feat: Phase 3 — stories data model, ValidStoryTransition, storage CRUD, API endpoints

- internal/task/story.go: Story struct, StoryState constants, ValidStoryTransition
- internal/task/task.go: add StoryID field
- internal/storage/db.go: stories table + story_id on tasks migrations; CreateStory,
  GetStory, ListStories, UpdateStoryStatus, ListTasksByStory; update all task
  SELECT/INSERT to include story_id; scanTask extended with sql.NullString for story_id;
  added modernc timestamp format to GetMaxUpdatedAt
- internal/storage/sqlite_cgo.go + sqlite_nocgo.go: build-tag based driver selection
  (mattn/go-sqlite3 with CGO, modernc.org/sqlite pure-Go fallback) so tests run
  without a C compiler
- internal/api/stories.go: GET/POST /api/stories, GET /api/stories/{id},
  GET/POST /api/stories/{id}/tasks (auto-wires depends_on chain),
  PUT /api/stories/{id}/status (validates transition)
- internal/api/server.go: register all story routes
- go.mod/go.sum: add modernc.org/sqlite pure-Go dependency

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

1 files changed, 120 insertions, 0 deletions

diff --git a/internal/api/stories_test.go b/internal/api/stories_test.go
new file mode 100644
index 0000000..8516ade
--- /dev/null
+++ b/internal/api/stories_test.go
@@ -0,0 +1,120 @@
+package api
+
+import (
+	"bytes"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/thepeterstone/claudomator/internal/task"
+)
+
+func TestCreateStory_API(t *testing.T) {
+	srv, _ := testServer(t)
+
+	body := `{"name":"My Story","project_id":"proj-1"}`
+	req := httptest.NewRequest("POST", "/api/stories", bytes.NewBufferString(body))
+	req.Header.Set("Content-Type", "application/json")
+	w := httptest.NewRecorder()
+	srv.mux.ServeHTTP(w, req)
+
+	if w.Code != http.StatusCreated {
+		t.Fatalf("expected 201, got %d: %s", w.Code, w.Body.String())
+	}
+	var st task.Story
+	if err := json.NewDecoder(w.Body).Decode(&st); err != nil {
+		t.Fatalf("decode response: %v", err)
+	}
+	if st.Name != "My Story" {
+		t.Errorf("Name: want 'My Story', got %q", st.Name)
+	}
+	if st.ID == "" {
+		t.Error("ID should be auto-generated")
+	}
+	if st.Status != task.StoryPending {
+		t.Errorf("Status: want PENDING, got %q", st.Status)
+	}
+}
+
+func TestGetStory_API(t *testing.T) {
+	srv, _ := testServer(t)
+
+	// Create a story first.
+	body := `{"name":"Get Me"}`
+	req := httptest.NewRequest("POST", "/api/stories", bytes.NewBufferString(body))
+	req.Header.Set("Content-Type", "application/json")
+	w := httptest.NewRecorder()
+	srv.mux.ServeHTTP(w, req)
+	if w.Code != http.StatusCreated {
+		t.Fatalf("create story: expected 201, got %d", w.Code)
+	}
+	var created task.Story
+	json.NewDecoder(w.Body).Decode(&created)
+
+	// Fetch it.
+	req2 := httptest.NewRequest("GET", "/api/stories/"+created.ID, nil)
+	w2 := httptest.NewRecorder()
+	srv.mux.ServeHTTP(w2, req2)
+
+	if w2.Code != http.StatusOK {
+		t.Fatalf("get story: expected 200, got %d: %s", w2.Code, w2.Body.String())
+	}
+	var got task.Story
+	if err := json.NewDecoder(w2.Body).Decode(&got); err != nil {
+		t.Fatalf("decode: %v", err)
+	}
+	if got.ID != created.ID {
+		t.Errorf("ID: want %q, got %q", created.ID, got.ID)
+	}
+	if got.Name != "Get Me" {
+		t.Errorf("Name: want 'Get Me', got %q", got.Name)
+	}
+}
+
+func TestAddTaskToStory_AutoWiresDependsOn(t *testing.T) {
+	srv, _ := testServer(t)
+
+	// Create a story.
+	storyBody := `{"name":"Story For Tasks"}`
+	req := httptest.NewRequest("POST", "/api/stories", bytes.NewBufferString(storyBody))
+	req.Header.Set("Content-Type", "application/json")
+	w := httptest.NewRecorder()
+	srv.mux.ServeHTTP(w, req)
+	if w.Code != http.StatusCreated {
+		t.Fatalf("create story: %d %s", w.Code, w.Body.String())
+	}
+	var story task.Story
+	json.NewDecoder(w.Body).Decode(&story)
+
+	addTask := func(name string) *task.Task {
+		body := `{"name":"` + name + `","agent":{"type":"claude","instructions":"do it"}}`
+		r := httptest.NewRequest("POST", "/api/stories/"+story.ID+"/tasks", bytes.NewBufferString(body))
+		r.Header.Set("Content-Type", "application/json")
+		wr := httptest.NewRecorder()
+		srv.mux.ServeHTTP(wr, r)
+		if wr.Code != http.StatusCreated {
+			t.Fatalf("add task %s: expected 201, got %d: %s", name, wr.Code, wr.Body.String())
+		}
+		var tk task.Task
+		json.NewDecoder(wr.Body).Decode(&tk)
+		return &tk
+	}
+
+	task1 := addTask("Task 1")
+	task2 := addTask("Task 2")
+	task3 := addTask("Task 3")
+
+	// task1 has no dependencies.
+	if len(task1.DependsOn) != 0 {
+		t.Errorf("task1.DependsOn: want [], got %v", task1.DependsOn)
+	}
+	// task2 depends on task1.
+	if len(task2.DependsOn) != 1 || task2.DependsOn[0] != task1.ID {
+		t.Errorf("task2.DependsOn: want [%s], got %v", task1.ID, task2.DependsOn)
+	}
+	// task3 depends on task2.
+	if len(task3.DependsOn) != 1 || task3.DependsOn[0] != task2.ID {
+		t.Errorf("task3.DependsOn: want [%s], got %v", task2.ID, task3.DependsOn)
+	}
+}