAAgB;QAAE,OAAO;IAEvC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CAAC,2BAA2B,MAAM,CAAC,OAAO,EAAE,EAAE,kBAAkB,EAAE;gBACzF,KAAK;gBACL,MAAM;aACP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,GAAY,EAAE,OAAuB;IAC9E,IAAI,CAAC,OAAO,EAAE,UAAU;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1C,KAAK,CAAC,WAAW,EAAE,CAAC;QACpB,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+CAA+C;QAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B;AACzE,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAe,EACf,QAAsB,EACtB,OAAuB;IAEvB,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,KAAK,CAAC,aAAa,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACvB,0DAA0D,IAAI,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,EAAE,EAC/F,qBAAqB,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAAiB,EACjB,QAAsB,EACtB,OAAuB;IAEvB,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,KAAK,CAAC,aAAa,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,eAAe,CACvB,6DAA6D,EAC7D,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CACvB,6DAA6D,IAAI,CAAC,aAAa,CAAC,MAAM,SAAS,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,EAC9H,qBAAqB,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAsB,EACtB,IAAe,EACf,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,MAAM,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,CAAC,mBAAmB,IAAI,CAAC,MAAM,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAsB,EACtB,IAAiB,EACjB,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,UAAU,CAAC,kBAAkB,IAAI,CAAC,aAAa,CAAC,MAAM,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAuB,EACvB,MAAc,EACd,OAA4B,EAC5B,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/C,uBAAuB;IACvB,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAErC,4BAA4B;IAC5B,MAAM,OAAO,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,oDAAoD;IACpD,MAAM,UAAU,CAAC,eAAe,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAsB,EACtB,KAA8B,EAC9B,GAAY,EACZ,OAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,+BAA+B;IAE9F,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,CAAC,MAAM,EAAE,CAAC;IAEf,MAAM,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAsB,EACtB,GAAY;IAOZ,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,6BAA6B,QAAQ,CAAC,OAAO,YAAY,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAE7F,gBAAgB;YAChB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,kCAAkC;IAClC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,sBAAsB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC;QACrF,IAAI,sBAAsB,GAAG,EAAE,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,MAAM;QACN,QAAQ;QACR,KAAK,EAAE,cAAc,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe,EAAE,GAAY;IACvE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC5C,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,GAAG,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAEjE,kCAAkC;IAClC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;QAC5B,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,KAAK;QACjB,gBAAgB,EAAE,KAAK;QACvB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAErC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;QAC5B,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/store/data-safety.d.ts

@@ -1,93 +0,0 @@
-/**
- * Data Safety Module - Critical protection layer for CLEO data operations.
- *
- * Implements:
- * - Write verification (verify data was actually persisted)
- * - Collision detection (prevent duplicate task IDs)
- * - Sequence validation (ensure sequence counter matches database)
- * - Auto-checkpoint integration (git commit after writes)
- *
- * @task T4739
- * @epic T4732
- */
-import type { Session } from '@cleocode/contracts';
-import type { Task } from '@cleocode/contracts';
-/** Safety configuration options. */
-export interface SafetyConfig {
-    /** Enable write verification (default: true) */
-    verifyWrites: boolean;
-    /** Enable collision detection (default: true) */
-    detectCollisions: boolean;
-    /** Enable sequence validation (default: true) */
-    validateSequence: boolean;
-    /** Enable auto-checkpoint (default: true) */
-    autoCheckpoint: boolean;
-    /** Throw on safety violations (default: true) */
-    strictMode: boolean;
-}
-/** Safety violation error. */
-export declare class SafetyError extends Error {
-    code: string;
-    details?: Record<string, unknown> | undefined;
-    constructor(message: string, code: string, details?: Record<string, unknown> | undefined);
-}
-/**
- * Check if a task ID already exists (collision detection).
- * @throws SafetyError if task exists and strict mode is enabled
- */
-export declare function checkTaskExists(taskId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
-/**
- * Verify a task was actually written to the database.
- * @throws SafetyError if verification fails
- */
-export declare function verifyTaskWrite(taskId: string, expectedData?: Partial<Task>, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
-/**
- * Validate and repair sequence if necessary.
- * @returns true if sequence was valid or successfully repaired
- */
-export declare function validateAndRepairSequence(cwd?: string, config?: Partial<SafetyConfig>): Promise<{
-    valid: boolean;
-    repaired: boolean;
-    oldCounter?: number;
-    newCounter?: number;
-}>;
-/**
- * Trigger auto-checkpoint after successful write.
- */
-export declare function triggerCheckpoint(context: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<void>;
-/**
- * Safely create a task with all safety mechanisms.
- * Wraps the actual createTask operation.
- */
-export declare function safeCreateTask(createFn: () => Promise<Task>, task: Task, cwd?: string, config?: Partial<SafetyConfig>): Promise<Task>;
-/**
- * Safely update a task with all safety mechanisms.
- */
-export declare function safeUpdateTask(updateFn: () => Promise<Task | null>, taskId: string, _updates: Partial<Task>, cwd?: string, config?: Partial<SafetyConfig>): Promise<Task | null>;
-/**
- * Safely delete a task with all safety mechanisms.
- */
-export declare function safeDeleteTask(deleteFn: () => Promise<boolean>, taskId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
-/**
- * Verify session write.
- */
-export declare function verifySessionWrite(sessionId: string, cwd?: string, config?: Partial<SafetyConfig>): Promise<boolean>;
-/**
- * Safely create a session with all safety mechanisms.
- */
-export declare function safeCreateSession(createFn: () => Promise<Session>, session: Session, cwd?: string, config?: Partial<SafetyConfig>): Promise<Session>;
-/**
- * Force a checkpoint before destructive operations.
- * Use this before migrations, bulk updates, etc.
- */
-export declare function forceCheckpointBeforeOperation(operation: string, cwd?: string): Promise<void>;
-/**
- * Run comprehensive data integrity check.
- * Reports all issues found.
- */
-export declare function runDataIntegrityCheck(cwd?: string): Promise<{
-    passed: boolean;
-    issues: string[];
-    repairs: string[];
-}>;
-//# sourceMappingURL=data-safety.d.ts.map