@cleocode/core 2026.10.8 → 2026.10.9

package/dist/build-provenance.json

@@ -1,6 +1,6 @@
 {
   "schema": 1,
-  "gitHead": "50db2f9efccec04e6216cead9a5996152068ced9",
-  "builtAt": "2026-10-11T11:05:04.532Z",
+  "gitHead": "5c901fb18ef61e04598780b6113adb238c59d5be",
+  "builtAt": "2026-10-12T01:10:43.880Z",
   "linkedWorktree": null
 }

package/dist/cloud/auto-sync-command-entry.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Detached worker for the command piggyback sync (T13553), spawned by
+ * `startCommandAutoSync` (`cloud/auto-sync-command.ts`). Runs
+ * {@link runCommandAutoSync}: the `cloud.autoSync` opt-out, then a
+ * throttled, single-flight, bounded `autoCloudSync`. No stdout: this process
+ * has no reader.
+ *
+ * argv: `<projectRoot>`
+ *
+ * @task T13553
+ */
+export {};
+//# sourceMappingURL=auto-sync-command-entry.d.ts.map

package/dist/cloud/auto-sync-command-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-sync-command-entry.d.ts","sourceRoot":"","sources":["../../src/cloud/auto-sync-command-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/cloud/auto-sync-command-entry.js

@@ -0,0 +1,18 @@
+/**
+ * Detached worker for the command piggyback sync (T13553), spawned by
+ * `startCommandAutoSync` (`cloud/auto-sync-command.ts`). Runs
+ * {@link runCommandAutoSync}: the `cloud.autoSync` opt-out, then a
+ * throttled, single-flight, bounded `autoCloudSync`. No stdout: this process
+ * has no reader.
+ *
+ * argv: `<projectRoot>`
+ *
+ * @task T13553
+ */
+import { runCommandAutoSync } from './auto-sync-command.js';
+const projectRoot = process.argv[2];
+if (!projectRoot)
+    process.exit(2);
+await runCommandAutoSync(projectRoot);
+process.exit(0);
+//# sourceMappingURL=auto-sync-command-entry.js.map

package/dist/cloud/auto-sync-command-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-sync-command-entry.js","sourceRoot":"","sources":["../../src/cloud/auto-sync-command-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpC,IAAI,CAAC,WAAW;IAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClC,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;AACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC"}

package/dist/cloud/auto-sync-command.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Piggyback sync on normal CLI commands (T13553): a command in a linked
+ * project starts a detached `autoCloudSync(projectRoot, 'command')` child at
+ * most once per {@link autoSyncIntervalMs}, the way the presence refresh
+ * piggybacks (T13289). No daemon, timer or server; the foreground command
+ * never waits for the child.
+ *
+ * The check on the command's path is one `stat` of a stamp under the CLEO
+ * home. The stamp is written before the spawn, so a failing child is retried
+ * a window later, not on every command. Everything else (the config opt-out
+ * `cloud.autoSync`, flags, login, the network) runs in the child, where
+ * `autoCloudSync` adds its own throttle and the cross-process lock that keeps
+ * this, session end and the sentient tick from syncing twice.
+ *
+ * Never spawned for heavy or evidence runs (`CLEO_RUN_CLASS` is set in every
+ * governed child), for `cleo run` / `cleo verify` / `cleo cloud`, or when
+ * `CLEO_DISABLE_AUTO_SYNC=1` or `CLEO_AUTO_SYNC_INTERVAL_MIN=0`.
+ *
+ * @task T13553
+ */
+import { type AutoSyncOutcome } from './auto-sync.js';
+/** Environment switch that turns the command piggyback off (`1`). */
+export declare const AUTO_SYNC_DISABLE_ENV = "CLEO_DISABLE_AUTO_SYNC";
+/** How {@link startCommandAutoSync} ended. */
+export type CommandAutoSyncOutcome = 'disabled' | 'skipped' | 'throttled' | 'spawned' | 'failed';
+/** Options for {@link startCommandAutoSync}. */
+export interface CommandAutoSyncOptions {
+    /** The linked project root. */
+    projectRoot: string;
+    /** The command's root verb (`show`, `add`, …), if any. */
+    verb?: string;
+    /** Environment. @defaultValue process.env */
+    env?: NodeJS.ProcessEnv;
+    /** CLEO home holding the stamp. @defaultValue getCleoHome() */
+    cleoHome?: string;
+    /** Clock. */
+    now?: () => Date;
+    /** Starts the detached child; defaults to spawning the worker entry. */
+    spawnWorker?: (projectRoot: string) => void;
+    /** The unreleased flags; test seam. @defaultValue UNRELEASED_FLAGS */
+    unreleasedFlags?: ReadonlySet<string>;
+}
+/**
+ * Start a background sync for this linked project if the window has elapsed.
+ * Never throws and never waits for the sync.
+ *
+ * @param opts - Project root, verb and test seams.
+ * @returns What happened on the command's path.
+ */
+export declare function startCommandAutoSync(opts: CommandAutoSyncOptions): CommandAutoSyncOutcome;
+/**
+ * The detached child's body: honour the config opt-out `cloud.autoSync:
+ * false` (project, then global), then {@link autoCloudSync} with reason
+ * `command`. Never throws.
+ *
+ * @param projectRoot - The linked project root.
+ * @param seams - Test seams.
+ * @returns The sync outcome, or `disabled` when the config turns it off.
+ */
+export declare function runCommandAutoSync(projectRoot: string, seams?: {
+    readConfig?: (projectRoot: string) => Promise<boolean | undefined>;
+    sync?: (projectRoot: string) => Promise<AutoSyncOutcome>;
+}): Promise<AutoSyncOutcome>;
+//# sourceMappingURL=auto-sync-command.d.ts.map

package/dist/cloud/auto-sync-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-sync-command.d.ts","sourceRoot":"","sources":["../../src/cloud/auto-sync-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,OAAO,EACL,KAAK,eAAe,EAIrB,MAAM,gBAAgB,CAAC;AAExB,qEAAqE;AACrE,eAAO,MAAM,qBAAqB,2BAA2B,CAAC;AAO9D,8CAA8C;AAC9C,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEjG,gDAAgD;AAChD,MAAM,WAAW,sBAAsB;IACrC,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,wEAAwE;IACxE,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,sEAAsE;IACtE,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACvC;AAeD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,sBAAsB,GAAG,sBAAsB,CAyBzF;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE;IACL,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;CACrD,GACL,OAAO,CAAC,eAAe,CAAC,CAa1B"}

package/dist/cloud/auto-sync-command.js

@@ -0,0 +1,109 @@
+/**
+ * Piggyback sync on normal CLI commands (T13553): a command in a linked
+ * project starts a detached `autoCloudSync(projectRoot, 'command')` child at
+ * most once per {@link autoSyncIntervalMs}, the way the presence refresh
+ * piggybacks (T13289). No daemon, timer or server; the foreground command
+ * never waits for the child.
+ *
+ * The check on the command's path is one `stat` of a stamp under the CLEO
+ * home. The stamp is written before the spawn, so a failing child is retried
+ * a window later, not on every command. Everything else (the config opt-out
+ * `cloud.autoSync`, flags, login, the network) runs in the child, where
+ * `autoCloudSync` adds its own throttle and the cross-process lock that keeps
+ * this, session end and the sentient tick from syncing twice.
+ *
+ * Never spawned for heavy or evidence runs (`CLEO_RUN_CLASS` is set in every
+ * governed child), for `cleo run` / `cleo verify` / `cleo cloud`, or when
+ * `CLEO_DISABLE_AUTO_SYNC=1` or `CLEO_AUTO_SYNC_INTERVAL_MIN=0`.
+ *
+ * @task T13553
+ */
+import { spawn } from 'node:child_process';
+import { mkdirSync, statSync, utimesSync, writeFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { join } from 'node:path';
+import { getCleoHome } from '../paths.js';
+import { autoCloudSync, autoSyncIntervalMs, autoSyncReleased, } from './auto-sync.js';
+/** Environment switch that turns the command piggyback off (`1`). */
+export const AUTO_SYNC_DISABLE_ENV = 'CLEO_DISABLE_AUTO_SYNC';
+/** Root verbs that never piggyback: heavy/evidence runs and explicit cloud commands. */
+const SKIP_VERBS = new Set(['run', 'verify', 'cloud']);
+const WORKER_SPECIFIER = '@cleocode/core/cloud/auto-sync-command-entry.js';
+function spawnDetachedWorker(projectRoot) {
+    const entry = createRequire(import.meta.url).resolve(WORKER_SPECIFIER);
+    const child = spawn(process.execPath, [entry, projectRoot], {
+        detached: true,
+        stdio: 'ignore',
+        cwd: projectRoot,
+        env: process.env,
+    });
+    // A spawn failure is emitted asynchronously; never let it escape the command.
+    child.on('error', () => { });
+    child.unref();
+}
+/**
+ * Start a background sync for this linked project if the window has elapsed.
+ * Never throws and never waits for the sync.
+ *
+ * @param opts - Project root, verb and test seams.
+ * @returns What happened on the command's path.
+ */
+export function startCommandAutoSync(opts) {
+    try {
+        const env = opts.env ?? process.env;
+        if (env[AUTO_SYNC_DISABLE_ENV] === '1')
+            return 'disabled';
+        // Inert until T13549 releases sync.push/sync.pull: no stamp, no spawn.
+        if (!autoSyncReleased(opts.unreleasedFlags))
+            return 'disabled';
+        if (env['CLEO_RUN_CLASS'] !== undefined)
+            return 'skipped';
+        if (opts.verb !== undefined && SKIP_VERBS.has(opts.verb))
+            return 'skipped';
+        const gap = autoSyncIntervalMs();
+        if (gap === null)
+            return 'disabled';
+        const now = (opts.now ?? (() => new Date()))();
+        const stamp = join(opts.cleoHome ?? getCleoHome(), 'auto-sync-command.stamp');
+        try {
+            if (now.getTime() - statSync(stamp).mtimeMs < gap)
+                return 'throttled';
+        }
+        catch {
+            // No stamp yet: due.
+        }
+        mkdirSync(join(stamp, '..'), { recursive: true });
+        writeFileSync(stamp, now.toISOString());
+        utimesSync(stamp, now, now);
+        (opts.spawnWorker ?? spawnDetachedWorker)(opts.projectRoot);
+        return 'spawned';
+    }
+    catch {
+        return 'failed';
+    }
+}
+/**
+ * The detached child's body: honour the config opt-out `cloud.autoSync:
+ * false` (project, then global), then {@link autoCloudSync} with reason
+ * `command`. Never throws.
+ *
+ * @param projectRoot - The linked project root.
+ * @param seams - Test seams.
+ * @returns The sync outcome, or `disabled` when the config turns it off.
+ */
+export async function runCommandAutoSync(projectRoot, seams = {}) {
+    try {
+        const readConfig = seams.readConfig ??
+            (async (root) => {
+                const { getConfigValue } = await import('../config/registry.js');
+                return getConfigValue('cloud.autoSync', { projectRoot: root });
+            });
+        if ((await readConfig(projectRoot)) === false)
+            return 'disabled';
+        return await (seams.sync ?? ((root) => autoCloudSync(root, 'command')))(projectRoot);
+    }
+    catch {
+        return 'failed';
+    }
+}
+//# sourceMappingURL=auto-sync-command.js.map

package/dist/cloud/auto-sync-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-sync-command.js","sourceRoot":"","sources":["../../src/cloud/auto-sync-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAEL,aAAa,EACb,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,wFAAwF;AACxF,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,MAAM,gBAAgB,GAAG,iDAAiD,CAAC;AAuB3E,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE;QAC1D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,8EAA8E;IAC9E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA4B;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACpC,IAAI,GAAG,CAAC,qBAAqB,CAAC,KAAK,GAAG;YAAE,OAAO,UAAU,CAAC;QAC1D,uEAAuE;QACvE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC;YAAE,OAAO,UAAU,CAAC;QAC/D,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3E,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;QACjC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;QACpC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,GAAG;gBAAE,OAAO,WAAW,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACxC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,QAGI,EAAE;IAEN,IAAI,CAAC;QACH,MAAM,UAAU,GACd,KAAK,CAAC,UAAU;YAChB,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;gBACtB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBACjE,OAAO,cAAc,CAAU,gBAAgB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,KAAK;YAAE,OAAO,UAAU,CAAC;QACjE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/cloud/auto-sync.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Automatic main-brain sync (T13468): `cleo cloud sync` without the user
+ * typing it. Runs from hooks CLEO already has, never a daemon or server of
+ * its own:
+ *
+ *   - session end: the detached session-end worker
+ *     (`sessions/session-end-snapshot.ts`), after its snapshot;
+ *   - the sentient tick (`sentient/tick.ts`), at most once per
+ *     {@link autoSyncIntervalMs};
+ *   - a normal CLI command in a linked project (T13553,
+ *     `cloud/auto-sync-command.ts`): a detached child, same interval.
+ *
+ * Best-effort and bounded: a store with no sync flag on, a signed-out
+ * device or an unlinked project is a quiet skip; any other failure
+ * (offline, refused) is recorded in `<CLEO_HOME>/auto-sync.json`, which
+ * `cleo cloud status` reports as one {@link W_AUTO_SYNC_FAILED} warning.
+ * Single-flight across processes under a lock, admitted by the governor as
+ * `db-heavy` (skipped, not queued, under pressure). Never throws.
+ *
+ * @task T13468
+ */
+import type { CloudWarning } from '@cleocode/contracts';
+/** Default minimum gap between tick-driven syncs. */
+export declare const AUTO_SYNC_INTERVAL_MS: number;
+/** Minimum gap between session-end syncs: coalesces a burst of session ends. */
+export declare const AUTO_SYNC_SESSION_END_MIN_MS = 60000;
+/** Upper bound on one automatic sync. */
+export declare const AUTO_SYNC_TIMEOUT_MS = 120000;
+/** Warning code `cleo cloud status` shows for a failed automatic sync. */
+export declare const W_AUTO_SYNC_FAILED = "W_AUTO_SYNC_FAILED";
+/** What triggered an automatic sync. */
+export type AutoSyncReason = 'session-end' | 'tick' | 'command';
+/** Persisted state of automatic sync. */
+export interface AutoSyncState {
+    /** When the last attempt started (ISO), else absent. */
+    lastAttemptAt?: string;
+    /** When the last attempt succeeded (ISO), else absent. */
+    lastOkAt?: string;
+    /** The last failure, cleared by a success. */
+    lastError?: {
+        at: string;
+        code: string;
+        message: string;
+    } | null;
+}
+/** Outcome of {@link autoCloudSync}. */
+export type AutoSyncOutcome = 'synced' | 'throttled' | 'disabled' | 'skipped' | 'busy' | 'deferred' | 'failed';
+/** Test seams for {@link autoCloudSync}. */
+export interface AutoSyncOptions {
+    /** Clock. */
+    now?: Date;
+    /** CLEO home holding the global store and the state file. */
+    cleoHome?: string;
+    /** Runs the sync; defaults to `cloudSync`. */
+    sync?: (projectRoot: string) => Promise<unknown>;
+    /** Whether a store has a journal push/pull flag on; defaults to a read-only check. */
+    syncEnabled?: (dbPath: string) => Promise<boolean>;
+    /** Governor admission; `null` = deferred. */
+    admit?: () => Promise<{
+        release: () => Promise<void>;
+    } | null>;
+    /** Single-flight lock; throws when held. `onCompromised` fires if the lock is lost while held. */
+    lock?: (onCompromised: (err: Error) => void) => Promise<{
+        release: () => Promise<void>;
+        abandon?: () => Promise<void>;
+    }>;
+    /** The unreleased flags; test seam. @defaultValue UNRELEASED_FLAGS */
+    unreleasedFlags?: ReadonlySet<string>;
+}
+/**
+ * Whether automatic sync may run: never while both `sync.push` and
+ * `sync.pull` are unreleased (T13553; T13549 releases them).
+ *
+ * @param unreleased - The unreleased set. @defaultValue UNRELEASED_FLAGS
+ * @returns True once either flag ships.
+ */
+export declare function autoSyncReleased(unreleased?: ReadonlySet<string>): boolean;
+/**
+ * The tick interval: `CLEO_AUTO_SYNC_INTERVAL_MIN` minutes, else
+ * {@link AUTO_SYNC_INTERVAL_MS}. `0` turns the tick-driven sync off.
+ *
+ * @returns Milliseconds, or `null` when the tick sync is off.
+ */
+export declare function autoSyncIntervalMs(): number | null;
+/**
+ * Read the automatic sync state. Missing or malformed means empty.
+ *
+ * @param cleoHome - CLEO home. @defaultValue getCleoHome()
+ * @returns The state.
+ */
+export declare function readAutoSyncState(cleoHome?: string): AutoSyncState;
+/**
+ * The `cleo cloud status` warning for a failed automatic sync: present while
+ * the last failure is newer than the last success.
+ *
+ * @param cleoHome - CLEO home. @defaultValue getCleoHome()
+ * @returns The warning, or `null`.
+ */
+export declare function autoSyncWarning(cleoHome?: string): CloudWarning | null;
+/**
+ * Run one automatic `cloud sync` of the project and global stores, if due.
+ * Never throws.
+ *
+ * @param projectRoot - The project whose session ended or whose tick ran.
+ * @param reason - What triggered it; a tick or command honours {@link autoSyncIntervalMs}.
+ * @param opts - Test seams.
+ * @returns What happened.
+ * @task T13468
+ */
+export declare function autoCloudSync(projectRoot: string, reason: AutoSyncReason, opts?: AutoSyncOptions): Promise<AutoSyncOutcome>;
+//# sourceMappingURL=auto-sync.d.ts.map

package/dist/cloud/auto-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-sync.d.ts","sourceRoot":"","sources":["../../src/cloud/auto-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKxD,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,QAAc,CAAC;AAEjD,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD,yCAAyC;AACzC,eAAO,MAAM,oBAAoB,SAAU,CAAC;AAE5C,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAUvD,wCAAwC;AACxC,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,MAAM,GAAG,SAAS,CAAC;AAEhE,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,SAAS,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAClE;AAED,wCAAwC;AACxC,MAAM,MAAM,eAAe,GACvB,QAAQ,GACR,WAAW,GACX,UAAU,GACV,SAAS,GACT,MAAM,GACN,UAAU,GACV,QAAQ,CAAC;AAEb,4CAA4C;AAC5C,MAAM,WAAW,eAAe;IAC9B,aAAa;IACb,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,sFAAsF;IACtF,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,kGAAkG;IAClG,IAAI,CAAC,EAAE,CACL,aAAa,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,KAChC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC,CAAC;IAC9E,sEAAsE;IACtE,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACvC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,GAAE,WAAW,CAAC,MAAM,CAAoB,GAAG,OAAO,CAE5F;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAMlD;AAOD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,GAAE,MAAsB,GAAG,aAAa,CAMjF;AAcD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,GAAE,MAAsB,GAAG,YAAY,GAAG,IAAI,CAOrF;AAsCD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,eAAoB,GACzB,OAAO,CAAC,eAAe,CAAC,CAgH1B"}

package/dist/cloud/auto-sync.js

@@ -0,0 +1,275 @@
+/**
+ * Automatic main-brain sync (T13468): `cleo cloud sync` without the user
+ * typing it. Runs from hooks CLEO already has, never a daemon or server of
+ * its own:
+ *
+ *   - session end: the detached session-end worker
+ *     (`sessions/session-end-snapshot.ts`), after its snapshot;
+ *   - the sentient tick (`sentient/tick.ts`), at most once per
+ *     {@link autoSyncIntervalMs};
+ *   - a normal CLI command in a linked project (T13553,
+ *     `cloud/auto-sync-command.ts`): a detached child, same interval.
+ *
+ * Best-effort and bounded: a store with no sync flag on, a signed-out
+ * device or an unlinked project is a quiet skip; any other failure
+ * (offline, refused) is recorded in `<CLEO_HOME>/auto-sync.json`, which
+ * `cleo cloud status` reports as one {@link W_AUTO_SYNC_FAILED} warning.
+ * Single-flight across processes under a lock, admitted by the governor as
+ * `db-heavy` (skipped, not queued, under pressure). Never throws.
+ *
+ * @task T13468
+ */
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getLogger } from '../logger.js';
+import { getCleoHome, resolveCleoDir } from '../paths.js';
+import { UNRELEASED_FLAGS } from '../store/sync/flags.js';
+/** Default minimum gap between tick-driven syncs. */
+export const AUTO_SYNC_INTERVAL_MS = 15 * 60_000;
+/** Minimum gap between session-end syncs: coalesces a burst of session ends. */
+export const AUTO_SYNC_SESSION_END_MIN_MS = 60_000;
+/** Upper bound on one automatic sync. */
+export const AUTO_SYNC_TIMEOUT_MS = 120_000;
+/** Warning code `cleo cloud status` shows for a failed automatic sync. */
+export const W_AUTO_SYNC_FAILED = 'W_AUTO_SYNC_FAILED';
+/** Error codes that mean "nothing to sync here", not a failure. */
+const QUIET_SKIP_CODES = new Set([
+    'E_SYNC_DISABLED',
+    'E_NEXUS_NOT_SIGNED_IN',
+    'E_NEXUS_VAULT_NOT_LINKED',
+    'E_NEXUS_DEVICE_REQUIRED',
+]);
+/**
+ * Whether automatic sync may run: never while both `sync.push` and
+ * `sync.pull` are unreleased (T13553; T13549 releases them).
+ *
+ * @param unreleased - The unreleased set. @defaultValue UNRELEASED_FLAGS
+ * @returns True once either flag ships.
+ */
+export function autoSyncReleased(unreleased = UNRELEASED_FLAGS) {
+    return !(unreleased.has('sync.push') && unreleased.has('sync.pull'));
+}
+/**
+ * The tick interval: `CLEO_AUTO_SYNC_INTERVAL_MIN` minutes, else
+ * {@link AUTO_SYNC_INTERVAL_MS}. `0` turns the tick-driven sync off.
+ *
+ * @returns Milliseconds, or `null` when the tick sync is off.
+ */
+export function autoSyncIntervalMs() {
+    const raw = process.env['CLEO_AUTO_SYNC_INTERVAL_MIN'];
+    if (raw === undefined || raw.trim() === '')
+        return AUTO_SYNC_INTERVAL_MS;
+    const min = Number(raw);
+    if (!Number.isFinite(min) || min < 0)
+        return AUTO_SYNC_INTERVAL_MS;
+    return min === 0 ? null : min * 60_000;
+}
+/** Path of the state file. */
+function statePath(cleoHome) {
+    return join(cleoHome, 'auto-sync.json');
+}
+/**
+ * Read the automatic sync state. Missing or malformed means empty.
+ *
+ * @param cleoHome - CLEO home. @defaultValue getCleoHome()
+ * @returns The state.
+ */
+export function readAutoSyncState(cleoHome = getCleoHome()) {
+    try {
+        return JSON.parse(readFileSync(statePath(cleoHome), 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+function writeState(cleoHome, state) {
+    try {
+        mkdirSync(cleoHome, { recursive: true });
+        // tmp then rename, so a concurrent reader never sees a torn record.
+        const tmp = `${statePath(cleoHome)}.${process.pid}.tmp`;
+        writeFileSync(tmp, `${JSON.stringify(state)}\n`);
+        renameSync(tmp, statePath(cleoHome));
+    }
+    catch {
+        // Best-effort: a lost record only loses the throttle and the warning.
+    }
+}
+/**
+ * The `cleo cloud status` warning for a failed automatic sync: present while
+ * the last failure is newer than the last success.
+ *
+ * @param cleoHome - CLEO home. @defaultValue getCleoHome()
+ * @returns The warning, or `null`.
+ */
+export function autoSyncWarning(cleoHome = getCleoHome()) {
+    const s = readAutoSyncState(cleoHome);
+    if (!s.lastError)
+        return null;
+    return {
+        code: W_AUTO_SYNC_FAILED,
+        message: `automatic sync failed at ${s.lastError.at} (${s.lastError.code}): ${s.lastError.message}; run \`cleo cloud sync\` to retry`,
+    };
+}
+/** Whether a store has `sync.push` or `sync.pull` on, read-only. Absent or unreadable is off. */
+async function storeSyncEnabled(dbPath) {
+    const { existsSync } = await import('node:fs');
+    if (!existsSync(dbPath))
+        return false;
+    const [{ openCleoDbSnapshot }, { readSyncFlags }] = await Promise.all([
+        import('../store/open-cleo-db.js'),
+        import('../store/sync/flags.js'),
+    ]);
+    let snap;
+    try {
+        snap = openCleoDbSnapshot(dbPath, { readOnly: true, applyPragmas: false });
+        const f = readSyncFlags(snap.db);
+        return f['sync.push'] || f['sync.pull'];
+    }
+    catch {
+        return false;
+    }
+    finally {
+        snap?.close();
+    }
+}
+async function defaultAdmit() {
+    try {
+        const { governor } = await import('../resources/governor.js');
+        const admit = await governor.acquire('db-heavy', { blocking: false });
+        return admit.deferred ? null : { release: admit.release };
+    }
+    catch {
+        return { release: async () => { } };
+    }
+}
+function errorCode(err) {
+    return err instanceof Error && 'code' in err && typeof err.code === 'string'
+        ? err.code
+        : 'E_AUTO_SYNC';
+}
+/**
+ * Run one automatic `cloud sync` of the project and global stores, if due.
+ * Never throws.
+ *
+ * @param projectRoot - The project whose session ended or whose tick ran.
+ * @param reason - What triggered it; a tick or command honours {@link autoSyncIntervalMs}.
+ * @param opts - Test seams.
+ * @returns What happened.
+ * @task T13468
+ */
+export async function autoCloudSync(projectRoot, reason, opts = {}) {
+    const log = getLogger('auto-sync');
+    const cleoHome = opts.cleoHome ?? getCleoHome();
+    const now = opts.now ?? new Date();
+    try {
+        // Inert until T13549 releases sync.push/sync.pull: no state read, no network.
+        if (!autoSyncReleased(opts.unreleasedFlags))
+            return 'disabled';
+        const gap = reason === 'session-end' ? AUTO_SYNC_SESSION_END_MIN_MS : autoSyncIntervalMs();
+        if (gap === null)
+            return 'disabled';
+        const due = () => {
+            const last = readAutoSyncState(cleoHome).lastAttemptAt;
+            return last === undefined || now.getTime() - Date.parse(last) >= gap;
+        };
+        if (!due())
+            return 'throttled';
+        const enabled = opts.syncEnabled ?? storeSyncEnabled;
+        const any = (await enabled(join(resolveCleoDir(projectRoot), 'cleo.db'))) ||
+            (await enabled(join(cleoHome, 'cleo.db')));
+        if (!any)
+            return 'skipped';
+        let held;
+        // A long synchronous SQLite step can starve the lock refresh past `stale`;
+        // proper-lockfile's default onCompromised throws asynchronously and would crash the daemon.
+        let compromised = false;
+        const onCompromised = (err) => {
+            compromised = true;
+            log.warn({ err, reason }, 'automatic cloud sync lock compromised');
+        };
+        try {
+            held = await (opts.lock ??
+                (async (onLost) => {
+                    const { acquireAbandonableLock } = await import('../store/lock.js');
+                    mkdirSync(cleoHome, { recursive: true });
+                    // The lock needs its target to exist; appending nothing creates it.
+                    writeFileSync(statePath(cleoHome), '', { flag: 'a' });
+                    return acquireAbandonableLock(statePath(cleoHome), {
+                        retries: 0,
+                        stale: AUTO_SYNC_TIMEOUT_MS * 3,
+                        onCompromised: onLost,
+                    });
+                }))(onCompromised);
+        }
+        catch {
+            return 'busy';
+        }
+        try {
+            if (!due())
+                return 'throttled';
+            const admission = await (opts.admit ?? defaultAdmit)();
+            if (admission === null)
+                return 'deferred';
+            const state = readAutoSyncState(cleoHome);
+            writeState(cleoHome, { ...state, lastAttemptAt: now.toISOString() });
+            // The sync itself, kept so the lock and admission outlive a timeout (T13500).
+            let inFlight;
+            try {
+                const sync = opts.sync ??
+                    (async (root) => {
+                        const { cloudSync } = await import('./nexus-vault.js');
+                        return cloudSync({ projectRoot: root });
+                    });
+                let timer;
+                inFlight = sync(projectRoot);
+                await Promise.race([
+                    inFlight,
+                    new Promise((_, reject) => {
+                        timer = setTimeout(() => reject(Object.assign(new Error(`timed out after ${AUTO_SYNC_TIMEOUT_MS} ms`), {
+                            code: 'E_AUTO_SYNC_TIMEOUT',
+                        })), AUTO_SYNC_TIMEOUT_MS);
+                        timer.unref?.();
+                    }),
+                ]).finally(() => clearTimeout(timer));
+                writeState(cleoHome, {
+                    ...state,
+                    lastAttemptAt: now.toISOString(),
+                    lastOkAt: new Date().toISOString(),
+                    lastError: null,
+                });
+                return 'synced';
+            }
+            catch (err) {
+                const code = errorCode(err);
+                if (QUIET_SKIP_CODES.has(code))
+                    return 'skipped';
+                const message = err instanceof Error ? err.message : String(err);
+                writeState(cleoHome, {
+                    ...state,
+                    lastAttemptAt: now.toISOString(),
+                    lastError: { at: new Date().toISOString(), code, message },
+                });
+                log.warn({ reason, code, message }, 'automatic cloud sync failed');
+                return 'failed';
+            }
+            finally {
+                // A timed-out sync keeps running: hold the lock and admission until it
+                // settles, so no second sync overlaps it and a worker never exits mid-sync.
+                await inFlight?.catch(() => undefined);
+                await admission.release();
+            }
+        }
+        finally {
+            // A compromised lock may now belong to another process: never remove its directory.
+            if (compromised && held.abandon)
+                await held.abandon();
+            else
+                await held.release().catch(() => undefined);
+        }
+    }
+    catch (err) {
+        log.warn({ err, reason }, 'automatic cloud sync skipped');
+        return 'failed';
+    }
+}
+//# sourceMappingURL=auto-sync.js.map

package/dist/cloud/auto-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-sync.js","sourceRoot":"","sources":["../../src/cloud/auto-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,qDAAqD;AACrD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEjD,gFAAgF;AAChF,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE5C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,mEAAmE;AACnE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,iBAAiB;IACjB,uBAAuB;IACvB,0BAA0B;IAC1B,yBAAyB;CAC1B,CAAC,CAAC;AA6CH;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAkC,gBAAgB;IACjF,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACvD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,qBAAqB,CAAC;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACnE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC;AACzC,CAAC;AAED,8BAA8B;AAC9B,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB,WAAW,EAAE;IAChE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAkB,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,KAAoB;IACxD,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,oEAAoE;QACpE,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACxD,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB,WAAW,EAAE;IAC9D,MAAM,CAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,4BAA4B,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,oCAAoC;KACtI,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,KAAK,UAAU,gBAAgB,CAAC,MAAc;IAC5C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpE,MAAM,CAAC,0BAA0B,CAAC;QAClC,MAAM,CAAC,wBAAwB,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,IAAuD,CAAC;IAC5D,IAAI,CAAC;QACH,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAC1E,CAAC,CAAC,GAAG,CAAC,IAAI;QACV,CAAC,CAAC,aAAa,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,MAAsB,EACtB,OAAwB,EAAE;IAE1B,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,8EAA8E;QAC9E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC;YAAE,OAAO,UAAU,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAC3F,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;QACpC,MAAM,GAAG,GAAG,GAAY,EAAE;YACxB,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC;YACvD,OAAO,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACvE,CAAC,CAAC;QACF,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,WAAW,CAAC;QAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC;QACrD,MAAM,GAAG,GACP,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7D,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAE3B,IAAI,IAAqE,CAAC;QAC1E,2EAA2E;QAC3E,4FAA4F;QAC5F,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,MAAM,aAAa,GAAG,CAAC,GAAU,EAAQ,EAAE;YACzC,WAAW,GAAG,IAAI,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAC;QACrE,CAAC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CACX,IAAI,CAAC,IAAI;gBACT,CAAC,KAAK,EAAE,MAA4B,EAAE,EAAE;oBACtC,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBACpE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzC,oEAAoE;oBACpE,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;oBACtD,OAAO,sBAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;wBACjD,OAAO,EAAE,CAAC;wBACV,KAAK,EAAE,oBAAoB,GAAG,CAAC;wBAC/B,aAAa,EAAE,MAAM;qBACtB,CAAC,CAAC;gBACL,CAAC,CAAC,CACH,CAAC,aAAa,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,WAAW,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,EAAE,CAAC;YACvD,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,UAAU,CAAC;YAC1C,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC1C,UAAU,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACrE,8EAA8E;YAC9E,IAAI,QAAsC,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,IAAI,GACR,IAAI,CAAC,IAAI;oBACT,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;wBACtB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;wBACvD,OAAO,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1C,CAAC,CAAC,CAAC;gBACL,IAAI,KAAgD,CAAC;gBACrD,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC7B,MAAM,OAAO,CAAC,IAAI,CAAC;oBACjB,QAAQ;oBACR,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;wBACxB,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CACH,MAAM,CACJ,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,oBAAoB,KAAK,CAAC,EAAE;4BACrE,IAAI,EAAE,qBAAqB;yBAC5B,CAAC,CACH,EACH,oBAAoB,CACrB,CAAC;wBACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;oBAClB,CAAC,CAAC;iBACH,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,UAAU,CAAC,QAAQ,EAAE;oBACnB,GAAG,KAAK;oBACR,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE;oBAChC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAClC,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC5B,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,SAAS,CAAC;gBACjD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,UAAU,CAAC,QAAQ,EAAE;oBACnB,GAAG,KAAK;oBACR,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE;oBAChC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;iBAC3D,CAAC,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBACnE,OAAO,QAAQ,CAAC;YAClB,CAAC;oBAAS,CAAC;gBACT,uEAAuE;gBACvE,4EAA4E;gBAC5E,MAAM,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,oFAAoF;YACpF,IAAI,WAAW,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;;gBACjD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}