@cleocode/core 2026.4.9 → 2026.4.11

package/dist/system/backup.js

@@ -0,0 +1,280 @@
+/**
+ * Backup and restore core module.
+ *
+ * Produces full-`.cleo/` snapshots containing tasks.db, brain.db, config.json
+ * and project-info.json using the safest available method for each file type:
+ *
+ *   - SQLite databases: `VACUUM INTO` via the live native handle (see
+ *     {@link ../store/sqlite-backup.ts}). This is the ONLY safe way to
+ *     snapshot a WAL-mode SQLite database while it is open — raw filesystem
+ *     copies can capture torn writes or stale WAL frames.
+ *
+ *   - JSON files: atomic tmp-then-rename via {@link atomicWrite} so a partial
+ *     write can never corrupt the backup target.
+ *
+ * Snapshots are recorded under `.cleo/backups/{type}/` with a JSON sidecar
+ * (`{backupId}.meta.json`) enumerating which files were captured and how.
+ * Restores read the same sidecars and materialize each file back into the
+ * live `.cleo/` directory.
+ *
+ * This is the backing store for the `cleo backup` and `cleo restore backup`
+ * CLI verbs (see packages/cleo/src/cli/commands/backup.ts and restore.ts).
+ *
+ * @task T4783
+ * @task T5158 — extended to use VACUUM INTO for .db files and atomicWrite for JSON
+ */
+import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { ExitCode } from '@cleocode/contracts';
+import { CleoError } from '../errors.js';
+import { getBrainNativeDb } from '../store/brain-sqlite.js';
+import { getNativeDb } from '../store/sqlite.js';
+/** Safe wrapper around VACUUM INTO: flushes WAL then clones the DB. */
+function safeSqliteSnapshot(db, destPath) {
+    if (!db)
+        return false;
+    db.exec('PRAGMA wal_checkpoint(TRUNCATE)');
+    const safeDest = destPath.replace(/'/g, "''");
+    db.exec(`VACUUM INTO '${safeDest}'`);
+    return true;
+}
+/**
+ * Synchronous atomic write: writes to a sibling `.tmp` file and renames on
+ * success. Mirrors the behavior of `write-file-atomic` but in a sync flavor
+ * suitable for `createBackup()` which has a sync contract throughout its
+ * call chain.
+ *
+ * On rename failure the tmp file is best-effort cleaned up. Throws on the
+ * originating error so callers can decide how to handle the backup partial.
+ */
+function atomicWriteSync(destPath, data) {
+    mkdirSync(dirname(destPath), { recursive: true });
+    const tmp = `${destPath}.${process.pid}.${Date.now()}.tmp`;
+    try {
+        writeFileSync(tmp, data);
+        renameSync(tmp, destPath);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmp);
+        }
+        catch {
+            /* ignore cleanup failure */
+        }
+        throw err;
+    }
+}
+/**
+ * Create a backup of the canonical CLEO data files.
+ *
+ * Produces safe copies via VACUUM INTO (for SQLite) and atomicWrite
+ * (for JSON) into `.cleo/backups/{type}/`. Writes a `{backupId}.meta.json`
+ * sidecar describing the snapshot.
+ *
+ * Opens both `tasks.db` and `brain.db` through their canonical drizzle
+ * accessors before snapshotting so that the native DB handles are live
+ * when `safeSqliteSnapshot` asks for them. This makes the function
+ * self-contained — callers do not need to pre-open the DBs.
+ *
+ * Async because opening the database engines requires async migration
+ * reconciliation (ADR-012). The CLI dispatch layer awaits this result.
+ */
+export async function createBackup(projectRoot, opts) {
+    const cleoDir = join(projectRoot, '.cleo');
+    const btype = opts?.type || 'snapshot';
+    const timestamp = new Date().toISOString();
+    const backupId = `${btype}-${timestamp.replace(/[:.]/g, '-')}`;
+    const backupDir = join(cleoDir, 'backups', btype);
+    if (!existsSync(backupDir)) {
+        mkdirSync(backupDir, { recursive: true });
+    }
+    // Ensure both SQLite engines are initialized so getNativeDb/
+    // getBrainNativeDb return live handles when we call them below. Both
+    // opens are best-effort — if one fails we still snapshot whatever we
+    // can reach (plus the JSON files). Dynamic imports avoid pulling
+    // drizzle into test suites that mock the store layer.
+    try {
+        const { getDb } = await import('../store/sqlite.js');
+        await getDb(projectRoot);
+    }
+    catch {
+        // tasks.db open failed — will be skipped by the sqlite target below
+    }
+    try {
+        const { getBrainDb } = await import('../store/brain-sqlite.js');
+        await getBrainDb(projectRoot);
+    }
+    catch {
+        // brain.db open failed — will be skipped by the sqlite target below
+    }
+    /**
+     * Per-file backup strategy. SQLite files go through `safeSqliteSnapshot`
+     * (VACUUM INTO), JSON files through `atomicWrite`. Anything not in this
+     * table is skipped.
+     */
+    const sqliteTargets = [
+        { file: 'tasks.db', getDb: getNativeDb },
+        { file: 'brain.db', getDb: getBrainNativeDb },
+    ];
+    const jsonTargets = ['config.json', 'project-info.json'];
+    const backedUp = [];
+    // SQLite via VACUUM INTO.
+    for (const target of sqliteTargets) {
+        const src = join(cleoDir, target.file);
+        if (!existsSync(src))
+            continue;
+        const dest = join(backupDir, `${target.file}.${backupId}`);
+        try {
+            const ok = safeSqliteSnapshot(target.getDb(), dest);
+            if (ok) {
+                backedUp.push(target.file);
+            }
+        }
+        catch {
+            // skip files that fail to snapshot — backup remains partial but usable
+        }
+    }
+    // JSON via atomic write.
+    for (const file of jsonTargets) {
+        const src = join(cleoDir, file);
+        if (!existsSync(src))
+            continue;
+        const dest = join(backupDir, `${file}.${backupId}`);
+        try {
+            const content = readFileSync(src);
+            atomicWriteSync(dest, content);
+            backedUp.push(file);
+        }
+        catch {
+            // skip files that fail to copy
+        }
+    }
+    // Write metadata sidecar.
+    const metaPath = join(backupDir, `${backupId}.meta.json`);
+    try {
+        atomicWriteSync(metaPath, JSON.stringify({
+            backupId,
+            type: btype,
+            timestamp,
+            note: opts?.note,
+            files: backedUp,
+        }, null, 2));
+    }
+    catch {
+        // non-fatal
+    }
+    return { backupId, path: backupDir, timestamp, type: btype, files: backedUp };
+}
+/**
+ * List all available system backups (snapshot, safety, migration types).
+ * Reads `.meta.json` sidecar files written by createBackup.
+ * This is a pure read operation — it does not modify any files.
+ * @task T4783
+ */
+export function listSystemBackups(projectRoot) {
+    const cleoDir = join(projectRoot, '.cleo');
+    const backupTypes = ['snapshot', 'safety', 'migration'];
+    const entries = [];
+    for (const btype of backupTypes) {
+        const backupDir = join(cleoDir, 'backups', btype);
+        if (!existsSync(backupDir))
+            continue;
+        try {
+            const files = readdirSync(backupDir).filter((f) => f.endsWith('.meta.json'));
+            for (const metaFile of files) {
+                try {
+                    const raw = readFileSync(join(backupDir, metaFile), 'utf-8');
+                    const meta = JSON.parse(raw);
+                    if (meta.backupId && meta.timestamp) {
+                        entries.push({
+                            backupId: meta.backupId,
+                            type: meta.type ?? btype,
+                            timestamp: meta.timestamp,
+                            note: meta.note,
+                            files: meta.files ?? [],
+                        });
+                    }
+                }
+                catch {
+                    // skip malformed meta files
+                }
+            }
+        }
+        catch {
+            // skip unreadable backup directories
+        }
+    }
+    // Sort newest first
+    return entries.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
+}
+/**
+ * Restore a backup into the live `.cleo/` directory.
+ *
+ * This operation overwrites the in-place copies of the files recorded in
+ * the backup's sidecar. SQLite files are restored via a plain `copyFileSync`
+ * because restore runs BEFORE the next CLEO process opens the database — no
+ * WAL is active at that point — so a filesystem copy is safe. Callers must
+ * ensure no CLEO process is concurrently writing to the target database.
+ *
+ * JSON files are restored via `atomicWrite` (tmp-then-rename) so a crash
+ * mid-restore cannot produce a truncated config.
+ */
+export function restoreBackup(projectRoot, params) {
+    if (!params.backupId) {
+        throw new CleoError(ExitCode.INVALID_INPUT, 'backupId is required');
+    }
+    const cleoDir = join(projectRoot, '.cleo');
+    const backupTypes = ['snapshot', 'safety', 'migration'];
+    let metaPath = null;
+    let backupDir = null;
+    for (const btype of backupTypes) {
+        const candidateMeta = join(cleoDir, 'backups', btype, `${params.backupId}.meta.json`);
+        if (existsSync(candidateMeta)) {
+            metaPath = candidateMeta;
+            backupDir = join(cleoDir, 'backups', btype);
+            break;
+        }
+    }
+    if (!metaPath || !backupDir) {
+        throw new CleoError(ExitCode.NOT_FOUND, `Backup not found: ${params.backupId}`);
+    }
+    let meta;
+    try {
+        meta = JSON.parse(readFileSync(metaPath, 'utf-8'));
+    }
+    catch {
+        throw new CleoError(ExitCode.FILE_ERROR, 'Failed to read backup metadata');
+    }
+    const restored = [];
+    for (const file of meta.files ?? []) {
+        const backupFile = join(backupDir, `${file}.${params.backupId}`);
+        if (!existsSync(backupFile))
+            continue;
+        const destPath = join(cleoDir, file);
+        try {
+            if (file.endsWith('.db')) {
+                // Atomic filesystem copy — target DB must not be in use (caller's
+                // responsibility). Raw copy is safe here because no VACUUM INTO is
+                // applicable (we are writing to the final location, not into a
+                // snapshot).
+                copyFileSync(backupFile, destPath);
+            }
+            else {
+                // JSON via atomic tmp-then-rename.
+                const content = readFileSync(backupFile);
+                atomicWriteSync(destPath, content);
+            }
+            restored.push(file);
+        }
+        catch {
+            // skip files that fail to restore
+        }
+    }
+    return {
+        restored: restored.length > 0,
+        backupId: params.backupId,
+        timestamp: meta.timestamp ?? new Date().toISOString(),
+        filesRestored: restored,
+    };
+}
+//# sourceMappingURL=backup.js.map

package/dist/system/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/system/backup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,uEAAuE;AACvE,SAAS,kBAAkB,CAAC,EAA0C,EAAE,QAAgB;IACtF,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,EAAE,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,EAAE,CAAC,IAAI,CAAC,gBAAgB,QAAQ,GAAG,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAqB;IAC9D,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC3D,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AA4BD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,IAAuC;IAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAElD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,6DAA6D;IAC7D,qEAAqE;IACrE,qEAAqE;IACrE,iEAAiE;IACjE,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAChE,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IAED;;;;OAIG;IACH,MAAM,aAAa,GAGd;QACH,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE;QACxC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE;KAC9C,CAAC;IACF,MAAM,WAAW,GAAa,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,0BAA0B;IAC1B,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,EAAE,EAAE,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAClC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,eAAe,CACb,QAAQ,EACR,IAAI,CAAC,SAAS,CACZ;YACE,QAAQ;YACR,IAAI,EAAE,KAAK;YACX,SAAS;YACT,IAAI,EAAE,IAAI,EAAE,IAAI;YAChB,KAAK,EAAE,QAAQ;SAChB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAChF,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;YAC7E,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;oBACrD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;wBACpC,OAAO,CAAC,IAAI,CAAC;4BACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;4BACxB,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;yBACxB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,4BAA4B;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,WAAmB,EACnB,MAA6C;IAE7C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,QAAQ,YAAY,CAAC,CAAC;QACtF,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,QAAQ,GAAG,aAAa,CAAC;YACzB,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,qBAAqB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,IAA4C,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,kEAAkE;gBAClE,mEAAmE;gBACnE,+DAA+D;gBAC/D,aAAa;gBACb,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,mCAAmC;gBACnC,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;gBACzC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrD,aAAa,EAAE,QAAQ;KACxB,CAAC;AACJ,CAAC"}

package/dist/system/cleanup.js

@@ -0,0 +1,134 @@
+/**
+ * System cleanup core module.
+ * @task T4783
+ */
+import { existsSync, readdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { ExitCode } from '@cleocode/contracts';
+import { pruneAuditLog } from '../audit-prune.js';
+import { loadConfig } from '../config.js';
+import { CleoError } from '../errors.js';
+/** Cleanup stale data (sessions, backups, logs). */
+export async function cleanupSystem(projectRoot, params) {
+    if (!params.target) {
+        throw new CleoError(ExitCode.INVALID_INPUT, 'target is required (sessions|backups|logs|archive)');
+    }
+    const cleoDir = join(projectRoot, '.cleo');
+    const dryRun = params.dryRun ?? false;
+    const items = [];
+    let prunedRows;
+    let archivedRows;
+    let archivePath;
+    switch (params.target) {
+        case 'sessions': {
+            const sessPath = join(cleoDir, 'sessions.json');
+            if (existsSync(sessPath)) {
+                try {
+                    const data = JSON.parse(readFileSync(sessPath, 'utf-8'));
+                    const sessions = data.sessions ?? [];
+                    const stale = sessions.filter((s) => {
+                        if (s.status !== 'active')
+                            return false;
+                        if (params.olderThan && s.lastActivity) {
+                            return s.lastActivity < params.olderThan;
+                        }
+                        const cutoff = new Date(Date.now() - 86400000).toISOString();
+                        return s.lastActivity && s.lastActivity < cutoff;
+                    });
+                    for (const s of stale) {
+                        items.push(s.id);
+                    }
+                    if (!dryRun && stale.length > 0) {
+                        const staleIds = new Set(stale.map((s) => s.id));
+                        data.sessions = sessions.filter((s) => !staleIds.has(s.id));
+                        writeFileSync(sessPath, JSON.stringify(data, null, 2), 'utf-8');
+                    }
+                }
+                catch {
+                    // skip
+                }
+            }
+            break;
+        }
+        case 'backups': {
+            const backupBaseDir = join(cleoDir, 'backups');
+            if (existsSync(backupBaseDir)) {
+                for (const typeDir of readdirSync(backupBaseDir)) {
+                    const fullDir = join(backupBaseDir, typeDir);
+                    try {
+                        for (const file of readdirSync(fullDir)) {
+                            if (file.endsWith('.meta.json')) {
+                                const metaFilePath = join(fullDir, file);
+                                try {
+                                    const meta = JSON.parse(readFileSync(metaFilePath, 'utf-8'));
+                                    if (params.olderThan && meta.timestamp < params.olderThan) {
+                                        items.push(file.replace('.meta.json', ''));
+                                        if (!dryRun) {
+                                            unlinkSync(metaFilePath);
+                                            for (const bf of readdirSync(fullDir)) {
+                                                if (bf.includes(meta.backupId)) {
+                                                    try {
+                                                        unlinkSync(join(fullDir, bf));
+                                                    }
+                                                    catch {
+                                                        /* skip */
+                                                    }
+                                                }
+                                            }
+                                        }
+                                    }
+                                }
+                                catch {
+                                    /* skip */
+                                }
+                            }
+                        }
+                    }
+                    catch {
+                        /* skip */
+                    }
+                }
+            }
+            break;
+        }
+        case 'logs': {
+            if (!dryRun) {
+                const config = await loadConfig(projectRoot);
+                const pruneResult = await pruneAuditLog(cleoDir, config.logging);
+                prunedRows = pruneResult.rowsDeleted;
+                archivedRows = pruneResult.rowsArchived;
+                archivePath = pruneResult.archivePath;
+            }
+            // Remove legacy rotated JSON audit files
+            const auditPattern = /^audit-log-.*\.json$/;
+            if (existsSync(cleoDir)) {
+                for (const file of readdirSync(cleoDir)) {
+                    if (auditPattern.test(file)) {
+                        items.push(file);
+                        if (!dryRun) {
+                            try {
+                                unlinkSync(join(cleoDir, file));
+                            }
+                            catch {
+                                /* skip */
+                            }
+                        }
+                    }
+                }
+            }
+            break;
+        }
+        default:
+            throw new CleoError(ExitCode.INVALID_INPUT, `Invalid cleanup target: ${params.target}`);
+    }
+    return {
+        target: params.target,
+        deleted: dryRun ? 0 : items.length,
+        items,
+        dryRun,
+        prunedRows,
+        archivedRows,
+        archivePath,
+    };
+}
+//# sourceMappingURL=cleanup.js.map

package/dist/system/cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/system/cleanup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAYzC,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,MAAgE;IAEhE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,aAAa,EACtB,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,UAA8B,CAAC;IACnC,IAAI,YAAgC,CAAC;IACrC,IAAI,WAA+B,CAAC;IAEpC,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YAChD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;oBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;oBACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,CAAC,CAAwD,EAAE,EAAE;wBAC3D,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;4BAAE,OAAO,KAAK,CAAC;wBACxC,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;4BACvC,OAAO,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC;wBAC3C,CAAC;wBACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;wBAC7D,OAAO,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC;oBACnD,CAAC,CACF,CAAC;oBACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;wBACtB,KAAK,CAAC,IAAI,CAAE,CAAoB,CAAC,EAAE,CAAC,CAAC;oBACvC,CAAC;oBACD,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC5E,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC/C,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9B,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;oBACjD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;oBAC7C,IAAI,CAAC;wBACH,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;4BACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gCAChC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gCACzC,IAAI,CAAC;oCACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;oCAC7D,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;wCAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;wCAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;4CACZ,UAAU,CAAC,YAAY,CAAC,CAAC;4CACzB,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gDACtC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oDAC/B,IAAI,CAAC;wDACH,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;oDAChC,CAAC;oDAAC,MAAM,CAAC;wDACP,UAAU;oDACZ,CAAC;gDACH,CAAC;4CACH,CAAC;wCACH,CAAC;oCACH,CAAC;gCACH,CAAC;gCAAC,MAAM,CAAC;oCACP,UAAU;gCACZ,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,UAAU;oBACZ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;gBAC7C,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACjE,UAAU,GAAG,WAAW,CAAC,WAAW,CAAC;gBACrC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;gBACxC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;YACxC,CAAC;YAED,yCAAyC;YACzC,MAAM,YAAY,GAAG,sBAAsB,CAAC;YAC5C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACjB,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,IAAI,CAAC;gCACH,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;4BAClC,CAAC;4BAAC,MAAM,CAAC;gCACP,UAAU;4BACZ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM;QACR,CAAC;QACD;YACE,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,2BAA2B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;QAClC,KAAK;QACL,MAAM;QACN,UAAU;QACV,YAAY;QACZ,WAAW;KACZ,CAAC;AACJ,CAAC"}