@cleocode/core 2026.9.17 → 2026.9.18

package/dist/tasks/verification-policy.js

@@ -0,0 +1,75 @@
+/**
+ * Verification-gate policy — the single resolver for WHICH verification gates
+ * a task must have set to `true`, and whether that requirement is enforced.
+ *
+ * `cleo complete` and `cleo release plan` both consume this so the two can
+ * never disagree about what "verified" means. Before T12359 the release plan
+ * checked only that evidence atoms were PRESENT, and shipped fifteen tasks
+ * whose `implemented` gate was `false`.
+ *
+ * @task T12359
+ */
+import { getRawConfigValue, loadConfig } from '../config.js';
+/**
+ * Fallback gate list used only when the resolved config names no valid gate.
+ * The normal cascade supplies `verification.requiredGates` from config
+ * defaults, so this is reached only when a project config sets an empty or
+ * wholly-invalid list.
+ */
+const DEFAULT_VERIFICATION_REQUIRED_GATES = [
+    'implemented',
+    'testsPassed',
+    'qaPassed',
+    'securityPassed',
+    'documented',
+];
+const VERIFICATION_GATES = new Set([
+    'implemented',
+    'testsPassed',
+    'qaPassed',
+    'cleanupDone',
+    'securityPassed',
+    'documented',
+]);
+/**
+ * Type guard: `true` when `value` names a canonical {@link VerificationGate}.
+ *
+ * @param value - Candidate gate name (typically from project config).
+ * @returns Whether `value` is a known verification gate.
+ */
+export function isVerificationGate(value) {
+    return VERIFICATION_GATES.has(value);
+}
+/**
+ * Resolve the project's verification-gate policy — the same policy
+ * `cleo complete` enforces.
+ *
+ * @param cwd - Project root (defaults to the resolved project root).
+ * @returns The enforcement flag and the required gate list.
+ *
+ * @task T12359
+ */
+export async function loadVerificationGatePolicy(cwd) {
+    const isTest = !!process.env.VITEST;
+    const config = await loadConfig(cwd);
+    // Read only the project-level value (no DEFAULTS cascade) so the isTest
+    // fallback activates when `verification.enabled` is not explicitly set.
+    const rawEnabled = await getRawConfigValue('verification.enabled', cwd);
+    const enabled = rawEnabled !== undefined ? Boolean(rawEnabled) : !isTest;
+    const configured = (config.verification?.requiredGates ?? []).filter(isVerificationGate);
+    const requiredGates = configured.length > 0 ? configured : [...DEFAULT_VERIFICATION_REQUIRED_GATES];
+    return { enabled, requiredGates };
+}
+/**
+ * Return the required gates that are not `true` on a verification record.
+ *
+ * @param gates - The task's `verification.gates` map (may be absent).
+ * @param requiredGates - Gates the policy requires.
+ * @returns Required gates whose value is anything other than `true`.
+ *
+ * @task T12359
+ */
+export function missingRequiredGates(gates, requiredGates) {
+    return requiredGates.filter((gate) => gates?.[gate] !== true);
+}
+//# sourceMappingURL=verification-policy.js.map

package/dist/tasks/verification-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-policy.js","sourceRoot":"","sources":["../../src/tasks/verification-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,mCAAmC,GAAgC;IACvE,aAAa;IACb,aAAa;IACb,UAAU;IACV,gBAAgB;IAChB,YAAY;CACb,CAAC;AAEF,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAmB;IACxE,aAAa;IACb,aAAa;IACb,UAAU;IACV,aAAa;IACb,gBAAgB;IAChB,YAAY;CACb,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAkBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAAY;IAC3D,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACzF,MAAM,aAAa,GACjB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,mCAAmC,CAAC,CAAC;IAChF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA2E,EAC3E,aAA0C;IAE1C,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AAChE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/core",
-  "version": "2026.9.17",
+  "version": "2026.9.18",
   "description": "CLEO core business logic kernel — tasks, sessions, memory, orchestration, lifecycle, with bundled SQLite store",
   "type": "module",
   "main": "./dist/index.js",
@@ -471,16 +471,16 @@
     "write-file-atomic": "^7.0.1",
     "yaml": "^2.8.3",
     "zod": "^4.3.6",
-    "@cleocode/adapters": "2026.9.17",
-    "@cleocode/agents": "2026.9.17",
-    "@cleocode/caamp": "2026.9.17",
-    "@cleocode/git-shim": "2026.9.17",
-    "@cleocode/contracts": "2026.9.17",
-    "@cleocode/lafs": "2026.9.17",
-    "@cleocode/paths": "2026.9.17",
-    "@cleocode/nexus": "2026.9.17",
-    "@cleocode/worktree": "2026.9.17",
-    "@cleocode/skills": "2026.9.17"
+    "@cleocode/adapters": "2026.9.18",
+    "@cleocode/caamp": "2026.9.18",
+    "@cleocode/contracts": "2026.9.18",
+    "@cleocode/agents": "2026.9.18",
+    "@cleocode/git-shim": "2026.9.18",
+    "@cleocode/lafs": "2026.9.18",
+    "@cleocode/nexus": "2026.9.18",
+    "@cleocode/paths": "2026.9.18",
+    "@cleocode/worktree": "2026.9.18",
+    "@cleocode/skills": "2026.9.18"
   },
   "engines": {
     "node": ">=24.16.0"
@@ -506,7 +506,7 @@
     "@types/proper-lockfile": "^4.1.4",
     "@types/tar": "^6.1.13",
     "@types/write-file-atomic": "^4.0.3",
-    "@cleocode/utils": "2026.9.17"
+    "@cleocode/utils": "2026.9.18"
   },
   "repository": {
     "type": "git",
@@ -515,7 +515,7 @@
   },
   "optionalDependencies": {
     "llmtxt": "^2026.5.15",
-    "@cleocode/studio": "^2026.9.17"
+    "@cleocode/studio": "^2026.9.18"
   },
   "scripts": {
     "build": "tsc && node scripts/copy-selfimprove-fixtures.mjs",