@cleocode/core 2026.6.3 → 2026.6.5

package/dist/store/exodus/archive.js

@@ -0,0 +1,314 @@
+/**
+ * Exodus source-DB ARCHIVE + completion-marker subsystem (T11777).
+ *
+ * ## Why this exists (stranded-residue corruption trigger)
+ *
+ * The exodus engine migrates from SIX legacy source DBs (project: `tasks.db`,
+ * `brain.db`, `conduit.db`; global: `nexus.db`, `signaldock.db`, `skills.db`)
+ * but, historically, NEVER retired them — `on-open.ts` literally notes "the file
+ * is never unlinked." Every cutover therefore STRANDS the legacy files, and each
+ * stranded file re-arms the `tasks_tasks=0` auto-recover / exodus-on-open
+ * corruption trigger (DHQ-052 · T11662): on the next open the consolidated DB
+ * looks empty-with-legacy-present and the hook re-fires.
+ *
+ * This module closes the loop. After a migration's lossless validation passes
+ * (row-count parity + integrity — `verifyMigration` / `isDataContinuityOk`), the
+ * consumed source DBs are ARCHIVED (moved, never deleted) into a per-scope
+ * `_archive/` directory, and a committed COMPLETION MARKER records the cutover.
+ * The marker becomes the durable "this scope is already migrated" signal so a
+ * re-appearing or stranded legacy file can never re-trigger exodus-on-open.
+ *
+ * ## Archive destinations (per scope, via the paths SSoT)
+ *
+ *   - project sources → `<cleoDir>/_archive/`     (e.g. `.cleo/_archive/`)
+ *   - global  sources → `<cleoHome>/_archive/`    (e.g. `~/.local/share/cleo/_archive/`)
+ *
+ * Both are resolved through `resolveCleoDir(cwd)` / `getCleoHome()` — never a
+ * hardcoded `~/.local/share` (Paths SSoT · Gate 2 · D009).
+ *
+ * ## Reversibility + idempotency invariants
+ *
+ *   - **Reversible** — archiving is an atomic `rename` (fallback copy+unlink
+ *     across filesystems). Nothing is ever deleted; an operator can move a DB
+ *     back out of `_archive/` to roll the cutover back.
+ *   - **Idempotent** — a source that is already absent (already archived, or a
+ *     fresh install that never had it) is a silent no-op. Re-running over an
+ *     already-archived fleet does nothing and never throws.
+ *   - **Never blind-move** — only sources the caller asserts were actually
+ *     consumed + validated by the migration are archived. A source whose
+ *     migration did not run is left untouched.
+ *   - **Emergency-archive reconciliation** — this box was emergency-archived
+ *     (`.cleo/_archive-legacy-postcutover-*` already holds `tasks.db` +
+ *     `conduit.db`). When the canonical destination already contains a file with
+ *     the same name, the incoming file is parked under a timestamped sibling name
+ *     rather than clobbering the prior archive.
+ *
+ * @module
+ * @task T11777 (exodus archives all 6 legacy DBs post-validation + completion marker)
+ * @epic T11249 (E6)
+ * @saga T11242 (SG-DB-SUBSTRATE-V2)
+ * @see packages/core/src/store/exodus/on-open.ts — wires this into the validated success path
+ * @see packages/core/src/store/exodus/plan.ts — buildSourceDescriptors (the 6 sources)
+ */
+import { copyFileSync, existsSync, mkdirSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { basename, join } from 'node:path';
+import { getLogger } from '../../logger.js';
+import { getCleoHome, resolveCleoDir } from '../../paths.js';
+import { getCleoVersion } from '../../scaffold/ensure-config.js';
+const log = getLogger('exodus-archive');
+/** Per-scope archive directory name (sibling of the migrated DBs). */
+const ARCHIVE_DIR_NAME = '_archive';
+/** Per-scope completion-marker filename written next to the consolidated cleo.db. */
+const MARKER_FILENAME_BY_SCOPE = {
+    project: 'exodus-complete',
+    global: 'exodus-complete',
+};
+/** SQLite sidecar suffixes archived alongside the main DB file. */
+const SIDECAR_SUFFIXES = ['-wal', '-shm'];
+/**
+ * Resolve the directory that holds a scope's legacy source DBs (and therefore
+ * its archive + completion marker): project → `<cleoDir>`, global →
+ * `<cleoHome>`. Always via the paths SSoT.
+ *
+ * @param scope - Target scope.
+ * @param cwd   - Working directory used to resolve the project `.cleo/` dir.
+ * @returns Absolute path to the scope's base directory.
+ */
+function scopeBaseDir(scope, cwd) {
+    return scope === 'project' ? resolveCleoDir(cwd) : getCleoHome();
+}
+/**
+ * Absolute path to a scope's `_archive/` directory.
+ *
+ * @param scope - Target scope.
+ * @param cwd   - Working directory used to resolve the project `.cleo/` dir.
+ * @returns Absolute path to `<scopeBase>/_archive/`.
+ */
+export function exodusArchiveDir(scope, cwd) {
+    return join(scopeBaseDir(scope, cwd), ARCHIVE_DIR_NAME);
+}
+/**
+ * Absolute path to a scope's exodus completion marker file.
+ *
+ * @param scope - Target scope.
+ * @param cwd   - Working directory used to resolve the project `.cleo/` dir.
+ * @returns Absolute path to `<scopeBase>/exodus-complete`.
+ */
+export function exodusMarkerPath(scope, cwd) {
+    return join(scopeBaseDir(scope, cwd), MARKER_FILENAME_BY_SCOPE[scope]);
+}
+/**
+ * Return `true` if a scope's exodus completion marker exists on disk.
+ *
+ * Resolution-safe: when the project `.cleo/` dir cannot be resolved (e.g. `cwd`
+ * is not inside a CLEO project — `resolveCleoDir` throws), this returns `false`
+ * (no marker) rather than propagating, so the on-open trigger gate degrades to
+ * the source-file path safely instead of crashing the open.
+ *
+ * @param scope - Target scope.
+ * @param cwd   - Working directory used to resolve the project `.cleo/` dir.
+ * @returns Whether `<scopeBase>/exodus-complete` exists.
+ */
+export function hasExodusCompleteMarker(scope, cwd) {
+    try {
+        return existsSync(exodusMarkerPath(scope, cwd));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Write a scope's exodus completion marker atomically (write-then-rename).
+ *
+ * Idempotent: re-writing simply refreshes the marker (same path). The marker is
+ * the SSoT trigger-gate consulted by {@link maybeRunExodusOnOpen} — once present,
+ * a stranded/re-appearing legacy file cannot re-arm the auto-migration.
+ *
+ * @param scope           - Scope being certified as migrated.
+ * @param archivedSources - Logical names of the sources archived for this scope.
+ * @param cwd             - Working directory used to resolve the project dir.
+ * @returns The marker's absolute path.
+ *
+ * @task T11777
+ */
+export function writeExodusCompleteMarker(scope, archivedSources, cwd) {
+    const markerPath = exodusMarkerPath(scope, cwd);
+    const baseDir = scopeBaseDir(scope, cwd);
+    mkdirSync(baseDir, { recursive: true });
+    const marker = {
+        version: 1,
+        scope,
+        cleoVersion: getCleoVersion(),
+        completedAt: new Date().toISOString(),
+        archivedSources: [...archivedSources],
+    };
+    const tmpPath = `${markerPath}.tmp`;
+    writeFileSync(tmpPath, JSON.stringify(marker, null, 2) + '\n', 'utf8');
+    renameSync(tmpPath, markerPath);
+    log.info({ scope, markerPath, archivedSources }, 'exodus: wrote completion marker');
+    return markerPath;
+}
+/**
+ * Move a single file to `destDir`, atomically when possible.
+ *
+ * Uses `rename`; on a cross-filesystem `EXDEV` (or any rename failure) falls back
+ * to copy-then-unlink so the move still completes. When `destDir` already holds a
+ * file with the same name (e.g. a prior emergency archive), the incoming file is
+ * parked under a timestamped sibling name so the prior archive is never clobbered.
+ *
+ * @param srcPath - Absolute source file path (assumed to exist).
+ * @param destDir - Absolute archive directory (created if missing).
+ * @returns The absolute destination path the file landed at.
+ */
+function moveFileInto(srcPath, destDir) {
+    mkdirSync(destDir, { recursive: true });
+    let dest = join(destDir, basename(srcPath));
+    if (existsSync(dest)) {
+        // Do not clobber a prior archive (e.g. emergency-archived tasks.db). Park
+        // the incoming file under a timestamped sibling name instead.
+        const stamp = new Date().toISOString().replace(/[:.]/g, '').replace(/Z$/, 'Z');
+        dest = join(destDir, `${basename(srcPath)}.${stamp}`);
+    }
+    try {
+        renameSync(srcPath, dest);
+    }
+    catch {
+        // Cross-filesystem (EXDEV) or other rename failure → copy + unlink fallback.
+        copyFileSync(srcPath, dest);
+        unlinkSync(srcPath);
+    }
+    return dest;
+}
+/**
+ * Archive ONE legacy source DB (and its `-wal` / `-shm` sidecars) into the
+ * scope's `_archive/` directory.
+ *
+ * Idempotent: if the main DB file is already absent, this is a no-op (the file
+ * was already archived, or never existed). Sidecars are archived best-effort and
+ * only when the main DB is present.
+ *
+ * @param source - The descriptor for the source DB to archive.
+ * @param cwd    - Working directory used to resolve the project dir.
+ * @returns A {@link ArchivedSourceResult} describing what happened.
+ *
+ * @task T11777
+ */
+export function archiveSourceDb(source, cwd) {
+    // Idempotent no-op: nothing to archive (already archived or fresh install).
+    if (!existsSync(source.path)) {
+        return { name: source.name, sourcePath: source.path, archivedTo: null, action: 'absent' };
+    }
+    const destDir = exodusArchiveDir(source.targetScope, cwd);
+    const archivedTo = moveFileInto(source.path, destDir);
+    // Archive sidecars alongside the DB (best-effort — they may not exist).
+    for (const suffix of SIDECAR_SUFFIXES) {
+        const sidecar = `${source.path}${suffix}`;
+        if (existsSync(sidecar)) {
+            try {
+                moveFileInto(sidecar, destDir);
+            }
+            catch (err) {
+                log.warn({ err, sidecar, sourceName: source.name }, 'exodus-archive: failed to archive sidecar (non-fatal)');
+            }
+        }
+    }
+    log.info({ sourceName: source.name, sourcePath: source.path, archivedTo, scope: source.targetScope }, 'exodus-archive: archived legacy source DB');
+    return {
+        name: source.name,
+        sourcePath: source.path,
+        archivedTo,
+        action: 'archived',
+    };
+}
+/**
+ * Archive every consumed legacy source DB AFTER a validated cutover and write a
+ * per-scope completion marker.
+ *
+ * **Never blind-moves**: only the descriptors passed in `consumed` are archived
+ * — the caller (the validated migrate/on-open success path) passes exactly the
+ * sources whose migration actually ran and passed parity. A completion marker is
+ * written for every scope represented in `consumed`, even if some of that scope's
+ * sources were already absent (already archived) — the marker certifies "this
+ * scope's cutover is done", which is true once parity passed.
+ *
+ * Idempotent + reversible (see module docs). Safe to call repeatedly.
+ *
+ * @param consumed - Source descriptors the migration consumed + validated.
+ * @param cwd      - Working directory used to resolve the project dir.
+ * @returns A {@link ArchiveMigratedSourcesResult} with per-source + per-scope outcomes.
+ *
+ * @task T11777
+ */
+export function archiveMigratedSources(consumed, cwd) {
+    const results = [];
+    const scopes = new Set();
+    for (const source of consumed) {
+        scopes.add(source.targetScope);
+        results.push(archiveSourceDb(source, cwd));
+    }
+    const markersWritten = [];
+    for (const scope of scopes) {
+        const archivedForScope = consumed.filter((s) => s.targetScope === scope).map((s) => s.name);
+        writeExodusCompleteMarker(scope, archivedForScope, cwd);
+        markersWritten.push(scope);
+    }
+    return { sources: results, markersWritten };
+}
+/**
+ * Detect stranded legacy source DBs: any of the six sources still present on
+ * disk for a scope whose exodus completion marker exists.
+ *
+ * Returns an empty array when no marker exists for either scope (a pre-cutover
+ * install where legacy DBs are still the live source of truth — NOT residue) or
+ * when every source for a marked scope has been archived.
+ *
+ * @param sources - The full legacy source descriptor list (from `buildExodusPlan`).
+ * @param cwd     - Working directory used to resolve the project dir + markers.
+ * @returns The stranded entries (empty when clean).
+ *
+ * @task T11777
+ */
+export function detectStrandedResidue(sources, cwd) {
+    const markedScopes = new Set();
+    for (const scope of ['project', 'global']) {
+        if (hasExodusCompleteMarker(scope, cwd))
+            markedScopes.add(scope);
+    }
+    if (markedScopes.size === 0)
+        return [];
+    const stranded = [];
+    for (const source of sources) {
+        if (!markedScopes.has(source.targetScope))
+            continue;
+        if (existsSync(source.path)) {
+            stranded.push({ name: source.name, path: source.path, scope: source.targetScope });
+        }
+    }
+    return stranded;
+}
+/**
+ * Archive stranded residue detected by {@link detectStrandedResidue}.
+ *
+ * This is the `--fix` action for the `cleo doctor exodus-residue` check. It reuses
+ * {@link archiveSourceDb} so the on-open success path and the doctor fix share one
+ * archive routine. Reversible (move, never delete) and idempotent.
+ *
+ * @param stranded - The stranded entries to archive.
+ * @param sources  - The full source descriptor list (to map name → descriptor).
+ * @param cwd      - Working directory used to resolve the project dir.
+ * @returns Per-source archive outcomes.
+ *
+ * @task T11777
+ */
+export function archiveStrandedResidue(stranded, sources, cwd) {
+    const byName = new Map(sources.map((s) => [s.name, s]));
+    const results = [];
+    for (const entry of stranded) {
+        const descriptor = byName.get(entry.name);
+        if (descriptor === undefined)
+            continue;
+        results.push(archiveSourceDb(descriptor, cwd));
+    }
+    return results;
+}
+//# sourceMappingURL=archive.js.map

package/dist/store/exodus/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../../src/store/exodus/archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,MAAM,GAAG,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAExC,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,UAAmB,CAAC;AAE7C,qFAAqF;AACrF,MAAM,wBAAwB,GAA0C;IACtE,OAAO,EAAE,iBAAiB;IAC1B,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAEF,mEAAmE;AACnE,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAU,CAAC;AAEnD;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,KAAkB,EAAE,GAAuB;IAC/D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,GAAY;IAC/D,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,GAAY;IAC/D,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAqBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAkB,EAAE,GAAY;IACtE,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAkB,EAClB,eAAkC,EAClC,GAAY;IAEZ,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,MAAM,GAAyB;QACnC,OAAO,EAAE,CAAC;QACV,KAAK;QACL,WAAW,EAAE,cAAc,EAAE;QAC7B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,eAAe,EAAE,CAAC,GAAG,eAAe,CAAC;KACtC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAG,UAAU,MAAM,CAAC;IACpC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,iCAAiC,CAAC,CAAC;IACpF,OAAO,UAAU,CAAC;AACpB,CAAC;AAgBD;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CAAC,OAAe,EAAE,OAAe;IACpD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/E,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5B,UAAU,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0B,EAAE,GAAY;IACtE,4EAA4E;IAC5E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAEtD,wEAAwE;IACxE,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,EACzC,uDAAuD,CACxD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAI,CACN,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,EAC3F,2CAA2C,CAC5C,CAAC;IACF,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,UAAU;QACV,MAAM,EAAE,UAAU;KACnB,CAAC;AACJ,CAAC;AAYD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAuC,EACvC,GAAY;IAEZ,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAe,CAAC;IAEtC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,cAAc,GAAkB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5F,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACxD,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AAC9C,CAAC;AAgBD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAsC,EACtC,GAAY;IAEZ,MAAM,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;QACnD,IAAI,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,SAAS;QACpD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAyC,EACzC,OAAsC,EACtC,GAAY;IAEZ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS;QACvC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/store/exodus/index.d.ts

@@ -8,6 +8,7 @@
  * @task T11248 (E5 · SG-DB-SUBSTRATE-V2)
  * @saga T11242
  */
+export { type ArchivedSourceResult, type ArchiveMigratedSourcesResult, archiveMigratedSources, archiveSourceDb, archiveStrandedResidue, detectStrandedResidue, type ExodusCompleteMarker, exodusArchiveDir, exodusMarkerPath, hasExodusCompleteMarker, type StrandedResidueEntry, writeExodusCompleteMarker, } from './archive.js';
 export { clearExodusJournal, runExodusMigrate } from './migrate.js';
 export { buildExodusPlan, deriveStagingDirName, sourcesPresent } from './plan.js';
 export { runExodusStatus } from './status.js';

package/dist/store/exodus/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,EACb,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,EACb,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/store/exodus/index.js

@@ -8,6 +8,7 @@
  * @task T11248 (E5 · SG-DB-SUBSTRATE-V2)
  * @saga T11242
  */
+export { archiveMigratedSources, archiveSourceDb, archiveStrandedResidue, detectStrandedResidue, exodusArchiveDir, exodusMarkerPath, hasExodusCompleteMarker, writeExodusCompleteMarker, } from './archive.js';
 export { clearExodusJournal, runExodusMigrate } from './migrate.js';
 export { buildExodusPlan, deriveStagingDirName, sourcesPresent } from './plan.js';
 export { runExodusStatus } from './status.js';

package/dist/store/exodus/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,GAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,GAY7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/exodus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAGL,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EAErB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EAEvB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,aAAa,GAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,GAY7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/store/exodus/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AAkBH,OAAO,KAAK,EAEV,mBAAmB,EACnB,UAAU,EAMX,MAAM,YAAY,CAAC;AAiEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAiB9D;AAs3BD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,UAAU,EAChB,iBAAiB,UAAQ,EACzB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA0I9B"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/store/exodus/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AAmBH,OAAO,KAAK,EAEV,mBAAmB,EACnB,UAAU,EAMX,MAAM,YAAY,CAAC;AAiEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAiB9D;AAw9BD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,UAAU,EAChB,iBAAiB,UAAQ,EACzB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAoK9B"}

package/dist/store/exodus/migrate.js

@@ -115,7 +115,7 @@ import { copyFileSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSy
 import { join } from 'node:path';
 import { getLogger } from '../../logger.js';
 import { getCleoVersion } from '../../scaffold/ensure-config.js';
-import { openDualScopeDb } from '../dual-scope-db.js';
+import { openDualScopeDbAtPath } from '../dual-scope-db.js';
 import { openCleoDbSnapshot } from '../open-cleo-db.js';
 import { resolveConsolidatedTableName, resolveTableTargetScope } from './table-name-map.js';
 import { EXODUS_TARGET_SCHEMA_VERSION } from './types.js';
@@ -419,6 +419,35 @@ function enumNormExpr(targetTableName, col, srcRef) {
     const fn = ENUM_NORMALIZATIONS.get(key);
     return fn ? fn(srcRef) : null;
 }
+const NUMERIC_CLAMPS = new Map([
+    // --- brain_weight_history.delta_weight (T11782) -------------------------
+    // +Inf → 1.0 (max canonical reinforcement), -Inf → -1.0 (max canonical
+    // depression), NaN → 0.0 (no-op delta). Finite values pass through.
+    [
+        'brain_weight_history.delta_weight',
+        (src) => `CASE` +
+            ` WHEN ${src} = 9e999 THEN 1.0` +
+            ` WHEN ${src} = -9e999 THEN -1.0` +
+            ` WHEN ${src} != ${src} THEN 0.0` +
+            ` ELSE ${src}` +
+            ` END`,
+    ],
+]);
+/**
+ * Return a SQL CASE expression that clamps non-finite legacy REAL values for
+ * `col` in `targetTableName` to a finite in-range value, or `null` when no
+ * clamp rule exists for this (table, column).
+ *
+ * @param targetTableName - Physical consolidated target table name.
+ * @param col             - Column name.
+ * @param srcRef          - SQL expression referencing the source column.
+ * @returns A SQL CASE expression string, or `null` if no rule applies.
+ */
+function numericClampExpr(targetTableName, col, srcRef) {
+    const key = `${targetTableName}.${col}`;
+    const fn = NUMERIC_CLAMPS.get(key);
+    return fn ? fn(srcRef) : null;
+}
 // ---------------------------------------------------------------------------
 // Epoch-to-ISO coercion layer (ROOT CAUSE 1 fix — T11546)
 // ---------------------------------------------------------------------------
@@ -558,12 +587,15 @@ function detectIsoGlobColumns(db, tableName, targetSchema = 'main') {
  *
  * 1. **Epoch→ISO-8601 coercion** (T11546): when the target has an ISO GLOB CHECK
  *    and the source column is INTEGER-typed.
- * 2. **Enum-value normalization** (T11547): when `ENUM_NORMALIZATIONS` has an
+ * 2. **Non-finite numeric clamp** (T11782): when `NUMERIC_CLAMPS` has an entry
+ *    for `(targetTableName, col)`, mapping `Inf`/`-Inf`/`NaN` to a finite in-range
+ *    value so the row is not silently dropped.
+ * 3. **Enum-value normalization** (T11547): when `ENUM_NORMALIZATIONS` has an
  *    entry for `(targetTableName, col)`, producing a SQL CASE expression that
  *    maps legacy values to canonical enum members without losing semantics.
- * 3. **NOT NULL coalesce** (T11533): for non-epoch, non-normalized columns whose
+ * 4. **NOT NULL coalesce** (T11533): for non-epoch, non-normalized columns whose
  *    target is NOT NULL with no schema default.
- * 4. **Plain column reference** otherwise.
+ * 5. **Plain column reference** otherwise.
  *
  * The epoch→ISO conversion uses `buildEpochToIsoExpr` which detects the epoch
  * scale (seconds vs milliseconds) per-row using a magnitude heuristic: values
@@ -605,7 +637,20 @@ function buildSelectExpr(attachAlias, legacyTable, targetTableName, col, srcType
         }
         return `${isoExpr} AS "${col}"`;
     }
-    // Priority 2: Enum-value normalization (T11547) — maps legacy enum values to
+    // Priority 2: Non-finite numeric clamp (T11782) — coerce Inf/-Inf/NaN legacy
+    // REAL values to a finite in-range value so the row is not silently dropped.
+    // (delta_weight is NOT NULL without a default — but the clamp always produces
+    // a non-NULL finite value for non-NULL input, so no extra COALESCE is needed;
+    // a genuinely NULL source still flows to the NOT NULL coalesce below.)
+    const clampExpr = numericClampExpr(targetTableName, col, srcRef);
+    if (clampExpr !== null) {
+        if (isNotNullWithoutDefault) {
+            const defLiteral = typeDefaultLiteral(tgtInfo.type);
+            return `COALESCE(${clampExpr}, ${defLiteral}) AS "${col}"`;
+        }
+        return `${clampExpr} AS "${col}"`;
+    }
+    // Priority 3: Enum-value normalization (T11547) — maps legacy enum values to
     // canonical members so CHECK constraints accept them.
     const normExpr = enumNormExpr(targetTableName, col, srcRef);
     if (normExpr !== null) {
@@ -617,8 +662,8 @@ function buildSelectExpr(attachAlias, legacyTable, targetTableName, col, srcType
         }
         return `${normExpr} AS "${col}"`;
     }
-    // Priority 3: Standard NOT NULL coalesce for non-epoch, non-normalized columns
-    // (T11533 fix preserved).
+    // Priority 4: Standard NOT NULL coalesce for non-epoch, non-clamped,
+    // non-normalized columns (T11533 fix preserved).
     if (isNotNullWithoutDefault) {
         const defLiteral = typeDefaultLiteral(tgtInfo.type);
         return `COALESCE(${srcRef}, ${defLiteral}) AS "${col}"`;
@@ -767,13 +812,23 @@ function copyTableFromAttached(targetNativeDb, srcNativeDb, attachAlias, legacyT
     if (normalizedCols.length > 0) {
         log.info({ legacyTableName, targetTableName, sourceName, normalizedCols }, `Exodus: applying enum-value normalization for ${normalizedCols.length} column(s) (T11547)`);
     }
+    // --- Step 5d: Detect non-finite numeric-clamp columns (T11782) -----------
+    //
+    // Log which columns have a numeric clamp rule (Inf/-Inf/NaN → finite) so the
+    // recovery of otherwise-dropped rows (e.g. brain_weight_history.delta_weight)
+    // is traceable in the migration journal.
+    const clampedCols = sharedColumns.filter((col) => NUMERIC_CLAMPS.has(`${targetTableName}.${col}`));
+    if (clampedCols.length > 0) {
+        log.info({ legacyTableName, targetTableName, sourceName, clampedCols }, `Exodus: applying non-finite numeric clamp for ${clampedCols.length} column(s) (T11782)`);
+    }
     // --- Step 6: Build the SELECT expression list ---
     //
     // For each shared column, `buildSelectExpr` handles (priority order):
     //   1. Epoch→ISO coercion when target has ISO GLOB CHECK and source is INTEGER (T11546)
-    //   2. Enum-value normalization for legacy values not in the consolidated CHECK (T11547)
-    //   3. COALESCE for NOT NULL target columns without schema defaults (T11533)
-    //   4. Plain column reference otherwise
+    //   2. Non-finite numeric clamp (Inf/-Inf/NaN → finite in-range) (T11782)
+    //   3. Enum-value normalization for legacy values not in the consolidated CHECK (T11547)
+    //   4. COALESCE for NOT NULL target columns without schema defaults (T11533)
+    //   5. Plain column reference otherwise
     const selectExprs = sharedColumns.map((col) => {
         const srcType = srcTypeMap.get(col) ?? '';
         const tgtInfo = tgtColMap.get(col);
@@ -875,7 +930,7 @@ function checkSchemaVersion(journal, forceCrossVersion) {
  * @task T11531 (P0 attach-leak fix)
  */
 export async function runExodusMigrate(plan, forceCrossVersion = false, onProgress) {
-    const { sources, stagingDir, diskPreflight, projectDbPath } = plan;
+    const { sources, stagingDir, diskPreflight, projectDbPath, globalDbPath } = plan;
     // AC8: disk pre-flight
     if (!diskPreflight) {
         return {
@@ -919,6 +974,17 @@ export async function runExodusMigrate(plan, forceCrossVersion = false, onProgre
     const backupPaths = [];
     const allTableResults = [];
     const lockedPaths = [];
+    // FIX D (T11782): the migrate engine opens the consolidated TARGET DBs on a
+    // DEDICATED, NON-cached connection (a second SQLite handle to the same file —
+    // WAL allows it) rather than the cached caller handle. The copy AND the
+    // parity-abort rollback operate ONLY on these dedicated connections, so a
+    // concurrent caller INSERT (`tasks.add`) on its OWN cached connection is
+    // physically OUTSIDE this migration's transaction and CANNOT be rolled back
+    // with an aborted migration. The handles are closed in the `finally` below to
+    // avoid a file-descriptor leak (a dedicated handle is never evicted by the
+    // singleton cache).
+    let projectHandle = null;
+    let globalHandle = null;
     try {
         // 1. Back up existing source DBs into staging dir and acquire advisory locks
         for (const src of sources) {
@@ -934,13 +1000,17 @@ export async function runExodusMigrate(plan, forceCrossVersion = false, onProgre
             acquireAdvisoryLock(src.path);
             lockedPaths.push(src.path);
         }
-        // 2. Open (or create) the consolidated target DBs via the chokepoint.
-        //    This runs Drizzle migrations to create the target schema.
-        onProgress?.('Opening consolidated project-scope cleo.db (running migrations)…');
-        // openDualScopeDb takes cwd, not a db path — pass undefined to use process.cwd()
-        const projectHandle = await openDualScopeDb('project');
-        onProgress?.('Opening consolidated global-scope cleo.db (running migrations)…');
-        const globalHandle = await openDualScopeDb('global');
+        // 2. Open the consolidated target DBs on a DEDICATED connection via the
+        //    chokepoint (FIX D). This runs Drizzle migrations to create the target
+        //    schema on an isolated handle, NOT the cached caller handle.
+        onProgress?.('Opening DEDICATED project-scope cleo.db connection (running migrations)…');
+        projectHandle = await openDualScopeDbAtPath('project', projectDbPath, undefined, {
+            dedicated: true,
+        });
+        onProgress?.('Opening DEDICATED global-scope cleo.db connection (running migrations)…');
+        globalHandle = await openDualScopeDbAtPath('global', globalDbPath, undefined, {
+            dedicated: true,
+        });
         // Extract the raw DatabaseSync from the Drizzle wrapper ($client pattern).
         function extractNativeDb(handle) {
             const drizzleHandle = handle.db;
@@ -969,8 +1039,6 @@ export async function runExodusMigrate(plan, forceCrossVersion = false, onProgre
         // Final journal update
         journal.updatedAt = new Date().toISOString();
         writeJournal(stagingDir, journal);
-        projectHandle.close();
-        globalHandle.close();
         return { ok: true, tables: allTableResults, stagingDir, backupPaths };
     }
     catch (err) {
@@ -979,6 +1047,21 @@ export async function runExodusMigrate(plan, forceCrossVersion = false, onProgre
         return { ok: false, tables: allTableResults, stagingDir, backupPaths, error };
     }
     finally {
+        // FIX D (T11782): always close the DEDICATED migrate connections (success OR
+        // failure) so the second SQLite handle does not leak a file descriptor. A
+        // dedicated handle is never cached, so this is the only thing that closes it.
+        try {
+            projectHandle?.close();
+        }
+        catch {
+            // ignore double-close
+        }
+        try {
+            globalHandle?.close();
+        }
+        catch {
+            // ignore double-close
+        }
         // Release advisory locks
         for (const p of lockedPaths) {
             releaseAdvisoryLock(p);
@@ -1105,10 +1188,21 @@ async function migrateScope(scope, sources, targetNativeDb, journal, stagingDir,
                                 skipped = true;
                             }
                             else if (copyResult.reason) {
-                                // No-swallow error: all rows dropped by a constraint (T11546).
-                                // The table is NOT skipped (copy was attempted) but the result
-                                // must be surfaced as an error, not a silent 0-row success.
-                                status = 'skipped'; // Mark skipped so journal doesn't say "done" on 0 rows
+                                // No-swallow error: rows dropped by a constraint (T11546). The
+                                // copy WAS attempted (skipped stays false) and the deficit MUST be
+                                // surfaced — never a silent 0-row "done". (T11782 · FIX C.)
+                                //
+                                // Record `partial` rather than `skipped`: the table is neither
+                                // intentionally excluded nor cleanly complete. `partial` keeps the
+                                // journal honest (a resume re-copies; it never masquerades as
+                                // `done`) WITHOUT, by itself, tripping a scope-wide rollback at
+                                // this layer. A genuine deficit on a data-bearing BASE table still
+                                // ABORTS the cutover downstream: the parity gate
+                                // (`isDataContinuityOk` via `verifyMigration`) compares row counts
+                                // and fails on any `targetCount < sourceCount` deficit regardless
+                                // of journal status. With FIX B (Inf clamp) this branch should
+                                // rarely fire — it is belt-and-suspenders.
+                                status = 'partial';
                                 errorMsg = copyResult.reason;
                                 // skipped stays false — the distinction is the reason field (data loss vs intentional skip)
                             }