@cleocode/core 2026.6.10 → 2026.6.12

package/migrations/drizzle-cleo-project/20260606000000_t11884-restore-prefixed-task-triggers/migration.sql

@@ -0,0 +1,272 @@
+-- T11884 — Restore task-domain invariant + handoff triggers on the PREFIXED tables.
+--
+-- ==========================================================================
+-- Problem (latent bug exposed by the SG-DB-SUBSTRATE-V2 cutover)
+-- ==========================================================================
+-- The T11578 dual-scope cutover repointed the runtime drizzle symbols
+-- (`tasks`, `task_relations`, `task_acceptance_criteria`, session handoff, …)
+-- from the BARE un-prefixed tables onto the domain-prefixed tables
+-- (`tasks_tasks`, `tasks_task_relations`, …). But the 12 SQLite invariant /
+-- handoff triggers were authored ONLY on the bare tables (T877, T10572,
+-- T10638, T1609) and were never recreated on the prefixed tables — exodus
+-- copies rows with triggers absent on the target. Result: every task invariant
+-- has been SILENTLY UNENFORCED on the live write path (`tasks_tasks` has zero
+-- triggers), and the session-handoff `handoff_json` mirror is dead.
+--
+-- This migration recreates all 12 guards on the prefixed tables, with bodies
+-- rewritten to reference `tasks_tasks` / `tasks_sessions`. New trigger NAMES
+-- are used (prefixed) so they do NOT collide with the still-present legacy
+-- triggers; when the legacy bare tables are dropped (E5 of the cutover) their
+-- triggers drop with them and these remain the SSoT.
+--
+-- Invariants restored:
+--   - tasks_tasks.parent_id cannot introduce a containment cycle
+--   - tasks_tasks.parent_id obeys the saga->epic, epic->task|subtask,
+--     task->subtask type matrix (sagas/tasks are roots)
+--   - tasks_tasks status/pipeline_stage T877 invariant
+--   - tasks_task_relations is non-containment-only
+--   - tasks_task_acceptance_criteria child_task targets must be direct children
+--   - tasks_session_handoff_entries is write-once + mirrors handoff_json into
+--     tasks_sessions
+--
+-- Trigger messages keep the same stable error codes so CLI callers surface
+-- identical remediation regardless of which physical table fired.
+--
+-- @task T11884
+-- @epic T11883
+-- @saga T11242
+
+DROP TRIGGER IF EXISTS `tasks_tasks_parent_cycle_guard_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_tasks_parent_cycle_guard_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_tasks_parent_type_matrix_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_tasks_parent_type_matrix_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `trg_tasks_tasks_status_pipeline_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `trg_tasks_tasks_status_pipeline_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_task_relations_non_containment_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_task_relations_non_containment_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_task_acceptance_child_target_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_task_acceptance_child_target_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `trg_tasks_session_handoff_mirror`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `trg_tasks_session_handoff_no_update`;
+--> statement-breakpoint
+
+-- ---------------------------------------------------------------------------
+-- Parent-cycle guard (T10572) — tasks_tasks
+-- ---------------------------------------------------------------------------
+CREATE TRIGGER `tasks_tasks_parent_cycle_guard_insert`
+BEFORE INSERT ON `tasks_tasks`
+WHEN NEW.`parent_id` IS NOT NULL
+BEGIN
+  SELECT RAISE(ABORT, 'E_TASK_PARENT_CYCLE: tasks.parent_id cannot create a containment cycle')
+  WHERE EXISTS (
+    WITH RECURSIVE ancestors(`id`, `parent_id`) AS (
+      SELECT parent.`id`, parent.`parent_id`
+      FROM `tasks_tasks` parent
+      WHERE parent.`id` = NEW.`parent_id`
+      UNION ALL
+      SELECT next_parent.`id`, next_parent.`parent_id`
+      FROM `tasks_tasks` next_parent
+      JOIN ancestors ON next_parent.`id` = ancestors.`parent_id`
+      WHERE ancestors.`parent_id` IS NOT NULL
+    )
+    SELECT 1 FROM ancestors WHERE ancestors.`id` = NEW.`id`
+  );
+END;
+--> statement-breakpoint
+
+CREATE TRIGGER `tasks_tasks_parent_cycle_guard_update`
+BEFORE UPDATE OF `parent_id` ON `tasks_tasks`
+WHEN NEW.`parent_id` IS NOT NULL
+BEGIN
+  SELECT RAISE(ABORT, 'E_TASK_PARENT_CYCLE: tasks.parent_id cannot create a containment cycle')
+  WHERE EXISTS (
+    WITH RECURSIVE ancestors(`id`, `parent_id`) AS (
+      SELECT parent.`id`, parent.`parent_id`
+      FROM `tasks_tasks` parent
+      WHERE parent.`id` = NEW.`parent_id`
+      UNION ALL
+      SELECT next_parent.`id`, next_parent.`parent_id`
+      FROM `tasks_tasks` next_parent
+      JOIN ancestors ON next_parent.`id` = ancestors.`parent_id`
+      WHERE ancestors.`parent_id` IS NOT NULL
+    )
+    SELECT 1 FROM ancestors WHERE ancestors.`id` = NEW.`id`
+  );
+END;
+--> statement-breakpoint
+
+-- ---------------------------------------------------------------------------
+-- Parent type-matrix guard (T10638) — tasks_tasks
+-- ---------------------------------------------------------------------------
+CREATE TRIGGER `tasks_tasks_parent_type_matrix_insert`
+BEFORE INSERT ON `tasks_tasks`
+WHEN NEW.`parent_id` IS NOT NULL
+  AND NEW.`type` IS NOT NULL
+  AND EXISTS (SELECT 1 FROM `tasks_tasks` parent WHERE parent.`id` = NEW.`parent_id` AND parent.`type` IS NOT NULL)
+  AND NOT EXISTS (
+    SELECT 1
+    FROM `tasks_tasks` parent
+    WHERE parent.`id` = NEW.`parent_id`
+      AND (
+        (NEW.`type` = 'epic'  AND parent.`type` = 'saga')
+        OR (NEW.`type` = 'task'   AND parent.`type` = 'epic')
+        OR (NEW.`type` = 'subtask' AND parent.`type` IN ('epic', 'task'))
+      )
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'E_TASK_PARENT_TYPE_MATRIX: tasks.parent_id must follow saga->epic, epic->task|subtask, and task->subtask; sagas/tasks must be roots');
+END;
+--> statement-breakpoint
+
+CREATE TRIGGER `tasks_tasks_parent_type_matrix_update`
+BEFORE UPDATE OF `parent_id`, `type` ON `tasks_tasks`
+WHEN NEW.`parent_id` IS NOT NULL
+  AND NEW.`type` IS NOT NULL
+  AND EXISTS (SELECT 1 FROM `tasks_tasks` parent WHERE parent.`id` = NEW.`parent_id` AND parent.`type` IS NOT NULL)
+  AND NOT EXISTS (
+    SELECT 1
+    FROM `tasks_tasks` parent
+    WHERE parent.`id` = NEW.`parent_id`
+      AND (
+        (NEW.`type` = 'epic'  AND parent.`type` = 'saga')
+        OR (NEW.`type` = 'task'   AND parent.`type` = 'epic')
+        OR (NEW.`type` = 'subtask' AND parent.`type` IN ('epic', 'task'))
+      )
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'E_TASK_PARENT_TYPE_MATRIX: tasks.parent_id must follow saga->epic, epic->task|subtask, and task->subtask; sagas/tasks must be roots');
+END;
+--> statement-breakpoint
+
+-- ---------------------------------------------------------------------------
+-- Status / pipeline_stage invariant (T877) — tasks_tasks
+-- ---------------------------------------------------------------------------
+CREATE TRIGGER `trg_tasks_tasks_status_pipeline_insert`
+BEFORE INSERT ON `tasks_tasks`
+FOR EACH ROW
+WHEN (NEW.`status` = 'done'      AND (NEW.`pipeline_stage` IS NULL OR NEW.`pipeline_stage` NOT IN ('contribution','cancelled')))
+  OR (NEW.`status` = 'cancelled' AND (NEW.`pipeline_stage` IS NULL OR NEW.`pipeline_stage` != 'cancelled'))
+BEGIN
+  SELECT RAISE(ABORT, 'T877_INVARIANT_VIOLATION: status/pipeline_stage mismatch. status=done requires pipeline_stage IN (contribution,cancelled); status=cancelled requires pipeline_stage=cancelled.');
+END;
+--> statement-breakpoint
+
+CREATE TRIGGER `trg_tasks_tasks_status_pipeline_update`
+BEFORE UPDATE OF `status`, `pipeline_stage` ON `tasks_tasks`
+FOR EACH ROW
+WHEN (NEW.`status` = 'done'      AND (NEW.`pipeline_stage` IS NULL OR NEW.`pipeline_stage` NOT IN ('contribution','cancelled')))
+  OR (NEW.`status` = 'cancelled' AND (NEW.`pipeline_stage` IS NULL OR NEW.`pipeline_stage` != 'cancelled'))
+BEGIN
+  SELECT RAISE(ABORT, 'T877_INVARIANT_VIOLATION: status/pipeline_stage mismatch. status=done requires pipeline_stage IN (contribution,cancelled); status=cancelled requires pipeline_stage=cancelled.');
+END;
+--> statement-breakpoint
+
+-- ---------------------------------------------------------------------------
+-- Non-containment guard (T10572) — tasks_task_relations
+-- ---------------------------------------------------------------------------
+CREATE TRIGGER `tasks_task_relations_non_containment_insert`
+BEFORE INSERT ON `tasks_task_relations`
+WHEN EXISTS (
+  SELECT 1
+  FROM `tasks_tasks` child
+  WHERE child.`id` = NEW.`task_id`
+    AND child.`parent_id` = NEW.`related_to`
+) OR EXISTS (
+  SELECT 1
+  FROM `tasks_tasks` child
+  WHERE child.`id` = NEW.`related_to`
+    AND child.`parent_id` = NEW.`task_id`
+)
+BEGIN
+  SELECT RAISE(ABORT, 'E_TASK_RELATION_CONTAINMENT: task_relations is non-containment-only; use tasks.parent_id for parent/child edges');
+END;
+--> statement-breakpoint
+
+CREATE TRIGGER `tasks_task_relations_non_containment_update`
+BEFORE UPDATE OF `task_id`, `related_to` ON `tasks_task_relations`
+WHEN EXISTS (
+  SELECT 1
+  FROM `tasks_tasks` child
+  WHERE child.`id` = NEW.`task_id`
+    AND child.`parent_id` = NEW.`related_to`
+) OR EXISTS (
+  SELECT 1
+  FROM `tasks_tasks` child
+  WHERE child.`id` = NEW.`related_to`
+    AND child.`parent_id` = NEW.`task_id`
+)
+BEGIN
+  SELECT RAISE(ABORT, 'E_TASK_RELATION_CONTAINMENT: task_relations is non-containment-only; use tasks.parent_id for parent/child edges');
+END;
+--> statement-breakpoint
+
+-- ---------------------------------------------------------------------------
+-- Acceptance child_target containment guard (T10572) — tasks_task_acceptance_criteria
+-- ---------------------------------------------------------------------------
+CREATE TRIGGER `tasks_task_acceptance_child_target_insert`
+BEFORE INSERT ON `tasks_task_acceptance_criteria`
+WHEN NEW.`target_task_id` IS NOT NULL
+  AND (
+    NEW.`kind` <> 'child_task'
+    OR NOT EXISTS (
+      SELECT 1
+      FROM `tasks_tasks` child
+      WHERE child.`id` = NEW.`target_task_id`
+        AND child.`parent_id` = NEW.`task_id`
+    )
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'E_CHILD_TASK_TARGET_CONTAINMENT: child_task acceptance target_task_id must be a direct child of task_id; non-child_task criteria must not set target_task_id');
+END;
+--> statement-breakpoint
+
+CREATE TRIGGER `tasks_task_acceptance_child_target_update`
+BEFORE UPDATE OF `task_id`, `kind`, `target_task_id` ON `tasks_task_acceptance_criteria`
+WHEN NEW.`target_task_id` IS NOT NULL
+  AND (
+    NEW.`kind` <> 'child_task'
+    OR NOT EXISTS (
+      SELECT 1
+      FROM `tasks_tasks` child
+      WHERE child.`id` = NEW.`target_task_id`
+        AND child.`parent_id` = NEW.`task_id`
+    )
+  )
+BEGIN
+  SELECT RAISE(ABORT, 'E_CHILD_TASK_TARGET_CONTAINMENT: child_task acceptance target_task_id must be a direct child of task_id; non-child_task criteria must not set target_task_id');
+END;
+--> statement-breakpoint
+
+-- ---------------------------------------------------------------------------
+-- Session-handoff write-once + mirror (T1609) — tasks_session_handoff_entries
+-- ---------------------------------------------------------------------------
+CREATE TRIGGER `trg_tasks_session_handoff_mirror`
+AFTER INSERT ON `tasks_session_handoff_entries`
+FOR EACH ROW
+BEGIN
+  UPDATE `tasks_sessions`
+     SET `handoff_json` = NEW.handoff_json
+   WHERE `id` = NEW.session_id;
+END;
+--> statement-breakpoint
+
+CREATE TRIGGER `trg_tasks_session_handoff_no_update`
+BEFORE UPDATE ON `tasks_session_handoff_entries`
+FOR EACH ROW
+BEGIN
+  SELECT RAISE(
+    ABORT,
+    'T1609_HANDOFF_IMMUTABLE: session_handoff_entries rows are write-once. Use persistHandoff() exactly once per session.'
+  );
+END;

package/migrations/drizzle-cleo-project/20260606000000_t11884-restore-prefixed-task-triggers/revert.sql

@@ -0,0 +1,29 @@
+-- Revert T11884 — drop the prefixed-table invariant + handoff triggers.
+-- The legacy bare-table triggers are untouched (they remain the active guards
+-- until the E5 cutover drops the bare tables).
+--
+-- @task T11884
+
+DROP TRIGGER IF EXISTS `tasks_tasks_parent_cycle_guard_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_tasks_parent_cycle_guard_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_tasks_parent_type_matrix_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_tasks_parent_type_matrix_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `trg_tasks_tasks_status_pipeline_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `trg_tasks_tasks_status_pipeline_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_task_relations_non_containment_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_task_relations_non_containment_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_task_acceptance_child_target_insert`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `tasks_task_acceptance_child_target_update`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `trg_tasks_session_handoff_mirror`;
+--> statement-breakpoint
+DROP TRIGGER IF EXISTS `trg_tasks_session_handoff_no_update`;

package/migrations/drizzle-cleo-project/20260606000100_t11883-tasks-releases-version-unique/migration.sql

@@ -0,0 +1,21 @@
+-- T11883 (E2) — Repair the missing UNIQUE index on tasks_releases.version.
+--
+-- The drizzle schema declares `version: text('version').notNull().unique()`
+-- (packages/core/src/store/schema/cleo-project/provenance-rest.ts:201), but the
+-- T11363 consolidation migration that built `tasks_releases` emitted only a
+-- NON-unique `idx_tasks_releases_version` — the UNIQUE was dropped during the
+-- exodus build. `cleo release plan` upserts with
+-- `onConflictDoUpdate({ target: releases.version })`, which REQUIRES a physical
+-- unique index on `version`; once the provenance `releases` symbol is rebound to
+-- `tasks_releases` (E3) the upsert would otherwise throw "ON CONFLICT clause
+-- does not match any PRIMARY KEY or UNIQUE constraint". This is a pure
+-- drift-repair (schema↔physical), so it ships as a custom migration rather than
+-- a generated one (generate has no committed snapshot to diff an index against).
+--
+-- Safe: the live corpus has 0 duplicate versions (74 rows), and fresh/test DBs
+-- are empty. IF NOT EXISTS keeps it idempotent under the reconciler's re-probe.
+--
+-- @task T11883
+-- @saga T11242
+
+CREATE UNIQUE INDEX IF NOT EXISTS `uq_tasks_releases_version` ON `tasks_releases` (`version`);

package/migrations/drizzle-cleo-project/20260606000100_t11883-tasks-releases-version-unique/revert.sql

@@ -0,0 +1,4 @@
+-- Revert T11883 (E2) — drop the repaired UNIQUE index on tasks_releases.version.
+-- @task T11883
+
+DROP INDEX IF EXISTS `uq_tasks_releases_version`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/core",
-  "version": "2026.6.10",
+  "version": "2026.6.12",
   "description": "CLEO core business logic kernel — tasks, sessions, memory, orchestration, lifecycle, with bundled SQLite store",
   "type": "module",
   "main": "./dist/index.js",
@@ -429,16 +429,16 @@
     "write-file-atomic": "^7.0.1",
     "yaml": "^2.8.3",
     "zod": "^4.3.6",
-    "@cleocode/adapters": "2026.6.10",
-    "@cleocode/agents": "2026.6.10",
-    "@cleocode/contracts": "2026.6.10",
-    "@cleocode/git-shim": "2026.6.10",
-    "@cleocode/caamp": "2026.6.10",
-    "@cleocode/lafs": "2026.6.10",
-    "@cleocode/nexus": "2026.6.10",
-    "@cleocode/paths": "2026.6.10",
-    "@cleocode/skills": "2026.6.10",
-    "@cleocode/worktree": "2026.6.10"
+    "@cleocode/caamp": "2026.6.12",
+    "@cleocode/agents": "2026.6.12",
+    "@cleocode/contracts": "2026.6.12",
+    "@cleocode/adapters": "2026.6.12",
+    "@cleocode/git-shim": "2026.6.12",
+    "@cleocode/lafs": "2026.6.12",
+    "@cleocode/nexus": "2026.6.12",
+    "@cleocode/worktree": "2026.6.12",
+    "@cleocode/paths": "2026.6.12",
+    "@cleocode/skills": "2026.6.12"
   },
   "engines": {
     "node": ">=24.16.0"
@@ -472,7 +472,7 @@
   },
   "optionalDependencies": {
     "llmtxt": "^2026.5.15",
-    "@cleocode/studio": "^2026.6.10"
+    "@cleocode/studio": "^2026.6.12"
   },
   "scripts": {
     "build": "tsc",

package/dist/release/provenance-fk.d.ts

@@ -1,74 +0,0 @@
-/**
- * Post-cutover provenance `task_id` / `epic_id` FK reconciliation (DHQ-051).
- *
- * Shared between `cleo release reconcile` ({@link releaseReconcileV2}) and
- * `cleo release plan` ({@link releasePlan} → `upsertReleasesRow`). Both verbs
- * write provenance rows (`task_commits`, `pr_tasks`, `releases`,
- * `release_changes`) whose `task_id` / `epic_id` foreign keys reference the
- * BARE `tasks` table — which is empty on a consolidated dual-scope `cleo.db`
- * after the T11578 cutover (runtime task data moved to the prefixed
- * `tasks_tasks` table). A row inserted with an `epicId` / `taskId` that exists
- * only in `tasks_tasks` violates the FK at INSERT time, aborting the verb.
- *
- * This module is the single source of truth for the FK-ordered parent backfill
- * that makes those FKs satisfiable. `reconcile.ts` re-exports both symbols so
- * its public surface is unchanged.
- *
- * @task T11659 — reconcile slice (original)
- * @task T11818 — plan/open slice (DRY hoist)
- * @epic T11466
- */
-import type { DatabaseSync } from '../store/sqlite.js';
-/** Result of resolving + reconciling the provenance `task_id` FK parent table. */
-export interface FkParentTaskResolution {
-    /** Physical table the provenance `task_id` FK references, or null if absent. */
-    parentTable: string | null;
-    /**
-     * Task IDs the FK can now resolve (FK parent rows present after any
-     * FK-ordered shim backfill). A `task_id` reference to an id in this set is
-     * safe to INSERT under strict FK enforcement.
-     */
-    resolvableIds: Set<string>;
-}
-/**
- * Make the provenance `task_id` foreign keys satisfiable on a consolidated
- * `cleo.db` by inserting any missing FK-parent rows in FK order (parent-before
- * -child), then returning the set of IDs the FK can resolve.
- *
- * ## Background (DHQ-051 · T11659 / T11818 — same class as DHQ-045)
- *
- * After the dual-scope `cleo.db` cutover (T11578) the runtime task store moved
- * from the bare `tasks` table to the prefixed `tasks_tasks` table. The drizzle
- * `schema.tasks` symbol is shadowed at the barrel (`tasks-schema.ts`) onto
- * `tasks_tasks`, so token-validity probes read the populated prefixed table.
- * BUT the provenance tables (`task_commits`, `pr_tasks`, `releases`,
- * `release_changes`) predate the cutover — their `task_id` / `epic_id` FKs
- * still reference the BARE `tasks` table, which is empty on a consolidated
- * `cleo.db`. A token validated against `tasks_tasks` therefore passes the
- * legacy gate yet violates the FK at INSERT time, aborting the whole verb with
- * `E_PROVENANCE_FAILED` (reconcile) or `E_INTERNAL` (plan).
- *
- * ## Strategy — FK-ordered parent backfill (Strategy 1)
- *
- * For every task referenced by this release we ensure a row exists in the FK
- * parent table BEFORE the child provenance rows are written. The parent table
- * is discovered dynamically via `PRAGMA foreign_key_list('task_commits')` (so
- * the logic tracks whatever the live schema enforces — including a future
- * schema that repoints the FK at `tasks_tasks`, where this becomes a no-op).
- * Missing parent rows are copied from the runtime `tasks_tasks` store via
- * `INSERT OR IGNORE … SELECT` of only the NOT NULL columns, so the copied rows
- * satisfy the parent table's own CHECK/NOT NULL constraints. Tasks that exist
- * in neither table remain unresolvable and are skipped-with-warn / NULLed by
- * the callers (the row, never the whole verb).
- *
- * Idempotent: `INSERT OR IGNORE` never duplicates and never overwrites an
- * existing parent row. Callers run it inside their write transaction so a later
- * failure rolls the shim rows back too.
- *
- * @param nativeDb - The consolidated `cleo.db` native handle.
- * @param referencedIds - Every task id this verb may reference (commit tokens,
- *   PR tokens, plan tasks, epic).
- * @returns The FK parent table name + the IDs it can now resolve.
- */
-export declare function ensureProvenanceTaskFkParents(nativeDb: DatabaseSync, referencedIds: ReadonlySet<string>): FkParentTaskResolution;
-//# sourceMappingURL=provenance-fk.d.ts.map

package/dist/release/provenance-fk.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provenance-fk.d.ts","sourceRoot":"","sources":["../../src/release/provenance-fk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIvD,kFAAkF;AAClF,MAAM,WAAW,sBAAsB;IACrC,gFAAgF;IAChF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,GACjC,sBAAsB,CAmExB"}

package/dist/release/provenance-fk.js

@@ -1,122 +0,0 @@
-/**
- * Post-cutover provenance `task_id` / `epic_id` FK reconciliation (DHQ-051).
- *
- * Shared between `cleo release reconcile` ({@link releaseReconcileV2}) and
- * `cleo release plan` ({@link releasePlan} → `upsertReleasesRow`). Both verbs
- * write provenance rows (`task_commits`, `pr_tasks`, `releases`,
- * `release_changes`) whose `task_id` / `epic_id` foreign keys reference the
- * BARE `tasks` table — which is empty on a consolidated dual-scope `cleo.db`
- * after the T11578 cutover (runtime task data moved to the prefixed
- * `tasks_tasks` table). A row inserted with an `epicId` / `taskId` that exists
- * only in `tasks_tasks` violates the FK at INSERT time, aborting the verb.
- *
- * This module is the single source of truth for the FK-ordered parent backfill
- * that makes those FKs satisfiable. `reconcile.ts` re-exports both symbols so
- * its public surface is unchanged.
- *
- * @task T11659 — reconcile slice (original)
- * @task T11818 — plan/open slice (DRY hoist)
- * @epic T11466
- */
-import { getLogger } from '../logger.js';
-const log = getLogger('release:provenance-fk');
-/**
- * Make the provenance `task_id` foreign keys satisfiable on a consolidated
- * `cleo.db` by inserting any missing FK-parent rows in FK order (parent-before
- * -child), then returning the set of IDs the FK can resolve.
- *
- * ## Background (DHQ-051 · T11659 / T11818 — same class as DHQ-045)
- *
- * After the dual-scope `cleo.db` cutover (T11578) the runtime task store moved
- * from the bare `tasks` table to the prefixed `tasks_tasks` table. The drizzle
- * `schema.tasks` symbol is shadowed at the barrel (`tasks-schema.ts`) onto
- * `tasks_tasks`, so token-validity probes read the populated prefixed table.
- * BUT the provenance tables (`task_commits`, `pr_tasks`, `releases`,
- * `release_changes`) predate the cutover — their `task_id` / `epic_id` FKs
- * still reference the BARE `tasks` table, which is empty on a consolidated
- * `cleo.db`. A token validated against `tasks_tasks` therefore passes the
- * legacy gate yet violates the FK at INSERT time, aborting the whole verb with
- * `E_PROVENANCE_FAILED` (reconcile) or `E_INTERNAL` (plan).
- *
- * ## Strategy — FK-ordered parent backfill (Strategy 1)
- *
- * For every task referenced by this release we ensure a row exists in the FK
- * parent table BEFORE the child provenance rows are written. The parent table
- * is discovered dynamically via `PRAGMA foreign_key_list('task_commits')` (so
- * the logic tracks whatever the live schema enforces — including a future
- * schema that repoints the FK at `tasks_tasks`, where this becomes a no-op).
- * Missing parent rows are copied from the runtime `tasks_tasks` store via
- * `INSERT OR IGNORE … SELECT` of only the NOT NULL columns, so the copied rows
- * satisfy the parent table's own CHECK/NOT NULL constraints. Tasks that exist
- * in neither table remain unresolvable and are skipped-with-warn / NULLed by
- * the callers (the row, never the whole verb).
- *
- * Idempotent: `INSERT OR IGNORE` never duplicates and never overwrites an
- * existing parent row. Callers run it inside their write transaction so a later
- * failure rolls the shim rows back too.
- *
- * @param nativeDb - The consolidated `cleo.db` native handle.
- * @param referencedIds - Every task id this verb may reference (commit tokens,
- *   PR tokens, plan tasks, epic).
- * @returns The FK parent table name + the IDs it can now resolve.
- */
-export function ensureProvenanceTaskFkParents(nativeDb, referencedIds) {
-    // Discover the physical parent table the `task_commits.task_id` FK targets.
-    let parentTable = 'tasks';
-    try {
-        const fks = nativeDb.prepare(`PRAGMA foreign_key_list('task_commits')`).all();
-        const taskFk = fks.find((fk) => fk.from === 'task_id');
-        if (taskFk?.table)
-            parentTable = taskFk.table;
-    }
-    catch {
-        // PRAGMA unavailable (table absent / older sqlite) — keep the bare default.
-    }
-    const tableExists = (name) => nativeDb.prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name=?`).get(name) !=
-        null;
-    // Parent table absent entirely → nothing resolvable, nothing to backfill.
-    if (!tableExists(parentTable)) {
-        return { parentTable: null, resolvableIds: new Set() };
-    }
-    // FK-ordered shim backfill: copy any referenced task that lives in the
-    // runtime `tasks_tasks` store but is missing from the FK parent. Only when
-    // the parent is the bare legacy table AND the prefixed store exists (i.e. the
-    // post-cutover split-brain) — when the FK already points at `tasks_tasks`
-    // this is skipped and the parent is read as-is.
-    // Identifiers come from sqlite_master / the FK pragma (verified existing
-    // table names), never user input — safe to interpolate (node:sqlite exposes
-    // no bound-identifier form). All VALUES are bound parameters.
-    if (parentTable !== 'tasks_tasks' && tableExists('tasks_tasks') && referencedIds.size > 0) {
-        // `pipeline_stage` is copied alongside the NOT NULL columns so the bare
-        // `tasks` table's T877 invariant trigger (status='done' ⇒ pipeline_stage IN
-        // ('contribution','cancelled'); status='cancelled' ⇒ pipeline_stage=
-        // 'cancelled') is satisfied. A released epic is typically status='done', so
-        // omitting `pipeline_stage` would RAISE(ABORT) the shim copy and leave the
-        // epic unresolvable (DHQ-051 · T11818).
-        const insertShim = nativeDb.prepare(`INSERT OR IGNORE INTO "${parentTable}" (id, title, status, priority, role, scope, pipeline_stage)
-       SELECT id, title, status, priority, role, scope, pipeline_stage FROM tasks_tasks WHERE id = ?`);
-        for (const id of referencedIds) {
-            try {
-                insertShim.run(id);
-            }
-            catch (err) {
-                // A single shim copy that violates the parent's own constraints (e.g. a
-                // NOT NULL / CHECK the prefixed row does not satisfy) must NOT abort the
-                // whole verb. Leave the id unresolvable — the writers below
-                // skip-with-warn that one link (Strategy 3). SAVEPOINT-free: the failed
-                // statement is rolled back individually by SQLite, leaving the
-                // surrounding transaction intact.
-                log.warn({ taskId: id, parentTable, err: err instanceof Error ? err.message : String(err) }, 'provenance: FK-parent shim copy failed — task_id stays unresolvable, link will be skipped');
-            }
-        }
-    }
-    // Read back what the FK can now resolve.
-    const resolvableIds = new Set();
-    const rows = nativeDb.prepare(`SELECT id FROM "${parentTable}"`).all();
-    for (const r of rows) {
-        if (typeof r.id === 'string')
-            resolvableIds.add(r.id);
-    }
-    return { parentTable, resolvableIds };
-}
-//# sourceMappingURL=provenance-fk.js.map

package/dist/release/provenance-fk.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provenance-fk.js","sourceRoot":"","sources":["../../src/release/provenance-fk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,MAAM,GAAG,GAAG,SAAS,CAAC,uBAAuB,CAAC,CAAC;AAc/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAsB,EACtB,aAAkC;IAElC,4EAA4E;IAC5E,IAAI,WAAW,GAAG,OAAO,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,EAGzE,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,KAAK;YAAE,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE,CAC5C,QAAQ,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1F,IAAI,CAAC;IAEP,0EAA0E;IAC1E,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;IACjE,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,8EAA8E;IAC9E,0EAA0E;IAC1E,gDAAgD;IAChD,yEAAyE;IACzE,4EAA4E;IAC5E,8DAA8D;IAC9D,IAAI,WAAW,KAAK,aAAa,IAAI,WAAW,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC1F,wEAAwE;QACxE,4EAA4E;QAC5E,qEAAqE;QACrE,4EAA4E;QAC5E,2EAA2E;QAC3E,wCAAwC;QACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CACjC,0BAA0B,WAAW;qGAC0D,CAChG,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wEAAwE;gBACxE,yEAAyE;gBACzE,4DAA4D;gBAC5D,wEAAwE;gBACxE,+DAA+D;gBAC/D,kCAAkC;gBAClC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAClF,2FAA2F,CAC5F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,mBAAmB,WAAW,GAAG,CAAC,CAAC,GAAG,EAA4B,CAAC;IACjG,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;AACxC,CAAC"}