@cleocode/contracts 2026.9.26 → 2026.10.2

package/dist/invariants/sync-write-invariants.js

@@ -0,0 +1,123 @@
+/**
+ * Sync write-invariant registry (T12881): every rule TypeScript enforces on a
+ * write to a synced table, with the class that says how it survives merged
+ * apply (spec `t12859-sync-write-validator-inventory` §3.6.7, journal design
+ * §3.6).
+ *
+ * The raw applier never runs the TypeScript write paths, so a rejection site
+ * on a synced write path carries `// @sync-invariant <id>` naming an entry
+ * here, or an escape tag (`none:input-shape <reason>`,
+ * `none:local-only <reason>`). Gate 38 (`scripts/lint-sync-write-invariants.mjs`)
+ * finds the sites with the TypeScript compiler API and fails on an untagged
+ * one that is not in its shrink-only baseline, on a dangling tag, and on a
+ * registry entry that does not close (§3.6.7 rule 5).
+ *
+ * Seeded from the inventory's distinct catalogues: the trigger and index
+ * guards of §3.6.2, the fifteen post-apply check families PAC-01..PAC-15 of
+ * §3.6.5 and the typed merge rules of §3.6.6. The executable post-apply
+ * checks and the merge-rule registry belong to the merge engine (T12344) and
+ * do not exist yet, so each PAC and each rule carries `pending` naming its
+ * own open T12344 item (T12922..T12936 for PAC-01..15, T12937..T12945 for the
+ * rules); `--verify-tasks` checks those tasks are open. Trigger-covered
+ * entries carry no pending: their triggers and indexes are checked against
+ * migrations and fresh stores. The §3.5 Rule 4 guard-class footprint check is
+ * not enforced until that class exists.
+ *
+ * Types and const data only (arch gate 10).
+ *
+ * @task T12881
+ * @epic T12323
+ */
+/** A post-apply check not implemented yet; `task` is its T12344 item. */
+function checkPending(task) {
+    return { task, reason: 'the post-apply check is not implemented yet (T12344 item)' };
+}
+/** A merge rule the merge-rule registry does not define yet; `task` is its T12344 item. */
+function rulePending(task) {
+    return { task, reason: 'the typed merge-rule registry does not define it yet (T12344 item)' };
+}
+function trigger(id, tables, triggers, inventory, reason) {
+    return { id, class: 'trigger-covered', tables, sites: [], triggers, inventory, reason };
+}
+function pac(id, item, task, tables, footprint, reason) {
+    return {
+        id,
+        class: 'post-apply-check',
+        tables,
+        sites: [],
+        check: { footprint },
+        inventory: [item],
+        pending: checkPending(task),
+        reason,
+    };
+}
+function rule(id, task, table, columns, inventory, reason, tables = [table]) {
+    return {
+        id,
+        class: 'monotonic-merge-rule',
+        tables,
+        sites: [],
+        mergeRule: { table, columns },
+        inventory,
+        pending: rulePending(task),
+        reason,
+    };
+}
+/**
+ * The sync write-invariant registry, in inventory order.
+ *
+ * @task T12881
+ */
+export const SYNC_WRITE_INVARIANTS = Object.freeze([
+    // §3.6.2: RAISE guards and UNIQUE indexes a migration creates on synced tables.
+    trigger('task.parent.no-cycle', ['tasks_tasks'], ['tasks_tasks_parent_cycle_guard_insert', 'tasks_tasks_parent_cycle_guard_update'], ['V10', 'V11'], 'the parent chain is acyclic (the INSERT variant misses a self-parent, §3.6.3 item 2)'),
+    trigger('task.parent.type-matrix', ['tasks_tasks'], ['tasks_tasks_parent_type_matrix_insert', 'tasks_tasks_parent_type_matrix_update'], ['X1'], 'parent/child type matrix; weaker than TypeScript (§3.6.3 item 1), the rest is PAC-01'),
+    trigger('task.status.pipeline-consistency', ['tasks_tasks'], ['trg_tasks_tasks_status_pipeline_insert', 'trg_tasks_tasks_status_pipeline_update'], ['V19', 'C21'], 'T877: status and pipeline_stage agree on one row'),
+    trigger('task.relation.non-containment', ['tasks_task_relations'], ['tasks_task_relations_non_containment_insert', 'tasks_task_relations_non_containment_update'], ['V31'], 'no relation between a parent and its child, on relation writes only (§3.6.3 item 4)'),
+    trigger('task.ac.child-target', ['tasks_task_acceptance_criteria'], ['tasks_task_acceptance_child_target_insert', 'tasks_task_acceptance_child_target_update'], ['C28'], 'a child_task AC targets a direct child, on AC writes only (§3.6.3 item 4)'),
+    trigger('session.handoff.append-only', ['tasks_session_handoff_entries'], ['trg_tasks_session_handoff_no_update'], ['H2'], 'handoff entries are never updated'),
+    trigger('task.claim.lease-iso', ['tasks_tasks'], ['tasks_tasks_lease_iso_insert', 'tasks_tasks_lease_iso_update'], [], 'claim lease timestamps are ISO-8601 (t12736)'),
+    trigger('task.ac-binding.unique', ['tasks_evidence_ac_bindings'], ['uq_tasks_evidence_ac_bindings_atom_ac_type'], ['C31'], 'one binding per (evidence atom, AC, binding type)'),
+    trigger('release.version.unique', ['tasks_releases'], ['uq_tasks_releases_version'], ['REL-1'], 'one release row per version'),
+    trigger('selfimprove.dhq.one-open', ['selfimprove_dhq'], ['ux_selfimprove_dhq_open'], ['D49'], 'at most one open DHQ entry per question_hash'),
+    trigger('account.one-active-per-provider', ['accounts'], ['ux_accounts_active_provider'], ['A40'], 'at most one active account per provider (partial UNIQUE)'),
+    // §3.6.5: post-apply check families (T12344 items).
+    pac('task.tree.shape', 'PAC-01', 'T12922', ['tasks_tasks'], ['rows with a changed parent_id or type', 'their direct children and ancestor chain'], 'saga→epic→task→subtask matrix, non-saga has a parent, depth ≤ 3, no self-parent'),
+    pac('task.terminal-parent.live-children', 'PAC-02', 'T12923', ['tasks_tasks'], ['rows whose status, stage or parent changed', 'their parent and siblings'], 'no terminal parent with a live child; epic stage ≥ children; rollup re-evaluated'),
+    pac('task.dependency.graph', 'PAC-03', 'T12924', ['tasks_task_dependencies', 'tasks_tasks'], ['dependency edges inserted in the page', 'reachability from each depends_on'], 'dependencies are acyclic, with no self-edge'),
+    pac('task.done.evidence', 'PAC-04', 'T12925', ['tasks_tasks', 'tasks_task_acceptance_criteria', 'tasks_evidence_ac_bindings'], ['done rows in the page', 'their AC rows, bindings, acceptance_json and verification_json'], 'a done task has passed verification and every AC bound or waived'),
+    pac('task.ac.integrity', 'PAC-05', 'T12926', ['tasks_tasks', 'tasks_task_acceptance_criteria', 'tasks_evidence_ac_bindings'], ['tasks whose AC rows, bindings, acceptance_json, parent_id or relations changed'], 'acceptance_json ⇔ AC rows, child_task ACs match children, bindings resolve'),
+    pac('lifecycle.rows', 'PAC-06', 'T12927', ['tasks_lifecycle_pipelines', 'tasks_lifecycle_stages', 'tasks_tasks'], ['lifecycle pipeline, stage and gate rows in the page', 'the owning task row'], 'one pipeline per task, one stage row per name, pipeline_stage ≥ completed stages'),
+    pac('derived.mirrors', 'PAC-07', 'T12928', ['tasks_task_labels', 'brain_sticky_tags', 'docs_wikilinks', 'tasks_tasks'], ['owning rows whose JSON or junction changed'], 'junction tables equal their JSON source'),
+    pac('session.goal.singletons', 'PAC-08', 'T12929', ['tasks_sessions', 'tasks_task_work_history', 'tasks_goal'], ['session rows whose status, scope or chain changed', 'work-history rows per session'], 'one active session per scope, reciprocal chain, one open interval, one live goal'),
+    pac('audit.uniqueness', 'PAC-09', 'T12930', ['tasks_audit_log'], ['audit rows with a non-null idempotency key', 'rollback audit rows'], 'idempotency keys are unique across replicas; at most one rollback per receipt'),
+    pac('identity.collisions', 'PAC-10', 'T12931', ['tasks_tasks', 'tasks_sessions', 'brain_observations', 'docs_attachments'], ['inserted rows', "the natural key's index"], 'display-id and natural-key clashes become an alias or re-mint (T12341)'),
+    pac('dedupe.at-most-one', 'PAC-11', 'T12932', ['brain_decisions', 'brain_learnings', 'tasks_external_task_links'], ['inserted rows grouped by the natural key'], 'duplicates created on two devices are merged'),
+    pac('ref.soft-orphans', 'PAC-12', 'T12933', ['brain_memory_links', 'brain_page_edges', 'docs_attachment_refs', 'tasks_task_commits'], ['reference columns of the rows in the page', 'their targets'], 'cross-DB and polymorphic references resolve'),
+    pac('supersession.graph', 'PAC-13', 'T12934', ['brain_decisions', 'docs_attachments', 'tasks_architecture_decisions'], ['rows whose supersession columns changed', 'a chain walk'], 'supersession chains are acyclic with at most one successor'),
+    pac('derived.counters', 'PAC-14', 'T12935', ['docs_attachments', 'conduit_attachments', 'docs_pipeline_manifest'], ['the owning rows'], 'derived counters and cross-column facts agree with their rows'),
+    pac('apply.preconditions', 'PAC-15', 'T12936', ['tasks_tasks'], ['the whole page'], 'no apply while the local twin collapse has failed; restore is a re-baseline'),
+    // §3.6.6: typed merge rules (T12344).
+    rule('task.status.absorbing', 'T12937', 'tasks_tasks', ['status', 'completed_at', 'cancelled_at', 'cancellation_reason', 'pipeline_stage'], ['V18', 'V20', 'C22', 'P40', 'P46', 'P47'], 'done, cancelled and archived are absorbing; leaving them needs an explicit op'),
+    rule('task.pipeline-stage.max', 'T12938', 'tasks_tasks', ['pipeline_stage'], ['V21', 'C20', 'P01', 'F3'], 'pipeline_stage is the maximum by STAGE_ORDER, except an explicit restore'),
+    rule('task.verification.frozen-on-done', 'T12939', 'tasks_tasks', ['verification_json'], ['C01', 'C02', 'C03', 'C17'], 'verification is frozen once done; otherwise merged per gate'),
+    rule('session.status.terminal', 'T12940', 'tasks_sessions', ['status', 'ended_at'], ['S7', 'S8', 'S9', 'S10', 'S11', 'S17', 'S18', 'SC2', 'N1', 'SK5', 'P32'], 'ended and orphaned are terminal except on an explicit resume'),
+    rule('audit.immutable', 'T12941', 'tasks_audit_log', ['*'], ['SA3'], 'audit rows are immutable', [
+        'tasks_audit_log',
+        'audit_log',
+    ]),
+    rule('sticky.status.one-way', 'T12942', 'brain_sticky_notes', ['status', 'converted_to_json'], ['SK2', 'SK3', 'B24'], 'active→{converted, archived} is one-way; converted_to_json is write-once'),
+    rule('release.status.absorbing', 'T12943', 'tasks_releases', ['status'], ['REL-2', 'REL-3', 'REL-4', 'REL-5', 'REL-6', 'REL-7', 'REL-8'], 'shipped release statuses are absorbing'),
+    rule('playbook.approval.once', 'T12944', 'tasks_playbook_approvals', ['status'], ['PB-1', 'PB-4', 'PB-7', 'P33'], 'an approval goes pending→decided once'),
+    rule('docs.lifecycle.transitions', 'T12945', 'docs_attachments', ['lifecycle_status'], ['D04', 'D05', 'D31', 'D32', 'D39', 'D50'], 'superseded is sticky; lifecycle transitions follow a matrix'),
+    // §3.6.0 identity-layer rows.
+    {
+        id: 'identity.local-minting',
+        class: 'identity-layer',
+        tables: ['tasks_tasks', 'tasks_sessions'],
+        sites: [],
+        inventory: ['V12', 'B07', 'B12'],
+        reason: 'ids minted from local state (display ids, integer PKs, device-derived ids) collide across replicas; T12341 uids and re-minting own it, no validator port can',
+    },
+]);
+//# sourceMappingURL=sync-write-invariants.js.map

package/dist/invariants/sync-write-invariants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-write-invariants.js","sourceRoot":"","sources":["../../src/invariants/sync-write-invariants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAkFH,yEAAyE;AACzE,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;AACvF,CAAC;AAED,2FAA2F;AAC3F,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,oEAAoE,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,OAAO,CACd,EAAU,EACV,MAAyB,EACzB,QAA2B,EAC3B,SAA4B,EAC5B,MAAc;IAEd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,GAAG,CACV,EAAU,EACV,IAAY,EACZ,IAAY,EACZ,MAAyB,EACzB,SAA4B,EAC5B,MAAc;IAEd,OAAO;QACL,EAAE;QACF,KAAK,EAAE,kBAAkB;QACzB,MAAM;QACN,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,EAAE,SAAS,EAAE;QACpB,SAAS,EAAE,CAAC,IAAI,CAAC;QACjB,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC;QAC3B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CACX,EAAU,EACV,IAAY,EACZ,KAAa,EACb,OAA0B,EAC1B,SAA4B,EAC5B,MAAc,EACd,SAA4B,CAAC,KAAK,CAAC;IAEnC,OAAO;QACL,EAAE;QACF,KAAK,EAAE,sBAAsB;QAC7B,MAAM;QACN,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QAC7B,SAAS;QACT,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAkC,MAAM,CAAC,MAAM,CAAC;IAChF,gFAAgF;IAChF,OAAO,CACL,sBAAsB,EACtB,CAAC,aAAa,CAAC,EACf,CAAC,uCAAuC,EAAE,uCAAuC,CAAC,EAClF,CAAC,KAAK,EAAE,KAAK,CAAC,EACd,sFAAsF,CACvF;IACD,OAAO,CACL,yBAAyB,EACzB,CAAC,aAAa,CAAC,EACf,CAAC,uCAAuC,EAAE,uCAAuC,CAAC,EAClF,CAAC,IAAI,CAAC,EACN,sFAAsF,CACvF;IACD,OAAO,CACL,kCAAkC,EAClC,CAAC,aAAa,CAAC,EACf,CAAC,wCAAwC,EAAE,wCAAwC,CAAC,EACpF,CAAC,KAAK,EAAE,KAAK,CAAC,EACd,kDAAkD,CACnD;IACD,OAAO,CACL,+BAA+B,EAC/B,CAAC,sBAAsB,CAAC,EACxB,CAAC,6CAA6C,EAAE,6CAA6C,CAAC,EAC9F,CAAC,KAAK,CAAC,EACP,qFAAqF,CACtF;IACD,OAAO,CACL,sBAAsB,EACtB,CAAC,gCAAgC,CAAC,EAClC,CAAC,2CAA2C,EAAE,2CAA2C,CAAC,EAC1F,CAAC,KAAK,CAAC,EACP,2EAA2E,CAC5E;IACD,OAAO,CACL,6BAA6B,EAC7B,CAAC,+BAA+B,CAAC,EACjC,CAAC,qCAAqC,CAAC,EACvC,CAAC,IAAI,CAAC,EACN,mCAAmC,CACpC;IACD,OAAO,CACL,sBAAsB,EACtB,CAAC,aAAa,CAAC,EACf,CAAC,8BAA8B,EAAE,8BAA8B,CAAC,EAChE,EAAE,EACF,8CAA8C,CAC/C;IACD,OAAO,CACL,wBAAwB,EACxB,CAAC,4BAA4B,CAAC,EAC9B,CAAC,4CAA4C,CAAC,EAC9C,CAAC,KAAK,CAAC,EACP,mDAAmD,CACpD;IACD,OAAO,CACL,wBAAwB,EACxB,CAAC,gBAAgB,CAAC,EAClB,CAAC,2BAA2B,CAAC,EAC7B,CAAC,OAAO,CAAC,EACT,6BAA6B,CAC9B;IACD,OAAO,CACL,0BAA0B,EAC1B,CAAC,iBAAiB,CAAC,EACnB,CAAC,yBAAyB,CAAC,EAC3B,CAAC,KAAK,CAAC,EACP,8CAA8C,CAC/C;IACD,OAAO,CACL,iCAAiC,EACjC,CAAC,UAAU,CAAC,EACZ,CAAC,6BAA6B,CAAC,EAC/B,CAAC,KAAK,CAAC,EACP,0DAA0D,CAC3D;IAED,oDAAoD;IACpD,GAAG,CACD,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,CAAC,aAAa,CAAC,EACf,CAAC,uCAAuC,EAAE,0CAA0C,CAAC,EACrF,iFAAiF,CAClF;IACD,GAAG,CACD,oCAAoC,EACpC,QAAQ,EACR,QAAQ,EACR,CAAC,aAAa,CAAC,EACf,CAAC,4CAA4C,EAAE,2BAA2B,CAAC,EAC3E,kFAAkF,CACnF;IACD,GAAG,CACD,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EACR,CAAC,yBAAyB,EAAE,aAAa,CAAC,EAC1C,CAAC,uCAAuC,EAAE,mCAAmC,CAAC,EAC9E,6CAA6C,CAC9C;IACD,GAAG,CACD,oBAAoB,EACpB,QAAQ,EACR,QAAQ,EACR,CAAC,aAAa,EAAE,gCAAgC,EAAE,4BAA4B,CAAC,EAC/E,CAAC,uBAAuB,EAAE,gEAAgE,CAAC,EAC3F,kEAAkE,CACnE;IACD,GAAG,CACD,mBAAmB,EACnB,QAAQ,EACR,QAAQ,EACR,CAAC,aAAa,EAAE,gCAAgC,EAAE,4BAA4B,CAAC,EAC/E,CAAC,gFAAgF,CAAC,EAClF,4EAA4E,CAC7E;IACD,GAAG,CACD,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACR,CAAC,2BAA2B,EAAE,wBAAwB,EAAE,aAAa,CAAC,EACtE,CAAC,qDAAqD,EAAE,qBAAqB,CAAC,EAC9E,kFAAkF,CACnF;IACD,GAAG,CACD,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAC3E,CAAC,4CAA4C,CAAC,EAC9C,yCAAyC,CAC1C;IACD,GAAG,CACD,yBAAyB,EACzB,QAAQ,EACR,QAAQ,EACR,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,YAAY,CAAC,EAC3D,CAAC,mDAAmD,EAAE,+BAA+B,CAAC,EACtF,kFAAkF,CACnF;IACD,GAAG,CACD,kBAAkB,EAClB,QAAQ,EACR,QAAQ,EACR,CAAC,iBAAiB,CAAC,EACnB,CAAC,4CAA4C,EAAE,qBAAqB,CAAC,EACrE,+EAA+E,CAChF;IACD,GAAG,CACD,qBAAqB,EACrB,QAAQ,EACR,QAAQ,EACR,CAAC,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,EAC3E,CAAC,eAAe,EAAE,yBAAyB,CAAC,EAC5C,wEAAwE,CACzE;IACD,GAAG,CACD,oBAAoB,EACpB,QAAQ,EACR,QAAQ,EACR,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,EACnE,CAAC,0CAA0C,CAAC,EAC5C,8CAA8C,CAC/C;IACD,GAAG,CACD,kBAAkB,EAClB,QAAQ,EACR,QAAQ,EACR,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,EACxF,CAAC,2CAA2C,EAAE,eAAe,CAAC,EAC9D,6CAA6C,CAC9C;IACD,GAAG,CACD,oBAAoB,EACpB,QAAQ,EACR,QAAQ,EACR,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,8BAA8B,CAAC,EACvE,CAAC,yCAAyC,EAAE,cAAc,CAAC,EAC3D,4DAA4D,CAC7D;IACD,GAAG,CACD,kBAAkB,EAClB,QAAQ,EACR,QAAQ,EACR,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,wBAAwB,CAAC,EACrE,CAAC,iBAAiB,CAAC,EACnB,+DAA+D,CAChE;IACD,GAAG,CACD,qBAAqB,EACrB,QAAQ,EACR,QAAQ,EACR,CAAC,aAAa,CAAC,EACf,CAAC,gBAAgB,CAAC,EAClB,6EAA6E,CAC9E;IAED,sCAAsC;IACtC,IAAI,CACF,uBAAuB,EACvB,QAAQ,EACR,aAAa,EACb,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,EACnF,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAC1C,+EAA+E,CAChF;IACD,IAAI,CACF,yBAAyB,EACzB,QAAQ,EACR,aAAa,EACb,CAAC,gBAAgB,CAAC,EAClB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,EAC3B,0EAA0E,CAC3E;IACD,IAAI,CACF,kCAAkC,EAClC,QAAQ,EACR,aAAa,EACb,CAAC,mBAAmB,CAAC,EACrB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAC5B,6DAA6D,CAC9D;IACD,IAAI,CACF,yBAAyB,EACzB,QAAQ,EACR,gBAAgB,EAChB,CAAC,QAAQ,EAAE,UAAU,CAAC,EACtB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EACzE,8DAA8D,CAC/D;IACD,IAAI,CAAC,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,0BAA0B,EAAE;QAC/F,iBAAiB;QACjB,WAAW;KACZ,CAAC;IACF,IAAI,CACF,uBAAuB,EACvB,QAAQ,EACR,oBAAoB,EACpB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAC/B,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EACrB,0EAA0E,CAC3E;IACD,IAAI,CACF,0BAA0B,EAC1B,QAAQ,EACR,gBAAgB,EAChB,CAAC,QAAQ,CAAC,EACV,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAC/D,wCAAwC,CACzC;IACD,IAAI,CACF,wBAAwB,EACxB,QAAQ,EACR,0BAA0B,EAC1B,CAAC,QAAQ,CAAC,EACV,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAC/B,uCAAuC,CACxC;IACD,IAAI,CACF,4BAA4B,EAC5B,QAAQ,EACR,kBAAkB,EAClB,CAAC,kBAAkB,CAAC,EACpB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAC1C,6DAA6D,CAC9D;IAED,8BAA8B;IAC9B;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,CAAC,aAAa,EAAE,gBAAgB,CAAC;QACzC,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;QAChC,MAAM,EACJ,8JAA8J;KACjK;CACF,CAAC,CAAC"}

package/dist/nexus-account.d.ts

@@ -28,7 +28,7 @@ export declare const NEXUS_CLI_CLIENT_ID = "cleo-cli";
  */
 export declare const NEXUS_LOGIN_TARGET = "nexus";
 /** Stable error codes of the Nexus account flows. */
-export declare const NEXUS_ACCOUNT_ERROR_CODES: readonly ["E_NEXUS_INVALID_API_URL", "E_NEXUS_NOT_SIGNED_IN", "E_NEXUS_SESSION_EXPIRED", "E_NEXUS_DEVICE_CODE_START_FAILED", "E_NEXUS_UNTRUSTED_VERIFICATION_URI", "E_NEXUS_DEVICE_CODE_EXPIRED", "E_NEXUS_ACCESS_DENIED", "E_NEXUS_DEVICE_CODE_FAILED", "E_NEXUS_REVOKE_FAILED", "E_NEXUS_REQUEST_FAILED", "E_NEXUS_NOT_A_PROJECT", "E_NEXUS_INVALID_LABEL", "E_NEXUS_UNREACHABLE", "E_NEXUS_REVOKE_PENDING", "E_NEXUS_DEVICE_SIGNED_OUT", "E_NEXUS_DEVICE_REVOKED", "E_NEXUS_CREDENTIAL_COMPROMISED", "E_NEXUS_INSUFFICIENT_SCOPE", "E_NEXUS_REPLICA_COPIED", "E_NEXUS_BUSY", "E_NEXUS_ACCOUNT_AMBIGUOUS", "E_NEXUS_DEVICE_REQUIRED"];
+export declare const NEXUS_ACCOUNT_ERROR_CODES: readonly ["E_NEXUS_INVALID_API_URL", "E_NEXUS_NOT_SIGNED_IN", "E_NEXUS_SESSION_EXPIRED", "E_NEXUS_DEVICE_CODE_START_FAILED", "E_NEXUS_UNTRUSTED_VERIFICATION_URI", "E_NEXUS_DEVICE_CODE_EXPIRED", "E_NEXUS_ACCESS_DENIED", "E_NEXUS_DEVICE_CODE_FAILED", "E_NEXUS_REVOKE_FAILED", "E_NEXUS_REQUEST_FAILED", "E_NEXUS_NOT_A_PROJECT", "E_NEXUS_INVALID_LABEL", "E_NEXUS_UNREACHABLE", "E_NEXUS_REVOKE_PENDING", "E_NEXUS_DEVICE_SIGNED_OUT", "E_NEXUS_DEVICE_REVOKED", "E_NEXUS_CREDENTIAL_COMPROMISED", "E_NEXUS_INSUFFICIENT_SCOPE", "E_NEXUS_REPLICA_COPIED", "E_NEXUS_BUSY", "E_NEXUS_ACCOUNT_AMBIGUOUS", "E_NEXUS_DEVICE_REQUIRED", "E_NEXUS_LINK_FILE_UNSUPPORTED", "E_NEXUS_VAULT_LEASE_HELD", "E_NEXUS_VAULT_BEHIND", "E_NEXUS_VAULT_LOCAL_CHANGES", "E_NEXUS_VAULT_VERIFY_FAILED", "E_NEXUS_VAULT_KEY_UNAVAILABLE", "E_NEXUS_VAULT_NOT_LINKED", "E_NEXUS_VAULT_EMPTY", "E_NEXUS_VAULT_REFUSED", "E_NEXUS_VAULT_STREAM_UPGRADED", "E_NEXUS_VAULT_STORE_BUSY", "E_NEXUS_VAULT_TARGET_OCCUPIED"];
 /** One of {@link NEXUS_ACCOUNT_ERROR_CODES}. */
 export type NexusAccountErrorCode = (typeof NEXUS_ACCOUNT_ERROR_CODES)[number];
 /** The signed-in user, as `/v1/account/me` reports it. */
@@ -120,9 +120,9 @@ export interface NexusLoginResult {
     credentialsPath: string;
     /** Non-fatal problems, e.g. the account lookup failed after a good login. */
     warnings: string[];
-    /** The enrolled device; present only with `CLEO_NEXUS_DEVICE=1` (device credentials). */
+    /** The enrolled device; present only with device credentials (the default; off with `CLEO_NEXUS_DEVICE=0`). */
     device?: NexusLoginDevice;
-    /** Scopes of the stored device credential; present only with `CLEO_NEXUS_DEVICE=1`. */
+    /** Scopes of the stored device credential; present only with device credentials. */
     scopes?: string[];
 }
 /** Result of `cleo logout nexus`. */
@@ -141,6 +141,53 @@ export interface NexusLogoutResult {
     /** Non-fatal problems. */
     warnings: string[];
 }
+/**
+ * What happened to one device's sign-out (E9) or revoke (E10) in
+ * `cleo logout nexus [--revoke]` with device credentials (the default; `CLEO_NEXUS_DEVICE=0` turns them off) (cleo-nexus
+ * device contract §3.5, M3). Holds no secret.
+ *
+ * - `confirmed`: the server answered 200, or 401 `device-signed-out` /
+ *   `device-revoked` (a revoke accepts only `device-revoked`);
+ * - `pending`: no usable answer (network, timeout, 429, 5xx, or a route the
+ *   server does not have yet); the credentials stay in their slot and the
+ *   next `cleo logout nexus`, `cleo login nexus` or cloud command retries;
+ * - `unconfirmed`: every credential held was refused as stale, so the CLI
+ *   cannot finish it; the slot is kept, and a sign-out or revoke of the
+ *   device on cleocode.dev lets the next retry confirm it;
+ * - `signed-out`: a revoke found the device already signed out (E10 401
+ *   `device-signed-out`). Its credentials are dead, so the CLI cannot revoke
+ *   it; the revoke slot is cleared (never retried) and the device must be
+ *   revoked on cleocode.dev.
+ */
+export type NexusDeviceEndOutcome = 'confirmed' | 'pending' | 'unconfirmed' | 'signed-out';
+/** One device row of a {@link NexusDeviceLogoutResult}. */
+export interface NexusDeviceLogoutRow {
+    /** Nexus user id of the entry. */
+    userId: string;
+    /** The device the request ended. */
+    deviceId: string;
+    /** `sign-out` (E9) or `revoke` (E10). */
+    action: 'sign-out' | 'revoke';
+    /** `true` for a replaced device's leftover request retried from `retired`. */
+    retired: boolean;
+    /** Server-side outcome. */
+    outcome: NexusDeviceEndOutcome;
+    /** `true` when a confirmed revoke removed the (origin, user) entry from `nexus-device.json`. */
+    removedLocally: boolean;
+}
+/** Result of `cleo logout nexus [--revoke]` with device credentials. Holds no secret. */
+export interface NexusDeviceLogoutResult {
+    /** API origin. */
+    apiUrl: string;
+    /** `sign-out` or `revoke` (`--revoke`). */
+    action: 'sign-out' | 'revoke';
+    /** One row per device request settled or retried in this run, sorted by user then device. */
+    devices: NexusDeviceLogoutRow[];
+    /** The 9.24 session sign-out, when a leftover session was found for the origin. */
+    session: NexusLogoutResult | null;
+    /** Non-fatal problems: every non-`confirmed` row is named here. */
+    warnings: string[];
+}
 /**
  * The binding of a local CLEO project to its Nexus registration, persisted in
  * the project's machine-local `.cleo/nexus-link.json`, keyed by API origin.
@@ -160,6 +207,30 @@ export interface NexusProjectLink {
     streamId: string;
     /** ISO time of the last successful link. */
     linkedAt: string;
+    /**
+     * This store's replica id as attached on the server (device contract
+     * §3.6, §3.7). A cache, not the source of truth: the store's active
+     * `_sync_replica` row is. Absent before the first device-credential link.
+     */
+    replicaId?: string;
+    /** The Nexus device id that attached {@link NexusProjectLink.replicaId}. */
+    nexusDeviceId?: string;
+    /** ISO time the replica was last attached or confirmed. */
+    attachedAt?: string;
+}
+/**
+ * What `cleo project link` did for this machine's copy of the project with a
+ * device credential (contract §3.6 steps 3 to 5). Holds no path or secret.
+ */
+export interface NexusReplicaAttachment {
+    /** The store's replica id (UUIDv7), now attached on the server. */
+    replicaId: string;
+    /** The Nexus device that holds it. */
+    deviceId: string;
+    /** The retired replica id when this link rebound the store (a copy, or a re-enrolled device). */
+    reboundFrom: string | null;
+    /** Server time the presence report was received, or `null` when sending it failed (see warnings). */
+    presenceAt: string | null;
 }
 /** Result of `cleo project link`. */
 export interface NexusProjectLinkResult {
@@ -173,5 +244,22 @@ export interface NexusProjectLinkResult {
     alreadyLinked: boolean;
     /** Absolute path of the local binding file. */
     linkPath: string;
+    /**
+     * The replica attach and presence report, with device credentials; `null`
+     * with the 9.24 session (`CLEO_NEXUS_DEVICE=0`), which cannot attach.
+     */
+    replica: NexusReplicaAttachment | null;
+    /**
+     * Why this machine's copy was not attached, when device mode tried and
+     * failed (for example `E_NEXUS_REPLICA_COPIED`); `null` otherwise. The same
+     * text is also in {@link NexusProjectLinkResult.warnings}.
+     */
+    attachError: {
+        code: string;
+        message: string;
+        fix: string | null;
+    } | null;
+    /** Non-fatal problems (for example, presence could not be sent). */
+    warnings: string[];
 }
 //# sourceMappingURL=nexus-account.d.ts.map

package/dist/nexus-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nexus-account.d.ts","sourceRoot":"","sources":["../src/nexus-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wCAAwC;AACxC,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAEhE,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAE1C,qDAAqD;AACrD,eAAO,MAAM,yBAAyB,ymBAkC5B,CAAC;AAEX,gDAAgD;AAChD,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,8BAA8B;;;;;;iBAOzC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAG/B,CAAC;AAEH,0CAA0C;AAC1C,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,qCAAqC;AACrC,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,8CAA8C;AAC9C,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,eAAe,CAAC;AAEzF,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,KAAK,EAAE,iBAAiB,CAAC;IACzB,0CAA0C;IAC1C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2EAA2E;IAC3E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kEAAkE;IAClE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6EAA6E;IAC7E,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAED,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC9B,wCAAwC;IACxC,YAAY,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC9C,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sEAAsE;IACtE,eAAe,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,yFAAyF;IACzF,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,UAAU,EAAE,SAAS,GAAG,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjE,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,cAAc,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,eAAe,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,sBAAsB;IACrC,6BAA6B;IAC7B,IAAI,EAAE,gBAAgB,CAAC;IACvB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"nexus-account.d.ts","sourceRoot":"","sources":["../src/nexus-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wCAAwC;AACxC,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAEhE,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAE1C,qDAAqD;AACrD,eAAO,MAAM,yBAAyB,u8BA+D5B,CAAC;AAEX,gDAAgD;AAChD,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,8BAA8B;;;;;;iBAOzC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAG/B,CAAC;AAEH,0CAA0C;AAC1C,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,qCAAqC;AACrC,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,8CAA8C;AAC9C,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,eAAe,CAAC;AAEzF,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,KAAK,EAAE,iBAAiB,CAAC;IACzB,0CAA0C;IAC1C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2EAA2E;IAC3E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kEAAkE;IAClE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6EAA6E;IAC7E,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAED,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC9B,wCAAwC;IACxC,YAAY,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC9C,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sEAAsE;IACtE,eAAe,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+GAA+G;IAC/G,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,UAAU,EAAE,SAAS,GAAG,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjE,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,YAAY,CAAC;AAE3F,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACnC,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;IACjB,2BAA2B;IAC3B,OAAO,EAAE,qBAAqB,CAAC;IAC/B,gGAAgG;IAChG,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,yFAAyF;AACzF,MAAM,WAAW,uBAAuB;IACtC,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,6FAA6F;IAC7F,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,mFAAmF;IACnF,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,mEAAmE;IACnE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,cAAc,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,eAAe,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qGAAqG;IACrG,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,qCAAqC;AACrC,MAAM,WAAW,sBAAsB;IACrC,6BAA6B;IAC7B,IAAI,EAAE,gBAAgB,CAAC;IACvB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACvC;;;;OAIG;IACH,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/nexus-account.js

@@ -60,8 +60,37 @@ export const NEXUS_ACCOUNT_ERROR_CODES = [
     'E_NEXUS_BUSY',
     /** Several accounts hold a device credential on one origin and none was named. */
     'E_NEXUS_ACCOUNT_AMBIGUOUS',
-    /** An option that needs device credentials (`--read-only`) without `CLEO_NEXUS_DEVICE=1`. */
+    /** An option that needs device credentials (`--read-only`) with `CLEO_NEXUS_DEVICE=0`. */
     'E_NEXUS_DEVICE_REQUIRED',
+    /** `.cleo/nexus-link.json` is in a format this CLEO cannot update (written by a newer CLEO). */
+    'E_NEXUS_LINK_FILE_UNSUPPORTED',
+    // Cloud vault (encrypted snapshots, T12336 / T12337 / T12338).
+    /** Another device holds this stream's write lease (`--force` takes it and labels a fork). */
+    'E_NEXUS_VAULT_LEASE_HELD',
+    /** Another device pushed a newer snapshot than this machine last pushed or restored: pull first. */
+    'E_NEXUS_VAULT_BEHIND',
+    /** Local data changed since the last push or restore; pulling would overwrite it. */
+    'E_NEXUS_VAULT_LOCAL_CHANGES',
+    /** A snapshot's counts or hashes do not match its manifest; nothing was activated. */
+    'E_NEXUS_VAULT_VERIFY_FAILED',
+    /** The account encryption key could not be obtained for this device. */
+    'E_NEXUS_VAULT_KEY_UNAVAILABLE',
+    /** The project is not linked to Cleo Nexus (`cleo project link`). */
+    'E_NEXUS_VAULT_NOT_LINKED',
+    /** The cloud holds no snapshot to restore. */
+    'E_NEXUS_VAULT_EMPTY',
+    /** The server refused the snapshot (lineage or regression check). */
+    'E_NEXUS_VAULT_REFUSED',
+    /**
+     * The stream moved past what this CLEO's vault writes (T13034): it takes only checkpoint/v3
+     * snapshots (the server's `E_STREAM_VERSION`), or it holds data of a newer sync schema.
+     * Pull, restore and verify still work; nothing was written.
+     */
+    'E_NEXUS_VAULT_STREAM_UPGRADED',
+    /** Another CLEO process is writing to the store a restore would replace. */
+    'E_NEXUS_VAULT_STORE_BUSY',
+    /** A project restore target already holds a different project. */
+    'E_NEXUS_VAULT_TARGET_OCCUPIED',
 ];
 /** The signed-in user, as `/v1/account/me` reports it. */
 export const nexusAccountUserSchema = z.object({

package/dist/nexus-account.js.map

@@ -1 +1 @@
-{"version":3,"file":"nexus-account.js","sourceRoot":"","sources":["../src/nexus-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wCAAwC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C,qDAAqD;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,yBAAyB;IACzB,uBAAuB;IACvB,yBAAyB;IACzB,kCAAkC;IAClC,oCAAoC;IACpC,6BAA6B;IAC7B,uBAAuB;IACvB,4BAA4B;IAC5B,uBAAuB;IACvB,wBAAwB;IACxB,uBAAuB;IACvB,uBAAuB;IACvB,wEAAwE;IACxE,yDAAyD;IACzD,qBAAqB;IACrB,oFAAoF;IACpF,wBAAwB;IACxB,oEAAoE;IACpE,2BAA2B;IAC3B,+DAA+D;IAC/D,wBAAwB;IACxB,iFAAiF;IACjF,gCAAgC;IAChC,4FAA4F;IAC5F,4BAA4B;IAC5B,mEAAmE;IACnE,wBAAwB;IACxB,iFAAiF;IACjF,cAAc;IACd,kFAAkF;IAClF,2BAA2B;IAC3B,6FAA6F;IAC7F,yBAAyB;CACjB,CAAC;AAKX,0DAA0D;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,+DAA+D;IAC/D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,sBAAsB;IAC5B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACnE,CAAC,CAAC"}
+{"version":3,"file":"nexus-account.js","sourceRoot":"","sources":["../src/nexus-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wCAAwC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C,qDAAqD;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,yBAAyB;IACzB,uBAAuB;IACvB,yBAAyB;IACzB,kCAAkC;IAClC,oCAAoC;IACpC,6BAA6B;IAC7B,uBAAuB;IACvB,4BAA4B;IAC5B,uBAAuB;IACvB,wBAAwB;IACxB,uBAAuB;IACvB,uBAAuB;IACvB,wEAAwE;IACxE,yDAAyD;IACzD,qBAAqB;IACrB,oFAAoF;IACpF,wBAAwB;IACxB,oEAAoE;IACpE,2BAA2B;IAC3B,+DAA+D;IAC/D,wBAAwB;IACxB,iFAAiF;IACjF,gCAAgC;IAChC,4FAA4F;IAC5F,4BAA4B;IAC5B,mEAAmE;IACnE,wBAAwB;IACxB,iFAAiF;IACjF,cAAc;IACd,kFAAkF;IAClF,2BAA2B;IAC3B,0FAA0F;IAC1F,yBAAyB;IACzB,gGAAgG;IAChG,+BAA+B;IAC/B,+DAA+D;IAC/D,6FAA6F;IAC7F,0BAA0B;IAC1B,oGAAoG;IACpG,sBAAsB;IACtB,qFAAqF;IACrF,6BAA6B;IAC7B,sFAAsF;IACtF,6BAA6B;IAC7B,wEAAwE;IACxE,+BAA+B;IAC/B,qEAAqE;IACrE,0BAA0B;IAC1B,8CAA8C;IAC9C,qBAAqB;IACrB,qEAAqE;IACrE,uBAAuB;IACvB;;;;OAIG;IACH,+BAA+B;IAC/B,4EAA4E;IAC5E,0BAA0B;IAC1B,kEAAkE;IAClE,+BAA+B;CACvB,CAAC;AAKX,0DAA0D;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,+DAA+D;IAC/D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,sBAAsB;IAC5B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACnE,CAAC,CAAC"}