@cleocode/cleo 2026.2.5 → 2026.2.7

package/dist/core/nexus/permissions.js

@@ -1,126 +0,0 @@
-/**
- * NEXUS permission enforcement - three-tier access control for cross-project operations.
- *
- * Permission model:
- *   read (1)    - Query tasks, discover relationships
- *   write (2)   - read + modify task fields, add relationships
- *   execute (3) - write + create/delete tasks, run commands
- *
- * Hierarchical: execute includes write includes read.
- * Same-project operations always have full permissions.
- *
- * @task T4574
- * @epic T4540
- */
-import { z } from 'zod';
-import { CleoError } from '../errors.js';
-import { ExitCode } from '../../types/exit-codes.js';
-import { nexusGetProject, generateProjectHash, readRegistryRequired, getRegistryPath } from './registry.js';
-import { saveJson } from '../../store/json.js';
-// ── Schemas ──────────────────────────────────────────────────────────
-export const PermissionLevelSchema = z.enum(['read', 'write', 'execute']);
-export const PermissionCheckResultSchema = z.object({
-    project: z.string(),
-    required: PermissionLevelSchema,
-    granted: PermissionLevelSchema,
-    allowed: z.boolean(),
-});
-// ── Constants ────────────────────────────────────────────────────────
-const PERMISSION_LEVELS = {
-    read: 1,
-    write: 2,
-    execute: 3,
-};
-// ── Functions ────────────────────────────────────────────────────────
-/**
- * Convert a permission string to its numeric level.
- * Returns 0 for invalid/unknown permissions.
- */
-export function permissionLevel(permission) {
-    return PERMISSION_LEVELS[permission] ?? 0;
-}
-/**
- * Get the permission level for a registered project.
- * Returns 'read' as default if the project has no explicit permission.
- */
-export async function getPermission(nameOrHash) {
-    const project = await nexusGetProject(nameOrHash);
-    if (!project)
-        return 'read';
-    return project.permissions ?? 'read';
-}
-/**
- * Check if a project has sufficient permissions (non-throwing).
- * Uses hierarchical comparison: execute >= write >= read.
- *
- * @returns true if the granted permission meets or exceeds the required level.
- */
-export async function checkPermission(nameOrHash, required) {
-    // Test bypass
-    if (process.env['NEXUS_SKIP_PERMISSION_CHECK'] === 'true') {
-        return true;
-    }
-    const granted = await getPermission(nameOrHash);
-    return permissionLevel(granted) >= permissionLevel(required);
-}
-/**
- * Require a permission level or throw CleoError.
- * Used as a guard at the start of cross-project operations.
- */
-export async function requirePermission(nameOrHash, required, operationName = 'operation') {
-    // Test bypass
-    if (process.env['NEXUS_SKIP_PERMISSION_CHECK'] === 'true') {
-        return;
-    }
-    const granted = await getPermission(nameOrHash);
-    if (permissionLevel(granted) < permissionLevel(required)) {
-        throw new CleoError(ExitCode.NEXUS_PERMISSION_DENIED, `Permission denied: '${required}' required for '${operationName}' on project '${nameOrHash}' (granted: ${granted})`);
-    }
-}
-/**
- * Full permission check returning a structured result.
- */
-export async function checkPermissionDetail(nameOrHash, required) {
-    const granted = await getPermission(nameOrHash);
-    return {
-        project: nameOrHash,
-        required,
-        granted,
-        allowed: permissionLevel(granted) >= permissionLevel(required),
-    };
-}
-/**
- * Set the permission level for a project.
- * Validates the permission value and updates the registry.
- * @task T4574
- */
-export async function setPermission(nameOrHash, permission) {
-    if (!nameOrHash) {
-        throw new CleoError(ExitCode.INVALID_INPUT, 'Project name or hash required');
-    }
-    const project = await nexusGetProject(nameOrHash);
-    if (!project) {
-        throw new CleoError(ExitCode.NOT_FOUND, `Project not found in registry: ${nameOrHash}`);
-    }
-    const projectHash = generateProjectHash(project.path);
-    const registry = await readRegistryRequired();
-    if (!registry.projects[projectHash]) {
-        throw new CleoError(ExitCode.NOT_FOUND, `Project not found in registry: ${nameOrHash}`);
-    }
-    registry.projects[projectHash].permissions = permission;
-    registry.lastUpdated = new Date().toISOString();
-    await saveJson(getRegistryPath(), registry);
-}
-/** Convenience: check read access. */
-export async function canRead(nameOrHash) {
-    return checkPermission(nameOrHash, 'read');
-}
-/** Convenience: check write access. */
-export async function canWrite(nameOrHash) {
-    return checkPermission(nameOrHash, 'write');
-}
-/** Convenience: check execute access. */
-export async function canExecute(nameOrHash) {
-    return checkPermission(nameOrHash, 'execute');
-}
-//# sourceMappingURL=permissions.js.map

package/dist/core/nexus/permissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/core/nexus/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,eAAe,EAA6B,MAAM,eAAe,CAAC;AACvI,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,wEAAwE;AAExE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,qBAAqB;IAC/B,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,wEAAwE;AAExE,MAAM,iBAAiB,GAAyC;IAC9D,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,wEAAwE;AAExE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,iBAAiB,CAAC,UAAkC,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC5B,OAAO,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkB,EAClB,QAA8B;IAE9B,cAAc;IACd,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO,eAAe,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,QAA8B,EAC9B,aAAa,GAAG,WAAW;IAE3B,cAAc;IACd,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,eAAe,CAAC,OAAO,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,uBAAuB,EAChC,uBAAuB,QAAQ,mBAAmB,aAAa,iBAAiB,UAAU,eAAe,OAAO,GAAG,CACpH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,EAClB,QAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,QAAQ;QACR,OAAO;QACP,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,UAAgC;IAEhC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,SAAS,EAClB,kCAAkC,UAAU,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAE9C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,SAAS,EAClB,kCAAkC,UAAU,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,WAAW,GAAG,UAAU,CAAC;IACxD,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,QAAQ,CAAC,eAAe,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAAkB;IAC9C,OAAO,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,UAAkB;IAC/C,OAAO,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,OAAO,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC"}

package/dist/core/nexus/query.d.ts

@@ -1,55 +0,0 @@
-/**
- * NEXUS query parser and resolver - cross-project task references.
- *
- * Supports the `project:taskId` syntax:
- *   - `my-app:T001`  - Named project
- *   - `.:T001`       - Current project
- *   - `*:T001`       - Wildcard (all projects)
- *   - `T001`         - Implicit current project
- *
- * @task T4574
- * @epic T4540
- */
-import { z } from 'zod';
-import type { Task } from '../../types/task.js';
-export declare const NexusParsedQuerySchema: z.ZodObject<{
-    project: z.ZodString;
-    taskId: z.ZodString;
-    wildcard: z.ZodBoolean;
-}, z.core.$strip>;
-export type NexusParsedQuery = z.infer<typeof NexusParsedQuerySchema>;
-/** Task with project context annotation. */
-export type NexusResolvedTask = Task & {
-    _project: string;
-};
-/**
- * Validate a query string matches expected syntax.
- */
-export declare function validateSyntax(query: string): boolean;
-/**
- * Parse a query string into its components.
- * @throws CleoError with NEXUS_INVALID_SYNTAX for bad format.
- */
-export declare function parseQuery(query: string, currentProject?: string): NexusParsedQuery;
-/**
- * Get the current project name from context.
- * Reads .cleo/project-info.json or falls back to directory name.
- */
-export declare function getCurrentProject(): string;
-/**
- * Resolve a project name to its filesystem path.
- * Handles special cases: "." (current), "*" (wildcard marker).
- */
-export declare function resolveProjectPath(projectName: string): Promise<string>;
-/**
- * Resolve a query to task data.
- * For wildcard queries, returns an array of matches from all projects.
- * For named projects, returns a single task with project context.
- */
-export declare function resolveTask(query: string, currentProject?: string): Promise<NexusResolvedTask | NexusResolvedTask[]>;
-/**
- * Extract the project name from a query without full resolution.
- * Useful for permission checks before task lookup.
- */
-export declare function getProjectFromQuery(query: string, currentProject?: string): string;
-//# sourceMappingURL=query.d.ts.map

package/dist/core/nexus/query.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/core/nexus/query.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAQhD,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,4CAA4C;AAC5C,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAU5D;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGrD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,gBAAgB,CA6BnF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAqB1C;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B7E;AAmBD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,iBAAiB,EAAE,CAAC,CAoB1H;AA0BD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlF"}

package/dist/core/nexus/query.js

@@ -1,181 +0,0 @@
-/**
- * NEXUS query parser and resolver - cross-project task references.
- *
- * Supports the `project:taskId` syntax:
- *   - `my-app:T001`  - Named project
- *   - `.:T001`       - Current project
- *   - `*:T001`       - Wildcard (all projects)
- *   - `T001`         - Implicit current project
- *
- * @task T4574
- * @epic T4540
- */
-import { join, basename } from 'node:path';
-import { existsSync, readFileSync } from 'node:fs';
-import { readFile, access } from 'node:fs/promises';
-import { z } from 'zod';
-import { CleoError } from '../errors.js';
-import { ExitCode } from '../../types/exit-codes.js';
-import { readRegistry, nexusGetProject, } from './registry.js';
-// ── Schemas ──────────────────────────────────────────────────────────
-export const NexusParsedQuerySchema = z.object({
-    project: z.string(),
-    taskId: z.string(),
-    wildcard: z.boolean(),
-});
-// ── Query syntax ─────────────────────────────────────────────────────
-/** Regex for a bare task ID (T followed by 3+ digits). */
-const TASK_ID_RE = /^T\d{3,}$/;
-/** Regex for project:taskId syntax. */
-const QUALIFIED_RE = /^([a-z0-9_-]+|\.|\*):T\d{3,}$/;
-/**
- * Validate a query string matches expected syntax.
- */
-export function validateSyntax(query) {
-    if (!query)
-        return false;
-    return TASK_ID_RE.test(query) || QUALIFIED_RE.test(query);
-}
-/**
- * Parse a query string into its components.
- * @throws CleoError with NEXUS_INVALID_SYNTAX for bad format.
- */
-export function parseQuery(query, currentProject) {
-    if (!validateSyntax(query)) {
-        throw new CleoError(ExitCode.NEXUS_INVALID_SYNTAX, `Invalid query syntax: ${query}. Expected: T001, project:T001, .:T001, or *:T001`);
-    }
-    // Check for colon separator
-    const colonIdx = query.indexOf(':');
-    if (colonIdx === -1) {
-        // Bare task ID -- implicit current project
-        const project = currentProject ?? getCurrentProject();
-        return { project, taskId: query, wildcard: false };
-    }
-    const prefix = query.substring(0, colonIdx);
-    const taskId = query.substring(colonIdx + 1);
-    switch (prefix) {
-        case '.': {
-            const project = currentProject ?? getCurrentProject();
-            return { project, taskId, wildcard: false };
-        }
-        case '*':
-            return { project: '*', taskId, wildcard: true };
-        default:
-            return { project: prefix, taskId, wildcard: false };
-    }
-}
-/**
- * Get the current project name from context.
- * Reads .cleo/project-info.json or falls back to directory name.
- */
-export function getCurrentProject() {
-    // Allow test/env override
-    if (process.env['NEXUS_CURRENT_PROJECT']) {
-        return process.env['NEXUS_CURRENT_PROJECT'];
-    }
-    // Try to read from .cleo/project-info.json (matches bash behavior)
-    try {
-        const infoPath = join(process.cwd(), '.cleo', 'project-info.json');
-        if (existsSync(infoPath)) {
-            const data = JSON.parse(readFileSync(infoPath, 'utf-8'));
-            if (typeof data.name === 'string' && data.name.length > 0) {
-                return data.name;
-            }
-        }
-    }
-    catch {
-        // Fall through to directory name
-    }
-    // Fallback to cwd directory name
-    return basename(process.cwd());
-}
-/**
- * Resolve a project name to its filesystem path.
- * Handles special cases: "." (current), "*" (wildcard marker).
- */
-export async function resolveProjectPath(projectName) {
-    if (projectName === '*') {
-        return 'WILDCARD';
-    }
-    if (projectName === '.') {
-        // Current directory
-        const todoPath = join(process.cwd(), '.cleo', 'todo.json');
-        try {
-            await access(todoPath);
-            return process.cwd();
-        }
-        catch {
-            throw new CleoError(ExitCode.NEXUS_PROJECT_NOT_FOUND, 'Current directory is not a CLEO project');
-        }
-    }
-    // Look up in registry
-    const project = await nexusGetProject(projectName);
-    if (!project) {
-        throw new CleoError(ExitCode.NEXUS_PROJECT_NOT_FOUND, `Project not found in registry: ${projectName}`, { fix: `cleo nexus register /path/to/project --name ${projectName}` });
-    }
-    return project.path;
-}
-/**
- * Read tasks from a project's todo.json.
- */
-async function readProjectTasks(projectPath) {
-    const todoPath = join(projectPath, '.cleo', 'todo.json');
-    try {
-        const raw = await readFile(todoPath, 'utf-8');
-        const data = JSON.parse(raw);
-        return data.tasks ?? [];
-    }
-    catch {
-        throw new CleoError(ExitCode.NOT_FOUND, `Project todo.json not found: ${todoPath}`);
-    }
-}
-/**
- * Resolve a query to task data.
- * For wildcard queries, returns an array of matches from all projects.
- * For named projects, returns a single task with project context.
- */
-export async function resolveTask(query, currentProject) {
-    const parsed = parseQuery(query, currentProject);
-    if (parsed.wildcard) {
-        return resolveWildcard(parsed.taskId);
-    }
-    // Resolve project path
-    const projectPath = await resolveProjectPath(parsed.project);
-    const tasks = await readProjectTasks(projectPath);
-    const task = tasks.find(t => t.id === parsed.taskId);
-    if (!task) {
-        throw new CleoError(ExitCode.NOT_FOUND, `Task not found: ${parsed.taskId} in project ${parsed.project}`);
-    }
-    return { ...task, _project: parsed.project };
-}
-/**
- * Search for a task ID across all registered projects.
- */
-async function resolveWildcard(taskId) {
-    const registry = await readRegistry();
-    if (!registry)
-        return [];
-    const results = [];
-    for (const project of Object.values(registry.projects)) {
-        try {
-            const tasks = await readProjectTasks(project.path);
-            const match = tasks.find(t => t.id === taskId);
-            if (match) {
-                results.push({ ...match, _project: project.name });
-            }
-        }
-        catch {
-            // Skip projects with unreadable todo.json
-        }
-    }
-    return results;
-}
-/**
- * Extract the project name from a query without full resolution.
- * Useful for permission checks before task lookup.
- */
-export function getProjectFromQuery(query, currentProject) {
-    const parsed = parseQuery(query, currentProject);
-    return parsed.project;
-}
-//# sourceMappingURL=query.js.map

package/dist/core/nexus/query.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"query.js","sourceRoot":"","sources":["../../../src/core/nexus/query.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAErD,OAAO,EACL,YAAY,EACZ,eAAe,GAChB,MAAM,eAAe,CAAC;AAEvB,wEAAwE;AAExE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAMH,wEAAwE;AAExE,0DAA0D;AAC1D,MAAM,UAAU,GAAG,WAAW,CAAC;AAE/B,uCAAuC;AACvC,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAErD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,cAAuB;IAC/D,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,oBAAoB,EAC7B,yBAAyB,KAAK,mDAAmD,CAClF,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,2CAA2C;QAC3C,MAAM,OAAO,GAAG,cAAc,IAAI,iBAAiB,EAAE,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAE7C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,OAAO,GAAG,cAAc,IAAI,iBAAiB,EAAE,CAAC;YACtD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,GAAG;YACN,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClD;YACE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,0BAA0B;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC9C,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACnE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA4B,CAAC;YACpF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,iCAAiC;IACjC,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IAC1D,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;QACxB,oBAAoB;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,uBAAuB,EAChC,yCAAyC,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,uBAAuB,EAChC,kCAAkC,WAAW,EAAE,EAC/C,EAAE,GAAG,EAAE,+CAA+C,WAAW,EAAE,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,SAAS,EAClB,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,cAAuB;IACtE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAEjD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,uBAAuB;IACvB,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;IAErD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,SAAS,EAClB,mBAAmB,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,OAAO,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,cAAuB;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}

package/dist/core/nexus/registry.d.ts

@@ -1,135 +0,0 @@
-/**
- * NEXUS project registry - cross-project registration and management.
- *
- * Manages the global project registry at ~/.cleo/projects-registry.json.
- * Supports registering, unregistering, listing, and syncing projects
- * for cross-project task coordination.
- *
- * @task T4574
- * @epic T4540
- */
-import { z } from 'zod';
-export declare const NexusPermissionLevelSchema: z.ZodEnum<{
-    execute: "execute";
-    read: "read";
-    write: "write";
-}>;
-export type NexusPermissionLevel = z.infer<typeof NexusPermissionLevelSchema>;
-export declare const NexusHealthStatusSchema: z.ZodEnum<{
-    unknown: "unknown";
-    healthy: "healthy";
-    degraded: "degraded";
-    unreachable: "unreachable";
-}>;
-export type NexusHealthStatus = z.infer<typeof NexusHealthStatusSchema>;
-export declare const NexusProjectSchema: z.ZodObject<{
-    hash: z.ZodString;
-    path: z.ZodString;
-    name: z.ZodString;
-    registeredAt: z.ZodString;
-    lastSeen: z.ZodString;
-    healthStatus: z.ZodDefault<z.ZodEnum<{
-        unknown: "unknown";
-        healthy: "healthy";
-        degraded: "degraded";
-        unreachable: "unreachable";
-    }>>;
-    healthLastCheck: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    permissions: z.ZodDefault<z.ZodEnum<{
-        execute: "execute";
-        read: "read";
-        write: "write";
-    }>>;
-    lastSync: z.ZodString;
-    taskCount: z.ZodDefault<z.ZodNumber>;
-    labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
-}, z.core.$strip>;
-export type NexusProject = z.infer<typeof NexusProjectSchema>;
-export declare const NexusRegistryFileSchema: z.ZodObject<{
-    $schema: z.ZodOptional<z.ZodString>;
-    schemaVersion: z.ZodDefault<z.ZodString>;
-    lastUpdated: z.ZodString;
-    projects: z.ZodRecord<z.ZodString, z.ZodObject<{
-        hash: z.ZodString;
-        path: z.ZodString;
-        name: z.ZodString;
-        registeredAt: z.ZodString;
-        lastSeen: z.ZodString;
-        healthStatus: z.ZodDefault<z.ZodEnum<{
-            unknown: "unknown";
-            healthy: "healthy";
-            degraded: "degraded";
-            unreachable: "unreachable";
-        }>>;
-        healthLastCheck: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        permissions: z.ZodDefault<z.ZodEnum<{
-            execute: "execute";
-            read: "read";
-            write: "write";
-        }>>;
-        lastSync: z.ZodString;
-        taskCount: z.ZodDefault<z.ZodNumber>;
-        labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-export type NexusRegistryFile = z.infer<typeof NexusRegistryFileSchema>;
-/** Get path to the NEXUS home directory (cache, etc.). */
-export declare function getNexusHome(): string;
-/** Get path to the NEXUS cache directory. */
-export declare function getNexusCacheDir(): string;
-/** Get path to the unified projects registry file. */
-export declare function getRegistryPath(): string;
-/**
- * Generate a 12-character hex hash from a project path.
- * Matches Bash CLI's generate_project_hash() behavior.
- */
-export declare function generateProjectHash(projectPath: string): string;
-/**
- * Read the global registry file.
- * Returns null if the file does not exist.
- */
-export declare function readRegistry(): Promise<NexusRegistryFile | null>;
-/**
- * Read the global registry file, throwing if it does not exist.
- */
-export declare function readRegistryRequired(): Promise<NexusRegistryFile>;
-/**
- * Initialize the NEXUS directory structure and registry file.
- * Idempotent -- safe to call multiple times.
- */
-export declare function nexusInit(): Promise<void>;
-/**
- * Register a project in the global registry.
- * @returns The project hash.
- */
-export declare function nexusRegister(projectPath: string, name?: string, permissions?: NexusPermissionLevel): Promise<string>;
-/**
- * Unregister a project from the global registry.
- */
-export declare function nexusUnregister(nameOrHash: string): Promise<void>;
-/**
- * List all registered projects.
- */
-export declare function nexusList(): Promise<NexusProject[]>;
-/**
- * Get a project by name or hash.
- * Returns null if not found.
- */
-export declare function nexusGetProject(nameOrHash: string): Promise<NexusProject | null>;
-/**
- * Check if a project exists in the registry.
- */
-export declare function nexusProjectExists(nameOrHash: string): Promise<boolean>;
-/**
- * Sync project metadata (task count, labels) for a registered project.
- */
-export declare function nexusSync(nameOrHash: string): Promise<void>;
-/**
- * Sync all registered projects.
- * @returns Counts of synced and failed projects.
- */
-export declare function nexusSyncAll(): Promise<{
-    synced: number;
-    failed: number;
-}>;
-//# sourceMappingURL=registry.d.ts.map

package/dist/core/nexus/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/core/nexus/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,0BAA0B;;;;EAAuC,CAAC;AAC/E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,uBAAuB;;;;;EAA4D,CAAC;AACjG,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;iBAY7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAIxE,0DAA0D;AAC1D,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,6CAA6C;AAC7C,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,sDAAsD;AACtD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG/D;AAID;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAItE;AAED;;GAEG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAUvE;AAED;;;GAGG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB/C;AA2BD;;;GAGG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,oBAA6B,GACzC,OAAO,CAAC,MAAM,CAAC,CAwEjB;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBvE;AAED;;GAEG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAIzD;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAWtF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7E;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBjE;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBhF"}