@hasna/cloud 0.1.16 → 0.1.18

package/dist/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,MAAM,IAAI,CAAC;AAOpB,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAC3B,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC7B,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;IACd,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CAChC;AAMD,qBAAa,aAAc,YAAW,SAAS;IAC7C,OAAO,CAAC,EAAE,CAAW;gBAET,IAAI,EAAE,MAAM;IAMxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS;IAS7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG;IAKvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE;IAKzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIvB,4FAA4F;IAC5F,KAAK,CAAC,GAAG,EAAE,MAAM;IAIjB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IAmBvC,KAAK,IAAI,IAAI;IAIb,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAK9B,oEAAoE;IACpE,IAAI,GAAG,IAAI,QAAQ,CAElB;CACF;AAMD,qBAAa,SAAU,YAAW,SAAS;IACzC,OAAO,CAAC,IAAI,CAAU;IACtB,OAAO,CAAC,OAAO,CAA8B;gBAEjC,gBAAgB,EAAE,MAAM;gBACxB,IAAI,EAAE,EAAE,CAAC,IAAI;IAiBzB,OAAO,CAAC,OAAO;IAkCf,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS;IAY7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG;IASvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE;IASzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOvB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IAkCvC,KAAK,IAAI,IAAI;IAMb,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAyB9B,wDAAwD;IACxD,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAEjB;CACF;AAMD,qBAAa,cAAc;IACzB,OAAO,CAAC,IAAI,CAAU;gBAEV,gBAAgB,EAAE,MAAM;gBACxB,IAAI,EAAE,EAAE,CAAC,IAAI;IASnB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAUtD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAOhD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAOlD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAe3E,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAEjB;CACF"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,MAAM,IAAI,CAAC;AAOpB,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAC3B,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC7B,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;IACd,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CAChC;AAMD,qBAAa,aAAc,YAAW,SAAS;IAC7C,OAAO,CAAC,EAAE,CAAW;gBAET,IAAI,EAAE,MAAM;IAMxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS;IAS7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG;IAKvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE;IAKzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIvB,4FAA4F;IAC5F,KAAK,CAAC,GAAG,EAAE,MAAM;IAIjB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IAmBvC,KAAK,IAAI,IAAI;IAIb,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAK9B,oEAAoE;IACpE,IAAI,GAAG,IAAI,QAAQ,CAElB;CACF;AAMD,qBAAa,SAAU,YAAW,SAAS;IACzC,OAAO,CAAC,IAAI,CAAU;IACtB,OAAO,CAAC,OAAO,CAA8B;gBAEjC,gBAAgB,EAAE,MAAM;gBACxB,IAAI,EAAE,EAAE,CAAC,IAAI;IAoBzB,OAAO,CAAC,OAAO;IAkCf,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS;IAY7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG;IASvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE;IASzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOvB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IAkCvC,KAAK,IAAI,IAAI;IAMb,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAyB9B,wDAAwD;IACxD,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAEjB;CACF;AAMD,qBAAa,cAAc;IACzB,OAAO,CAAC,IAAI,CAAU;gBAEV,gBAAgB,EAAE,MAAM;gBACxB,IAAI,EAAE,EAAE,CAAC,IAAI;IAenB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAUtD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAOhD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAOlD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAe3E,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAEjB;CACF"}

package/dist/cli/index.js

@@ -11039,7 +11039,8 @@ class PgAdapter {
   _client = null;
   constructor(arg) {
     if (typeof arg === "string") {
-      this.pool = new esm_default.Pool({ connectionString: arg });
+      const sslConfig = arg.includes("sslmode=require") || arg.includes("ssl=true") ? { rejectUnauthorized: false } : undefined;
+      this.pool = new esm_default.Pool({ connectionString: arg, ssl: sslConfig });
     } else {
       this.pool = arg;
     }
@@ -11166,7 +11167,8 @@ class PgAdapterAsync {
   pool;
   constructor(arg) {
     if (typeof arg === "string") {
-      this.pool = new esm_default.Pool({ connectionString: arg });
+      const sslConfig = arg.includes("sslmode=require") || arg.includes("ssl=true") ? { rejectUnauthorized: false } : undefined;
+      this.pool = new esm_default.Pool({ connectionString: arg, ssl: sslConfig });
     } else {
       this.pool = arg;
     }
@@ -11290,7 +11292,10 @@ function getConnectionString2(dbName) {
   if (!host || !username) {
     throw new Error("Cloud RDS not configured. Run `cloud setup` to configure.");
   }
-  const password = process.env[password_env] ?? "";
+  const password = process.env[password_env];
+  if (password === undefined || password === "") {
+    throw new Error(`RDS password not set. Export ${password_env} in your shell or add it to ~/.secrets/hasna/rds/live.env`);
+  }
   const sslParam = ssl ? "?sslmode=require" : "";
   return `postgres://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbName}${sslParam}`;
 }
@@ -11317,7 +11322,7 @@ var init_config = __esm(() => {
       password_env: exports_external.string().default("HASNA_RDS_PASSWORD"),
       ssl: exports_external.boolean().default(true)
     }).default({}),
-    mode: exports_external.enum(["local", "cloud", "hybrid"]).default("local"),
+    mode: exports_external.enum(["local", "cloud", "hybrid"]).default("hybrid"),
     auto_sync_interval_minutes: exports_external.number().default(0),
     feedback_endpoint: exports_external.string().default("https://feedback.hasna.com/api/v1/feedback"),
     sync: exports_external.object({
@@ -11338,15 +11343,15 @@ __export(exports_discover, {
   SYNC_EXCLUDED_TABLE_PATTERNS: () => SYNC_EXCLUDED_TABLE_PATTERNS2,
   KNOWN_PG_SERVICES: () => KNOWN_PG_SERVICES
 });
-import { readdirSync as readdirSync5, existsSync as existsSync7 } from "fs";
+import { readdirSync as readdirSync5, existsSync as existsSync8 } from "fs";
 import { join as join8 } from "path";
-import { homedir as homedir6 } from "os";
+import { homedir as homedir7 } from "os";
 function isSyncExcludedTable2(table) {
   return SYNC_EXCLUDED_TABLE_PATTERNS2.some((p) => p.test(table));
 }
 function discoverServices2() {
-  const dataDir = join8(homedir6(), ".hasna");
-  if (!existsSync7(dataDir))
+  const dataDir = join8(homedir7(), ".hasna");
+  if (!existsSync8(dataDir))
     return [];
   try {
     const entries = readdirSync5(dataDir, { withFileTypes: true });
@@ -11367,8 +11372,8 @@ function discoverSyncableServices2() {
   return local.filter((s) => pgSet.has(s));
 }
 function getServiceDbPath(service) {
-  const dataDir = join8(homedir6(), ".hasna", service);
-  if (!existsSync7(dataDir))
+  const dataDir = join8(homedir7(), ".hasna", service);
+  if (!existsSync8(dataDir))
     return null;
   const candidates = [
     join8(dataDir, `${service}.db`),
@@ -11384,7 +11389,7 @@ function getServiceDbPath(service) {
     }
   } catch {}
   for (const p of candidates) {
-    if (existsSync7(p))
+    if (existsSync8(p))
       return p;
   }
   return null;
@@ -11468,7 +11473,7 @@ var CloudConfigSchema = exports_external.object({
     password_env: exports_external.string().default("HASNA_RDS_PASSWORD"),
     ssl: exports_external.boolean().default(true)
   }).default({}),
-  mode: exports_external.enum(["local", "cloud", "hybrid"]).default("local"),
+  mode: exports_external.enum(["local", "cloud", "hybrid"]).default("hybrid"),
   auto_sync_interval_minutes: exports_external.number().default(0),
   feedback_endpoint: exports_external.string().default("https://feedback.hasna.com/api/v1/feedback"),
   sync: exports_external.object({
@@ -11499,7 +11504,10 @@ function getConnectionString(dbName) {
   if (!host || !username) {
     throw new Error("Cloud RDS not configured. Run `cloud setup` to configure.");
   }
-  const password = process.env[password_env] ?? "";
+  const password = process.env[password_env];
+  if (password === undefined || password === "") {
+    throw new Error(`RDS password not set. Export ${password_env} in your shell or add it to ~/.secrets/hasna/rds/live.env`);
+  }
   const sslParam = ssl ? "?sslmode=require" : "";
   return `postgres://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbName}${sslParam}`;
 }
@@ -12067,7 +12075,8 @@ class PgAdapterAsync2 {
   pool;
   constructor(arg) {
     if (typeof arg === "string") {
-      this.pool = new esm_default.Pool({ connectionString: arg });
+      const sslConfig = arg.includes("sslmode=require") || arg.includes("ssl=true") ? { rejectUnauthorized: false } : undefined;
+      this.pool = new esm_default.Pool({ connectionString: arg, ssl: sslConfig });
     } else {
       this.pool = arg;
     }
@@ -12122,18 +12131,10 @@ class PgAdapterAsync2 {
 // src/sync-schedule.ts
 init_config();
 import { join as join5, dirname } from "path";
-var CRON_TITLE = "hasna-cloud-sync";
-function getWorkerPath() {
-  const dir = typeof import.meta.dir === "string" ? import.meta.dir : dirname(import.meta.url.replace("file://", ""));
-  const tsPath = join5(dir, "scheduled-sync.ts");
-  const jsPath = join5(dir, "scheduled-sync.js");
-  try {
-    const { existsSync: existsSync5 } = __require("fs");
-    if (existsSync5(tsPath))
-      return tsPath;
-  } catch {}
-  return jsPath;
-}
+import { existsSync as existsSync5, writeFileSync as writeFileSync3, unlinkSync, mkdirSync as mkdirSync5 } from "fs";
+import { homedir as homedir5, platform } from "os";
+var SERVICE_NAME = "hasna-cloud-sync";
+var CONFIG_DIR3 = join5(homedir5(), ".hasna", "cloud");
 function parseInterval(input) {
   const trimmed = input.trim().toLowerCase();
   const hourMatch = trimmed.match(/^(\d+)\s*h$/);
@@ -12172,19 +12173,161 @@ function minutesToCron(minutes) {
   }
   return `*/${minutes} * * * *`;
 }
+function getWorkerPath() {
+  const dir = typeof import.meta.dir === "string" ? import.meta.dir : dirname(import.meta.url.replace("file://", ""));
+  const tsPath = join5(dir, "scheduled-sync.ts");
+  const jsPath = join5(dir, "scheduled-sync.js");
+  try {
+    if (existsSync5(tsPath))
+      return tsPath;
+  } catch {}
+  return jsPath;
+}
+function getBunPath() {
+  const candidates = [
+    join5(homedir5(), ".bun", "bin", "bun"),
+    "/usr/local/bin/bun",
+    "/usr/bin/bun"
+  ];
+  for (const p of candidates) {
+    if (existsSync5(p))
+      return p;
+  }
+  return "bun";
+}
+function getLaunchdPlistPath() {
+  return join5(homedir5(), "Library", "LaunchAgents", `com.hasna.cloud-sync.plist`);
+}
+function createLaunchdPlist(intervalMinutes) {
+  const workerPath = getWorkerPath();
+  const bunPath = getBunPath();
+  const logPath = join5(CONFIG_DIR3, "sync.log");
+  const errorLogPath = join5(CONFIG_DIR3, "sync-error.log");
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>com.hasna.cloud-sync</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${bunPath}</string>
+    <string>run</string>
+    <string>${workerPath}</string>
+  </array>
+  <key>StartInterval</key>
+  <integer>${intervalMinutes * 60}</integer>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${logPath}</string>
+  <key>StandardErrorPath</key>
+  <string>${errorLogPath}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>${process.env.PATH || "/usr/local/bin:/usr/bin:/bin"}</string>
+    <key>HOME</key>
+    <string>${homedir5()}</string>
+  </dict>
+</dict>
+</plist>`;
+}
+async function registerLaunchd(intervalMinutes) {
+  const plistPath = getLaunchdPlistPath();
+  const plistDir = dirname(plistPath);
+  mkdirSync5(plistDir, { recursive: true });
+  try {
+    await Bun.spawn(["launchctl", "unload", plistPath]).exited;
+  } catch {}
+  writeFileSync3(plistPath, createLaunchdPlist(intervalMinutes));
+  await Bun.spawn(["launchctl", "load", plistPath]).exited;
+}
+async function removeLaunchd() {
+  const plistPath = getLaunchdPlistPath();
+  try {
+    await Bun.spawn(["launchctl", "unload", plistPath]).exited;
+  } catch {}
+  try {
+    unlinkSync(plistPath);
+  } catch {}
+}
+function getSystemdDir() {
+  return join5(homedir5(), ".config", "systemd", "user");
+}
+function createSystemdService() {
+  const workerPath = getWorkerPath();
+  const bunPath = getBunPath();
+  return `[Unit]
+Description=Hasna Cloud Sync
+After=network.target
+
+[Service]
+Type=oneshot
+ExecStart=${bunPath} run ${workerPath}
+Environment=HOME=${homedir5()}
+Environment=PATH=${process.env.PATH || "/usr/local/bin:/usr/bin:/bin"}
+
+[Install]
+WantedBy=default.target
+`;
+}
+function createSystemdTimer(intervalMinutes) {
+  return `[Unit]
+Description=Hasna Cloud Sync Timer
+
+[Timer]
+OnBootSec=${intervalMinutes}min
+OnUnitActiveSec=${intervalMinutes}min
+Persistent=true
+
+[Install]
+WantedBy=timers.target
+`;
+}
+async function registerSystemd(intervalMinutes) {
+  const dir = getSystemdDir();
+  mkdirSync5(dir, { recursive: true });
+  writeFileSync3(join5(dir, `${SERVICE_NAME}.service`), createSystemdService());
+  writeFileSync3(join5(dir, `${SERVICE_NAME}.timer`), createSystemdTimer(intervalMinutes));
+  await Bun.spawn(["systemctl", "--user", "daemon-reload"]).exited;
+  await Bun.spawn(["systemctl", "--user", "enable", "--now", `${SERVICE_NAME}.timer`]).exited;
+}
+async function removeSystemd() {
+  try {
+    await Bun.spawn(["systemctl", "--user", "disable", "--now", `${SERVICE_NAME}.timer`]).exited;
+  } catch {}
+  const dir = getSystemdDir();
+  try {
+    unlinkSync(join5(dir, `${SERVICE_NAME}.service`));
+  } catch {}
+  try {
+    unlinkSync(join5(dir, `${SERVICE_NAME}.timer`));
+  } catch {}
+  try {
+    await Bun.spawn(["systemctl", "--user", "daemon-reload"]).exited;
+  } catch {}
+}
 async function registerSyncSchedule(intervalMinutes) {
   if (intervalMinutes <= 0) {
     throw new Error("Interval must be a positive number of minutes.");
   }
-  const cronExpr = minutesToCron(intervalMinutes);
-  const workerPath = getWorkerPath();
-  await Bun.cron(workerPath, cronExpr, CRON_TITLE);
+  mkdirSync5(CONFIG_DIR3, { recursive: true });
+  if (platform() === "darwin") {
+    await registerLaunchd(intervalMinutes);
+  } else {
+    await registerSystemd(intervalMinutes);
+  }
   const config = getCloudConfig2();
   config.sync.schedule_minutes = intervalMinutes;
   saveCloudConfig2(config);
 }
 async function removeSyncSchedule() {
-  await Bun.cron.remove(CRON_TITLE);
+  if (platform() === "darwin") {
+    await removeLaunchd();
+  } else {
+    await removeSystemd();
+  }
   const config = getCloudConfig2();
   config.sync.schedule_minutes = 0;
   saveCloudConfig2(config);
@@ -12193,17 +12336,26 @@ function getSyncScheduleStatus() {
   const config = getCloudConfig2();
   const minutes = config.sync.schedule_minutes;
   const registered = minutes > 0;
+  let mechanism = "none";
+  if (registered) {
+    if (platform() === "darwin") {
+      mechanism = existsSync5(getLaunchdPlistPath()) ? "launchd" : "none";
+    } else {
+      mechanism = existsSync5(join5(getSystemdDir(), `${SERVICE_NAME}.timer`)) ? "systemd" : "none";
+    }
+  }
   return {
     registered,
     schedule_minutes: minutes,
-    cron_expression: registered ? minutesToCron(minutes) : null
+    cron_expression: registered ? minutesToCron(minutes) : null,
+    mechanism
   };
 }
 
 // src/scheduled-sync.ts
 init_config();
 init_adapter();
-import { existsSync as existsSync5, readdirSync as readdirSync3 } from "fs";
+import { existsSync as existsSync6, readdirSync as readdirSync3 } from "fs";
 import { join as join6 } from "path";
 
 // src/sync-incremental.ts
@@ -12346,7 +12498,7 @@ function discoverSyncableServices() {
       if (!entry.isDirectory())
         continue;
       const dbPath = join6(hasnaDir, entry.name, `${entry.name}.db`);
-      if (existsSync5(dbPath)) {
+      if (existsSync6(dbPath)) {
         services.push(entry.name);
       }
     }
@@ -12369,7 +12521,7 @@ async function runScheduledSync() {
     };
     try {
       const dbPath = join6(getDataDir(service), `${service}.db`);
-      if (!existsSync5(dbPath)) {
+      if (!existsSync6(dbPath)) {
         continue;
       }
       const local = new SqliteAdapter(dbPath);
@@ -12412,9 +12564,9 @@ async function runScheduledSync() {
 }
 
 // src/discover.ts
-import { readdirSync as readdirSync4, existsSync as existsSync6 } from "fs";
+import { readdirSync as readdirSync4, existsSync as existsSync7 } from "fs";
 import { join as join7 } from "path";
-import { homedir as homedir5 } from "os";
+import { homedir as homedir6 } from "os";
 var SYNC_EXCLUDED_TABLE_PATTERNS = [
   /^sqlite_/,
   /_fts$/,
@@ -12426,8 +12578,8 @@ function isSyncExcludedTable(table) {
   return SYNC_EXCLUDED_TABLE_PATTERNS.some((p) => p.test(table));
 }
 function discoverServices() {
-  const dataDir = join7(homedir5(), ".hasna");
-  if (!existsSync6(dataDir))
+  const dataDir = join7(homedir6(), ".hasna");
+  if (!existsSync7(dataDir))
     return [];
   try {
     const entries = readdirSync4(dataDir, { withFileTypes: true });

package/dist/config.d.ts

@@ -7,17 +7,17 @@ export declare const CloudConfigSchema: z.ZodObject<{
         password_env: z.ZodDefault<z.ZodString>;
         ssl: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
+        ssl: boolean;
         host: string;
         port: number;
         username: string;
         password_env: string;
-        ssl: boolean;
     }, {
+        ssl?: boolean | undefined;
         host?: string | undefined;
         port?: number | undefined;
         username?: string | undefined;
         password_env?: string | undefined;
-        ssl?: boolean | undefined;
     }>>;
     mode: z.ZodDefault<z.ZodEnum<["local", "cloud", "hybrid"]>>;
     auto_sync_interval_minutes: z.ZodDefault<z.ZodNumber>;
@@ -31,11 +31,11 @@ export declare const CloudConfigSchema: z.ZodObject<{
     }>>;
 }, "strip", z.ZodTypeAny, {
     rds: {
+        ssl: boolean;
         host: string;
         port: number;
         username: string;
         password_env: string;
-        ssl: boolean;
     };
     mode: "local" | "cloud" | "hybrid";
     auto_sync_interval_minutes: number;
@@ -45,11 +45,11 @@ export declare const CloudConfigSchema: z.ZodObject<{
     };
 }, {
     rds?: {
+        ssl?: boolean | undefined;
         host?: string | undefined;
         port?: number | undefined;
         username?: string | undefined;
         password_env?: string | undefined;
-        ssl?: boolean | undefined;
     } | undefined;
     mode?: "local" | "cloud" | "hybrid" | undefined;
     auto_sync_interval_minutes?: number | undefined;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAS5D,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAMD,wBAAgB,cAAc,IAAI,WAAW,CAU5C;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAGzD;AAMD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAa1D;AAMD,OAAO,EAA4B,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAGxE,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,SAAS,CAaxE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAS5D,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAMD,wBAAgB,cAAc,IAAI,WAAW,CAU5C;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAGzD;AAMD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAoB1D;AAMD,OAAO,EAA4B,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAGxE,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,SAAS,CAaxE"}

package/dist/index.js

@@ -5048,7 +5048,8 @@ class PgAdapter {
   _client = null;
   constructor(arg) {
     if (typeof arg === "string") {
-      this.pool = new esm_default.Pool({ connectionString: arg });
+      const sslConfig = arg.includes("sslmode=require") || arg.includes("ssl=true") ? { rejectUnauthorized: false } : undefined;
+      this.pool = new esm_default.Pool({ connectionString: arg, ssl: sslConfig });
     } else {
       this.pool = arg;
     }
@@ -5175,7 +5176,8 @@ class PgAdapterAsync {
   pool;
   constructor(arg) {
     if (typeof arg === "string") {
-      this.pool = new esm_default.Pool({ connectionString: arg });
+      const sslConfig = arg.includes("sslmode=require") || arg.includes("ssl=true") ? { rejectUnauthorized: false } : undefined;
+      this.pool = new esm_default.Pool({ connectionString: arg, ssl: sslConfig });
     } else {
       this.pool = arg;
     }
@@ -9294,7 +9296,10 @@ function getConnectionString(dbName) {
   if (!host || !username) {
     throw new Error("Cloud RDS not configured. Run `cloud setup` to configure.");
   }
-  const password = process.env[password_env] ?? "";
+  const password = process.env[password_env];
+  if (password === undefined || password === "") {
+    throw new Error(`RDS password not set. Export ${password_env} in your shell or add it to ~/.secrets/hasna/rds/live.env`);
+  }
   const sslParam = ssl ? "?sslmode=require" : "";
   return `postgres://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbName}${sslParam}`;
 }
@@ -9321,7 +9326,7 @@ var init_config = __esm(() => {
       password_env: exports_external.string().default("HASNA_RDS_PASSWORD"),
       ssl: exports_external.boolean().default(true)
     }).default({}),
-    mode: exports_external.enum(["local", "cloud", "hybrid"]).default("local"),
+    mode: exports_external.enum(["local", "cloud", "hybrid"]).default("hybrid"),
     auto_sync_interval_minutes: exports_external.number().default(0),
     feedback_endpoint: exports_external.string().default("https://feedback.hasna.com/api/v1/feedback"),
     sync: exports_external.object({
@@ -9342,15 +9347,15 @@ __export(exports_discover, {
   SYNC_EXCLUDED_TABLE_PATTERNS: () => SYNC_EXCLUDED_TABLE_PATTERNS,
   KNOWN_PG_SERVICES: () => KNOWN_PG_SERVICES
 });
-import { readdirSync as readdirSync3, existsSync as existsSync5 } from "fs";
+import { readdirSync as readdirSync3, existsSync as existsSync6 } from "fs";
 import { join as join6 } from "path";
-import { homedir as homedir4 } from "os";
+import { homedir as homedir5 } from "os";
 function isSyncExcludedTable(table) {
   return SYNC_EXCLUDED_TABLE_PATTERNS.some((p) => p.test(table));
 }
 function discoverServices() {
-  const dataDir = join6(homedir4(), ".hasna");
-  if (!existsSync5(dataDir))
+  const dataDir = join6(homedir5(), ".hasna");
+  if (!existsSync6(dataDir))
     return [];
   try {
     const entries = readdirSync3(dataDir, { withFileTypes: true });
@@ -9371,8 +9376,8 @@ function discoverSyncableServices2() {
   return local.filter((s) => pgSet.has(s));
 }
 function getServiceDbPath(service) {
-  const dataDir = join6(homedir4(), ".hasna", service);
-  if (!existsSync5(dataDir))
+  const dataDir = join6(homedir5(), ".hasna", service);
+  if (!existsSync6(dataDir))
     return null;
   const candidates = [
     join6(dataDir, `${service}.db`),
@@ -9388,7 +9393,7 @@ function getServiceDbPath(service) {
     }
   } catch {}
   for (const p of candidates) {
-    if (existsSync5(p))
+    if (existsSync6(p))
       return p;
   }
   return null;
@@ -10531,18 +10536,10 @@ async function runScheduledSync() {
 // src/sync-schedule.ts
 init_config();
 import { join as join5, dirname } from "path";
-var CRON_TITLE = "hasna-cloud-sync";
-function getWorkerPath() {
-  const dir = typeof import.meta.dir === "string" ? import.meta.dir : dirname(import.meta.url.replace("file://", ""));
-  const tsPath = join5(dir, "scheduled-sync.ts");
-  const jsPath = join5(dir, "scheduled-sync.js");
-  try {
-    const { existsSync: existsSync5 } = __require("fs");
-    if (existsSync5(tsPath))
-      return tsPath;
-  } catch {}
-  return jsPath;
-}
+import { existsSync as existsSync5, writeFileSync as writeFileSync2, unlinkSync, mkdirSync as mkdirSync3 } from "fs";
+import { homedir as homedir4, platform } from "os";
+var SERVICE_NAME = "hasna-cloud-sync";
+var CONFIG_DIR2 = join5(homedir4(), ".hasna", "cloud");
 function parseInterval(input) {
   const trimmed = input.trim().toLowerCase();
   const hourMatch = trimmed.match(/^(\d+)\s*h$/);
@@ -10581,19 +10578,161 @@ function minutesToCron(minutes) {
   }
   return `*/${minutes} * * * *`;
 }
+function getWorkerPath() {
+  const dir = typeof import.meta.dir === "string" ? import.meta.dir : dirname(import.meta.url.replace("file://", ""));
+  const tsPath = join5(dir, "scheduled-sync.ts");
+  const jsPath = join5(dir, "scheduled-sync.js");
+  try {
+    if (existsSync5(tsPath))
+      return tsPath;
+  } catch {}
+  return jsPath;
+}
+function getBunPath() {
+  const candidates = [
+    join5(homedir4(), ".bun", "bin", "bun"),
+    "/usr/local/bin/bun",
+    "/usr/bin/bun"
+  ];
+  for (const p of candidates) {
+    if (existsSync5(p))
+      return p;
+  }
+  return "bun";
+}
+function getLaunchdPlistPath() {
+  return join5(homedir4(), "Library", "LaunchAgents", `com.hasna.cloud-sync.plist`);
+}
+function createLaunchdPlist(intervalMinutes) {
+  const workerPath = getWorkerPath();
+  const bunPath = getBunPath();
+  const logPath = join5(CONFIG_DIR2, "sync.log");
+  const errorLogPath = join5(CONFIG_DIR2, "sync-error.log");
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>com.hasna.cloud-sync</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${bunPath}</string>
+    <string>run</string>
+    <string>${workerPath}</string>
+  </array>
+  <key>StartInterval</key>
+  <integer>${intervalMinutes * 60}</integer>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${logPath}</string>
+  <key>StandardErrorPath</key>
+  <string>${errorLogPath}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>${process.env.PATH || "/usr/local/bin:/usr/bin:/bin"}</string>
+    <key>HOME</key>
+    <string>${homedir4()}</string>
+  </dict>
+</dict>
+</plist>`;
+}
+async function registerLaunchd(intervalMinutes) {
+  const plistPath = getLaunchdPlistPath();
+  const plistDir = dirname(plistPath);
+  mkdirSync3(plistDir, { recursive: true });
+  try {
+    await Bun.spawn(["launchctl", "unload", plistPath]).exited;
+  } catch {}
+  writeFileSync2(plistPath, createLaunchdPlist(intervalMinutes));
+  await Bun.spawn(["launchctl", "load", plistPath]).exited;
+}
+async function removeLaunchd() {
+  const plistPath = getLaunchdPlistPath();
+  try {
+    await Bun.spawn(["launchctl", "unload", plistPath]).exited;
+  } catch {}
+  try {
+    unlinkSync(plistPath);
+  } catch {}
+}
+function getSystemdDir() {
+  return join5(homedir4(), ".config", "systemd", "user");
+}
+function createSystemdService() {
+  const workerPath = getWorkerPath();
+  const bunPath = getBunPath();
+  return `[Unit]
+Description=Hasna Cloud Sync
+After=network.target
+
+[Service]
+Type=oneshot
+ExecStart=${bunPath} run ${workerPath}
+Environment=HOME=${homedir4()}
+Environment=PATH=${process.env.PATH || "/usr/local/bin:/usr/bin:/bin"}
+
+[Install]
+WantedBy=default.target
+`;
+}
+function createSystemdTimer(intervalMinutes) {
+  return `[Unit]
+Description=Hasna Cloud Sync Timer
+
+[Timer]
+OnBootSec=${intervalMinutes}min
+OnUnitActiveSec=${intervalMinutes}min
+Persistent=true
+
+[Install]
+WantedBy=timers.target
+`;
+}
+async function registerSystemd(intervalMinutes) {
+  const dir = getSystemdDir();
+  mkdirSync3(dir, { recursive: true });
+  writeFileSync2(join5(dir, `${SERVICE_NAME}.service`), createSystemdService());
+  writeFileSync2(join5(dir, `${SERVICE_NAME}.timer`), createSystemdTimer(intervalMinutes));
+  await Bun.spawn(["systemctl", "--user", "daemon-reload"]).exited;
+  await Bun.spawn(["systemctl", "--user", "enable", "--now", `${SERVICE_NAME}.timer`]).exited;
+}
+async function removeSystemd() {
+  try {
+    await Bun.spawn(["systemctl", "--user", "disable", "--now", `${SERVICE_NAME}.timer`]).exited;
+  } catch {}
+  const dir = getSystemdDir();
+  try {
+    unlinkSync(join5(dir, `${SERVICE_NAME}.service`));
+  } catch {}
+  try {
+    unlinkSync(join5(dir, `${SERVICE_NAME}.timer`));
+  } catch {}
+  try {
+    await Bun.spawn(["systemctl", "--user", "daemon-reload"]).exited;
+  } catch {}
+}
 async function registerSyncSchedule(intervalMinutes) {
   if (intervalMinutes <= 0) {
     throw new Error("Interval must be a positive number of minutes.");
   }
-  const cronExpr = minutesToCron(intervalMinutes);
-  const workerPath = getWorkerPath();
-  await Bun.cron(workerPath, cronExpr, CRON_TITLE);
+  mkdirSync3(CONFIG_DIR2, { recursive: true });
+  if (platform() === "darwin") {
+    await registerLaunchd(intervalMinutes);
+  } else {
+    await registerSystemd(intervalMinutes);
+  }
   const config = getCloudConfig();
   config.sync.schedule_minutes = intervalMinutes;
   saveCloudConfig(config);
 }
 async function removeSyncSchedule() {
-  await Bun.cron.remove(CRON_TITLE);
+  if (platform() === "darwin") {
+    await removeLaunchd();
+  } else {
+    await removeSystemd();
+  }
   const config = getCloudConfig();
   config.sync.schedule_minutes = 0;
   saveCloudConfig(config);
@@ -10602,10 +10741,19 @@ function getSyncScheduleStatus() {
   const config = getCloudConfig();
   const minutes = config.sync.schedule_minutes;
   const registered = minutes > 0;
+  let mechanism = "none";
+  if (registered) {
+    if (platform() === "darwin") {
+      mechanism = existsSync5(getLaunchdPlistPath()) ? "launchd" : "none";
+    } else {
+      mechanism = existsSync5(join5(getSystemdDir(), `${SERVICE_NAME}.timer`)) ? "systemd" : "none";
+    }
+  }
   return {
     registered,
     schedule_minutes: minutes,
-    cron_expression: registered ? minutesToCron(minutes) : null
+    cron_expression: registered ? minutesToCron(minutes) : null,
+    mechanism
   };
 }
 // src/pg-migrate.ts

package/dist/mcp/index.js

@@ -24468,7 +24468,8 @@ class PgAdapter {
   _client = null;
   constructor(arg) {
     if (typeof arg === "string") {
-      this.pool = new esm_default.Pool({ connectionString: arg });
+      const sslConfig = arg.includes("sslmode=require") || arg.includes("ssl=true") ? { rejectUnauthorized: false } : undefined;
+      this.pool = new esm_default.Pool({ connectionString: arg, ssl: sslConfig });
     } else {
       this.pool = arg;
     }
@@ -24620,7 +24621,7 @@ var CloudConfigSchema = exports_external.object({
     password_env: exports_external.string().default("HASNA_RDS_PASSWORD"),
     ssl: exports_external.boolean().default(true)
   }).default({}),
-  mode: exports_external.enum(["local", "cloud", "hybrid"]).default("local"),
+  mode: exports_external.enum(["local", "cloud", "hybrid"]).default("hybrid"),
   auto_sync_interval_minutes: exports_external.number().default(0),
   feedback_endpoint: exports_external.string().default("https://feedback.hasna.com/api/v1/feedback"),
   sync: exports_external.object({
@@ -24646,7 +24647,10 @@ function getConnectionString(dbName) {
   if (!host || !username) {
     throw new Error("Cloud RDS not configured. Run `cloud setup` to configure.");
   }
-  const password = process.env[password_env] ?? "";
+  const password = process.env[password_env];
+  if (password === undefined || password === "") {
+    throw new Error(`RDS password not set. Export ${password_env} in your shell or add it to ~/.secrets/hasna/rds/live.env`);
+  }
   const sslParam = ssl ? "?sslmode=require" : "";
   return `postgres://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbName}${sslParam}`;
 }
@@ -25051,7 +25055,7 @@ var CloudConfigSchema2 = exports_external.object({
     password_env: exports_external.string().default("HASNA_RDS_PASSWORD"),
     ssl: exports_external.boolean().default(true)
   }).default({}),
-  mode: exports_external.enum(["local", "cloud", "hybrid"]).default("local"),
+  mode: exports_external.enum(["local", "cloud", "hybrid"]).default("hybrid"),
   auto_sync_interval_minutes: exports_external.number().default(0),
   feedback_endpoint: exports_external.string().default("https://feedback.hasna.com/api/v1/feedback"),
   sync: exports_external.object({
@@ -25220,7 +25224,8 @@ class PgAdapterAsync {
   pool;
   constructor(arg) {
     if (typeof arg === "string") {
-      this.pool = new esm_default.Pool({ connectionString: arg });
+      const sslConfig = arg.includes("sslmode=require") || arg.includes("ssl=true") ? { rejectUnauthorized: false } : undefined;
+      this.pool = new esm_default.Pool({ connectionString: arg, ssl: sslConfig });
     } else {
       this.pool = arg;
     }

package/dist/scheduled-sync.js

@@ -9014,7 +9014,8 @@ class PgAdapterAsync {
   pool;
   constructor(arg) {
     if (typeof arg === "string") {
-      this.pool = new esm_default.Pool({ connectionString: arg });
+      const sslConfig = arg.includes("sslmode=require") || arg.includes("ssl=true") ? { rejectUnauthorized: false } : undefined;
+      this.pool = new esm_default.Pool({ connectionString: arg, ssl: sslConfig });
     } else {
       this.pool = arg;
     }
@@ -9095,7 +9096,7 @@ var CloudConfigSchema = exports_external.object({
     password_env: exports_external.string().default("HASNA_RDS_PASSWORD"),
     ssl: exports_external.boolean().default(true)
   }).default({}),
-  mode: exports_external.enum(["local", "cloud", "hybrid"]).default("local"),
+  mode: exports_external.enum(["local", "cloud", "hybrid"]).default("hybrid"),
   auto_sync_interval_minutes: exports_external.number().default(0),
   feedback_endpoint: exports_external.string().default("https://feedback.hasna.com/api/v1/feedback"),
   sync: exports_external.object({
@@ -9121,7 +9122,10 @@ function getConnectionString(dbName) {
   if (!host || !username) {
     throw new Error("Cloud RDS not configured. Run `cloud setup` to configure.");
   }
-  const password = process.env[password_env] ?? "";
+  const password = process.env[password_env];
+  if (password === undefined || password === "") {
+    throw new Error(`RDS password not set. Export ${password_env} in your shell or add it to ~/.secrets/hasna/rds/live.env`);
+  }
   const sslParam = ssl ? "?sslmode=require" : "";
   return `postgres://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbName}${sslParam}`;
 }

package/dist/sync-schedule.d.ts

@@ -9,34 +9,28 @@
 export declare function parseInterval(input: string): number;
 /**
  * Convert minutes to a cron expression.
- *
- * - For intervals that divide evenly into 60: `*\/<n> * * * *`
- * - For hourly multiples: `0 *\/<h> * * *`
- * - Otherwise: `*\/<n> * * * *` (best-effort)
  */
 export declare function minutesToCron(minutes: number): string;
 export interface SyncScheduleStatus {
     registered: boolean;
     schedule_minutes: number;
     cron_expression: string | null;
+    mechanism: "launchd" | "systemd" | "none";
 }
 /**
- * Register a Bun.cron job that runs the scheduled sync worker on a fixed
- * interval.
+ * Register a system-level scheduled sync.
  *
- * - Persists `schedule_minutes` in `~/.hasna/cloud/config.json`.
- * - Calls `Bun.cron()` to register an OS-level cron job.
+ * - macOS: creates a launchd plist in ~/Library/LaunchAgents/
+ * - Linux: creates a systemd user timer in ~/.config/systemd/user/
+ * - Persists interval in ~/.hasna/cloud/config.json
  */
 export declare function registerSyncSchedule(intervalMinutes: number): Promise<void>;
 /**
- * Remove the registered sync cron job.
- *
- * - Calls `Bun.cron.remove()` to unregister the OS-level job.
- * - Sets `schedule_minutes` to 0 in config.
+ * Remove the registered sync schedule.
  */
 export declare function removeSyncSchedule(): Promise<void>;
 /**
- * Get the current sync schedule status from config.
+ * Get the current sync schedule status.
  */
 export declare function getSyncScheduleStatus(): SyncScheduleStatus;
 //# sourceMappingURL=sync-schedule.d.ts.map

package/dist/sync-schedule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-schedule.d.ts","sourceRoot":"","sources":["../src/sync-schedule.ts"],"names":[],"mappings":"AAkCA;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiCnD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAkBrD;AAMD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAOxD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,kBAAkB,CAU1D"}
+{"version":3,"file":"sync-schedule.d.ts","sourceRoot":"","sources":["../src/sync-schedule.ts"],"names":[],"mappings":"AAgBA;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiCnD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAiBrD;AAsKD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAUxD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,kBAAkB,CAoB1D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/cloud",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "Shared cloud infrastructure — database adapter (SQLite + PostgreSQL), sync engine, feedback system, unified dotfile config",
   "license": "Apache-2.0",
   "type": "module",