@cleocode/core 2026.4.0 → 2026.4.3

package/dist/store/agent-registry-accessor.js

@@ -1,169 +0,0 @@
-/**
- * Agent Registry Accessor — CRUD operations for agent credentials in SQLite.
- *
- * Implements the `AgentRegistryAPI` contract from `@cleocode/contracts`.
- * API keys are encrypted at rest using the crypto/credentials module.
- *
- * @see docs/specs/SIGNALDOCK-UNIFIED-AGENT-REGISTRY.md Section 3
- * @task T175
- */
-import { desc, eq } from 'drizzle-orm';
-import { createInsertSchema, createSelectSchema } from 'drizzle-orm/zod';
-import { decrypt, encrypt } from '../crypto/credentials.js';
-import * as schema from './tasks-schema.js';
-const { agentCredentials } = schema;
-/** Zod validation schemas for agent credentials (drizzle-orm/zod). */
-export const agentCredentialInsertSchema = createInsertSchema(agentCredentials);
-export const agentCredentialSelectSchema = createSelectSchema(agentCredentials);
-/** Convert a database row to an AgentCredential, decrypting the API key. */
-async function rowToCredential(row, projectPath) {
-    const apiKey = await decrypt(row.apiKeyEncrypted, projectPath);
-    return {
-        agentId: row.agentId,
-        displayName: row.displayName,
-        apiKey,
-        apiBaseUrl: row.apiBaseUrl,
-        classification: row.classification ?? undefined,
-        privacyTier: row.privacyTier,
-        capabilities: JSON.parse(row.capabilities),
-        skills: JSON.parse(row.skills),
-        transportConfig: JSON.parse(row.transportConfig),
-        isActive: row.isActive,
-        lastUsedAt: row.lastUsedAt ? new Date(row.lastUsedAt).toISOString() : undefined,
-        createdAt: new Date(row.createdAt).toISOString(),
-        updatedAt: new Date(row.updatedAt).toISOString(),
-    };
-}
-/** SQLite implementation of the AgentRegistryAPI. */
-export class AgentRegistryAccessor {
-    db;
-    projectPath;
-    constructor(db, projectPath) {
-        this.db = db;
-        this.projectPath = projectPath;
-    }
-    async register(credential) {
-        const now = Date.now();
-        const apiKeyEncrypted = await encrypt(credential.apiKey, this.projectPath);
-        await this.db.insert(agentCredentials).values({
-            agentId: credential.agentId,
-            displayName: credential.displayName,
-            apiKeyEncrypted,
-            apiBaseUrl: credential.apiBaseUrl,
-            classification: credential.classification ?? null,
-            privacyTier: credential.privacyTier,
-            capabilities: JSON.stringify(credential.capabilities),
-            skills: JSON.stringify(credential.skills),
-            transportConfig: JSON.stringify(credential.transportConfig),
-            isActive: credential.isActive,
-            lastUsedAt: credential.lastUsedAt ? new Date(credential.lastUsedAt).getTime() : null,
-            createdAt: now,
-            updatedAt: now,
-        });
-        const result = await this.get(credential.agentId);
-        if (!result)
-            throw new Error(`Failed to register agent: ${credential.agentId}`);
-        return result;
-    }
-    async get(agentId) {
-        const rows = await this.db
-            .select()
-            .from(agentCredentials)
-            .where(eq(agentCredentials.agentId, agentId));
-        if (rows.length === 0)
-            return null;
-        return rowToCredential(rows[0], this.projectPath);
-    }
-    async list(filter) {
-        const query = filter?.active !== undefined
-            ? this.db
-                .select()
-                .from(agentCredentials)
-                .where(eq(agentCredentials.isActive, filter.active))
-            : this.db.select().from(agentCredentials);
-        const rows = await query;
-        return Promise.all(rows.map((row) => rowToCredential(row, this.projectPath)));
-    }
-    async update(agentId, updates) {
-        // C2 fix: pre-flight check — fail fast if agent doesn't exist
-        const existing = await this.get(agentId);
-        if (!existing)
-            throw new Error(`Agent not found: ${agentId}`);
-        const now = Date.now();
-        const values = { updatedAt: now };
-        if (updates.displayName !== undefined)
-            values['displayName'] = updates.displayName;
-        if (updates.apiBaseUrl !== undefined)
-            values['apiBaseUrl'] = updates.apiBaseUrl;
-        if (updates.classification !== undefined)
-            values['classification'] = updates.classification;
-        if (updates.privacyTier !== undefined)
-            values['privacyTier'] = updates.privacyTier;
-        if (updates.capabilities !== undefined)
-            values['capabilities'] = JSON.stringify(updates.capabilities);
-        if (updates.skills !== undefined)
-            values['skills'] = JSON.stringify(updates.skills);
-        if (updates.transportConfig !== undefined)
-            values['transportConfig'] = JSON.stringify(updates.transportConfig);
-        if (updates.isActive !== undefined)
-            values['isActive'] = updates.isActive;
-        if (updates.apiKey !== undefined) {
-            values['apiKeyEncrypted'] = await encrypt(updates.apiKey, this.projectPath);
-        }
-        await this.db.update(agentCredentials).set(values).where(eq(agentCredentials.agentId, agentId));
-        const result = await this.get(agentId);
-        if (!result)
-            throw new Error(`Agent not found after update: ${agentId}`);
-        return result;
-    }
-    async remove(agentId) {
-        // H2 fix: pre-flight check — throw if agent doesn't exist
-        const existing = await this.get(agentId);
-        if (!existing)
-            throw new Error(`Agent not found: ${agentId}`);
-        await this.db.delete(agentCredentials).where(eq(agentCredentials.agentId, agentId));
-    }
-    async rotateKey(agentId) {
-        const credential = await this.get(agentId);
-        if (!credential)
-            throw new Error(`Agent not found: ${agentId}`);
-        // Call cloud API to rotate key
-        const response = await fetch(`${credential.apiBaseUrl}/agents/${agentId}/rotate-key`, {
-            method: 'POST',
-            headers: {
-                Authorization: `Bearer ${credential.apiKey}`,
-                'X-Agent-Id': agentId,
-            },
-        });
-        if (!response.ok) {
-            throw new Error(`Failed to rotate key on cloud: ${response.status} ${response.statusText}`);
-        }
-        const data = (await response.json());
-        const newApiKey = data.data?.apiKey;
-        if (!newApiKey)
-            throw new Error('Cloud API did not return a new API key');
-        // Re-encrypt and store locally
-        await this.update(agentId, { apiKey: newApiKey });
-        // C1 fix: return only agentId, not plaintext key — callers use get() to retrieve
-        return { agentId, newApiKey: `${newApiKey.substring(0, 8)}...rotated` };
-    }
-    async getActive() {
-        // H3 fix: secondary orderBy(createdAt desc) for deterministic tie-breaking
-        const rows = await this.db
-            .select()
-            .from(agentCredentials)
-            .where(eq(agentCredentials.isActive, true))
-            .orderBy(desc(agentCredentials.lastUsedAt), desc(agentCredentials.createdAt))
-            .limit(1);
-        if (rows.length === 0)
-            return null;
-        return rowToCredential(rows[0], this.projectPath);
-    }
-    async markUsed(agentId) {
-        await this.db
-            .update(agentCredentials)
-            .set({ lastUsedAt: Date.now(), updatedAt: Date.now() })
-            .where(eq(agentCredentials.agentId, agentId));
-    }
-}
-//# sourceMappingURL=agent-registry-accessor.js.map

package/dist/store/agent-registry-accessor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-registry-accessor.js","sourceRoot":"","sources":["../../src/store/agent-registry-accessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAE5C,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;AAKpC,sEAAsE;AACtE,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;AAEhF,4EAA4E;AAC5E,KAAK,UAAU,eAAe,CAC5B,GAAyC,EACzC,WAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC/D,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM;QACN,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;QAC/C,WAAW,EAAE,GAAG,CAAC,WAA6C;QAC9D,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAa;QACtD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAa;QAC1C,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAoB;QACnE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;QAC/E,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAChD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;KACjD,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,OAAO,qBAAqB;IAEtB;IACA;IAFV,YACU,EAAW,EACX,WAAmB;QADnB,OAAE,GAAF,EAAE,CAAS;QACX,gBAAW,GAAX,WAAW,CAAQ;IAC1B,CAAC;IAEJ,KAAK,CAAC,QAAQ,CACZ,UAA4D;QAE5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAE3E,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC;YAC5C,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,eAAe;YACf,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,IAAI;YACjD,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC;YACrD,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YACzC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC;YAC3D,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YACpF,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAEhD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAwB;QACjC,MAAM,KAAK,GACT,MAAM,EAAE,MAAM,KAAK,SAAS;YAC1B,CAAC,CAAC,IAAI,CAAC,EAAE;iBACJ,MAAM,EAAE;iBACR,IAAI,CAAC,gBAAgB,CAAC;iBACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACxD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAE9C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAe,EACf,OAAgE;QAEhE,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAE9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAA4B,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QAE3D,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QACnF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QAChF,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;QAC5F,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QACnF,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YACpC,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;YACvC,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAEhG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAE9D,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe;QAC7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAEhE,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,CAAC,UAAU,WAAW,OAAO,aAAa,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,CAAC,MAAM,EAAE;gBAC5C,YAAY,EAAE,OAAO;aACtB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmC,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACpC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAE1E,+BAA+B;QAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAElD,iFAAiF;QACjF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,SAAS;QACb,2EAA2E;QAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;aAC1C,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;aAC5E,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;aACtD,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/store/atomic.js

@@ -1,167 +0,0 @@
-/**
- * Atomic file write operations using write-file-atomic.
- * Ensures writes are crash-safe: temp file -> validate -> rename.
- * @epic T4454
- * @task T4457
- * @task T4721 - Added atomic database operations
- */
-import { existsSync } from 'node:fs';
-import { mkdir, readFile, rename, unlink } from 'node:fs/promises';
-import { dirname } from 'node:path';
-import { ExitCode } from '@cleocode/contracts';
-import writeFileAtomic from 'write-file-atomic';
-import { CleoError } from '../errors.js';
-/**
- * Write data to a file atomically.
- * Creates parent directories if they don't exist.
- * Uses write-file-atomic for crash-safe writes (temp file -> rename).
- */
-export async function atomicWrite(filePath, data, options) {
-    try {
-        await mkdir(dirname(filePath), { recursive: true });
-        await writeFileAtomic(filePath, data, {
-            encoding: options?.encoding ?? 'utf8',
-            mode: options?.mode,
-        });
-    }
-    catch (err) {
-        throw new CleoError(ExitCode.FILE_ERROR, `Atomic write failed: ${filePath}`, { cause: err });
-    }
-}
-/**
- * Read a file and return its contents.
- * Returns null if the file does not exist.
- */
-export async function safeReadFile(filePath) {
-    try {
-        return await readFile(filePath, 'utf8');
-    }
-    catch (err) {
-        if (err instanceof Error && 'code' in err && err.code === 'ENOENT') {
-            return null;
-        }
-        throw new CleoError(ExitCode.FILE_ERROR, `Failed to read: ${filePath}`, { cause: err });
-    }
-}
-/**
- * Write JSON data atomically with consistent formatting.
- */
-export async function atomicWriteJson(filePath, data, options) {
-    const json = JSON.stringify(data, null, options?.indent ?? 2) + '\n';
-    await atomicWrite(filePath, json);
-}
-/**
- * Perform atomic database migration using rename operations.
- *
- * Pattern:
- *   1. Write new database to temp file (tasks.db.new)
- *   2. Validate temp database integrity
- *   3. Rename existing tasks.db → tasks.db.backup
- *   4. Rename temp → tasks.db (atomic)
- *   5. Only delete backup on success
- *
- * @param dbPath - Path to the database file (e.g., tasks.db)
- * @param tempPath - Path to temporary database (e.g., tasks.db.new)
- * @param validateFn - Async function to validate the temp database
- * @returns Result with paths and success status
- */
-export async function atomicDatabaseMigration(dbPath, tempPath, validateFn) {
-    const backupPath = `${dbPath}.backup`;
-    try {
-        // Step 1: Validate temp database exists
-        if (!existsSync(tempPath)) {
-            throw new Error(`Temp database not found: ${tempPath}`);
-        }
-        // Step 2: Validate the temp database integrity
-        const isValid = await validateFn(tempPath);
-        if (!isValid) {
-            throw new Error(`Temp database validation failed: ${tempPath}`);
-        }
-        // Step 3: If existing database exists, rename to backup
-        if (existsSync(dbPath)) {
-            await rename(dbPath, backupPath);
-        }
-        // Step 4: Atomically rename temp to final (atomic on POSIX systems)
-        await rename(tempPath, dbPath);
-        return {
-            success: true,
-            tempPath,
-            backupPath: existsSync(backupPath) ? backupPath : undefined,
-        };
-    }
-    catch (err) {
-        return {
-            success: false,
-            tempPath,
-            backupPath: existsSync(backupPath) ? backupPath : undefined,
-            error: String(err),
-        };
-    }
-}
-/**
- * Restore database from backup after failed migration.
- *
- * @param dbPath - Path to the database file
- * @param backupPath - Path to the backup file
- * @returns true if restore succeeded
- */
-export async function restoreDatabaseFromBackup(dbPath, backupPath) {
-    try {
-        if (!existsSync(backupPath)) {
-            return false;
-        }
-        // If a partial database exists, remove it
-        if (existsSync(dbPath)) {
-            await unlink(dbPath);
-        }
-        // Restore from backup
-        await rename(backupPath, dbPath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Clean up migration artifacts after successful migration.
- *
- * @param backupPath - Path to backup file to delete
- * @returns true if cleanup succeeded
- */
-export async function cleanupMigrationArtifacts(backupPath) {
-    try {
-        if (existsSync(backupPath)) {
-            await unlink(backupPath);
-        }
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Validate SQLite database integrity by attempting to open it.
- *
- * @param dbPath - Path to database file
- * @returns true if database is valid
- */
-export async function validateSqliteDatabase(dbPath) {
-    try {
-        const { createRequire } = await import('node:module');
-        const _req = createRequire(import.meta.url);
-        const { DatabaseSync } = _req('node:sqlite');
-        const db = new DatabaseSync(dbPath, { readOnly: true });
-        const integrityRow = db.prepare('PRAGMA integrity_check').get();
-        const isOk = integrityRow?.integrity_check === 'ok';
-        const tableRow = db
-            .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='tasks'")
-            .get();
-        const hasTasksTable = !!tableRow;
-        db.close();
-        return isOk && hasTasksTable;
-    }
-    catch {
-        return false;
-    }
-}
-//# sourceMappingURL=atomic.js.map

package/dist/store/atomic.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"atomic.js","sourceRoot":"","sources":["../../src/store/atomic.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,IAAY,EACZ,OAAsD;IAEtD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE;YACpC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,MAAM;YACrC,IAAI,EAAE,OAAO,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,IAAa,EACb,OAA6B;IAE7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACrE,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAYD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,QAAgB,EAChB,UAA8C;IAE9C,MAAM,UAAU,GAAG,GAAG,MAAM,SAAS,CAAC;IAEtC,IAAI,CAAC;QACH,wCAAwC;QACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,+CAA+C;QAC/C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,wDAAwD;QACxD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnC,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE/B,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ;YACR,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAC3D,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,0CAA0C;QAC1C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,sBAAsB;QACtB,MAAM,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAAkB;IAChE,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAc;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,aAAa,CAAiC,CAAC;QAC7E,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAEhD,CAAC;QACd,MAAM,IAAI,GAAG,YAAY,EAAE,eAAe,KAAK,IAAI,CAAC;QACpD,MAAM,QAAQ,GAAG,EAAE;aAChB,OAAO,CAAC,oEAAoE,CAAC;aAC7E,GAAG,EAAE,CAAC;QACT,MAAM,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC;QACjC,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,IAAI,aAAa,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/store/backup.js

@@ -1,94 +0,0 @@
-/**
- * Numbered backup system for CLEO data files.
- * Maintains a rotating window of recent backups for rollback protection.
- * @epic T4454
- * @task T4457
- */
-import { copyFile, rename as fsRename, mkdir, readdir, stat, unlink } from 'node:fs/promises';
-import { basename, join } from 'node:path';
-import { ExitCode } from '@cleocode/contracts';
-import { CleoError } from '../errors.js';
-const DEFAULT_MAX_BACKUPS = 5;
-/**
- * Create a numbered backup of a file.
- * Rotates existing backups (file.1 -> file.2, etc.) and removes excess.
- */
-export async function createBackup(filePath, backupDir, maxBackups = DEFAULT_MAX_BACKUPS) {
-    try {
-        await mkdir(backupDir, { recursive: true });
-        const fileName = basename(filePath);
-        // Check if source file exists
-        try {
-            await stat(filePath);
-        }
-        catch {
-            throw new CleoError(ExitCode.FILE_ERROR, `Cannot backup: source file not found: ${filePath}`);
-        }
-        // Rotate existing backups (shift numbers up)
-        for (let i = maxBackups; i >= 1; i--) {
-            const current = join(backupDir, `${fileName}.${i}`);
-            if (i === maxBackups) {
-                // Remove oldest backup
-                try {
-                    await unlink(current);
-                }
-                catch {
-                    // File may not exist
-                }
-            }
-            else {
-                const next = join(backupDir, `${fileName}.${i + 1}`);
-                try {
-                    await stat(current);
-                    await fsRename(current, next);
-                }
-                catch {
-                    // File may not exist
-                }
-            }
-        }
-        // Create new backup as .1
-        const backupPath = join(backupDir, `${fileName}.1`);
-        await copyFile(filePath, backupPath);
-        return backupPath;
-    }
-    catch (err) {
-        if (err instanceof CleoError)
-            throw err;
-        throw new CleoError(ExitCode.FILE_ERROR, `Backup failed for: ${filePath}`, { cause: err });
-    }
-}
-/**
- * List existing backups for a file, sorted by number (newest first).
- */
-export async function listBackups(fileName, backupDir) {
-    try {
-        const entries = await readdir(backupDir);
-        const prefix = `${fileName}.`;
-        return entries
-            .filter((e) => e.startsWith(prefix) && /^\d+$/.test(e.slice(prefix.length)))
-            .sort((a, b) => {
-            const numA = parseInt(a.slice(prefix.length), 10);
-            const numB = parseInt(b.slice(prefix.length), 10);
-            return numA - numB;
-        })
-            .map((e) => join(backupDir, e));
-    }
-    catch {
-        return [];
-    }
-}
-/**
- * Restore a file from its most recent backup.
- * Returns the path of the backup that was restored.
- */
-export async function restoreFromBackup(fileName, backupDir, targetPath) {
-    const backups = await listBackups(fileName, backupDir);
-    if (backups.length === 0) {
-        throw new CleoError(ExitCode.NOT_FOUND, `No backups found for: ${fileName}`);
-    }
-    const newest = backups[0];
-    await copyFile(newest, targetPath);
-    return newest;
-}
-//# sourceMappingURL=backup.js.map

package/dist/store/backup.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/store/backup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,SAAiB,EACjB,aAAqB,mBAAmB;IAExC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEpC,8BAA8B;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,yCAAyC,QAAQ,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,6CAA6C;QAC7C,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gBACrB,uBAAuB;gBACvB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;oBACpB,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;QACpD,MAAM,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS;YAAE,MAAM,GAAG,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,SAAiB;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC;QAC9B,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,OAAO,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,SAAiB,EACjB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC3B,MAAM,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC"}