@cleocode/core 2026.5.134 → 2026.6.0

package/dist/store/exodus/__fixtures__/representative-fixture.js

@@ -0,0 +1,274 @@
+/**
+ * SCHEMA-REAL representative migration fixture (T11551 · DHQ-045 · AC3).
+ *
+ * The exodus zero-loss campaign happened because the original unit fixtures
+ * used MATCHING NAMES + canonical enums (`CREATE TABLE x (id, val)`), so they
+ * missed every real-schema failure: epoch-INTEGER timestamps in a `text`+GLOB
+ * column, legacy enum aliases failing a CHECK, and unprefixed→prefixed table
+ * names. This module builds a fixture that reproduces those exact hazards so
+ * the migration is exercised against representative data — NOT a name-matched
+ * toy.
+ *
+ * The fixture builds two legacy source DBs (`tasks.db`, `brain.db`) whose
+ * tables carry:
+ *
+ *   - **Unprefixed names** that must map to domain-prefixed targets
+ *     (`tasks` → `tasks_tasks`, `architecture_decisions` →
+ *     `tasks_architecture_decisions`).
+ *   - **Epoch-INTEGER timestamps** (seconds AND milliseconds) destined for a
+ *     TASKS-domain target `text` column with an ISO-8601 GLOB CHECK constraint.
+ *   - **Legacy enum aliases** (`'Accepted'`) that fail the TASKS-domain target
+ *     CHECK unless the migration normalises them, AND the real value `'mcp'`
+ *     (transport) which the consolidated CHECK now ACCEPTS verbatim — proving
+ *     exodus preserves it without coercion (T11649). (Brain enum values are no
+ *     longer CHECK-constrained at all — see the Brain-domain note below, T11647.)
+ *   - **A self-referential FK** (`tasks.parent_id → tasks.id`) copied
+ *     child-before-parent to exercise the FK-defer path.
+ *
+ * The matching consolidated TASKS-domain target schemas are built with the REAL
+ * CHECK and GLOB constraints the production schema declares, so a regression in
+ * the coercion/normalisation layer surfaces as a row deficit caught by
+ * {@link verifyMigration}.
+ *
+ * **Brain domain (T11647):** the consolidated `brain_*` target now matches the
+ * LEGACY RUNTIME shape — INTEGER epoch-ms timestamps and NO SQL CHECK
+ * constraints. So the fixture's `brain_observations` target carries no `type`
+ * CHECK and an INTEGER `created_at`: every legacy `type` value (`'observation'`,
+ * `'proposal'`, `'pattern'`) and the raw epoch-ms timestamp copy through VERBATIM
+ * — zero coercion, zero deficit. This is what proves the brain data-loss /
+ * corruption fix end-to-end against representative data.
+ *
+ * @task T11551 (DHQ-045 — exodus zero-loss durable guard · AC3)
+ * @epic T10878
+ * @saga T11242
+ */
+import { createRequire } from 'node:module';
+const _require = createRequire(import.meta.url);
+const { DatabaseSync } = _require('node:sqlite');
+/** ISO-8601 GLOB pattern the production CHECK constraints use (T11363). */
+const ISO_GLOB = "'[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]*'";
+/**
+ * The number of base-table rows the fixture seeds per (source) table.
+ * Exposed so the CI runner can assert an exact post-migration row count.
+ *
+ * @public
+ */
+export const FIXTURE_EXPECTED_ROWS = {
+    tasks_tasks: 30,
+    tasks_architecture_decisions: 12,
+    tasks_token_usage: 25,
+    brain_observations: 40,
+};
+/**
+ * Base-table rows for the optional hazard tables (only seeded when the matching
+ * {@link RepresentativeFixtureOptions} flag is set). Exposed so a test that
+ * enables the hazards can assert exact parity on them too.
+ *
+ * @public
+ */
+export const FIXTURE_HAZARD_EXPECTED_ROWS = {
+    /** brain_decisions base rows (content table behind the FTS5 index). */
+    brain_decisions: 20,
+    /** task_relations rows: 4 clean + 2 pre-existing orphans = 6. */
+    tasks_task_relations: 6,
+};
+/**
+ * Build the legacy `tasks.db` source fixture with representative drift.
+ *
+ * @param path - Absolute path for the legacy tasks source DB.
+ * @param opts - Optional hazard injection (T11572).
+ */
+function buildTasksSource(path, opts = {}) {
+    const db = new DatabaseSync(path);
+    try {
+        // --- tasks (unprefixed → tasks_tasks) with a self-referential FK + epoch ms ---
+        db.exec(`CREATE TABLE "tasks" (
+        id TEXT PRIMARY KEY,
+        title TEXT NOT NULL,
+        parent_id TEXT,
+        created_at INTEGER
+      )`);
+        // Insert child rows BEFORE parents to exercise the FK-defer path.
+        for (let i = FIXTURE_EXPECTED_ROWS.tasks_tasks; i >= 1; i--) {
+            const parent = i > 1 ? `'T${i - 1}'` : 'NULL';
+            // created_at in epoch MILLISECONDS (e.g. 1_717_200_000_000)
+            const ms = 1_717_200_000_000 + i * 1000;
+            db.exec(`INSERT INTO "tasks" VALUES ('T${i}', 'task ${i}', ${parent}, ${ms})`);
+        }
+        // --- architecture_decisions with legacy enum aliases for status ---
+        db.exec(`CREATE TABLE "architecture_decisions" (id INTEGER PRIMARY KEY, status TEXT, decided_at INTEGER)`);
+        const statuses = ['accepted', 'Accepted', 'ACCEPTED', 'approved', 'proposed', 'superseded'];
+        for (let i = 1; i <= FIXTURE_EXPECTED_ROWS.tasks_architecture_decisions; i++) {
+            const s = statuses[i % statuses.length];
+            // decided_at in epoch SECONDS (e.g. 1_717_200_000)
+            const sec = 1_717_200_000 + i;
+            db.exec(`INSERT INTO "architecture_decisions" VALUES (${i}, '${s}', ${sec})`);
+        }
+        // --- token_usage with legacy 'mcp' transport alias ---
+        db.exec(`CREATE TABLE "token_usage" (id INTEGER PRIMARY KEY, transport TEXT)`);
+        const transports = ['cli', 'api', 'agent', 'mcp', 'unknown'];
+        for (let i = 1; i <= FIXTURE_EXPECTED_ROWS.tasks_token_usage; i++) {
+            db.exec(`INSERT INTO "token_usage" VALUES (${i}, '${transports[i % transports.length]}')`);
+        }
+        // --- task_relations with a PRE-EXISTING source FK orphan (T11572 BLOCKER 2) ---
+        // Mirrors the real `tasks_task_relations` rows that reference deleted tasks.
+        // 4 clean rows (parent + child both real) + 2 orphan rows (to_id is a task id
+        // that was never inserted). FK enforcement is OFF so the orphans can be
+        // seeded; the orphan travels with the row on copy (zero loss).
+        if (opts.withPreExistingSourceOrphan) {
+            db.exec(`PRAGMA foreign_keys = OFF`);
+            db.exec(`CREATE TABLE "task_relations" (
+          id INTEGER PRIMARY KEY,
+          from_id TEXT REFERENCES "tasks"(id),
+          to_id TEXT REFERENCES "tasks"(id),
+          kind TEXT
+        )`);
+            // 4 clean rows referencing real tasks T1..T5.
+            for (let i = 1; i <= 4; i++) {
+                db.exec(`INSERT INTO "task_relations" VALUES (${i}, 'T${i}', 'T${i + 1}', 'related')`);
+            }
+            // 2 PRE-EXISTING orphans: to_id points at tasks that do NOT exist.
+            db.exec(`INSERT INTO "task_relations" VALUES (5, 'T1', 'T-RECONCILE-FOLLOWUP-v2026.5.38-2', 'related')`);
+            db.exec(`INSERT INTO "task_relations" VALUES (6, 'T2', 'T-RECONCILE-FOLLOWUP-v2026.5.38-3', 'related')`);
+        }
+    }
+    finally {
+        db.close();
+    }
+}
+/**
+ * Build the legacy `brain.db` source fixture with representative drift.
+ *
+ * @param path - Absolute path for the legacy brain source DB.
+ * @param opts - Optional hazard injection (T11572).
+ */
+function buildBrainSource(path, opts = {}) {
+    const db = new DatabaseSync(path);
+    try {
+        // brain_observations already domain-prefixed (identity map) with legacy
+        // 'observation' type alias and epoch-ms created_at.
+        db.exec(`CREATE TABLE "brain_observations" (id INTEGER PRIMARY KEY, type TEXT, created_at INTEGER)`);
+        const types = ['discovery', 'observation', 'decision', 'proposal', 'refactor', 'pattern'];
+        for (let i = 1; i <= FIXTURE_EXPECTED_ROWS.brain_observations; i++) {
+            const ms = 1_717_200_000_000 + i * 1000;
+            db.exec(`INSERT INTO "brain_observations" VALUES (${i}, '${types[i % types.length]}', ${ms})`);
+        }
+        // --- DERIVED (FTS5) + INTERNAL (conduit meta) tables (T11572 BLOCKER 1) ---
+        // These have NO consolidated counterpart; a correct migration SKIPS them
+        // rather than counting them as an N→0 deficit.
+        if (opts.withDerivedAndInternalTables) {
+            // brain_decisions: the FTS5 content table (real base data).
+            db.exec(`CREATE TABLE "brain_decisions" (id INTEGER PRIMARY KEY, decision TEXT, rationale TEXT)`);
+            for (let i = 1; i <= FIXTURE_HAZARD_EXPECTED_ROWS.brain_decisions; i++) {
+                db.exec(`INSERT INTO "brain_decisions" VALUES (${i}, 'decision-${i}', 'rationale-${i}')`);
+            }
+            // Real FTS5 index → materialises brain_decisions_fts + _data/_idx/_docsize/
+            // _config shadow tables (rows that do NOT map 1:1 to base rows).
+            db.exec(`CREATE VIRTUAL TABLE "brain_decisions_fts" USING fts5(decision, rationale, content="brain_decisions", content_rowid="id")`);
+            db.exec(`INSERT INTO "brain_decisions_fts"("brain_decisions_fts") VALUES('rebuild')`);
+            // Internal bookkeeping tables (conduit-sqlite's schema-version + ledger).
+            db.exec(`CREATE TABLE "_conduit_meta" (key TEXT PRIMARY KEY, value TEXT)`);
+            db.exec(`INSERT INTO "_conduit_meta" VALUES ('schema_version', '7')`);
+            db.exec(`CREATE TABLE "_conduit_migrations" (id INTEGER PRIMARY KEY, name TEXT, applied_at TEXT)`);
+            db.exec(`INSERT INTO "_conduit_migrations" VALUES (1, 'init', '2026-01-01T00:00:00Z')`);
+        }
+    }
+    finally {
+        db.close();
+    }
+}
+/**
+ * Build the consolidated TARGET schema with the REAL CHECK + GLOB constraints
+ * the production dual-scope schema declares for the fixture's tables.
+ *
+ * Only the project-scope DB receives tables here (the fixture's brain source is
+ * project-scoped in this representative set). The global DB is created empty.
+ *
+ * @param projectPath - Absolute path for the consolidated project cleo.db.
+ * @param globalPath  - Absolute path for the consolidated global cleo.db.
+ * @param opts        - Optional hazard injection (T11572) — adds the matching
+ *   target tables (`tasks_task_relations`, `brain_decisions`) so the hazard
+ *   source data has a consolidated home to copy INTO.
+ */
+function buildTargetSchema(projectPath, globalPath, opts = {}) {
+    const db = new DatabaseSync(projectPath);
+    try {
+        // tasks_tasks: created_at is text + ISO GLOB; self-FK on parent_id.
+        db.exec(`CREATE TABLE "tasks_tasks" (
+        id TEXT PRIMARY KEY,
+        title TEXT NOT NULL,
+        parent_id TEXT REFERENCES "tasks_tasks"(id),
+        created_at TEXT CHECK ("created_at" IS NULL OR "created_at" GLOB ${ISO_GLOB})
+      )`);
+        // tasks_architecture_decisions: status CHECK enum + decided_at ISO GLOB.
+        db.exec(`CREATE TABLE "tasks_architecture_decisions" (
+        id INTEGER PRIMARY KEY,
+        status TEXT CHECK ("status" IN ('accepted', 'proposed', 'superseded', 'deprecated')),
+        decided_at TEXT CHECK ("decided_at" IS NULL OR "decided_at" GLOB ${ISO_GLOB})
+      )`);
+        // tasks_token_usage: transport CHECK enum — WIDENED to include 'mcp' (T11649).
+        // 'mcp' is a first-class transport origin; the consolidated CHECK accepts it
+        // so exodus stores the real value verbatim (no coercion to 'agent').
+        db.exec(`CREATE TABLE "tasks_token_usage" (
+        id INTEGER PRIMARY KEY,
+        transport TEXT CHECK ("transport" IN ('cli', 'api', 'agent', 'mcp', 'unknown'))
+      )`);
+        // brain_observations: LEGACY RUNTIME shape (T11647) — NO CHECK on `type`,
+        // INTEGER epoch-ms `created_at`. The consolidated brain target equals the
+        // runtime shape (no SQL CHECKs), so every legacy `type` value and the raw
+        // epoch-ms timestamp copy through VERBATIM (zero coercion, zero deficit).
+        db.exec(`CREATE TABLE "brain_observations" (
+        id INTEGER PRIMARY KEY,
+        type TEXT,
+        created_at INTEGER
+      )`);
+        // tasks_task_relations: self-FK to tasks_tasks via from_id/to_id. The
+        // pre-existing source orphan (to_id pointing at a missing task) copies
+        // through and surfaces under PRAGMA foreign_key_check — but is tolerated
+        // because the SOURCE already had it (T11572 BLOCKER 2).
+        if (opts.withPreExistingSourceOrphan) {
+            db.exec(`CREATE TABLE "tasks_task_relations" (
+          id INTEGER PRIMARY KEY,
+          from_id TEXT REFERENCES "tasks_tasks"(id),
+          to_id TEXT REFERENCES "tasks_tasks"(id),
+          kind TEXT
+        )`);
+        }
+        // brain_decisions: consolidated home for the FTS5 content table. The derived
+        // FTS shadow tables + _conduit_meta have NO target — they are skipped, not
+        // migrated (T11572 BLOCKER 1).
+        if (opts.withDerivedAndInternalTables) {
+            db.exec(`CREATE TABLE "brain_decisions" (id INTEGER PRIMARY KEY, decision TEXT, rationale TEXT)`);
+        }
+    }
+    finally {
+        db.close();
+    }
+    // Empty global DB (the representative set keeps everything project-scoped).
+    new DatabaseSync(globalPath).close();
+}
+/**
+ * Materialise the full representative fixture: two legacy source DBs and the
+ * consolidated target DBs with production-grade CHECK/GLOB/FK constraints.
+ *
+ * @param dir  - Directory the fixture files are written into. Must already exist.
+ * @param opts - Optional T11572 hazard injection (FTS5/meta derived tables +
+ *   pre-existing source FK orphan). Omitting it preserves the original
+ *   zero-loss base fixture exactly.
+ * @returns Absolute paths of every fixture artifact.
+ *
+ * @task T11551 (DHQ-045 · AC3)
+ * @task T11572 (parity-gate hazards — FTS5/meta exclusion + source-orphan tolerance)
+ */
+export function buildRepresentativeFixture(dir, opts = {}) {
+    const { join } = _require('node:path');
+    const tasksDbPath = join(dir, 'tasks.db');
+    const brainDbPath = join(dir, 'brain.db');
+    const projectDbPath = join(dir, 'cleo-project.db');
+    const globalDbPath = join(dir, 'cleo-global.db');
+    buildTasksSource(tasksDbPath, opts);
+    buildBrainSource(brainDbPath, opts);
+    buildTargetSchema(projectDbPath, globalDbPath, opts);
+    return { tasksDbPath, brainDbPath, projectDbPath, globalDbPath };
+}
+//# sourceMappingURL=representative-fixture.js.map

package/dist/store/exodus/__fixtures__/representative-fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"representative-fixture.js","sourceRoot":"","sources":["../../../../src/store/exodus/__fixtures__/representative-fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,MAAM,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,aAAa,CAK9C,CAAC;AAEF,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,+CAA+C,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW,EAAE,EAAE;IACf,4BAA4B,EAAE,EAAE;IAChC,iBAAiB,EAAE,EAAE;IACrB,kBAAkB,EAAE,EAAE;CACd,CAAC;AA8BX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,uEAAuE;IACvE,eAAe,EAAE,EAAE;IACnB,iEAAiE;IACjE,oBAAoB,EAAE,CAAC;CACf,CAAC;AAEX;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAqC,EAAE;IAC7E,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,iFAAiF;QACjF,EAAE,CAAC,IAAI,CACL;;;;;QAKE,CACH,CAAC;QACF,kEAAkE;QAClE,KAAK,IAAI,CAAC,GAAG,qBAAqB,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9C,4DAA4D;YAC5D,MAAM,EAAE,GAAG,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC;YACxC,EAAE,CAAC,IAAI,CAAC,iCAAiC,CAAC,YAAY,CAAC,MAAM,MAAM,KAAK,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,qEAAqE;QACrE,EAAE,CAAC,IAAI,CACL,iGAAiG,CAClG,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC5F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7E,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,mDAAmD;YACnD,MAAM,GAAG,GAAG,aAAa,GAAG,CAAC,CAAC;YAC9B,EAAE,CAAC,IAAI,CAAC,gDAAgD,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,wDAAwD;QACxD,EAAE,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;YAClE,EAAE,CAAC,IAAI,CAAC,qCAAqC,CAAC,MAAM,UAAU,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7F,CAAC;QAED,iFAAiF;QACjF,6EAA6E;QAC7E,8EAA8E;QAC9E,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACrC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACrC,EAAE,CAAC,IAAI,CACL;;;;;UAKE,CACH,CAAC;YACF,8CAA8C;YAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,EAAE,CAAC,IAAI,CAAC,wCAAwC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACzF,CAAC;YACD,mEAAmE;YACnE,EAAE,CAAC,IAAI,CACL,+FAA+F,CAChG,CAAC;YACF,EAAE,CAAC,IAAI,CACL,+FAA+F,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAqC,EAAE;IAC7E,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,wEAAwE;QACxE,oDAAoD;QACpD,EAAE,CAAC,IAAI,CACL,2FAA2F,CAC5F,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAC1F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;YACnE,MAAM,EAAE,GAAG,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC;YACxC,EAAE,CAAC,IAAI,CACL,4CAA4C,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CACtF,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,yEAAyE;QACzE,+CAA+C;QAC/C,IAAI,IAAI,CAAC,4BAA4B,EAAE,CAAC;YACtC,4DAA4D;YAC5D,EAAE,CAAC,IAAI,CACL,wFAAwF,CACzF,CAAC;YACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,4BAA4B,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvE,EAAE,CAAC,IAAI,CAAC,yCAAyC,CAAC,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC5F,CAAC;YACD,4EAA4E;YAC5E,iEAAiE;YACjE,EAAE,CAAC,IAAI,CACL,2HAA2H,CAC5H,CAAC;YACF,EAAE,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;YACtF,0EAA0E;YAC1E,EAAE,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAC3E,EAAE,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YACtE,EAAE,CAAC,IAAI,CACL,yFAAyF,CAC1F,CAAC;YACF,EAAE,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,iBAAiB,CACxB,WAAmB,EACnB,UAAkB,EAClB,OAAqC,EAAE;IAEvC,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,oEAAoE;QACpE,EAAE,CAAC,IAAI,CACL;;;;2EAIqE,QAAQ;QAC3E,CACH,CAAC;QACF,yEAAyE;QACzE,EAAE,CAAC,IAAI,CACL;;;2EAGqE,QAAQ;QAC3E,CACH,CAAC;QACF,+EAA+E;QAC/E,6EAA6E;QAC7E,qEAAqE;QACrE,EAAE,CAAC,IAAI,CACL;;;QAGE,CACH,CAAC;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,EAAE,CAAC,IAAI,CACL;;;;QAIE,CACH,CAAC;QAEF,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,wDAAwD;QACxD,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACrC,EAAE,CAAC,IAAI,CACL;;;;;UAKE,CACH,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,2EAA2E;QAC3E,+BAA+B;QAC/B,IAAI,IAAI,CAAC,4BAA4B,EAAE,CAAC;YACtC,EAAE,CAAC,IAAI,CACL,wFAAwF,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IACD,4EAA4E;IAC5E,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAW,EACX,OAAqC,EAAE;IAOvC,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,WAAW,CAA+B,CAAC;IACrE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAEjD,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACpC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACpC,iBAAiB,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IAErD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACnE,CAAC"}

package/dist/store/exodus/index.d.ts

@@ -8,9 +8,11 @@
  * @task T11248 (E5 · SG-DB-SUBSTRATE-V2)
  * @saga T11242
  */
-export { runExodusMigrate } from './migrate.js';
+export { clearExodusJournal, runExodusMigrate } from './migrate.js';
 export { buildExodusPlan, deriveStagingDirName, sourcesPresent } from './plan.js';
 export { runExodusStatus } from './status.js';
+export { isDerivedOrInternalTable, resolveConsolidatedTableName, reverseLookup, type TableNameResolution, } from './table-name-map.js';
 export { EXODUS_TARGET_SCHEMA_VERSION, type ExodusJournal, type ExodusMigrateResult, type ExodusPlan, type ExodusScope, type ExodusStatusResult, type ExodusVerifyResult, type JournalTableEntry, type LegacyDbDescriptor, type TableCopyResult, type TableMigrationStatus, type VerifyTableResult, } from './types.js';
 export { runExodusVerify } from './verify.js';
+export { verifyMigration } from './verify-migration.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/store/exodus/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,4BAA4B,EAC5B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,EACb,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/store/exodus/index.js

@@ -8,9 +8,11 @@
  * @task T11248 (E5 · SG-DB-SUBSTRATE-V2)
  * @saga T11242
  */
-export { runExodusMigrate } from './migrate.js';
+export { clearExodusJournal, runExodusMigrate } from './migrate.js';
 export { buildExodusPlan, deriveStagingDirName, sourcesPresent } from './plan.js';
 export { runExodusStatus } from './status.js';
+export { isDerivedOrInternalTable, resolveConsolidatedTableName, reverseLookup, } from './table-name-map.js';
 export { EXODUS_TARGET_SCHEMA_VERSION, } from './types.js';
 export { runExodusVerify } from './verify.js';
+export { verifyMigration } from './verify-migration.js';
 //# sourceMappingURL=index.js.map

package/dist/store/exodus/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,4BAA4B,GAY7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,GAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,GAY7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/store/exodus/migrate.d.ts

@@ -6,13 +6,92 @@
  *
  * - Source DBs are opened **read-only** via `openCleoDbSnapshot` (AC4).
  * - Source files are backed up to the staging dir before any writes (AC5).
- * - Import is wrapped in `BEGIN … COMMIT` per scope; partial failure leaves
+ * - Import is wrapped in `BEGIN … COMMIT` per source; partial failure leaves
  *   the target DB untouched (AC6).
  * - Idempotency keys are propagated where the source row has them; generated
  *   where it does not (AC7).
  * - The staging journal is written atomically before each table copy so a
  *   crash can be resumed (AC5).
  *
+ * ## Type coercion — epoch INTEGER → ISO-8601 TEXT (ROOT CAUSE 1 fix — T11546)
+ *
+ * Many legacy tables store timestamps as INTEGER epoch values (seconds or
+ * milliseconds). The consolidated schema declares these columns as `text` with
+ * a CHECK constraint: `CHECK ("col" IS NULL OR "col" GLOB '[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]*')`.
+ *
+ * When a source INTEGER value is inserted into a target TEXT+GLOB column, SQLite
+ * coerces the integer to its decimal string representation (e.g. `"1717200000"`),
+ * which fails the GLOB check. `INSERT OR IGNORE` then SILENTLY DROPS the entire
+ * row. Result: all conduit_messages, brain_observations, etc. → 0 rows copied
+ * while migrate reports `success: true, rowsCopied: 0`.
+ *
+ * Fix (two parts):
+ *   (a) Per-column value transform: `detectEpochToIsoColumns()` reads the target
+ *       table DDL from `sqlite_master` to identify columns with an ISO GLOB
+ *       CHECK constraint. For those columns, if the source type affinity is
+ *       INTEGER, the SELECT expression applies `strftime('%Y-%m-%dT%H:%M:%fZ',
+ *       col, 'unixepoch')` (seconds) or the `/1000.0` ms variant depending on
+ *       the per-source/table heuristic.
+ *   (b) No-swallow assertion: after the bulk INSERT OR IGNORE, the actual
+ *       `changes` count is compared against the source row count. Any shortfall
+ *       is surfaced as a hard table-level error (not a silent success).
+ *       PK/UNIQUE conflicts on resume are tolerated (they are expected and safe
+ *       to ignore); unexpected shortfalls are flagged with a detailed error.
+ *
+ * ## ATTACH-once-per-source design (P0 fix — T11531)
+ *
+ * Each legacy source DB is ATTACHed to the target handle ONCE using a unique
+ * per-source alias, all tables from that source are copied under the single
+ * attachment, and then the alias is DETACHed. The ATTACH and DETACH are
+ * performed **outside** the BEGIN/COMMIT transaction block because SQLite
+ * forbids DETACH inside an active multi-statement transaction. The INSERT
+ * statements themselves are issued inside the transaction for atomicity (AC6).
+ *
+ * Prior implementation called ATTACH/DETACH per-table inside an open
+ * transaction — DETACH silently failed (SQLite restriction), the alias stayed
+ * attached, and every subsequent table for the same source threw
+ * "database _exodus_src_ is already in use", causing ~80 % data loss.
+ *
+ * ## FK-defer bulk copy (ROOT CAUSE 1 fix — T11533)
+ *
+ * Legacy tasks.db has self-referential FKs (`tasks.parent_id → tasks.id`),
+ * cross-table FKs, and ~18 tables with FK relationships. When FK enforcement
+ * is ON and tables are copied in arbitrary order (children before parents),
+ * each child INSERT fails with FOREIGN KEY constraint error (SQLite errcode 787)
+ * and the table is silently skipped — causing ~114K rows of data loss.
+ *
+ * Fix: set `PRAGMA foreign_keys = OFF` on the target connection before any
+ * bulk INSERT, then after all tables are committed run `PRAGMA foreign_key_check`
+ * to validate referential integrity. Genuine orphan rows surface as verify
+ * failures; child-before-parent ordering artifacts are NOT dropped.
+ * `PRAGMA foreign_keys = ON` is restored after the check.
+ *
+ * ## Name-mapping (ROOT CAUSE 1 fix — T11532)
+ *
+ * Legacy source DBs use UNPREFIXED table names (`tasks`, `messages`, `skills`,
+ * …) while the consolidated `cleo.db` uses DOMAIN-PREFIXED names
+ * (`tasks_tasks`, `conduit_messages`, `skills_skills`, …). The
+ * `resolveConsolidatedTableName()` function from `table-name-map.ts` performs
+ * the deterministic legacy→consolidated mapping before every copy. Tables with
+ * no consolidated home emit an explicit WARN journal entry rather than being
+ * silently discarded.
+ *
+ * ## Column-drift tolerance (ROOT CAUSE 2 fix — T11532, hardened T11533)
+ *
+ * When the source and target schemas differ (consolidated schema added/changed
+ * columns vs legacy), the copy uses the INTERSECTION of source and target
+ * column names. New target-only columns take their schema defaults; old
+ * source-only columns are dropped. This is implemented by introspecting both
+ * schemas via `PRAGMA table_info` and building an explicit column list.
+ *
+ * **NOT NULL / no-default hazard (T11533)**: target-only NOT NULL columns
+ * WITHOUT a schema default caused `INSERT OR IGNORE` to silently drop rows
+ * whose source value was NULL for that column (constraint violation → IGNORE).
+ * The fix: for each intersection column that is NOT NULL in the target AND
+ * has no `dflt_value`, the SELECT clause wraps the source reference in
+ * `COALESCE(src_col, type_default)` so no row is silently dropped.
+ * A type_default of `''` is used for TEXT affinity and `0` for numeric.
+ *
  * ## Advisory file lock (AC4)
  *
  * The source DB files are opened read-only via `openCleoDbSnapshot` which
@@ -23,9 +102,48 @@
  * an in-progress exodus and refuse to write.
  *
  * @task T11248 (E5 · SG-DB-SUBSTRATE-V2)
+ * @task T11531 (P0 attach-leak fix)
+ * @task T11532 (P0 name-mapping + column-drift + verify-rowid fix)
+ * @task T11533 (P0 FK-defer + NOT NULL coalesce + signaldock-global map + nexus hash fix)
+ * @task T11547 (P0 enum normalization — 7,421 rows recovered)
+ * @task T11548 (P0 final enum coverage — 285 remaining rows zero-loss)
+ * @task T11549 (P0 zero-loss final mile — brain_decisions enums + seconds-epoch coercion +
+ *               agent_credentials/brain_release_links tables)
  * @saga T11242
  */
 import type { ExodusMigrateResult, ExodusPlan } from './types.js';
+/**
+ * Invalidate the migrate journal after an aborted/rolled-back migration so a
+ * post-abort retry RE-COPIES every table from scratch (T11572).
+ *
+ * ## Why this is required for retry correctness
+ *
+ * `runExodusMigrate` is resumable (AC5): after each table copy it writes a
+ * journal entry with `status: 'done'`, and a subsequent run SKIPS any table
+ * already marked `done`. That resume optimisation is correct only while the
+ * consolidated rows it copied still EXIST. When the parity gate aborts, the
+ * exodus-on-open hook truncates the consolidated tables back to EMPTY
+ * (`rollbackConsolidatedToEmpty`) — but the on-disk journal still says every
+ * table is `done`. The next open therefore re-triggers (consolidated empty),
+ * runs `runExodusMigrate` again, finds every table `done` in the journal, copies
+ * NOTHING, re-verifies the still-empty target, and re-aborts — a permanent loop
+ * that pays the full migrate+verify cost on every open.
+ *
+ * Deleting the journal file forces `runExodusMigrate` to `initJournal()` afresh,
+ * so the retry actually re-copies. Idempotent and best-effort: a missing journal
+ * (or a missing staging dir) is a no-op. The staging backups are intentionally
+ * LEFT in place (they are the legacy source-of-truth snapshots — harmless to
+ * keep, valuable for forensics); only the progress journal is cleared.
+ *
+ * @param stagingDir - The staging directory whose `exodus-journal.json` to clear.
+ * @returns `true` if a journal file was removed, `false` if there was nothing to
+ *   remove.
+ *
+ * @task T11572 (abort/rollback must invalidate journal so retry re-copies)
+ * @epic T11249 (E6)
+ * @saga T11242
+ */
+export declare function clearExodusJournal(stagingDir: string): boolean;
 /**
  * Run the exodus migration.
  *
@@ -36,6 +154,7 @@ import type { ExodusMigrateResult, ExodusPlan } from './types.js';
  * @returns {@link ExodusMigrateResult}
  *
  * @task T11248 (AC4, AC5, AC6, AC7, AC9)
+ * @task T11531 (P0 attach-leak fix)
  */
 export declare function runExodusMigrate(plan: ExodusPlan, forceCrossVersion?: boolean, onProgress?: (msg: string) => void): Promise<ExodusMigrateResult>;
 //# sourceMappingURL=migrate.d.ts.map

package/dist/store/exodus/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAiBH,OAAO,KAAK,EAEV,mBAAmB,EACnB,UAAU,EAKX,MAAM,YAAY,CAAC;AA+MpB;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,UAAU,EAChB,iBAAiB,UAAQ,EACzB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAuI9B"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AAkBH,OAAO,KAAK,EAEV,mBAAmB,EACnB,UAAU,EAMX,MAAM,YAAY,CAAC;AAiEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAiB9D;AAs3BD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,UAAU,EAChB,iBAAiB,UAAQ,EACzB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA0I9B"}