feat(todo-cleanup): dated-seal archiving and planning-line strip on convert

Two batched changes to the todo hygiene tooling.

Dated-seal archiving: --archive-done aging now keeps one month in-file (retain default 7 → 31, named as tc-archive-retain-days-default) and a new --seal renames the working task-archive.org to resolved-YYYY-MM-DD.org beside it, letting the next aging start a fresh working file. Dating the sealed file by the seal run rather than the calendar quarter is what avoids mislabeling a task closed late in a quarter and archived after the boundary. The unparseable-CLOSED case is now explicit in the contract: a keyword-complete task with no readable close date ages out too. The sealed file inherits the todo file's gitignore status.

Planning-line strip: --convert-subtasks now drops the whole planning line when it rewrites a done sub-task to a dated event-log entry, not just the CLOSED cookie. A dated-log heading carries its date in the heading, so an active SCHEDULED/DEADLINE left on it pins the finished entry to the agenda as weeks-overdue forever (org renders any active planning timestamp, keyword or not). New lint-org checker dated-log-heading-active-timestamp backstops any that predate this. todo-format.md's sub-task and VERIFY completion rules gain the strip step.

2 files changed, 178 insertions, 4 deletions

diff --git a/.ai/scripts/tests/test-lint-org.el b/.ai/scripts/tests/test-lint-org.el
index 8e3e190..30a79bd 100644
--- a/.ai/scripts/tests/test-lint-org.el
+++ b/.ai/scripts/tests/test-lint-org.el
@@ -739,6 +739,48 @@ missing-rules violation."
          (judgments (lo-test--judgments (plist-get out :issues))))
     (should-not (member 'subtask-done-not-dated (lo-test--checkers judgments)))))
 
+;;; dated-log-heading-active-timestamp check (stale SCHEDULED/DEADLINE on a
+;;; completed dated-log entry — the home 2026-07-17 agenda-pollution bug)
+
+(ert-deftest lo-dated-log-active-scheduled-is-flagged ()
+  "A dated-log entry still carrying an active SCHEDULED is flagged: org renders
+it on the agenda forever despite the missing keyword."
+  (let* ((out (lo-test--run
+               "* Open Work\n\n** TODO [#B] Parent\n*** 2026-06-20 Sat @ 10:00:00 -0500 trip booked\nSCHEDULED: <2026-06-18 Thu>\nBody.\n"))
+         (judgments (lo-test--judgments (plist-get out :issues))))
+    (should (= 0 (plist-get out :fixes)))       ; judgment-only, never auto-fixed
+    (should (member 'dated-log-heading-active-timestamp (lo-test--checkers judgments)))))
+
+(ert-deftest lo-dated-log-active-deadline-is-flagged ()
+  "An active DEADLINE on a dated-log entry is flagged too."
+  (let* ((out (lo-test--run
+               "* Open Work\n\n** TODO [#B] Parent\n*** 2026-06-20 Sat @ 10:00:00 -0500 shipped\nDEADLINE: <2026-06-25 Thu>\n"))
+         (judgments (lo-test--judgments (plist-get out :issues))))
+    (should (member 'dated-log-heading-active-timestamp (lo-test--checkers judgments)))))
+
+(ert-deftest lo-dated-log-clean-entry-not-flagged ()
+  "A dated-log entry with no active planning timestamp is correct — not flagged."
+  (let* ((out (lo-test--run
+               "* Open Work\n\n** TODO [#B] Parent\n*** 2026-06-20 Sat @ 10:00:00 -0500 done cleanly\nBody only.\n"))
+         (judgments (lo-test--judgments (plist-get out :issues))))
+    (should-not (member 'dated-log-heading-active-timestamp (lo-test--checkers judgments)))))
+
+(ert-deftest lo-dated-log-inactive-timestamp-not-flagged ()
+  "An inactive [..] timestamp doesn't render on the agenda, so it isn't flagged —
+only active <..> planning timestamps are the defect."
+  (let* ((out (lo-test--run
+               "* Open Work\n\n** TODO [#B] Parent\n*** 2026-06-20 Sat @ 10:00:00 -0500 recorded\nSCHEDULED: [2026-06-18 Thu]\n"))
+         (judgments (lo-test--judgments (plist-get out :issues))))
+    (should-not (member 'dated-log-heading-active-timestamp (lo-test--checkers judgments)))))
+
+(ert-deftest lo-dated-log-active-scheduled-on-live-todo-not-flagged ()
+  "A live TODO (keyword present) that legitimately carries an active SCHEDULED is
+not a dated-log heading, so this checker leaves it alone."
+  (let* ((out (lo-test--run
+               "* Open Work\n\n** TODO [#B] Parent\n*** TODO [#C] real upcoming task\nSCHEDULED: <2026-06-18 Thu>\n"))
+         (judgments (lo-test--judgments (plist-get out :issues))))
+    (should-not (member 'dated-log-heading-active-timestamp (lo-test--checkers judgments)))))
+
 ;;; ---------------------------------------------------------------------------
 ;;; structural heading checks (org-lint gaps)
 
diff --git a/.ai/scripts/tests/test-todo-cleanup.el b/.ai/scripts/tests/test-todo-cleanup.el
index ffbf2fb..838913f 100644
--- a/.ai/scripts/tests/test-todo-cleanup.el
+++ b/.ai/scripts/tests/test-todo-cleanup.el
@@ -31,6 +31,7 @@
 
 (defun tc-test--reset (&optional check)
   (setq tc-fixes 0 tc-archived 0 tc-bumped 0 tc-archived-to-file 0 tc-issues nil
+        tc-sealed 0 tc-seal nil tc-convert-subtasks nil
         tc-check-only (and check t)
         tc-archive-done t tc-sync-child-priority nil
         tc-current-file nil
@@ -40,6 +41,7 @@
 
 (defun tc-test--reset-sync (&optional check)
   (setq tc-fixes 0 tc-archived 0 tc-bumped 0 tc-archived-to-file 0 tc-issues nil
+        tc-sealed 0 tc-seal nil
         tc-check-only (and check t)
         tc-archive-done nil tc-sync-child-priority t
         tc-current-file nil
@@ -578,6 +580,95 @@ entry is added for it."
       (should (> (plist-get out :archived) 0)))))
 
 ;;; ---------------------------------------------------------------------------
+;;; --archive-done retention default
+
+(ert-deftest tc-archive-retain-default-is-one-month ()
+  "The shipped retention default is one month (31 days), not the legacy 7.
+The defvar initializes from this defconst; the live var itself is mutated by
+other tests, so the immutable defconst is the stable contract to pin."
+  (should (= 31 tc-archive-retain-days-default)))
+
+;;; ---------------------------------------------------------------------------
+;;; --seal: rename the working archive to resolved-YYYY-MM-DD.org
+
+(defun tc-test--seal (&optional opts)
+  "Run `--seal' against a temp todo file with a temp archive dir.
+OPTS is a plist: :archive-content (seed task-archive.org with this; nil = no
+working archive), :ref (YEAR MONTH DAY seal date; default (2026 7 18)),
+:check, :presealed (also create resolved-<ref>.org first, to test collision).
+Returns a plist: :sealed count, :issues, :working-exists, :sealed-exists,
+:sealed-name, :report."
+  (let* ((ref (or (plist-get opts :ref) '(2026 7 18)))
+         (check (plist-get opts :check))
+         (archive-content (plist-get opts :archive-content))
+         (todo (make-temp-file "tc-seal-todo-" nil ".org"))
+         (adir (make-temp-file "tc-seal-arch-" t))
+         (afile (expand-file-name "task-archive.org" adir))
+         (sealed-name (format "resolved-%04d-%02d-%02d.org"
+                              (nth 0 ref) (nth 1 ref) (nth 2 ref)))
+         (sealed (expand-file-name sealed-name adir)))
+    (unwind-protect
+        (progn
+          (with-temp-file todo (insert "* Open Work\n** TODO [#A] live\n"))
+          (when archive-content (with-temp-file afile (insert archive-content)))
+          (when (plist-get opts :presealed)
+            (with-temp-file sealed (insert "pre-existing seal\n")))
+          (tc-test--reset check)
+          ;; Set every mode flag explicitly: tc-test--reset leaves
+          ;; tc-convert-subtasks untouched, so a convert test running earlier in
+          ;; the suite would otherwise still own the dispatch and run convert.
+          (setq tc-archive-done nil tc-sync-child-priority nil
+                tc-convert-subtasks nil tc-seal t tc-sealed 0
+                tc-archive-reference-date ref
+                tc-archive-file afile)
+          (let ((report (with-output-to-string (tc-process-file todo) (tc-emit-report))))
+            (tc-test--drop-buffer todo)
+            (list :sealed tc-sealed
+                  :issues tc-issues
+                  :working-exists (file-readable-p afile)
+                  :sealed-exists (file-readable-p sealed)
+                  :sealed-name sealed-name
+                  :report report)))
+      (tc-test--drop-buffer todo)
+      (delete-file todo)
+      (delete-directory adir t))))
+
+(ert-deftest tc-seal-renames-working-archive-to-dated-file ()
+  "Normal: --seal renames task-archive.org to resolved-<seal-date>.org."
+  (let ((out (tc-test--seal '(:archive-content "* Resolved (archived)\n** DONE old\n"
+                              :ref (2026 7 18)))))
+    (should (= 1 (plist-get out :sealed)))
+    (should-not (plist-get out :working-exists))
+    (should (plist-get out :sealed-exists))
+    (should (equal "resolved-2026-07-18.org" (plist-get out :sealed-name)))
+    (should (tc-test--has (plist-get out :report) "sealed task-archive.org → resolved-2026-07-18.org"))))
+
+(ert-deftest tc-seal-nothing-to-seal-is-a-reported-noop ()
+  "Boundary: no working archive present — reported no-op, nothing created."
+  (let ((out (tc-test--seal '(:ref (2026 7 18)))))
+    (should (= 0 (plist-get out :sealed)))
+    (should-not (plist-get out :sealed-exists))
+    (should (tc-test--has (plist-get out :report) "no working archive to seal"))))
+
+(ert-deftest tc-seal-check-mode-previews-without-renaming ()
+  "Boundary: --check reports the seal but leaves the working archive in place."
+  (let ((out (tc-test--seal '(:archive-content "* Resolved (archived)\n"
+                              :ref (2026 7 18) :check t))))
+    (should (= 1 (plist-get out :sealed)))
+    (should (plist-get out :working-exists))
+    (should-not (plist-get out :sealed-exists))
+    (should (tc-test--has (plist-get out :report) "would seal"))))
+
+(ert-deftest tc-seal-refuses-to-clobber-existing-sealed-file ()
+  "Error: resolved-<today>.org already exists — refuse, leave both files intact."
+  (let ((out (tc-test--seal '(:archive-content "* Resolved (archived)\n"
+                              :ref (2026 7 18) :presealed t))))
+    (should (= 0 (plist-get out :sealed)))
+    (should (plist-get out :working-exists))
+    (should (plist-get out :sealed-exists))
+    (should (tc-test--has (plist-get out :report) "already exists"))))
+
+;;; ---------------------------------------------------------------------------
 ;;; Sync-child-priority harness + fixtures
 
 (defun tc-test--sync (content &optional runs check)
@@ -773,7 +864,7 @@ in ISSUES, in document order."
 
 (defun tc-test--reset-convert (&optional check)
   (setq tc-fixes 0 tc-archived 0 tc-bumped 0 tc-converted 0 tc-archived-to-file 0
-        tc-issues nil
+        tc-issues nil tc-sealed 0 tc-seal nil
         tc-check-only (and check t)
         tc-archive-done nil tc-sync-child-priority nil tc-convert-subtasks t
         tc-current-file nil
@@ -927,8 +1018,9 @@ CLOSED: [2026-06-27 Sat 12:50] DEADLINE: <2026-06-30 Tue>
 Body line.
 ")
 
-(ert-deftest tc-convert-preserves-deadline-on-shared-planning-line-boundary ()
-  "Boundary: removing the CLOSED cookie keeps a DEADLINE sharing its planning line."
+(ert-deftest tc-convert-strips-deadline-sharing-the-planning-line-boundary ()
+  "Boundary: a DEADLINE sharing the CLOSED planning line goes too — a dated-log
+entry carries no active planning timestamp (todo-format.md). Body survives."
   (let* ((out (tc-test--convert tc-test--convert-closed-with-deadline))
          (res (plist-get out :result)))
     (should (= 1 (plist-get out :converted)))
@@ -936,8 +1028,48 @@ Body line.
              "^\\*\\*\\* 2026-06-27 Sat @ 12:50:00 [-+][0-9]\\{4\\} Ship the panel$"
              res))
     (should-not (string-match-p "CLOSED:" res))
-    (should (string-match-p "^DEADLINE: <2026-06-30 Tue>$" res))
+    (should-not (string-match-p "DEADLINE:" res))
     (should (string-match-p "^Body line\\.$" res))))
 
+(defconst tc-test--convert-closed-and-scheduled-separate-lines
+  "* Project Open Work
+** TODO [#B] Parent task
+*** DONE [#C] Book the venue :feature:
+CLOSED: [2026-06-27 Sat 12:50]
+SCHEDULED: <2026-06-20 Sat>
+Body line.
+")
+
+(ert-deftest tc-convert-strips-scheduled-on-its-own-line ()
+  "Normal (the home bug): a SCHEDULED planning line on its own — the completion
+rewrite dropped keyword/priority/tags but left the SCHEDULED, pinning the dated
+entry to the agenda as weeks-overdue. Both planning lines go; body survives."
+  (let* ((out (tc-test--convert tc-test--convert-closed-and-scheduled-separate-lines))
+         (res (plist-get out :result)))
+    (should (= 1 (plist-get out :converted)))
+    (should (string-match-p
+             "^\\*\\*\\* 2026-06-27 Sat @ 12:50:00 [-+][0-9]\\{4\\} Book the venue$"
+             res))
+    (should-not (string-match-p "CLOSED:" res))
+    (should-not (string-match-p "SCHEDULED:" res))
+    (should (string-match-p "^Body line\\.$" res))))
+
+(defconst tc-test--convert-scheduled-in-body-prose
+  "* Project Open Work
+** TODO [#B] Parent task
+*** DONE [#C] Note the mechanism :feature:
+CLOSED: [2026-06-27 Sat 12:50]
+An active SCHEDULED: <2026-06-20 Sat> in prose must survive.
+")
+
+(ert-deftest tc-convert-leaves-planning-shaped-body-prose-alone ()
+  "Boundary: a planning-shaped token inside body prose (not a canonical planning
+line) is left untouched — the strip stops at the first non-planning line."
+  (let* ((out (tc-test--convert tc-test--convert-scheduled-in-body-prose))
+         (res (plist-get out :result)))
+    (should (= 1 (plist-get out :converted)))
+    (should-not (string-match-p "CLOSED:" res))
+    (should (string-match-p "An active SCHEDULED: <2026-06-20 Sat> in prose must survive\\." res))))
+
 (provide 'test-todo-cleanup)
 ;;; test-todo-cleanup.el ends here