@cleocode/core 2026.3.42 → 2026.3.44

package/dist/validation/validate-ops.d.ts

@@ -0,0 +1,247 @@
+/**
+ * Core validation operations - business logic extracted from validate-engine.ts.
+ *
+ * These are pure business logic functions that throw on failure and return
+ * data directly (no EngineResult wrapper). The engine layer wraps these
+ * in try/catch to produce EngineResult.
+ *
+ * @task T4786
+ * @epic T4654
+ */
+import { type RuleViolation } from './validation-rules.js';
+/** Compliance entry stored in COMPLIANCE.jsonl */
+export interface ComplianceEntry {
+    timestamp: string;
+    taskId: string;
+    protocol: string;
+    result: 'pass' | 'fail' | 'partial';
+    violations?: Array<{
+        code: string;
+        message: string;
+        severity: 'error' | 'warning';
+    }>;
+    linkedTask?: string;
+    agent?: string;
+}
+/** Coherence issue found during graph validation. */
+export interface CoherenceIssue {
+    type: string;
+    taskId: string;
+    message: string;
+    severity: 'error' | 'warning' | 'info';
+}
+export interface ValidateCheckDetail {
+    check: string;
+    status: 'ok' | 'error' | 'warning';
+    message: string;
+}
+export interface ValidateReportResult {
+    valid: boolean;
+    schemaVersion: string;
+    errors: number;
+    warnings: number;
+    details: ValidateCheckDetail[];
+}
+/**
+ * Run comprehensive validation report on tasks database — checks business rules,
+ * dependencies, checksums, data integrity, and schema compliance.
+ * @task T4795
+ */
+export declare function coreValidateReport(projectRoot: string): Promise<ValidateReportResult>;
+import { type RepairAction } from '../repair.js';
+/** Result from validate + fix operation. */
+export interface ValidateAndFixResult extends ValidateReportResult {
+    repairsApplied: number;
+    repairs: RepairAction[];
+}
+/**
+ * Run validation report, then apply data repairs for fixable issues.
+ * Calls runAllRepairs() from src/core/repair.ts (same repairs used by `upgrade`).
+ * @task T4795
+ */
+export declare function coreValidateAndFix(projectRoot: string, dryRun?: boolean): Promise<ValidateAndFixResult>;
+/**
+ * Validate data against a schema type.
+ *
+ * For SQLite-backed types (todo, archive, sessions, log), queries rows
+ * directly from SQLite and validates with drizzle-zod schemas.
+ * For config type, uses AJV against the JSON schema file.
+ * If raw `data` is provided, validates directly with AJV (backward compat).
+ *
+ * @task T4786
+ */
+export declare function coreValidateSchema(type: string, data: unknown | undefined, projectRoot: string): Promise<{
+    type: string;
+    valid: boolean;
+    errors: unknown[];
+    errorCount: number;
+}>;
+/**
+ * Validate a single task against anti-hallucination rules.
+ * @task T4786
+ */
+export declare function coreValidateTask(taskId: string, projectRoot: string): Promise<{
+    taskId: string;
+    valid: boolean;
+    violations: RuleViolation[];
+    errorCount: number;
+    warningCount: number;
+}>;
+/**
+ * Check basic protocol compliance for a task.
+ * @task T4786
+ */
+export declare function coreValidateProtocol(taskId: string, protocolType: string | undefined, projectRoot: string): Promise<{
+    taskId: string;
+    protocolType: string;
+    compliant: boolean;
+    violations: Array<{
+        code: string;
+        message: string;
+        severity: string;
+    }>;
+}>;
+/**
+ * Validate manifest JSONL entries for required fields.
+ * @task T4786
+ */
+export declare function coreValidateManifest(projectRoot: string): {
+    valid: boolean;
+    totalEntries: number;
+    validEntries: number;
+    invalidEntries: number;
+    errors: Array<{
+        line: number;
+        entryId: string;
+        errors: string[];
+    }>;
+    message?: string;
+};
+/**
+ * Validate an output file for required sections.
+ * @task T4786
+ */
+export declare function coreValidateOutput(filePath: string, taskId: string | undefined, projectRoot: string): {
+    filePath: string;
+    valid: boolean;
+    issues: Array<{
+        code: string;
+        message: string;
+        severity: string;
+    }>;
+    fileSize: number;
+    lineCount: number;
+};
+/**
+ * Get aggregated compliance metrics.
+ * @task T4786
+ */
+export declare function coreComplianceSummary(projectRoot: string): {
+    total: number;
+    pass: number;
+    fail: number;
+    partial: number;
+    passRate: number;
+    byProtocol: Record<string, {
+        pass: number;
+        fail: number;
+        partial: number;
+    }>;
+};
+/**
+ * List compliance violations.
+ * @task T4786
+ */
+export declare function coreComplianceViolations(limit: number | undefined, projectRoot: string): {
+    violations: Array<{
+        timestamp: string;
+        taskId: string;
+        protocol: string;
+        result: string;
+        violations?: ComplianceEntry['violations'];
+    }>;
+    total: number;
+};
+/**
+ * Record a compliance check result to COMPLIANCE.jsonl.
+ * @task T4786
+ */
+export declare function coreComplianceRecord(taskId: string, result: string, protocol: string | undefined, violations: Array<{
+    code: string;
+    message: string;
+    severity: 'error' | 'warning';
+}> | undefined, projectRoot: string): {
+    recorded: boolean;
+    taskId: string;
+    result: string;
+    protocol: string;
+};
+/**
+ * Check test suite availability.
+ * @task T4786
+ */
+export declare function coreTestStatus(projectRoot: string): {
+    batsTests: {
+        available: boolean;
+        directory: string | null;
+    };
+    mcpTests: {
+        available: boolean;
+        directory: string | null;
+    };
+    message: string;
+};
+/**
+ * Cross-validate task graph for consistency.
+ * @task T4786
+ */
+export declare function coreCoherenceCheck(projectRoot: string): Promise<{
+    coherent: boolean;
+    issues: CoherenceIssue[];
+}>;
+/**
+ * Execute test suite via subprocess.
+ * @task T4786
+ */
+export declare function coreTestRun(params: {
+    scope?: string;
+    pattern?: string;
+    parallel?: boolean;
+} | undefined, projectRoot: string): {
+    ran: boolean;
+    runner?: string;
+    output?: unknown;
+    exitCode?: number;
+    stdout?: string;
+    stderr?: string;
+    passed?: boolean;
+    message?: string;
+};
+/**
+ * Batch validate all tasks against schema and rules.
+ * @task T4786
+ */
+export declare function coreBatchValidate(projectRoot: string): Promise<{
+    totalTasks: number;
+    validTasks: number;
+    invalidTasks: number;
+    totalErrors: number;
+    totalWarnings: number;
+    results: Array<{
+        taskId: string;
+        valid: boolean;
+        errorCount: number;
+        warningCount: number;
+        violations: RuleViolation[];
+    }>;
+}>;
+/**
+ * Get test coverage metrics.
+ * @task T4786
+ */
+export declare function coreTestCoverage(projectRoot: string): {
+    available: boolean;
+    message?: string;
+    [key: string]: unknown;
+};
+//# sourceMappingURL=validate-ops.d.ts.map

package/dist/validation/validate-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-ops.d.ts","sourceRoot":"","sources":["../../src/validation/validate-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,OAAO,EAEL,KAAK,aAAa,EAMnB,MAAM,uBAAuB,CAAC;AAM/B,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACpC,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;KAC/B,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;CACxC;AAMD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAgM3F;AAMD,OAAO,EAAE,KAAK,YAAY,EAAiB,MAAM,cAAc,CAAC;AAEhE,4CAA4C;AAC5C,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,OAAe,GACtB,OAAO,CAAC,oBAAoB,CAAC,CAa/B;AAgBD;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,GAAG,SAAS,EACzB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBlF;AAgFD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CA2CD;AAMD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxE,CAAC,CAkDD;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG;IACzD,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAsDA;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,WAAW,EAAE,MAAM,GAClB;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CA6CA;AA4BD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E,CAwBA;AAMD;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,WAAW,EAAE,MAAM,GAClB;IACD,UAAU,EAAE,KAAK,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC;KAC5C,CAAC,CAAC;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAkBA;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE,CAAC,GAAG,SAAS,EAC/F,WAAW,EAAE,MAAM,GAClB;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAkCzE;AAMD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG;IACnD,SAAS,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5D,QAAQ,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC3D,OAAO,EAAE,MAAM,CAAC;CACjB,CAkBA;AAMD;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,cAAc,EAAE,CAAA;CAAE,CAAC,CA8I1D;AAMD;;;GAGG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,EAC5E,WAAW,EAAE,MAAM,GAClB;IACD,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAqDA;AAMD;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,aAAa,EAAE,CAAC;KAC7B,CAAC,CAAC;CACJ,CAAC,CA0DD;AAMD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG;IACrD,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAmBA"}

package/dist/validation/validation-rules.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Anti-Hallucination Validation Rules
+ *
+ * Implements CLEO's anti-hallucination requirements:
+ * - Title and description both required and different
+ * - No future timestamps
+ * - No duplicate task descriptions
+ * - Unique IDs across active and archived task data
+ * - Valid status transitions
+ * - Hierarchy constraints (configurable max depth, configurable max siblings; 0 = unlimited)
+ */
+/**
+ * Validation error from anti-hallucination checks
+ */
+export interface RuleViolation {
+    rule: string;
+    field: string;
+    message: string;
+    severity: 'error' | 'warning';
+}
+/**
+ * Task-like object for validation (doesn't need full Task type)
+ */
+interface TaskLike {
+    id?: string;
+    title?: string;
+    description?: string;
+    status?: string;
+    createdAt?: string;
+    updatedAt?: string | null;
+    completedAt?: string | null;
+    cancelledAt?: string | null;
+    parentId?: string | null;
+    type?: string;
+}
+/**
+ * Validate that title and description are both present and different.
+ * This is a critical anti-hallucination check.
+ */
+export declare function validateTitleDescription(title?: string, description?: string): RuleViolation[];
+/**
+ * Validate that timestamps are not in the future
+ */
+export declare function validateTimestamps(task: TaskLike): RuleViolation[];
+/**
+ * Validate ID uniqueness across all tasks (todo + archive)
+ */
+export declare function validateIdUniqueness(taskId: string, existingIds: Set<string>): RuleViolation[];
+/**
+ * Validate no duplicate task descriptions
+ */
+export declare function validateNoDuplicateDescription(description: string, existingDescriptions: string[], _excludeTaskId?: string): RuleViolation[];
+/**
+ * Validate hierarchy constraints.
+ * Accepts optional limits to override defaults (from config).
+ */
+export declare function validateHierarchy(parentId: string | null | undefined, tasks: Array<{
+    id: string;
+    parentId?: string | null;
+    type?: string;
+}>, _taskType?: string, limits?: {
+    maxDepth?: number;
+    maxSiblings?: number;
+}): RuleViolation[];
+/**
+ * Validate status transition
+ */
+export declare function validateStatusTransition(currentStatus: string, newStatus: string): RuleViolation[];
+/**
+ * Run all validation rules on a task being created
+ */
+export declare function validateNewTask(task: TaskLike, existingIds: Set<string>, existingDescriptions: string[], existingTasks: Array<{
+    id: string;
+    parentId?: string | null;
+    type?: string;
+}>, limits?: {
+    maxDepth?: number;
+    maxSiblings?: number;
+}): RuleViolation[];
+/**
+ * Check if violations contain any errors (not just warnings)
+ */
+export declare function hasErrors(violations: RuleViolation[]): boolean;
+export {};
+//# sourceMappingURL=validation-rules.d.ts.map

package/dist/validation/validation-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-rules.d.ts","sourceRoot":"","sources":["../../src/validation/validation-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B;AAED;;GAEG;AACH,UAAU,QAAQ;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,aAAa,EAAE,CA+B9F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,QAAQ,GAAG,aAAa,EAAE,CAmClE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,aAAa,EAAE,CAY9F;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,MAAM,EACnB,oBAAoB,EAAE,MAAM,EAAE,EAC9B,cAAc,CAAC,EAAE,MAAM,GACtB,aAAa,EAAE,CAiBjB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,KAAK,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EACrE,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,aAAa,EAAE,CAqDjB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,aAAa,EAAE,CAiCjB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EACxB,oBAAoB,EAAE,MAAM,EAAE,EAC9B,aAAa,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAC7E,MAAM,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,aAAa,EAAE,CAmBjB;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAE9D"}

package/dist/validation/verification.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Verification gates management - ported from lib/validation/verification.sh
+ *
+ * Implements gate dependency chains, round management, failure logging,
+ * epic lifecycle transitions, and circular validation prevention.
+ *
+ * Gate Dependency Chain:
+ *   implemented -> testsPassed -> qaPassed -> cleanupDone -> securityPassed -> documented
+ *
+ * @task T4526
+ * @epic T4454
+ */
+export declare const VERIFICATION_GATE_ORDER: readonly ["implemented", "testsPassed", "qaPassed", "cleanupDone", "securityPassed", "documented"];
+export type GateName = (typeof VERIFICATION_GATE_ORDER)[number];
+export declare const VERIFICATION_VALID_AGENTS: readonly ["planner", "coder", "testing", "qa", "cleanup", "security", "docs"];
+export type AgentName = (typeof VERIFICATION_VALID_AGENTS)[number];
+export interface FailureLogEntry {
+    gate: GateName;
+    agent: string;
+    reason: string;
+    timestamp: string;
+    round: number;
+}
+export interface VerificationGates {
+    implemented: boolean | null;
+    testsPassed: boolean | null;
+    qaPassed: boolean | null;
+    cleanupDone: boolean | null;
+    securityPassed: boolean | null;
+    documented: boolean | null;
+}
+export interface Verification {
+    passed: boolean;
+    round: number;
+    gates: VerificationGates;
+    lastAgent: string | null;
+    lastUpdated: string;
+    failureLog: FailureLogEntry[];
+}
+export type VerificationStatus = 'pending' | 'in-progress' | 'passed' | 'failed';
+/** @task T4526 */
+export declare function isValidGateName(name: string): name is GateName;
+/** @task T4526 */
+export declare function isValidAgentName(name: string): name is AgentName;
+/** @task T4526 */
+export declare function getGateOrder(): GateName[];
+/** @task T4526 */
+export declare function getGateIndex(gateName: GateName): number;
+/** @task T4526 */
+export declare function getDownstreamGates(fromGate: GateName): GateName[];
+/**
+ * Initialize a new verification object with default values.
+ * @task T4526
+ */
+export declare function initVerification(): Verification;
+/**
+ * Compute whether verification has passed based on required gates.
+ * @task T4526
+ */
+export declare function computePassed(verification: Verification, requiredGates?: GateName[]): boolean;
+/**
+ * Update the passed field on a verification object.
+ * @task T4526
+ */
+export declare function setVerificationPassed(verification: Verification, passed: boolean): Verification;
+/**
+ * Update a single gate value.
+ * @task T4526
+ */
+export declare function updateGate(verification: Verification, gateName: GateName, value: boolean | null, agent?: string): Verification;
+/**
+ * Reset all downstream gates to null after a gate failure.
+ * @task T4526
+ */
+export declare function resetDownstreamGates(verification: Verification, fromGate: GateName): Verification;
+/**
+ * Increment the round counter.
+ * Returns null if max rounds exceeded.
+ * @task T4526
+ */
+export declare function incrementRound(verification: Verification, maxRounds?: number): Verification | null;
+/**
+ * Log a failure to the failureLog array.
+ * @task T4526
+ */
+export declare function logFailure(verification: Verification, gateName: GateName, agent: string, reason: string): Verification;
+/**
+ * Check if all required gates have passed.
+ * @task T4526
+ */
+export declare function checkAllGatesPassed(verification: Verification, requiredGates?: GateName[]): boolean;
+/**
+ * Check if verification is complete (passed = true).
+ * @task T4526
+ */
+export declare function isVerificationComplete(verification: Verification | null): boolean;
+/**
+ * Get verification status for display.
+ * @task T4526
+ */
+export declare function getVerificationStatus(verification: Verification | null): VerificationStatus;
+/**
+ * Check if a task type should require verification.
+ * @task T4526
+ */
+export declare function shouldRequireVerification(taskType?: string, verificationEnabled?: boolean): boolean;
+/**
+ * Get gate names that are not yet true.
+ * @task T4526
+ */
+export declare function getMissingGates(verification: Verification, requiredGates?: GateName[]): GateName[];
+/**
+ * Get gate summary for display.
+ * @task T4526
+ */
+export declare function getGateSummary(verification: Verification): {
+    passed: boolean;
+    round: number;
+    gates: VerificationGates;
+    lastAgent: string | null;
+    lastUpdated: string;
+    failureCount: number;
+};
+export interface CircularValidationResult {
+    valid: boolean;
+    error?: string;
+    code?: number;
+}
+/**
+ * Check for circular validation (self-approval prevention).
+ * Prevents: creator validating own work, validator re-testing, tester self-creating.
+ * @task T4526
+ */
+export declare function checkCircularValidation(currentAgent: string, createdBy?: string | null, validatedBy?: string | null, testedBy?: string | null): CircularValidationResult;
+export interface TaskForVerification {
+    id: string;
+    status: string;
+    parentId?: string | null;
+    type?: string;
+    verification?: Verification | null;
+    epicLifecycle?: string;
+}
+/**
+ * Check if all children of an epic have verification.passed = true.
+ * @task T4526
+ */
+export declare function allEpicChildrenVerified(epicId: string, tasks: TaskForVerification[]): boolean;
+/**
+ * Check if all siblings of a task are verified.
+ * @task T4526
+ */
+export declare function allSiblingsVerified(parentId: string, tasks: TaskForVerification[]): boolean;
+//# sourceMappingURL=verification.d.ts.map

package/dist/validation/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../src/validation/verification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,eAAO,MAAM,uBAAuB,oGAO1B,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,eAAO,MAAM,yBAAyB,+EAQ5B,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAcnE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAMjF,kBAAkB;AAClB,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,QAAQ,CAE9D;AAED,kBAAkB;AAClB,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,SAAS,CAGhE;AAMD,kBAAkB;AAClB,wBAAgB,YAAY,IAAI,QAAQ,EAAE,CAEzC;AAED,kBAAkB;AAClB,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAIvD;AAED,kBAAkB;AAClB,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAIjE;AAMD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAgB/C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,YAAY,EAAE,YAAY,EAC1B,aAAa,GAAE,QAAQ,EAA2B,GACjD,OAAO,CAET;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAG,YAAY,CAM/F;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,YAAY,EAAE,YAAY,EAC1B,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,OAAO,GAAG,IAAI,EACrB,KAAK,CAAC,EAAE,MAAM,GACb,YAAY,CAkBd;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,GAAG,YAAY,CAiBjG;AAMD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,YAAY,EAC1B,SAAS,GAAE,MAAU,GACpB,YAAY,GAAG,IAAI,CASrB;AAMD;;;GAGG;AACH,wBAAgB,UAAU,CACxB,YAAY,EAAE,YAAY,EAC1B,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,YAAY,CAcd;AAMD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,YAAY,EAC1B,aAAa,GAAE,QAAQ,EAA2B,GACjD,OAAO,CAET;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI,GAAG,OAAO,CAGjF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI,GAAG,kBAAkB,CAW3F;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,GAAE,MAAe,EACzB,mBAAmB,GAAE,OAAc,GAClC,OAAO,CAGT;AAMD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,YAAY,EAC1B,aAAa,GAAE,QAAQ,EAA2B,GACjD,QAAQ,EAAE,CAEZ;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,YAAY,GAAG;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB,CASA;AAMD,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,EAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,wBAAwB,CA+B1B;AAMD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAW7F;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAY3F"}

package/migrations/drizzle-tasks/20260320013731_wave0-schema-hardening/migration.sql

@@ -0,0 +1,84 @@
+CREATE TABLE `external_task_links` (
+	`id` text PRIMARY KEY,
+	`task_id` text NOT NULL,
+	`provider_id` text NOT NULL,
+	`external_id` text NOT NULL,
+	`external_url` text,
+	`external_title` text,
+	`link_type` text NOT NULL,
+	`sync_direction` text DEFAULT 'inbound' NOT NULL,
+	`metadata_json` text DEFAULT '{}',
+	`linked_at` text DEFAULT (datetime('now')) NOT NULL,
+	`last_sync_at` text,
+	CONSTRAINT `fk_external_task_links_task_id_tasks_id_fk` FOREIGN KEY (`task_id`) REFERENCES `tasks`(`id`) ON DELETE CASCADE,
+	CONSTRAINT `uq_ext_links_task_provider_external` UNIQUE(`task_id`,`provider_id`,`external_id`)
+);
+--> statement-breakpoint
+PRAGMA foreign_keys=OFF;--> statement-breakpoint
+CREATE TABLE `__new_sessions` (
+	`id` text PRIMARY KEY,
+	`name` text NOT NULL,
+	`status` text DEFAULT 'active' NOT NULL,
+	`scope_json` text DEFAULT '{}' NOT NULL,
+	`current_task` text,
+	`task_started_at` text,
+	`agent` text,
+	`notes_json` text DEFAULT '[]',
+	`tasks_completed_json` text DEFAULT '[]',
+	`tasks_created_json` text DEFAULT '[]',
+	`handoff_json` text,
+	`started_at` text DEFAULT (datetime('now')) NOT NULL,
+	`ended_at` text,
+	`previous_session_id` text,
+	`next_session_id` text,
+	`agent_identifier` text,
+	`handoff_consumed_at` text,
+	`handoff_consumed_by` text,
+	`debrief_json` text,
+	`provider_id` text,
+	`stats_json` text,
+	`resume_count` integer,
+	`grade_mode` integer,
+	CONSTRAINT `fk_sessions_previous_session_id_sessions_id_fk` FOREIGN KEY (`previous_session_id`) REFERENCES `sessions`(`id`) ON DELETE SET NULL,
+	CONSTRAINT `fk_sessions_next_session_id_sessions_id_fk` FOREIGN KEY (`next_session_id`) REFERENCES `sessions`(`id`) ON DELETE SET NULL
+);
+--> statement-breakpoint
+INSERT INTO `__new_sessions`(`id`, `name`, `status`, `scope_json`, `current_task`, `task_started_at`, `agent`, `notes_json`, `tasks_completed_json`, `tasks_created_json`, `handoff_json`, `started_at`, `ended_at`, `previous_session_id`, `next_session_id`, `agent_identifier`, `handoff_consumed_at`, `handoff_consumed_by`, `debrief_json`, `provider_id`, `stats_json`, `resume_count`, `grade_mode`) SELECT `id`, `name`, `status`, `scope_json`, `current_task`, `task_started_at`, `agent`, `notes_json`, `tasks_completed_json`, `tasks_created_json`, `handoff_json`, `started_at`, `ended_at`, `previous_session_id`, `next_session_id`, `agent_identifier`, `handoff_consumed_at`, `handoff_consumed_by`, `debrief_json`, `provider_id`, `stats_json`, `resume_count`, `grade_mode` FROM `sessions`;--> statement-breakpoint
+DROP TABLE `sessions`;--> statement-breakpoint
+ALTER TABLE `__new_sessions` RENAME TO `sessions`;--> statement-breakpoint
+PRAGMA foreign_keys=ON;--> statement-breakpoint
+PRAGMA foreign_keys=OFF;--> statement-breakpoint
+CREATE TABLE `__new_warp_chain_instances` (
+	`id` text PRIMARY KEY,
+	`chain_id` text NOT NULL,
+	`epic_id` text NOT NULL,
+	`variables` text,
+	`stage_to_task` text,
+	`status` text DEFAULT 'pending' NOT NULL,
+	`current_stage` text,
+	`gate_results` text,
+	`created_at` text DEFAULT (datetime('now')),
+	`updated_at` text DEFAULT (datetime('now')),
+	CONSTRAINT `fk_warp_chain_instances_chain_id_warp_chains_id_fk` FOREIGN KEY (`chain_id`) REFERENCES `warp_chains`(`id`) ON DELETE CASCADE
+);
+--> statement-breakpoint
+INSERT INTO `__new_warp_chain_instances`(`id`, `chain_id`, `epic_id`, `variables`, `stage_to_task`, `status`, `current_stage`, `gate_results`, `created_at`, `updated_at`) SELECT `id`, `chain_id`, `epic_id`, `variables`, `stage_to_task`, `status`, `current_stage`, `gate_results`, `created_at`, `updated_at` FROM `warp_chain_instances`;--> statement-breakpoint
+DROP TABLE `warp_chain_instances`;--> statement-breakpoint
+ALTER TABLE `__new_warp_chain_instances` RENAME TO `warp_chain_instances`;--> statement-breakpoint
+PRAGMA foreign_keys=ON;--> statement-breakpoint
+CREATE INDEX `idx_sessions_status` ON `sessions` (`status`);--> statement-breakpoint
+CREATE INDEX `idx_sessions_previous` ON `sessions` (`previous_session_id`);--> statement-breakpoint
+CREATE INDEX `idx_sessions_agent_identifier` ON `sessions` (`agent_identifier`);--> statement-breakpoint
+CREATE INDEX `idx_sessions_started_at` ON `sessions` (`started_at`);--> statement-breakpoint
+CREATE INDEX `idx_warp_instances_chain` ON `warp_chain_instances` (`chain_id`);--> statement-breakpoint
+CREATE INDEX `idx_warp_instances_epic` ON `warp_chain_instances` (`epic_id`);--> statement-breakpoint
+CREATE INDEX `idx_warp_instances_status` ON `warp_chain_instances` (`status`);--> statement-breakpoint
+CREATE INDEX `idx_arch_decisions_amends_id` ON `architecture_decisions` (`amends_id`);--> statement-breakpoint
+CREATE INDEX `idx_audit_log_actor` ON `audit_log` (`actor`);--> statement-breakpoint
+CREATE INDEX `idx_ext_links_task_id` ON `external_task_links` (`task_id`);--> statement-breakpoint
+CREATE INDEX `idx_ext_links_provider_external` ON `external_task_links` (`provider_id`,`external_id`);--> statement-breakpoint
+CREATE INDEX `idx_ext_links_provider_id` ON `external_task_links` (`provider_id`);--> statement-breakpoint
+CREATE INDEX `idx_lifecycle_stages_validated_by` ON `lifecycle_stages` (`validated_by`);--> statement-breakpoint
+CREATE INDEX `idx_task_relations_related_to` ON `task_relations` (`related_to`);--> statement-breakpoint
+CREATE INDEX `idx_tasks_session_id` ON `tasks` (`session_id`);--> statement-breakpoint
+CREATE INDEX `idx_token_usage_gateway` ON `token_usage` (`gateway`);