@cleocode/core 2026.3.38 → 2026.3.40

package/dist/nexus/permissions.js

@@ -1,105 +0,0 @@
-/**
- * NEXUS permission enforcement - three-tier access control for cross-project operations.
- *
- * Permission model:
- *   read (1)    - Query tasks, discover relationships
- *   write (2)   - read + modify task fields, add relationships
- *   execute (3) - write + create/delete tasks, run commands
- *
- * Hierarchical: execute includes write includes read.
- * Same-project operations always have full permissions.
- *
- * @task T4574
- * @epic T4540
- */
-import { ExitCode } from '@cleocode/contracts';
-import { CleoError } from '../errors.js';
-import { nexusGetProject, nexusSetPermission } from './registry.js';
-// ── Constants ────────────────────────────────────────────────────────
-const PERMISSION_LEVELS = {
-    read: 1,
-    write: 2,
-    execute: 3,
-};
-// ── Functions ────────────────────────────────────────────────────────
-/**
- * Convert a permission string to its numeric level.
- * Returns 0 for invalid/unknown permissions.
- */
-export function permissionLevel(permission) {
-    return PERMISSION_LEVELS[permission] ?? 0;
-}
-/**
- * Get the permission level for a registered project.
- * Returns 'read' as default if the project has no explicit permission.
- */
-export async function getPermission(nameOrHash) {
-    const project = await nexusGetProject(nameOrHash);
-    if (!project)
-        return 'read';
-    return project.permissions ?? 'read';
-}
-/**
- * Check if a project has sufficient permissions (non-throwing).
- * Uses hierarchical comparison: execute >= write >= read.
- *
- * @returns true if the granted permission meets or exceeds the required level.
- */
-export async function checkPermission(nameOrHash, required) {
-    // Test bypass
-    if (process.env['NEXUS_SKIP_PERMISSION_CHECK'] === 'true') {
-        return true;
-    }
-    const granted = await getPermission(nameOrHash);
-    return permissionLevel(granted) >= permissionLevel(required);
-}
-/**
- * Require a permission level or throw CleoError.
- * Used as a guard at the start of cross-project operations.
- */
-export async function requirePermission(nameOrHash, required, operationName = 'operation') {
-    // Test bypass
-    if (process.env['NEXUS_SKIP_PERMISSION_CHECK'] === 'true') {
-        return;
-    }
-    const granted = await getPermission(nameOrHash);
-    if (permissionLevel(granted) < permissionLevel(required)) {
-        throw new CleoError(ExitCode.NEXUS_PERMISSION_DENIED, `Permission denied: '${required}' required for '${operationName}' on project '${nameOrHash}' (granted: ${granted})`);
-    }
-}
-/**
- * Full permission check returning a structured result.
- */
-export async function checkPermissionDetail(nameOrHash, required) {
-    const granted = await getPermission(nameOrHash);
-    return {
-        project: nameOrHash,
-        required,
-        granted,
-        allowed: permissionLevel(granted) >= permissionLevel(required),
-    };
-}
-/**
- * Set the permission level for a project.
- * Validates the permission value and updates the registry.
- * @task T4574
- */
-export async function setPermission(nameOrHash, permission) {
-    if (!nameOrHash) {
-        throw new CleoError(ExitCode.INVALID_INPUT, 'Project name or hash required');
-    }
-    await nexusSetPermission(nameOrHash, permission);
-}
-/** Convenience: check read access. */
-export async function canRead(nameOrHash) {
-    return checkPermission(nameOrHash, 'read');
-}
-/** Convenience: check write access. */
-export async function canWrite(nameOrHash) {
-    return checkPermission(nameOrHash, 'write');
-}
-/** Convenience: check execute access. */
-export async function canExecute(nameOrHash) {
-    return checkPermission(nameOrHash, 'execute');
-}
-//# sourceMappingURL=permissions.js.map

package/dist/nexus/permissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/nexus/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAA6B,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAW/F,wEAAwE;AAExE,MAAM,iBAAiB,GAAyC;IAC9D,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,wEAAwE;AAExE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,iBAAiB,CAAC,UAAkC,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC5B,OAAO,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkB,EAClB,QAA8B;IAE9B,cAAc;IACd,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO,eAAe,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,QAA8B,EAC9B,aAAa,GAAG,WAAW;IAE3B,cAAc;IACd,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,eAAe,CAAC,OAAO,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,uBAAuB,EAChC,uBAAuB,QAAQ,mBAAmB,aAAa,iBAAiB,UAAU,eAAe,OAAO,GAAG,CACpH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,EAClB,QAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,QAAQ;QACR,OAAO;QACP,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,UAAgC;IAEhC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAAkB;IAC9C,OAAO,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,UAAkB;IAC/C,OAAO,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,OAAO,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC"}

package/dist/nexus/query.d.ts

@@ -1,53 +0,0 @@
-/**
- * NEXUS query parser and resolver - cross-project task references.
- *
- * Supports the `project:taskId` syntax:
- *   - `my-app:T001`  - Named project
- *   - `.:T001`       - Current project
- *   - `*:T001`       - Wildcard (all projects)
- *   - `T001`         - Implicit current project
- *
- * @task T4574
- * @epic T4540
- */
-import type { Task } from '@cleocode/contracts';
-export interface NexusParsedQuery {
-    project: string;
-    taskId: string;
-    wildcard: boolean;
-}
-/** Task with project context annotation. */
-export type NexusResolvedTask = Task & {
-    _project: string;
-};
-/**
- * Validate a query string matches expected syntax.
- */
-export declare function validateSyntax(query: string): boolean;
-/**
- * Parse a query string into its components.
- * @throws CleoError with NEXUS_INVALID_SYNTAX for bad format.
- */
-export declare function parseQuery(query: string, currentProject?: string): NexusParsedQuery;
-/**
- * Get the current project name from context.
- * Reads .cleo/project-info.json or falls back to directory name.
- */
-export declare function getCurrentProject(): string;
-/**
- * Resolve a project name to its filesystem path.
- * Handles special cases: "." (current), "*" (wildcard marker).
- */
-export declare function resolveProjectPath(projectName: string): Promise<string>;
-/**
- * Resolve a query to task data.
- * For wildcard queries, returns an array of matches from all projects.
- * For named projects, returns a single task with project context.
- */
-export declare function resolveTask(query: string, currentProject?: string): Promise<NexusResolvedTask | NexusResolvedTask[]>;
-/**
- * Extract the project name from a query without full resolution.
- * Useful for permission checks before task lookup.
- */
-export declare function getProjectFromQuery(query: string, currentProject?: string): string;
-//# sourceMappingURL=query.d.ts.map

package/dist/nexus/query.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/nexus/query.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAMhD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,4CAA4C;AAC5C,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAU5D;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGrD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,gBAAgB,CA6BnF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAqB1C;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B7E;AAgBD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,iBAAiB,GAAG,iBAAiB,EAAE,CAAC,CAoBlD;AA0BD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlF"}

package/dist/nexus/query.js

@@ -1,175 +0,0 @@
-/**
- * NEXUS query parser and resolver - cross-project task references.
- *
- * Supports the `project:taskId` syntax:
- *   - `my-app:T001`  - Named project
- *   - `.:T001`       - Current project
- *   - `*:T001`       - Wildcard (all projects)
- *   - `T001`         - Implicit current project
- *
- * @task T4574
- * @epic T4540
- */
-import { existsSync, readFileSync } from 'node:fs';
-import { basename, join } from 'node:path';
-import { getAccessor } from '../store/data-accessor.js';
-import { ExitCode } from '@cleocode/contracts';
-import { CleoError } from '../errors.js';
-import { nexusGetProject, readRegistry } from './registry.js';
-// ── Query syntax ─────────────────────────────────────────────────────
-/** Regex for a bare task ID (T followed by 3+ digits). */
-const TASK_ID_RE = /^T\d{3,}$/;
-/** Regex for project:taskId syntax. */
-const QUALIFIED_RE = /^([a-z0-9_-]+|\.|\*):T\d{3,}$/;
-/**
- * Validate a query string matches expected syntax.
- */
-export function validateSyntax(query) {
-    if (!query)
-        return false;
-    return TASK_ID_RE.test(query) || QUALIFIED_RE.test(query);
-}
-/**
- * Parse a query string into its components.
- * @throws CleoError with NEXUS_INVALID_SYNTAX for bad format.
- */
-export function parseQuery(query, currentProject) {
-    if (!validateSyntax(query)) {
-        throw new CleoError(ExitCode.NEXUS_INVALID_SYNTAX, `Invalid query syntax: ${query}. Expected: T001, project:T001, .:T001, or *:T001`);
-    }
-    // Check for colon separator
-    const colonIdx = query.indexOf(':');
-    if (colonIdx === -1) {
-        // Bare task ID -- implicit current project
-        const project = currentProject ?? getCurrentProject();
-        return { project, taskId: query, wildcard: false };
-    }
-    const prefix = query.substring(0, colonIdx);
-    const taskId = query.substring(colonIdx + 1);
-    switch (prefix) {
-        case '.': {
-            const project = currentProject ?? getCurrentProject();
-            return { project, taskId, wildcard: false };
-        }
-        case '*':
-            return { project: '*', taskId, wildcard: true };
-        default:
-            return { project: prefix, taskId, wildcard: false };
-    }
-}
-/**
- * Get the current project name from context.
- * Reads .cleo/project-info.json or falls back to directory name.
- */
-export function getCurrentProject() {
-    // Allow test/env override
-    if (process.env['NEXUS_CURRENT_PROJECT']) {
-        return process.env['NEXUS_CURRENT_PROJECT'];
-    }
-    // Try to read from .cleo/project-info.json (matches bash behavior)
-    try {
-        const infoPath = join(process.cwd(), '.cleo', 'project-info.json');
-        if (existsSync(infoPath)) {
-            const data = JSON.parse(readFileSync(infoPath, 'utf-8'));
-            if (typeof data.name === 'string' && data.name.length > 0) {
-                return data.name;
-            }
-        }
-    }
-    catch {
-        // Fall through to directory name
-    }
-    // Fallback to cwd directory name
-    return basename(process.cwd());
-}
-/**
- * Resolve a project name to its filesystem path.
- * Handles special cases: "." (current), "*" (wildcard marker).
- */
-export async function resolveProjectPath(projectName) {
-    if (projectName === '*') {
-        return 'WILDCARD';
-    }
-    if (projectName === '.') {
-        try {
-            const accessor = await getAccessor(process.cwd());
-            const count = await accessor.countTasks();
-            if (count >= 0)
-                return process.cwd();
-            throw new Error('No task data');
-        }
-        catch {
-            throw new CleoError(ExitCode.NEXUS_PROJECT_NOT_FOUND, 'Current directory is not a CLEO project');
-        }
-    }
-    // Look up in registry
-    const project = await nexusGetProject(projectName);
-    if (!project) {
-        throw new CleoError(ExitCode.NEXUS_PROJECT_NOT_FOUND, `Project not found in registry: ${projectName}`, { fix: `cleo nexus register /path/to/project --name ${projectName}` });
-    }
-    return project.path;
-}
-/**
- * Read tasks from a project's task database.
- */
-async function readProjectTasks(projectPath) {
-    const tasksDbPath = join(projectPath, '.cleo', 'tasks.db');
-    try {
-        const accessor = await getAccessor(projectPath);
-        const { tasks } = await accessor.queryTasks({});
-        return tasks;
-    }
-    catch {
-        throw new CleoError(ExitCode.NOT_FOUND, `Project task data not found: ${tasksDbPath}`);
-    }
-}
-/**
- * Resolve a query to task data.
- * For wildcard queries, returns an array of matches from all projects.
- * For named projects, returns a single task with project context.
- */
-export async function resolveTask(query, currentProject) {
-    const parsed = parseQuery(query, currentProject);
-    if (parsed.wildcard) {
-        return resolveWildcard(parsed.taskId);
-    }
-    // Resolve project path
-    const projectPath = await resolveProjectPath(parsed.project);
-    const tasks = await readProjectTasks(projectPath);
-    const task = tasks.find((t) => t.id === parsed.taskId);
-    if (!task) {
-        throw new CleoError(ExitCode.NOT_FOUND, `Task not found: ${parsed.taskId} in project ${parsed.project}`);
-    }
-    return { ...task, _project: parsed.project };
-}
-/**
- * Search for a task ID across all registered projects.
- */
-async function resolveWildcard(taskId) {
-    const registry = await readRegistry();
-    if (!registry)
-        return [];
-    const results = [];
-    for (const project of Object.values(registry.projects)) {
-        try {
-            const tasks = await readProjectTasks(project.path);
-            const match = tasks.find((t) => t.id === taskId);
-            if (match) {
-                results.push({ ...match, _project: project.name });
-            }
-        }
-        catch {
-            // Skip projects with unreadable task data
-        }
-    }
-    return results;
-}
-/**
- * Extract the project name from a query without full resolution.
- * Useful for permission checks before task lookup.
- */
-export function getProjectFromQuery(query, currentProject) {
-    const parsed = parseQuery(query, currentProject);
-    return parsed.project;
-}
-//# sourceMappingURL=query.js.map

package/dist/nexus/query.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"query.js","sourceRoot":"","sources":["../../src/nexus/query.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAa9D,wEAAwE;AAExE,0DAA0D;AAC1D,MAAM,UAAU,GAAG,WAAW,CAAC;AAE/B,uCAAuC;AACvC,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAErD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,cAAuB;IAC/D,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,oBAAoB,EAC7B,yBAAyB,KAAK,mDAAmD,CAClF,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,2CAA2C;QAC3C,MAAM,OAAO,GAAG,cAAc,IAAI,iBAAiB,EAAE,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAE7C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,OAAO,GAAG,cAAc,IAAI,iBAAiB,EAAE,CAAC;YACtD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,GAAG;YACN,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClD;YACE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,0BAA0B;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC9C,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACnE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA4B,CAAC;YACpF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,iCAAiC;IACjC,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IAC1D,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,KAAK,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,uBAAuB,EAChC,yCAAyC,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,uBAAuB,EAChC,kCAAkC,WAAW,EAAE,EAC/C,EAAE,GAAG,EAAE,+CAA+C,WAAW,EAAE,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,gCAAgC,WAAW,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,cAAuB;IAEvB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAEjD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,uBAAuB;IACvB,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,SAAS,EAClB,mBAAmB,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,OAAO,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;YACjD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,cAAuB;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}

package/dist/nexus/registry.d.ts

@@ -1,126 +0,0 @@
-/**
- * NEXUS project registry - cross-project registration and management.
- *
- * SQLite-backed via nexus.db (Drizzle ORM). The global project registry
- * is stored in ~/.cleo/nexus.db in the project_registry table.
- *
- * Legacy JSON backend (projects-registry.json) is migrated on first init
- * via migrate-json-to-sqlite.ts.
- *
- * @task T5366
- * @epic T4540
- */
-import { resetNexusDbState } from '../store/nexus-sqlite.js';
-export type NexusPermissionLevel = 'read' | 'write' | 'execute';
-export type NexusHealthStatus = 'unknown' | 'healthy' | 'degraded' | 'unreachable';
-/** Domain representation of a registered Nexus project. */
-export interface NexusProject {
-    hash: string;
-    projectId: string;
-    path: string;
-    name: string;
-    registeredAt: string;
-    lastSeen: string;
-    healthStatus: NexusHealthStatus;
-    healthLastCheck: string | null;
-    permissions: NexusPermissionLevel;
-    lastSync: string;
-    taskCount: number;
-    labels: string[];
-}
-/** Legacy registry file shape (pre-SQLite). Retained for migration compatibility. */
-export interface NexusRegistryFile {
-    $schema?: string;
-    schemaVersion: string;
-    lastUpdated: string;
-    projects: Record<string, NexusProject>;
-}
-/** Get path to the NEXUS home directory (cache, etc.). */
-export declare function getNexusHome(): string;
-/** Get path to the NEXUS cache directory. */
-export declare function getNexusCacheDir(): string;
-/**
- * Get path to the legacy projects registry JSON file.
- * @deprecated Use nexus.db via getNexusDb() instead. Retained for JSON-to-SQLite migration.
- */
-export declare function getRegistryPath(): string;
-/**
- * Read all projects from nexus.db and return as a NexusRegistryFile.
- * Compatibility wrapper for consumers that expect the legacy JSON shape.
- * Returns null if nexus.db has not been initialized yet.
- */
-export declare function readRegistry(): Promise<NexusRegistryFile | null>;
-/**
- * Read the global registry, throwing if not initialized.
- */
-export declare function readRegistryRequired(): Promise<NexusRegistryFile>;
-/**
- * Initialize the NEXUS directory structure and nexus.db.
- * Idempotent -- safe to call multiple times.
- * Migrates legacy JSON registry on first run if present.
- */
-export declare function nexusInit(): Promise<void>;
-/**
- * Register a project in the global registry (nexus.db).
- * @returns The project hash.
- */
-export declare function nexusRegister(projectPath: string, name?: string, permissions?: NexusPermissionLevel): Promise<string>;
-/**
- * Unregister a project from the global registry.
- */
-export declare function nexusUnregister(nameOrHash: string): Promise<void>;
-/**
- * List all registered projects.
- */
-export declare function nexusList(): Promise<NexusProject[]>;
-/**
- * Get a project by name or hash.
- * Returns null if not found.
- */
-export declare function nexusGetProject(nameOrHash: string): Promise<NexusProject | null>;
-/**
- * Check if a project exists in the registry.
- */
-export declare function nexusProjectExists(nameOrHash: string): Promise<boolean>;
-/**
- * Sync project metadata (task count, labels) for a registered project.
- */
-export declare function nexusSync(nameOrHash: string): Promise<void>;
-/**
- * Sync all registered projects.
- * @returns Counts of synced and failed projects.
- */
-export declare function nexusSyncAll(): Promise<{
-    synced: number;
-    failed: number;
-}>;
-/**
- * Update a project's permission level in the registry.
- * Used by permissions.ts to avoid direct JSON file writes.
- */
-export declare function nexusSetPermission(nameOrHash: string, permission: NexusPermissionLevel): Promise<void>;
-/**
- * Reconcile the current project's identity with the global nexus registry.
- *
- * 4-scenario policy:
- *   1. projectId in registry + path matches → update lastSeen, return {status:'ok'}
- *   2. projectId in registry + path changed → update path+hash, return {status:'path_updated'}
- *   3. projectId not in registry → auto-register, return {status:'auto_registered'}
- *   4. projectHash matches but different projectId → throw CleoError (identity conflict)
- *
- * Uses projectId as the stable identifier across project moves, since
- * projectHash is derived from the absolute path and changes when moved.
- *
- * @task T5368
- */
-export declare function nexusReconcile(projectRoot: string): Promise<{
-    status: 'ok' | 'path_updated' | 'auto_registered';
-    oldPath?: string;
-    newPath?: string;
-}>;
-/**
- * Reset the nexus database singleton state.
- * Re-exported from nexus-sqlite for test convenience.
- */
-export { resetNexusDbState };
-//# sourceMappingURL=registry.d.ts.map

package/dist/nexus/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/nexus/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAc7D,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAEhE,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,aAAa,CAAC;AAEnF,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,iBAAiB,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACxC;AAID,0DAA0D;AAC1D,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,6CAA6C;AAC7C,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC;AA+ED;;;;GAIG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAoBtE;AAED;;GAEG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAUvE;AAED;;;;GAIG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAmB/C;AA4CD;;;GAGG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,oBAA6B,GACzC,OAAO,CAAC,MAAM,CAAC,CAkGjB;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBvE;AAED;;GAEG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CASzD;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAkBtF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7E;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiCjE;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAmChF;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,oBAAoB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,MAAM,EAAE,IAAI,GAAG,cAAc,GAAG,iBAAiB,CAAC;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC,CAgID;AAED;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,CAAC"}