@cleocode/core 2026.4.27 → 2026.4.29

package/dist/mvi-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mvi-helpers.d.ts","sourceRoot":"","sources":["../src/mvi-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,+DAA+D;AAC/D,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAM3D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAI/D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CAKrE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAKjD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAIjE"}
+{"version":3,"file":"mvi-helpers.d.ts","sourceRoot":"","sources":["../src/mvi-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,+DAA+D;AAC/D,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAM3D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAI/D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CAIrE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAKjD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAIjE"}

package/dist/reconciliation/link-store.d.ts

@@ -19,6 +19,10 @@ export declare function getLinkByExternalId(providerId: string, externalId: stri
 export declare function getLinksByTaskId(taskId: string, cwd?: string): Promise<ExternalTaskLink[]>;
 /**
  * Create a new external task link.
+ *
+ * Ensures the external_task_links table exists before inserting, providing
+ * graceful degradation for older project databases that predate the
+ * wave0-schema-hardening migration.
  */
 export declare function createLink(params: {
     taskId: string;

package/dist/reconciliation/link-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"link-store.d.ts","sourceRoot":"","sources":["../../src/reconciliation/link-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAS5D;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAO7B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAYlC;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAOhG;AAMD;;GAEG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE;IACN,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvC,aAAa,CAAC,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,EACD,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,CAAC,CAgC3B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IACR,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,EACD,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7F"}
+{"version":3,"file":"link-store.d.ts","sourceRoot":"","sources":["../../src/reconciliation/link-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAY5D;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAO7B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAYlC;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAOhG;AA0DD;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE;IACN,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvC,aAAa,CAAC,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,EACD,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,CAAC,CAiC3B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IACR,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,EACD,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7F"}

package/dist/security/input-sanitization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"input-sanitization.d.ts","sourceRoot":"","sources":["../../src/security/input-sanitization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,IAAI,EAAE,MAAM;IACZ,KAAK,CAAC,EAAE,MAAM;gBAFrB,OAAO,EAAE,MAAM,EACR,IAAI,GAAE,MAA+B,EACrC,KAAK,CAAC,EAAE,MAAM,YAAA;CAKxB;AAiBD;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAoBrD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CA2CtE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,MAAmC,GAC7C,MAAM,CAcR;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAgBxF;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,wGAShB,CAAC;AAEX,eAAO,MAAM,cAAc,8BAA+B,CAAC;AAE3D,eAAO,MAAM,uBAAuB,0DAAoB,CAAC;AAEzD,eAAO,MAAM,8BAA8B,sFAA2B,CAAC;AAEvE,eAAO,MAAM,kBAAkB,2HAAoD,CAAC;AAEpF,eAAO,MAAM,gBAAgB,gDAAkB,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAI/D,CAAC;AAEF;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,OAAO,CAA2C;gBAE9C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;IAOrD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IA8BnC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMzB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IASrC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAQzB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAInD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;CAGtD;AAsBD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,SAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CASjF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC3C,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAkGrC"}
+{"version":3,"file":"input-sanitization.d.ts","sourceRoot":"","sources":["../../src/security/input-sanitization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,IAAI,EAAE,MAAM;IACZ,KAAK,CAAC,EAAE,MAAM;gBAFrB,OAAO,EAAE,MAAM,EACR,IAAI,GAAE,MAA+B,EACrC,KAAK,CAAC,EAAE,MAAM,YAAA;CAKxB;AAiBD;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAoBrD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CA2CtE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,MAAmC,GAC7C,MAAM,CAcR;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAgBxF;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,wGAShB,CAAC;AAEX,eAAO,MAAM,cAAc,8BAA+B,CAAC;AAE3D,eAAO,MAAM,uBAAuB,0DAAoB,CAAC;AAEzD,eAAO,MAAM,8BAA8B,sFAA2B,CAAC;AAEvE,eAAO,MAAM,kBAAkB,2HAAoD,CAAC;AAEpF,eAAO,MAAM,gBAAgB,gDAAkB,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAI/D,CAAC;AAEF;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,OAAO,CAA2C;gBAE9C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;IAOrD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IA8BnC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMzB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IASrC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAQzB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAInD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;CAGtD;AAsBD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,SAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CASjF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC3C,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAwGrC"}

package/dist/sticky/list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/sticky/list.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAoBjE;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,kBAAkB,EAC1B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,EAAE,CAAC,CAWvB"}
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/sticky/list.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAoBjE;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,kBAAkB,EAC1B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,EAAE,CAAC,CA2BvB"}

package/dist/sticky/types.d.ts

@@ -70,6 +70,8 @@ export interface ListStickiesParams {
     status?: StickyNoteStatus;
     color?: StickyNoteColor;
     priority?: StickyNotePriority;
+    /** Filter to notes containing ALL of the specified tags. */
+    tags?: string[];
     limit?: number;
 }
 /**

package/dist/sticky/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sticky/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAEnE;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE7E;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,qBAAqB;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qCAAqC;IACrC,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,mBAAmB;IACnB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,mBAAmB,CAAC;IAChC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sticky/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAEnE;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE7E;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,qBAAqB;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qCAAqC;IACrC,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,mBAAmB;IACnB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,mBAAmB,CAAC;IAChC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/core",
-  "version": "2026.4.27",
+  "version": "2026.4.29",
   "description": "CLEO core business logic kernel — tasks, sessions, memory, orchestration, lifecycle, with bundled SQLite store",
   "type": "module",
   "main": "./dist/index.js",
@@ -36,12 +36,12 @@
     "write-file-atomic": "^7.0.1",
     "yaml": "^2.8.3",
     "zod": "^4.3.6",
-    "@cleocode/adapters": "2026.4.27",
-    "@cleocode/agents": "2026.4.27",
-    "@cleocode/caamp": "2026.4.27",
-    "@cleocode/contracts": "2026.4.27",
-    "@cleocode/lafs": "2026.4.27",
-    "@cleocode/skills": "2026.4.27"
+    "@cleocode/adapters": "2026.4.29",
+    "@cleocode/agents": "2026.4.29",
+    "@cleocode/caamp": "2026.4.29",
+    "@cleocode/lafs": "2026.4.29",
+    "@cleocode/contracts": "2026.4.29",
+    "@cleocode/skills": "2026.4.29"
   },
   "optionalDependencies": {
     "tree-sitter-c": "^0.24.1",

package/src/adrs/sync.ts

@@ -14,7 +14,7 @@
 
 import { existsSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { adrTaskLinks, architectureDecisions } from '../store/tasks-schema.js';
+import { adrTaskLinks, architectureDecisions, tasks } from '../store/tasks-schema.js';
 import { parseAdrFile } from './parse.js';
 import type { AdrSyncResult } from './types.js';
 
@@ -68,7 +68,7 @@ function collectAdrFiles(dir: string): Array<{ file: string; relPath: string }>
  */
 export async function syncAdrsToDb(projectRoot: string): Promise<AdrSyncResult> {
   const adrsDir = join(projectRoot, '.cleo', 'adrs');
-  const result: AdrSyncResult = { inserted: 0, updated: 0, skipped: 0, errors: [] };
+  const result: AdrSyncResult = { inserted: 0, updated: 0, skipped: 0, errors: [], warnings: [] };
 
   if (!existsSync(adrsDir)) {
     return result;
@@ -93,9 +93,50 @@ export async function syncAdrsToDb(projectRoot: string): Promise<AdrSyncResult>
       const dbRelPath = `.cleo/adrs/${relPath}`;
       const content = readFileSync(filePath, 'utf-8');
 
-      const supersedesId = fm.Supersedes ? extractAdrIdFromRef(fm.Supersedes) : null;
-      const supersededById = fm['Superseded By'] ? extractAdrIdFromRef(fm['Superseded By']) : null;
-      const amendsId = fm.Amends ? extractAdrIdFromRef(fm.Amends) : null;
+      let supersedesId = fm.Supersedes ? extractAdrIdFromRef(fm.Supersedes) : null;
+      let supersededById = fm['Superseded By'] ? extractAdrIdFromRef(fm['Superseded By']) : null;
+      let amendsId = fm.Amends ? extractAdrIdFromRef(fm.Amends) : null;
+
+      // Validate FK references exist before insert/update to avoid constraint violations
+      if (supersedesId) {
+        const exists = await db
+          .select({ id: architectureDecisions.id })
+          .from(architectureDecisions)
+          .where(eq(architectureDecisions.id, supersedesId))
+          .all();
+        if (exists.length === 0) {
+          result.warnings.push(
+            `${record.id}: supersedes target ${supersedesId} not found in DB, setting to null`,
+          );
+          supersedesId = null;
+        }
+      }
+      if (supersededById) {
+        const exists = await db
+          .select({ id: architectureDecisions.id })
+          .from(architectureDecisions)
+          .where(eq(architectureDecisions.id, supersededById))
+          .all();
+        if (exists.length === 0) {
+          result.warnings.push(
+            `${record.id}: supersededBy target ${supersededById} not found in DB, setting to null`,
+          );
+          supersededById = null;
+        }
+      }
+      if (amendsId) {
+        const exists = await db
+          .select({ id: architectureDecisions.id })
+          .from(architectureDecisions)
+          .where(eq(architectureDecisions.id, amendsId))
+          .all();
+        if (exists.length === 0) {
+          result.warnings.push(
+            `${record.id}: amends target ${amendsId} not found in DB, setting to null`,
+          );
+          amendsId = null;
+        }
+      }
 
       const rowBase = {
         id: record.id,
@@ -136,6 +177,18 @@ export async function syncAdrsToDb(projectRoot: string): Promise<AdrSyncResult>
       await db.delete(adrTaskLinks).where(eq(adrTaskLinks.adrId, record.id));
       if (fm['Related Tasks']) {
         for (const taskId of parseTaskIds(fm['Related Tasks'])) {
+          // Validate task exists before inserting link to avoid FK constraint violation
+          const taskExists = await db
+            .select({ id: tasks.id })
+            .from(tasks)
+            .where(eq(tasks.id, taskId))
+            .all();
+          if (taskExists.length === 0) {
+            result.warnings.push(
+              `${record.id}: related task ${taskId} not found in DB, skipping link`,
+            );
+            continue;
+          }
           await db.insert(adrTaskLinks).values({ adrId: record.id, taskId, linkType: 'related' });
         }
       }

package/src/adrs/types.ts

@@ -37,6 +37,7 @@ export interface AdrSyncResult {
   updated: number;
   skipped: number;
   errors: Array<{ file: string; error: string }>;
+  warnings: string[];
 }
 
 export interface AdrListResult {

package/src/mvi-helpers.ts

@@ -52,7 +52,6 @@ export function taskListItemNext(taskId: string): NextDirectives {
 export function sessionListItemNext(sessionId: string): NextDirectives {
   return {
     show: `cleo session show ${sessionId}`,
-    serialize: `cleo session serialize ${sessionId}`,
   };
 }
 

package/src/nexus/transfer.ts

@@ -169,54 +169,64 @@ async function executeTransferInternal(params: TransferParams): Promise<Transfer
   }
 
   // Step 6: Create bidirectional external_task_links
-  // Only create links for tasks that were actually imported (verify they exist in target)
+  // Only create links for tasks that were actually imported (verify they exist in target).
+  // Wrapped in try-catch: link creation is non-critical — the transfer itself has already
+  // succeeded by this point. If the target DB predates the wave0-schema-hardening migration
+  // and table creation fails, we log a warning and continue rather than aborting the transfer.
   let linksCreated = 0;
-  const targetAccessor = await getAccessor(targetProject.path);
-  const { tasks: targetTasks } = await targetAccessor.queryTasks({});
-  const targetTaskIds = new Set(targetTasks.map((t) => t.id));
-
-  for (const entry of entries) {
-    if (importResult.idRemap[entry.sourceId] && targetTaskIds.has(entry.targetId)) {
-      // Link in target: points back to source
-      await createLink(
-        {
-          taskId: entry.targetId,
-          providerId: `nexus:${sourceProject.name}`,
-          externalId: entry.sourceId,
-          externalTitle: entry.title,
-          linkType: 'transferred',
-          syncDirection: 'inbound',
-          metadata: {
-            transferMode: mode,
-            transferScope: scope,
-            sourceProject: sourceProject.name,
-            transferredAt: new Date().toISOString(),
+  try {
+    const targetAccessor = await getAccessor(targetProject.path);
+    const { tasks: targetTasks } = await targetAccessor.queryTasks({});
+    const targetTaskIds = new Set(targetTasks.map((t) => t.id));
+
+    for (const entry of entries) {
+      if (importResult.idRemap[entry.sourceId] && targetTaskIds.has(entry.targetId)) {
+        // Link in target: points back to source
+        await createLink(
+          {
+            taskId: entry.targetId,
+            providerId: `nexus:${sourceProject.name}`,
+            externalId: entry.sourceId,
+            externalTitle: entry.title,
+            linkType: 'transferred',
+            syncDirection: 'inbound',
+            metadata: {
+              transferMode: mode,
+              transferScope: scope,
+              sourceProject: sourceProject.name,
+              transferredAt: new Date().toISOString(),
+            },
           },
-        },
-        targetProject.path,
-      );
-      linksCreated++;
-
-      // Link in source: points to target
-      await createLink(
-        {
-          taskId: entry.sourceId,
-          providerId: `nexus:${targetProject.name}`,
-          externalId: entry.targetId,
-          externalTitle: entry.title,
-          linkType: 'transferred',
-          syncDirection: 'outbound',
-          metadata: {
-            transferMode: mode,
-            transferScope: scope,
-            targetProject: targetProject.name,
-            transferredAt: new Date().toISOString(),
+          targetProject.path,
+        );
+        linksCreated++;
+
+        // Link in source: points to target
+        await createLink(
+          {
+            taskId: entry.sourceId,
+            providerId: `nexus:${targetProject.name}`,
+            externalId: entry.targetId,
+            externalTitle: entry.title,
+            linkType: 'transferred',
+            syncDirection: 'outbound',
+            metadata: {
+              transferMode: mode,
+              transferScope: scope,
+              targetProject: targetProject.name,
+              transferredAt: new Date().toISOString(),
+            },
           },
-        },
-        sourceProject.path,
-      );
-      linksCreated++;
+          sourceProject.path,
+        );
+        linksCreated++;
+      }
     }
+  } catch (err) {
+    log.warn(
+      { err, linksCreated },
+      'Failed to create external_task_links during transfer — tasks were transferred successfully but provenance links could not be written',
+    );
   }
   result.linksCreated = linksCreated;
 

package/src/reconciliation/link-store.ts

@@ -7,10 +7,13 @@
 
 import { randomUUID } from 'node:crypto';
 import type { ExternalTaskLink } from '@cleocode/contracts';
-import { and, eq } from 'drizzle-orm';
+import { and, eq, sql } from 'drizzle-orm';
+import { getLogger } from '../logger.js';
 import { getDb } from '../store/sqlite.js';
 import { externalTaskLinks } from '../store/tasks-schema.js';
 
+const log = getLogger('link-store');
+
 // ---------------------------------------------------------------------------
 // Read operations
 // ---------------------------------------------------------------------------
@@ -63,12 +66,68 @@ export async function getLinksByTaskId(taskId: string, cwd?: string): Promise<Ex
   return rows.map(rowToLink);
 }
 
+// ---------------------------------------------------------------------------
+// Table safety
+// ---------------------------------------------------------------------------
+
+/**
+ * Ensure the external_task_links table exists in the given database.
+ *
+ * Older project databases (created before the wave0-schema-hardening migration)
+ * may lack this table. Rather than aborting operations like nexus transfer,
+ * we create the table on demand using CREATE TABLE IF NOT EXISTS.
+ *
+ * This is idempotent — safe to call on every write operation.
+ */
+async function ensureExternalTaskLinksTable(cwd?: string): Promise<void> {
+  const db = await getDb(cwd);
+  try {
+    db.run(
+      sql.raw(`
+        CREATE TABLE IF NOT EXISTS external_task_links (
+          id text PRIMARY KEY NOT NULL,
+          task_id text NOT NULL REFERENCES tasks(id) ON DELETE CASCADE,
+          provider_id text NOT NULL,
+          external_id text NOT NULL,
+          external_url text,
+          external_title text,
+          link_type text NOT NULL,
+          sync_direction text NOT NULL DEFAULT 'inbound',
+          metadata_json text DEFAULT '{}',
+          linked_at text NOT NULL DEFAULT (datetime('now')),
+          last_sync_at text
+        )
+      `),
+    );
+    db.run(
+      sql.raw(
+        `CREATE UNIQUE INDEX IF NOT EXISTS uq_ext_links_task_provider_external ON external_task_links(task_id, provider_id, external_id)`,
+      ),
+    );
+    db.run(
+      sql.raw(`CREATE INDEX IF NOT EXISTS idx_ext_links_task_id ON external_task_links(task_id)`),
+    );
+    db.run(
+      sql.raw(
+        `CREATE INDEX IF NOT EXISTS idx_ext_links_provider_id ON external_task_links(provider_id)`,
+      ),
+    );
+  } catch (err) {
+    log.warn({ err }, 'Failed to ensure external_task_links table exists');
+    throw err;
+  }
+}
+
 // ---------------------------------------------------------------------------
 // Write operations
 // ---------------------------------------------------------------------------
 
 /**
  * Create a new external task link.
+ *
+ * Ensures the external_task_links table exists before inserting, providing
+ * graceful degradation for older project databases that predate the
+ * wave0-schema-hardening migration.
  */
 export async function createLink(
   params: {
@@ -83,6 +142,7 @@ export async function createLink(
   },
   cwd?: string,
 ): Promise<ExternalTaskLink> {
+  await ensureExternalTaskLinksTable(cwd);
   const db = await getDb(cwd);
   const now = new Date().toISOString();
   const id = randomUUID();

package/src/security/input-sanitization.ts

@@ -379,8 +379,14 @@ export function sanitizeParams(
     }
 
     if (typeof value === 'string' && (key === 'path' || key === 'file') && projectRoot) {
-      sanitized[key] = sanitizePath(value, projectRoot);
-      continue;
+      // Skip path sanitization for operations that intentionally accept external paths
+      const allowExternalPath =
+        context?.domain === 'nexus' &&
+        (context?.operation === 'register' || context?.operation === 'reconcile');
+      if (!allowExternalPath) {
+        sanitized[key] = sanitizePath(value, projectRoot);
+        continue;
+      }
     }
 
     if (

package/src/sticky/list.ts

@@ -42,12 +42,28 @@ export async function listStickies(
 ): Promise<StickyNote[]> {
   const accessor = await getBrainAccessor(projectRoot);
 
+  // Tags are stored as JSON in a text column, so we filter in-memory after
+  // the SQL query. Request extra rows (no limit) when tag filtering is active
+  // so we don't inadvertently clip the result set before filtering.
+  const hasTagFilter = params.tags && params.tags.length > 0;
+
   const rows = await accessor.findStickyNotes({
     status: params.status,
     color: params.color,
     priority: params.priority,
-    limit: params.limit,
+    limit: hasTagFilter ? undefined : params.limit,
   });
 
-  return rows.map(rowToStickyNote);
+  let notes = rows.map(rowToStickyNote);
+
+  // In-memory tag filter: keep notes that contain ALL requested tags.
+  if (hasTagFilter) {
+    const requiredTags = params.tags!;
+    notes = notes.filter((note) => requiredTags.every((t) => note.tags.includes(t)));
+    if (params.limit && notes.length > params.limit) {
+      notes = notes.slice(0, params.limit);
+    }
+  }
+
+  return notes;
 }

package/src/sticky/types.ts

@@ -78,6 +78,8 @@ export interface ListStickiesParams {
   status?: StickyNoteStatus;
   color?: StickyNoteColor;
   priority?: StickyNotePriority;
+  /** Filter to notes containing ALL of the specified tags. */
+  tags?: string[];
   limit?: number;
 }