@cleocode/core 2026.6.13 → 2026.6.15

package/dist/store/schedule-schema.d.ts

@@ -0,0 +1,195 @@
+/**
+ * Drizzle ORM schema for the **cron / todo schedule** table (`schedules`) — the
+ * durable sink for recurring-task schedules registered by the `cron_schedule`
+ * agent tool (T11962 · under T11679 · M7 · epic T11456).
+ *
+ * One row per recurring schedule: a cron expression plus the task TEMPLATE
+ * (title / description) materialized on each fire, an `enabled` flag, and
+ * creation/update timestamps. The `cron_schedule` agent tool
+ * ({@link import('../tools/schedule-agent-tools.js')}) registers a row through the
+ * leased Gate-3 accessor ({@link import('./schedule-store.js')}) so it persists
+ * WITHOUT a running daemon (T11950 AC3); a future daemon scheduler consumes the
+ * SAME table as a separate reader (T11962 AC4).
+ *
+ * ## Pure runtime infrastructure (NOT the exodus target shape)
+ *
+ * Like `_writer_leases` (T11627), `pi_session_*` (T11899), and `selfimprove_dhq`
+ * (T11911), this table is co-located inside EACH scope's consolidated `cleo.db`
+ * (project + global) via the `drizzle-cleo-project` / `drizzle-cleo-global`
+ * migration sets — so the two lineages produce the SAME migration hash and the
+ * consolidated single-file journal converges across both
+ * (CONSOLIDATED_JOURNAL_LINEAGES cross-lineage guard, T11829). It is NOT part of
+ * the exodus target shape under `schema/cleo-project/`, so the consolidated
+ * schema-parity gate (T11364) does not re-derive its CHECK set — exactly the
+ * runtime-infrastructure precedent.
+ *
+ * ## E10 typing
+ *
+ * TEXT ISO-8601 timestamps (`created_at` / `updated_at`); a typed boolean
+ * (`enabled`, `integer({ mode: 'boolean' })` → CHECK IN (0,1)). No JSON columns —
+ * the task template is two plain TEXT columns (title + nullable description).
+ *
+ * @module
+ * @task T11962
+ * @epic T11679
+ * @see ./schedule-store.ts — the Gate-3 accessor over this table
+ * @see ./selfimprove-dhq-schema.ts — the runtime-infrastructure-table precedent this mirrors
+ * @see ../../migrations/drizzle-cleo-project — project migration (CREATE TABLE schedules)
+ * @see ../../migrations/drizzle-cleo-global — global migration (byte-identical, journal convergence)
+ */
+/**
+ * The physical name of the schedule table. Exported so the accessor and tests all
+ * reference one source of truth.
+ */
+export declare const SCHEDULES_TABLE: "schedules";
+/**
+ * `schedules` — one row per recurring (cron) task schedule.
+ *
+ * `cronExpr` is the recurrence (a standard 5-field cron expression); `title` /
+ * `description` are the task template materialized on each fire; `enabled` toggles
+ * whether the daemon scheduler (a separate consumer, AC4) should fire it. The row
+ * is written by the leased accessor ({@link import('./schedule-store.js')}) — the
+ * `cron_schedule` agent tool delegates to it daemon-OFF.
+ *
+ * @task T11962
+ */
+export declare const schedules: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "schedules";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "schedules";
+            dataType: "number int53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        scheduleId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "schedules";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        cronExpr: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "schedules";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        title: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "schedules";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        description: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "schedules";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        enabled: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "schedules";
+            dataType: "boolean";
+            data: boolean;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "schedules";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "schedules";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+    };
+    dialect: "sqlite";
+}>;
+/** Row type for `schedules` SELECT queries. */
+export type ScheduleRow = typeof schedules.$inferSelect;
+/** Row type for `schedules` INSERT operations. */
+export type NewScheduleRow = typeof schedules.$inferInsert;
+//# sourceMappingURL=schedule-schema.d.ts.map

package/dist/store/schedule-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-schema.d.ts","sourceRoot":"","sources":["../../src/store/schedule-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAKH;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAG,WAAoB,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6BrB,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,WAAW,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACxD,kDAAkD;AAClD,MAAM,MAAM,cAAc,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC"}

package/dist/store/schedule-schema.js

@@ -0,0 +1,84 @@
+/**
+ * Drizzle ORM schema for the **cron / todo schedule** table (`schedules`) — the
+ * durable sink for recurring-task schedules registered by the `cron_schedule`
+ * agent tool (T11962 · under T11679 · M7 · epic T11456).
+ *
+ * One row per recurring schedule: a cron expression plus the task TEMPLATE
+ * (title / description) materialized on each fire, an `enabled` flag, and
+ * creation/update timestamps. The `cron_schedule` agent tool
+ * ({@link import('../tools/schedule-agent-tools.js')}) registers a row through the
+ * leased Gate-3 accessor ({@link import('./schedule-store.js')}) so it persists
+ * WITHOUT a running daemon (T11950 AC3); a future daemon scheduler consumes the
+ * SAME table as a separate reader (T11962 AC4).
+ *
+ * ## Pure runtime infrastructure (NOT the exodus target shape)
+ *
+ * Like `_writer_leases` (T11627), `pi_session_*` (T11899), and `selfimprove_dhq`
+ * (T11911), this table is co-located inside EACH scope's consolidated `cleo.db`
+ * (project + global) via the `drizzle-cleo-project` / `drizzle-cleo-global`
+ * migration sets — so the two lineages produce the SAME migration hash and the
+ * consolidated single-file journal converges across both
+ * (CONSOLIDATED_JOURNAL_LINEAGES cross-lineage guard, T11829). It is NOT part of
+ * the exodus target shape under `schema/cleo-project/`, so the consolidated
+ * schema-parity gate (T11364) does not re-derive its CHECK set — exactly the
+ * runtime-infrastructure precedent.
+ *
+ * ## E10 typing
+ *
+ * TEXT ISO-8601 timestamps (`created_at` / `updated_at`); a typed boolean
+ * (`enabled`, `integer({ mode: 'boolean' })` → CHECK IN (0,1)). No JSON columns —
+ * the task template is two plain TEXT columns (title + nullable description).
+ *
+ * @module
+ * @task T11962
+ * @epic T11679
+ * @see ./schedule-store.ts — the Gate-3 accessor over this table
+ * @see ./selfimprove-dhq-schema.ts — the runtime-infrastructure-table precedent this mirrors
+ * @see ../../migrations/drizzle-cleo-project — project migration (CREATE TABLE schedules)
+ * @see ../../migrations/drizzle-cleo-global — global migration (byte-identical, journal convergence)
+ */
+import { sql } from 'drizzle-orm';
+import { index, integer, sqliteTable, text, unique } from 'drizzle-orm/sqlite-core';
+/**
+ * The physical name of the schedule table. Exported so the accessor and tests all
+ * reference one source of truth.
+ */
+export const SCHEDULES_TABLE = 'schedules';
+/**
+ * `schedules` — one row per recurring (cron) task schedule.
+ *
+ * `cronExpr` is the recurrence (a standard 5-field cron expression); `title` /
+ * `description` are the task template materialized on each fire; `enabled` toggles
+ * whether the daemon scheduler (a separate consumer, AC4) should fire it. The row
+ * is written by the leased accessor ({@link import('./schedule-store.js')}) — the
+ * `cron_schedule` agent tool delegates to it daemon-OFF.
+ *
+ * @task T11962
+ */
+export const schedules = sqliteTable(SCHEDULES_TABLE, {
+    /** Surrogate primary key (autoincrement via INTEGER PRIMARY KEY rowid alias). */
+    id: integer('id').primaryKey(),
+    /** Stable opaque schedule handle (`sched-<token>`) returned to the tool caller. */
+    scheduleId: text('schedule_id').notNull(),
+    /** The recurrence — a standard 5-field cron expression (e.g. `'0 9 * * 1'`). */
+    cronExpr: text('cron_expr').notNull(),
+    /** The title of the task created on each fire (the template). */
+    title: text('title').notNull(),
+    /** Optional description for the task created on each fire. */
+    description: text('description'),
+    /**
+     * Whether the daemon scheduler should fire this schedule. Typed boolean
+     * (CHECK IN (0,1)); defaults `true` so a freshly-registered schedule is live.
+     */
+    enabled: integer('enabled', { mode: 'boolean' }).notNull().default(true),
+    /** ISO-8601 UTC creation instant. Defaults to write time. */
+    createdAt: text('created_at').notNull().default(sql `(datetime('now'))`),
+    /** ISO-8601 UTC last-update instant. Defaults to write time; bumped on mutation. */
+    updatedAt: text('updated_at').notNull().default(sql `(datetime('now'))`),
+}, (table) => [
+    // `schedule_id` is the opaque handle the accessor looks up / removes by — unique.
+    unique('ux_schedules_schedule_id').on(table.scheduleId),
+    // Lookup index — the daemon scheduler enumerates enabled schedules.
+    index('ix_schedules_enabled').on(table.enabled),
+]);
+//# sourceMappingURL=schedule-schema.js.map

package/dist/store/schedule-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-schema.js","sourceRoot":"","sources":["../../src/store/schedule-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEpF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,WAAoB,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAClC,eAAe,EACf;IACE,iFAAiF;IACjF,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC9B,mFAAmF;IACnF,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,gFAAgF;IAChF,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,iEAAiE;IACjE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,8DAA8D;IAC9D,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAChC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxE,6DAA6D;IAC7D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,mBAAmB,CAAC;IACvE,oFAAoF;IACpF,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,mBAAmB,CAAC;CACxE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,kFAAkF;IAClF,MAAM,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;IACvD,oEAAoE;IACpE,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;CAChD,CACF,CAAC"}

package/dist/store/schedule-store.d.ts

@@ -0,0 +1,144 @@
+/**
+ * Store-layer accessor for the cron / todo schedule table (`schedules`) — T11962
+ * (under T11679 · M7 · epic T11456).
+ *
+ * This module is the ONLY place that touches the native `cleo.db` handle for
+ * schedule persistence. It lives INSIDE the store chokepoint
+ * (`packages/core/src/store/**`), the Gate-3 allowlist, so it may extract the
+ * native `DatabaseSync` that {@link openDualScopeDb} already holds (via drizzle's
+ * `$client`) and run prepared statements over it — exactly the established
+ * `selfimprove-dhq-store.ts` / `pi-session-store.ts` pattern. It NEVER calls
+ * `new DatabaseSync(` itself.
+ *
+ * The `cron_schedule` agent tool ({@link import('../tools/schedule-agent-tools.js')})
+ * sits OUTSIDE the chokepoint, so it must NOT open a raw handle; it calls
+ * {@link addSchedule} / {@link listSchedules} / {@link removeSchedule}. A single
+ * INSERT/DELETE is one atomic SQLite statement, so the accessor does not wrap them
+ * in a writer lease itself — daemon-OFF the chokepoint already serializes the
+ * single in-process writer; a future daemon scheduler (a separate reader, AC4)
+ * never writes through this path.
+ *
+ * Physical model (see the `t11962-schedules` migration):
+ *  - `schedules(id, schedule_id, cron_expr, title, description, enabled,
+ *    created_at, updated_at)` — one row per recurring schedule.
+ *  - `schedule_id` is a unique opaque handle (`sched-<token>`) returned to the
+ *    caller and used to remove a schedule.
+ *
+ * ## Never `.all()` an unbounded query
+ *
+ * {@link listSchedules} reads through `iterate()` with an explicit SQL `LIMIT`
+ * (capped, default {@link SCHEDULE_LIST_DEFAULT_LIMIT}), never `.all()` over the
+ * whole table — the established OOM-safe read pattern (cf.
+ * `exodus/verify-migration.ts`).
+ *
+ * @module
+ * @task T11962
+ * @epic T11679
+ * @see ./schedule-schema.ts — the drizzle table declaration (physical-name SSoT)
+ * @see ./selfimprove-dhq-store.ts — the Gate-3 native-handle accessor precedent this mirrors
+ * @see ../tools/schedule-agent-tools.ts — the `cron_schedule` tool that delegates here
+ */
+export { SCHEDULES_TABLE } from './schedule-schema.js';
+/** Default cap for {@link listSchedules} — bounds the read so it never OOMs. */
+export declare const SCHEDULE_LIST_DEFAULT_LIMIT: 500;
+/** Hard ceiling on a {@link listSchedules} request — a caller cannot exceed it. */
+export declare const SCHEDULE_LIST_MAX_LIMIT: 5000;
+/** A persisted schedule row, decoded from `schedules`. */
+export interface ScheduleRecord {
+    /** Stable opaque schedule handle (`sched-<token>`). */
+    readonly scheduleId: string;
+    /** The recurrence — a standard 5-field cron expression. */
+    readonly cronExpr: string;
+    /** The title of the task created on each fire (the template). */
+    readonly title: string;
+    /** Optional description for the task created on each fire. */
+    readonly description: string | null;
+    /** Whether the daemon scheduler should fire this schedule. */
+    readonly enabled: boolean;
+    /** ISO-8601 UTC creation instant. */
+    readonly createdAt: string;
+    /** ISO-8601 UTC last-update instant. */
+    readonly updatedAt: string;
+}
+/** Fields required to register one schedule via {@link addSchedule}. */
+export interface AddScheduleParams {
+    /** The recurrence — a standard 5-field cron expression (e.g. `'0 9 * * 1'`). */
+    readonly cronExpr: string;
+    /** The title of the task to create on each fire. */
+    readonly title: string;
+    /** Optional description for the task created on each fire. */
+    readonly description?: string;
+}
+/** Narrow shape of the native handle methods this accessor uses. */
+type NativeRunResult = {
+    changes: number | bigint;
+    lastInsertRowid: number | bigint;
+};
+interface NativeStatement {
+    run(...params: ReadonlyArray<string | number | null>): NativeRunResult;
+    get(...params: ReadonlyArray<string | number | null>): Record<string, unknown> | undefined;
+    iterate(...params: ReadonlyArray<string | number | null>): IterableIterator<Record<string, unknown>>;
+}
+interface NativeHandle {
+    prepare(sql: string): NativeStatement;
+}
+/**
+ * Extract the native `DatabaseSync` handle for the PROJECT-scope `cleo.db`.
+ *
+ * Routes through {@link openDualScopeDb} (the dual-scope chokepoint) — which
+ * applies the pragma SSoT, runs the consolidated migrations (creating
+ * `schedules`), and manages the singleton cache — then extracts the native handle
+ * drizzle holds on `$client`. NEVER opens a raw connection (Gate 3): it reuses the
+ * handle the chokepoint already owns.
+ *
+ * @param cwd - Working directory for project resolution (defaults to `cwd`).
+ * @returns The live native handle.
+ * @throws When the chokepoint returns a handle without `$client`.
+ */
+export declare function getScheduleNativeDb(cwd?: string): Promise<NativeHandle>;
+/**
+ * REGISTER a recurring schedule: insert one `schedules` row and return its handle.
+ *
+ * A fresh `schedule_id` is minted (`sched-<token>`) and returned so the caller can
+ * later {@link removeSchedule} by it. The row is created `enabled = true`. Writes
+ * one atomic INSERT — the chokepoint serializes the single in-process writer
+ * daemon-OFF.
+ *
+ * @param native - The native project `cleo.db` handle (from {@link getScheduleNativeDb}).
+ * @param params - The cron expression + task template.
+ * @returns The minted schedule handle.
+ */
+export declare function addSchedule(native: NativeHandle, params: AddScheduleParams): string;
+/**
+ * LIST registered schedules in stable creation order (`created_at ASC`, then `id`).
+ *
+ * Bounded by an explicit SQL `LIMIT` and read through `iterate()` — NEVER an
+ * unbounded `.all()`. The request limit is clamped to
+ * `[1, {@link SCHEDULE_LIST_MAX_LIMIT}]`, defaulting to
+ * {@link SCHEDULE_LIST_DEFAULT_LIMIT}.
+ *
+ * @param native - The native project `cleo.db` handle.
+ * @param limit - Maximum rows to return (clamped). Defaults to the default cap.
+ * @returns The ordered schedule records (at most `limit`).
+ */
+export declare function listSchedules(native: NativeHandle, limit?: number): ScheduleRecord[];
+/**
+ * GET one schedule by its opaque handle, or `null` when no such schedule exists.
+ *
+ * @param native - The native project `cleo.db` handle.
+ * @param scheduleId - The `sched-<token>` handle.
+ * @returns The schedule record, or `null`.
+ */
+export declare function getSchedule(native: NativeHandle, scheduleId: string): ScheduleRecord | null;
+/**
+ * REMOVE a schedule by its opaque handle.
+ *
+ * Writes one atomic DELETE. Returns whether a row was actually removed (`false`
+ * when the handle is unknown).
+ *
+ * @param native - The native project `cleo.db` handle.
+ * @param scheduleId - The `sched-<token>` handle to remove.
+ * @returns `true` if a row was deleted, `false` when no such schedule existed.
+ */
+export declare function removeSchedule(native: NativeHandle, scheduleId: string): boolean;
+//# sourceMappingURL=schedule-store.d.ts.map

package/dist/store/schedule-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-store.d.ts","sourceRoot":"","sources":["../../src/store/schedule-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAOH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,EAAG,GAAY,CAAC;AAExD,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,EAAG,IAAa,CAAC;AAErD,0DAA0D;AAC1D,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,oEAAoE;AACpE,KAAK,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,CAAC;AACtF,UAAU,eAAe;IACvB,GAAG,CAAC,GAAG,MAAM,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,eAAe,CAAC;IACvE,GAAG,CAAC,GAAG,MAAM,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC3F,OAAO,CACL,GAAG,MAAM,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,GAC/C,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9C;AACD,UAAU,YAAY;IACpB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAC;CACvC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAW7E;AAsBD;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAUnF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,YAAY,EACpB,KAAK,GAAE,MAAoC,GAC1C,cAAc,EAAE,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAQ3F;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAKhF"}

package/dist/store/schedule-store.js

@@ -0,0 +1,162 @@
+/**
+ * Store-layer accessor for the cron / todo schedule table (`schedules`) — T11962
+ * (under T11679 · M7 · epic T11456).
+ *
+ * This module is the ONLY place that touches the native `cleo.db` handle for
+ * schedule persistence. It lives INSIDE the store chokepoint
+ * (`packages/core/src/store/**`), the Gate-3 allowlist, so it may extract the
+ * native `DatabaseSync` that {@link openDualScopeDb} already holds (via drizzle's
+ * `$client`) and run prepared statements over it — exactly the established
+ * `selfimprove-dhq-store.ts` / `pi-session-store.ts` pattern. It NEVER calls
+ * `new DatabaseSync(` itself.
+ *
+ * The `cron_schedule` agent tool ({@link import('../tools/schedule-agent-tools.js')})
+ * sits OUTSIDE the chokepoint, so it must NOT open a raw handle; it calls
+ * {@link addSchedule} / {@link listSchedules} / {@link removeSchedule}. A single
+ * INSERT/DELETE is one atomic SQLite statement, so the accessor does not wrap them
+ * in a writer lease itself — daemon-OFF the chokepoint already serializes the
+ * single in-process writer; a future daemon scheduler (a separate reader, AC4)
+ * never writes through this path.
+ *
+ * Physical model (see the `t11962-schedules` migration):
+ *  - `schedules(id, schedule_id, cron_expr, title, description, enabled,
+ *    created_at, updated_at)` — one row per recurring schedule.
+ *  - `schedule_id` is a unique opaque handle (`sched-<token>`) returned to the
+ *    caller and used to remove a schedule.
+ *
+ * ## Never `.all()` an unbounded query
+ *
+ * {@link listSchedules} reads through `iterate()` with an explicit SQL `LIMIT`
+ * (capped, default {@link SCHEDULE_LIST_DEFAULT_LIMIT}), never `.all()` over the
+ * whole table — the established OOM-safe read pattern (cf.
+ * `exodus/verify-migration.ts`).
+ *
+ * @module
+ * @task T11962
+ * @epic T11679
+ * @see ./schedule-schema.ts — the drizzle table declaration (physical-name SSoT)
+ * @see ./selfimprove-dhq-store.ts — the Gate-3 native-handle accessor precedent this mirrors
+ * @see ../tools/schedule-agent-tools.ts — the `cron_schedule` tool that delegates here
+ */
+import { randomBytes } from 'node:crypto';
+import { openDualScopeDb } from './dual-scope-db.js';
+import { SCHEDULES_TABLE } from './schedule-schema.js';
+export { SCHEDULES_TABLE } from './schedule-schema.js';
+/** Default cap for {@link listSchedules} — bounds the read so it never OOMs. */
+export const SCHEDULE_LIST_DEFAULT_LIMIT = 500;
+/** Hard ceiling on a {@link listSchedules} request — a caller cannot exceed it. */
+export const SCHEDULE_LIST_MAX_LIMIT = 5000;
+/**
+ * Extract the native `DatabaseSync` handle for the PROJECT-scope `cleo.db`.
+ *
+ * Routes through {@link openDualScopeDb} (the dual-scope chokepoint) — which
+ * applies the pragma SSoT, runs the consolidated migrations (creating
+ * `schedules`), and manages the singleton cache — then extracts the native handle
+ * drizzle holds on `$client`. NEVER opens a raw connection (Gate 3): it reuses the
+ * handle the chokepoint already owns.
+ *
+ * @param cwd - Working directory for project resolution (defaults to `cwd`).
+ * @returns The live native handle.
+ * @throws When the chokepoint returns a handle without `$client`.
+ */
+export async function getScheduleNativeDb(cwd) {
+    const handle = await openDualScopeDb('project', cwd);
+    const native = handle.db.$client;
+    if (!native) {
+        throw new Error('T11962: openDualScopeDb returned a project handle without $client — ' +
+            'cannot extract DatabaseSync for schedule persistence.');
+    }
+    // The node:sqlite surface is wider than NativeHandle; narrow to what we use.
+    return native;
+}
+/** Decode a raw SQLite row into a typed {@link ScheduleRecord}. */
+function decodeRow(row) {
+    return {
+        scheduleId: String(row.schedule_id),
+        cronExpr: String(row.cron_expr),
+        title: String(row.title),
+        description: row.description === null || row.description === undefined ? null : String(row.description),
+        // SQLite stores the typed boolean as 0/1.
+        enabled: Number(row.enabled) !== 0,
+        createdAt: String(row.created_at),
+        updatedAt: String(row.updated_at),
+    };
+}
+/** Mint a stable opaque schedule handle (`sched-<24 hex>`). */
+function mintScheduleId() {
+    return `sched-${randomBytes(12).toString('hex')}`;
+}
+/**
+ * REGISTER a recurring schedule: insert one `schedules` row and return its handle.
+ *
+ * A fresh `schedule_id` is minted (`sched-<token>`) and returned so the caller can
+ * later {@link removeSchedule} by it. The row is created `enabled = true`. Writes
+ * one atomic INSERT — the chokepoint serializes the single in-process writer
+ * daemon-OFF.
+ *
+ * @param native - The native project `cleo.db` handle (from {@link getScheduleNativeDb}).
+ * @param params - The cron expression + task template.
+ * @returns The minted schedule handle.
+ */
+export function addSchedule(native, params) {
+    const scheduleId = mintScheduleId();
+    native
+        .prepare(`INSERT INTO ${SCHEDULES_TABLE} ` +
+        `(schedule_id, cron_expr, title, description, enabled) ` +
+        `VALUES (?, ?, ?, ?, 1)`)
+        .run(scheduleId, params.cronExpr, params.title, params.description ?? null);
+    return scheduleId;
+}
+/**
+ * LIST registered schedules in stable creation order (`created_at ASC`, then `id`).
+ *
+ * Bounded by an explicit SQL `LIMIT` and read through `iterate()` — NEVER an
+ * unbounded `.all()`. The request limit is clamped to
+ * `[1, {@link SCHEDULE_LIST_MAX_LIMIT}]`, defaulting to
+ * {@link SCHEDULE_LIST_DEFAULT_LIMIT}.
+ *
+ * @param native - The native project `cleo.db` handle.
+ * @param limit - Maximum rows to return (clamped). Defaults to the default cap.
+ * @returns The ordered schedule records (at most `limit`).
+ */
+export function listSchedules(native, limit = SCHEDULE_LIST_DEFAULT_LIMIT) {
+    const clamped = Math.max(1, Math.min(Math.floor(limit), SCHEDULE_LIST_MAX_LIMIT));
+    const stmt = native.prepare(`SELECT schedule_id, cron_expr, title, description, enabled, created_at, updated_at ` +
+        `FROM ${SCHEDULES_TABLE} ORDER BY created_at ASC, id ASC LIMIT ?`);
+    const out = [];
+    for (const row of stmt.iterate(clamped)) {
+        out.push(decodeRow(row));
+    }
+    return out;
+}
+/**
+ * GET one schedule by its opaque handle, or `null` when no such schedule exists.
+ *
+ * @param native - The native project `cleo.db` handle.
+ * @param scheduleId - The `sched-<token>` handle.
+ * @returns The schedule record, or `null`.
+ */
+export function getSchedule(native, scheduleId) {
+    const row = native
+        .prepare(`SELECT schedule_id, cron_expr, title, description, enabled, created_at, updated_at ` +
+        `FROM ${SCHEDULES_TABLE} WHERE schedule_id = ?`)
+        .get(scheduleId);
+    return row === undefined ? null : decodeRow(row);
+}
+/**
+ * REMOVE a schedule by its opaque handle.
+ *
+ * Writes one atomic DELETE. Returns whether a row was actually removed (`false`
+ * when the handle is unknown).
+ *
+ * @param native - The native project `cleo.db` handle.
+ * @param scheduleId - The `sched-<token>` handle to remove.
+ * @returns `true` if a row was deleted, `false` when no such schedule existed.
+ */
+export function removeSchedule(native, scheduleId) {
+    const result = native
+        .prepare(`DELETE FROM ${SCHEDULES_TABLE} WHERE schedule_id = ?`)
+        .run(scheduleId);
+    return Number(result.changes) > 0;
+}
+//# sourceMappingURL=schedule-store.js.map

package/dist/store/schedule-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-store.js","sourceRoot":"","sources":["../../src/store/schedule-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAY,CAAC;AAExD,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAa,CAAC;AA2CrD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAY;IACpD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAI,MAAM,CAAC,EAAgD,CAAC,OAAO,CAAC;IAChF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,sEAAsE;YACpE,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,mEAAmE;AACnE,SAAS,SAAS,CAAC,GAA4B;IAC7C,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QACnC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QACxB,WAAW,EACT,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QAC5F,0CAA0C;QAC1C,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAS,cAAc;IACrB,OAAO,SAAS,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,MAAyB;IACzE,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM;SACH,OAAO,CACN,eAAe,eAAe,GAAG;QAC/B,wDAAwD;QACxD,wBAAwB,CAC3B;SACA,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;IAC9E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAoB,EACpB,QAAgB,2BAA2B;IAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CACzB,qFAAqF;QACnF,QAAQ,eAAe,0CAA0C,CACpE,CAAC;IACF,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,UAAkB;IAClE,MAAM,GAAG,GAAG,MAAM;SACf,OAAO,CACN,qFAAqF;QACnF,QAAQ,eAAe,wBAAwB,CAClD;SACA,GAAG,CAAC,UAAU,CAAC,CAAC;IACnB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,UAAkB;IACrE,MAAM,MAAM,GAAG,MAAM;SAClB,OAAO,CAAC,eAAe,eAAe,wBAAwB,CAAC;SAC/D,GAAG,CAAC,UAAU,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/dist/store/schema/attachments.d.ts

@@ -344,7 +344,7 @@ export declare const attachmentRefs: import("drizzle-orm/sqlite-core").SQLiteTab
             name: string;
             tableName: "attachment_refs";
             dataType: "string enum";
-            data: "task" | "decision" | "pattern" | "learning" | "observation" | "session";
+            data: "task" | "observation" | "decision" | "pattern" | "learning" | "session";
             driverParam: string;
             notNull: true;
             hasDefault: false;

package/dist/store/schema/cleo-global/index.d.ts

@@ -94,7 +94,10 @@
 export * from '../cleo-shared/index.js';
 export * from './accounts.js';
 export * from './agent-registry.js';
+export * from './models-catalog.js';
 export * from './nexus.js';
+export * from './providers.js';
+export * from './services.js';
 export * from './session-manifest.js';
 export * from './skills.js';
 export * from './telemetry.js';

package/dist/store/schema/cleo-global/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AAEpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAE3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/store/schema/cleo-global/index.js

@@ -94,7 +94,12 @@
 export * from '../cleo-shared/index.js';
 export * from './accounts.js';
 export * from './agent-registry.js';
+// E8-CATALOG-CURATION (T11733) — the models.dev catalog SSoT (`models_catalog`).
+export * from './models-catalog.js';
 export * from './nexus.js';
+// M3 Provider SSoT (T11703 · epic T11667) — the declarative provider table (`providers`).
+export * from './providers.js';
+export * from './services.js';
 export * from './session-manifest.js';
 export * from './skills.js';
 export * from './telemetry.js';

package/dist/store/schema/cleo-global/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,iFAAiF;AACjF,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,0FAA0F;AAC1F,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}